Network Engineer | ISP Infrastructure Specialist

Building Resilient Network Architectures

Designing and optimizing enterprise-grade networks with BGP, OSPF, MikroTik, and Cisco — from ISP infrastructure to high-availability LAN/WAN systems.

BGP / OSPF MikroTik Cisco FreeRADIUS Zabbix High Availability Load Balancing
Get In Touch View Projects Download CV
Network: Operational
BGP Sessions: Active
Uptime: 99.97%
Open to Work
⬡ CORE-R1 BGP/OSPF ⬡ DIST-SW1 MikroTik ⬡ DIST-SW2 Cisco 🛡 FIREWALL pfSense SW ACC-1 SW ACC-2 SRV RADIUS SRV Zabbix ISP / INTERNET
> system_status --live

Network Operations Dashboard

BGP Sessions
12
Established / 12 configured
100%
Network Uptime
99.97%
Last 12 months SLA
+0.02%
Avg Latency
2.4ms
Core to Edge (P95)
-38%
RADIUS Auth/s
847
Authentications per second
Active
> bandwidth_monitor --interface eth0 --realtime
Download (Gbps)
Upload (Gbps)
> whoami

About Me

Available for opportunities

Muhammad Sarfraz

// ISP & Enterprise Infrastructure Specialist

Experienced Network Engineer with hands-on expertise in designing, deploying, and optimizing enterprise-grade and ISP-level network infrastructures. I specialize in routing protocol engineering, high-availability design, and network automation.

From configuring BGP peering sessions with upstream ISPs to building FreeRADIUS billing systems from scratch, I bring a deep operational understanding of how networks run — and how to make them run better.

Cisco & MikroTik routing/switching configuration
BGP, OSPF routing protocol engineering
Load balancing & bandwidth management
FreeRADIUS AAA implementation & management
Zabbix & SNMP network monitoring
LAN/WAN design & troubleshooting
10+
Years Experience
50+
Projects Delivered
99.97%
Uptime Achieved
4
Certifications
> skill_matrix --verbose

Technical Skills

Cisco
Routing & Switching
92%
IOSIOS-XEEIGRPSTPVLANs
MikroTik
Load Balancing & PPPoE
95%
RouterOSPPPoEMangleECMPCHR
BGP / OSPF
Routing Protocols
90%
eBGPiBGPRoute MapsPolicies
FreeRADIUS
AAA Systems
88%
AuthenticationAccountingMySQLdaloRADIUS
Zabbix & Grafana
Network Monitoring
85%
SNMPAlertsDashboardsAgents
Linux Server
System Administration
82%
UbuntuCentOSBashiptables
Network Security
Firewall & NAT
80%
pfSenseNATACLsIDS/IPS
Juniper / Huawei
Multi-vendor Expertise
70%
JunOSVRPIS-ISMPLS
PHP + MySQL
Backend Development
75%
LAMP StackREST APIBilling
> git log --oneline --projects

Featured Projects

ISP LB1 LB2 USERS
PRJ-001

ISP Load Balancing System

Designed and deployed a multi-ISP load balancing solution using MikroTik ECMP and PCC (Per Connection Classifier) with automatic failover. Distributes 10Gbps+ of traffic across 3 upstream providers with sub-second failover detection.

MikroTik BGP Cisco Linux
40% reduction in downtime incidents, 99.98% uptime achieved
RADIUS Auth/Acct PHP Billing UI MySQL Users DB Voucher Gen Engine
PRJ-002

FreeRADIUS Billing & Voucher System

Full-stack ISP billing platform integrating FreeRADIUS with a custom PHP/MySQL web interface. Features automated voucher generation, bandwidth throttling by plan, real-time accounting, and a self-service portal for subscribers.

FreeRADIUS PHP MySQL MikroTik
Manages 5,000+ active subscribers with 99.9% auth success rate
WARN CPU/BW/LATENCY — LIVE
PRJ-003

Network Monitoring System with Zabbix

Deployed enterprise Zabbix monitoring covering 200+ devices including routers, switches, servers, and links. Implemented custom SNMP OID templates, Grafana dashboards, and PagerDuty alerting for P1 incidents with escalation workflows.

Zabbix Grafana Linux MySQL
MTTR reduced by 65% — from 45min to 16min average response
ENTERPRISE CAMPUS CORE L3 DIST DIST ACC ACC ACC ACC
PRJ-004

Enterprise LAN/WAN Deployment

Led the full greenfield deployment of a 3-tier enterprise campus network for a 500-user organization. Implemented VLANs, STP, OSPF inter-site routing, QoS policies, and redundant WAN with MPLS and Internet backup via SD-WAN.

Cisco OSPF BGP Linux
500-user campus deployed in 3 weeks with zero unplanned outages
> cat /var/log/career.log

Work Experience

Senior Network Engineer
// Hajvery Networks
2015 — Present

Lead engineer responsible for ISP backbone infrastructure, BGP route policy management, and capacity planning for a regional ISP serving 20,000+ subscribers.

  • Redesigned BGP peering strategy, reducing transit costs by 35% through strategic IX participation
  • Implemented ECMP load balancing across 4 ISP uplinks, improving throughput by 150%
  • Built automated FreeRADIUS provisioning pipeline reducing subscriber activation from 2h to 8min
  • Deployed Zabbix monitoring covering 300+ network devices with 99.9% alerting accuracy
Network Engineer
// Slat Networks
2021 — 2025

Responsible for enterprise LAN/WAN infrastructure design and implementation across 5 branch offices, with focus on high availability and QoS for VoIP/video applications.

  • Deployed 3-site MPLS WAN with OSPF routing, achieving 99.95% uptime over 2 years
  • Implemented Cisco QoS policies reducing VoIP jitter from 45ms to under 5ms
  • Migrated legacy flat network to segmented VLAN architecture with 802.1X NAC
  • Reduced mean incident resolution time by 60% through Zabbix + Grafana dashboards
ISP Support / Junior Network Engineer
// FastFiber Networks
2018 — 2020

NOC engineer responsible for first and second-line response to network incidents, CPE provisioning, and ISP subscriber support in a 24/7 operations environment.

  • Managed PPPoE provisioning for 3,000+ residential and SME subscribers on MikroTik
  • Developed Python scripts automating CPE configuration backup and compliance checks
  • Built FreeRADIUS test lab enabling pre-production validation of new subscriber types
  • Achieved CCNA certification and MikroTik MTCNA within first year
> ls /blog/tutorials/

Tech Blog

BGP
BGP Route Filtering with Prefix Lists and Route Maps
A deep-dive into controlling BGP advertisement using prefix-lists, route-maps, and communities to implement granular traffic engineering policies.
📅 Mar 20248 min read
MikroTik
MikroTik ECMP Load Balancing: Complete Setup Guide
Step-by-step configuration of Equal-Cost Multi-Path routing on MikroTik RouterOS using mangle rules and routing marks for ISP failover.
📅 Jan 202412 min read
FreeRADIUS
FreeRADIUS + MySQL + daloRADIUS: Full ISP Setup
Building a production-ready AAA system for ISPs from scratch — FreeRADIUS, MySQL backend, daloRADIUS frontend, and MikroTik PPPoE integration.
📅 Nov 202320 min read
> ping info@sarfrazit.com

Get In Touch

Let's Build Something Resilient

Have a complex network challenge, ISP infrastructure project, or need consulting on routing architecture? I'd love to discuss how I can help.

WhatsApp+92 322 21666 99
Emailinfo@sarfrazit.com
LinkedInlinkedin.com/in/msarfrazhayat
ResumeDownload CV (PDF)
Message sent! I'll respond within 24 hours.