SKILL:

Cisco IOS routers and switches, Cisco Nexus, Cisco Catos, Juniper routers, Netscreen firewalls, Arista switches, Force 10 switches, Foundary switches, Pix firewalls, Radware, Top Layer IPS, Tipping Point IPS, McAfee Intrushield, IXIA, ArcSight SIEM, NetForensics, DSL, VPN, BGP, OSPF, EIGRP, QoS, Confidential, Access control, NBAR, SNMP, TACACS, Windows, Redhat, Linux, UNIX, FreeBSD, Solaris, IT project consulting, Network Design & Support, capacity planning & additions, Out - of-band management, multi-vendor password updates, configuration management, automation of configuration verification, redundancy & DR planning, incident response, complex network troubleshooting, network documentation, security & vulnerability remediation, anti-DDoS, security device evaluation, test planning, lab testing, performance testing, report writing, APS (federal, Approved Products List), expired security clearance, TCP/IP performance tuning, troubleshooting tools, ping, traceroute, tcptraceroute, mtr, wireshark packet analysis, tcpdump, cron job, netcat, telnet. MTU, automation & scripting, Perl, Expect, C, Visual Basic, HTML, JavaScript, Ajax, Apache, SQL, PHP, Excel, Word.

PROFESSIONAL EXPERIENCE:

Confidential, Phoenix, AZ

Senior Network Engineer

Responsibilities:

• Performed network capacity planning, analysis, and remediation of capacity problems for Confidential
• Performed capacity related network changes to backbone routers and inside datacenters, on Cisco IOS, Nexus, Arista, and Juniper routers
• Primary point-of-contact network engineer for Confidential in 2014 for capacity & network readiness
• Upgraded network devices, added fiber links, added high speed modules, and upgraded code to support increased traffic loads for peak season
• Primary Engineer for day-to-day management of Confidential border ACLs; changes made in a secure and reliable way to protect Confidential resources
• Automated (Perl) the Confidential update & Confidential management processes at Confidential, for reliability, speed, and more functionality
• Configured & assisted in deployment of anti-DDoS protections
• Automated (Perl) reviews of Cisco IOS and Catos configuration files
• Automated (Perl, Expect) the process of updating passwords on over 3,500 multi-vendor network devices: routers, switches, Unix hosts, Cyclades, and wireless devices
• IT project consulting
• Requirements gathering, setting goals, working with time constraints
• Verified environment: power, backup power, cooling, rack space, floor plans
• Procured and installed network devices
• Network Design & Network Management
• Managed and tracked public and private IP address usage
• Configured out-of-band management: Cyclades, VPN
• Configured/added/removed WAN & ISP fiber links
• Configured VLANs, port-channels, and load-balancing
• Installed redundant & resilient network segments
• Validated & signed off on other engineers’ installation projects
• Documented procedures & lessons learned
• Participated in disaster recovery exercises
• Forecasted bandwidth utilization for application projects
• Security & Vulnerability remediation: SSH, Telnet, SNMP, uRPF, Null routes, Bogons, ACLs, password management
• SOX compliance
• Performance tuning: assisting server administrators with tuning Windows, Linux, and UNIX (Solaris) hosts for peek network performance
• Web design: created several minor but value added web based portals using HTML, javascript, ajax, and Perl
• Cisco IOS: Configured Cisco IOS routers and switches
• Installed Cisco IOS routers and switches
• Upgraded IOS code
• Replaced failed hardware (RMA)
• Dynamic routing, BGP, OSPF
• Static routing
• Route redistribution
• Configured SNMP polling, SNMP access lists
• Pulled data from device MIBs
• Extracted data from MySQL DBs using SQL query clients
• TACACS security
• Troubleshot IOS devices: packet loss, connectivity, routing, CPU, hardware failures, memory, errors, statistics, bugs, logs
• Cisco Nexus: Configured Cisco Nexus routers
• Installed Cisco Nexus routers
• Replaced failed Cisco Nexus hardware
• Dynamic routing OSPF
• Static routing
• Configured SNMP polling, SNMP access lists
• Pulled data from device MIBs
• Configured device security
• Troubleshot Nexus routers: packet loss, connectivity, routing, CPU, hardware failures, errors, switchport failures, statistics, bugs, logs
• Cisco Catos: Configured Catos switches
• Upgraded Catos code
• Replaced hardware
• Dynamic routing (with MSFC, Layer 3 hybrid)
• Static routing (with MSFC, Layer 3 hybrid)
• Configured SNMP polling, SNMP access lists
• Pulled data from device MIBs
• Configured device security
• Troubleshot Catos switches: packet loss, connectivity, routing, CPU, hardware failures, errors, switchport failures, statistics, bugs, logs
• Juniper: Configured Juniper routers
• Upgraded hardware, installed modules
• Dynamic routing, BGP, OSPF
• Configured device security
• Configured border Confidential (Firewall in JUNOS)
• Troubleshot Juniper routers: packet loss, connectivity, routing, CPU, hardware failures, errors, switchport failures, statistics, bugs, logs
• Arista: Configured Arista routers and switches
• Installed Arista routers and switches
• Replaced failed hardware
• Dynamic routing, OSPF
• Static routing
• Configured SNMP polling, SNMP access lists
• Pulled data from device MIBs
• Configured device security
• Troubleshot Arista routers: packet loss, connectivity, routing, CPU, hardware failures, errors, switchport failures, statistics, bugs, logs
• Force 10: Configured Force 10 switches
• Troubleshot basic Force 10 switch problems
• Foundary: Configured Foundary switches
• Troubleshot basic Foundary switch problems
• Configured VPNs, point-to-point
• Troubleshot VPN problems
• Configured BGP
• Troubleshot BGP problems, routing, neighbors, prefix-lists, large routing tables
• Configured OSPF
• Troubleshot OSPF problems, routing, adjacencies, cost preferences, type of route
• Troubleshot QoS on Cisco IOS, Cisco Nexus, and Juniper routers
• Radware: basic familiarity with Radware configuration and installation
• IXIA lab testing, configuration & troubleshooting
• IXIA lab testing, performance testing
• Troubleshot Windows configuration, connectivity and resource problems
• Troubleshot Linux configuration, connectivity, and resource problems
• Troubleshot UNIX, FreeBSD and Solaris, configuration, connectivity and resource problems

Confidential, Sierra Vista, AZ

Network Security Analyst

Responsibilities:

• Evaluated network security products in lab for the Confidential
• Approved products were placed on the federal government Confidential (Approved products List)
• IT project consulting
• Wrote test plans, in light of determining product compliance with Confidential regulations to include security, manageability, scalability, ease of use, ability to do what it claimed, and throughput performance
• Performed site surveys to determine environment for upgrades: floor plans, power, rack space, cooling, and to assess server migration status
• Provided technical assistance & configured devices on the DCL modernization project
• Lab tested the TLA2 regional security layer design
• Netscreen: Configured Netscreen firewalls
• Configured VPN, point-to-point, Netscreen to Cisco PIX firewall
• Configured VPN, host based, for OOB
• Troubleshot Netscreen, configuration, connectivity, IPSEC, errors, statistics, logs
• Cisco IOS: Configured Cisco IOS routers and switches
• Installed Cisco IOS routers and switches
• Upgraded IOS code
• Replaced failed hardware (RMA)
• Dynamic routing, OSPF, BGP
• Static routing
• Configured SNMP polling, SNMP access lists
• TACACS security
• Troubleshooting IOS devices: packet loss, connectivity, routing, CPU, hardware failures, memory, errors, statistics, bugs, logs
• Cisco Catos: Configured Catos switches
• Dynamic routing (with MSFC, Layer 3 hybrid)
• Static routing (with MSFC, Layer 3 hybrid)
• Troubleshoot Catos switches: packet loss, connectivity, routing, CPU, hardware failures, errors, switchport failures, statistics, bugs, logs
• Foundary: Configured Foundary switches
• Troubleshot basic Foundary switch problems
• Top Layer - Lab tested Top Layer IPS, for security, manageability, scalability, and performance
• Configured Top Layer IPS
• Wrote the evaluation report
• Tipping Point - configured Tipping Point IPS
• IXIA - configured IXIA packet generators
• Performed throughput testing using IXIA generated traffic
• Performed packet captures using Ethereal/Wireshark
• Configured PRTG monitoring of WAN traffic
• Wrote multiple low level DDoS packet generators in C
• Used Nmap to generate unwanted traffic including portscans
• Troubleshot network connectivity problems using tools: ping, traceroute, tcptraceroute, mtr, telnet, scapy, and netcat
• ArcSight - Lab tested ArcSight security information correlation product for, security, manageability, scalability, usefulness, correlation capability, and performance
• Configured ArcSight
• NetForensics - Lab tested NetForensics security information correlation product for, security, manageability, scalability, usefulness, correlation capability, and performance
• Configured NetForensics
• Troubleshot Windows configuration, connectivity and resource problems
• Troubleshot Linux configuration, connectivity, and resource problems
• Worked on Confidential classified projects, with Secret, and Interim Top Secret clearances
• Used Excel spreadsheets in reports

Confidential

Network Administrator

Responsibilities:

• Implemented Network security policies
• Updated the border Confidential for Camp Arifjan’s networks
• Cisco: Configured Cisco IOS and Catos routers, switches, and PIX firewalls
• Installed Cisco IOS routers, switches, and firewalls
• Upgraded IOS code
• Dynamic routing, BGP, EIGRP
• Static routing
• Route redistribution
• Configured SNMP polling, SNMP access lists
• TACACS security
• Troubleshot IOS devices: packet loss, connectivity, routing, CPU, hardware failures, memory, errors, statistics, bugs, logs
• Websense - troubleshot and provided basic configuration of WCCP and NetCache engine with Websense
• BGP - Configured and troubleshot BGP problems
• EIGRP - Configured and troubleshot OSPF problems
• Mac address port security, removal of unauthorized devices
• Troubleshot network connectivity problems using tools: ping, traceroute, tcptraceroute, telnet, and LANTest cable analyzers
• Troubleshot Windows configuration, connectivity and resource problems
• Troubleshot Linux configuration, connectivity, and resource problems
• Worked in high security areas. Secret security clearance
• Provided tier II troubleshooting for critical applications
• Used Excel spreadsheets in reports & IP address management

Confidential, Mesa, AZ

Help Desk Support

Responsibilities:

• Automation - Co-wrote a very large Perl script that automated the purchasing process at K2 (Karshi-Kahanabad) Airbase in Uzebekistan. The script had been used to process millions of dollars of base expenditures and was being used years after my unit left
• Automation - Wrote a commander’s log application in Visual Basic which was used by the base command and his executive officers to keep track of projects
• Web server - Installed and configured the first production Linux server in the SWA theatre.
• Web design - Created web pages with Apache, Perl, PHP, HTML, and javascript
• Troubleshot network connectivity problems using tools: ping, traceroute
• Configured and installed my first Cisco access layer switch, at K2
• Prior to IT training, I was trained in explosives and medical/respiratory therapy