SUMMARY

• An experienced Senior Network Engineer, Network Architect and Team Lead with a wide range of knowledge on enterprise networks, systems, security and cloud architectures.
• Proficient in designing, implementing and securing enterprise wireless, LAN, WAN, Datacenter, Service Provider, VPN, cloud, Cisco, Aruba, and Microsoft solutions.
• A proven and reliable leader with the ability to work well under pressure and adapt to dynamic, complex and unconventional client objectives.
• Exceptional written and oral communication skills with experience in drafting design, as - built, CONOPS, implementation, configuration, testing and training documents.

TECHNICAL SKILLS

Platforms: Microsoft Azure; Office365; Windows 2000/XP/7/8/10; Windows 2000/2003/2008/2012/2016 Server; Active Directory; Microsoft Management Console; Microsoft Network Policy Server (NPS); Microsoft SQL 2000/2005 Standard Edition; Cisco IOS; Juniper NetScreen 5.0.; JUNOS; Barracuda Networks; LiveWave FirstView; Cisco Wireless Control System (WCS); Cisco Prime Infrastructure; Cisco ASDM; SecureView.

Software: Microsoft Office 2000/XP/ 2003/2007/2010/2013/2016 ; Microsoft Exchange 5.5/2003 Standard/Enterprise Edition; Veritas Backup Exec. 9.0/10.0; HP OpenView 7.5; Symantec Antivirus Corporate Edition 10.0; Symantec Mail Security; Symantec Ghost 7.0/8.0/2003 ; VMWare VSphere; Cisco Clean Access Agent; Cisco NAC Agent; Cisco VPN client; Cisco AnyConnect; Cisco SSL WebVPN; Cisco ACS.

Technology: Aruba wireless appliances, including Aruba 3600 wireless controller, Aruba 7210 wireless controller, and Aruba Access Point (AP) 225, Aruba ClearPass, Aruba AirWave 8.0; Cisco wireless appliances, including the Wireless LAN Controller (WLC) 4402 and 5508, Wireless Location Appliance (WLA) 2700, Mobility Services Engine, and Aironet 1140, 1232, 1242, and 1250 Access points; Cisco routers, including 1800, 2500, 2600, 2800, 2900, 3600, 7200, 7600 and Aggregation Services Routers (ASR) 1000 and 9000 series, Integrated Services Routers (ISR) 3800 and 3900 series; Cisco access and multilayer switches, including Catalyst 2900, 3500, 3650, 3750, 4500, 6500 and 9300 series, Nexus 5000 and 9300 series; Juniper routers; Cisco firewalls and security appliances, including PIX 501, PIX 515, PIX 520, firewall service modules (FWSM), Adaptive Security Appliances (ASA) 5505, ASA 5540, ASA 5525, ASA 5545-X, Network Admission Control (NAC) v. 4.1.8, v. 4.5.1, and v. 4.7.2, Identity Services Engine (ISE) v1.1, v2.1, v.2.2, NAC Profiler v. 2.1, and v. 3.1, Cisco NAC Guest Server v. 2.0, ASA intrusion prevention (AIP-SSM), intrusion detection system modules (IDSM) and MARS; Palo Alto 3050 firewall; APCON tap; Gigamon tap; load balancers, including Cisco CSM and F5 Big-IP LTM; wired/wireless sniffers, Wireshark, Cognio, AirMagnet, Fluke device; Video teleconferencing (VTC), including Polycom HDX 7000 and 8000 series; Symantec Firewall Appliance v. 5660; Cisco Stealthwatch; Dell Blade servers; Gigabit Passive Optical Network (GPON); Netscout nGeniusOne, NetScout Infinistream; Riverbed 5050, Riverbed 6050, Riverbed Steelhead 7070.

Protocols: TCP/IP, BGP, EIGRP, OSPF, RIP, T1, DS3, OC3, OC-12, OC-48, OC-192, Frame Relay, MPLS, MP-BGP, L2 VPN, Pseudowire, VPLS, L3 VPN, VRF, Ethernet (LAN/WAN), 802.11 a/b/g/i/n/ac, HSRP, TACACS+, RADIUS, VTP, STP, PVST+, 802.1Q VLANs, SSL, IPSec, IKE, ISAKMP, 802.1x, EAP, PEAP, TLS, H.323, video over IP, voice over IP (VoIP), QoS, SNMP, NTP, NAT, PAT, EtherChannel, VPC, AES, 3DES, Suite-B encryption; SAML.

PROFESSIONAL EXPERIENCE

Confidential, Gaithersburg, MD

Wireless Network Engineer

Responsibilities:

• Team Lead of the Confidential Branch contractor staff, consisting of voice, video and data teams.
• Responsible for providing project and technical leadership in support of the FNS goal of building a modern collaborative, converged and secure network.
• Senior Network Engineer and SME for wired, wireless, security and cloud solutions, including WAN, Datacenter, Cisco ISE and Cisco WLCs. Architect, design, test and implement enterprise solutions to support the client’s voice, video and data team objectives.
• Support the client in move of its headquarters in order to design and build a resilient, secure and converged network. Technical Lead of revamped wireless network project to include integration with Cisco ISE for employee and guest access.
• Technical Lead for the network portion of deployment of first-ever cloud migration to Microsoft Azure and dual datacenter architecture for real-time replication. Provide recommendations and assessments for Confidential FNS on opportunities and risks associated with network initiatives.
• Troubleshoot support tickets and outages as issues arise. Provide Confidential FNS with daily, weekly and monthly reports on the status of Telecom Branch staff, projects and activities.

Confidential

Wireless Network Engineer, SME

Responsibilities:

• Lead wireless engineer and SME for wireless technology in support of an Confidential (IC) client seeking to implement classified communication over Secure Wireless.
• Responsible for designing, testing and implementing an enterprise-wide, Commercial Solutions for Classified (CSfC) compliant, Secure Wireless solution for the IC Client.
• Provide troubleshooting and support for existing Secure Wireless production pilot. Provide guidance and recommendations to project stakeholders and project team members on how to deploy a robust Secure Wireless solution.
• Interface with other IC partners and vendors through technical exchange meetings (TEMs) and forums to identify lessons learned and technical specifications.
• Lead 802.1x engineer and SME for the 802.1x project in support of an Confidential (IC) client seeking to implement 802.1x using Cisco ISE. Responsible for designing and testing a proof of concept for 802.1x/EAP-TLS using Cisco ISE.
• Develop enterprise project and functional requirement documentation and test plans. Provide guidance and recommendations to project stakeholders and project team members on how to deploy a robust 802.1x port-based security solution.
• Interface with vendors and other engineers through technical exchange meetings (TEMs) and forums to identify lessons learned and technical specifications.

Confidential, McLean, VA

Senior Network Engineer, Network Architect

Responsibilities:

• Senior Network Engineer and Network Architect supporting the Program Management Office (PMO) of a in a large, global IC service provider and enterprise environment.
• Provide network design and network architecture recommendations to key stakeholders and interagency representatives in support of the client PMO and other enterprise initiatives, such as WAN, LAN, CAN, network security, secure wireless, Confidential IT Environment (IC ITE) and IC Network (ICN) initiatives.
• Configure Cisco and Juniper routers and switches in production and lab environments, and implement secure technologies and protocols for both LAN and WAN Service Provider environments. Draft network design, CONOPS, implementation and test documents in support of the client’s next-generation network.
• Manager and Team Lead for Booz Allen Network Engineering team, providing performance appraisals, career guidance and project leadership to Network Engineering staff.

Confidential

Senior Network Engineer, Team Lead

Responsibilities:

• Team Lead for the Network Engineering team, focused on network design, best-practices, project implementation and new technologies.
• Technical Lead and Subject Matter Expert (SME) for the internal Booz Allen Network Access Control (NAC) project, deploying NAC to over 80 offices throughout the United States and overseas.
• Technical Lead for internal Booz Allen wireless projects, including security and capability enhancements. Design, implement and operate large, complex Cisco NAC infrastructure, protecting the LAN, wireless and VPN enclaves.
• Design and implement secure wireless architecture to the firm, while providing strategic recommendations on emerging wireless technologies. Provide design, strategy and security recommendations to engineering, mid-level management and senior management.
• Provide project leadership, including management of project tasking, creation of technical, testing and training documentation, and coordination between internal and external project-related support staff.

Confidential, Rockville, MD

Cisco Network Engineer

Responsibilities:

• Design, implement, integrate and maintain highly secure, fully redundant LAN, WAN and VPN architecture for the 2008 Presidential Transition Support Team and the GSA. Design, implement and monitor multiple site-to-site VPN tunnels and remote access VPN connections over Cisco ASA. Implement and monitor secure network access for local and remote users over Cisco NAC in-band and out-of-band.
• Monitor and respond to network security threats, using Cisco IDS, IPS and MARS. Provide Tier 3 and Tier 4 support for over 1200+ users on multilayer switching and secure firewall environment, using Cisco Catalyst 6506 and 4507 switches and Cisco ASA. Regularly interact with PTT and GSA personnel regarding new client requirements in a highly dynamic and fast paced environment.