Valentin Oprea
Network Architect
Experience
Network Architect
IT service provider - public sector
- Designing a network management strategy with a focus on NetDevOps principles and model-driven telemetry using YANG data models
- Conducting NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
- Automating configuration deployment in the test environment with Ansible
- Developing end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
- Creating the dual-stack architecture concept (router + switch + firewall) including a detailed test plan; planning, execution, and documentation of acceptance tests for the administration network
- Performing BSI IT baseline protection checks according to the IT Baseline Protection Catalog (determining protection needs, modeling, risk analysis, deriving measures)
- Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
- Systems: Cisco Crosswork Network Controller, Solarwinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
- Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series
Network Specialist
Network operator
- Achieved over €400k annual operational cost savings by automating test and migration tasks using Python and Ansible
- Implementing the capacity management operational process through quantile-based analysis of network metrics, clear division of tasks, and tracking of individual work packages
- Leading technical rollout projects and network transformation initiatives from planning to execution
- Collaborating with engineering teams and vendors for complex network troubleshooting and problem resolution
- Protocols: MPLS, BGP, RSVP, L2VPN, L3VPN, ISIS, OSPF, IPSEC, IPv6, EIGRP, PPPoE
- Systems: Cisco Prime, StableNet, Cisco Splunk, Command FNT, Python, Ansible, Git
- Components: Nokia 7x50 series, Juniper PTX series, Cisco ISR router series, Cisco ME and 29xx switch series
SDWAN Specialist / Network Architect
IT service provider - public sector
- Engineering activities in network architecture focused on SD-WAN extensions such as ZTP on-premises server and CloudConnect solutions
- Configuring and operating Cisco SD-WAN components (vManage, vEdge, vSmart, vBond)
- Developing comprehensive operational concepts and detailed operation manuals
- Designing and conducting relevant acceptance tests for the SD-WAN controller software
- Automating operational tasks using Python scripts
- Protocols: ISIS, MPLS, L3VPN, BGP, OMP
- Systems: Linux Red Hat, Windows Server 2019, OpenText NNMi, Python, Ansible
- Components: vManage, vBond, vSmart, Cisco ASR router series, Cisco Nexus switch series
Network Specialist
Network operator
- Creating and implementing an IP core network QoS concept including a detailed test plan, planning, implementation, and training for the internal operations team
- Migrating from Orckit to Huawei systems in the MPLS metro network with a zero-downtime approach
- Providing 2nd/3rd-level support for customer connections and general network troubleshooting
- Protocols: MPLS, BGP, RSVP, ISIS, OSPF, IPv6, QoS, PPPoE
- Systems: Zabbix, ISARFLOW
- Components: Huawei NE series, Juniper MX series
Cisco SD-WAN network setup + test automation
Personal development project
- Building a Cisco SD-WAN network in a virtualized test environment
- Integrating a vEdge from the Amazon AWS cloud
- Setting up a Linux platform for test automation with pyATS
- Setting up the firewall security infrastructure with Fortigate
- Developing automated test procedures for network validation
- Protocols: MPLS, L3VPN, BGP, ISIS, IPv6, OMP
- Systems: pyATS, FortiManager
- Components: Cisco SD-WAN controller, Cisco vEdge, Fortinet Fortigate 40E firewall
Network Specialist
Network operator
- Network optimization in the backbone network focusing on latency, throughput and routing performance as part of the Connect fixed-line network test 2019
- Capacity planning for central core network nodes to support operational and strategic decisions
- Identification and analysis of design flaws in the core network, including ACL design and CoPP strategies to pass security audits and penetration testing
- Development of an IPv6 connectivity concept for servers including a detailed test plan and successful implementation in the live network
- Protocols: BGP, ISIS, L3VPN, OSPF, MPLS, IPv6
- Systems: Cacti, Nagios, Grafana
- Components: Juniper MX router series, Juniper QFX switch series, A10 Thunder series
Network Specialist
Network operator
- Acceptance and validation of various software versions according to technical and operational requirements
- Development and acceptance of technical solutions for BNG platforms (Broadband Network Gateway) to deliver broadband services
- Creation of operational documentation for maintenance, support and rollout
- Planning and conducting customer workshops for solution alignment, handover and training
- Test automation of a proprietary Network Element Driver (XML → CLI translation) using Visual Basic and Python
- Development and execution of complex network tests using Spirent TestCenter
- Creation of a CoPP template for BNGs that leaves no security gaps during penetration tests
- Protocols: MPLS, L2VPN, L3VPN, BGP, RSVP, ISIS, OSPF, CGNAT, IPv6, PPPoE, L2TP
- Systems: Spirent TestCenter
- Components: Huawei ME60 BNG series, Cisco 19xx router series, Nokia 7x50 router series
Senior IP Engineer
Ericsson Romania
- Key role in building the operational part of the Network Operations Center (NOC)
- Acceptance and validation of various software versions according to technical and operational requirements
- Extensive troubleshooting and problem solving in the IP/MPLS metro and core network areas
- Analysis of complex faults and long-term problem resolution
- Participation in 24/7 on-call duty
- Protocols: MPLS, L2VPN, L3VPN, BGP, RSVP, ISIS, OSPF, CGNAT, IPv6, PPPoE, L2TP
- Systems: Nagios, Cacti
- Components: Huawei NE40E router series, Cisco 7200/7600/10000/12000 router series, Nokia 7x50 router series
IP Engineer
Huawei Romania
- Development and execution of firewall test cases in a complex NGN voice environment
- Development of firewall security rules for hardening in penetration testing
- Support for various IP projects at Telefónica O2, Deutsche Telekom and Telenor TGS
- Verification, optimization and implementation of technical solutions in complex WAN environments
- Commissioning of routers and switches in production-critical network areas
- Acceptance of different software versions according to technical and operational requirements
- Protocols: MPLS, L2VPN, L3VPN, BGP, RSVP, ISIS, OSPF, CGNAT, IPv6, PPPoE, L2TP
- Systems: Huawei N2000
- Components: Huawei CX600 switch series, Huawei Eudemon X3/X8 firewall series, Huawei NE40E-X3/X8 router series, Huawei ME60-X8/X16 BNG series
Summary
Less than 1% of all Cisco-certified network engineers worldwide reach CCIE status. As a CCIE-certified network architect, I bring over 15 years of experience in the telecommunications industry. During this time, I have learned that successful network transformation projects essentially need four phases: optimal architecture, careful testing, helpful documentation, and stable operation.
What sets me apart? I combine deep technical know-how with business thinking. From developing the architecture blueprint to creating detailed test plans, through validation and operation – I ensure that mission-critical infrastructures meet the highest requirements in terms of high availability and multi-tenancy.
My approach: In reality, things rarely go according to plan. Tests fail, migrations have unexpected effects, vendor documentation is incomplete. This is exactly where my strength lies: systematic troubleshooting and pragmatic problem solving. I’m not afraid to dive deep into complex issues – whether packet capture analysis, protocol debugging, or direct collaboration with vendor TACs. This ability to bridge the technical and organizational levels has proven invaluable on large-scale projects.
Skills
Core Competencies
- Network Architecture And Design
- Ip/mpls/srv6 Network Design, Sd-wan Solutions, Carrier-grade And Enterprise Infrastructures
- Network Automation
- Python, Ansible, Gitlab Ci/cd, Netconf/yang, Network Source Of Truth
- Monitoring & Analytics
- Telegraf, Influxdb, Prometheus, Grafana, Network Telemetry, Model-driven Telemetry
- Project Management
- Technical Project Leadership, Budget Planning, International Team Leadership, Netdevops
Knowledge Of Tools, Protocols, And Network Components
- Routing & Switching Platforms: Cisco Ios-xr/xe, Juniper Junos, Nokia Sr Os, Huawei Vrp, Fortios
- Cloud Platforms: Amazon Aws, Microsoft Azure
- Protocols & Technologies: Mpls/ldp, Srv6/sr-mpls, Bgp/ospf/is-is, L2vpn/l3vpn, Evpn, Qos
- Automation & Management: Netconf/yang, Python, Ansible, Gitlab Ci/cd, Pyats, Tig Stack, Visual Basic
- Network Components: Cisco Ncs540, Cisco Asr9000, Cisco C8000 Series, Cisco Isr 4000, Cisco Nexus 9k, Cisco Firepower Firewall, Nokia 7750/7250/7210, Huawei Ne20/ne8000, Huawei Me60-x8, Huawei Ne40e, Huawei Cx600-x8, Huawei Eudemon Firewall, Juniper Mx Series, Juniper Qfx5100, Fortigate F40 Firewall, Cisco Sd-wan Controller, Spirent Testcenter
Soft Skills
- Leadership & Communication: Technical Leadership, Mentoring, Presentations, Stakeholder Management, International Teams
- Project Management & Organization: Project Planning, Budget Planning, Time Management, Change Management, Agile Methods
- Personal Qualities & Working Style: Quick Comprehension, Stress Resistance, Initiative, Flexibility, Customer Focus
Languages
Education
Politehnica University of Bucharest
Master of Engineering · Operations and administration of networks and network services · Bucharest, Romania
Politehnica University of Bucharest
Bachelor of Engineering · Networks and telecommunications software · Bucharest, Romania
Certifications & licenses
Ccie Routing & Switching #64718
Cisco Certified Specialist - Enterprise Core
Juniper Jir Certification
Similar Freelancers
Discover other experts with similar qualifications and experience