Kehinde Alabede, Developer in Cardiff, United Kingdom
Kehinde is available for hire
Hire Kehinde

Kehinde Alabede

Verified Expert  in Engineering

Network Engineer and Developer

Location
Cardiff, United Kingdom
Toptal Member Since
December 13, 2023

Kehinde is a skilled network security engineer with experience building secure connectivity solutions using various IT technologies in hybrid and complex environments. Adept at scripting, automation, and designing and implementing firewalls and cybersecurity solutions, he delivers efficient data movement and automated network workflows. With analytical and problem-solving skills, Kehinde successfully solves network problems with minimal downtime to production.

Portfolio

Public Health Wales NHS Trust
ASA Firewalls, IT Networking, Cisco Wireless, Voice, Network Engineering
Sterling Global Oil Resources Ltd, Lagos, Nigeria
CUCM, LAN, WAN, Software-defined WAN (SDWAN), Cambium Wireless Gear, Aruba...
Flour Mills of Nigeria Plc
Ruckus Wireless, Cisco Wireless, CUCM, Cisco Meraki, FortiGate...

Experience

Availability

Part-time

Preferred Environment

Visio, Python, Ansible, Cisco, Azure, Palo Alto Networks, FortiGate, VMware ESXi, Linux, Paessler PRTG API

The most amazing...

...initiative I've had was saving 850,000 USD in operating expenses while solving major problems to increase availability from 95% to 99.9% in one year.

Work Experience

Network and Voice Engineer

2024 - PRESENT
Public Health Wales NHS Trust
  • Researched and evaluated emerging network security threats and solutions to manage them.
  • Assisted in designing new systems and upgrading existing ones.
  • Provided specialist advice on networking and voice within the Digital IT team of PHW.
Technologies: ASA Firewalls, IT Networking, Cisco Wireless, Voice, Network Engineering

IT Network Manager

2020 - 2024
Sterling Global Oil Resources Ltd, Lagos, Nigeria
  • Led the design, documentation, and implementation of the core network upgrade. Implemented active-active high availability (HA) between the spine and leaf switches, resulting in improved uptime of 99.98% within the 1st year.
  • Deployed Cisco Unified Communications Manager (CUCM) and Cisco Unity Connection, integrated a 3rd-party GSM gateway, and seamlessly migrated over 1,000 3rd-party phones with no significant downtime.
  • Configured and maintained Cambium and Aruba wireless networks. Seamlessly migrated all Cambium access points to the cloud controller and implemented a voucher-based corporate guest wifi solution.
  • Initiated the design, configuration, and integration of software-defined wide area network (SD-WAN) solution for site connectivity, resulting in enhanced WAN network performance, reduced WAN costs, and improved security.
  • Led troubleshooting and problem resolution efforts for network infrastructure issues, including but not limited to routing and switching, VPN, wireless, and security systems. It resulted in minimal impact on business operations.
Technologies: CUCM, LAN, WAN, Software-defined WAN (SDWAN), Cambium Wireless Gear, Aruba, Visio, Wireless, Virtual Router Redundancy Protocol (VRRP), Multiprotocol Label Switching (MPLS), Windows 10, Cisco, Networks, Firewalls, Networking, Network Administration, TCP/IP, Architecture, Wireshark, Tcpdump

IT Network Manager

2018 - 2020
Flour Mills of Nigeria Plc
  • Saved over $850,000 in IT operating expenses by initiating and leading the renegotiation and implementation of internet and multiprotocol label switching (MPLS) and leased-line services.
  • Designed, documented, and implemented spine and leaf network architecture. Upgraded the core network from a single Cisco 6508 to dual 9407 core switches configured in active-active HA with redundant uplinks between core and distribution layers.
  • Championed the redesign and upgrade of enterprise network edge security infrastructure: designed and implemented 2-tier dual-layered firewall architecture with Cisco, FortiGate, and Palo Alto Networks firewalls.
  • Designed and implemented dual multi-homed Border Gateway Protocol (BGP) architecture with dual internet service providers (ISPs) and Cisco 4351 Integrated Services Router (ISR).
  • Improved quarterly average availability from 95% to 99.9% on WAN and site links by designing and deploying MPLS and SD-WAN solutions with technologies such as Cisco and Fortinet.
  • Led the implementation of CUCM and Cisco Webex and the migration of the company's telephone infrastructure to CUCM.
  • Designed, implemented, and managed secure and scalable VPN solutions, including site-to-site and remote access VPNs like Cisco AnyConnect.
  • Collaborated with cross-functional teams to manage projects and ensure timely delivery of infrastructure implementations and upgrades, utilizing project management methodologies and tools.
Technologies: Ruckus Wireless, Cisco Wireless, CUCM, Cisco Meraki, FortiGate, Fortinet Firewall Configuration, Palo Alto Networks, Multiprotocol Label Switching (MPLS), Border Gateway Protocol (BGP), LAN, WAN, Software-defined WAN (SDWAN), Open Shortest Path First (OSPF), EIGRP, HSRP, Virtual Router Redundancy Protocol (VRRP), VoIP, IPsec, VPN, NAT, Dynamic Host Configuration Protocol (DHCP), DNS, TCP/IP, Windows 10, Cisco, Networks, Firewalls, Networking, Network Administration, Low Latency, Architecture, Wireshark, Tcpdump

Infrastructure Analyst | Server and Network Management Lead

2015 - 2018
Ikeja Electric
  • Managed the 1st deployment of the advanced metering infrastructure data center in Nigeria.
  • Designed, deployed, and maintained complex network and security infrastructure in hybrid data center and cloud environments, implementing active-active core switching and Palo Alto Networks firewalls in HA.
  • Implemented dual multi-homed BGP architecture with two ISPs and Huawei AR3260 enterprise routers.
  • Configured and administered the network load balancer, F5 BIG-IP appliance, for mission-critical servers and enterprise applications.
  • Deployed production and backup storage area network (SAN) storage systems, EMC VNX5600 and VNXe3200.
  • Set up and administrated cloud infrastructure in Azure Stack Hub, including virtual machines (VMs), storage accounts, resource groups, load balancers, and Palo Alto Networks VM-Series. Configured and managed Azure's cloud computing environment.
  • Designed and implemented IPSec VPNs and secure connectivity solutions for energy e-payment channels and integrators. Implemented a remote access VPN for remote users using Palo Alto's GlobalProtect.
Technologies: Servers, Storage, SANs, Data Centers, Load Balancers, Border Gateway Protocol (BGP), WAN, Cisco, Networks, Palo Alto Networks, Firewalls, Network Administration, Low Latency, TCP/IP, Architecture, Wireshark, Tcpdump

Network Support Officer

2010 - 2014
Flour Mills of Nigeria Plc
  • Led the design and implementation of the relocation of the company's core and edge network infrastructure and data center with minimal downtime.
  • Created a detailed and comprehensive network diagram of the entire company's and subsidiaries' enterprise network infrastructure within the first four months of resumption and consistently reviewed and enhanced it.
  • Deployed CiscoWorks LAN Management Solution (LMS) for enterprise network management and monitoring.
  • Configured and managed network devices across the group, including Cisco switches like the 2960s, 3560s, 3750s, and 6508 core switches, Cisco 3825 ISRs, Cisco ASA 5540 firewalls, Cisco 1113 Secure ACS, Cyberoam CR750ia firewalls, and Cisco IPS 4240.
  • Deployed Cisco and RUCKUS controller-based enterprise WiFi network.
  • Provisioned and integrated various MPLS VPN links at the company's subsidiaries in several locations in the country.
  • Supervised and supported the design and implementation of the Panasonic private branch exchange (PBX) telephony system for the company.
Technologies: IT Networking, Layer 2 Networking, Firewalls, ASA Firewalls, Cisco Routers, Cisco Switches, Network & System Support, Network Administration, Cisco, Networks, TCP/IP, Architecture

Network Engineer

2008 - 2010
Sitech Nigeria Limited
  • Designed, implemented, and integrated several PTP and PTMP solutions for data communication solutions for CSCS clients' offsite data backup, document conversion, and other services using Cisco, Ceragon, Motorola, and Teletronics products.
  • Installed and configured several microwave radios, including Eclipse, for Starcomms and Multilinks networks at various locations.
  • Implemented and integrated PTP radio links for the client's headquarter and branch connectivity. Implemented several LAN and WAN network projects.
  • Designed and implemented campus-wide wireless and LAN solutions for a large educational campus using Cisco and Teletronics products.
Technologies: Networking, Wireless Communication, LAN, WAN, Cisco, Networks, Firewalls, TCP/IP

Review and Upgrade of Internet and Leased-line Services for Flour Mills of Nigeria

The project aimed to solve the problem of very poor connectivity from most remote sites despite the availability of an average of three service providers per site. Downtime happened virtually every week, resulting in an average availability of 95%, which was way below SLA. This led to loss of revenue, loss of return on investment, and reduced productivity.

As a network manager, I led a team to do a comprehensive review of all ISPs, taking technical and commercial information into account. We invited new ISPs, and after technical and commercial considerations and negotiations supported by the procurement team, we selected one primary ISP and another as a backup. I also redesigned the WAN infrastructure and introduced an SD-WAN solution to replace the existing traditional systems, Cisco L3 switches. Eventually, the project succeeded, saving 850,000 USD on annual operating expenses for the internet and leased-line services. The newly designed and implemented SD-WAN solution achieved 99.98% availability across sites, and the increased bandwidth for business needs led to improved productivity.

Enterprise Network and Firewall Infrastructure Upgrade

Flour Mills of Nigeria had a large enterprise IT infrastructure with around 2,000 users and computers, over 100 printers, and many other devices. The network core was powered by the Cisco 6500 series switches and several L3 and L2 models of Cisco switches, all end-of-life or end-of-sale products at the time of the project. The project objective was to critically assess the IT and network infrastructure and document and propose necessary upgrades to improve productivity, reinforce security, increase return on investment, and ensure that the infrastructure complies with the company's IT policy and meets industry standards.

As a network manager, I initiated the process and worked with the team to provide detailed network upgrade design documentation, which covered the spine and leaf network layers, as well as the network edge. I led the design and implementation of active-active HA and fully redundant infrastructure from the edge to the core and distribution layers. The project delivery was smooth and successful, with minimal downtime to production.

CUCM Implementation and IP Telephony Migration

As a network manager, I led a team to deploy CUCM and Cisco Unity Connection. The company had Grandstream PBX initially, with 3rd-party IP phones like Grandstream, Yealink, and Fanvil. Under my technical and project management leadership, we integrated the GSM gateway and seamlessly migrated over 1,000 3rd-party phones with no significant downtime. We continued the project by gradually upgrading from 3rd-party phones to Cisco IP Phones.

CiscoWorks LMS Implementation

CiscoWorks LMS is an integrated suite of management functions that simplifies Cisco networks' configuration, administration, monitoring, and troubleshooting. Having previously documented the enterprise network infrastructure, I was in the best position to lead the implementation. All devices were onboarded and migrated successfully, and configuration management and reporting were subsequently automated and optimized. We also implemented functional areas, such as monitoring and troubleshooting, administration, inventory, and work centers, thus enhancing network performance.

Data Center and Network Infrastructure Migration

The project involved moving and relocating the enterprise network core switch and edge devices from the old building data center to the company's new head office data center. The estimated project duration was five months, costing 6 million Nigerian Naira.

I made a detailed, comprehensive design of current and future infrastructure. I also designed a migration plan, which involved detailed configuration of all active devices—Cisco 6508 core switches, Cisco 3560, 3750, and 2960 aggregation and distribution switches, Cisco 4400 series wireless LAN controller, Cisco ASA firewalls, Cyberoam firewalls, and other devices. The project was a huge success, with just about 10 minutes of downtime in the production environment, while the migration was seamless and business interruptions minimized. I used PMI's project management methodologies to manage the project both as the technical lead and the project manager.

Advanced Metering Infrastructure Data Center

The project aimed to deploy Nigeria's 1st advanced metering infrastructure data center. I was part of the design team and contributed to some aspects of networking, IT and network security, and server and storage infrastructure as the project manager and the network security infrastructure lead. Apart from managing the project, I also configured enterprise routers, switches, firewalls, and storage systems.
2002 - 2006

Bachelor's Degree in Physics

University of Ilorin - Ilorin, Nigeria

AUGUST 2023 - AUGUST 2025

Palo Alto Networks Certified Network Security Engineer (PCNSE)

Palo Alto Networks

MAY 2023 - MAY 2026

Cisco Certified Network Professional Security

Cisco

MARCH 2023 - MARCH 2025

Fortinet NSE 4 Network Security Professional

Fortinet

JANUARY 2023 - JANUARY 2024

Microsoft Certified: Azure Network Engineer Associate

Microsoft

JULY 2021 - JUNE 2024

Certified Information Systems Security Professional

ISC2

DECEMBER 2014 - DECEMBER 2023

Project Management Professional (PMP)

Project Management Institute (PMI)

JUNE 2013 - JUNE 2016

Cisco Certified Network Professional

Cisco

FEBRUARY 2012 - FEBRUARY 2015

Cisco Certified Network Associate

Cisco

NOVEMBER 2011 - PRESENT

Microsoft Certified Systems Administrator (MCSA) - Windows Server 2003

Microsoft

NOVEMBER 2011 - PRESENT

Microsoft Certified Technology Specialist: Exchange Server 2007, Configuration

Microsoft

Tools

Visio, CUCM, Wireshark, Ansible, Cambium Wireless Gear, Cisco Meraki, VPN, Microsoft Exchange, Tcpdump

Other

Cisco, LAN, TCP/IP, Firewalls, Networking, Network Administration, Software-defined WAN (SDWAN), IT Security, Architecture, Low Latency, Windows 10, Networks, Palo Alto Networks, FortiGate, VMware ESXi, Physics, Advanced Physics, Computer, WAN, Aruba, Wireless, Virtual Router Redundancy Protocol (VRRP), Multiprotocol Label Switching (MPLS), Ruckus Wireless, Cisco Wireless, Fortinet Firewall Configuration, Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), EIGRP, HSRP, VoIP, IPsec, NAT, Dynamic Host Configuration Protocol (DHCP), DNS, Security Management, Security Engineering, Identity & Access Management (IAM), Security, Cloud Security, Content Security, Endpoint Security, Network Access Control, Security Policies & Procedures, Protection Profiles, Palo Alto Networks WildFire, Palo Alto Panorama, FortiManager, FortiAnalyzer, Network Infrastructure, Routing, Team Leadership, Stakeholder Management, Stakeholder Engagement, Team Building, Negotiation, Contract Negotiations, Communication Management, Asset Management, Project Scheduling, Scope Management, Scope of Work, Project Planning, Procurement, Change Leadership, Virtualization, Infrastructure, Network Assurance, IP Connectivity, Cisco IP Services, Servers, Storage, SANs, Load Balancers, IT Networking, Layer 2 Networking, ASA Firewalls, Cisco Routers, Cisco Switches, Network & System Support, Wireless Communication, SD-WAN, IT Project Management, Network Design, CiscoWorks LAN Management Solution, Endpoint Detection and Response (EDR), Network Monitoring, Programming, Voice, Network Engineering

Languages

Python

Libraries/APIs

Paessler PRTG API

Paradigms

Security Software Development, Management, Change Management, Automation

Platforms

Azure, Linux, Windows Server 2003

Industry Expertise

Network Security

Storage

Microsoft Exchange Server, Data Centers

Collaboration That Works

How to Work with Toptal

Toptal matches you directly with global industry experts from our network in hours—not weeks or months.

1

Share your needs

Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2

Choose your talent

Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3

Start your risk-free talent trial

Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.

Top talent is in high demand.

Start hiring