SUMMARY:

• Sr. Network & Security Architect with 14+ years experience in designing network architectures, network security, project management, and taking full ownership of complex high - stake projects from start to finish.
• Strong leadership skills with ability to guide and provide technical direction and supervision for a given project.
• Team player with solid experience mentoring and training network engineers and security analysts.
• Personable and easy-to-work with; experienced dealing with difficult situations and presenting to stakeholders.
• Experienced in LAN/WAN infrastructures Cisco 2960/3850/4500/6500, Nexus 5K/7K/9K, Juniper QFX5100
• Network Security: Cisco PIX/ASA, Palo Alto Networks, Juniper SRX firewalls; VOIP: Cisco CUCM/UCCX
• Strong systems administration experience on Windows, Linux, CentOS, UNIX, VMWare vSphere v4.x/5.x
• Extensive experience with data center design with MLAG/VSS/vPC, BGP, OSPF, creating complex ACLs for multiple FW policies, Active Directory, IPSEC VPN tunnels, SIEM, ethical hacking, penetration testing, firewall, automation, TCP/IP, OSI model, PCI compliance, monitoring network with netflow/sflow, and wireless installs.
• Experience introducing next generation network architectures including Cumulus/SDN/VXLAN/Spine-Leaf/Chef

TECHNICAL SKILLS:

Platforms: Desktop: Windows and Mac OS X; Servers: Windows NT/ 2000/ 2003/2008/2012 ; Kali Linux (Backtrack)

Hardware: Cisco 2900/3500/4500/6500 switches, Nexus 2K/5K/7K/9K, Cisco PIX and ASA 5505/5510/5520/5550 firewalls, F5, Aruba, Netscreen, Juniper SRX, Palo Alto, Cumulus, Vyatta, Ubiquiti, Barracuda, Palo Alto Networks

Protocols: TCP/IP, DHCP, DNS, BGP, OSPF, EIGRP, VRRP, GLRP, HSRP, SSH, SSL, FTP, SNMP, SMTP, STP, NAT, RADIUS, TACACS+, CDP, LLDP, VOIP

Utility Mgmt.Tools: CiscoWorks, HP OpenView, Cisco ASDM/PDM, McAfee & Norton Anti-Virus, Nagios, Snort, Wireshark Sniffer Pro, Symantec Backup Exec, Symantec Ghost, Solarwinds, MRTG, WSUS, PRTG, Netflow/sFlow

Applications: HTTrack, MS Visio, Backtrack/Kali, Project, Outlook, Apache, VMWare ESXi, John the Ripper, L0phtCrack, Netcat, Cain & Abel, Nessus, tcpdump, Tor, nmap, Burp Suite, MySQL, MPuTTY, Metasploit, Aircrack, Kismet

Networking: LAN/WAN, 10G/40G Ethernet, VPN, Clos, Spine-Leaf, VLAN, NAT, DSL, subnetting, Frame Relay, T-1, load balancing, firewall failover, NX-OS, 802.1x, IDS/IPS, routing & switching, SSL, MLAG/VSS/vPC, DMZ

PROFESSIONAL EXPERIENCE:

Confidential, Palo Alto, CA

Sr. Network Engineer / Security Architect

Responsibilities:

• Plan, research, and design highly complex network & security architectures, frameworks and infrastructures.
• Responsible for leading network and security infrastructure projects and breaking down tasks for scope of project.
• Mentor and lead talented operations team consisting of Network & Security Engineers.
• Architected plan for migrating ACLs from Cisco ASA to Palo Alto Network firewalls.
• Conducted penetration tests on Kali Linux utilizing nmap, nessus, metasploit, burp, aircrack
• Simulated DDoS attack against Palo Alto Network Firewall and created DDoS protection policies.
• Reviewed and modified access control lists (ACLs) on switches and routers to meet PCI compliance.
• Performed LAN, DMZ, and Internet facing security scanning of mission critical devices on corporate and guest network for potential vulnerabilities, malicious programs and recommended appropriate actions.
• Evaluate and test next-generation firewalls, routers, intrusion detection, and security audit tools.

Confidential, Campbell, CA

Sr. Network Engineer

Responsibilities:

• Responsible for designing and securing a scalable and highly available multi-tenant virtualized data center for fast growing e-commerce businesses with over 10 million visitors a month in Linux/UNIX environment.
• Configured Cumulus Linux on whitebox switches; automation using python and ruby scripting on Chef.
• Spearheading re-architecture of network from L2/MLAG design to L3 CLOS spine-leaf design pushing ECMP/BGP down to ToR.
• Implementing SDN for traffic engineering and VxLAN overlay for virtual server mobility across 40GbE backbone core infrastructure.
• Setup Smokeping, Nagios, ganglia, SNMP, sFlow to track latency, top talkers, uptime, RTT, mem/cpu.

Confidential, Morgan Hill, CA

Sr. Network Engineer

Responsibilities:

• Spearheaded WAN migration from Frame Relay to LAN-to-LAN IPSEC VPN tunnels over Internet; improving reliability and saving $360,000/yr using Cisco ASA/PIX, Cisco routers, & Juniper firewalls.
• Designed a Cisco based VoIP telephone system with centralized Long Distance and Toll Free service, saving $420,000/yr installing Call Manager, Unity Connection, & Contact Center Express.
• Implemented a virtual "private cloud" strategy for guaranteeing availability of key systems, resulting in prevention of more than $300,000/yr in lost business due to system outages.
• Designed virtual infrastructure using VMWare ESXi/vCenter with multiple EMC NAS VNXe storage.
• Supervised, recruited, and trained Jr. Network staff. Go-to guy for help desk, networking issues.
• Spearheaded deployment & migration of Exchange 2003/2007/2010 server architecture.
• Designed policies and structure of Active Directory to conform with SOX audits.
• Designed and routed IPSEC VPN WAN sites to interconnect with MPLS sites.
• Administered LAN switches and routers, including setting up VLANs on Cisco switches.
• Designed WAN infrastructure to allow VoIP traffic travel over IPSec VPN using public T-1 circuits.
• Built VMWare ESXi vSpheres for virtual server farm to serve as high redundancy.
• Analyzed network traffic and performance using protocol analyzers/packet sniffers ie. Wireshark.
• Created and implemented QoS traffic shaping to prioritize voice traffic over data traffic with VPN IPSec tunnels on Cisco routers and ASA firewalls.
• Configured, tested and implemented VPN tunnels on Cisco PIX/ASA and Juniper firewalls for remote users requiring secure connections to remote LANs.
• Establish and maintain disaster recovery, backup procedures using Symantec Backup Exec
• Installed and secured WLANs using WPA/WPA2 for data encryption; deployed wireless access points.
• Managed and configured Active Directory, DNS and DHCP servers, and set up group policies on Windows 2003/2008/2012 severs.

Confidential, San Jose, CA

Network Security Engineer

Responsibilities:

• Designed and implemented network topologies based on clients’ needs and presented solutions on cost-saving methods in network management, and vendor equipment upgrades.
• Mapped out clients’ network topology and designed network diagram utilizing Visio team group discussions, presentations, and training for staff.
• Provided pen-testing techniques including dictionary and brute force attacks and scanned networks for security vulnerabilities in network design using NMAP and Nessus.
• Installed proxy servers to act as an intermediary to web servers and cache commonly accessed files to speed up service for web user client-server interaction; redesigned networks with DMZ.
• Installed and analyzed logs in Snort, an open-source network-based intrusion detection system, to track potential aggressive and suspicious activity across the network.
• Responsible for writing test cases based on client needs, executing test cases, analyzing results, detecting errors.
• Responsible for writing and reviewing the test plans and configuration manuals.
• Migrated multiple clients off Frame Relay to T-1/VPN IPSec architecture which significantly reduced operational/telecommunication costs by 60-70%.
• Provided 2nd and 3rd tier end-user support for clients running WinXP/2K workstations and laptops.
• Implemented spyware removal programs to extract adware/malware registry modifications out of Windows boxes, and trained users how to avoid and safeguard against Trojans, viruses, and worms.
• Responsible for troubleshooting and resolving operational issues of LAN/WAN infrastructures.
• Analyzed network traffic and health using protocol analyzers/packet sniffers Ethereal and Sniffer Pro.
• Tested PC performance and stability using benchmarking tools, tuning BIOS settings.
• Inspected customer mail systems for bulk e-mail messages. Responsible for identification and removal of spam mail on server platforms.

Confidential, Los Angeles, CA

Technical Support Manager

Responsibilities:

• Supervised and trained a team of junior technicians, setup schedules, and coordinated assigned tasks accordingly based on members’ skill level working with PCs & laptops, and resolving network issues.
• Implemented new ticketing system to prioritize users’ problems to perform more efficiently as a team.
• Created weekly logistics reports to analyze performance and efficiency of help desk-ticketing system.
• Ordered and returned new system parts to replace faulty products in desktop and laptops.
• Partnered junior technicians with senior technicians to perform on-site troubleshooting duties.
• Effectively implemented rewards based program to retain productive IT staff members.

Confidential

Technical Support Technician

Responsibilities:

• Provided 1st and 2nd tier end-user help desk support over the phone.
• Performed PC hardware and software troubleshooting and repair for PCs & laptops brought to desk.
• Assembled and set up PCs in dormitories, libraries, and department buildings for university staff.
• Tested memory and hard drives, recovered data files from damaged hard drives.
• Improved average repair time by introducing simple workflow procedures.

Confidential, Santa Clara, CA

Project Manager

Responsibilities:

• Contributed to a product site release from design concepts to launch, coordinating recommendations between Internet marketing research firm and IS department.
• Responsible for quality assurance testing of site development prior to launch to ensure proper functionality and consistency with graphical user interface.
• Completed detailed business and competitive analyses of products based on various industry reports.
• Developed vendor relations with telecoms, finance companies and graphic designers.
• Managed critical path to ensure shortest possible project duration.