SUMMARY

Senior Network Engineer with over twelve years of hands-on experience in information technology. Provide skills necessary to successfully develop and manage a Corporate IT Infrastructure. This includes all aspects of technology management, from desktop client systems to server hardware and applications, Firewalls, load balancers, WAN accelerators, content filtering, CISCO and Juniper routers and switches. Provide stable and secure connectivity to minimize downtime and productivity. Effective problem solver with a positive attitude, who is also a team player, but can also work independently.

TECHNICAL SKILLS

• Networking: Cisco routers 1600,1700,2600,2800,3600,3900 ISRs,7200 and 12000,Catalyst 1900,2900,3500,4000,6000series, Nexus 5000,7000 and FEX 2000 Cisco UCS B-series,c-Series, Cisco Fabric Interconnect 6120XP and 6140XP,6248UP,6296UP,series,Dell Force10 Z9000 series switches, Enterasys A and 800 series, Juniper M40e.
• Security: ASA5520,5540, 5550,PIX 515e,506e,525,535 ,FWSM,Sonic Firewalls TZ series and PRO,Checkpoint VPN-1 Power NGX R65,Nokia IPSO,DELL SPLAT,TACACS/RADIUS,RSA secure ID,Palo Alto firewalls 2000 series, Juniper SRX firewalls 240 and 3600 series, and 3600, Cisco NAC,Sourcefire, Cisco IPS 4260.
• Protocols:BGP,OSPF,EIGRP,HSRP,VRRP,GBLP,NAT,IPSEC,GETVPN,PIM,IGMP,SIP,H.323,MGCP,SCCP
• WAN MEDIA:MPLS,Frame-relay,ATM,T1,T3,DS3,OC3,OC12,OC48,ISDN,PSTN,Leased Lines
• Network Management:HP openview Statseeker,eConcord,Tivoli,Ciscoworks,CA Health,NETQOS,Opnet nCompass.
• WAN Accelerator: Riverbed Stealhead 5050 series
• Content Filtering: Web sense version 7.1
• Quality of Service:Queuing,Traffic shaping,Policing,and fragmentation.
• Operating Systems:Windows95/98/NT/2000/2003/XP/7,Linux Redhat,Unix Solaris V7 to 10.0
• Microsoft Based software/server application technologies: Active Directory, DNS,DHCP,WINS
• Load Balancers:BIG-IP F5 6400,8400,3400,1500 series, Viprion 2400,Nortel 3408 series, load balancers,ServerIronXL switches,SSL Accelerators
• Backup Software.Netbackup 5.1 and Backup Exec.
• Network Sniffer:Wireshark,Infinistream Network General
• Linux Based Software/Server Application:BIND,IPtables,IPchainQmail,Sendmail,Nagios,VMware,Open SSLand other open source products.
• Server Hardware. Compaq HP DL 360,380,IBM X series, Cisco UCS 5108, Solaris T2000 series servers.
• Wireless:802.11b/g/n
• Software Define Network:Cisco Application centric infrastructure ACI

PROFESSIONAL EXPERIENCE

Senior Network Engineer

Confidential

• Successfully migrated the old Omaha Datacenter to the new Datacenter MDC . These involved installing and configuration of new routers and switches, analyzing firewall rules using Solarwinds firewall security manager, to delete obsolete rules on the checkpoints firewalls, testing various applications for network connectivity and performance, and also troubleshoot and resolved post migration issues. This was completed with little downtime.
• One of the lead Engineers involved in the successful integration of the TGBP/WUBS wide area network into the Western Union WAN MPLS, This involved integrating 70 Travelex global sites into the Western Union MPLS. The project included working with project management team, Cisco systems Architects, provisioning team and service providers AT T and Verizon to schedule activation while ensuring all network devices met Western Union BGP.OSPF.EIGRP, QOS, GRE, IPSEC VPN configuration standards.
• Installed and configured new 5525 ASA firewalls, created access-list based on company requirements, troubleshoot and resolved connectivity issues using tools like real time log viewer.
• Designed, installed and configured private MPLS using Cisco ASR 1000 routers for the replication traffic between datacenters. configured virtual routing and forwarding instance vrf to segregate traffic within the private MPLS
• Served as technical lead engineer to administer the new design of our sterling datacenter. Project consist of architecting new production, non-production, DMZ environment to allow host owners Cisco UCS, Fabric interconnect, EMC VNX storage, EMC recovery point and Oracle of the compute layer to build virtual machines, storage and databases.
• Recommended, configured and implemented Quality of service on Cisco routers and switches to improve voice quality, updated call recording servers Callrex to the latest version.
• Installed and configured IPSEC site-to-site VPNs to connect Western Union networks to external vendors.
• Develop and maintain documentations, procedures and network diagrams for governing the operations and maintenance of all network based devices.
• Provide recommendations to upper management, Directors, VPs regarding ways to increase reliability, quality and efficiency of the company production, development, application, database, quality assurance and bug fix environment.
• Participate in change management CM process to create technical documents and provide technical and business risk assessments including roll back plans.
• Installed and configured Riverbed steelhead WAN accelerator 5055 series to optimize, the replication and recovery point traffic across the datacenters.
• Installed and configured L2TP on Cisco 1900 routers to extend Layer two VlANS between the Sterling and Omaha datacenters.
• Work on resolving HPSM tickets in a timely manner, to meet the required service level agreements and better customer satisfaction.
• Worked on Cisco call manager and Unity to configure new phones, create route-patterns, and hunt groups, voicemail setup, and updated firmware on various Cisco phone models.
• Installed and configured Cisco voice gateway on Cisco 2900 routers using MGCP, configure SRST on the routers and also troubleshoot voice quality and music on hold MOH issues.

Computer Science Corporation

• Technical lead through a series of upgrades on emerging technologies, application enhancement including the replacement of obsolete systems, minimized corporate network vulnerabilities by installing Cisco Pix,Juniper, Checkpoint, Cisco IDS ,VPNs and layer 2 and 3 implementation.
• Worked as part of the network team to deploy U.S department of Education VOIP network, comprising of numerous call managers clusters with publishers and subscribers, Cisco 7900 IP phones.
• Technical lead on the U.S department of Education MPLS design using dynamic multipoint VPN DMVPN as backup for the MPLS.
• Designed a sophisticated state-of-the-art redundant technology of F5, Nortel AS 3408 load balancers from different manufacturers in a web hosting mission critical 24x7x365 high availability secured environment. This increased the web hosting services uptime from 96.7 to 99.99 .
• Acted as the senior escalation point for day to day router/switch/firewall/load balancers performance and security issues. Contributed to the production of root cause analysis on events and outages related to the job.
• Technical lead on IPV6 migration effort to meet the 2014 mandate deadline within the DITE IRS environment, evaluated existing network devices for IPV6 support, recommended upgrade of some of the devices to support IPV6, worked with application developers in preparation of the IPv6 migration effort.
• Developed and prepared fully detailed requirement specification documents for DITE next generation network infrastructure with focus on new switching/routing platforms, application delivery systems deep packet inspection firewalls/IDP,wireless technologies, WAN acceleration appliances and content filtering/WEB AV technologies.
• One of the Technical leads on the successful black box move of one of the IRS data centers from Maryland to Memphis, comprising of more than 1500 windows, Linux, VMware and Solaris servers, over 300 network devices and appliances with less than two weeks of downtime. This saved the Government over 5 million Dollars which would have resulted in lost productivity.

Confidential

Position: Senior Network Engineer Pentagon Force Protection Agency

• Installed and configured Cisco IPS 4200 series sensor, updated signatures to guard against external network threats.
• Monitored bandwidth and network activity by analyzing information provided by NETQOS to ensure both efficient and effective network operation.
• Administered multiple PIX firewalls and configured failover for high availability and to ensure LAN integrity from external threats.
• Recommended to turn off Dynamic trunking protocol on trunk links to reduce unnecessary bandwidth utilization the result was overall improved network performance.
• Configured PVST load balancing and the placement of the HSRP active router and the root bridge of each VLAN on the same distribution layer switch. The result was an improved traffic flow pattern and improved network performance.
• Migrated network from full mesh frame relay to Point-Point T1 on larger sites, and implemented IPSec VPN on smaller sites.
• Oversaw migration of WAN links to new service provider MPLS, set up TFTP server to backup, and restored configuration and IOS image files for the PIX, Cisco routers, and Catalyst switches.
• Hardened Extreme 200-24 and 24e's switches by complying with the DISA STIGS recommendations, configured VLANs and port authentication on the Extreme switches using 802.1x

Confidential

Position: Network Engineer

• Designed and implemented Internal Computing network infrastructure including Gigabit Ethernet backbone, 100mbs desktop switching, OC12/48 Packet Over SONET ATDN Internet peering, primary remote office DS3/OC3 ATDN peering, remote offices tunneled over IPSec VPNs
• Re-engineering of enterprise network designs to meet increasing customer demands
• Troubleshooting and problem resolution of elusive customer network difficulties
• Evaluation of new network technologies, management, and analytical tools
• Preparation of new network technology strategies and implementation recommendations
• Tool based design verification utilizing network simulation tools

Confidential

Position: Network Engineer

As a Network Engineer I performed a variety of engineering tasks which are broad in nature and are concerned with the design and implementation of integrated networks including personnel, hardware, and software and support facilities. I performed with some latitude for unsupervised actions and decisions. I planned and performed network engineering research, design and development other assignments on conformance with network design, engineering and customer satisfaction. I was responsible for technical part of major projects or projects of lesser complexity like,

• Upgraded Exchange 5.5 to 2000, created routing groups, and multiple mailbox stores for fault tolerance, created mailboxes, global address list clean up, troubleshoot and resolved E-mail traffic/flow across the enterprise network, exchange database troubleshooting maintenance and compression and also database backup and recovery.
• Directory replication and client authentication.
• Installed and configured a windows 2000 Active directory with multiple domains, created sites, for
• Troubleshoot and resolved network connectivity problems. Setup network printers and plotters.
• Installed and configured Blackberry enterprise server, allowing mobile users to send and receive mail through Microsoft Exchange server

Confidential

Position: DC Government Office of Finance and Treasury LAN/WAN Administrator

• Performed and upgraded routers/switches/VLAN Configuration and monitor overall routing performance troubleshoot and resolve Frame relay/ISDN connectivity issues
• Administered DNS/DHCP Server with Incognito IP Commander, regularly perform DNS Zone transfer within the Corporate Network
• Enabled HSRP on CISCO Catalyst 6509 for fault tolerance also IP help addresses to solve DHCP broadcast problems
• Enabled NAT on Routers to translates private IP address to public IP addresses for clients Internet access
• Installed UPS and Tape drives backing up and restoring Local and Network drives
• Solved Network Connectivity issues for end users and perform optical fibre/CAT-5 wiring capacity expansion monitored and served as troubleshooter for network performance problems like network Congestion and Multi/broadcast issues with the aid of Sniffer pro LAN and visual uptime WAN
• Enhanced and implemented Network Security by employing Pix firewall for traffic filtering in and out of the network. Hardened Network Security on CISCO routers through access-list
• Installed and configured SQL server 2000, created databases for enterprise applications, performance tuning and backup of the databases