SKILLS & QUALIFICATIONS:

Platforms:

Cisco Routers: ASRs 1013's, 1000s, ISR 4300's,7206, 3900s, 3800, 3600, 2800, 2600, 2500, 1841, 871

Cisco Switches: Nexus 9k, 7K, 6509, 4948, 4500s, 3750, 3560, 3550, 2900

VIPTELA SDWAN: vEdge 1000, 2000:

MERAKI Switches: MV21, MR 42, MS210, MS250, & MS425 switch

Juniper Firewall: SRX1400, SRX1500

Juniper Router: MX104

Juniper Switches: EX4300

HP Switches: H121916E, Procurve 5412, 5406

Nortel Switches: 8600, 8100, 5510, 450

Nortel Routers: Advanced Remote Node, Passport Multi service 6400/7400

Enterasys Switches: C2, N3, N5

Load Balancers: F5 BigIP, Nortel Alteon 2424/3408, Citrix NetScaler -

Firewalls: 6500 ASA service module WS-SVC-ASA-SM, VPN Service Port Adapter (VSPA), ASA 5500 Series FW.

Wireless: Cisco WCS, Cisco 4402 Wireless controllers, Cisco Aironet access points (1130AG, 1240AG, Autonomous, LWAPP), ARUBA Wireless - 3400, 3200, and 2400 controllers, Aruba access points AP-105, AP-120, RAP-5WN, and RAP-2WG

WAN ACCELERATORS: RiverBed, SilverPeak, Cisco WAAS

Technologies:

Routing: TCP/IP, BGP, OSPF, EIGRP, RIP, static routing, route filtering, redistribution, summarization, route engineering

Switching: STP, VTP, Dot1q, Nortel IST, Nortel SMLT, advanced Ether Channel features, bridging

WAN: MPLS, L3VPN, mGRE, VRF-lite, T1, 3G, OC3/OC12/OC48/OC192, DS3, Frame Relay, ATM, S2S VPN, SSL VPN, DMVPN

Security: Cisco PIX, ASA

Load Balancer: F5 Big IP, Citrix NetScaler, Nortel Alteon 2424/3408

Misc: EEM, SPAN, RSPAN, advanced ACL’s, Rout-map, prefix-list, IP as-path ACLs, extended communities, SNMP, Syslog, NTP, DHCP, DNS, VRRP, HSRP, IP, Cisco ACS, Solar Winds, Cisco Works, WireShark, Avocent, UPlogix, NetScout TAP

PROFESSIONAL EXPERIENCE:

Confidential, Allen/McKinney, TX

Senior Network Engineer

Responsibilities:

• Design and configured CPE and PE MPLS remote site connectivity for Confidential Customers.
• Design and configured CPE and PE DMVPN remote site connectivity for Confidential Customers.
• Configure/Administer and troubleshoot Cisco ASA firewall. This includes S2S VPNs, ACLs, B2B VPNs Remote User Access with MFA for access.
• Administer Riverbed WAN Accelerators for Headend and Branch sites.
• Configured Citrix NetScaler Load Balancer to provide local and DR site Load Balancing. Configure VIPs using SSL, HTTPS, and HTTP protocols. Install Certs for SSL offloading.
• Configure LAN/WAN core Nexus 7K's, 5K's, and 2K's. This includes VPC’s, IP routing using EIGRP and BGP, Layer 2/3 VLANs, FEX ports for top of the rack network/storage switches.
• Configure Cisco wireless using Confidential authentication.

Confidential, COPPELL, TX

Senior Network Engineer

Responsibilities:

• SDWAN design and implementation using CISCO VIPTELA & Meraki Switches
• Design and architect MPLS Migration between Merging Company using BGP and EIGRP routing protocols.
• Design and configured end to end MPLS remote site connectivity.
• Configure/Administer troubleshoot Cisco ASA firewall. This includes S2S VPNs, ACLs B2B VPNs Remote User Access with MFA for access.
• Administer Riverbed WAN Accelerators for Headend and Branch sites.
• Configured Citrix NetScaler Load Balancer to provide local and DR site Load Balancing.
• Configure LAN/WAN core Nexus 7K's, 5K's, and 2K's. This includes VPC’s, IP routing using EIGRP and BGP, Layer 2/3 VLANs, FEX ports for top of the rack network/storage switches.
• Configure and Administer Juniper Firewall, Routers, and Core/Access Switches for XOME Data Center and Remote Sites. A subsidiary of Confidential .
• Design, configure, Implement and administer Aruba Wireless for subsidiary.
• Configure Cisco wireless using Confidential authentication for Corporate. This is for internal/guest users with both company and BYOD devices.
• Design, configure, implement, and administer Cisco Meraki wireless using cisco Meraki switches. This is part of Corporate roll out of SDWAN/Meraki Solution.
• Administer external DNS records with Confidential .

Confidential, TX

Sr. Security Vulnerability Engineer

Responsibilities:

• Analyze and execute on established vulnerability management existing program
• Coordinate and collaborate with leadership regarding technical vulnerabilities that have potential to impact enterprise-wide operations
• Execute patch and vulnerability management practices to prevent the exploitation of technical vulnerabilities that exist within the infrastructure.
• Apply knowledge of networking operating system, application and database vulnerability assessments on various information systems
• Conduct research on current vulnerabilities and exploits using integrated systems as well as publicly available, trusted resources
• Effectively plan and actively participate in meetings related the team’s areas of responsibility.
• Enforce corporate security and change policies on the operational aspects regarding systems monitoring
• Adhere to all Change Management policies, process, and procedures.

Confidential, ADDISON, TX

Sr. Network Engineer

Responsibilities:

• Overseer of MPLS WAN network connectivity between Data Center and remote sites.
• Test and turn up of new MPLS circuits.
• Configure Router and Switch builds for remotes sites MPLS connectivity.
• Design and architect MPLS Migration between Merging Company using BGP and EIGRP routing protocols.
• Design and configured end to end MPLS remote site connectivity.
• Configure Site-to-Site, B2B, and remote users access VPN using Cisco ASA 5500 series firewalls.
• Configure and troubleshoot Dell switches.
• Administer RiverBed WAN Accelerators for Headend and Branch sites.
• Administer Wireless Network using Aerohive wireless technology.
• Help Junior Network Administrators with any network related issues; provide direction and guidance when required.

Confidential, IRVING, TX

Sr. Network Engineer

Responsibilities:

• Overseer of MPLS WAN network connectivity between 3 Data Centers, (PHX, ATL, and EMEA)
• Configure Router and Switch builds for remotes sites MPLS connectivity. (Single threaded, Dual Homed - AT&T and Level 3)
• Design and configured end to end MPLS remote site connectivity.
• Configure Site-to-Site, B2B, and remote users access VPN using Cisco 6500 VSPA, ASA 5500 series firewalls.
• Performed MPLS WAN acceleration POC using Cisco WAAS, SilvierPeak, and RverBed technology.
• MPLS WAN connectivity; however, served as backup for Cisco ACE Load Balancer.
• Administer LAN core Nexus 7K's, 5K's, and 2K'.
• Administered and Configured HP H12 Enterprise switch. Configured HP Procurve 5412 & 5406 access switches.
• Mentored Jr. network engineer Assisted and bringing them up to speed with Networking Essentials.

Confidential, FT. WORTH, TX

Sr. Principle Network Engineer

Responsibilities:

• Design and configure VTI and DMVPN Tunnels for remote sites World Wide.
• Perform circuit cutover and turn ups for remote sites World Wide using various local ISP depending upon region.
• Design and configure network devices for Disaster Recover site at Confidential Colocation. The network devices included Cisco ASR1004, Cisco 3x 3750X, and Cisco ASA 5520.
• Coordinate installation of Disaster Recovery site which includes turning up Confidential OC12 MPLS circuit and OC12 Internet circuit.
• Configure VRFs for Nexus 7Ks, Nexus 5ks, and ASR1004 routers.
• Configure Load Balancing VIPs using Cisco ACE.
• Administer LAN core Nexus 7K's, 5K's, and 2K's.
• Administer Cisco ACE Load Balancers
• Administer Cisco SSLVPN AnyConnect Mobility Client version 3.0
• Administer Cisco ACS Sever version 5.2
• Troubleshoot various LAN/WAN issues, BGP, EIGRP, DMVPN, D-VTI, Confidential VPN, GRE Tunnels, and SSLVPN.
• Stabilize network operations by summarizing EIGRP routes from remote sites.
• Monitor network devices using SolarWinds monitor tools.
• Perform daily network troubleshooting as necessary using Wireshark NetScout Netflow..
• Routing protocols used BGP and EIGRP
• Help Junior Network Administrators with any network related issues; provide direction and guidance when required.

Confidential, FT. WORTH, TX

WAN/LAN Administrator

Responsibilities:

• Designed wireless backup network for over 750 remote Branch’s using all major carriers (SPRINT, ATT, and Confidential ), and used Embedded Event Manager (EEM) to minimize traffic across the wireless network during shop off hours.
• Design Confidential tunnel as the backhaul to the HQ from provider’s network and DMVPN tunnel to the Branch shops
• Re-designed OSPF areas in the Corporate LAN from one flat area to 1 backbone area and three adjacency areas
• Configured S2S VPN for B2B operations terminating on either a Cisco ASA or VPN router
• Configured remote access for Teleworkers and Contractors
• Perform circuit upgrades from 512K to T1 for branch locations.
• Perform Corporate Internet circuit upgrade from 30MB to 50MB with provider TW.
• Configured Citrix NetScaler Load Balancer to provide local and DR site Load Balancing for legacy IBM AIX servers
• Responsible for maintenance on all LAN devices including upgrading from existing Enterasys C2, N3, and N5 switches to Cisco 6500 - Sup 720, and 4500 - Sup VI switches. (Maintenance includes but not limited to IOS upgrade, LAN design/configuration, VLAN, HSRP configuration, Network segmentation, Break fix, QOS for Avaya phones)
• Design internal wireless network for corporate and guest users using Aruba 2400/3200/3400 wireless controllers and the Aruba 105 and 61Access Points. Maintain daily operation of these devices.
• Configure Remote Access Points (RAP2 & RAP5N) for teleworkers.
• Develop policies and procedures for wireless deployment for remote Branch locations. These policies define implementation standards, deployment guidelines, and security requirements.
• Monitor network devices with SolarWinds and add network devices to NCM as needed. Create Application Performance Monitors to monitor database and website response time.
• Maintain network documentation including creating VISIO drawings of entire network topology. These drawings represent the entire network in a logical, physical, and layer 3 topology.
• Identify and resolve LAN/WAN network issues using WireShark packet capturing software.
• Help Junior Network Administrators with any network related issues; provide direction and guidance when required.

Confidential, TX

Network Engineer

Responsibilities:

• Design and configure Remote WIRELESS LAN and S2S VPN solution for External/Remote Warehouse sites using handheld scanners
• Design and configure security solutions for External Warehouse using Cisco ASA Firewall
• Upgrade Core Switch’s Catalyst 6000 to C6500 with Sup 720’s
• Configure F5 Load Balancer for internet high availability and intranet web traffic
• Developed and implemented processes for auditing all device configurations enterprise wide to ensure standardization of configurations
• Replace or upgraded End of Life and/or End of Sale network device enterprise wide.
• Help prepare spreadsheet for renewal of Smart Net contract for all Cisco devices on network.
• Implemented Avocent ACS48 and 6000 terminal Server for remote management of network devices
• Make Recommendation for replacement or upgrade of LAN switches enterprise wide
• Configure Cisco 871 router for Company Teleworkers
• Maintain IOS refresh for all network devices
• Design and configure Wireless Access for Campus and Branch WLAN using Cisco 4402 controllers and depending on the deployment LWAPP/Autonomous AP

Confidential, Fort Worth TX

Network Engineer

Responsibilities:

• Performed fractional T1 line cut over and troubleshooting using the Nortel Advanced Remote Node and Passport Multi service 6400/7400 routers
• Configured Nortel Server Load Balancer for internet high availability and intranet web traffic using the Nortel Alteon 2424/3408
• Install and configured Cisco 6500 w/Sup 720’s for IDF, MDF, and Server Switches
• Install and configured Cisco 3750 with stack wise cabling for remote offices
• Migrated campus LAN switches from Nortel 8600, 8100, 5510, 450 to Cisco switching platform
• Audit all device configurations enterprise wide to ensure standardization of configurations
• Created and maintained Cisco IOS configuration standards for all Cisco devices enterprise wide
• Travel to remote sites for routine IOS upgrades and maintenance, Updated or closed network tickets using remedy software

Confidential, Irving, TX

Network Analyst

Responsibilities:

• Working in a NOC environment, monitor and troubleshoot ATM, Frame-Relay, PPP, and ISDN WAN connections using NETCOO1 reporting utility
• Upgrade IOS software on Cisco 2600, 6506, 6509, 3640, 3620, and 3750, to meet GNAST standards
• Configure or recovered from ROMMON Cisco routers and switches in the event of a Software/hardware crash
• Install new Cisco routers and switches in remote Citibank branches; perform operational checkouts (TAC/ACS, ACL's, SNPM traps, etc.) after installation
• Troubleshoot Tl, T3, DS3, OC3, OC48, and Packet over Sonet (POS) serial lines.
• Troubleshoot LAN/WAN connections and create trouble tickets using Virtual Tech ticketing system.
• Troubleshoot routing protocols, BGP, EIGRP, OSPF, RIP, and RIPv2
• Troubleshoot VLANS, EtherChannel HSRP, Port Fast, and MAC layer issues.
• Troubleshoot TASMAN 1001-3120 and Adtran CSU/DSU.
• Open TAC cases with Cisco if necessary
• Additional software use for monitoring and reporting is NETINFO, INFOMAN, L2MAC request, and NEAT.
• Create daily network outage reports for sights that are isolated and/or single threaded for upper-management.