SUMMARY:

• Experienced PMP, CCNP, ITIL, CASP, CCNP Security, CCDP, JNCIA and CEH certified Network Security Engineering Manager / SME; with a CCIE Security Written and over 20 years proved experience in directing all facets of Network & Cybersecurity Operations .
• Active TS/SCI/CI Poly cleared technical expert; with verifiable success in driving multimillion - dollar strategic large-scale IT portfolios and operations.
• He earned recognition for consistently producing quality deliverables within constraints.
• Adept at streamlining operations, in alignment with business process improvements; as well as applying the most cost-effective ROI Solutions.

AREAS OF EXPERTISE:

• Project Methodologies
• IT/CE Project Initiation
• IT/CE Project Planning
• IT/CE Project Execution
• IT/CE Project Control
• IT/CE Project Closing
• Network Design
• 24/7 Support Within Agreement
• IT Service Improvement
• Data Privacy
• Network Routing and Switching
• ITIL V3
• BMC Remedy
• Network Security Design
• Network Intrusion Prevention
• Cyber Security
• IT Service Operation
• Network LAN/WAN Engineering
• IT Service Strategy
• IT Service Design
• Cisco QOS
• Access Control
• Network Management Tools
• Performance Management
• Change Management
• Technology Integration
• Cryptography
• Cisco Firewalls
• Network Security Architecture
• Device Security
• Network Admission Control
• IP Routing & Services
• Perimeter Security

TECHNICAL SKILLS:

• Windows NT/ME/XP/Server/Vista/DOS/7/8
• UNIX Shell Scripting, Mac OSX, Linux, Red Hat, Junos OS, Foundry OS, Cisco IOS
• VLAN Creation, VLAN Trunking, VPNs
• HTML and Web-based Technologies
• Cisco LAN/WAN Engineering
• OSI Layer 1 through 7 Hardware & Software
• Cisco Unified Communications
• Telecommunications, OC 192, T1-T3 Installs
• End-user Device/Application Troubleshooting
• Cisco/Brocade/Juniper Routers & Switches
• SNMP Trap Forwarding
• Syslog and SDEE Forwarding
• GRE Tunnels, CBAC, ZBFW
• Cisco IOS Firewall, ASA 5500, PIX, FWSM
• Cisco, Brocade Juniper Security Protocols
• Circuit and Network Cutovers
• Safenet SMC I, Safenet SMC II
• Topology Design, Solar Winds & Visio
• Loopback Testing, TCP/IP
• Multi-layer Routing and Switching
• Database Integration and Management
• Multiplexing and De-multiplexing
• Hardware/Software Upgrade Planning
• Router/Switch Integration
• Fiber Optics, Coaxial Cable, Cat5, Cat6
• Network Deployment Management
• MPLS, VPLS, BGP, EIGRP, OSPF
• Enterprise Management Tools
• IP Version 4 (IPV4) and IP Version 6 IPV6, IP Multicast Routing
• ACLs, VPNs, ASDM, SDM, IPS, IDS
• Server, DHCP, DNS, Active Dir.
• Arcsite, Splunk, EIQ Securevue
• IP Management and Protocols
• KG 340,175, 175e, 194, 84
• CSU/ DSU Management, Putty
• ATM, LAN/WAN Management
• Switching and Routing Protocols
• Client Server Technologies
• IT Diagnostic and Troubleshooting
• IT Management and Consultation
• Network Security Architecture
• Network Security Engineering
• NetQOS, BMC Remedy, Cisco ACS
• Data Integrity/Disaster Recovery
• Brocade MLX Series Switches
• AAA, TACACS+, RADIUS

PROFESSIONAL EXPERIENCE:

Confidential

Architect, engineer

Responsibilities:

• Leverage technical expertise in providing superior hardware and software configuration management, baseline change control, provisioning, incident response, maintenance, and network management support for several high-performance, controlled access networks; leading over 10 network engineers
• Architect, engineer and secure all network equipment including: Cisco Nexus Switches: 2000, 3000, 4000, 5000, 6000, 7000, 9000; ASA 55XX, 5585-X, IDS, IPS, IPS SSM, IPS SSC, IDSM-2, Cisco Security Manager (CSM), ESA, WSA, SMA, ISE; Routers: ISR 1900, 2900, 3900, 2500, 7600, 12000, ASR 900, 1000, 9000, CRS-1, CRS-3, CRS-X; Catalyst switches: 2960, 3750, 3000, 4500/4900, 5000/5500, 6500, 6800, 2900, 3700, 3900; Brocade VDX 8770, MLXE-32e, Juniper SRX, T, MX, EX KG 340s, F5 Big IP, across many NOC/SOCs
• Partnered with federal agencies and departments in developing UCS LAN/WAN/Cybersecurity solution
• Provide LAN/WAN Security network engineering troubleshooting complex protocol issues on: firewall rules and policies, STP, Routing, VPN, WAE WAN PVLANS, VRFs, Vrf-lite, L2 & L3 traffic, WCCP, IPSEC
• Engineer the implementation of OSI protocols (IP, TCP, UDP, ICMP, BGP-4, NTP, SNMP, HTTPS, SSH, ect), VLANs, AAA, MPLS, 802.1q, 802.11g, 802.1x, EAP-TLS, PEAP-MSCHAPv2, NAT, Spanning-Tree, VTP, Netflow, EIGRP, IPSec / SSL VPN, GETVPN, AES256, VPC, VDC, DNS
• Designed and Configured NAC, Fortigate, RSA appliances, Websense, eEye, System Center Endpoint
• Implemented Cisco UCS deployment, configuration, and operated instance
• Operated and troubleshot network including troubleshooting Vmware applications and networking
• Designed and implemented solution including Nexus, UCS, B-Series, C-Series, SAN, FCoE, NFS, iCSI designed and implemented Quality of Service and Multicast on classified network
• Implements IP protocols, Cisco IOS, switching/ routing protocols
• Designed and implemented cloud and hybrid deployments for Federal clients
• Connected EMC, NETAPP, Symantec, VEAMM to core infrastructure and supported services
• Supported Servers Microsoft services and applications including DNS, DHCP, Active Directory, SQL

Confidential, Washington, DC

SR NETWORK ENGINEER

Responsibilities:

• Designed, Configured, Deployed, Secured networking equipment in support of the FBI next generation network program across many NOC/SOCs, including: Routers, Switches, Firewalls, Gateways, Protocols
• Provided direct supervision to the configuration of the network infrastructure and requirements for FBI sites across the United States along with Cisco routers ranging from 2811 routers to 7201 and 4509 Cat OS router and switch modules and 3600 and 3800 series routers with tunneling and sub interfaces
• Presented solutions focused on OSI layers 1-5. Designed, Engineered, and Secured on Cisco 831, 871, 1700, 1800, Cisco 2500, Cisco 2600, 2800 Cisco 3600, 3700, 3800, Cisco 7200, 7500 series routers along with Cisco 2924, 3500, 3600, 3700, 3900, 4000, 5000, 6000 series switches. Led the successful integration of Cisco Switch Service Modules, Cisco ASA 5500, Cisco PIX, and Cisco modules
• Exemplified technical skills in troubleshooting and deploying Access control servers, appliances, and industry standard servers as well as the content engine, content switch, load balancers, Taclane-10G
• Identified the correct version of IOS NX-OS that will run on network, implemented IOS NX-OS version changes, and performed IOS diagnostics. Adapted accurate variables in developing all configuration files for overt and covert sites, configured SAN, blade-switches, cluster computing, NFS, CIFS, Hadoop
• Designed all phases of Taclane KG-175, KG-175E and Taclane mini encryption units, including loading encryption keys as well as the routing protocols, port security, speed setting, and link redundancy
• Mentored and supported all fellow network engineers and trained the network engineers on more expeditious IT procedures, configured Citrix, RDP, NAT, SMTP, DNS, SYSLOG, TACACS, CHAP, PEAP
• Worked in partnership with Verizon in successfully migrating all circuits from old ATM network to new MPLS network on DS1 and DS3, OC192 circuits with KG340s, KG 530s, Cross Domain Boxes
• Guaranteed easy access of all end users to networks, including FBINET, JABS, SAMNET and VOIPNET by troubleshooting VLANS, RSTP, OOB, IPS IDS Juniper SRX 650 SSG -550M, Cisco MARS
• Made major contributions in the design and implementation of total network systems solutions
• Identified bottlenecks, monitoring and gaps LAN/WAN communications and implemented solutions
• Designed and integrated Brocade MLX 8, Opengear, CSM, Cisco 7000, ASA 5585-x, Solarwinds
• Configured ATM Routers and Switches, Multiplexors, Cisco Juniper SRX, VSRX, MX, T, PTX ACX
• Applied NIST 800-53 security controls, PMI framework, ITIL best practices and PPDIOO on programs

Confidential, MN

SR TECHNICAL PROJECT MANAGER

Responsibilities:

• Provided direct administration to network of numerous technicians in completing IT infrastructure projects across North, Central and South America
• Administered the proper functioning of all wiring infrastructure and that VLAN segmented Cisco 3750 and 2960 were properly working across many NOC/SOCs
• I ensured that phone extensions and T1 lines are functioning properly from the DEMARC
• Administered the completion of more than 200 project and service calls per month; supervising technicians across state lines and in other countries
• Provided continuous leadership and guidance to more than 20 technicians simultaneously; ensuring all projects are turned in on time and under allotted budget

SR IT PROJECT MANAGER

Responsibilities:

• Maintains, administers, and monitors networking devices (Cisco ASAs, Palo Alto IPS, VPN concentrators) to ensure protection of the CSD network; Performs duties to mitigate network security threats.
• Provides highly complex Tier II-III support for VPN, Firewall/IPS and WAN/LAN network.
• Performs thorough audit of Firewall rules and configuration, PTP connections, VPN connections, and make/implement best practice.
• Develops and deploys a Network Security Baseline and other security controls.
• Performs network diagramming of Firewall, IPS, including connected devices and remote office connections.
• Documents all the Firewalls connections and rules.
• Researches available products, solutions, and emerging technologies and participates in efforts to review products and secure solutions; Investigates, recommends and implements new technologies, security enhancements and purchases
• Provides training and knowledge transfer to FTE staff on network devices. effectively communicating with all levels of customers/users within an organization giving and following technical instructions planning and organizing work to meet goals and complete multiple assignments without compromising accuracy
• Played a pivotal role in achieving organizational goals by running upwards of 20 large scale IT projects simultaneously ranging from PCs to network applications and infrastructure
• Employed network monitoring tools and traffic management applications and designed network topology to monitor routing and switching using Solar Winds and Wireshark
• Oversaw the entire phases of capacity planning, including allocating storage, providing hardware and software redundancy, and planning future expansion of network systems