SUMMARY:

• (10+) years of experience in Network Engineering / Network infrastructure / Industrial Control System.
• (5+) years of experience in Network Security enforcement: Implementing Secure Access and Threat Control Solutions, Edge Network Security Solutions and Network Risk Assessment.
• Experience in Network Security Appliances: ASA, ISE, ACS, IPS, IDS, and Palo Alto NGFW.
• Experience in Cisco Routers 1700, 1900, 2600, 7200, Cisco switches 1900, 2900, 3500, 3750,3850, 4500 and 6500 Catalyst switches. (configuration, troubleshooting, monitoring)
• Experience in virtual private network (VPN) Site - to-Site and Remote access VPN.
• Experience in configure and administrate Cisco Wireless controllers 5508 series.
• Experience in TCP/IP layered network protocols and technologies: HSRP, STP, RSTP, MSTP, VLAN, 802.1q, Ethernet IEEE 802.3, MPLS, IPv4, IPv6, RIP, RIPv2, OSPF, EIGRP and BGP.
• Experience in Network Security Technologies: VPN, PVLANs, Port Security, Intrusion Prevention and Intrusion Detection Systems, AAA Servers, RADIUS, TACACS+, Syslog. NAT, PAT, NTP, 802.1x, EAP, PEAP, WPA2.
• Experience in Network management and monitoring tools: SNMP, Syslog, WhatsUp Gold, SolarWinds, Wireshark.
• Experience in LTM load balance using F5.
• Extensive knowledge of IP addressing schemes and subnetting for large networks.
• Experience in MS Visio, MS Project, MS Excel, Word, and Power point.
• Self-motivated and responsibilities acceptor, capable to implement multitasks.
• Looking for new experiences and challenges.
• Ability to work as a team member. Experience in tasks and workload sharing and scheduling.
• Ability to handle stress and pressure. Strong communication skills and protocols.

PROFESSIONAL EXPERIENCE:

Network Engineer

Confidential, Houston, TX

Responsibilities:

• Network Risk Assessment.
• Project documents and third-party documents review: FAT, VEP, EPC, BN, LIMS, PSS, Vendors’ Hardware specification, Vendors’ best practices.
• Ensuring the achievement of redundancy of Confidential Experion Network. Testing failovers on FTE level and HSRP level.
• Log management using WhatsUp Gold, SNMP configuration and troubleshooting, logging from different network equipment and end devices.
• End devices security enforcement, antivirus installation management and update.
• Monitoring the performance of the overall network and network components (Switches, servers, workstations).
• The creation of configuration templets to be used to build the configuration files for each switch type (split switches, FTE switches, FGS switches, IPS switches, MODBUS switches) following Industrial Network Standards recommended by Confidential Experts.
• Configuring and testing the connectivity of Thin Client using RDP.
• Documenting, backups and restore for every device in the network.
• Updating operating systems for network devices (Cisco Switches IOS) and for end devices (Windows Server and workstations).
• Industrial Control System (ICS) network levels separation (L1, L2, L3, L3.x, L4) based on OPC, MODBUS and Cisco ASA Firewall.
• Design and configure HSRP for multiple VLAN subnetworks.
• Network Security Enforcement and Hardening, Port Security, Firewall Policies deployment and verification, GPS time server and NTP Setup, SNMP and WhatsUp Gold 2017 installation and verification.
• Installing Confidential Specialized Servers: Fault Tolerant Ethernet (FTE), Field Device Manager (FDM) and Experion Servers/Workstations.
• Implementing Factory Acceptance Test FAT and Site Acceptance Test SAT with the client representatives including: network redundancy, Servers, Workstations, Switches performance.

Confidential, Richmond, TX

Network and System Engineer

Responsibilities:

• Migrating Cisco ASA 5505 ASA network to Palo Alto PA3060 with all the required modification and policy mapping.
• Network Risk Assessment using RedSeal and NP-View.
• Monitoring and troubleshooting customer’s networks and insuring confidentiality, Integrity and availability of the secure end to end connection.
• Regular update operating systems and signatures for security systems (Palo Alto, Cisco ASA).
• Policy enforcement on Palo Alto and Cisco ASA 5520 firewalls.
• Tested Cisco IOS, IOS upgrades, configuration upgrades.
• Participating in pre-sell and post-sell technical overview for customers.
• Configure and troubleshoot issues within production networks running dynamic routing protocols.
• Configuring T1/E1 interfaces, and WAN connection.
• Troubleshooting and identifying VPN IPSec issues and Firewall issues.
• Providing network solutions for clients as bidding operation including network design, MS Visio drawings, book of quantity and pricing.
• Utilized McAfee to block internal and external malware, spyware, attacks.
• Performed network documentation and created disaster recovery plan.
• Designed configuration and layout of WAN to include IPT, Internet facing VPNs and wireless subnet.

Confidential

Network Security Engineer

Responsibilities:

• Insuring full accountability in installing and configuring new network for a client site.
• Configuration and installation of Cisco network devices (Switches / Routers / Wireless Controllers / Access points)
• Adaptive Security Appliance (ASA) Firewall configuration.
• Configured F5 load balancers, Cisco routers, switches, and firewalls.
• Full network performance test prior to customer acceptance report.
• Was responsible of the configuration and installation of multiple VPN sites using Cisco ASA 5505.
• Provided tier 2 and 3 supports to resolve technical problems.
• Network design and refresh of network security products such as ASA 5500 series, and 2800 series ISR's.
• Designed configuration and layout of WAN to include IPT, Internet facing VPNs and wireless subnet.
• Assisted and mentored clients and employees on the correct use of wireless encryption protocols. responsible for conducting feasibility studies on strategic and tactical plans.
• Regularly participated in team meetings with the IT, Application Development, and corporate company entities.
• High availability design and disaster recovery procedures to ensure business continuity.
• Designed a backup plan for the server farm to farther have an extra layer of security for disaster recovery.
• Facilitated regular penetration tests of network firewall and e-mail filter servers to make sure that corporate policy is enforced and adhered to.
• Analyzing traffic and packet captures to improve quality of service and security assurance.
• Installation of hardware and software, monitoring the system performance.
• Performed site surveys to identify gaps in system architectures, firewall policies, and domain services; as well as to verify compliance with established business standards.

Confidential

Network and System Engineer

Responsibilities:

• VSAT systems installation and maintenance (iDirect, iSite, Segovia, Tachyon and others)
• Network infrastructure installation including physical layer cabling (UTP, STP, Fiber, Patch Panel, MDF FDP).
• Designed, architected and implemented IP addressing schemes for TCP/IP networks.
• VoIP networks installation, devices setup and Cisco Call Manager configuration.
• MS Server 2003 installation, Domain Controller, Security Groups, Group Policy enforcement.
• Install and maintain Cisco Routers and Switches.
• Installing Wireless networks.
• System maintenance and update.
• Successfully designed and implemented a plan that improved the user experience in the usage of the Wi-Fi platform.