SUMMARY:

• 20 + years of Network Engineering and Management for enterprises including FISERV Financial Securities, North American Bancard, Confidential, Ascension Health Center at Genesys Regional Medical
• Extensive experience in developing strategic enterprise security goals and implementing network security and identity management processes in high availability environments.
• Experienced in the design and implementation of VPNs, installation and management of Firewalls and the use of Network Security Management tools to provide maximum enterprise security.
• Bachelor of Science & Engineering Degree in Computer Science & Methodology from the University of Pennsylvania.
• 10+ years working with Microsoft products and services, including Server based solutions.
• 15+ years experience working with Routing and Switching Equipment. From Cisco, Nortel, Juniper, and various other vendors
• Combined 7 years of Public speaking within local government and education facilities on current and future technologies and the impact.
• 10+ years working with and developing Wireless Security Strategies and Implementation
• Over 10 years of Management experience in the IT industry with hand - on experience.
• Architect and deploy several wireless solutions throughout an enterprise infrastructure.
• Disciplined in various Firewall products. Juniper, Cisco, Nortel, Fortigate
• US Citizen with excellent writing and communication skills.

PROFESSIONAL EXPERIENCE:

Confidential,MI

Resposibilities:

• Security, recovery, audit and control methods and concepts related to healthcare systems, directory services (e.g. Active Directory and DNS), access control, discovery and vulnerability scanning, encryption, firewalls, VPN, malware, operating systems.
• Provide reporting to management, set up Information Security dashboards and metrics on information security logs and Respond to security incidents that are complex and highly sensitive in nature
• Install, configure, and support Cisco Routers, switches, firewalls, and VPN Concentrators in a complex, high-availability, global environment.
• Ensure all LAN/WAN Service changes go through review, change control and acceptance prior to execution.
• Handle the department budget, purchasing and operational cost.
• Designed and implemented several infrastructure hardware and software requirements.
• Interact at an executive level with management, and outside customers and vendors
• Design a viable redundant network with several backup solutions
• Synology NAS for Cloud and backups.
• Planned and documented an implementation of Active Directory and Domain File Servers in the network architecture of 400,000 global nodes
• Produced security policies and procedures (both organization-wide and departmental). Updated existing policies and procedures and developed new ones that are needed.
• Documented comprehensive inventory of the individually identifiable electronic health information maintained.
• Cisco Wireless LAN Controllers: Design and Maintain all infrastructure Wireless aspects.
• 1+ Million dollar department budget, and saved thousands of dollars after only being employed 6 months.
• Windows Servers 2008 -2012, Including Exchange, IIS, Virtual, Datacenter
• Cisco Meraki Wireless at an enterprise level
• Fortinet Firewalls - 100d, 50e, 60d,
• HPE Aruba 2530+ switching infrastructure
• VoIP Cloud Solution with over 200 phones throughout the enterprise.
• Order and Maintain several fiber connections throughout the network.

Manager of Global Network Engineering

Confidential, MI

• Configure, Design, Maintain and coordinate all aspects of the Checkpoint Firewall version R75.30. Certified as a Checkpoint Security Engineer.
• Configure Design, Maintain and support the Cisco ASA 55xx Security Appliance.
• Analysis Vulnerability scanning and Intrusion detection and prevention
• Configure site-to-site VPN tunnels between end points through the CCP ASA 5500
• I am responsible for all aspects of the Juniper WXC Application Acceleration platforms which include 17 WXC2600 and 7 WXC3400. I take all inquiries from the customer to run and maintain all the configurations and adjustments on these devices. Along with the Firewall and traffic applications, I was responsible for all aspects of the LAN and WAN with over 300 network devices including Cisco 3750 edge switches and Cisco eight Core 6509 switches, 27 2811 and 17 3845 site routers. I was responsible for all aspects of maintenance, configurations, and security of all these devices.
• Develop and Review all Business continuity and disaster recovery plans and Research future technologies that may be used within the infrastructure environment.
• Work directly with managed service providers to design, install, and maintain managed network services.
• Architect and Manager the Infrastructure DMZ Globally by providing the security aspects.
• Travel to various national and global sites.
• Assist divisional and facilities IT support with the design, configuration, installation, and support of network services.
• Evaluate new technology and present opportunities to improve the future network architecture, performance, and network services.
• Incident response and forensic investigations
• Maintain vigilance and drive on global projects as assigned leveraging the global team.
• Identify and escalate issues in the networked environment that may potentially negatively impact business operations.
• Provide Quarterly and yearly employee reviews. Mentor Junior engineers on policy, procedures, and technical aspects of their positions. Supervise over 12 network and system engineers, and provide high level support when needed.
• Verify and Comply with all HIPAA and Payment Card Industry Data Security Standard (PCI), ISO 27000, ISO 9000, Qualys
• Cisco Wireless LAN Controllers: Design and Maintain all infrastructure Wireless aspects.
• 2008 Proxy Server with Websense Monitoring for WAN traffic control
• Cisco 55xx ASA Firewall and VPN appliance using ASDM
• ManageEngine and Solarwinds Orion Monitoring
• TACACS+ for Network access authentication
• SONICWALL, Juniper, PF Sense and Cisco Firewalls ASA 55xx ASDM console
• Checkpoint R77 Firewall Manager: Oversee all firewall changes in Smart Dashboard

Global Network Engineer/Architect

Confidential, MI

• Configure, Design, Maintain and coordinate all aspects of the Checkpoint Firewall version R7.5
• I am solely responsible for all aspects of the Juniper WXC Application Acceleration platforms which include 17 WXC2600 and 7 WXC3400. I take all inquires from the customer to run and maintain all the configurations and adjustments on these devices. Along with the Firewall and traffic applications, I was responsible for all aspects of the LAN and WAN with over 300 network devices including Cisco 3750 edge switches and Cisco eight Core 6509 switches, 27 2811 and 17 3845 site routers. I was responsible for all aspects of maintenance, configurations, and security of all these devices.
• Install, configure, and support Cisco Routers, switches, firewalls, and VPN Concentrators in a complex, high-availability, global environment.
• Work directly with managed service providers to design, install, and maintain managed network services.
• Architect and Manager the Infrastructure DMZ Globally.
• Develop Process and Procedure for Disaster Recovery for all Datacenter and LAN/WAN Communications.
• Assist divisional and facilities IT support with the design, configuration, installation, and support of network services.
• Evaluate new technology and present opportunities to improve the future network architecture, performance, and network services.
• Manage daily work flow of reporting specialists with regards to operational support for LAN/WAN Services. 
• Maintain vigilance and drive on global projects as assigned leveraging the global team.
• Identify and escalate issues in the networked environment that may potentially negatively impact business operations.
• Ensure all LAN/WAN Service changes go through review, change control and acceptance prior to execution.
• Review/assist and support the Team Lead, Global Internet/Extranet Services as required.
• Participate in strategy setting meetings of any influencing technical service lines.
• Mentor and provide guidance to LAN/WAN specialists encouraging their technical development.
• Develop or streamline processes to further improve the delivery of Global Network & Telecommunication Services
• Cisco Wireless LAN Controllers: Design and Maintain all infrastructure Wireless aspects.
• 2008 Proxy Server with Websense Monitoring for WAN traffic control
• Nagios Monitoring System
• TACACS+ for Network access authentication
• Juniper Application Accelerator WXC3400
• Cisco 6509 IOS 12.5 with K9 Security in a Mess design, Cisco VPN Concentrator 3015, Cisco 2950 switching, Cisco 3560G POE, Cisco Routers, 2811, 3750, 1811
• Design and Configure all DHCP and VLAN scopes.
• Checkpoint R75.20 Firewall Manager: Oversee all firewall changes in Smart Dashboard

Senior Network Manager

Confidential,MI

• Systems that I current perform maintenance, upgrades and services on:
• Nortel 8600 Enterprise Core Router/Switch
• Nortel LAN devices = 55xx switches, 470 switches, 45xx switches
• Nortel Secure Wireless and Nortel 2330 Access Points
• Nortel BCN Core Router and Nortel Passport 2430 Routers for Remote sites.
• Cisco 3845 and 2811 Core Internet Routers
• AT&T OPTEMAN Internet Configurations and Routers
• Maintain all Remote Site network equipment and services
• Maintain and Update all network diagrams and policies
• Maintain the Network Monitoring tools and Bandwidth Monitoring tools.
• Maintain ALL network configuration files and backups
• Work with Firewall Administrator on ALL firewall requests and testing.
• Work several Ministry Projects simultaneously.
• Interact with the Ministry customers and Vendors on a daily basis to ensure all technical needs are met.
• Maintain all the Vendor devices within the Ministry and assure that they are on a Vendor DMZ.
• Ability to cross support St. Mary’s of Saginaw. Have been supporting both Ministries for 4 years.
• Maintain, Configure, and Design all Routing and Switching aspects of the Network.
• Oversee all Change Control requests within the Networking Group for the Ministry.
• Design and implement over 100 new designs for each local and remote site.
• Order and cancel PVC circuits that are needed for the bank. DS3, T1, SONNET ring and AT&T Opt-E-MAN circuits.

Senior Network Manager

Confidential,MI

• Design and Implement a full upgrade to Confidential network infrastructure. This would include over 50 remote sites, 2 redundant Core Networks, and 6 Major hospitals within Southeast Michigan.
• Coordinate with high level executives on a day to day basis to ensure project status and time frames are being maintained and goals achieved.
• Configure and manage Nortel ERS8600 and ERS5500 series network device for both layer 2 and layer 3 routing and switching..
• Develop a detailed deployment plan for deploying the ATT OPTEMAN (Optical Ethernet Metropolitan Area network).
• Utilize Netformix to formulate a Build of Materials and budgeting costs for various types of equipment needed for deployment.
• Install NetIQ Voice Analyzer at customer sites to analyze voice traffic quality for future deployment of VOIP.
• Configure and Maintain Chantry Wireless Controllers and Thin Client throughout Henry Ford Hospitals for quick response and improved patient care.
• Wireless Development & Implementation Strategies using both Cisco Solutions and Chantry/Siemens Enterprise Wireless product.

Network Systems Manager

Confidential,MI

• Develop, plan and implement the overall strategic security goals of the organization’s network system globally including Internet/Intranet and Extranet.
• Evaluate and recommend changes to current and future network security requirements to meet the organizations needs.
• Developed, Implemented, and maintained the Web Sphere Internet and Extranet web filter.
• Configured and maintained all dealership Cisco VPN 3002 hardware clients (297), and the Volkswagen VPN concentrator.
• Setup and configured the Windows 2000 server, and prepared for hardening and the security policies needed for the environment.
• Configure, Maintain and drive the technology on all 2950, 4000 and 6509 Cisco Switch, Cisco 1700, 2500 routers for Remote WAN location.
• Code and Hardware upgrades on all switches and router within the organization, through the tftp process.
• Software usage: Cisco ACS, Cisco VPN 3000, Concord Reports, NetID (DNS), Cisco Works.
• Create and modify all VPN concentrator groups. Modify filters and rules for VPN access.
• Used Sniffer Enterprise Management Architecture to provide Enterprise Network Security and Performance Management & Monitoring.
• Designed Network Architecture using MS Visio 2000, and provided updates to the diagram.
• Used ISS RealSecure/SiteProtector IDS system to implement security standards and policies.
• Designed, developed and implemented procedures for server hardening.
• Maintained Solaris forms of x86 operating systems for the NOC troubleshooting techniques.
• Established department policies and procedures for Active Directory and Exchange 2000.
• Deployed strategic plans that will improve the overall performance and reliability of the company’s information structure utilizing Net Pro Directory Analyzer.
• Provided the development architecture for the integration of directory services, network security, workflow, privilege management tools and PKI into the network hierarchy.
• Oversee the development, integration and design of ActiveDirectory into multi-platform environment.
• Worked with several customer based security tools and software to develop the standards for Class 3 certificates to be distributed through an OpenSSL Platform.
• Designed and implemented processes for Identity Management and single sign on processes with Smart Card Technology and Encryption and Decryption of Emails.

Network Systems Manager

Confidential,MI

• Develop, plan, and implement the overall strategic security goals of the organization's network system including Internet/Intranet and Extranets.
• Evaluate and recommend changes to current and future network security requirements to meet the organization's needs.
• Used Sniffer Enterprise Management Architecture to provide enterprise network security and performance management.
• Designed Network architecture using MS Visio 2000, and providing updates to the diagram.
• Provided the development architecture for the integration of directory services, network security, workflow, privilege management tools, and PKI into the network hierarchy.
• Oversee the development, integration, and design of Active Directory into multi-platform environments.
• Developed Single Sign On process with Smart Card technology and Encryption and Decryption of Email.
• Configured, synced and troubleshot Palm OS PDA’s by using the Desktop application and HotSync.
• Used Marimba’s Server management products to manage network inventory, content distribution, software distribution, and server integration modules for effective network performance.
• Used Checkpoint products such as SiteManager 5.5 for the visual management of the network security, fault tolerance of all management operations, and the distribution and inventory software centrally.
• Directly responsible for all design, development, and implementation of the network components.
• Developed logical security application architecture utilizing iPlanet technologies, LDAP, WebLogic, Netegrity Siteminder and Securant ClearTrust.
• Designed and researched Microsoft Active Directory topology for the current network infrastructure.
• Installed forests, trees, and domains.
• Created sites, subnets, site links, and connection objects for the existing infrastructure.
• Automated domain controller installation. Configure server objects. Considerations include site memberships and global catalog designation. Implemented an organizational unit (OU) structure that was used globally.
• Provided the design decisions for all aspects of the AD planning and development phase.
• Verified and troubleshot Active Directory installation.
• Upgraded from Windows NT to Windows 2000 in mixed mode and then converted all PDC’s & BDC’s to Native Mode.
• Installed and configured DNS for Active Directory by running DCPROMO.exe.
• Integrated Active Directory DNS zones with existing DNS infrastructure.
• Configured zones for dynamic updates and secure dynamic updates.
• Created and configured DNS replications and backup records.
• Managed, monitored, and troubleshoot DNS issues that arise.