Network Security Consultant Resume

SUMMARY

As an experienced network architect, security engineer, project manager and line manager, I have been responsible for the design, installation, and operations and management of small, medium, and large LANs and WANs for over twenty years.
I have extensive experience in systems integration projects supporting the integration of multi - vendor equipment from concept to cutover.
During my career, I have accumulated over seven years of direct management experience.

PROFESSIONAL EXPERIENCE

Network Security Consultant

Confidential

Responsibilities:

Connected seven sites for a construction company using Checkpoint appliances and creating VPN tunnels to HQ in Warren, Virginia
Performed Root Cause Analysis for a manufacturing company after a serious outage. Configured QualysGuard and performed vulnerability assessment
Replaced five closet switches with HP ProCurve switches and reconfigured VLANs and inter-VLAN routing for a car dealership in Northern Virginia

Network Security Consultant

Confidential

Responsibilities:

Served as the Network Security Consulting Engineer responsible for implementing a new core architecture at Howard University. IBM was the prime on this 7-year managed-services contract
Implemented Cisco Firepower and Nexus 9000 series equipment at the RCN data center in Lanham, Maryland in a fully redundant configuration with two 10 Gbps egress circuits dual-homed to two Howard University redundant POP locations
Migrated from TrendMicro Tipping Point to the Cisco Firepower appliances for IPS
Moved external partner VPN tunnels from the Cisco ASA 5585 to the Cisco Firepower appliances
Migrated Remote Access VPN from Juniper to the Cisco Firepower appliances
Responsible for BAU and support of the existing network
Responsible for developing, documenting, and presenting the HU Security Architecture to IBM

Network Security Engineer

Confidential

Responsibilities:

Implemented new 12400 Check Point NGTP cluster at production facility in Phoenix, including meshed VPN network
Implemented Check Point 1120 and 640 appliances for out-of-band management and remote office connectivity
Implemented Digi16 and Digi32 devices for remote serial connections
Maintain and troubleshoot all network security devices
Developed and performed Red Team exercises
Upgraded old Brocade (Foundry) 4G-SSL load balancing appliances to Brocade Virtual Traffic Manager using the Web Application Firewall (WAF) at two facilities
Responsible for all aspects of network engineering in addition to my security duties.

Brocade Security Engineer

Confidential

Responsibilities:

Reconfigured vrrp-e instances on the ServerIron pair
Resolved VLAN inconsistencies
Gathered data with Wireshark to assess network connectivity
Reconfigured ACLs throughout the network
Assessed and reconfigured OSPF, and eBGP
Assisted with the implementation of a new network utilizing A10 network equipment with Avaya switches
Created both “as-is” and “to-be” network drawings

Network Engineer

Confidential

Responsibilities:

Worked on the assessment/rationalization phase of GSA’s data center consolidation project
Installed Riverbed and Gigamon equipment in the Fort Worth, Texas data center
Performed on-site assessment of GSA’s Kansas City data center
Utilized VMware Capacity Planner to assess virtualization capabilities
Assessed Gigamon data with Riverbed Cascade
Provided planning and documentation

Senior Systems Engineer

Confidential

Responsibilities:

Member of Core Network Engineering team tasked with consolidating the entire data center of BLS.
Implemented a re-designed switching and routing infrastructure to support consolidation activities (data center rack reduction from 135 to 65)
Implemented IPS systems
Retired one of two Catalyst 6513s at the core and implemented a Cisco Nexus 7010 in its place as the new core switch. Heavy emphasis on security.
Implemented two Cisco UCS C250 servers for virtualization of mission-critical applications.
Installed a new SAN network consisting of a Nexus 5010 and Nexus 2148 fabric extenders to migrate from the legacy Catalyst 6506 SAN network switch.
Developed test plans and documentation to support implementation activities and the operational life cycle
Virtualized over 40 servers using VMware ESX and VSphere
Resolved complex network issues in a data center environment
Implemented a fibre channel SAN for embargoed data using Brocade switches
Eradicated internal static routing in favor of OSPF. Successfully configured OSPF authentication between the Cisco Nexus equipment and numerous HP ProCurve 3500 and 6200yl switches.
Installed and configured F5 Big-IP load balancers for Web server farm (Layers 4 and 7)
Relocated and configured building-wide television equipment
Implemented controller-based Aruba wireless architecture
Worked with business process and engineering teams to update existing Disaster Recovery and Continuity of Operations plans