SUMMARY:

• Provide remote day to day firewall/VPN support for over 30 customer environments, which spans across multiple firewall platforms, including Cisco PIX/ASA, Juniper Netscreen, and Checkpoint. Daily administration of over 100 Netscreen firewalls using NSM (Netscreen Security Manager).
• Configuration, implementation, and problem determination across the major firewall platforms and understanding each customer’s environment at a granular level.
• Responsibilities include rule implementations, VPN setups, upgrades, new builds. See checkpoint platforms that I have successfully, planned, installed, validated, documented.
• 9 years of Linux (2.6 kernel) Experience, from design to deployment, configuration and monitoring of the following processes and services: software: HTTPs (httpd), DNS (bind), Proxy (squid,ftp - proxy), SMTP (postfix), iptables, SSH (OpenSSH), syslog.
• Used to scale and design entire architectures to meet industry Best Current Practices requirements
• Experience with 2.4 / 2.6… kernels
• Adhering to the NIST Guide to secure configuration and real-time log rotation Compliance with ITIL and SOX mandates
• Checkpoint 4.1 through NGX R65
• Smart Center and enforcement point construct
• Checkpoint User Center management and licensing
• Secure Platform on HP Proliant DL380 G4-G7 Servers Checkpoint 4.1 through NGX R65 (Converting to R75) Smart Center build through software loads and deployment. This includes from scratch flash through sysconfig and cpconfig.
• Checkpoint User Center management and licensing (HA Configuration; hot/standby, user/profile management, object auditing and reclamation, rule base rewrites, Smart Update to manage license repository, SmartView Tracker for auditing and trouble shooting, trace route, ping, TCPdump using complex filtering, zdebug and fw monitor)
• Bare-Metal deployment on WINTel and UNIX platforms
• In transitioning Nokia to SPLAT in a High Availability environment to seamlessly relocating the corporate firewalls and Smart Centers to a new hosting facility; Internal and external domain management in a global enterprise. Installation on UNIX using standard BIND or CHROOT BIND. Installation on Windows using either Windows DNS or ISC BIND.
• IPAM on Infoblox (with F5 integration)
• Network and application debugging skills as related to firewalls
• Scanning and network penetration testing
• DMZ design and architecture definitions (including complex rule NAT to accommodate multi armed DMZ's/ misc. security devices)
• LTM (v. 9/10/11) (Strong hybrid network design and support)
• GTM (v. 9/10/11) (WIP/DNS intelligent load-balancing)
• Enterprise Manager (including version 3.x)
• Advanced Routing module (ZebOS)
• IRules (tcl)
• Protocol Level network troubleshooting (Wireshark, TCPdump, Splunk, MRTG/ PRTG)
• Linux and subsystems
• Network routing
• High Availability /Stateful Failover— Active-Active/ Active Standby
• SSL experience: plan/ price and reliability, order, keys, implementation; troubleshooting using some of the following SSLdump, sslkey, openssl, key tool, key conversion
• Physical installation/ configuration, performance tuning
• Composed complete new user guide (reducing time to preparedness for new support engineers)

OVERALL KNOWLEDGE SKILLS ASSESSMENT:

Routers: Cisco (12 years), Nortel Networks Switches, Bridges, and Hubs: Cisco Catalyst, Extreme Switches (with density provisioning), HP-Switches/ Bluecoat Proxy SG with advanced WAN Optimization/, Proxy in the cloud (PITC) POC with Blue Coat Cloud Service

Load Balancers: F5 Big-IP LTM v.9 - 10 (Currently Learning LTM 11.x) familiarity with: WCCP/CSS, ACE and clear understanding of load-balancing.

Security: Security-1 -PIX, ASA, CBAC, CSIS, Checkpoint R70.40

Routing: Static Routing, RIPv1/2, IGRP, EIGRP, OSPF, (MBGP/BGP) ODR, DDR,GRE, MPLS, IPv6, Traffic Engineering, Policy based Routing. ACL’s, Redistribution, Summarization, Secure VPN tunnels) client/ site to site or multiple sites.

Switching & Bridging: CatOS, IOS, NXOS, based Switches, VTP, Ether-channel, VLANs, ISL,(M)/STPLAN:

Media Ethernet, Fast/GbE/ 40/ 100 GbE Ethernet, Ring Topologies, ATM LAN Emulation: Network Analyzers: Ether-Ape, Ether Peek, Wire-Shark, NMAP, Nessus, Cola soft/, Capsa

WAN: Leased lines 64k - 155Mb (PPP / HDLC), Channelized lines (E1 / T1 / E3 / T3)/ circuits up to OC-48 speed, Frame Relay, ATM, ISDN, C-band VSAT (iDirect), MPLS (350 tunnels and process for rapid deployment of MPLS/ redistribution)

Network Monitoring and Management Systems: HP-Open View, Net Cool Omnibus, Concorde, MRTG, RRD, Cricket, Nagios, PRTG, Splunk.

Ticketing Systems: Remedy ARS, Clarify, Impact, MS Exchange.

ISP: (Internet Service Provider) Registry Handling with RIPE, SWIP, ARIN, AP-NIC, DNS, SSL Certs/ Chains… and SSL low level diagnostics (SSLdump, Wireshark, HTTPwatch/ Fiddler), IP address management (largest block /16) - most notable, responsible for IP integration and documentation of Best Current Practices.

Documentation: Proficiency in creating clear, concise, accurate, technical documents, project plans, and diagrams.

PROFESSIONAL EXPERIENCE:

Network Support Engineer

Confidential, Champaign, IL

Responsibilities:

• Linux System Administrator for production network
• Build, Monitor and maintain all HPC clusters
• Platform OCS, OSCAR Pro, ROCKS+, Scyld53
• Virtualization (Sun/ VMware/ ESX 4.01)
• MPI support, Infiniband Support, Performance tuning

Confidential, Maui, Hi

Dell Temporary Resident HPCC Engineer

Responsibilities:

• Administration of: 5,120 processor Dell Power - edge 1955 HPCC
• Approximately 1520 Processors
• Use of Dell Remote Access Control for the 1955 chassis (DRAC)
• Manage Secure Patches for the cluster
• Ensure SLA's were met (MTTR)
• Management of 86 IB (Infiniband x4) (Topspin / Cisco) switches
• Management of 30 Cisco IB core/ pass-through switches
• Design and procedure to implement of a complete HPC refresh scheduled for spring 2009

Confidential, Redmond, Washington

High Performance Computing (HPCC) Engineer

Responsibilities:

• Perform comparative analysis for performance and feature sets of FOSS and Proprietary HPC Packages
• Bare metal evaluate the core components of Windows 2003 CCS and Windows Server 2008 Computer Cluster
• Compare / contrast Windows Compute Cluster Server with FOSS and proprietary HPC packages
• Drive production of multiple white-papers with results of HPC comparisons
• Coordinate and distribute Share point based Hands on Labs ( Confidential 's), marketing collateral, demo videos, support to more than 225 worldwide deployment; for the Windows Server 2008 launch., Microsoft Visual Studio 2008 and Microsoft SQL Server 2008 launch, with an emphasis on:

Confidential, DuPont, Washington

Senior High Performance Computing Engineer/ Linux administrator

Responsibilities:

• Check Point/ Nokia IPSO-IP5xx administration
• Contributor to $1+ Billion in HPC sales
• Build of HPC Clusters /physical assembly to include: Racking and stacking of servers, racking and configuration of IB + 1GbE switches, Network cabling of IB/GbE/ Quadrics networks, Panasas storage, providing a secure customer experience.
• Install cluster O/S (ROCKS, OSCAR, Manual install w/ scripting and validation of HPC performance via (Streams, TRIAD, LinPack, in-house scripts)