SUMMARY:

Exceptional leadership abilities; able to direct all phases of project - based and program based client/ corporate initiatives. Adaptable to the ever changing world of technology, project documentation and milestones, and business specification requirements.

PROFESSIONAL EXPERIENCE:

Confidential

Solutions Architect

Responsibilities:

• Worked with internal business groups in resolving application engineering problems using F5 hardware and software technologies.
• SSL certificate signing request creation and processing with listed certificate authority.
• Troubleshooting ssl certificate and load balancing algorithm problems.
• Hardware platforms include 5250, 6900, 7200, 8900 with LTM, ASM.
• Advanced usage of wireshark for analysis of packet captures.
• Extensive advanced irule scripting for uri, migrations, pool selections etc.
• Build of SSL csr with given reference number codes. Generated required csr and keys for install on required virtual Server used by web servers to provide efficient access to pools of server nodes servicing multiple web pages.
• Gnu linux, kalilinux. Linux sys admin, burp suite, Sourcefire, Jhijack, nmap, metasploit.
• Strong in application layer security principles and industry standard concepts.
• Web security application concepts and defense techniques such as configuring ASM platforms to accommodate for phishing attacks, coding errors, session hijacking, replay attacks, xss, csrf etc.
• Strong in i-Rule scripting for use in supplementing application engineering requirements.

Confidential

Solutions Engineer Architect /Network/F5 Engineer

Responsibilities:

• i-Rule scripting for customization of virtual servers, pools, and server node selection.
• SME on F5 hardware models 10200, 8900, 6800, 3600 and 1600 platforms. APM, ASM solution implementations.
• Strong skills writing cyber security policy associated with existing and new technology implementations.
• Responsible for requesting/ordering SSL certificate authorization codes and reference number from authorized Confidential /DHS persons.
• Certificate signing request and keys using obtained authorization codes and reference numbers obtained from Confidential /DHS LRA and used in network processing engines (NPE), such as F5’s, routers, firewalls. i-Rules, Data-group usage, profiles.
• SME in enrolling requests using auth code, reference number and csr to generate final certificate (.cer)
• SME in importing certificate on F5 hardware platforms providing secure sockets layer (ssl) communications via encryption using established pkcs12/pki etc.
• SME in troubleshooting using tcpdumps, i-Rules, curls, logs, and networking.
• SME on cisco 5520, 5540 and 5585 with virtual context capability.
• Worked with multiple business groups in determining the best load balancing design, methodology and cybersecurity policy requirements.
• Rebuilt F5 hardware from RMA replacement, remote supervision with onsite technicians in replacing F5 hard
• Well versed in cisco asa implementation requests, including troubleshooting firewall connectivity issues.
• Information System Security Assesment Framework (ISSAF) for evaluating networks, and application security.
• Well versed in troubleshooting and implementing cisco asa and checkpoint firewall requests and rulesets.

Confidential

Solutions Architect

Responsibilities:

• Well versed in 1600, 3900, 6900 and 8900 platforms.
• Well versed in i-Rules, constrcts of http uri custom virtual directory redirection requests, header host replacement constructs, host header insertion, redirections.
• ASM operations and configuration.
• SME in requesting certificate from approved certificate authority or local requesting authority (LRA).
• SME in generating required certificate signing request and key for requested url site and using that information to generate final certificate for use.
• Responsible for keeping track of expired certificates to confirm usage is in accordance with status provided by OCSP/CRL’s.
• Provide analysis information of network and malware attacks to open source communities.
• Upgraded semi - production environment load balancers (bigip 1600 s) from versions 9.4.7 to version 11.
• Assisted in Nexus 7K, and catalyst 6500 company wide upgrades to latest code revisions
• Troubleshooting F5 issues, building new F5 requests based on Customer requirements. Administer solutions in response to Remedy ticketing system.

Confidential

Senior Network Engineer

Responsibilities:

• F-5 Load balancer client services implementations v9,v10 build of hardware and server farm support requirements mainly vip, irules, nodes, ssl certificate installations on LTM platform, GTM,
• Maintenance of certificates via confirming validity using CRL distribution point.
• Certificate installations involve cert, key and chain and root certs where required.
• SME in generating key and cert using openssl genrsa for key and csr creation.
• Data center switching services, Nexus 7010, 5020 platforms.
• Firewall security design for hardware platforms 5520, 5540 & 5580, virtual context design to be used in client implementations.
• Cisco asa firewall troubleshooting and implementation requests for business groups.
• Design and Implementation of firewall rules for multiple airline clients for access to b2b, b2c web hosting environments consisting server farms. Request included nats, statics, object-groups, access-lists, redundancy
• Checkpoint firewall R65, R70 port request and policy implementation, troubleshooting connectivity issues

Confidential

Security Network Consultant

Responsibilities:

• Load balancing implementations using F5 load balancers
• Cisco firewall ASA 5505, 5540, 5580 design and configuration templates for VPN access from remote sites. Well versed in configuring and troubleshooting ninety percent of cisco hardware products
• Cisco ids module for 6500 series
• Security configuration template for private clients using customized context on cisco FWSM.
• Troubleshooting routing and lan switching issues spanning from eigrp, ospf, vtp, trunking, spanning-tree etc.
• Well versed in Cisco hardware platforms, some of them to mention Cisco 6509 with variety of sup modules, cisco 4500’s, cat 3750 stack and standalones. C2611, c2800’s, c3600 etc.
• Well versed in DNS implementations, troubleshooting of DNS resolutions issues in conjunction with load balancing problems.
• Routing protocols worked with include ospf, bgp, eigrp and rip v1, rip v2

Confidential

Assistant vp - TECH LEAD Eng.

Responsibilities:

• Network design architecture and implementation for local, domestic and international sites
• Responsible for company wide implementation and training of Waas(Wide area application services) hardware device implementation and architecture.
• Responsible for design and implementation projects and tasks, delegated work and related project requirements to other members of Network team.
• Laised with multiple business groups to determine technological requirements and maintenance objectives required for the different application usage.
• ASA and checkpoint firewall policy and user administration for multiple internal and external clients
• F-5 load balancer implementation and administration, ssl cert upgrade’s, troubleshooting website url issues.
• Proficient and very comfortable in implementing and troubleshooting Lan/wan network problems, hardware’s familiar with cat 3750, 6509, 7609, 4507, cisco 2821, 3745, 7200 routers.
• Well versed in routing protocols rip, ospf, eigrp.

Confidential

Senior Consultant

Responsibilities:

• F-5 and cisco CSM load balancing implementations involving multiple private clients. DNS implementation in support of load balancing pool requests.
• Supported all international sites, interfaced with technological groups helping them device solutions to support the different requests presented to the information technology group
• Well versed in lan switching, routing protocols(eigrp, ospf, ri), dns implementations.
• Solutions testing using asa 5520, 5540 & 5580 . Design and testing of firewall connectivity issues for multiple local and international clients. Implementation of firewall policy associated with airline web hosting farms. load balancing network design preparation for F5 BIGIP environment, design specifications included IP addressing structure, load balancing algorithms, failover, state and connection mirroring etc

Confidential

Snr. Network Engineer/Architect

Responsibilities:

• Network design architecture for the entire building, and international sites
• Design and rebuild of Cisco Mars (Monitoring Analysis and Response System), security mitigation system appliance.
• Network design and topology implementations for different business groups within the Corporate Network
• Troubleshooting OSPF routing, lan switching and Wan connectivity issues
• Well versed in the applications of acls, route-maps, distribute-lists, trunk, vlans etc.
• Familiar with Cisco ACS administration, wireless 1200 access point implementation and administration.
• Cisco Call manager daily troubleshooting, call queues, Administration of new user phones in conjunction with Cisco Unity.

Confidential

Senior Network Consultant

Responsibilities:

• Liaised with project sponsors to develop detailed plans to integrate in Project Plan to enable accurate Path analysis to be used to consolidate project reports for management review.
• Identified Strategic directions for business applications, driving - process improvement, security, data quality and ensuring the network and applications were intuitive.
• Software Requirement Specs, RFP’s, RFQ’s
• Re-engineering of process methods to reflect a considerable reduction in cycle time.
• Responsibilities included implementation of firewall rule base polices on checkpoint ( Confidential R60).
• Implementation of firewall rule base for 500 plus clients. Interaction with vendor engineering crew to determine vendor requirements needed in order for vendors to access services within Confidential ’s Network.
• Netscaler and cisco CSS load balancer client implementations

Confidential

Senior Data Network Engineer

Responsibilities:

• Interfaced with multiple clients and vendors in order to provide them with the necessary connectivity needed via network security firewalls, firewall hardware include but not least, checkpoint
• Firewall services module configuration and troubleshooting, pix firewall 515, 520 administration, Vlan trunking, vtp, multilayer switch architectures, multigroup hsrp.
• Setup of Wan/lan connectivity using 7200, 7500, catalyst 6500 with msfc’s and ContentSwitching module, 2600 series routers, Catalyst 4506.
• Troubleshooting vpn issues for juniper ssg140, ssg320m, administering remote user access and troubleshooting associated firewall user and network connectivity issues.
• Configuration of firewall port requests for users and business groups.
• Re-design of frame-relay Telemetry network for twenty-six sites using Eigrp as the routing protocol.