PROFESSIONAL EXPERIENCE:

Confidential

Data Center Network Implementation Engineer

• Responsible for migrating systems from Cisco’s legacy datacenters to new ACI leaf and spine, fabric path datacenters.
• Worked with Nexus 7010, 7018, 6001, 5548P, 5596UP, 5020P, 3132Q, 3172PQ, 3110PCV, 3548P, 3048TP, 3064PQ, 1000V, UCS - FI UP, Catalyst 9300, 6807, 6509V-E, 6506, 6503, 4948e, 4900M, 4510, 3560, 38xxStack, 37xxStack, 29xxStack, ACE and Netscaler physical and virtual load balancers, and ASA5585 L3 and transparent.
• IP management, Service Now, Science Logic, Splunk, Python and Perl scripting, Bash, DNS, GSLB, GSS, Com Servers OOB IOS-3945.
• Routing EIGRP, BGP.
• Switching spanning tree, fabric path, VXLAN, and vPC.
• ACI configuration and troubleshooting: VRF, Tenants, Bridge Domains, and Access Policies.

Confidential

Network Engineer

• Senior Network Engineer for East Coast Network Engineering. Territory includes 1600 Circle K and Pantry store sites, 1 co-locations, 2 datacenters, 2 corporate headquarters, and 8 regional offices.
• Performed network reconnaissance of all facilities. Identified and documented all network systems.
• Design, implementation, and documentation of Circle K acquisitions and their integration into existing Circle K North American network.
• Designed, provisioned, configured, and L3 support of company AVPN/MPLS, Internet and IPsec VPN, and PTP networks.
• Project lead engineer on successful corporate HQ facility relocation.
• Level 3 network support of 6000 remote sites. Troubleshooting and remediation of all network issues.
• SolarWinds Network Performance Monitor, NetFlow collector.
• SolarWinds Network Configuration Manager. Responsible for all network configurations and device backup. SOX and PCI compliance monitoring.
• Remedy Change Management compliance.
• Hardware configuration and support of:
• Firewalls: Cisco ASA, FortiGate 620B, Palo Alto PA-5050.
• Routers: Cisco ASR1000, Nexus 6001 and 1921, Viptela vEdge1000, Nortel/Avaya, Arista, Dell OS9
• Switches: Cisco 3500, 3700, 3900, Nortel/Avaya.
• Appliances: PRTG monitoring and maintenance, Netscout LinkSprinter and LinkRunner, VSS Aggregation Taps, Nortel WLAN Security Switches access points, FortiNet application of Unified Threat Management, FortiClient VPN with Multi Factor Authentication (DUO).

Confidential

Network Engineer

• Network build out and support of IBM Operation Center for IBM Watson.
• Network build out and support of Watson customers.
• Configuration and support for Cisco 5545 and 5585 series ASA’s and Juniper SRX240h firewalls running JUNOS, Cisco Nexus 56128P, 6001, 3172PQ switches, and Cisco Nexus 2248 TP and PQ Fabric Extenders (FEX) 10g and 40g, in a MPLS environment.
• MACD, Script and apply customer requested firewall rules and routing.
• On Call after hours NOC, troubleshooting of Watson network issues. Layers 1-4, IPsec VPN tunnels, WAN circuit issues, Cisco Aironet 2600 series AP’s and 2500 wireless controllers.
• Responsible for inventory and shipping of IBM Network Kit to major IBM sponsored events. I.e., The Masters, US Open (golf and tennis) Championships, French Open, Wimbledon, Australian Open.
• Govern by ITIL network best practices.
• Change Management compliance: Remedy and SNOW.

Confidential

Security/Firewall Architect - SME

• Work with government agencies on network and security designs to support their network migrations into the DHS data centers. Beginning to end project involvement with agency migrations.
• Enforced DHS security policies. Wrote agencies firewall rules documents for Federal approvals.
• Deployed, configured, and maintained Cisco FWSM’s, Cisco 5525, 5545, and, 5585 SSP-20 and SSP-60 ASA’s, multi-context in transparent and routed modes, in a complex MPLS environment.
• Configured Cisco Nexus 9000 series routers.
• Configured and maintained Palo Alto 7000 and 3000 series firewall/security appliances.
• Configured and maintained F5 LTM’s and GTM’s (load balancer/traffic manager).
• Troubleshoot security/firewalls issues.
• Provided global services (tools environment) to government agencies. Network monitoring, SNMP, NTP, syslog, email, TACACS, IPS, ACS, Cisco Security Manager (CSM), etc.
• Change Management compliance: Remedy tracking application.

Confidential

Sr. Network Engineer

• Provided successful design and implementation of disaster recovery site. Location has been leveraged and is now a redundant data center.
• Redesign of core network.
• Designed, implemented, and documented new Extranet DMZ network; MPLS multi-vrf, ATM IMA, with eBGP, and IPsec encryption for PCI compliance. IOS Certificate of Authority servers. Customers and vendors aggregated at main data center and DR.
• Implementation of Gigabit Ethernet backbone between redundant data centers.
• Responsible for maintenance of enterprise data and VoIP network providing level 3 support.
• Deployed Cisco 7206VXR, 3845, and 2811 routers.
• Deployed Cisco 3560 and 6509 and 6513 switches with redundant MSFC’s.
• Implemented and administered Cisco ASA and PIX firewalls.
• Deployed Cisco ACE and GSS load balancers.
• Replaced Cisco 3005 VPN Concentrator with ASA5520 w/ VPN Plus licensing for 200 Cisco VPN Client users.
• Solarwinds NPM, Netflow collector, configuration management.
• Managed Websense security appliance.
• Replaced Nokia Checkpoint firewalls.

Confidential

Network Engineer

• Designed, proposed, and built Network Operating Center for regional area, 18,000-customer base, providing Internet, dial-in, and dedicated circuit access to, Multiple Listing Service, real estate database.
• Designed, proposed, and executed migration into private ISP providing Internet access and Email services.
• Composed and enforce Confidential Inc. Corporate Security Policy including design and configuration of Cisco IOS Firewall, Cisco PIX firewall (6 interface including failover bundle), Cisco NetRanger Sensor, and CSPM Intrusion Detection System (IPS, IDS).
• Implemented RADIUS authentication, authorization, and accounting servers.
• Implemented VPN services, including encryption and key exchange, for branch offices and partnerships.
• Designed and built corporate data infrastructure. TCP/IP
• Designed, built, and maintain 30 branch offices providing Internet and remote connectivity to enterprise services.
• Managed customer relations and quality control of all technical support and help desk personnel and services.

TECHNICAL SKILLS

Firewalls: Cisco ASA, PIX, Palo Alto, Checkpoint, FortiGate, Juniper, Sophos, Sonicwall.

Cisco Routers: 800, 900, 1600, 1700, 1900, 2500, 2600, 2800, 2900, 3500, 3600, 3700, 3800, 3900, AS5300, 7000, 7100, 7200, 7300, 7400 series routers.

Cisco Switches: Nexus N9k, N7k, N6k, N5k, N3k, N2k, N1k, 400, 1200, 2800, 3000, 3100, 2900, 3500, 3550, 3750, 4000, 4500, 5000, 5500, 6000, 6500, series switches. PPoE, Cat OS and IOS, Native and Hybrid modes. NX-OS.