SUMMARY:

• Network Security experienced and commercially astute professional, wif a wide ranging skill set encompassing, LAN/WAN/Wireless and Network Security, design infrastructure technology é Network Support align to business needs. Working wif disciplines of cloud infrastructure, design, configuration and support of technologies wifin a LAN, WAN ITIL framework environment.
• Network Security via NGFW - Cisco ASA-5545X / Cisco ASA 5585 upgrade to Cisco FTD / FMC
• Implement Palo Alto 00, 5020 Firewalls in HA wif GP / VPN and Panorama Global policies
• Amazon AWS Cloud - DNS setup via Route53, Storage S3 wif MFA Autantication, Python Scripts
• AWS Storage connection via EC2, S3, VPN region connection. Test SD-WAN via Cisco Viptela
• Deploy IOS upgrade on Fortinet FortiGate 400 series firewall via FortiManager Dashboard
• Microsoft Azure Storage setup, VM wif ATP Sensors, Palo Alto Traps End Point Security Manager
• Kemp Load-Balancer administration for Layer2/Layer3 (MAC/IP), Layer4/Layer7 Static / Dynamic
• Cisco ISE v 2.4, deploy 2 nodes for admin/monitor, support via CLI / GUI License, Policy / Posture.
• Support Office365 ATP in Virtual DC for anti-phishing, anti-Malware, Safe-Attachments
• Cisco Nexus 2000 00 HSRP, VRF in Cisco 4506-E in VSS / HSRP Ether Channels, STP, Core Cisco 6500 . Routing protocol - OSPF, EIGRP, BGP. MITEL VoIP phone server admin.
• Cisco MDS 9500 wif FCOE, Hitachi SAN-Lun via HDS on Brocade switch to VMWare / MS-Win 2016 Hyper-V, Win 2012 wif RAID 1 and Win 2012 AD, Win 10, VMWare ESX hosts Redhat/Ubuntu Linux- DNS admin / DNSSEC. Kali Linux wif IP tables
• Wi-Fi network roll-out Cisco AP’s for 200 sites through WLC-5508 wif FlexConnect SSID’s
• Use SNMP in SolarWinds (NCM) monitoring - Cisco devices, Wifi, Syslog Server, Core Cisco 6500
• Troubleshoot Cisco AnyConnect VPN, Palo Alto-GP, IPsec VPN, WildFire Threat database, Vlans, STP, VSS/VRRP/HSRP, PoE Cisco Switches, SSL/TLS encryption, Palo Alto /Cisco ASA firewall installation / deployment. Manage Datacentre Edge Routers / Switches wif MPLS links.

WORK EXPERIENCE:

Network Administrator

Confidential

Responsibilities:

• Support Cisco 4500 wif HSRP via ISR 4330 routers wif DMVPN connection secured via Palo Alto 3000
• Perform upgrades on Palo Alto firewalls via Panorama, setup Site to site VPN, Policies, NAT rules

Security Consultant, Security Operations

Confidential

Responsibilities:

• Support Cisco ASA in HA, Palo Alto firewalls via Panorama, NAT rules, AnyConnect, GP, IPsec VPN’s
• Deploy Palo Alto Panorama to push global policies, device config via SSH / TFTP, traffic priority QoS, URL-filtration, DNS / NATing, upgrade IOS ver 7.0 to 8.0, IPSec - SSL VPN, check false positives
• Implement FortiGate firewall VPN wif DHCP / AD Auth. Checkpoint R77 firewall rule administration.
• Cisco ISE project v 2.4 wif PAN / MnT / Service node wif AAA auth via TACACS+ / RADIUS server
• Handle Cisco Catalyst / Nexus switches and OS - Cisco NX-OS, Cisco ASA-OS, Cisco IOS, Cisco IOS XE
• Configure Cisco ISR 4400 series for Edge Network on EIGRP / OSPF, BGP, test Cisco ASR 1001 routers
• Correlate wif clients to amend Cisco 3850 PoE switches, deploy Ether Channels to Core Cisco 6500
• Amazon AWS cloud Security for Amazon S3 storages wif Route55 sync to cloud, Python scripts
• Troubleshoot IPSEC-VPN / F5- networking issue, Routing / Switching Cisco Nexus 5000 / Nexus 7000 wif QoS / Vlan, VRF / STP AWS firewalls / Route53 DNS / monitoring via SNMP on SolarWinds. Use of WireShark, Syslog and Palo Alto logs, direct logs to SPLUNK server

Senior Security Engineer

Confidential

Responsibilities:

• Implement Palo Alto IOS updates IPSec VPN, manage via Panorama, Install PA-800 in HA on ver 8.0
• Work wif SOC and Forensic teams on Palo Alto Wildfire. Deploy routing protocol OSPF / BGP
• Support VLan’s on Cisco 6500 switch wif RSTP, VMWare Win 2016 RAID -1 servers for DNS / Jumpbox access for Cisco 5585 firewalls wif AnyConnect customers, Install AAA auth via TACACs

Network Administrator

Confidential

Responsibilities:

• Implement full TCP/IP Network / Firewall - Cisco ASA 5545 in HA wif AnyConnect, perform IOS / VLAN updates, IP Subnet IPSEC / IKEV2 VPN to MS-Azure Cloud, routing - OSPF, EIGRP / switching / MPLS
• Support Cisco 4500 switch wif VSS EtherChannels / HSRP. STP. VOIP server MITEL administration.
• Support KEMP Load Balancer for MS-Exchange (L4/L7) for Cisco switches L2/L3 (MAC/IP)
• Upgrade PA-500 FW to Cisco ASA-55516 wif AAA via RADIUS, plan site ip-subnet links for WAN
• Troubleshoot all Network / Routing / Cisco WLC AP’s on SSID’s, VOIP, SolarWinds monitoring via SNMP

Network Administrator

Confidential

Responsibilities:

• Support DMVPN sites on MPLS cloud using IPSEC VPN Tunnels via Cisco 2911 wif QOS (Traffic)
• Troubleshoot EIGRP, OSPF area routes, STP on Stack Switches, VTP / VLANs, trunks / access ports
• Perform various WAN Acceleration / Optimization using Riverbed Appliance on various DMVPN sites.

Senior Network Technician

Confidential

Responsibilities:

• Network Support for LAN/WAN issues, make firewall rule changes, NAT, Static, IP-sub netting, Access-Lists changes on Cisco PIX to Checkpoint - R65 on Solaris - add rules, troubleshoot, perform backups
• Maintain MS-Win 2012 AD user database wif MS-Exchange, support all Win 7 desktop application

Data Centre Specialist

Confidential

Responsibilities:

• Support dual Edge Cisco 6509 wif HSRP config / Core Cisco 7206 wif EIGRP, OSPF areas, BGP routes
• Configure Cisco 3500 switches for different VLANS, Support connects to Alteon 5412 load balancer
• Hitachi SAN switch upgrade CiscoMDS9500 from Brocade wif SM Fiber links for zones and LUN;s
• Setup DNS server on RHEL 6.0 primary / secondary to resolve all Alias, CNAME, MX and SOA records

Data Centre Network Operations

Confidential

Responsibilities:

• Setup Data Centre for Remote Access Managed Services via Cisco 6500 switches using RIPE IP address
• Support Windows2003 for AD configure DNS on RHEL 5.1 setup Zones, reverse-lookup, Sync wif ISP
• Monitoring via HP-Open View / Solarwinds / Nagios and Cacti, monitor all HSRP failover connections
• Work wif NOC and 3rd parties on 24 x 7 shifts, handle Power issues, Mains, UPS / Battery, Rack Space

Network Analyst

Confidential

Responsibilities:

• Administration of Bind DNS on Solaris 6 wif all record types A, MX and C use Dig / NSlookup / debug
• Upgrade WAN ISDN link to dual ADSL MPLS cloud, IP Subnetting, routing via Cisco ACS RADIUS server for Cisco ADSL routers (800 and 1840), Cisco NAC autantication, ensuring policy-based posture
• Install Network Switches / Routers wif IOS upgrades, perform cabling Cat5e changes, fibre laying
• Support Bluecoat Proxy - SG8100 for WAN optimization of web access via Alteon Load Balancer

Infrastructure Systems Analyst

Confidential

Responsibilities:

• Setup Solaris 8 Sun Directory Server 5.2 wif Windows2000 AD via LDAP for repository of patient records, configure Sun One Messaging wif SMTP / X500 connectors, wif Mail Groups
• Support Win2000 server wif MS-Exchange2000 for Crown Court services via MS-Outlook, SMTP relay
• Connect courts via ADSL - Cisco803 routers attached to PIX 515 for VPN access for court officials