OGHENEKENO HILKIAH OKULA

CCNP Network Engineer & Infrastructure Consultant
UK.

About

Highly accomplished CCNP Network Engineer and Infrastructure Consultant with an MSc in Advanced Computer Networks, specializing in designing, implementing, and automating enterprise-scale network infrastructures. Proven expertise in multi-site WANs, hybrid cloud networking, and Python/API-driven automation, consistently delivering robust, secure, and high-performance solutions. Seeking to leverage advanced technical acumen and project leadership to excel in Network Engineer, Infrastructure Engineer, or Technical Support Engineer roles within the UK market.

Work

Freelance
|

CCNP Enterprise Network & Infrastructure Engineer / Microsoft 365 Consultant

United Kingdom, UK

Summary

Currently serving as a CCNP Enterprise Network & Infrastructure Engineer and Microsoft 365 Consultant, delivering advanced network solutions and cloud migrations remotely.

Highlights

Designed and delivered scalable multi-site WAN architectures using OSPF, EIGRP, and BGP, implementing MPLS L3VPN VRFs and MP-BGP for multi-tenant route distribution.

Implemented hub-and-spoke DMVPN (NHRP, GRE) and GRE+IPsec tunnels to ensure secure branch connectivity, validating routing with EIGRP across overlays.

Produced HLDs/LLDs, topology diagrams, routing policies, and operational runbooks, documenting PE/CE interactions and provider handoffs for streamlined operations.

Automated configuration deployment and validation using Python, Ansible, and REST APIs, integrating with CI/CD pipelines to achieve consistent, error-free rollouts.

Built Python and Ansible automation scripts for device provisioning, config drift detection, and automated validation, integrating with version-controlled repositories to enhance network reliability.

Implemented API-driven device interactions (REST/NETCONF/RESTCONF) and model-driven telemetry, improving network visibility and assurance.

Designed enterprise WLAN with secure employee access and segmented guest networks, integrating with campus LAN and AAA via Cisco ISE.

Designed hybrid connectivity patterns and AWS/GCP VPC architectures, implementing subnet segmentation, route tables, and secure site-to-site VPNs to ensure end-to-end routing and security.

Microsoft
|

Microsoft 365 Administrator | Technical Support Engineer

Summary

Provided enterprise-level Microsoft 365 SaaS support to global customers in North America and Europe, resolving complex cloud infrastructure and security issues while maintaining 95%+ customer satisfaction (CSAT) and SLA compliance.

Highlights

Managed and troubleshot Microsoft 365 migration issues (Hybrid, Gmail, Yahoo, Hotmail to Microsoft 365) for companies and organizations moving to the cloud.

Configured domains and email security services using SPF, DMARC, and DKIM, protecting 150+ business enterprises from malicious actors and spoofing.

Provided global technical support for Microsoft 365 Online Services (Exchange Online, Teams, OneDrive, SharePoint, Outlook, Entra ID) via multiple channels, maintaining 95%+ CSAT.

Resolved over 90% of enterprise support incidents within SLA, minimizing operational downtime and addressing complex administrator knowledge gaps.

Delivered proactive recommendations on Conditional Access, MFA, IAM, and Zero Trust practices, improving security posture for 100+ businesses and preventing recurring issues.

Designed, implemented, and managed IAM solutions, including SSO, MFA, and RBAC for multiple companies.

Identified and remediated security, identity, and device compliance issues across Microsoft 365 tenants.

Authored and maintained comprehensive technical documentation for support procedures and solutions, published as an open-source ongoing project on GitHub.

Kasi Cloud
|

IT Systems Administrator (Infrastructure)

Summary

Deployed and supported productivity software and office wireless networking systems to ensure adequate collaboration and connectivity for onsite users.

Highlights

Deployed and supported productivity software (Email, Microsoft Teams, Microsoft Office, Task Tracking) to ensure adequate collaboration amongst workers.

Configured and maintained office wireless networking systems to ensure onsite users stay connected to productivity suites.

Provisioned and supported desktop and mobile operating systems (Microsoft Windows, macOS, iOS, Android) for Kasi-owned and BYOD devices.

Installed and configured data center switches, routers, and servers for Point of Presence in the Lekki Data Center.

Unitellas International Limited
|

Cloud Solutions Architect, Networks and Infrastructure

Summary

Planned and deployed edge cloud infrastructure solutions for enterprise customers, ensuring operational excellence, SLA compliance, and infrastructure resilience.

Highlights

Designed and created comprehensive infrastructure solutions using advanced network architecture and engineering principles, prioritizing operational stability, robustness, resilience, and high availability.

Architected Zadara Edge Cloud Infrastructure-as-a-Service (IaaS) solutions encompassing compute, storage, and networking components tailored to customer requirements and SLA commitments.

Developed infrastructure deployment strategies and technical specifications to ensure seamless integration with customer environments and optimal service delivery across distributed edge locations.

Deployed and commissioned enterprise-grade edge IaaS hardware infrastructure, including HP ProLiant servers, Cisco 40G/100G switches, and Fortinet NGFWs.

Executed hardware installation, configuration, and testing of data center infrastructure components across multiple deployment trips to the Eko Atlantic region.

Configured Cisco switching architecture (40G/100G interconnects) and Fortinet firewall security policies to support multi-tenant isolation, traffic segmentation, and enterprise-grade security.

Implemented infrastructure monitoring and performance validation protocols to verify compliance with agreed SLAs, validate high-availability configurations, and identify optimization opportunities.

Managed and optimized Microsoft 365 tenants across customer organizations, ensuring efficient resource utilization, cost optimization, and alignment with organizational policies and compliance requirements.

Tek Experts (now Teknowledge)
|

Microsoft 365 Technical Engineer (L2)

Summary

Delivered enterprise-level Microsoft 365 SaaS support for global customers, resolving complex cloud infrastructure and security issues while maintaining 95%+ customer satisfaction (CSAT) and SLA compliance.

Highlights

Provided global technical support for Microsoft 365 Online Services (Exchange Online, Teams, OneDrive, SharePoint, Outlook, Entra ID) through multiple support channels, ensuring timely issue resolution and customer success.

Resolved over 95% of complex M365 support tickets involving Exchange Online configuration and troubleshooting, Entra ID identity and access management, Microsoft Purview compliance, and hybrid connectivity.

Diagnosed and resolved networking and security issues for global Microsoft 365 customers, maintaining 95%+ CSAT through effective communication, rapid troubleshooting, and resolution within strict SLA parameters (e.g., 1-minute initial contact response time).

Managed escalations and complex technical problems requiring deep knowledge of M365 architecture, service dependencies, and integration patterns across cloud and hybrid environments.

Streamlined email and domain configurations using SPF, DMARC, and DKIM protocols, improving operational continuity and email security posture for 150+ businesses across North America.

Configured and optimized domain settings, DNS records, and email routing to ensure deliverability, security compliance, and seamless mailbox migration for enterprise customers.

Implemented email security best practices to protect customer domains from spoofing, phishing, and malicious actors.

Watchtower
|

IT Systems Administrator (Technical Support)

Summary

Managed enterprise network infrastructure and IT operations for a multi-branch organization, optimizing vendor relationships and SLA compliance, achieving $110,000+ in cost recoveries while maintaining 99%+ infrastructure uptime.

Highlights

Supported and maintained enterprise-grade network hardware, including routers, switches, and firewalls across regional branch infrastructure.

Worked as L1 network support technician for emergency response duties and network event monitoring, using industry-standard platforms (Uptime Robot, Zabbix) for rapid incident detection and resolution.

Conducted proactive network performance monitoring and implemented hardware upgrades to prevent downtime and optimize infrastructure reliability.

Negotiated and managed ISP Service Level Agreements (SLAs), achieving over $10,000 in downtime compensation through contractual enforcement.

Executed warranty claims for HPE Switches, modules, and network devices, resulting in over $100,000 in cost recoveries for branch infrastructure investments.

Managed and coordinated data center inventory and asset lifecycle management for regional branch operations, tracking procurement through retirement cycles.

Coordinated and implemented multiple deployments of computer desktops and laptop systems for branch and remote users, handling the full deployment lifecycle.

Provided L1-L3 technical support to end users, addressing infrastructure-related issues and ensuring timely resolutions to minimize business impact.

University Preparatory Secondary School (UPSS)
|

IT Manager, Network & Systems Infrastructure

Summary

Led network and systems infrastructure modernization for an institution supporting about 1,000+ users, designing and deploying multi-vendor infrastructure while managing vendor relationships and providing comprehensive end-user support.

Highlights

Designed and implemented enterprise-grade network architecture including LLD and HLD documentation, encompassing routing protocols, switching infrastructure, VLAN segmentation, and wireless access point deployment across campus facilities.

Architected and deployed multi-vendor network solutions using Cisco IOS-based routers and switches, Ubiquiti UniFi wireless access points, and MikroTik RouterOS devices for optimal cost-efficiency and operational flexibility across diverse network segments.

Configured and optimized Cisco routers and switches for VLAN segmentation, inter-VLAN routing, and network access control to support 1,000+ concurrent users while maintaining network isolation and security policies.

Implemented Quality of Service (QoS) policies and traffic management to prioritize CBT traffic and educational applications, ensuring optimal bandwidth allocation and reduced latency for critical services.

Configured and maintained computer labs and Thin Clients infrastructure supporting 1,000+ students and staff, ensuring reliable access to educational resources and network services.

Managed endpoint devices and system configurations to optimize performance and standardize deployment across branch locations.

Served as principal point of contact for external IT contractors, ISP WAN connectivity, and multi-vendor coordination (Cisco, MikroTik, Ubiquiti).

Taught and mentored 100+ junior high school students on Scratch programming as part of educational outreach initiatives.

Education

Birmingham City University, UK
Birmingham, England, UK

MSc

Advanced Computer Networks

Grade: A-grade dissertation

Courses

Machine Learning & AI: Algorithms, model development, and AI applications in network contexts

Software-Defined Networking (SDN): Network programmability, controller architectures, and OpenFlow protocols

Wireless Communication Networks: Advanced wireless technologies, mobile networks, and spectrum management

Enterprise Network Infrastructure Management: Large-scale network design, management, and optimization

Network Automation & Orchestration: Intelligent automation, orchestration frameworks, and infrastructure-as-code principles

Ethical Hacking & Network Security: Security testing, vulnerability assessment, and ethical penetration testing

University of Benin, Nigeria
Benin, Edo State, Nigeria

BE

Electrical & Electronics Engineering

Awards

Bronze Medal Finalist: Post Graduate Expo (PGXPO)

Awarded By

Birmingham City University, UK

Awarded for dissertation on "Agentic Al in Network Engineering" at the Post-Graduate Expo.

3rd Place, Innovative Challenge Against Indoor Air Pollutants

Awarded By

ekipa & Tesa, Germany

Recognized for innovative solutions in combating indoor air pollutants.

Best Graduating Student, 2011/12 Session (Senior High School)

Awarded By

St. Michael's College, Delta State, Nigeria

Recognized for outstanding academic performance during the 2011/12 academic session.

Certificates

Cisco Certified Network Professional (CCNP Enterprise) ENCOR/ENARSI aligned

Issued By

Cisco

Fortinet NSE3; Fortinet Certified Associate in Cybersecurity

Issued By

Fortinet

LFS162: DevOps and Site Reliability Engineering (SRE)

Issued By

Linux Foundation

Cisco DevNet / CCNA Automation (Network Automation & APIs)

Issued By

Cisco

Cisco SD-WAN for Enterprise and Cloud

Issued By

Cisco

Microsoft 365 Administrator Expert (MS-102)

Issued By

Microsoft

LFS250: Kubernetes and Cloud Native Essentials

Issued By

Linux Foundation

Cisco: AI Solutions on Cisco Infrastructure

Issued By

Cisco

Cisco Certified: CyberOps Associate

Issued By

Cisco

LFS201: Linux System Administration

Issued By

Linux Foundation

Microsoft Azure Administrator Associate (AZ-104)

Issued By

Microsoft

AWS Certified Solutions Architect - Associate

Issued By

AWS

(ISC)² Certified in Cybersecurity (CC)

Issued By

(ISC)²

C Programming with Linux (Computer Science)

Issued By

Computer Science

Microsoft Teams Administrator Associate (MS-700)

Issued By

Microsoft

Google Cloud Certified - Associate Cloud Engineer

Issued By

Google Cloud

Skills

Routing & WAN Technologies

OSPF, EIGRP, BGP, IS-IS, Route Redistribution, Policy-Based Routing, DMVPN, MPLS Layer 3 VPN, IPsec, GRE Tunnels, DHCP, DNS, NTP.

Enterprise Networking & Architecture

Enterprise LAN/WAN Architecture, Campus Network Design, Multi-Site Networks, Network Segmentation (VLANs, VRFs), Multicast (PIM), QoS, High Availability, Redundancy Design, First Hop Redundancy Protocols (HSRP, GLBP, VRRP), Network Access Control (NAC), AAA Services (TACACS+, RADIUS, Cisco ISE).

Server & Storage Infrastructure

Dell PowerEdge, HPE ProLiant, EMC Storage, Windows Server 2022 (Active Directory, Hyper-V, Failover Clustering, DPM, SCCM, Intune), Virtualization (VMware ESXi, vSphere, Workstation, Hyper-V, Proxmox).

Cloud Infrastructure & Networking

Microsoft Azure (IaaS, PaaS, VNets, NSGs, ExpressRoute, Virtual WAN, RBAC), AWS VPC Design, AWS Routing & Subnet Segmentation, Google Cloud VPC Design, Hybrid Cloud Networking, Site-to-Site VPN, Multi-Cloud Connectivity.

LAN & Switching Technologies

VLAN Configuration, Trunking, VTP, Inter-VLAN Routing, Spanning Tree Protocol (STP), EtherChannel, MEC, VSS (Stackwise Virtual).

Network Security & Access

TACACS+/RADIUS, Cisco ISE, Cisco ASA, NGFW, Layer 3-7 Application Packet Inspection, F5 BIG-IP Load Balancing, F5 WAF, Fortinet FortiGate, Email Security (SPF, DMARC, DKIM).

Enterprise Wireless & RF

WLAN Deployment, RF Planning, Wireless Site Surveys, Coverage Design, Wireless Network Segmentation, Secure Guest Access, Meraki Wireless.

Software-Defined Networking (SDN) & SD-WAN

Cisco SD-WAN (vManage, vSmart, vBond), Meraki SD-WAN, SD-WAN Overlay Networks, WAN Edge Deployment, Cisco SD-Access, Control & Data Plane Separation.

SaaS Deployment Platforms

Microsoft 365 (Exchange Online, Teams, SharePoint, OneDrive), Google Workspace.

Network Automation & Programmability

Python, Bash, PowerShell, JavaScript, C, Ansible, Terraform, Nornir, Netmiko, PyATS, Batfish, Jinja2, REST APIs, NETCONF, RESTCONF, Infrastructure as Code (IaC), Configuration Automation, Network Telemetry, Docker, Kubernetes, Jenkins, CircleCI, GitHub Actions, LLMs, MCP, Agentic AI, n8n.

Network Monitoring & Observability

Azure Monitor, Log Analytics, Sentinel, Grafana, Prometheus, PRTG, Zabbix, UptimeRobot, WireShark, SNMP.

Network Hardware & Vendors

Cisco (IOS/IOS-XE/IOS-XR, NX-OS 3k, 7k, & 9k), Meraki, MikroTik, Ubiquiti (UniFi), HP, Aruba (Switches, Routers, Access Points).

Testbeds & Tooling

Cisco CML, GNS3, EVE-NG, PNET Labs, DrawIO, MS Visio.

Identity & Access Management

Entra ID (Azure AD), On-Premises Active Directory, Cisco ISE, PIM, PAM, IAM, OpenRadius.

Infrastructure & System Administration

Windows Server 2022 (Active Directory, Hyper-V, Failover Clustering, DPM, SCCM, Intune), Linux (Ubuntu, CentOS, RedHat), Virtualization (VMware ESXi, vSphere, Workstation, Hyper-V, Proxmox), Backup (Veeam, Azure Backup).

Project & Delivery

Agile/Scrum, PRINCE2, Documentation (HLD/LLD), Change management, Operational runbooks.

Network Programmability

Python, Ansible, Terraform, RESTful APIs, Netconf/RESTConf, Git, CI/CD.

Network Documentation

Topology Diagrams, Implementation Plans.

Projects

MPLS L3VPN Design

Summary

Designed MPLS L3VPN with VRF segmentation and MP-BGP route distribution.

Enterprise Network Design & Automation (TTNet Ltd)

Summary

Designed, automated, and implemented scalable OSPF, BGP & EIGRP routing protocols for a multi-site organization (TTNet Ltd).

MEDCOM Bank Wireless Network Expansion

Summary

Proposed a wireless network expansion integrating smoothly with existing infrastructure, covering the entire bank premises across two floors, and providing secure guest access and efficient management.

Enterprise Network Optimization

Summary

Redesigned network topology using Cisco and MikroTik devices for an educational institution (University Preparatory Secondary School).

Cloud SaaS Migration

Summary

Spearheaded and managed cloud migration projects for multiple SMEs, integrating Microsoft 365 and Google Suite.

Agentic AI in Network Engineering: Leveraging MCP Mechanisms, LLMs and Agents for Autonomous Network Management and Intent-Aware Auto Remediation - Modern NetDevOps

Summary

Dissertation project exploring the application of Machine Learning (ML), Large Language Models (LLMs), Model Context Protocol (MCP) mechanisms, and autonomous agents for intelligent network management and automated remediation.