PROCESSIONAL SUMMARY:

• Accomplished, results oriented, Senior Network and Information Security Architect with over 11+ years of advanced technology experience, helping clients identify and strategically implement, multi - vendor solutions.
• Experienced with managing projects in diverse technology environments, with expertise in the design, integration, and optimization of large scale IP networks.
• Effective at translating business requirements into technical solutions, developing strategies based on company objectives.
• Extensive hands on technology experience spanning multidisciplinary domains including routing and switching, security, wireless, data center, and service provider networks.

TECHNICAL SKILLS:

Layer 2 switching and both static and dynamic Layer 3 routing

Design, build out, configure, and migrate infrastructure in multi-vendor inter-cloud data center environment

Experience with integrating heterogeneous networking, services and security environments

Ability to communicate with Compute, Virtualization, security, wireless, Storage Architects / Engineers, and stakeholders

Designing Cisco data center unified fabric via Nexus 9000/7700/5500/2200 benefiting from FCoE, VDC, VRF, vPC, OTV,SDN, ACI, spine/leaf and fabric path technologies

Nexus: 1000v, 2000, 3000, 4000, 5000, 5500, 5600, 6000, 7000, 77000 and 9000

Routers: Cisco 2600, 2800, ISR 1800, 2800, 3800, 7600, ASR 1000, 9000

Switches: Catalyst 6500, 6800, 4507, 3560, 3750, 3850

MDS: 9200s, 9100s

Unified Computing: Cisco UCS B-5108, UCS Fabric Interconnects 6200s & 6300s

Load balancer: Cisco ACE 30, 4710, F5 big ip LTM 3600/4000

Security/Firewalls: Cisco ASA5500

Cloud: AWS solution architect Associate

Compliance: SOX, SOC II, HIPAA, PCI

SDN: ACI, APIC

Clos Fabric: VXLAN, VTEP, EVPN, Unicast, Multicast, MP-BGP, VNI, VNE, Spine, leaf

Wireless: Cisco AP Aironet 600, 1130, wireless controller WLC 5500

Protocols/Architecture: VDC, VPC/VSS, BGP, OSPF, EIGRP, DMVPN, IPSEC, Multicast, IPv6, EVPN, TCP/IP, STP, HSRP, VRF, OTV, NPIV, FCoE, FabricPath

ITIL: Change Management, Incident Management, asset Management, CMDB, Remedy, service now

WORK EXPERIENCE:

Confidential, Austin, TX

Network Architect/ Sr. Engineer

Responsibilities:

• Designed New IP addressing plan, a VLAN plan, turning up routing protocols, turning up DMVPN for wan redundancy. Upgrading the network core to Nexus using vdc, vPC and HSRP to maximize performance of the server
• Deployed UCS chassis to build a scalable and resilient infrastructure
• Implemented OTV, forming A/A DCI and Fabric Path to enable blocking paths to better utilize the full bandwidth
• Configured SAN port channels and Fibre Channel over Ethernet (FCoE) to provision access to storage network
• Reactivated licenses, upgraded code on F5 BIG-IP (3600, 6400 & 6900 Series) LTM devices from 10.2.x to 10.2.4 HF9 without a loss of connectivity via HA Failover.
• Identified & resolved a DCBX communication issue during a 1 Gb to 10 GE network card migration for AIX during a within IBM P795 frame hardware via Wireshark support & disabling lldp at the Nexus 5K interface & adding flow control receive on at the vPC.
• Firewall administration rule modifications and rule analysis on Cisco ASA 55xx, SSL VPN appliances.
• Implemented two-factor authentication for user-VPN solution utilizing RSA Tokens.
• Configured and implemented ASA firewall rules using NAT on a Cisco 5555-X
• Configured and distributed Cisco AnyConnect client 3.1 for multiple users to VPN into the remote environment for the purpose of management.
• Migrated cisco ace 30, 4710 to f5 LTM load balancer
• End to End project delivery from gathering requirements, through design and deployment, to operations handover and post project support

Confidential, Austin, TX

Network Architect/ Sr. Engineer

Responsibilities:

• Develop the architecture for monitoring network consumption, capacity constraints and trending
• Perform system capacity planning to ensure appropriate growth and evolution of systems
• Consult with clients and internal engineering groups to create and/or review requirements, functional specifications and designs
• Partner with other engineering and support personnel to document and implement installation, provisioning, troubleshooting, monitoring, performance analysis, reporting and other operational flows
• Analyze forecast numbers and models to forecast traffic requirements and capital costs for system
• Oversee testing of networks to evaluate architecture design, concept performance and features of the design
• Provide escalated technical support to management and customers to identify and resolve operational issues
• Research and evaluate network technologies, new products, literature, patents and current practices that support business requirements and/or new industry technology
• Conduct high-level client training programs) on technical product capabilities and associated efforts
• Lead cross-functional technical teams to design and implement effective network architectures for the client

Technology Utilized:

• OSI Layer 2 (spanning tree, vPC, EtherChannel, etc) and Layer 3 switching/routing (OSPF, EIGRP, BGP)
• Cisco’s datacenter product line: Nexus Products, Catalyst products (65xx, 49xx switches),
• Provide infrastructure for Hypervisor vendor such as VMWare
• Private and public cloud provider (VMware vSphere, Amazon Web Services - AWS, Microsoft Hyper-V/Azure, OpenStack)
• Provide datacenter infrastructure for multiple vendors
• Basic Linux
• Networking concepts, providing complex, technical expertise in network design for major clients

Confidential - Chicago, IL

Senior Network Engineer

Responsibilities:

• Conducted network assessment to identified issues and close any gap between the current architecture and the best practice
• Participated in an IP Telephony migration to our Data center by authoring the L3 SVI & L2 vPC
• Participated in extending several vlans between interstate data centers via OTV & validating OTV Edge Server
• Installed redundant ISPs into the network architecture to support failover.
• Initiated, coordinated & participated in the implementation of redundant OOBM access
• Migrated the formerly physical interface gateway to a shared VIP via HSRP between two ISP carriers Cisco 7609 routers
• Configured the next hop switch to the OOBM ISP L3 access to STP root primary
• Implemented Root Guard southward per interface to prevent inadvertent bpdu elections.
• Reallocated a vpc connected pair of 5548 between zones to provide cost savings and provide 64 additional 10 GB ports.

Confidential, Reston, VA

Senior Network Engineer

Responsibilities:

• Configured, deployed and supported a large MPLS and Frame Relay network as well as VOIP and QoS.
• Worked with the server, firewall and load balancerteams,assigning VLANs and providing network support to enable them deploy their servers.
• Deployed and implemented layer 2 technologies; VTP, ISL, VLANs, STP, Portfast, Uplinkfast, BPDUguard, PAgP, LACP, 802.1q.
• Troubleshot EIGRP SAI issues and provided summarization and filtering solutions to contain the queries.

Confidential, Ashburn, VA

Network Engineer

Responsibilities:

• Configured and deployed OSPF in several call centers and enterprise office locations.
• Monitored the network using management tools like HP Openview, Netcool and NerveCenter and Remedy ticketing.
• Worked with several ISPs in troubleshooting Frame Relay and ISDN networks.
• Provided hardware installation, software upgrades and device configuration as well as change control support.
• Day to day support of AOL Call Centers worldwide
• Assist in resolving configuration, design, & implementation issues

Confidential, Herndon, VA

Network Engineer

Responsibilities:

• Provide architecture, engineering and operational support for all devices throughout the infrastructure including switches, routers, wireless devices, including for all network devices, firewalls, SSL Gateways, wireless networks, and VPN client products.
• Implemented Cisco based Nexus architecture,Nexus 1K, 5K, 7Kusing CiscoNexus NX-OScommand line and Nexus Fabric Extension architecture.
• Designed and implemented logical network infrastructure includingLAN, WLAN, WAN, firewall policies, routing protocols,EIGRP, OSPF, BGP, QOS, etc.
• Created network documentation that includes physical and logical designs, version management, IP schemas, and firewall rule sets.
• Performed troubleshooting and diagnosed advanced network issues including configuration, routing issues, spanning tree, performance, software bugs, and hardware failures and provide detailed root cause analysis onL1/L2.
• Coordinated with 3rd party companies to configure secure inter-site network connectivity over technologies such asVPN.
• Managed a multi-layer firewall solution including analysis of traffic and implementation of rule sets.
• Documented and implemented best practices for network design, patch management, administration, upgrades, and security.

Confidential, Rockville, MD

Network Engineer

Responsibilities:

• Performed daily request modifying access layer switches granting access to the network
• Provided technical guidance and handover documentation to the Operations team
• Configured EIGRP for internal enterprise connectivity and OSPF for vendor extranet connectivity.
• Administrated Local VLANs based on department function, and configure ports with static VLAN assignment, static 802.1Q trunks, and dynamic ISL trucking using lacp for layer 2 forwarding. Utilize VLAN Spanning-Tree in conjunction with PVST+ for compatibility with Cisco switches