Summary

10 years hands-on IT experience and Master's degree in Computer Science, pioneering, results-focused senior network administrator offering broad background in plan, design, implementation, optimization and operation of large-scale, multi-platform networks. Adept at formulating and deploying leading-edge, performance-enhancing network solutions. Motivated, vision-driven technical leader. Articulate communicator able to cultivate productive client/vendor relationships, and convey complex technical concepts to diverse audiences.

Highlights of Expertise:

• Vision-driven Leadership Enterprise IT Solutions Process Redesign
• Network Engineering Systems Design Administration Client Relations

Selected Technical Proficiencies:

Platforms:

• Windows, Gnu/Linux Redhat, CentOS, Ubuntu , Cisco IOS/IOS-XR/NX-OS/IOS-XE,
• Brocade OS, Aruba OS, Xirrus Array OS, VMware ESXi, OpenStack, Checkpoint.

Network Tools:

• Solarwinds, Checkpoint SmartConsole, Splunk, Cisco Prime, Cisco Security Manager,
• Wireshark, Tcpdump, Cacti, MRTG, Nagios, Juniper STRM, Syslog, Rancid, NetFlow,
• flow-tools, Brocade Ironview, Netfilter/iptables, Snort.

Protocols:

• Ethernet, WLAN, TCP/IP, IPv6, Multicast, GRE, QoS, VoIP, AAA, 802.1X, RADIUS,
• TACACS , LDAP, IPsec/SSL VPN, DMVPN, GET VPN, MPLS, VRF-lite, RIP, OSPF,
• EIGRP, Multi-protocol BGP, SSH, DNS, DHCP, OpenFlow.

Programming:

C, C , Perl, Java, Bash.

Hardware:

• Cisco Switches Routers, Cisco ASA/FWSM/IPS, Cisco WLC/AP, Brocade Switches,
• Aruba Controllers/APs, Cisco WLC/AP, Bluecoat Packeteer, Dell PowerEdge Servers.

PROFESSIONAL EXPERIENCES

Senior System Support Engineer

Confidential

• Consult, assess or audit, design and interview customers to determine highly technical requirements. Convert requirements into actionable scope of work. Provide recommendations on viability, implementation strategies and optimal implementation of solutions. Contribute senior expertise to corporate project initiatives. Provide high-end network support and implementation services to client Chicago Public Schools CPS the third largest school district in the US with more than 600 schools and over 400,000 students. Provide senior system support to other clients.
• Participate as senior resource in the day-to-day operations of the corporate 24/7x365 Network Operations Center NOC .
• Design, Deploy, Manage, and Monitor CPS internal/external ISC BIND DNS service with Response Policy Zone and failover ISC DHCP service on RHEL servers.
• Provide senior level support in CPS security team on Cisco ASA5550/ASA5580/FWSM Firewall/VPN, Checkpoint fault-tolerance Firewall and load sharing VPN clusters, Cisco Web Security Appliance web filtering, Tipping Point IPS.
• Provide senior level support in CPS WAN/LAN team on Cisco 7600, Cisco Catalyst 6500/3560/3030, Nexus 7000/5000, Cisco ACE, Cisco 7500/5500 WLC, PBR, VRF-lite, BGP/EIGRP/OSPF, FlexConnect, Enterprise/Guest SSID.
• Provide administrative support of Network Monitoring Systems of Solarwinds and highly customized Simple Event Correlator SEC .
• Participate in corporate Cloud service with OpenStack/VMware/UCS design, implementation and deployment.
• Program in Perl for task automation such as network devices changes, Cisco IPS SDEE polling, network/DHCP data collection and analysis, database query and update, etc.

Confidential

Network Architect

• Leveraged expert network administration and support talents in developing, maintaining and troubleshooting enterprise-wise LAN/MAN/WAN network. Completed and performed project designs, implementations, configurations, and upgrades. Designed and assembled network infrastructures for internal and external clients. Guided and mentored teams of network engineers in effective network engineering and support practices. Provided peer reviews of implementations, configurations, and documentation for team members. Liaised with users and technical teams in gathering information and resources for the resolution of complex technical issues. Conducted proactive assessments, reactive diagnosis and preventative maintenance.
• Developed and managed FSU 10G LAN/MAN/WAN network infrastructure spanning over 40,000 users, 120 campus buildings, and 20 remote offices. Infrastructure includes Cisco Catalyst 6500 core switches, Brocade aggregation/access switches, Cisco ISR branch routers, Cisco ASA/FWSM VPN/Firewall, Aruba Wireless, Avaya UC, McAfee IPS, F5 Load Balancer, etc.
• Designed, implemented and administered FSU Network Virtualization with VRF-lite, MPLS, L3VPN, and Cisco Firewall Service Module Virtual Firewall.
• Designed, facilitated and implemented FSUSecure wireless 802.1X authentication with mobility, WPA2, PEAP and VLAN steering working with various groups within Information Technology Services. Part of this project won me FSU 2011/2012 Exemplary Employee Award in category of Technology Services.
• Designed, implemented and managed redundant FSU IPsec/SSL remote access and site-to-site VPN services with Cisco ASA.
• Planned, designed and developed FSU 100G next generation backbone networks with ASR9000, ASA5585 and Catalyst 6500 VSS.
• Improved campus and department network security with Cisco Firewall Service Modules, ASA Appliances and ACLs using CLI and Cisco Security Manager.
• Developed and implemented FSU Residential Network ResNet MAC Address Registration and Authentication with Block Notification System for more than 5000 unique MACs utilizing 802.1X, NetReg, FreeRADIUS, BIND DNS, ISC DHCP and Apache HTTP services. Project won our team a 2009 Florida major government improvement initiative Davis Productivity Awards plaque award.
• Designed and implemented campus redundant DMVPN network to extend campus network virtualization to remote/branch offices with ASR1000s and ISRs.
• Designed and Integrated BlueCoat PacketShaper, pfSense firewall, McAfee Intrusion Prevention System and F5 Load Balancer to campus network.
• Designed and implemented QoS for VoIP at FSU with Cisco Core and Brocade Edge.
• Monitored and analyzed network performance with Nagios, MRTG, Cacti.
• Planed, implemented and managed campus DNS, DHCP, Radius, Tacacs , Syslog, NetFlow/flow-tools services.
• Administered two dozens of RHEL/CentOS Linux servers.

Confidential

Computer Research Specialist

Supported heterogeneous department computer and network systems. Provided diverse hardware and software assistance. Managed departmental email, web, DCHP, LDAP, NFS, Samba services primarily on GNU/Linux.

Confidential

OPS and Systems Programmer

As PC/WIN team lead, Led and mentored other team members with deployment and operation best practices. Provided excellent customer service and technical support to over 3,000 users with more than 1,300 PCs in work queue environment.