SUMMARY

• Strong leader with demonstrated ability to work effectively with groups and individuals at all levels and in all IT functional areas. An accomplished Network and Security Engineer with over fifteen years diversified experience in Information Technology, customer service, network support, network design, network and cyber security with extensive knowledge of Cisco Appliances and Microsoft Servers.

TECHNICAL SKILLS

• Cisco Routers
• Cisco Switches
• Cisco Firewalls
• Cisco Wireless
• Cisco PRIME
• Cisco GSS and CSS load balancer
• Cisco IPS
• Cisco Security Agents (CSA)
• Cisco ISE
• Cisco Ironport WSA and ESA
• Cisco SourceFire
• Cisco VOIP (CUCM
• CUC
• CUCCX)
• Blue Coat Network Appliance
• Aruba Wireless Network
• Airaya wireless Bridge
• F5 Load balancer
• Packeteer appliance
• Riverbed WAN accelerator
• SilverPeak WAN accelerator Tipping Point IPS
• Checkpoint and Sonic Wall Firewalls.

PROFESSIONAL EXPERIENCE

Confidential, Irvine, CA

Sr. Network Analyst

Responsibilities:

• Responsible for managing and supporting the company Local and Wide Area Network consisting of Cisco Routers, Nexus and Catalyst Switches, Cisco VoIP and Wireless infrastructure in addition to security appliances consisting of Cisco ISE, Zscaler proxy’s, Checkpoint and ASA Firewalls.
• Successfully completed multiple projects including refresh of end of life switches with newer model switches, Reconfigure and update wireless infrastructure and provide High Availability redundancy, Expand the network infrastructure to new buildings, and work with vendors to replace old Fiber cable infrastructure throughout the campus. Interface with vendors and telecom to upgrade DIA and MPLS circuits for corporate building and several remote warehouses and offices.
• Effectively work with networking team in PA and Germany to migrate MPLS circuit to SDWAN using Velocloud appliance.
• Complete VoIP migration project by working with network and telecom team to migrate VoIP system from Avaya to Cisco UC system.
• Perform project management in building the Tustin Warehouse Network Infrastructure. The project consist of procuring network and peripheral devices, work with vendors, resellers, facilities, and telecom to build the MDF and several IDFs. Also responsible for the design, configuration and installation of the network gears and connecting the warehouse to the MPLS network.
• Improve network security by utilizing best practice and maintaining documentations of security policies, effectively work with validation team to modify and update validation documents for LAN and WLAN infrastructure for the corporate and remote offices.
• Conduct in - depth technical analysis of all systems, including the governance framework, architecture and disaster recovery and business continuity, deliver gap analysis and recommendations to attain 99% uptime.

Confidential, Irvine, CA

Sr. Network Engineer

Responsibilities:

• Lead a staff of five engineers and support over two thousand end-users across local and global locations
• Manage the company Network, Systems, and Security Infrastructure
• Manage Virtualized Enterprise Servers including Active Directory, Domain Controllers, File Servers, DNS, DHCP, MS Exchange Servers and Barracuda backup systems
• Manage all Network and Security appliances including Cisco Routers, Switches, Firewalls, Meraki Wifi, Umbrella, VoIP, ISE, Prime, SourceFire, and none Cisco appliances including Barracuda Web filter, Solarwind, Cradlepoint, Silverpeak and Appriver Spam filter
• Manage network connectivity including MPLS, IPSEC VPN, SSL VPN, Point to Point connection, and SD WAN
• Manage multiple projects including network implementations in Australia and UK, work with various vendors, service providers and IT professionals to complete complex projects
• Improve network security by maintaining documentations of security policies, performing monthly vulnerabilities and penetration test, and executing Information Security Awareness campaign

Confidential, Corona, CA

Sr. Global Network Engineer

Responsibilities:

• Design and Build a new data center for the Monster Energy Corporate building. The data center consist of Cisco appliances including dual Nexus 7009 as the core switches, Catalyst 6500 as the Distribution switches and Catalyst 4500 as the Access layer switches. Utilize Nexus 1010, Nexus 1000v and UCS 6248 for UCS infrastructure and MDS 9148 Fabric Switch for fabric Interconnect for Storage Area Network.
• Manage over twenty one remote sites including secondary data center located in UK for disaster recovery.
• Administer and support the Global Network Infrastructure, manage all Cisco ASR and ISR routers for MPLS connection. Configure EIGRP and BGP protocols for LAN and WAN communications. Manage all MPLS circuits provided by Level3 and ATT ISP.
• Configure and manage the Cisco VOIP infrastructure utilizing CUCM version 9, CUCCX, CUC Unity, CUPS, and Vistapoint. Utilize Cisco VG224 for FAX and analog lines and Cisco 3925 Routers for Voice Gateway. Configure QOS on all layer 2 and layer 3 network devices and manage the IP Phones move, add, change in CUCM. Migrated the remote sites CME and CUE into the Corporate CUCM and utilize SRST (Survival Remote Site Telephony) as a fallback for VOIP communication.
• Implement and manage the network security using Cisco ISE ver 1.3. Configure access switch ports for dot1x authentication and integrate the Wired, Wireless, RADIUS, and AnyConnect VPN to use ISE for dot1x authentication. Manage all BYOD devices with profile and posture policies.
• Implement and configure Cisco Ironport Email Security appliances (ESA) to filter and manage SPAM and Virus activity.
• Implement and configure Cisco Ironport Web Security appliances (WSA) as a web, ftp and https proxy server. Manage all Cisco Ironport devices using Cisco M670 (Cisco Content Security Management Appliance).
• Manage and configure the Cisco ASA 5585 and ASA 5525 Firewalls to maintain network security and provide IPSEC LAN to LAN VPN to vendors and business partners. Utilize AnyConnect remote access VPN and certificate base VPN for all employees and vendors.
• Configure and install the Cisco IPS modules integrated in the ASA5585 Firewall to monitor and block unwanted traffic as a security measure.
• Build and maintain the VPN connectivity to the Microsoft Azure cloud and Amazon AWS cloud to support the cloud based environment servers. The cloud servers consist of MS Office 365, MS SSO, and web servers.
• Implement and configure the wireless infrastructure utilizing 5500 Wireless controller, Virtual Wireless controller and AIR-CAP APs. Implement Cisco CMX for location Analytics to detect and locate BYOD devices. Manage the wireless appliances using Cisco Prime Infrastructure.
• Configure and manage SilverPeak appliances running on VMware servers to provide WAN acceleration to remote offices for critical applications such as SAP, backup systems, and HP 3PAR storage synchronization.
• Configure and manage the Storage Area Network using MDS 9148 Fabric Interconnect Switch.
• Manage the Cisco C40 and Tandberg Video conferencing devices. Utilize H323 for video and audio conferencing.
• Implement and configure Cisco SourceFire appliances including FireAMP for endpoint advance malware protection, FirePOWER for next generation Intrusion Protection, and FireSight as the management center.
• Perform a monthly scan of the network and system infrastructure for vulnerabilities using Nessus appliance. Address and perform forensics on any vulnerabilities found to minimize security risks.
• Manage the network appliances using Manage Engine Opmanager, Solarwind LEM, and Cisco Lancope.

Confidential, Irvine, CA

Sr. Network Engineer

Responsibilities:

• Design and build a new Data Center in the AT&T Colocation facility to migrate the hosted network and web server farm from Rackspace manage services.
• Provide engineering and operational support for all network devices across the infrastructure including routers, switches, Nexus, ASA firewalls, Juniper firewalls, VPN, F5 load balancers, Wireless Controllers, Wireless LWAP, and Tipping Point IPS.
• Configure and design the network infrastructure including LAN, WAN, firewall policies, routing protocols, VRF, MPLS, QOS, and security schema.
• Troubleshoot and diagnose advanced network issues including configuration, routing issues, spanning tree, performance, hardware failures, and provide detailed root cause analysis to management.
• Troubleshoot and manage LAN and WAN connectivity using MPLS, Metro Ethernet, IPSEC VPN and LAN Fiber connectivity.
• Manage vendor Rackspace to maintain the hosted Web farm servers
• Manage AT&T ISP to maintain the MPLS circuit and DR site.
• Create network documentations that include physical and logical designs, version management, device configurations, IP schemas, and firewall rule sets.
• Utilize Solar Wind applications to monitor and manage the network devices.

Confidential, Irvine, CA

Sr. Network Engineer

Responsibilities:

• Employed by Xerox Network Services to manage and support the Confidential Pharmaceutical network infrastructure, network security and ensure network reliability.
• Administer and support the Global Network consisting of over 78 remote sites in Asia Pacific, Europe, South America, and North America. Manage the edge routers connected to the MPLS, ATM, Frame Relay, Point to Point, and IPSEC VPN. Utilize BGP for WAN routing protocol and EIGRP for LAN routing protocol.
• Design, plan, and implement the network and security architecture for 15 buildings in Irvine campus and 2 regional data centers located in Europe and Asia
• Manage the IPSEC VPN, Business to Business, and Site to Site VPN tunnels, utilizing Cisco ASA5520, PIX525 and 7200 VXR router.
• Completed project in the design and deployment of WAN accelerator appliances using Riverbed to over 72 remote sites, Setup route optimization, bandwidth monitoring, and management reporting tools, maintain the Riverbed appliances using Central Management Console (CMC).
• Completed project in the design and deployment of Network Security appliances using Tipping Point Intrusion Prevention System (IPS), Manage the Tipping Point appliances using SMS. Setup profiles, update Digital Vaccine, and Setup reporting tools to provide management activity reports and traffic utilization.
• Completed project in the design and deployment of Cisco wireless appliance using Cisco Lightweight Access Points (LWAP), Wireless LAN Controllers (WLC), and Wireless Control System (WCS).
• Configure and deploy high speed switches throughout the Data Centers using 10Gbps Nexus5010 and 10Gbps 4900M for backup and recovery systems, databases and storage archiving servers.
• Lead 3 Network Engineers on the LAN refresh project, replace end of life switches on three Data Centers and redesign the collapsed core environment with core, distribution, and access layer switches using 6500 as the core and distribution and 3750 stackable switches as the top of the rack and access layer switches.
• Participate in the configuration and deployment of Cisco VOIP utilizing Cisco 2821 router as VOIP gateway, Cisco Call Managers, and Cisco Unity, Configure the voice VLAN and QOS on the switches and routers and setup the Call Managers for IP Phones.
• Manage the Network by utilizing tools such as Voyence, SevOne, Appcritical, and Ciscoworks applications.
• Manage multiple vendor relationships that provide MPLS and Internet connections including Orange Business Systems (OBS), Times Warner (TW), and Verizon.
• Work closely with project management teams to research, design, plan, develop, and implement best practice proof of concept labs, development environments, and production solutions to support cutting edge network and security based projects.
• Develop network policies and processes in adherence with external and in-house compliancy teams in order to stay in line with FDA regulations and governance pertaining to pharmaceutical data environments.

Confidential, Irvine, CA

Sr. Network Engineer

Responsibilities:

• Network Consultant employed by Nichols and Associates
• Redesign the Corporate Data Centers in Irvine and Texas from collapsed Core Environment to Cisco’s best practice Core, Distribution, and Access layer design. Utilized Cisco 6509 Switches with VSS configuration at the Core and Distribution layer and Cisco 4900M and Nexus 5010 switches at the Access layer.
• Design and Implement IPSEC remote access VPN using Cisco ASA 5520 firewalls, configured RSA for AAA and two factor authentication.
• Utilized Cisco GSS and CSS to provide load balancing to DMZ and external file servers
• Project lead for High Availability WAN connection project, connected over 52 Wachovia remote offices throughout the US on MPLS using BGP routing protocol as the primary WAN connection and on Point to Point using EIGRP routing protocol as the secondary WAN connection.
• Team lead for several projects including new building deployment, coordinated work efforts with IT management, vendors and contractors in setting up and designing the new sites network infrastructure.
• Troubleshoot network related issues and provide network support to various IT departments.