COMPUTER KNOWLEDGE:

Network Protocols: BGP, OSPF, RIP, EIGRP, IGRP, Gigabit, Fast Ethernet, Token Ring, TCP/IP, IPX/SPX, STUN, DLSW, Frame Relay, ATM, ISDN, VoIP

Internetwork Devices: Cisco ASA, Cisco Routers (up to 7600) Cisco IOS (10.x - 15), Cisco Catalyst Switches (up to 6509), Cisco VPN 3000 Concentrator, Cisco Wireless LAN Controller 5508, Cisco Wireless Access Points.

Security Software and Devices: Cisco ASA 9.1, Cisco AnyConnect VPN Client, SonicWALL Pro Series & VPN client, Checkpoint 4.1 and NGx on Confidential and Solaris, Cisco Security Manager, Cisco Secure ACS v5, Cisco Secure IDS 4230, Cisco Secure Host IDS Sensor, Cisco IOS IPS, NMap, Nessus, ISS Internet Scanner, Cisco Secure Scanner, password cracking software, NAI Sniffer Pro, NetScout/Cisco WAN and LAN Probes, Cisco Identity Services Engine (ISE)

Programming Languages: Perl, C++, C, TCL/Tk, HTML, UNIX shell scripting

Hardware: IBM PC, Sun Workstations (UNIX), Macintosh OS X 10.10 Yosemite

Operating Systems: Windows 7, 8, 10, Vista, XP, 2012 and 2008 Server R2. 2003 Server, 2000, NT 4.0 Server, MS-DOS, Solaris 2.8, RedHat and Mandrake Linux, MacOS

Software: Microsoft Office, Visio, Concord Health, Cisco Prime Infrastructure, MRTG, Aprisma Spectrum, Microsoft SQL Server 2008, Microsoft Lync, Microsoft Exchange Server 2013 and 2010, Cisco Unified Communications Manager 10.5, Cisco Unified Communications Manager Express 10.5, Cisco Unified Presence server 10.5, Cisco UCC Express. Cisco Prime Infrastructure and Collaboration.

RF Protocols and Equipment: 802.11A/B/G/N, AirMagnet WiFi Laptop Analyzer 10.5, Cisco Spectrum Analyzer, Ekahau Site Survey, Cisco Wireless LAN Controller (WLC)

WORK EXPERIENCE:

Confidential

CISCO COLLABORATION CONSULTANT

Responsibilities:

• Designed and Implemented Cisco Unified Communications Suite of Products on the UCS series of servers.
• Configured Cisco ISE for Wireless and Wired 802.1x Authentication on Cisco Wireless LAN Controllers, Catalyst Switches, and Cisco ASA Firewalls..
• Configured SIP trunks between CUCM and Unity Connection for VoiceMail as well as integration of Microsoft Exchange 2013 server to provide Single Number Reach and Unified VoiceMail and Email.
• Configured VMware vCenter for Management and Monitoring of the ESXi based UCS servers
• Integrated Cisco IM&P server as well as Cisco Jabber with remote connectivity provided by Cisco VCS Expressway.
• Designed and Implemented Cisco Physical Surveillance Manager 7.6 including Cisco IP Surveillance Cameras as Video Endpoints.

Confidential, Ashburn, VA

TECHNICAL DELIVERY LEAD

Responsibilities:

• Led and Managed Migrations of Ellucian Cloud Customers to the Confidential Cloud Infrastructure
• Provided documentation that detailed the Ellucian Cloud Infrastructure within Confidential

SENIOR NETWORK OPERATIONS ENGINEER

Confidential, Framingham, MA

Responsibilities:

• Designed, Deployed, Documented Cisco Unified Wireless Network (CUWN) Infrastructure for Implementation of a Bring Your Own Device (BYOD) Solution.
• Wireless Site Surveys using Airmagnet Surveyor
• Assessment and placement of Access Points and Coverage Areas
• Installation and Configuration of Cisco Wireless LAN Controllers on Branch ISR G2 Service Ready Engines (SRE) and Virtual Wireless LAN Controllers for Central Office Infrastructure
• Installed and Deployed Cisco Prime Infrastructure 2.1
• Deployed the Mobility Services Engine 7.6
• Configuration and Integration of Cisco Identity Services Engine (ISE) 1.2
• Consisted of ISE Deployment, Authentication with Active Directory and Microsft Certificate Authority.
• Provided a Flexible NetfFow (FnF) Architecture for Cisco 2900/3900 series routers to send data to Riverbed Cascade Pilot and Profiler to Deliver Meaningful Utilization Reports
• Utilize Cisco Flexible NetFlow (v10) with NBAR2 to provide Deep Packet Inspection Reporting.
• Develop Strategies to Mitigate Highly Overutilized Direct Internet Access (DIA) Links with use of TCP Performance Strategies such as Riverbed Steelhead Implementations.

SENIOR NETWORK ENGINEER

Confidential

Responsibilities:

• Assisted in the Migration of Motorola Mobility Data Centers to Confidential Data Centers.
• Configuration of Cisco Catalyst 4509 and Catalyst 3750 switches.
• Conducted Site Surveys and Prepare Bill of Materials for Future Site Conversions

NETWORK CONSULTING ENGINEER

Confidential, Manhattan, NY

Responsibilities:

• Consulted in the Full - Life Cycle of a Cisco Unified Wireless Infrastructure Solution Design and Architecture
• Provided Scope Definition, Project Proposal, Design, Hardware Procurement
• Performed Onsite Implementation of Cisco 3501 and 1142 Access Points
• Configured and implement Cisco 4400 Series Wireless LAN Controller as well as the Virtualized Wireless LAN Controller.
• Configured and Implemented Cisco Identity Services Engine (ISE) with connectivity to Microsoft Active directory for Authentication including Certificate Based Authentication.
• Implemented Cisco Mobility Services Engine (MSE) for location awareness and Rogue AP identification.

SENIOR SECURITY CONSULTING ENGINEER

Confidential, San Jose, California

Responsibilities:

• Assessed, Designed, Implemented and Configured Cisco Identity Services Engine (ISE v1.3) to support a school district consisting of:
• Administration connectivity to Financial and Student Enrollment Applications
• Faculty connectivity to Student Enrollment Applications and Educational Training Materials
• And Guest Student connectivity to Cisco Iron Port controlled Internet Access

SENIOR SECURITY CONSULTING ENGINEER

Confidential, Austin, Texas

Responsibilities:

• Assessed, Designed, and Implemented a Secure Wireless Assessment and Implementation.
• Designed and Configured Cisco Identity Services Engine (ISE v1.2) to support corporate connectivity to a new wireless environment utilizing Active Directory Authentication and Authorization with EAP-TLS client certificates.
• Based on interviews conducted with the client, Implemented and documented a custom fully redundant and Highly Available WLAN environment utilizing Cisco 5508 Wireless LAN Controllers, Cisco 3315 ISE Appliances, and Cisco 3500 series Access-Points.
• Diagnosed and Troubleshooted solution with client.
• Provided client with options for further growth with the Cisco Bring Your Own Device (BYOD) campaign.

SENIOR NETWORK ENGINEER

Confidential, Los Angeles, California

Responsibilities:

• Troubleshooted Cisco IP Phone issues with end users in the field and Cisco Unified Communications Manager
• Diagnosed and Troubleshooted Cisco Wireless IP Voice Telephones and End Stations Utilizing Cisco Wireless LAN Controllers and Lightweight Access Points

CONSULTANT

Confidential, Dallas, Texas

Responsibilities:

• Architected, Designed, and Implemented Network Infrastructure consisting of Cisco 6500 series core switches, Cisco 3745 IOS Gateways for VoIP and Internet connectivity, Cisco 3750G Power Over Ethernet Distribution and Access switches, and a Cisco ASA 5525 Firewall/VPN Internet Connectivity.
• Implemented many environments of VMware vCenter Server 5.0 and ESXi hosts to maintain a Cisco Unified Communications Server Environment consisting of Cisco Unified Communications Manager 8.6, Cisco Unified Presence Server, Cisco MeetingPlace, Cisco Unified Contact Center Express, Cisco Unity Connection, and Microsoft Exchange 2010.
• Deployed Cisco Jabber and IP Phones supporting Mobility and Single Number Reach and Unified Voicemail with Outlook 2010.
• Deployed the Cisco Unified Border Element (CUBE) with SIP connectivity to Telephony Service Providers.
• Developed virtualized storage solution using iSCSI and an Open-Source NAS software package. This storage solution included VMware vSphere vMotion, High Availability, and Fault Tolerance to ensure a near 100% uptime.
• Implemented and supported Cisco Identity Services Engine (ISE) with the Cisco ASA 5500 series for VPN connectivity.
• Utilized Checkpoint NGX R65 and R75 on Confidential IPSO Platforms.
• Installed and configured Cisco Nexus 1000V Virtual Supervisor Module (VSM), Virtual Ethernet Module (VEM), Cisco Virtual Wide Area Application Services (vWAAS), as well as Cisco Virtual Security Gateway.
• Designed, configured, and installed WAAS Central Manager, WAAS on the Services Ready Engine (SRE), and vWAAS for various clients.
• Implemented ASA Anyconnect VPN Solution utilizing WAAS Mobile to optimize remote user connectivity.
• Maintained RedHat Enterprise Linux Server versions 6 and 7

SENIOR NETWORK ENGINEER

Confidential, Plano, Texas

Responsibilities:

• On-site Cisco Subject Matter Expert and Team Leader for Network Operations on the Confidential Infrastructure supporting E-Commerce transactions for clients such as: Proctor & Gamble, Sunglass Hut, Lucky Brand, Roots, as well as Call Center Operations for Home Depot and others.
• Specified Network Hardware Infrastructure, Developed Migration Plan and Consulted on the Data Center Migration between two North Texas Datacenters.
• Proposed Network Infrastructure Improvements to Streamline and Improve Network Stability and Performance.
• Troubleshot day-to-day Network Infrastructure issues on Cisco ASA 5520, Catalyst 6509, Cisco 3900 Routers, Cisco Wireless LAN Controllers as well as MPLS connectivity for Interoffice Connectivity.

NETWORK ENGINEER

Confidential, Richardson, Texas

Responsibilities:

• On-site Cisco Subject Matter Expert for a Confidential Aircraft Voice Over IP project.
• Implemented Cisco Unified Communications Manager 8.5 on the Cisco 2951 ISR on a Services Ready Engine (SRE) or UCS Express.
• Hands on design, configuration, and testing of Cisco Virtual Wide Area Application Services (vWAAS) as well as the WAAS Central Manager for Air to Ground TCP Acceleration.
• Configured and implemented CiscoWorks QoS Policy Manager Software to test and deploy what-if scenarios and monitor traffic flow and adjust queuing and traffic policing appropriately.
• Hands on experience with the Cisco C5940 Embedded Services Router and other ruggedized equipment to ultimately be installed on aircraft.
• Recommended Bandwidth monitoring options to meet Air Force Requirements.
• Wrote Design Architecture for the administrator onboard the aircraft to make changes to satellites as well as QoS and Bandwidth limitations and preemption.

SENIOR NETWORK ARCHITECT

Confidential, Dallas, Texas

Responsibilities:

• Implemented Cisco Unified Communications Manager 7.1, Cisco Unity 7 with integration into Microsoft Office - Click to Dial features.
• Configured CallManager Express to Communications Manager and ITSP SIP trunks.
• Created dial-plans, configured IOS MGCP and H.323 gateways on Cisco IOS platforms.
• Designed and Implemented Cisco Unified Presence Server (CUPS) 7 using the using the native CUPS client.
• Configured Cisco Unified Operations Manager for Monitoring and Management of a Unified Communications site.
• Configured Microsoft Exchange 2010 and 2007 including Microsoft’s Unified Messaging Solution and Microsoft Live Communicator to demonstrate the benefits and limitations to each platform.
• Installed and implemented VMWare ESX and ESXi servers on Windows and Linux Servers
• Configured, designed, and implemented VMWare 4 VSphere Infrastructures consisting of ESX servers and VCenter Server and VMotion
• Implemented Cisco Secure Access Control Server (ACS) with 802.1x authentication utilizing Cisco Aironet access points utilizing the Wireless LAN Solution Engine (WLSE) and Wireless Domain Services (WDS).
• Monitored and responded to WiFi related traffic issues and utilized WiFi tools to troubleshoot including Ehakau Site Survey and AirMagnet Wifi Analyzer.
• Configured and troubleshooted F5 Local Traffic Managers (LTM) for Load Balancing Web and Application servers as well as Global Traffic Managers (GTM) for Site Failover Redundancy.

SENIOR NETWORK SECURITY ARCHITECT

Confidential, Dallas, Texas

Responsibilities:

• Led, addressed, and managed network security requirements and issues regarding existing and new business partner connectivity.
• Followed and aligned projects so that they followed Confidential ’s existing approved security policies.
• Submitted changes for Cisco PIX, Cisco IOS Routers, and Checkpoint on Confidential firewalls.

PRINCIPAL CONSULTANT

Confidential, Dallas, Texas

Responsibilities:

• Various engagements throughout the country focused on network design, implementation of network infrastructure, security assessments, wireless assessments, firewalls mainly on a Cisco infrastructure.
• Installed, Maintained, and Monitored Cisco PIX, Juniper (Netscreen), and Checkpoint on Confidential firewalls.
• Proactively Managed and Installed Network Security Infrastructure including; Cisco VPN 3000 Concentrators, and IPSec Encryption VPN tunnels to business partners.
• Member of a Voice-over-IP Implementation Team using Cisco CallManager.
• Direct Interaction with Customer on Project Timelines and Accurately Setting Deliverable Expectations

SENIOR COMMUNICATIONS ENGINEER

Confidential, Dallas, Texas

Responsibilities:

• Responsible for the overall Network Support, Implementation and Network Security for the U.S. Treasury Web Application Infrastructure (TWAI) project hosted at the Federal Reserve Bank.
• Installed, Maintained, and Monitored Cisco PIX, Netscreen, and Checkpoint on Confidential firewalls.
• Proactively Managed and Installed Network Security Infrastructure including; Cisco VPN 3000 Concentrators, Cisco Encryption, Dragon IDS NIDS and HIDS and Arcsight Security Event Manager.
• Responsible for the day-to-day maintenance and support of the Cisco Router and Cisco Switch Infrastructure.
• Responded to a General Accounting Office (GAO) audit and many other third party auditors of the TWAI Infrastructure.
• Maintained ongoing communication with the National Incident Response Team (NIRT) for escalation of Security related incidents.

SENIOR NETWORK ENGINEER

Confidential, Dallas, Texas

Responsibilities:

• Performed complete Security Assessment for the Office of Personnel Management Confidential which consisted of internal and external network penetration testing, remote dial-in and operating system security assessments as well as a review of existing security policies and procedures.
• Migrated Starwood Hotels and Resorts’ corporate outsourced firewall solution to an internally supported, fully redundant, Checkpoint Firewall on the Confidential platform.
• Managed coordination of all technically related information necessary for the successful implementation of the firewall solution including a review and recommendation of the existing firewall rule-base and implementation of those recommendations. Prepared and presented detailed documentation for technical knowledge transfer.
• Installation and Implementation of Cisco Secure Policy Manager controlling geographically diverse IDS-4230 and IDS-4210 devices for Confidential Life Insurance.
• Performed External Network Security Posture Assessment for CVS Pharmacy that included identification and exploitation of security vulnerabilities. Prepared and delivered a formal report to the client.

SENIOR NETWORK ENGINEER

Confidential, Boston, Massachusetts

Responsibilities:

• Performed Network Bandwidth Capacity Analysis for Fleet Boston Financial utilizing Network Associate’s Sniffer Pro to monitor and report International and domestic WAN utilization and performance statistics.
• Generated report and recommendations based on findings and presented to Fleet.
• Designed and implemented complete BGP network for Lightship Telecom (ISP). Multihomed Lightship with eBGP peering to two upstream providers providing full redundancy in the event of a circuit or routing failure. Coordinated Lightship’s AS and Route Object creation in RIPE DB routing registry. Optimized route selection and added communities tailored to an ISP’s specific needs. Provided written documentation as well as trained Lightship technical staff in BGP configuration and management.
• Designed and implemented redundant Cisco WAN infrastructure interconnecting three offices as well as two service providers for Vacation.com. Specified Cisco solution based on Vacation.com budget and business needs. Implemented Cisco IOS based firewall solution to replace existing PIX with an all in one solution.
• Managed installation and implementation of new customer web sites for Confidential based on customer requests as well as standard operating procedure. Assessed and tracked resources and time necessary to complete each installation and communicated delivery time to customer.
• Supported ISP data infrastructure for Network Plus consisting of several hundred DSL customers and twenty dedicated T1 customers. Diagnosed and remedied day-to-day network issues that ranged from network hardware (all models up to Cisco 7000) to routing protocols (RIPv1 & 2, EIGRP, OSPF, & BGP). Developed IP addressing design to accommodate the growing number of clients. Added and maintained DSL, ATM PVCs, T1 and Frac-T1 customers as well as Catalyst 5500 series switches. Developed custom solutions to suit client needs including Network Redundancy using DDR and ISDN, Multi-Protocol Route Redistribution and NAT & PAT.