Md. Mahabubur Rahman

Dhaka, Bangladesh

Md. Mahabubur Rahman

Deputy Manager — Service Provider Backbone Planning & Implementation

JNCIP-SP · RHCSA · MPLS · BGP · VXLAN · DDoS Mitigation

Open to senior backbone, network security, and consulting
Download CVWhatsAppContact
Portrait of Md. Mahabubur Rahman

99.9%

National backbone uptime

150+

Core multi-vendor devices

40%

Customer satisfaction lift

9 yrs

ISP / IIG engineering

About

I have spent nearly nine years keeping the internet running — and increasingly, keeping it secure — for ISPs and IIG operators across Bangladesh.

As Deputy Manager at Stardust Telecom, I lead planning, design, and operations of a national IIG/ISP backbone: the Layer 2/3 core that connects downstream ISP clients to the global internet. Every upstream peering relationship, every BGP routing policy, and every security control protecting that infrastructure runs through my team.

I do not treat infrastructure and security as separate disciplines. In an ISP environment they never are. A misconfigured BGP policy is a security event. A volumetric DDoS is an infrastructure problem.

The engineers who understand both sides are the ones who can actually protect a network.

Experience

National backbone, live traffic

  1. Deputy Manager, Planning and Implementation, Core Network

    STARDUST Telecom Ltd. · Banani, Dhaka

    Oct 2025 — Present

    Leading strategic planning, architecture, and operations of a national IIG/ISP backbone serving major downstream internet service providers across Bangladesh.

    • Own end-to-end backbone upgrade planning and delivery with international carriers and upstream vendors
    • Define and enforce BGP security architecture across all peering — prefix-lists, max-prefix, MD5
    • Architect enterprise DDoS protection with WanGuard and FastNetMon plus custom mitigation automation
    • Govern IDS/IPS platforms (Suricata, Zeek) for anomaly detection and traffic forensics
    Juniper MX/PTXBGPMPLSVXLANRPKIWanGuardFastNetMonSuricataZeekNetFlowIPFIX

  2. Senior Assistant Manager, Planning and Implementation, Core Network

    STARDUST Telecom Ltd. · Dhaka, Bangladesh

    Jan 2025 — Sep 2025

    Promoted to own incident response operations, international circuit delivery, and backbone security hardening.

    • Directed real-time mitigation of DDoS, brute-force, spoofing, and cyberattack incidents with firewall automation
    • Oversaw Layer 2/3 IIG and ISP backbone integration and traffic engineering
    • Planned and implemented IPLC and ITC international circuits with global carriers
    • Supervised core and upstream link health, SLA performance, and fault isolation
    Juniper MXBGPMPLSIS-ISIPLCITCFirewall AutomationTraffic Engineering

  3. Assistant Manager, Planning and Implementation, Core Network

    STARDUST Telecom Ltd. · Dhaka, Bangladesh

    Mar 2023 — Dec 2024

    First management role with full operational ownership of a national IIG/ISP backbone — infrastructure, co-location, vendors, and service delivery.

    • Achieved 99.9% network uptime by redesigning redundancy across 150+ Cisco, Juniper, and Huawei devices
    • Raised customer satisfaction scores by 40% through streamlined IP Transit delivery
    • Deployed VXLAN overlay across company infrastructure for traffic isolation and uptime guarantees
    • Managed 24/7 backbone operations, co-location oversight, and proactive escalation
    JuniperCiscoHuaweiVXLANMPLSBGPIP TransitCo-location

  4. Senior Network Engineer, Planning and Implementation, Core Network

    STARDUST Telecom Ltd. · Dhaka, Bangladesh

    Jan 2022 — Feb 2023

    Infrastructure design, upstream traffic management, and operational documentation for a leading IIG/ISP backbone.

    • Designed core upgrades — upstream traffic shaping, load balancing, route optimization, firewall hardening
    • Conducted capacity planning and traffic engineering for IIG/ISP backbone efficiency
    • Produced network documentation and Visio diagrams, standardizing operational procedures
    • Resolved escalated issues for NOC and support with timely root-cause analysis
    JuniperCiscoMPLSBGPOSPFIS-ISLoad BalancingTraffic Shaping

  5. Senior Network Engineer

    Digi Jadoo Broadband Limited · Bangladesh

    Aug 2021 — Dec 2021

    Led NOC operations and a team of network engineers at a broadband ISP — routing, switching, and operational standards.

    • Set escalation procedures, incident workflows, and daily NOC standards
    • Trained and mentored junior engineers to improve response time
    • Configured Juniper MX-480/MX-204 and MikroTik CCR/hAP/hEx with OSPF, BGP, and PBR
    • Administered L2/L3 switching — Cisco Nexus, Huawei S6720/S6730, BDCOM, GCOM
    Juniper MXMikroTikCisco NexusHuaweiBGPOSPFL2/L3 Switching

  6. Network Engineer

    Earth Telecommunication (Pvt.) Limited · Bangladesh

    May 2019 — Jul 2021

    Hands-on ownership of routing infrastructure, multi-vendor switching, monitoring, and performance reporting at a leading IIG/ISP.

    • Deployed Juniper MX-480, MX-204, ACX-1000, ACX-4000 with BGP, OSPF, static, and PBR
    • Configured MikroTik CCR/hAP/hEx with queues, tunneling, and full ISP/corporate setups
    • Managed multi-vendor L2/L3 switching including Cisco Catalyst/Nexus, Huawei, BDCOM, GCOM, Quanta
    • Monitored with OpManager, Nagios, Cacti, SolarWinds, and MRTG
    Juniper MX/ACXMikroTikCisco CatalystHuaweiBGPOSPFSolarWindsNagios

  7. System Engineer

    DNS Engineering and Communication LTD · Dhaka

    Jan 2018 — Apr 2019

    Early-career role coordinating multi-site engineering installations and acting as technical liaison with international vendors.

    • Coordinated engineering installations across multiple sites
    • Operated remote monitoring using INNEXIV products under Ericsson PM frameworks
    • Acted as primary technical liaison with foreign engineers and vendors
    INNEXIVEricsson PMRemote MonitoringProject Coordination

Stack

Tools I run in production

Service provider routing

  • BGP
  • MPLS
  • IS-IS
  • OSPF
  • VXLAN
  • RPKI
  • Traffic Engineering

Network security

  • DDoS Mitigation
  • WanGuard
  • FastNetMon
  • Suricata
  • Zeek
  • Firewall Automation

Platforms

  • Juniper MX/PTX/ACX
  • Cisco Catalyst/Nexus
  • Huawei
  • MikroTik

Operations

  • NetFlow / IPFIX
  • SolarWinds
  • Nagios
  • Cacti
  • Shodan API
  • NOC Leadership

Certifications

JNCIP-SP

Juniper Networks

JNCIS-SP

Juniper Networks

JNCIA-Junos

Juniper Networks

JNCIA-Cloud

Juniper Networks

RHCSA

Red Hat

MTCNA

MikroTik

2022 — 2025

Jahangirnagar University

Master's degree, Information Technology

2012 — 2016

Daffodil International University

Bachelor's Degree, Electrical and Electronics Engineering

Field notes

Latest writing

All posts
RPKI and BGP security on a national backbone

Security · 12 Aug 2026 · 6 min read

RPKI and BGP security on a national backbone

Prefix-lists and MD5 are table stakes. Here is how we enforce RPKI-based origin validation across upstream peering without breaking legitimate traffic.

DDoS mitigation when the customer is an ISP

Security · 28 Jul 2026 · 5 min read

DDoS mitigation when the customer is an ISP

Volumetric attacks on downstream ISPs are infrastructure problems. How WanGuard, FastNetMon, and custom automation sit on a multi-gigabit IIG core.

VXLAN overlay for isolation without losing uptime

Networking · 18 Jun 2026 · 5 min read

VXLAN overlay for isolation without losing uptime

We deployed a VXLAN overlay across company infrastructure to isolate traffic and keep uptime guarantees at scale. What worked, and what we refused to over-engineer.

Contact

Backbone architecture, network security, or a hard incident.

Open contactWhatsApp