SUMMARY:

Network engineer with over 19 years extensive IT management experience in delivering service that leads to exceptional customer satisfaction and improvement in overall operations.

PROFESSIONAL EXPERIENCE:

Confidential

Senior Network Security Engineer

Responsibilities:

• Task with creating site infrastructure drawings and updating the firewalls with the new Exxon naming standard
• Reviewed and corrected the firewall high availability configuration with the new Active/Standby and Active/Active HA configuration on Cisco ASA Firewalls.
• Configured Cisco ASA firewalls in Single and Multiple Context firewall modes.
• Upgrade of Cisco ASA Firewall in Active/Standby mode with no down time.
• Worked closely with the Global team leads concerning infrastructure and related LAN and WAN issues and Firewall Policy Clean up and Optimization.
• Responsible for building out new firewall configurations for data center sites and implementing the initial policies, configuring NAT, policy provisioning

Environment: Juniper SRX Firewalls, Juniper Routers, Junos Space Cisco Series routers: Cisco Security Manager, Cisco Nexus 7000, 5000, 2000 Cisco 6509, 2951 Switches: Cisco 3750, Cisco 2960

Confidential

Senior Network Engineer

• Responsible for configuring and troubleshooting Cisco firewalls, routers and switches for the Conns Network.
• Lead network engineer for the build and support network infrastructure, assist or lead various projects
• Responsible for setting up and redesigning the remote access VPN for users to use LDAP authentication.
• Lead Network Engineer for the development and preparation of new wireless Motorola access points for new and upcoming store sites .
• Accountable for the design and complex troubleshooting of BGP over MPLS configurations for the Conns primary store circuits.
• Experience building firewalls at the data center and implementing the initial policies, configuring NAT, policy provisioning
• Configure L2L VPN with various business partners and 3rd parties and troubleshoot VPN Phase 1 and Phase 2 connectivity issues including crypto map, encryption domain
• Build and configure Active/Standby Failover on Cisco ASA with stateful replication.

Environment: Cisco Series routers: Cisco Nexus 7000, 5000, 2000 Cisco 6509, 2951 Switches: Cisco 3750, Cisco 2960

Confidential

Senior Network Engineer

• Responsible for configuring and troubleshooting Cisco routers and switches for the Exterran Network.
• Assigned to build and support network infrastructure, assist or lead various projects
• Assist in implementing network changes.
• Creation and maintenance of run - books, standards, configurations, work instructions, architecture,
• detail design documentation.
• Work with Global team concerning infrastructure and related LAN and WAN issues.
• Lead engineer for the new Cisco Nexus Data Center Router cut-over from the Cisco 6500 series routers.
• Managed and monitored the Cisco Unified Communications Manager
• Support routing protocols including BGP and OSPF routing, HSRP, load balancing/failover configurations, GRE tunnel Configurations, VRF configuration and support on the routers
• Installation, configuration and troubleshooting of new firewalls in the environment along with in place upgrades.

Environment: Cisco Series routers: Cisco Nexus 7000, 5000, 2000 Cisco 6509, 6513, 3945, CUCM Switches: Cisco 3750, Cisco 4500, 3560, 20960 Firewalls: ASA5500, Websense Proxy

Confidential

Service Corporation International (Contractor)

Senior Network Engineer

• Configure Cisco routers, switches and wireless network devices for the SCI Network.
• Responsible for implementing and configuring DVMVPN design for new broadband connection funeral sites.
• Project lead for designing and training junior engineers on a wide area network for uses of Quality of Service, Encrypted IPSec tunnels, Multicast and load balancing techniques.
• Lead Network Engineer for the development and preparation of new wireless Cisco Meraki Access Points for new and upcoming funeral sites .
• Created and configure the new Cisco Nexus Virtual Domain Context s, applied the following settings: AAA, SNMP, ACLs, SVIs, HSRP, L2/L3 port-channels.
• Active/Standby and Active/Active HA configuration on Cisco ASA Firewalls.
• Configuring Cisco ASA firewalls in Single and Multiple Context Mode firewalls.
• Upgrade of Cisco ASA Firewall in Active/Standby mode with no down time.
• Firewall Policy Clean up and Optimization.

Environment: Cisco Series routers: Nexus 7000, 5000, 2000, Cisco Call Manager CUCM,Cisco Merkai MR12, MR18 and MR26, MR34, MR66 Access Point Switches: Cisco 3750, Cisco 4500, MS220-24, MS22048 Firewalls: ASA5500, Websense Proxy 

Confidential

Hewlett-Packard (Contractor)

Senior Network Engineer

• Configure Hewlett-Packard routers, switches and wireless network devices for the Hewlett-Packard network.
• Responsible for implementing network design and configuration for new sites on the HP network.
• Tasked with assisting and directing site engineers with site configuration and network circuit cutovers

Environment: HP 7500 Routers, HP 5820, HP ProCurve 5400, HP ProCurve 3500 HP MSM710 wireless controller, HP420 Access Point

Senior Network Engineer

• Responsible for tasking, assisting and directing site engineers with network site upgrades.
• Team lead for conducting weekly backups for the server and network upgrades.
• Tasked with providing high level administrator support to operational forward new deplo yed sites in order to improve system/bandwidth performance.
• Project lead for implementing the design of a new LAN layer 2 network and WAN layer3 network for CVR Energy.

Environment: Cisco Series routers: HP 7500 Routers, HP 5820, Avaya VOIP IP Phone Servers: Windows 2003 Server, Windows 2008 Server, VMWare, ESX 4.0 Firewalls: Cisco ASA 5200

Senior Network Engineer

• Project lead for the design of a new LAN layer 2 network and WAN layer3 network for the Terrorist Screening Center Network
• Project lead for network-wide hardware and software upgrades on the Terrorist Screening Center LAN layer 2 network and WAN l ayer 3 network.
• Promulgated and administered an IPSec and GRE tunnel lab for junior network engineers on the TSC network.
• Project lead in charge of conducting equipment inventories for the TSC Data Center.
• Assisted with the FBI classified network cut over from an ATM backbone to a new MPLS backbone for the Terrorist Screening Center network.
• Designed an enterprise network routing architectures using protocols such as BGP, EIGRP, and static routes.
• Project lead for the creation of VPC domain, design single sided VPC

Environment: Cisco Series routers: Cisco Nexus 7000, Cisco Nexus 5000 7609, 7606, 6513, 6509, 2950Switches: Cisco 4948, Cisco 3750, Cisco 355 Firewalls: Cisco ASA 5000,

Network Engineer

• Configure Marconi ATM switches, Juniper routers; Cisco routers and switches, and many other network devices for the Defense Information Systems Network exercise sites
• Troubleshoot network routing issues within the Defense Information Systems Network
• Execute network-wide hardware and software upgrades for network security updates into the VMS system, which is needed for all DOD equipment that preside on a DISA network
• Utilize NTIS program to order new equipment needed for new Defense Information Systems Network exercise sites

Environment: Cisco Series routers: 7204, 7206, 7301, 7304,

Confidential 

Application System Engineer

• The deployment of the suite consists of installation of six Windows 2000 servers, network configuration, system integration, as well as user and system administrator level training for all worldwide sites.
• Tasked with providing high level administrator support to operational forward deployed sites in order to improve system/bandwidth performance.
• Responsibilities included daily maintenance and configuration of the DCTS systems on three wide area networks (SIPRnet, NIPRnet, and the Coalition Federated Battle Lab Network (CFBLnet) and provided direct troubleshooting support for all currently deployed DCTS sites as well as assist the DCTS help desk in troubleshooting any open trouble tickets.
• Provided technical support for the Joint Warrior Interoperability Demonstration (JWID) exercise. The exercise allows over 500 users to collaborate real-time across 8 countries using DCTS

Environment: Cisco Series routers: 7204, 7206, Cisco 4000 Switches: Cisco 3550, Cisco 3650., Cisco 2600, Windows 2003, Windows 2000, Windows SQL 7.0, Envoke Server, OSPF, RIP, RIPv2, IIS, Visi