SUMMARY

• I have about 16 years being a Voice Engineer and 25 years being a Network Engineer
• Configured the new ASA with all the tunnel - groups for the remote peers and the rest of the VPN configuration (crypto maps, ACLs, NAT, etc.). I then login to the remote ASAs via the outside interface. Most organizations allow SSH/https to their firewalls from specific management IPs at the main site.
• Created a tunnel-group for the peer IP of the new ASA. I then changed the existing crypto map peer IP to point to the new IP address. On the network routing core at the main site, changed/add an IP route for the remote site local subnets to point to the inside interface of the new ASA so all your local networks can properly reach the 400 plus remote sites.
• I have demonstrated over the years to be able to work on-site and remotely with IT Directors, Service Delivery Managers, Network Managers, CEO, COO, CIO, and other executive leadership team across the company including our customers in the field and to clients visiting for the day.
• I am MCSE, CCNA, CCNP and CCIE written certified I have experience configuring and troubleshooting Cisco network routers, switches and firewalls for medium and large size locations and enterprise at IBM, Confidential, Confidential, and Hess
• Information systems professional with over 23 years of technical experience in supporting functional integration, local area networks, protocols, operating systems, communication applications, configuring, and upgrading hardware/software.
• I provided Network design, and have the ability to troubleshoot and support related to VoIP with teleports and Stabilized and Un-Stabilized Antennas: Seatel Comtec and Spectrum Analyzers
• I have working knowledge of Sat ILEC providers like Satmex 5, Satmex 6, T-14, EMEA, and L, C, KU and KA band
• Managing and giving operational support to techs out in the field, offshore, and leading the onsite support team to provide local and global support remotely and by phone.
• Ability to interface with the business community with concerns issues, outages, and support escalations.
• Resolving production support issues, questions, and conflicts from support team and customers as needed to network monitoring like Solarwinds and CA Spectrum tracked metrics by running monthly reports out of the Help Desk application Remedy, Heat, HPSC, and Etc.
• Worked with managers and other co-workers and or outside personnel to coordinate server or other infrastructure projects and tasks to be completed.

TECHNICAL SKILLS

• MS Office 97/2000/2003/2007 , Windows NT 4.0/Windows 2000/XP/Vista/Windows 7, Active Directory, VoIP Cisco UnityAdmin and Call Manager 3.3-4.2-6.0, Redhat, MS Project, SMS 2.0, MSA Windows Back Office, Lotus Notes, Lotus 1-2-3- 6.x, cc: Mail, Microsoft Exchange 2000/2003/2008 , MS Communicator, LiveMeeting expertise, Go To Meeting, Citrix Metaframe v. 1.8 (thin-client), Solarwinds, Blackberry Server, Data Management, PBX Systems, Adobe 10, SMS 2.0, Outlook, GroupWise, Right FAX, Survive IT, Site Server 3.0, Track, SourceSafe, HEAT, Belarc Advisor, FrontPage Pro, Visio, GUI Front-end, Putty, Telnet, Ghost, Drive Image Pro, Wireless Point to Point, Night Radia

PROFESSIONAL EXPERIENCE

Confidential

Senior Network Engineer

Responsibilities:

• Used and implemented Cisco ASA to create ACLs, NAT, Routing, IPSec/GRE for customers.
• Lead and documented change controls for weekly network and firewall changes.
• I have configured and implemented of Cisco Duo, Cisco Umbrella, Cisco Firepower, Firepower Threat Defense, Firepower Management Console (FMC), Cisco Umbrella, Cisco ICE 802.1x
• Created SD-WAN solutions using VELO Cloud, Viptela, and Silverpeak implementation that is capable of combining cloud, security, and routing technologies also designed LAN to LAN of SD-WAN for continuous Reconfigured (HA) High Availability sites to client to use both circuits in a continual basis. I also used API automation directly and as part of integration testing to determine if they meet expectations for functionality, reliability, performance, and security. I have also used WAAS for Monitoring the Satellites and used Velo Cloud for monitoring and locating sites online and offline.
• I have configured and implemented Meraki Cloud based switches MS-220 8-24, MS-120 48, MS-225 24, and Meraki Firewall MX84, MX100, MX250, MX400 and MX450.
• I have Network Tetration real-time data center analytics, combines network and server sensors to simplify SDN, and delivers consistent, automated policy enforcement-enabling application segmentation across on-premises.
• Used TACACS, Puddy, CiscoWorks/NNM/Vitalnet/Vital QIP, Riverbed, NetScout for lost packets (nGenius)
• I have experience dealing with Site Surveys with what is there and what is not needed to standardize the site from WiFi installations to using air magnet and working with third party vendors to remote configuration with vendors.
• Telephony System Designs, I managed Avaya IPT/ VOIP nationwide and supporting remote clients.
• I have many years working with Confidential, Verizon, and Comcast turning up PRI’s, T1, T3, and OC3 and created disconnect orders to terminate service for Demarcs, POTS line, and 66 Blocks.
• Configured and maintained add/removes updates, and mobility extensions Confidential and Verizon mobility.
• Used Load Balancing, VLAN Trunking OSPF, RIP, IGRP, EIGRP, BGP, TCP/IP Routing, QoS, IPSec, GRE, HSRP/VRRP, NAT/PAT, and Protocols.
• I installed, configured, and implemented wireless standards through the use of APs/WAP and LWAPs throughout all NiSource nationwide for employees and visitors at locations, remote locations and used radius for user authentication for wireless and active ID key when coming across VPN. Also did full scale documentation for each existing or new configuration design.
• Design and implemented Cisco Wireless infrastructure for all locations 400 locations worldwide.
• Configured and installed the WLC 5508 and 2504 with Air LAP 1262N with all locations with to separate Vlans for Corporate users and Vlans for Guest wireless using air magnet to alleviate dead zones.

Confidential

Senior Network Engineer / Project Manager

Responsibilities:

• Documentation planning of new and future projects with project managers to complete project timelines
• Research and recommendations for Network Design, to new and existing hardware upgrades router and switch templates/configurations.
• I installed configured and implemented Palo Alto Firewalls PA-3060 PA-3020 and WF-500.
• I tested both Q-radar and Splunk one based for IBM and the other independent SIEM security provider.
• I prefer Splunk which captures, indexes, and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards, and visualizations. In a horizontal technology used for application management, security and compliance, as well as business and web analytics through our network
• I prefer to use Tenable which combines active scanning, passive network monitoring, and agents, providing greater coverage of assets and vulnerabilities and give a wide variety of detections for over many CVEs.
• I used Qualys a Web Application Scanning (WAS) for all cloud services like SD WAN Mereki and Aruba cloud services for automated crawling and testing of applications to identify vulnerabilities.
• Created and implemented a strategy for converting from 3DES to AES 256 at all 400 plus locations.
• I kept up with different Encryption & Hashing technologies; like MD5 Hashes, SHA-256, and Salting.
• Used and implemented Cisco ASA to create ACLs, NAT, Routing, IPSec/GRE for customers.
• Lead and documented change controls for weekly network and firewall changes.
• I have configured and implemented of Cisco Duo, Cisco Umbrella, Cisco Firepower, Firepower Threat Defense, Firepower Management Console (FMC), Cisco Umbrella, Cisco ICE 802.1x
• I used and decommissioned Extreme Network removing ERS5000 and ERS4000 switches and the X-series X430 and X620 and SLX routers bidirectional internal analytics path for data traffic ensures high performance analytics with no disruption to production traffic for improved operational efficiency, monitoring, and troubleshooting.
• Supported the trading the floor with online trading software to Market share software and the Customer used Bloomberg and Refinitiv online trading Software.
• I have working knowledge of performance of applications on a wide area network WAAS combines Wide Area File Services with WAN optimization inside of a router, accelerating TCP-based applications on any given network. Furthermore, adding AppNav which is a hardware and software solution that simplifies network integration of WAN optimization. It helps in provisioning, visibility, scalability, asymmetry, and high availability. So, in easier terminology WAAS is wide area application engine that work together to optimize TCP traffic over your network
• Created SD-WAN solutions using VELO Cloud, Viptela, and Silverpeak implementation that is capable of combining cloud, security, and routing technologies also designed LAN to LAN of SD-WAN for continuous Reconfigured (HA) High Availability sites to client to use both circuits in a continual basis. I also used API automation directly and as part of integration testing to determine if they meet expectations for functionality, reliability, performance, and security. I have also used WAAS for Monitoring the Satellites and used Velo Cloud for monitoring and locating sites online and offline.
• I have configured and implemented Meraki Cloud based switches MS-220 8-24, MS-120 48, MS-225 24, and Meraki Firewall MX84, MX100, MX250, MX400 and MX450.
• I have Network Tetration real-time data center analytics, combines network and server sensors to simplify SDN, and delivers consistent, automated policy enforcement-enabling application segmentation across on-premises.
• Design, implement, support and maintain firewall/security infrastructure, Intrusion Prevention Systems, and PCI environments.
• I also added SGT to all switches, routers, WLCs and WAPS in deploying 802.1x, and firewalls within the organization basically separating many groups in the organization to get to certain server apps they need to get to or deny their entry into the device….
• Maintaining documentation of PCI environments for use in internal/external audits.
• Installation of new IBM Standalone and Blade servers, Sun Servers, EMC, and VMware, maintenance, updates, and network architecture
• Installed and configured the use of over 200+ printers for client use in 47 different offices. I monitored the printer queues and monitored each specific MDF with SNMP in Solarwinds and CA Spectrum for monitoring.
• I have working knowledge of IP schemas for both IPV4 and IPV6
• I have multiple years’ experience configuring rugged Cisco CGR-2010 routers and CGS-2520 switches
• I have installation and working knowledge with VMware applications: vSphere with Operations Management, vCloud Director, and NSX.
• Installed and configured the Juniper Switches EX2200 and QFX3600 models
• Installed and configured the Cisco routers and Cisco Switches, and Nexus Series Models 7000 and 9000
• Design and implemented a Network Architecture Modeling structure
• Used TACACS, Puddy, CiscoWorks/NNM/Vitalnet/Vital QIP, Riverbed, NetScout for lost packets (nGenius)
• I have experience dealing with Site Surveys with what is there and what is not needed to standardize the site from WiFi installations to using air magnet and working with third party vendors to remote configuration with vendors.
• Telephony System Designs, I managed Avaya IPT/ VOIP nationwide and supporting remote clients.
• I have many years working with Confidential, Verizon, and Comcast turning up PRI’s, T1, T3, and OC3 and created disconnect orders to terminate service for Demarcs, POTS line, and 66 Blocks.
• Configured and maintained add/removes updates, and mobility extensions Confidential and Verizon mobility.
• Used Load Balancing, VLAN Trunking OSPF, RIP, IGRP, EIGRP, BGP, TCP/IP Routing, QoS, IPSec, GRE, HSRP/VRRP, NAT/PAT, and Protocols.
• Documentation planning of new and future projects with project managers to complete project timelines
• Research and recommendations for Network Design, to new and existing hardware upgrades router and switch templates/configurations user Spectrum analyzers and Agilent Network Analyzers PNA-X, PNA-L, PNA and ENA series network analyzers in the office, maritime, and field locations.
• I designed and implemented Cisco ISE/TrustSec deployments within 802.1X in an engineering capacity
• I installed, configured, and implemented wireless standards through the use of APs/WAP and LWAPs throughout all NiSource nationwide for employees and visitors at locations, remote locations and used radius for user authentication for wireless and active ID key when coming across VPN. Also did full scale documentation for each existing or new configuration design.
• Design and implemented Cisco Wireless infrastructure for all locations 400 locations worldwide. Configured and installed the WLC 5508 and 2504 with Air LAP 1262N with all locations with to separate Vlans for Corporate users and Vlans for Guest wireless using air magnet to alleviate dead zones.

Confidential

Senior Network Architect Lead

Responsibilities:

• Worked with Project Manager for an aggressive timeline to complete a go live of SAP Integration deployment worldwide to do a site to site survey to 388 sites Confidential standards.
• Dealing with many different ILEC’s worldwide from BT, Tel Mex, Lisa Communications, Telus, Confidential, Verizon, EMEA, and Asia Pacific for the many different cost provisions worldwide
• Determined if sites worldwide were to have a T1 or E1, and also if the will have a VPN connect with a local internet provider depending upon the cost and the duration of the contract.
• I have thirteen resources worldwide that report to me directly including three local for dealing with US issues with daily updates as the projects goes towards its go live date
• Working directly with Confidential for all US and Worldwide locations for MPLS and VPN connect point to point connectivity for a one time cost provision for all location in the US.
• Used Red Hat to provide a rapid-deployable tool for systems in remote locations in the gulf and worldwide to administer and manage a complex, geographically disbursement of desktop deployments from a single web-based console.
• I also used Red Hat Network administer to remotely update, group, deploy, and provision desktop systems. Whether it's 10 or 10,000 desktop systems worldwide.
• I made major improvements to everything, from OpenOffice and Firefox to networking, laptop support, peripheral support, graphics, and multimedia.
• Also to client installations can be finely tailored and locked down for simplicity and security for any task workstation for those who systems require performance and visualization standards.
• Design and implemented a Network Architecture Modeling structure
• Design and implemented and site surveys with Cisco Wireless infrastructure for all locations 850 locations worldwide. Configured and installed the WLC with Air LAP 1262N with all locations with to separate Vlans for Corporate users and Vlans for Guest wireless.
• Documentation planning of new and future projects with project managers to complete project timelines
• Research and recommendations for Network Design, to new and existing hardware upgrades router and switch templates/configurations.
• Designed new configurations per site being that every site is considered unknown until assessment is complete
• Created a minimum hardware requirement that is needed for every site
• Also worked with tools team to develop the SAP GUI platform for the clients in the field to push through SCCM for updates of SAP, Microsoft products, third-party applications, custom in-house line-of-business applications, hardware drivers, and system BIOS to a variety of devices—including desktops, laptops, servers, and mobile devices.
• I used NETQOS and Solarwinds to get information from remote sites worldwide
• Did site assessments for 388 sites to make the compliant to BHI standards
• Designed configurations for routers, switches, and symmetry commander for remote connectivity per site

Confidential

Senior Network Engineer

Responsibilities:

• Installed and configured the 3Com/Cisco routers and 3Com procurve switches and Cisco Switches
• Design and implemented a Network Architecture Modeling structure
• I used MS Communicator to communicate with associates throughout HP.
• I used all new HP Proriliant servers and blades using Microsoft server 2003 and 2008.
• Installed STK Clariion CX-600 as a multi-host fibre channel with capabilities of 128 hosts and HP-UX as host. STK tape silos, EMC Symmetrix, and Clariion Brocade switches and web tools, implemented full data back up procedure using Veritas Backup Exec, and troubleshooting the TSM (Tivoli Storage Management)
• Installation of new IBM Standalone and Blade servers, Sun Servers, and EMC and ADIC storage cabinets, VMware ESX Servers, maintenance, updates, and network architecture
• I used multiple vendors to get implementations competed and documented to complete the ticket.
• Used TACACS, Puddy, CiscoWorks/NNM/Vitalnet/Vital QIP, Riverbed, NetScout for lost packets (nGenius), Firecall, PIMS, ESM, and Passcalc.
• Telephony System Designs, I managed Avaya IPT/ VOIP and Cisco Call manager 3.3, 4.6, 6.0 across world continents with supporting remote clients..
• Configured and maintained add/removes updates, and mobility extensions. Also used Unity Admin for voicemail (TDM, VoIP, CTI, contact center)
• Used Load Balancing, VLAN Trunking OSPF, RIP, IGRP, EIGRP, BGP, TCP/IP Routing, and Protocols.
• Documentation planning of new and future projects with project managers to complete project timelines
• Research and recommendations for Network Design, to new and existing hardware upgrades router and switch templates/configurations.
• I installed, configured, and implemented wireless standards through the use of HP Procurve APs/WAP and LWAPs throughout all HP worldwide for employees and visitors at locations, remote locations and used radius for user authentication for wireless and active ID key when coming across VPN. Also did full scale documentation for each existing or new configuration design.

Confidential

Senior Network/ Desktop / Communication Engineer

Responsibilities:

• Remote and on-site support and network monitoring of satellite communication systems and voice and data networking equipment on offshore and land-based facilities.
• I installed and implemented tape back units on 16 offshore and 8 remote drilling locations. Worked with Iron Mountain to receive and pick tapes. I also restored files when needed for company men who need specific files restored when lost. I also scheduled weekly and monthly back-up tapes within each site.
• LAN/ WAN Architect for 8 global data centers and 7 Drilling platforms offshore and 15 remote locals across the globe.
• Deployed Maximo worldwide for Hess global initiatives
• Experience with a multitude of equipment so as Weatherford, Oceaneering, Cameron, Hydril, Kongsberg, L-3, Emerson Process, Raytheon, Honeywell, and Siemens.
• Talked with Project managers for upcoming projects and configured LAN/WAN environments as necessary. Also took existing configuration and upgraded them as needed to the project plan.
• Used AT&T Commerce to get Router and Switch hardware and cables. Also used Orange Business Services for some of my North America and overseas MPLS Clouds but mostly used Confidential .
• Researched and recommended LAN/WAN/MAN, to L3 to L4 to specific VLANS per group, VLAN Trunking OSPF, RIP, IGRP, EIGRP, BGP, to bandwidth utilization, configurations for router and switches to new Data Center as need for new building to cabling, to dealing with ILEC to MPLS, to fiber, to back office, and the bridge configuration from old building to new till everyone is moved.
• Successfully designed and rolled out Multicast infrastructure for delivering live video streaming across the MPLS infrastructure
• Took phone calls from the customer, tracking with trouble ticketing system using IBM Maximo Ticket Base system doing first, second, and third level support.
• Research and recommendations for Departmental handbook, to communications, software, and hardware upgrades to Support Manager.
• Telephony System Designs, I managed Avaya IPT/ VOIP and Cisco Call manager 3.3, 4.6, 6.0 across world continents with supporting 8000 clients. I did add/removes updates, and mobility extensions. Also used Unity Admin for voicemail (TDM, VoIP, CTI, contact center) Aruba Wireless.
• I used SCCM for updates of Microsoft products, third-party applications, custom in-house line-of-business applications, hardware drivers, and system BIOS to a variety of devices—including desktops, laptops, servers, and mobile devices.
• Ability to monitor, perform onsite and virtual coverage to 8000 users in the HESS Corporation Global area and charged according cost centers through VPN, and Citrix.
• Installed and configured the Cisco Switches, Jupiter firewall, and Cisco routers (puddy) TACACS. I also used CiscoWorks/NNM/Vitalnet/Vital QIP, NetScout for lost packets (nGenius), Firecall, PIMS, ESM, and Passcalc.
• Storage Area Networks (SAN), Enterprise Storage Arrays deploying storage with controller based systems such as EMC Clariion installing and configuring host bus adapters installing and configuring multipathing software EMC Powerpath knowledge/experience designing and deploying local/remote mirroring solutions for backup and disaster recovery with knowledge of SRDF, Truecopy, Timefinder, and Shadowimage.
• I installed and tested Patch Panels, Punch Downs, 66/110 b blocks, 110-patch panels.