SUMMARY:

Certified Network Architect (MCSE, MCSA, CCNP, Multiple MCITP's) / Security Engineer (Security+, CHFI, CEH, ECSA) with extensive hands - on and practical experience designing, deploying and supporting numerous networks for a variety of small, medium, and large sized clients. Practiced in sizing user requirements and designing/implementing many data center (power, servers, storage, OS), wireless, backup, disaster recovery, security, and network solutions, that increase reliability and ease-of-use. Strong project management skills, able to develop detailed time and cost requirements and meet aggressive deadlines. Expert in troubleshooting advanced network issues spanning multiple vendors and protocols. Outstanding interpersonal skills, able to work effectively and professionally with all levels of staff management, vendors, and clients. Experience writing Statements of Work, Work Breakdown Structures, Bill of materials.

TECHNOLOGY OVERVIEW:

OPERATING SYSTEMS: Windows XP - 10, Windows NT 5.5 - Server 2016, Linux (Centos, Ubuntu, Redhat), ScoUnix, MAC Tiger, MAC Leopard, Sun Solaris, VMware ESX 5.0 to 6.5, Azure, AWS

MONITORING TOOLS: Fluke LAN Meter/Token Ring & Ethernet Networks, & Sniffer Network Analyzer. Wireshark, WhatsUp Gold, Solar Winds Toolset, PRTG, LogicMonitor, GFI.

HARDWARE/NETWORKING: Cisco Router Platforms (MC3810, 2500, 2600 & 7500 series), Cisco Switch Platforms (Catalyst 1900, 3550, 3560, 4000, 4507, 6500 & 8500 series), Cisco Nexus Switches, Cisco ASA & PIX Firewalls, Cisco Firewpower, Palo Alto Firewalls, Campus Network Design, VLAN & Trunking, Spanning Tree Protocols, Inter-VLAN Routers, ATM/LAN Emulators, Multi-layer Switching & Multi-cast Networks, Cisco (Stratacom) Packet Switch Network Platforms (IPX, IGX & BPX series), Bay Network Router Platforms (BCN, BLN, ASN, ARN & AN series), IP Routing Protocols (RIP, IGRP, EIGRP, OSPF & BGP), HP 100VG switches, Network Sniffer/LAN Test Equipment, Fluke LAN Meter/LAN Test Equipment, Asynchronous Modems, PPP, ISDN DSL, BRI, ISDN PRI, DDR, X.25, Frame Relay, NAT Translations, AAA Authentication, OSI Models, WAN Protocols, Novell IPX, IP summarization/subnetting/addressing/supernetting, T-1/T-3, & Novell 4 Server Networks, VOIP, Asterisk, Vonexus iSCSI, NAS, CiscoWorks, SAN. HP & Dell Blade servers. HP EVA 4400 SAN units. Dell & EMC SAN experience. Cisco ACE Load Balancers. Cisco IPS. BGP,GLBP

SERVER / APPLICATION/ PLATFORM: Exchange 2003-2016, ISA, Live Communication Server, Skype, Sharepoint, Blackberry Enterprise Server, Full Suite of Symantec Enterprise products, Trixbox, Asterisk, VirtualBox, IBM Domino, Lotus Notes, Office 2000-2016. Extensive experience with P2V and V2V virtualization conversions both VMware and Microsoft based. Hyper-V, SMS, System Center Configuration Manager, SCVMM, Data Protection Manager, SureSync, Pertrac Financial, Postini, Sohpos, Adobe FMS & FMG, Microsoft ADFS, Google GADS and GAPS, Azure AD Connect Client, Office 365, Wowza, Nexpose, EMS, Azure Load Balancing.

PROFESSIONAL EXPERIENCE:

Confidential

Systems Engineer and Architect

Responsibilities:

• Security expert well versed in PCI and HIPPA compliance.
• Lead sales and implementation engineer on many recent projects.
• Involved with 20+ Chicago area school districts.
• Architect for multiple data center projects, including creation of bill of materials, labor hour estimates, statements of work.
• Developed and ran security assessment projects for clients utilizing Nexpose and other security products.
• Finished setting up the Google sync and tested for the Naperville School district.
• Setup new Azure backup and ADFS load balanced systems.
• Configured existing backup solution to work with Azure blob storage.
• Created new site in Azure for redundant district servers.
• Created a VPN from Azure to Aurora main site.
• Setup domain controller, ADFS Farm Servers, and ADFS Proxy in the Azure environment.
• Utilized Azure load balancing to load balancer the new Azure ADFS solution with the districts existing on premise ADFS farm.
• Implemented two Cisco 3850 24-port SFP+ switches.
• Setup new HP c7000 Chassis with 6 blades.
• Setup new Nimble SAN.
• Configure chassis and blades networking and uplinked all connections over 10GB SPF+ twinax links.
• Installed Server 2016 and configured Hyper-V on each of the 6 blades.
• Converted existing VMware virtual machines to Hyper-V virtual servers.
• Migrated old Hyper-V virtual servers from EMC SAN to Nimble SAN storage.
• Upgraded District Data Center domain controllers and all relevant DC services from Server 2012 to 2016.
• Ran Active Directory and Exchange health audits.
• Created a second forest and trust to host the Office 365 student domain.
• Rolled out Office 365 to 1700 students.
• Ran backup and DR project.
• Migrated Maywood staff from Exchange 2010 to Office 365.
• Setup and linked new Nimble SAN to existing Cisco UCS Chassis.
• Upgraded VCenter from 5.5 to 6.5.
• Upgraded Cisco UCS blades from ESX 5.5 to 6.5
• Migrated Virtual Servers from existing SAN solution to new Nimble SAN.
• Configured new Veeam backup solution utilizing a server and HP DAS.
• Created second cluster at second location in the district for onsite DR.
• Replicated critical servers between main site and remote DR office.
• Setup secondary backup replication to an AWS Virtual Tape Library.
• Created the SoW and migrated the school district 2007 Exchange environment to Office 365.
• Implemented UCS Mini Chassis with 4 blades.
• Implemented Nimble SAN and linked to UCS blades.
• Implemented Cisco rack mount servers and HP storage at 2 remote sites.
• Created 3 Hyper-V HA Clusters at 3 different sites.
• Deployed Arcserve backup solution to 3 different sites.

Confidential

Lead Implementation Engineer

Responsibilities:

• Helped scope and sell different parts of the project.
• Implemented 2 x Palo Alto firewalls in an Active/Passive HA configuration.
• Implemented 2 x Cisco 6880 Chassis in a VSS Active/Active configuration.
• Moved EIGRP routing configurations from 100MB Cisco routers to Gigabit Cisco Layer 3 switches.
• Implemented 150+ Meraki wireless access points.
• Worked with IlliniCloud to provide federated single sign on for Pearson and Canvas applications.
• Rebuilt and reconfigured the school districts Google Apps GADS and GAPS services.
• Migrated the districts Open Directory environment to an Active Directory based environement.
• Brought new backup solution in house.
• Setup new VMware 6 HA Cluster.
• Designed multi-location switching and power upgrades. (Created BoM and SoW for each project)
• Lead Implementation Engineer for the following:
• 2 x Cisco 6880's at the main site.
• 2 x Palo Alto 5550's (Migrated configuration from Sonicwall firewall and brought online).
• 2 x 3850's at remote school MDF.
• 20 x 2960's at remote school.
• 2 x Cisco 5520 Wireless Controller. (Configured to support 6 different school locations)
• Migrated 100 Cisco 1142 to the new controllers, upgraded, configured for FlexConnect.
• Configured 65 new Cisco 2702 AP's in FlexConnect mode.
• Designed new Apple AirPrint solution.
• Developed and ran security assessment project for client utilizing Nexpose and other security products.
• Implemented Nimble SAN system.
• Upgraded existing ESX cluster from 5.1 to 5.5.
• Helped tune the Meraki wireless system.
• Upgraded Cisco Prime from 2.0 to 2.2.
• Tuned Cisco Prime for the client infrastructure.
• Upgraded core 4500 Cisco stack.
• Upgraded 50+ 3850 Cisco switches.
• Remediated wireless issues with the 371 onsite Cisco access points.
• Upgraded Cisco Prime from 2.0 to version 2.2.
• Helped remediate Cisco wireless issues.
• Fixed multiple Cisco switch issues.

Confidential

Network Engineer

Responsibilities:

• Worked out of 2 Data Centers supporting the clients 24/7 Virtual Trade Show and Webcasting environments.
• Supported the companys 4 locations spread around the Chicago area.
• Also sat on the Prescient TAP (Technology Advisory Panel) creating company wide network policies.
• Gave company wide Network training sessions on Cisco equipment, Video streaming, Network Monitoring, and Virtualization.
• Supported and implemented many changes and improvements to the companies multiple SAN units, Blade Chassis, Load Balancers, Redundant firewalls, Routers, and both DNS Load Balancing and BGP with GLBP Load Balancing.
• Support Cisco ACE 4710 Load Balancers and large web farms.
• Implemented the latest versions of Adobe FMS and FMG platforms.
• Migrated company from Navisite to Office 365 platform.
• Implemented ADFS for Office 365 SSO.
• Worked on multiple video and audio streaming projects.
• Worked with multiple video delivery vendors including Akamai, and China Cache.
• Ran multiple P2V migrations.
• Implemented new dual 80 core clustered SQL servers.
• Maintained a 99.99% multi-year platform uptime.
• Reconfigured the SAN fiber infrastructure to provide additional redundancy.
• Reconfigured the DR Data Center location to host multiple functions.

Confidential

Network Engineer

Responsibilities:

• Implemented new Cisco switches, worked on VLANS, VTP, and advanced routing.
• Administered both Microsoft and Lotus Notes servers.
• Managed Blackberry Enterprise server 5.0. Implemented advanced security Cisco wireless system (System uses certificates combined with AD authentication).
• Implemented Linux inventory and monitoring systems as well as online encrypted production password system.
• Managed multiple VMWARE ESX & ESXi servers.
• Implemented new virtual servers.
• Built a custom database which converted the PCA (Process Change Authorization) system to a paperless system.
• Worked with IBM Tivoli backup system.
• Worked with IBM Fiber-Channel SAN unit.
• Supported and worked on Industrial Manufacturing machines.
• Administered & maintained 5 SQL Database servers and multiple 100GB+ databases.

Confidential

Network Consultant

Responsibilities:

• Upgraded infrastructure to Server 2008 R2 domain with clustering.
• Created redundant Exchange 2007 utilizing a disaster recovery site and clustering.
• Implemented Hyper-V virtual server system linked to SAN units for storage.
• Created new BES 5.0 server in virtual environment.
• Created new Microsoft Data Protection Manager in the virtual environment.
• Exchange servers running virtualized.
• Setup PGP Mail Encryption Server.
• Implemented Postini and Sophos Systems.
• Rebuilt the Cisco ASA configuration for their 3 locations.
• WAN connections now stay online.
• Reconfigured the DMZ for their public web server.
• Reconfigured location with internet speed issues with Cisco ASA firewall QoS and Rate Limiting.
• Rebuilt internal Database, Application Server, and Terminal Servers infrastructure using Hyper-V.
• Improved overall system performance by migrating the existing Database server into the Hyper-V environment using P2V.
• Created Application Server virtual machine.
• Created 2 Terminal Server virtual machines.
• Installed 2 new SBS 2003 servers.
• Setup Exchange 2003 with RPC over HTTPS and a valid Certificate.
• Rolled out the following applications:
• Symantec Backup Exec 12d
• Symantec Endpoint Protection.
• Symantec Mail Security w/Premium Antispam.
• Installed and configured new router and firewall.
• Created site-to-site vpn tunnel between Batavia location and Minnesota office.
• Created internal Exchange 2003 system.
• Implemented RPC over HTTPS with Secure Certificate.
• Activesync to Windows Mobile Phones and Apple iPhone.
• Implemented Symantec Backup Exec 12d.
• Wrote Front-End/Back-End Access database to track customer calls and RMA’s.
• Implemented Sharepoint 2003 site.
• Setup network Quickbooks system.
• Configured VPN system.
• Setup VMware Server with multiple XP virtual machines.
• Configured MAC laptops with Parallels and installed XP as Virtual Machines.

Internal Engineer

Confidential

Responsibilities:

• Implemented new NComputing thin-client system to replace old 98 cad workstations.
• Rolled out wireless IP camera monitoring and recording system.
• Worked through PCI compliance.
• Implemented Cisco Router & ASA Firewall WAN environment to replace existing Watchguard Firewall WAN implementation. Replace and linked all satellite offices using the same configuration.
• Upgraded existing Microsoft AD domain from Active Directory 2000 to Active Directory 2003.
• Created new Microsoft practice implementing Exchange 2003, SQL 2005, Microsoft CRM, Sharepoint 2007, & Microsoft Live Communication Server.
• Exchange 2003 Front-End/Back-End configuration utilizing all available features: RPC over HTTPS, Forms Based Authentication, Exchange ActiveSync for Windows Mobile Devices.
• Upgraded all existing Lotus Domino Server from version 6 to version 7.0.2.
• Upgraded Sametime system from Sametime 6 to Sametime 7.5.
• Installed DB2 server to support IBM RTCGW.
• Installed Websphere 6.1 to support IBM RTCGW.
• Implemented Sametime Real Time Configuration Gateway connecting the Confidential network to the IBM, Yahoo, and AOL networks.
• Upgraded existing Blackberry environment to take advantage of Sametime messaging integration.
• Created Asterisk call center implementation. Call center generates 100k a month revenue.
• Migrated 100 user Blackberry Server MSDE configuration to new Blackberry server with a SQL 2005 backend.
• Took existing Asterisk PBX server and migrated it into a VMware Server environment for redundancy, portability, ease of backup and restoration.
• Developed Veritas backup solution.
• Linked together 6 new sites utilizing Cisco Pix Firewalls and Cisco 2600 Routers.

Confidential

Network Engineer

Responsibilities:

• Migrated existing Active Directory 2000 domain to Active Directory 2003 domain.
• Upgraded existing Exchange System from 5.5 to 2000.
• Upgraded Exchange 2000 System to Exchange 2003.
• Implemented RPC over HTTP.
• Cell phone email Synchronization.
• Spam Filtering
• Installed and administered Microsoft System Management Server 2.0 and recently upgraded to SMS 2003.
• Implemented and administered Veritas 9.1 backup system utilizing Tape, Hard Drive, and DVD backups.
• Created disaster recovery plans and backup strategies.
• Installed and configure Cisco Pix 515 Firewall/VPN remote access solution.
• Configured site to site VPN connections connecting different corporate locations into one central network.
• Implemented IPSEC VPN for remote client connectivity.
• Extensive experience working with Active Directory, DNS, DFS structures, etc.
• Supporting Sales force spanning U.S. through VPN system.
• In charge of a 250 user phone system and 40 corporate cell phones.
• Created and implemented secure FTP services utilizing Certificates and Active Directory for authentication.

Network Engineering Trainer

Confidential - Lombard, IL

Responsibilities:

• Taught Microsoft MCSE courses, Comptia and Cisco courses.
• Extensive experience setting up lab and test environments.
• Great troubleshooting experience.

Senior Network Engineer

Confidential, Rockford, IL

Responsibilities:

• Met with business managers and executives to determine business needs and size requirements.
• Prepared detailed proposal indicating solution and related costs.
• Presented solutions to customer’s technical and business management teams.
• Experienced in design and implementation of complete networking solutions including setup of T1, DSL, Satellite and Cable Modem Internet solutions; configuration and deployment of Windows NT/2000 servers, Web Servers, Firewall Servers; configuration of Cisco Routers and Firewalls.
• Personally established 10 domains for small and medium sized businesses averaging 50-100 users.
• Provided end-user Help Desk support on many types of Accounting programs, CAD programs, medical/dental programs, and proprietary software.
• Practiced in migrations from Novell and Windows NT to Windows 2000. Personally led/implemented over 30 migrations.
• Demonstrated expertise in Security, ISA Server Firewalls, and Port Filters.
• Provided remote support services to clients through Cisco hardware VPNs, Windows 2000 VPNs, and Citrix solutions. Supported Wide Area Networks with up to 5 sites.
• Created enterprise wide security policies. Implemented Certificate Servers.
• Generated significant referral business based on achieving high levels of customer satisfaction.
• Installed and configured W2K SBS server. Configured Exchange 2000 to host mail, configured and installed corporate anti-virus solution.
• For General Litho, established LAN/WAN system covering 5 sites utilizing Windows 2000 and VPN through Cisco Routers supporting 250 users. Configured and optimized performance for 10 servers.
• Implemented Backup strategy. Installed and configured BlackBaud Accounting software. Installed and configured 50 workstations for about 100 users.
• For Rubloff Development, moved complete network from 1 building to another. Relocated T1 Circuit, reconfigured Cisco Router, re-established WAN link to other WAN location. Moved Citrix server and NT server and relocated over 50 computers

Network Administrator

Confidential, Rockford, IL

Responsibilities:

• Upgraded Macintosh-based network to Windows NT with Windows 98 clients.
• Oversaw implementation of comprehensive dental practice system (Dentrix) requiring upgrades of servers and workstations.
• Implemented Microsoft Network Server and BackOffice services. Configured DSL Internet access. Implemented and administered Exchange server.
• Setup Citrix Metaframe server going through Cisco PIX firewall to allow secure remote access to patient records.
• Integrated digital X-Ray machine into patient files system requiring deployment of XP-enabled thin clients running off of Windows 2000 Terminal Server.