SUMMARY:

Senior Network Professional / Leader with 20+ years of in - depth experience across Routing & Switching, Security, Data Center, and Wireless technologies. Career has spanned across verticals such as Financial/Banking, Consulting, Manufacturing, Oil & Gas, Government, Carriers, Military, etc.

KEY SKILL:

• Network Security
• Network Engineering
• Data Center Projects
• Network Architecture

PROFESSIONAL EXPERIENCE:

Confidential, Dallas, Tx

Senior Network Engineer (Lead)

Responsibilities:

• Revamp of Solarwinds Monitoring System for enterprise to include better triggering, alerting, and triage.
• Managed new Solarwinds Turn-Up and migration to include new poller engines, database migration, and device breakout by data center.
• Managed day to day tickets for adds, moves, changes in a very complex network. System used: Service Manager
• Design and Engineering of new compute zones/pods using Nexus Spine/Leaf 9K technology.
• Design and Engineering of new Nexus 7600/5K Core/Distribution DC solution.
• Aruba to Confidential WLC migration for large office with 200+ APs.
• Confidential ACS to Confidential ISE migration.
• Turn-Up of new sites using 4500 Series Router/OSPF/BGP, Catalyst 9300 Switching, Catalyst 9400 Switching.
• Managed offices using Catalyst 6800 Switching with closet FEX’s.
• Leader in Code Red Outages - Lead Troubleshooter/Problem Resolver.
• Security included: Check Point 15600 Firewalls.
• Managed 10Gig Metro Ethernet DC to DC WAN.
• Load Balancers: A10, F5, AppDirector
• Confidential ASR Routers: 1000x, 1002, 1006x, 9000 Series WAN/BGP/BGP Reflectors
• Ongoing PCI compliance Confidential every turn- Nipper Reports, Remediation, monthly.
• Large Distribution/Access Layer redesign - L2 to L3 redesign. Distribution Switching - C9500-40x, Access Layer C9400 Chassis’, C9300 Stacks.

Confidential, Dallas, Tx

Senior Network Consultant

Responsibilities:

• Design and Engineering using Confidential Viptela for SD WAN solution. Routers Used: VEdge 100, 1000, and 5000. AWS Integration.
• Design and Engineering of new Data Center: Nexus Spine Leaf design using 9500/9300 Switching. Two Confidential Solution (64 Switches).
• Design and Engineering of Split Company VRF: Multi MPLS clouds separated by Palo Alto Firewalls. Route leaking between companies, as required, for continued split activities, applications, etc.
• Azure Express Route for Office 365.
• New roll out of Z-Scaler for the Epiroc split.
• New roll out of InfoBlox for DNS, IPAM, and DHCP.
• New roll out of Solarwinds for Network Monitoring / Troubleshooting.
• New roll out of Confidential ISE for Wireless Authentication and TACACS/AAA.
• Design and Engineering of Confidential Wireless Enterprise solution using Confidential vWLCs, Confidential 5500x and 8500x WLCs.
• New remote office switching using Confidential Catalyst 9300 Stack Switches.
• Circuit Delivery for MPLS: Confidential & Confidential, Orange, IS, TelMex, and IS globally.
• Tufin Security Audit on 24 Check Point Firewalls

Confidential, Dallas, Tx

Senior Network Consultant

Responsibilities:

• Design/Install Nexus 3K/9K L2/L3 1/10/40 Gbps Physical LAN Infrastructure.
• Design/Install MPBGP/vxLAN Layer 2 WAN Environment using VMWare NSX.
• Design/Install BGP Dual Homed Resilient Internet Service Solution.
• Design/Install BGP/F5 DNS/Anycast multi-site Application Delivery Infrastructure.
• Design/Install of Next Generation Palo Alto Edge Firewall Solution.
• Design/Install of SDN/VMWare NSX East/West Zero Trust Firewall Solution.
• Design/Install 2x Confidential vWLC Solution with 75 1830 Series LAPs (FlexConnect)
• PCI DSS 3.2 Compliance for Credit Card (DMZ) devices.
• Install & Migrate 100s of firewall rules from ASA environment into Palo Alto Panarama envirnonment. Mutil-DMZ Environment in HA Deployment.
• Migrate ASA AnyConnect VPN Solution from ASA 5515x pair to ASA 5525x pair.

Confidential, Dallas, Tx

Senior Network Consultant

Responsibilities:

• Development of BOM for mid-sized Secondary Failover Data Center. Confidential Nexus 9K Switches (ACI). 10/40 Gigabit Redundant Backbone Infrastructure.
• ACI Discovery, Configuration of 3 APICs, in preparation for phase 2.
• Equipment: (40) Nexus N9K-C9336PQ, (80) N9K-C9372TX-E, QSFP’s, (6) Confidential ASR 1001x
• Configuration and rollout of Spine Leaf architecture Confidential the new DC.
• Integration into UCS Nexus 1000V switching environment to support VM Ware Server Farm.
• Technology: VXLAN, VPC, EIGRP, OTV, ACI
• Buildout of OTV Network to extend Layer 2 to support migration.

Confidential, Tampa, FL

Senior Network Consultant

Responsibilities:

• Worked close with the Network & Security Team to remediate all failing devices not passing compliance.
• Equipment: Confidential 2960x, Confidential 3750x, Confidential 4500x, Confidential Nexus 5500, Confidential 5500 Wireless LAN Controllers, ISE, Confidential ASA 5525x Firewalls.
• Conducted Nipper Reports against all devices to provide metrics on all devices participating in the remediation process.
• Documentation of findings and remediation.
• Worked with Network Team to schedule change management times for remediation.
• Provided Confidential latest IOS/OS recommendations for upgrades to meet PCI Compliance.
• Tools Used: Nipper, Solarwinds, Beyond Compare

Confidential, Dallas, TX

Senior Network Engineer

Responsibilities:

• Recommended best practice solutions and hardware for each individual project.
• Created BOMs, Visio Drawings, IP Schema, Project Plan, etc. for each project.
• Solutions included: Confidential - Nexus (3K,5K,7K,9K), Catalyst 6500, 3560x, 4000, 3900, Arista 7000/7100 Series.
• Technology: BGP, EIGRP, OTV, VXLAN, VPC, VDC
• Spine Leaf Designs & Implementations
• Cable Matrix, IP Reservations, HPNA
• Shutdown of Large Kansas City Data Center
• Build out and move of larage MZ (Main Frame Zone from KC to PADC)

Confidential, Detroit, MI

Senior Network Architect

Responsibilities:

• Gathered business requirements on some projects, specifically around the Data Centers. The Data Center design was based on future growth, new applications, and redundancy. Business projections were for 20% growth in personnel for each site.
• Assessed current Network situation and then estimated future Network needs based on the business projects of personnel growth by 20%, which required redundancy for each site and application data bandwidth.
• Project milestones were: Assess/Evaluate/Discover, Report to Customer, New Design/BOM, Delivery, First Day Support.
• Migrated the Data Center Network replacing the existing solution ( Confidential 6500 Core, 4500 Distribution, 3560 Access) with the new Data Center Network solution (Nexus 7K Core, Nexus 5K Distribution, and 2K Access. This was common in both Data Centers. Multiple VDCs used. VPCs used extensively throughout the solution. OTV between the Data Centers.
• Consolidated the Data Center Network by scaling the distribution Layer was scaled back from 24 4500s to only 16 Nexus 5Ks.
• Oversaw the build-out of Data Center of 2 new rows to support several new applications.
• Decommissioned the old Confidential gear in the Data Center.
• Installed/Designed Enterprise Solarwinds Deployment. Consisted of over 3000 devices being monitored worldwide. Setup visual/email/texting alerts to critical staff. Configured NOC Screens for real time monitoring. Configured daily/weekly/monthly automated reports. I was the administrator moving forward up until the project was over.
• Installed 2 Bluecoat SG900 Proxy Gateways Confidential the Internet Gateway.
• Responsible for complete evaluation of Whirlpool’s world-wide Network which consisted of Confidential and Juniper equipment. Gathered metrics using Netflow and Solar Winds. Conducted discovery using SNMP & IP to determine all the devices on each LAN.
• The complete Network design included all Layer 2 and Layer 3 interfaces, trunks, LACP connections, routing design, Network equipment used, bandwidth, port mapping and base configuration.
• Nexus 9K, 7K, 5K, 2K, 6500-E, Sup720-10G VSS, 4500X VSS, 3750X, 3560X, ISR G2 Routers, ASR Routers, 7500/5700/5500/ WiSM Wireless Controllers, 3602i Access Points, etc.
• Migrated 12 Confidential ASA Firewalls to Check Point 12000, 15000 Series.
• Created in-depth documentation of current site design and future design.

Confidential, Irving, TX

Network Solution Architect

Responsibilities:

• Responsible for gathering business requirements on this project.
• Spent 1 week interviewing the IT Department on the applications being used over the VPN, security requirements, and speed requirements specifically for NEC’s VoIP Soft Phone solution.
• Responsible for assessing current Network gear to understand the bandwidth and speed requirements for NEC’s applications to ensure current issues would be resolved with the new Network solution. Had to ensure that the new Network solution would meet the business projections of 10% growth in head-count over 3 years.
• Project milestones were: Review of current VPN Solution, Interview of Staff for application requirements, architecture of new Network solution, proposal of new Network solution, procurement of necessary resources, and then deployment in the QA Lab.
• Completely re-designed existing Confidential 3000 Series Concentrators, ASA 5510s, and Confidential VPN Client Profiles.
• New VPN Design included Confidential ASA 5525x Redundant Solution, Roll-Out Confidential Any Connect Client.
• Responsible for overseeing deployment of the entire solution for future migration.

Confidential, Dallas, TX

Network Architect

Responsibilities:

• Business Needs were: complete redundancy and 99.99% up time.
• Designed and implemented 2 redundant Data Center Solutions using Confidential Nexus OTV, 4 Nexus 7Ks, 8 Nexus 5Ks, 16 Nexus 2Ks, and multiple Nexus 1000v Switches. Project included complete VM failover between Data Centers.
• Installed and configured 2 Bluecoat S500 Gateways.
• Migrated Confidential ACE to F5.
• Migrated from 4 Confidential ASA 5520s to 4 Check Point 12400s.

Confidential, Washington, DC

Senior Network Architect

Responsibilities:

• Acted as advisor to Confidential Clients.
• Architected the complete revamp of Blue Cross Blue Shield Data Center out of Bloomington, MN.
• The design incorporated 12 Nexus 7018s, 184 5548s, 364 2048s and 64 1000Vs.
• Acted as Confidential Nexus SME and Confidential 6500/WiSM Architecture SME.
• Transformed MPLS to Metro Ethernet Solution for 4 newly purchased hospitals.
• Re-IP of 4 hospitals, EIGRP routing to the 4 hospitals.
• Refreshed Network cores using the Nexus 7Ks for the newly added hospitals.
• Migrated Confidential PIX and ASA Firewalls to Check Point 1100, 2200, 12000 Series Firewall Appliances.

Confidential, Austin, TX

Network Consultant

Responsibilities:

• After evaluating the misconfigured Nexus Data Center Network solution, redesigned the Nexus 7010 VDC configuration into 3 VDCs (Prod, Dev, DMZ).
• Upgraded Supervisor Cards in two 6509s to Sup 720 10G VS.
• Installed two HA WiSM v2 in the two 6509s.
• Migrated of 200+ Confidential 1142n/3602i LWAPs from 4 Confidential WLC 4404s to the WiSM v2s.
• PCI DSS Compliance program for all Network Devices.
• Authenticated (802.1 x authentications) the New Guest WLAN and BYOD WLANs using existing Confidential WCS.
• Created proper documentation of new environment utilizing Microsoft Visio and Word.

Confidential, Dallas, TX

Network Consultant

Responsibilities:

• Designed Layer 2 Data Center topology consisting of existing Confidential 6500 VSS Solution for the core and Nexus 5K/2K switches.
• Migrated 24 Confidential ASA 55xx Firewalls (NAT, VPN, and Policies) to Palo Alto Firewalls.
• Installed, net new, 10+ Palo Alto Firewalls Confidential branch locations.
• Palo Alto FW Management with Panarama.
• Design consisted of 10G Network for Virtual Environment using Confidential Nexus 5Ks and 2Ks. This was a multiple VPC environment.
• Architected the conversion of 50+ APs to LAPs going from AP to LAP/WLC 5500 Series in a VLAN/WLAN environment.
• Rolled out and utilized OpManager and Device Expert as Network/monitoring/backup tools. Also NetFlow Analyzer enterprise wide.

Confidential

Senior Network Design Architect

Responsibilities:

• Designed a failover/active/active Data Center using Nexus 7Ks, 5Ks, and 2K FEX (4 7Ks, 120 5Ks, 240 2Ks).
• Layer 2 VLAN extension over OTV between the two Data Centers for complete redundancy.
• Failover Layer 2 topology was composed of Confidential Nexus OTV.

Confidential

Network Redundancy Consultant

Responsibilities:

• Design/Implementation of failover Network for Confidential ’s Main Frame environment by extending Layer 2 over Metro Ethernet from DC to NYC.
• Confidential 3750X switches.
• Design/Implementation of FCoE connection from Brocade 8000 Series to Mainframe/ & uplink to Confidential 3750x Stack.

Confidential, New York City, NY

Network Integration Consultant

Responsibilities:

• Responsible for swinging the routes over, along with DNS, DHCP, WINS, and SNMP over to Confidential ’s Monitoring systems.
• This included standing up new Core Routers Confidential and moving subnets one by one.
• Migrated 1000+ routers from local IT Management over to Confidential Operations. (Used Confidential Works/Device Expert).
• Migrated 30+ Confidential WLC 4400 Series Controllers over to Confidential Operations locations.

Confidential, Houston, TX

Network Integration Consultant

Responsibilities:

• Migrated the Network from 38 Confidential WLC 4402s and 4404s over to 5508s, WiSM v2s. 1000s of LWAPs.
• Architected highly technical configurations Confidential L3 using OSPF, BGP, and EIGRP.
• Assisted with the CIP compliance program by writing compliance procedures, conducting device hardening, and conducting cyber vulnerability assessments.
• Replaced EOL Hardware for Large locations 6500 Blades, 4500s. 3750s, 3560s, 2960s, ASA Firewalls, etc.