Byron Chen

Experience

• 

  Lanz Ltd

  Jan 2007 - Oct 2007

  Senior Network Engineer

  Lanz Ltd is an independent consultancy and ISP that specialises in providing complete IT solutions. This includes planning, design and implementation of Network, Security and voice infrastructures with a proactive approach to network vulnerability testing and management. Technical skills: Install, configure and implement Network Infrastructure components using a broad range of Cisco products and technologies. This included Network security, VPN, Routing, Switching and Consulting with clients at all levels on current and future technologies. Show less

• 

  Land Securities

  Oct 2007 - Oct 2009

  Senior IS Network and Security Engineer

  Land Securities is a FTSE 100 company and the largest Real Estate Investment Trust (REIT) in the UK, with a commercial property portfolio worth just under £10 billion. The scope of the role is to provide support, development and management of the production network for London, Retail and Trillium.Technical Skills:Highly experienced in Firewalls, Routers, Switches, IP Telephony, LAN/WAN technologies and full life cycle project management. Well developed interpersonal skills with the ability to communicate effectively with clients, senior managers and team members. Show less

• 

  M&G

  Nov 2009 - May 2010

  Senior PGDS Data Networks Engineer

  An international retail financial services company with significant operations in Asia, the US and the UK. listed on the London and New York stock exchanges.The Group is structured around four main business units: Prudential Corporation Asia, Jackson National Life Insurance Company, Prudential UK & Europe and M&G with £249 billion of funds under management.The scope of the role is to provide support, development and management of the global network of Prudential.Technical skills:Highly experienced in the design, configuration, deployment and management of Firewalls, Routers, Switches, IP Telephony, LAN/WAN technologies and analysis. Well developed interpersonal skills with the ability to communicate effectively at all levels. Show less

• 

  Daiwa Capital Markets Europe Ltd

  May 2010 - Nov 2010

  Network/Voice Consultant (Contract)

  Daiwa Securities, London is the wholly owned subsidiary of Daiwa Securities Capital Markets Co Ltd, an investment bank headquartered and regulated in Japan. It is the investment banking arm of Daiwa Securities Group Inc, one of the largest brokerage and banking groups in Japan. The scope of the role involves support, troubleshooting, configuration and monitoring of the Daiwa Global LAN/WAN, security and voice infrastructure. Projects include:• Gathering information regarding switch capacity across the entire L2/L3 Switch infrastructure.• Securing a £300K budget based on switch capacity information gathering to expand server farm• Full life cycle project management of main Data Centre capacity expansion including planning, design and implementation. This includes racks, cabling, patch panels and strategy. • Full life cycle project management and implementation for Expansion of the Server Farm switch infrastructure increasing from two to four Catalyst 6513 switches. This includes planning, design, installation and configuration with redundant Supervisor 720-10G Supervisor modules and resilient 20GB connections to core switches• Rollout CUCM 6.1 to over 600 users across the Daiwa LAN/WAN infrastructure Show less

• 

  Xchanging

  Nov 2010 - Jun 2011

  Network/Security Consultant (Contract)

  Xchanging Global Insurance services is an outsourcing company that provides hosting and technology services across industries in over 42 countries. The scope of the role involves support, troubleshooting, configuration and monitoring of the Xchanging Global LAN/WAN and security and infrastructure. Projects include:Troubleshoot access to UNIX servers in Basildon from Application testing teams in Gurgaon & Bangalore. This was over Global Verizon MPLS network that is a primary link to all the global offices of Xchanging This involved checking BGP routing with multiple EBGP neighbours, redistribution into an IGP (OSPF), static routes and configuration on the global Bluecoat packet shapers along with ensuring that optimal routing is taking place and checking bandwidth utilization• Building a DMZ Handoff network between two third party data centres in Acton and Basildon and two Xchanging data centres to allow BAU network infrastructure access. This involves creating multiple new DMZ contexts across four FWSMs in both data centres and configuring VRFs and associated VLANS and routing.• Audit the entire MPLS network at London Gatwick Airport. The network also includes OSPF, BGP, MP-BGP and Multicast with over 100 VRF’s. Consult with the Network and Security teams of the BAA and attend onsite meetings at both London Heathrow and Gatwick Airports. Provide a complete Audit of the entire enterprise MPLS network infrastructure at Gatwick Airport and produce Layer 2, Layer 3 topology diagrams and documentation. This encompasses multiple Data centres, an extranet infrastructure and firewalls. The network infrastructure also includes OSPF, BGP, MP-BGP and Multicast with over 100 VRF’s utilising a large number of Cisco Catalyst 6500 switches and 7200 routers to make up the MPLS core and Edge devices. Show less

• 

  Freshfields Bruckhaus Deringer LLP

  Jun 2011 - Jun 2013

  Senior IT Network/Security Consultant (Contract)

  Scope: Migrating the primary WAN provider connections from Cogent to Interoute VPLS using OSPF as the IGP to establish neighborships with the main Data Centres and other global offices.Migrating the backup WAN provider Level3/Global Crossing connections to fully meshed iBGP to peers with the main Data Centres and the other global offices.Redistributing OSPF routes into BGP on the Hong Kong Cisco Catalyst 3750 core to allow the Freshfields Vietnam offices access to resources in the Shanghai office.Troubleshooting and resolving high CPU issues with multiple Cisco Catalyst 6509 switches in multiple London buildings.Planning, design and configuration multiple policies on Juniper SRX 3400 firewall clusters in the Data Centres to facilitate the provisioning and migration of services hosted at individual Global offices to services hosted in the Data centres.Planning, design, installation and configuration of multiple Cisco Catalyst switches to facilitate the office move of over 250 staff to the newly refurbished ground floor of one of the London buildings. This involved trunking VLANs and ensuring each and every required floor port is operational and in the correct VLAN. This was completed over a single weekend.Full life cycle project management of replacing the legacy Cisco Catalyst 4000 CatOS access switches with Cisco Catalyst 4500 switches in multiple London buildings. This involved planning, design, installation and implementation using fibre uplinks to the core switch.Redesign and reconfiguration of the Cisco Unified Wireless infrastructure in the London Offices. This was to facilitate the LOCOG event that was being hosted by Freshfields, which provided Olympic delegates wireless Internet access throughout the event. This also involved creating a new subnet and adding an additional connection on the London Nokia firewall along with static routes and modifications to the Checkpoint firewall rules to allow Internet access via a Verizon ISP link. Show less

• 

  Societe Generale -Newedge

  Jul 2013 - Jul 2015

  Senior IT Network/Voice Consultant (Contract)

  Newedge now owned and controlled by Societe Generale is a global multi-asset brokerage formed in 2008 from the merger of Fimat and Calyon Financial. Newedge offers leading global, multi-asset brokerage services across a broad range of listed and OTC derivatives and securities. A world leader in execution and clearing, offering clients the opportunity to trade the world from a single point of contact via a global platform, which comprises more than 85 global exchanges, and comprehensive suite of world-class clearing, prime brokerage and financing solutions. Main project was DOLCE which enabled connectivity between Newedge and Societe Generale global offices: Planning, design and configuration of a DOLCE zone DMZ which consisted of a Checkpoint Gaia firewall cluster and distribution layer switches in multiple Data Centres. This was to facilitate the merging of network infrastructures between Newedge and Societe Generale to allow connectivity to the e-brokerage infrastructure services. Scope of projects include:Migration of Bluecoat Proxies and Proxy AV in London and DubaiRedesign multicast infrastructure implementing MSDP peering between Newedge Data Centres to increase resiliency.Plan, design and implement DOLCE BGP connectivity between Societe Generale and Newedge in London Data Centres redistribute into IGP to facilitate connectivity to all global offices in EMEA, APAC and AMERICASMigration of WAN circuits for Market Data connectivity to the London Metal Exchange (LME), Brokertec and VFN (Verizon Financial Network) for EMEA Show less

• 

  Kalaron Limited

  Apr 2015 - Aug 2024

  Network Architect Data Centre Migration
• 

  Pearson

  Sept 2015 - Jun 2016

  Senior Network Consultant (Contract)

  Pearson are the world's largest education company, with 40,000 employees in more than 70 countries.The company provides a range of education products and services to institutions, governments and direct to individual learners.Projects include:Planning, design and configuration of multiple site-to-site IPSEC VPN’s between Pearson EMEA Data Centres and Managed Services Provider Data Centres utilising Cisco ASA 5520-X Next Generation Firewalls. This was to facilitate client connectivity to the Third-party infrastructure services. Server and application infrastructures.Plan, design and implement routing between Pearson EMEA and Managed Services Provider ensuring reachability throughout Pearson Global Network utilising Cisco Catalyst 6509, Nexus 5596, 7009 and ASR1000.Planning, design and implementing structured firewall and NAT rules for inbound and outbound connectivity between Pearson EMEA Data Centres and Managed Services Provider Data Centres utilising Checkpoint R77 provider 1 and Fortigate Managerv5.2 Show less

• 

  Berkley Technology Services (a Berkley Company)

  Jul 2016 - Aug 2017

  Senior Network & Security Consultant (Contract)

  Berkley Technology Services (BTS) is a dynamic company committed to providing world class IT services. It offers a unique culture, enabling the team members to be on the cutting edge of technology while delivering high quality solutions. Projects Include:Decommissioning existing Palo Alto 2050 Firewall HA Cluster and commissioning new Palo Alto 5020 HA Pair in the London Data Centre.Implementation and configuration of redundant ISR4400 Routers for various European remote sites to increase resiliency and WAN connectivity to the UK & US Data Centres via BGP.Planning, design and configuration of multiple site-to-site IPSEC VPN’s between BTS EMEA Data Centres and Managed Services Provider Data Centres utilising Cisco ASA 5520-X Next Generation Firewalls. This was to facilitate client connectivity to the Third-party infrastructure services. Server and application infrastructures.Planning, design and implementing structured firewall and NAT rules for inbound and outbound connectivity between UK Data Centres, US Data Centres, European Remote sites and remote utilising Panorama to control policies and templates across the global managed Palo alto firewall estatePlanning, design and configuration of site-to-site IPSEC VPN’s between BTS EMEA Data Centres and EMEA sites with internet connectivity.Planning and design and configuration of Citrix Netscaler VPX 200 to facilitate internal load balancing services across BTS EMEA Data Centres.Decommission Cisco ASR1001 MPLS Routers and commissioning Cisco ASR1001-X Routers across BTS EMEA Data Centres.Planning, design, Install and configuration of dual Cisco ISR4400 Series MPLS routers to increase resiliency for BTS syndicate Underwriting staff situated on multiple floors within in the Lloyds building. Connectivity via BGP to the London and Manchester Data Centres. Replacement of Cisco 3750 stack core switches with Cisco 3850 stack. Show less

• 

  XL Catlin

  Oct 2017 - Nov 2017

  Network Architect (Contract)

  XL Catlin is an American subsidiary of global insurance and reinsurance company Axa. I was engaged to identify and recommend a network performance improvement plan to address both short-term severe performance issues and address a long-term network strategy roadmap requirement. I conducted an in-depth analysis of the existing network infrastructure, extracted production configuration examples and audited LAN/WAN and all infrastructure devices in the estate.Documented recommendations for design corrective actions to address immediate performance issues and a long-term network strategy roadmap for the business’s consideration.Succeeded in securing business approval for the immediate and long-term network strategy roadmap. Show less

• 

  NBCUniversal

  Nov 2017 - Mar 2023

  Network Architect (Contract)

  NBC Universal is an American mass media and entertainment conglomerate owned by Comcast, primarily involved in the media and entertainment industry it also has a significant presence in broadcasting. I was initially engaged as Senior Network Engineer to provide expertise and support to the Global Architecture/Infrastructure team on network installations, upgrades, roadmaps, strategies and designs for NBCs data centres and office networks across EMEA, APAC, US and LATAM regions. Following the successful migration of a data centre, I was re-engaged as Network Architect to support 2 key programmes for NBC Universal and NBC News.NBC Universal decided that it was no longer cost effective to renew the leases on two legacy EMEA Data Centres, NBC Universal decided to commision two new £multi-million state-of-the art EMEA Data Centres as replacements. Engaged as sole Global Network Architect. Completed planning, designed, build to full production two greenfield NBCU EMEA Data Centres. This included LAN/WAN, ACI/SDN migration and decommissioning of two legacy EMEA Data Centres. This was completed within 12 months. Completed multicast rollout to NBC Universal Data Centres and remote sites to facilitate NBC News and NBC IPTV.Planned, designed, and configured global default route and Anycast IP addressing in London and Singapore Data Centres.Successfully migrated 5 data centres across EMEA and APAC regions to a new global MPLS backbone for NBC universal, migrating from 1 GB WAN circuits to 10/100GB MPLS WAN, providing high bandwidth capability for media services and cost savings from decommissioning legacy WAN circuits.Successfully built and migrated services from NBC News London offices to a new £multi-million campus to resolve a time-critical end of lease issue. Completed the build, testing and operational validation of all network infrastructure devices, and completed the migration 3 months ahead of schedule. Show less