Vinson Qu

• Designed and implemented T1/T2/T3 firewall policy creation, optimization and troubleshooting across global FIS data centers using Palo Alto, Cisco, Juniper, Fortinet and Netscreen firewalls. • Led design and integration of Sungard new datacenters and legacy datacenters into the FIS backbone; aligned routing, segmentation, and security using BGP, OSPF, IS-IS, EIGRP, and static routing. • Deployed new Palo Alto firewalls for the EMEA sites and enabled PAN-OS features including IPS/IDS, NAT, User-ID, App-ID, Content-ID, WildFire, URL filtering, and security profiles. • Designed datacenter migration, client bank cutovers from legacy infrastructure to MPLS or Cisco Viptela SD-WAN infrastructure, firewall policy audits with JSA, CPE topology upgrades, and playbook development. Designed and deployed extensive Cisco routers and switches. • Implemented VMware NSX-T solutions including overlay networking, routing, and distributed firewalls to data centers. • Supported WorldPay F5 BigIP load balancers updating and performed network security audits. • Contributed to cloud firewall rule design for AWS and Azure services, aligning with enterprise security standards. • Engineered IPsec/GRE VPN solutions for client connectivity and performed end-to-end cutover implementation. • Participated in deployment of enterprise VoIP solutions, handling configuration, troubleshooting and end-user support.

• Led architecture, design, topology planning, and deployment of nationwide IP backhaul networks using MPLS, BGP, OSPF, VRF, VPLS, L2VPN, LDP, and RSVP. • Planned, architected, and deployed IP transport infrastructure with 7750SR, 7250IXR, 7705SAR, and 9500MPR platforms across Canada, using HA design with HSRP and VRRP. • Designed the full architecture and IP planning for LTE/Small cell backhaul network. • Executed large-scale upgrades and cutovers in Ontario markets using Cisco ASR903 routers. • Designed playbook of the change, created MOP and SOP documentations. • Conducted nationwide maintenance and troubleshooting for IP/MPLS networks. • Integrated Palo Alto PA5280, Cisco Stealthwatch, and Radware DefensePro into the core security architecture; Participated in Palo Alto IPS/IDS and cybersecurity planning. • Designed and maintained DNS/DHCP/IPAM for the national backhaul environment. • Managed VoIP network configurations, ensuring seamless connectivity, call quality, and compliance with QoS policies across telecom networks.