SUMMARY

• 8 years experience Network Engineer role on Cisco switches and Routers
• 5 years experience in Security Network Analysis
• 2+ years experience working with Active Directory domains.
• 2+ years IT and customer service support roles
• 6+ months Network in Military Medical Facility to include Army, Air Force, Navy
• Department of Defense ANACI (Public Trust) clearance
• Certifications: CCNP, CCNA Security, CCNA, SourceFire Expert Certification, CompTIA Security+, CompTIA Network + Currently working on Splunk cert
• Major strengths in planning, problem solving and communications.

TECHNICAL SKILLS

Operating Systems: Windows Server 2000/2003, XP, Vista, 7, Windows 10, Cisco IOS, ASA OS.

Protocols: TCP/IP, DNS, DHCP, SMTP, POP, IMAP,SSL,SSH, TFTP,FTP, 802.11,802.3,802.1q

Server: Exchange 2000/2003, Outlook, Active Directory, Splunk

Hardware: HP, Dell, IBM, Intel, Cisco Catalyst 3750X,3850 Cisco 6500 series, Nexus 7k 5k and 2k, F5 Load Cisco series,Cisco ASR edger Routers and Cisco 4100 Firepower with ASA. Juniper Firewalls

Wireless: Belkin, LinkSys, Dlink. 5500 WLC Cisco Aironet 00 series Aruba AP - 345 Controller 7240X on AOS 8X code

Security: Intrusion Detection, Intrusion Prevention, Firewalls, Symantec Vault, Ironport ESA SMA WSA, Solarwinds, 802.1x, Palo Alto, SourceFire, Palo Alto, Juniper, Splunk, CSM Cisco Prime, ISE Cisco ACS, DHCP Snooping, BPDUGuard, Root Guard, Radius, TACACS +, ASA cipher suite

Remote access: VPN Anyconnect, VPN site to site IPSEC, VPN Easy DMVPN

Utilities: Norton Ghost Drive Imaging/Cloning, Proteus (IPAM), Secure CRT

Virtualization: VMWare, Microsoft Virtual Server, Virtual Box

SAN: Dell, HP/Compaq, EMC

PROFESSIONAL EXPERIENCE

Confidential, Austin, TX

Responsibilities:

• Assisted Security architect in completing task in order to move from lab to production on Cisco Anyconnect VPN solution.
• Was able to performed critical troubleshooting steps in verifying a major issue that would affected thousands logging into east coast firewall.
• In P1 situation was able to coordinate actions in overnight emergency to proper stakeholders.
• Provided support in verifying multiple systemic and environmental issues with TAC.
• Configured and updated lab ASA to modify and test new software before moving it to production.
• Provided full support as stake holder for the Cisco Anyconnect VPN solution for thousands of users that were unable to connect to our network via VPN
• Responsible in monitoring all Anyconnect VPN nodes
• Provided weekly user reports, to determined rollout goals were met.
• Assisted in configuration efforts for our Linux clients on Anyconnect.
• Developed disaster recovery contingency plans for ASA controllers and Firepower Chassis.
• Created Splunk Dashboard to better understand baseline on the ASA including amount of connections amount of rejected attempts and where traffic originated using Geolocation features.
• Created and executed and emergency plan to replace expiring identity certificates and the trusted network portion of Anyconnect VPN
• Investigate network anomalies, breaches and provide monthly detail reports.

Confidential, Austin, TX

Network Engineer

Responsibilities:

• Assisting in the configuration and deployment of over 400 Cisco Catalyst 3850 throughout 11 state hospitals.
• Installed and assisted in multi-site deployments of Aruba 7240X AP controllers along with Aruba AP-345
• Was able to upgrades to 32 regional clinics by configuring and shipping 2960X switches and later performing cut overs for both circuit and VOIP services.
• Provided weekly bandwidth reports for all state Hospitals and all regional clinics.
• Monitored and maintained all AP connectivity issues to their prospective WLC and verified for known bugs and if necessary replaced them through Cisco TAC.
• Provided assistance in migration from MDF to cloud AWS services.
• Performed many maintenance procedures on Cisco 6500 and Nexus 7000, including swapping 10GB blades in an emergency or bad power supply on the Nexus 7000.
• Monitored all device down or power events that would occur in the network and was able to verify the root cause of the anomaly or event.
• Provided assistance to customer in making ACL changes in our ASA 5550 Firewalls.
• Assisted in attaching all services to the devices once they were online including ISE, Solarwinds, FTP, NTP and checked for discrepancies in the configurations.
• Through Cisco Prime I was able to mass configure changes all at once if a policy changed for any reason.
• Created Maps for Cisco Prime from areal views all the way down to floor plans showing were AP’s were set, along with thickness of walls window doors etc. that would interfere with the signal.
• Assisted in multiple P1 situations in which a Distro Cisco 6500 brought down many access switches along with our DHCP Bluecat server.
• Created Master inventory list for all switches deployed, to be able to track each and every node in the network.
• Monitoring and assessing proper certificate and posture when nodes plug into the network using ISE
• Implemented DHCP Snooping along with ARP inspections throughout our campus network.

Confidential, Austin, TX

Network Security Analyst/ Incident Engineer

Responsibilities:

• Analyzing packets triggered by security appliances to determine vulnerability and exploits and mitigate proper response for the customer.
• Provides quarterly Security network assessment reports to customers based on traffic, source, anomalies and severities.
• Monitors for fault conditions on managed devices such as Health and Welfare, VPN status, CPU, Interface, disk utilization and interface utilization.
• Assist in testing Cisco IPS signatures to test equipment prior to deployment on active devices.
• Proficient on the following network tools to include Remedy, Secure CRT, Splunk, Remedy, Cisco ACS and Citrix.
• Provided assistance in analyzing access-list to our ASA firewall.
• Monitored alerts for potential threats against the network attacks through IPS, Source Fire, Juniper and Palo Alto Firewall Appliances
• Compiled and delivered weekly/quarterly Customer Service Reviews for assigned customers.
• Investigated intrusion events and provided recommendations to customers.
• Graded incident tickets to ensure consistency and accuracy amongst peers on a monthly basis
• Acted as the customer’s point of contact for technical details once incident or change tickets were opened.
• Augmented Change Management team to perform activities such as IDS signature update testing, deploy signature updates to customer devices and baseline tuning.

Confidential, San Antonio, TX

Network Engineer

Responsibilities:

• Manages the daily operations of the LAN/WAN supporting SAMMC operations of 8000+ Nodes (currently rated most wired hospital of 2012)
• Installs and maintains LAN cabling and hardware on over 150 communication closets
• Performs maintenance of terminals, printers, communications devices, and supports the internal problem resolution of networked systems
• Assisted in deployment of fiber optic (from core switch to communication closet)
• Configured terminal servers, Cisco routers, and data switches
• Engage in special projects in mapping the Data Center with Microsoft Visio tool
• Provided support in the deployment of APC switches and battery backup
• Assisted in deploying Security measure and configuring ports to correct VLANS.
• Assisted in configuration of Cisco WAP for end to end connectivity
• Assisted in the deployment and configuration of Cisco 3750, 6950 series switches
• Proficient on the following network tools to include Remedy, Secure CRT, Solarwinds, Orion, Proteus (IPAM), Remedy,Cisco ACS and Active Directory.
• Provided assistance in analyzing access-list to our ASA firewall.
• Assisted in implementing IPS and IDS signatures to our border routers.
• Created SOP to implement DHCP Snooping and BPDUgaurd pointing outside our core switches.
• Monitored alerts for potential threats against the network attacks through IDM and Solarwinds