SUMMARY:

• Seeking a challenging and responsible technical position as a Senior Network Architect /Senior Engineer/Implementation Manager (LAN/WAN) offering an opportunity to exploit my managerial and technical skills.
• Over sixteen plus years of progressive internetworking experience, Enterprise Network Management and Project Management experience, with fourteen years being Confidential the enterprise level.
• I have strong communication and analytical skills.
• I also possess real world skills with business continuity, network security and disaster recovery.
• I am skilled in providing security and risk assessment using syslogs or security network tools.
• I am also highly skilled in network troubleshooting, network implementation and network design.
• Proven ability to diagnose complex problems and underlying causes, perform analysis, and to identify effective solutions and alternatives.
• Proven ability to manage complex, high - impact projects, including cost, schedule, and risk assessment

TECHNICAL SKILLS:

Operating Systems: Windows XP, Windows Vista, Windows 7, Windows Server, Novell and mid-level Linux/Unix administration.

LAN technology: Ethernet 802.X, TCP/IP, 802.11 Wireless, Fast Ethernet, 10 Gig- Ethernet, FC, FCOE, VSS, VPC, VDC, Fibre Channel and STP.

WAN technology: PPP, HDLC, Frame Relay, ATM, and ISDN.

Protocols: RIP, IGRP, EIGRP, BGP, OSPF, STP and MPLS.

Network Hardware: Cisco (All) switches, Cisco Nexus (7k, 5K, 2K) switches, Cisco (ASR\ISR) routers, PIX\ASA Firewalls, and Juniper routers.

Network Security: Viastat/General Dynamics Confidential Type 1, IDS\IPS, Cisco Secure ACS, Cisco ISE, Cisco ASA 55XX firewalls, Cisco Mars, Checkpoint NGX65 firewalls, Juniper ISG 2000, SSL VPN, remote access VPN, site to site VPN, DMVPN, GetVPN, Flex VPN Operating Systems Hardening, 802.1X and Anti - Virus protection.

Network Tools: Ciscoworks, HP Openview, Solarwinds Orion, Cisco Security Manager, Wire Shark and protocol analyzers.

Network Design: The ability to design, implement and troubleshoot large networks with all routing protocols, STP, standard QOS settings, network redundancy, load balancing and security installations.

EXPERIENCE:

Confidential

Lead IP Engineer

Responsibilities:

• Implemented a Microsoft PKI solution to support IPsec tunnels authentication for Confidential solution.
• Tasked with creating a “Gray Network” to host PKI functions for a Multi-tenet Confidential solution.
• Tasked to lead the design/re-design, implementation and sustaining for Confidential (Mobile Secure Voice and Data travel kit) and remote gateways to the SIPR network. The solutions consist of ASA firewalls and Confidential routers creating a L2L IPsec transport for Confidential encryption between SIPR devices. This network is design for the executive level of the Confidential .
• Tasked to design a multi-level IP non propriety network to carry VOIP traffic to replace existing TDM voice network. I created a network design using Type 1 encryption running OSPF to create a multi-access any to any network to eliminate the need for gre tunnels. On the PT side of the encryption devices, I can utilize VLANs and VRF- Lite to create virtual IP security domains.
• Redesigned proposed a multi-level IP non propriety network to carry VOIP traffic to replace existing TDM voice network to utilize a flat architecture to achieve classification separation.
• Provided a very high level of strategic technical leadership for several areas of IT services including process improvement, enterprise architecture planning, and roadmap development.
• Mentor other staff in good network practices, network design principles, and learning goals.
• Participated actively in Institute change management practices (writing change requests, participating in change meetings, mentoring other staff in good change management).
• Lead or participated in technical teams investigating IT technologies.

Lab Lead Engineer

Confidential

Responsibilities:

• Responsible for right sizing the Unified Communication Lab to support Confidential Call manager 10.5 and 8.6. Main responsibilities include but not limited to: maintain work scope to eliminate or facilitate scope creep, manage timelines and customers’ expectations.

Confidential

Senior PMO Engineer

Responsibilities:

• Provided a very high level of strategic technical leadership for several areas of IT services including process improvement, enterprise architecture planning, and roadmap development.
• Mentor other staff in good network practices, network design principles, and learning goals.
• Participated actively in Institute change management practices (writing change requests, participating in change meetings, mentoring other staff in good change management).
• Lead or participated in technical teams investigating IT technologies.

Confidential, MD

Senior Network Operations Engineer

Responsibilities:

• Configured routers and switches for the deployment team to use for connecting remote sites to the network.
• Responsible for troubleshooting connectivity issues on the WAN an LAN.
• Responsible for updating firewall rules on a Confidential ASA platform.
• Installed and setup Solarwinds to monitor network devices and or network configuration management.

Senior Network Architect

Confidential

Responsibilities:

• Reported to the GS-15 to assist and managing several projects that included; Data Center Design and implementation identify QOS for Confidential, Network Management and Network Security.
• Standardized the switch and router Configurations using Confidential best practices for security, STP and QOS for Confidential Tele-Presence. The switch configuration adhered NIST security guidelines.
• Configured Nexus 5596UP for a fibre channel SAN solution.
• Identified 802.1x Solution (Cisco ISE) and tested in lab environment to success based on Confidential security teams criteria.
• Created BOM for HQ (CAT4500, CAT6500 and Wireless Solution) and for Data Center (Nexus 5k modules and Nexus 2K switches).
• Created a network design that allowed for the use of the VSS for HQ’s network and VPC for network redundancy and network load balancing using Nexus 5K and 2K platforms for the Data Center.
• Configured Confidential Prime LAN 4.1 solution for switch management, logging and configuration management.
• Created an 802.1X solution utilizing Confidential LMS Prime, VMware, Cisco ISE, Microsoft CA Server, DNS and RADIUS. The allowed for the use of 802.X as an authentication method to secure network access Confidential the switch level,
• Created a network design that allowed for the use of VPC for network redundancy and network load balancing.
• Also saved Confidential over $200k by re-using Catalyst 6500 in new HQ network design, eliminating the need for tacacs by using Radius on the Confidential ISE and by doing due diligence when selecting new HQ hardware.
• Evaluated Riverbed for wan optimization.
• Documented new network design by creating “User Guidelines” for Confidential equipment and Visio drawings to document network layout.

Senior Network Operations Engineer

Confidential

Responsibilities:

• Handled firewall request for the Data Center Enterprise on a Confidential FWSM multi-context platform.
• I worked with individual team members to expedite and streamline the process so the change request would be issued correctly the first time and if not work quickly to correct any errors.
• Handled VPC and port assignments for storage solutions in a Nexus 5548 and Confidential Nexus 2K environment.

Confidential, Hanover, MD

Senior Network Engineer/Designer

Responsibilities:

• Designed a lab environment that consisted of Confidential and Juniper equipment utilizing MPLS, VRF and VRF-Lite to mimic the production environment.
• Designed remote office installation using MLPPP for the Wan connections and VSS for the distribution layer infrastructure.
• Daily trouble-shooting of the Enterprise network.

Confidential, Washington DC

Senior Network Engineer

Responsibilities:.

• Wrote statement of work for the upgrading of the Confidential network devices to support IPv6.
• Wrote the Change Management Packet for the upgrade the Checkpoint Firewalls from NGX65 to NGX70. Based work done on actual lab environment equipment using exact copy of network database security policy.
• Upgraded ASA 5580 in a high availability configuration.
• Worked on the IPv6 address scheme.

Confidential, College Park, MD

Sr. Network Engineer/Architect

Responsibilities:

• Daily duties are to provide Tier III/ IV support for the Confidential enterprise network. The network consists of Confidential 6500 catalyst switches running STP, EIGRP, BGP and HSRP.
• Implemented and managed a Solarwinds Network Configuration Management Server to monitor network configuration changes and bandwidth.
• Created test VSS network to test the Virtual Switching System capabilities on Confidential Catalyst 6500 switches.
• Worked as Lead Network engineer for the Confidential disaster recovery exercise. Duties included creating a VPN network between the main campus and the disaster recovery site and support the system administrators in troubleshooting any connectivity or network issues.
• Worked with Voice over IP in implementing Qos\Cos for their Avaya equipment.
• Implemented the Confidential Mars 110 6.x for the Security team

Confidential, Fairfax, VA

Senior Network Engineer

Responsibilities:

• Created SLA procedure for Tiered environment.
• Redesigned STP switching protocol for a loop-free environment.
• Support Tier I and Tier II staff.
• Standardization of Catalyst 6500 switches configuration, working with STP, VTP, HSRP and EIGRP in a multi-switch environment.
• Designed and implemented the Primary, Secondary and Tertiary BGP routing paths configurations for the enterprise.
• Updating, configuring and/or implementing network tools such as HP. Openview, Cisco Network Compliance Manager and Confidential Secure.
• Problem resolution and root cause analysis of network problems.

Confidential, Oakton, VA

Senior Network Consultant

Responsibilities:

• Lent high-level support to Tier I, Tier II, Tier III and network development teams. Responsibilities included maintaining and upgrading 200 Confidential routers/ 70 Fore/Marconi switches in a wide area (ISP) ATM networked environment. This ATM network runs OSPF and BGP. Projects include upgrading router to Confidential IOS to version12.x, assisting with Confidential GSR12000\Marconi 4000 and BGP Route-map statements.
• (Lead Implementation Engineer) Implementation and Routing Design Engineer for a large scale (up to 1900 router and 70,000 remote access users) IPSEC VPN network. Implementation includes Confidential routers (w/3Des), Cisco VPN Concentrator and RADIUS configurations. Also responsible for IPSEC tunnel management, Network management and NOC staffing/.
• (Lead Implementation Engineer) Designed a gateway network 100+ sites for large customer that provided integration between two different telecommunications carriers and two different routing protocols. This design was critical for saving a large account.
• (Lead Implementation Engineer) Implementation and Routing Design Engineer for a medium sized OSPF/MPLS private backbone for customer to include Confidential version of MPLS AToM. Also responsible for NOC and network Management.
• Assisted NOC leadership team with staffing, future employee profiling and a segway program for career pathing and growth
• Worked with Sales team in a pre/post sales network design/implementation engineer. Help win over $500+ millions of new business in .
• Implementation and Routing Designs. Highlighted projects include: saving over $1.1 million dollars of the projects with BGP filtering saving resources on routers and created a tftp disaster recovery plan for the Fore/Marco switches.
• Developed a ATM lab using Confidential and Fore/Marconi equipment. Also Tier support on basics of routing with BGP and OSPF. Developed a simple MRTG intranet site.
• Created Lab demos to support pre and post engineering solutions.
• Worked on creating a standards and practice for new Enterprise Network Center (NOC). Created security measures and processes for existing equipment and future network installs. Facilitated the creation on NOC DNS, MAIL, TACACS+ and PKI security for network personnel.
• Created MPLS/VPN/IP Multicast network consisting of Confidential equipment to facilitate proof of concept for existing customers and future projects. Lead engineer in connecting customer WAN to TEST WAN for creation and testing of customer application across MPLS (w/Multicast) enabled BACKBONE.
• Designed Solutions for IBGP with load sharing, VPN implantation and Management on Confidential platform, Websense implementation and solutions for private line management.
• Configured 6PE routers for Pilot IPV6 government customer program utilizing Confidential equipment.
• Developed a multicast lab environment using Confidential equipment testing dual home failover scenarios.
• Assisted in the configuration developed of a Private MPLS network utilizing CCC using Juniper M-series equipment.
• Cisco pseudo wire implementations (L2VPN and L2TPv3)
• Design and implementation of a Dynamic Multipoint VPN (DMVPN) AES encrypted management network.
• Design and implementation of a Dynamic Multipoint VPN (DMVPN) AES encrypted network with Multicast.
• Design and implementation of an IPSec over GRE with AES encrypted network with Multicast.
• Design and implantation of a Group Encrypted Transport VPN (GetVPN) AES encrypted network with Multicast.
• Design and implementation of a Confidential PIX-to-Pix point to point IPSEC network.
• Security assessment and compliance testing for Enterprise Management NOC and customer contracts.