SUMMARY:

• An experience IT professional serving major companies including Confidential, Confidential, Confidential, Confidential, HP, Confidential, Confidential, Confidential / Confidential ( Confidential ), Confidential, Confidential, Confidential, Confidential, Confidential, Confidential Investments, Confidential, Confidential, Confidential, and Confidential .
• Great at performing root cause analysis to troubleshoot, and resolve complex technical issues.
• Strong organizational and communication skills; self-starter; desire to continuously expand skill set; general analytical skills.
• F5 BIG-IP DNS / GTM v13
• F5 Troubleshooting BIG-IP LTM v12
• F5 Configuring BIG-IP ASM v11: Application Security Manager
• Creating Knowledge Objects Splunk 6.x
• Searching & Reporting Splunk 6.x
• Using Splunk 6.x
• Securing Networks with Cisco Routers & Switches - Router 2811, Switch
• Check Point Certified Security Expert Application Intelligence - (CCSE)
• Certified Information Systems Security Professional - (CISSP)
• Vulnerability Scanning/ Network Security Assessment/Penetration Testing - (CEH)
• Administering Security on the Sun Solaris Operating Environment (SCSECA)
• Advanced Solaris 9 Operating Environment - (SCSA)
• Sun Solaris 8 System Administration
• Sun Fire Midrange Server Administration (ES-420)
• Red Hat Certified Engineer Linux - (RHCE)
• Sun Perl Programming (DPT-250)
• Sun Shell Programming for Unix/Linux System Administrators

TECHNICAL SKILLS:

Hardware: Sun Ultra 5/10, Sun Enterprise 2, Sun Fire 3800/4800/6800, Cisco 2524/2515/2501 Routers, Catalyst Switch 2916M, HP Compaq Proliant Series, Confidential Netfinity Series, Confidential xSeriesOS: F5 BIGIP, MS Windows NT/2000/2003 Server, Sun Solaris 7/8/9, Red Hat Enterprise Linux Server 2.1/3/4, Novell SUSE Enterprise Server 9, Novell Linux Desktop 9, Fedora Core 2/3/4, Mandrake 10, Knoppix 3.4, Linux distributions

Protocols: HTTP, HTTPS, FTP, SCP (secure copy), RSH (remote shell), Telnet, TCP/IP, ICMP, ARP, SMTP, SNMP, DNS, DHCP

Software: VMware ESX and Workstation, Exchange 4.0/5.5, IIS 4/5/6, SQL 6.5/7/2000, Active Directory, C/Korn/Bourne/Bash Shell Scripts, VBScript, Windows Script Host (WSH), WMI

Tools: Nmap, SuperScan, Netcat, Tcpdump, TCP Wrappers, SAINT, SSH, Nessus, Whisker, RBAC, sudo, John the Ripper, Tripwire, MS Network Monitor, dsniff, snoop, Ethereal

Firewalls: Gauntlet v2.1, Checkpoint NG with Application Intelligent (AI), Snort

PROFESSIONAL EXPERIENCE:

Confidential - Phoenix, AZ / Fortworth TX

Load Balancing Consultant

Responsibilities:

• Acted as an onshore lead and helped manage offshore engineers. Interviewed new engineers.
• Troubleshot and resolved many issues related to Load Balancing technologies.
• Reviewed and approved Load Balancing changes in Network CAB meetings. Peer reviewed and approved others’ CRQs. Helped managing and coaching Load Balancing offshore team of implementation engineers.
• Prepared F5 LTM and GTM tmsh scripts or commands, raised and implemented CRQs. Created scripts for Net New build using AppViewX.
• Used VitalQIP v8.x to reserve IP addresses (IPAM - IP Address Management) for VIP registrations, and managed external and internal DNS for resource records such as NS, CNAME.
• Managed Cisco GSS (Global Site Selector) similar to F5 GTM for Global Load Balancing.
• Removed weak cipher lists such as RC4, and added TSL1.1 and TLS1.2 for Netscaler Virtual Servers. Cleaned up old NS configurations.
• Renewed SSL s for F5 and Netscaler using Venify or manual process.

Environment: F5 Big-IP LTM/GTM v11.5, Viprion 2400, irules, Netscaler 9.3 and 10.5, Cisco GSS 3.1, AppViewX, Venify, VitalQIP, Splunk 6.x, ExtraHop, TMSH commands, tcpdump, Wireshark, SSL s

Confidential - Plano, TX

F5 VPN Consultant

Responsibilities:

• Performed day to day operational tasks such providing 2nd Level VPN Support for ~ 9000 MAC users with OS Sierra 10.12.5 and ~ 30000 Windows users.
• Participated in change implementations for APM Policy updates such as ISP logging, Network Access connections split tunneling of traffic.
• Upgraded BIGIP from v
• Installed and updated to use in irule to identify ISP
• Audited SSL s expiration and renewed s as needed.

Environment: F5 Big-IP LTM/APM v11.5 and v12.1.2, TMSH commands, Splunk, tcpdump, Wireshark, SSL s

Confidential - Irving, TX

F5 & Citrix Load Balance Design/Build Consultant

Responsibilities:

• Provided Load Balancing Design consultation to customers such as using Client SSL and Server SSL profile to secure application traffic.
• Built Load Balancing devices using approved version and hot fixes.
• Secured and hardened (port and interface lockdown) Load Balancing devices such as only allowing https traffic to the Management interfaces, and disabling unused interfaces.

Confidential - Dallas, TX

F5 BIG-IP Load Balance Engineer - Life Cycle Management (LCM)

Responsibilities:

• Acted as Team lead to facilitate Engineering meetings and internal Design reviews, interviewed candidates and trained new engineers.
• Submitted ROARS DNS requests and econnect Firewall rules requests.
• Migrated successfully 3DNS WIPs (V9.4) to F5 WIPs GTMs (V10.X and V11.X).
• Participated in TMOS upgrade from v10.2.X to V11.5.X on 8900 series LTMs (RMA style), and TMOS upgrade from 8900 series LTMs with v10.2.X to 5000 series LTMs with V11.5.X (RMA plus style).
• Created CCP and CRQ to do logical and physical decommissioning of legacy devices.
• Created and presented documents to TMDA (Traffic Management Design Authority).
• Reviewed Netscaler configurations and built F5 configurations to match like for like. Implemented LTM/GTM iStrat/iCore Work Orders and Vital QIP (Bind DNS) entries.
• Participated in project calls and worked with internal bank groups as well as LOB to gather detailed technical requirements.
• Helped build F5 LTMs, generated reports, uploaded qkviews to ihealth.f5.com, and worked with Confidential for device onboarding.

Environment: Netscaler, F5 Big-IP LTM v9.4 / v10.2 / v11, 3DNS, GTM v10 / v11, TMSH, bigpipe commands, iRules, tcpdump, SSL s, Vital QIP (Bind DNS), TechDirect

Confidential - Broomfield, CO

F5 BIG-IP Load Balance Engineer / F5 Consultant

Responsibilities:

• Audited SSL s expiration using Enterprise Manager and renewed s as needed.
• Used Splunk and other tools to research and investigate issues.
• Engaged in complex production impacting technical issues and worked to troubleshoot and restored service. Replaced defective F5 units, RAID drives.
• Performed day to day operational tasks such Change requests, Request for Services, Upgrades, Modifications, and Incident Support.
• Used web portal tools to manage InfoBlox DNS Host Record and Host Alias Record.
• Implemented ASM tasks on internet facing VIPs such as enabling asm security for httpclasses, creating web applications and security policies, XML profiles, and policy blocking for RFC Violations.

Environment: F5 Big-IP LTM v10.2 / v11, GTM v10 / v11, ASM v10, TMSH, bigpipe commands, iRules, Splunk, tcpdump, SSL s

Confidential - Plano, TX

Account

Responsibilities:

• Migrated successfully load balancer configurations for Mail components ( Corporate MTA, Ironport, LDAP) out of San Francisco data center, and also implemented new design from 3 data centers model (SF, TX,VA) to 4 data centers model (KC,PADC,TX,VA).
• Served as Load Balancing Engineering SME for Confidential account to create fault-tolerant solutions primary using F5 LTM & GTM technologies.
• Provided core application engineering, which includes overseeing strategic solutions, collaborating with different engineering groups to develop initiatives and strategic solutions, and provide oversight on standards.
• Provided application solution engineering, which includes technical reviews and developing solutions for specific projects engagements (typically with a more regional focus). Analyzed technical and business requirements for projects, and detailing of the design.

Environment: F5 Big-IP LTM v9.4 / v10.2 / v11, 3DNS, GTM v10 / v11, TMSH, bigpipe commands, iRules, IW Remedy - MAC (Move As Change), Maximo (RFC System), MIR3 (Intelligent Notification)

Confidential - San Francisco, CA

F5 BIG-IP Load Balance Engineer / F5 Consultant

Responsibilities:

• Performed various configurations on the F5, including OS upgrades, and troubleshooting of the devices like expired SSL /key. Automated routine tasks such as startup / shutdown and log management.
• Used TCPDUMP and SSLDUMP and trace analysis tools such as Wireshark, Fiddler, httpwatch to identify root cause of issues. Wrote control/route script to disable/enable pool members.
• Created install guides and standards for the various environments. Used bigpipe command lines/CLI as well scripting to create packet filter rules, monitors, profiles, virtual servers, iRules, pools, and hundreds of pool members in some projects. Created F5 Remote Control (java application) configuration bundles which leverage iControls (F5 web service) with YAML files to deploy configurations, iRules, classes, and automate commands for BIGIP v10.x.
• Researched and wrote iRules to check persistence cookie, pool members, and check/modify/replace uri and header based on external data group or class files, and more.

Environment: F5 Big-IP LTM v9.4 / v10.2, iRules - TCL (Tool Command Language), Sun One Web Server, Putty, SecureCRT v6.2

Confidential - Arlington, VA

Monitoring Consultant / Senior NetIQ Engineer

Responsibilities:

• Planned, designed, evaluated and selected monitoring solutions and tools in a complex local and wide area network environment. Provided third level customer support such as troubleshooting and problem determination, monitoring, and log analysis.
• Served as organization spokesperson on advanced projects and/or programs. Acted as advisor to management on advanced technical research studies and applications.

Environment: NetIQ AppManager 6/7, NetIQ Control Center, NetIQ Analysis Center, NetIQ Security Manager 5.5/6.5, SharePoint 2003/2007, OCS, What’s Up Gold 7.x

Confidential - Fort Worth, TX

F5 BIG-IP Load Balance Engineer / Web Engineer - Enterprise Business Services

Responsibilities:

• Migrated Resonate network load balancer VIPs and rules to BIGIP pools, iRules and Virtual Servers for development and production web sites.
• Wrote iRules to perform tasks such as routing traffics to different pools, sending logs to remote Syslog server, redirecting http to https, rewriting http host / uri, passive monitoring, redirecting https based on source IP addresses, SSL persistent or sticky cookie, and many others.
• Researched and wrote iRules for the F5 Big-IP LTM 6900/6400/3600 Application Delivery Networking devices.
• Installed, configured, and supported F5 Big-IP LTM systems. Tested, documented, and performed upgrade Big-IP system software v9.x. Used many bigpipe commands to query/manage Big-IP LTM systems. Managed 16 devices using Enterprise Manager 500.
• Provided advanced support for many technologies and applications such as CA SiteMinder Policy Server v6.0 (i.e. setup/troubleshot Realm, Rules, and Policies) and Resonate Central Dispatch (i.e. created and troubleshot Resonate rules, or brought up/took down servers in real-time) in the Web farm environment with about 1100 web sites.
• Created SiteScope v10 monitors to capture events and email alert notifications.
• Administered and maintained Sun One LDAP Directory Server v5.2, Sun iPlanet 6.0, Web Server 6.1/7.0, Reverse Proxy server.
• Modified ACLs and obj.conf files for Admin Server and many other instances.
• Created Sun Proxy server equivalent ACLs from httpd.conf on the Red Hat Stronghold Proxy server involving Sun LDAP Directory Services as well as password flat file.
• Hardened Sun Secure Reverse Proxy server based on industry best practices.
• Configured http and https (SSL) web sites using Apache 2.2 and Red Hat Enterprise Linux RHEL 5.3.
• Wrote UNIX scripts to automate tasks like query information or execute commands against multiple remote servers.
• Wrote/manipulated (for command and adsutil.vbs) scripts to automate tasks for multiple web servers such as list/modify IIS 5/6 pools and identities, list web sites, list users/groups in local admin group, list/modify service accounts, change passwords, and etc...

Environment: Web farm, Web Hosting, LDAP, keystore explorer, SiteScope v10, UNIX Solaris 10, QUEST TOAD for Oracle, Logrotate, cron job, Windows 2000/2003, Sun Reverse Proxy server, NetApp Storage Systems - FAS3100 Series and Data ONTAP OS, Resonate Central Dispatch, F5 Big-IP LTM, iRules - TCL (Tool Command Language), IIS 5/6, iPlanet Web Server 6.0, Sun One Web Server 6.1/7.0, ColdFusion MX7, HTTP, HTTPS, SSL, CA SiteMinder Policy Server v6.0, REHL 5.3, Apache 2.2.