SUMMARY:

• Network/Security Administration: Proficient in LAN/WAN network design and implementation with CISCO equipment; Network support operation experience in Cisco, Foundry and Juniper environment running BGP, OSPF, EIGRP and IS - IS routing protocols; Proficient in LAN monitoring and troubleshooting; Proficient in network security design, implementation and operation using CISCO PIX, ASA, VSG and Checkpoint firewalls as well as SonicWALLs; Proficient in network security risk analysis and assessment; Also experienced in configuration and operation of IDS/IPS.
• Virtualization and Cloud Technology: Proficient in installing and using VMware vSphere and View to mass deploy virtual machines (VM) with the specific requirements from customers; Proficient in securing and supporting the virtualized environment with Cisco ASA and VSG and VMware NSX.
• System administration: Proficient in UNIX system administration of various platforms, HPUX, SUN Solaris, LINUX, as well as Windows workstations and servers; ability to install and upgrade operating systems, configure and port new software and TCP/IP services.
• Database Administration: Experienced in installation, configuration and administration of ORACLE on various UNIX platforms and Windows; also experienced in installation and configuration of INFORMIX and SYBASE on UNIX.
• Software Development: Involved in major software designing and coding; fluent in C, FORTRAN and shell script; experienced and trained on C++ and Java.
• Telecommunication: Experienced in installation, integration, testing and operation of major OSSs (Operations Support Systems) for telephony billing, provisioning and surveillance; and experienced in developing EMS surveillance models using NFM to monitor telecommunication devices.

PROFESSIONAL EXPERIENCE:

Confidential , Mclean, VA

Principal Security Engineer

Responsibilities:

• Design, implement, deploy and support virtual centralized security infrastructures, private Clouds, using Cisco ASA and VSG, Checkpoint firewalls, VMware NSX, VMware ESX server and RSA ACE SecuID token 2-factore authentication technologies to support EMC business units to securely access their data centers hosted at the third parties as well as segregated EMC data centers.
• Technologies integrated in the infrastructure also include VMware vSphere, VMware View, Windows Domain Controller, Catbird, RSA enVision, DLP, Skybox, Sourcefire IDS/IPS and Foundstone scanning tool.
• Deploy and manage firewalls (Checkpoint, ASA, SonicWALL and NSX) throughout the company footprint around the world.
• Work in a network security operation team on a call rotation to support the company security operations.

Confidential , Falls Church, VA

Sr. Staff Consultant

Responsibilities:

• While continuing supporting GNS security and DNS systems, took more responsibility in Confidential network security.
• Daily task includes using IBM ISS SiteProtector to monitor vast Confidential network, set up IDS alarm filters, investigate and resolve security alerts, in addition to routine tasks for network access control using RSA ACE and TACACS+ server and checkpoint firewalls.
• Also involved in initial installation and configuration of IBM ISS GX4002, GX4004 and GX5108 IDS/IPS appliances.

Confidential, Arlington, VA

Sr. Staff Consultant

Responsibilities:

• Planned, redesigned and implemented the network security system for GNS Data Communication Network (DCN), consolidating 5 PIX and 2 Checkpoint firewalls to one high available Checkpoint firewall cluster.
• The system provides VPN access from Internet through Nortel VPN Contivity and Cisco ASA as well as Checkpoint Firewall.
• The system also includes PKI infrastructure to use certificate authentication for some applications.
• Designed and implemented a web cache system to provide both inbound and outbound web services with NetworkAppliance’s NetCache Appliance using Cisco WCCP and SLB.
• Also as part of 14 member second tier support team, provided 24X7 support by rotating duty phone for the whole GNS DCN consisting of over 500 Cisco as well as some Foundry and Juniper devices in 100+ sites throughout the country running BGP, EIGRP, IS-IS and OSPF.

Confidential, Arlington, VA

Team Lead & OSS Engineer

Responsibilities:

• As GNS lab data team lead, responsible for managing a lab DCN consisting of 40+ CISCO routers and switches that provide LAN connectivity for the lab OSS servers and user PC clients as well as WAN connectivity to external systems; managing network security using two CISCO PIX firewalls and one Nokia Checkpoint firewall and providing dialup and VPN services for vast user community; and maintaining, upgrading and testing Lucent ATM/Frame switches.
• Also as an OSS engineer, worked closely with vendor, Lucent Technologies, and GNS production to upgrade and test on 20+ OSSs GNS lab.

Confidential, Chalfont, PA

Consultant

Responsibilities:

• As a consultant, worked for Bell Atlantic Global Networks in Arlington, VA to build a System Integration lab, which simulates the Bell Atlantic long distance network consisting of ATM and 5ESS switches, for software validation, trouble shooting and testing.
• As a member of the OSS team, responsible for installation, testing and operation of 20+ OSSs such as NFM, ConnectVU, Billdats, CSL, OneVision and Actiview, on HP9000 K and D series and SUN E series servers, SUN Ultra Sparc and HP B series workstations as well as NT workstations and servers.

Confidential, Greenbelt, MD

Technical Lead

Responsibilities:

• Worked on implementation of NFM (Network Fault Management) on HP, Sun and Tendam UNIX platforms to monitor telecommunication devices such as telephone switch, voice mail system and xDSL equipment.
• Job involved designing and implementing LANs for new service centers and supporting LANs that consist of client/server multiple UNIX platforms and Windows System using HP OpenView and Remedy AR trouble ticketing system.
• Job also involved software development such as interface between TNM and WFA, SNMP to TL1 translation and database development using MS Access and Oracle.

Confidential, Beltsville, MD

System Administrator

Responsibilities:

• Responsible for system administration of various platforms of UNIX servers and workstations (HP, IBM, and SUN).
• Also responsible for database administration of an Oracle database running on an HPUX server.

Confidential, Gaithersburg, MD

Consultant

Responsibilities:

• Provided technical support to a research lab at National Institutes of Health (NIH).
• Responsible for system administration, design, and improvements and management of Ethernet and FDDI LANs, and UNIX workstations.