Shahbaaz Ali

About Shahbaaz Ali

Senior Network Engineer with 10+ years of experience designing, implementing, and operating large-scale, mission-critical enterprise networks across data center, campus, WAN, and cloud environments. I specialize in building highly available, secure, and resilient networks that directly support business outcomes.My background spans Cisco, Juniper, Palo Alto, F5, and VMware ecosystems, with deep hands-on expertise in routing & switching, network security, SD-WAN, wireless, load balancing, and hybrid cloud networking. I’ve led complex migrations, data-center refreshes, and global network transformations while maintaining strict change governance and 24×7 availability targets.I bring a security-first mindset, working extensively with next-generation firewalls, Zero Trust principles, segmentation, IPS/IDS, VPNs, and identity-based access (Cisco ISE). I’m equally comfortable designing deterministic routing policies (BGP/OSPF), engineering SD-WAN overlays, and modernizing ADC platforms with F5 BIG-IP and NSX Advanced Load Balancer.In cloud and hybrid environments, I’ve designed and supported AWS and Azure networking including VPC/VNet architecture, Transit Gateways, VPN/Direct Connect/ExpressRoute, and traffic inspection patterns. I also leverage automation and scripting (Python, REST APIs, Terraform, CloudFormation) to reduce operational risk, enforce standards, and improve delivery speed.Beyond the tech, I’m known as a trusted advisor—partnering with application teams, security, and leadership to translate requirements into scalable designs, optimize cost and performance, and deliver measurable ROI. I value documentation, mentorship, and operational excellence, and I enjoy helping teams raise the bar through repeatable processes and best practices.

Experience

1. Senior Network Engineer

   Comcast

   Jul 2023 — Present · Chicago, IL, US

   Own global network services across data center, campus, and cloud; deliver firewalling, wireless, and ADC services with strict change hygiene and 24×7 availability targets.Led Catalyst‑to‑Nexus migration (6513 → 7009) enabling VPC/VDC/FEX and fabric‑path designs; reduced core failure domains and simplified L2 spanning trees.Modernized F5 estate (GTM/LTM) and migrated legacy appliances to current platforms; redesigned VIPs, health monitors, and SSL profiles to remove bottlenecks and enable SNI.Engineered SD‑WAN overlays atop MPLS using OSPF/BGP and IP‑SLA‑driven path selection; improved application performance for branch users by measurable margins.Hardened perimeter and east‑west controls with Palo Alto (WildFire, App‑ID, SSL decryption zones) and ASA/Firepower; tuned policies and content updates via Panorama/FMC.Built deterministic BGP/OSPF designs (summarization, communities, MED/LP) for dual‑homed WAN edges and cloud on‑ramps; verified convergence and failover in staged tests

Education

• Trine University

  Master of Science - MS, Information Technology