SUMMARY:

• Over fifteen years progressive, extensive hands on experience supporting large, complex, multi - protocol, High Availability (HA), National and International WAN (MoIP, VoIP, VOIP) for private sector and government offices, NOC and Data Centers.
• Provide clients network design, proof of concept, procurement, implementation, deployment, installation, project management and Tier III Engineering support.
• Develop and provide documentation for BoM, SOP, SLA, change management control, disaster recovery, task and project management (certified ITILv3).
• Experienced in configuration and trouble shooting of IP protocols (BGP, MPLS, OSPF, EIGRP, ISIS, VRF, and RIP).
• Configure digital packet switching protocols (802.1q, LACP, PAGP, VPC, PVST+, VSLM, VLAN, VxLAN, VTP, RSTP, ISIS). Accomplished in configuration of multiple vendors CLI, IOS, NX-OS inclusive of Cisco, Brocade, Juniper, Avaya, and HP.
• Configure multi-vendor L3 stateful inspection and next generation firewalls (Cisco PIX/ASA, Palo Alto, Checkpoint, and Juniper). Install, configure and maintain real-time SIEM management services, collection agents, syslog, and storage retrieval equipment. Implement security protocols IPSec VPN, SSL, RADIUS, AAA, TACACS+, RSA SecureID, IPS/IDS, NAC and ISEv2.
• Network Monitoring Systems (NMS) to alert and report on network thresholds, anomalies, inclusive of Carbon Black Enterprise,Riverbed Steele Central, Cisco Prime, PRTG, SPLUNK (ESC), NetIQ, HP Node Manager, Solarwinds. Load Balancers F5 GMT/LMT and Wireless LAN a/b/g/n/ac. VoIP support Cisco, Avaya (SIP, MGCP).

PROFESSIONAL EXPERIENCE:

Confidential

ISSG Global Network Engineer

• Primary duties and responsibilities to provide national, international tier 3 support for T. Rowe Confidential internal, external clients and trading floor offices located in Australia, London, Luxemburg, Tokyo, Hong Kong and Singapore.
• Liaison to IT security for deep packet inspection, data forensics and look back trends analysis for all T. Rowe Confidential stakeholders. Configure, install and deploy HBC2/3 Gigamon, Gigastor and TAPS to monitor IP traffic which transverses external and isolated data links over six ISP’s and twenty DMZ areas. Utilize Wireshark PCAP captures, Riverbed Cascade and other analysis tools to provide timely reports and response for intrusion threats.
• Assist to configure external asymmetrical BGP routing between multiple ISP autonomous systems (AS) to separate data center and production networks. Configure Cisco Nexus NX-OS, IOS and DMZ ASA and Palo Alto firewalls, and legacy, routers, switches.
• Participant to support upgrades of test bed to provide proof of concept for national international deployments. Member of monthly primary to isolated disaster recovery equipment and application for failover to datacenter and provide reports to upper management.

Confidential

Sr. Engineer

Responsibilities:

• Sr. NOC Engineer for the USDA Agricultural Research Service (ARS) Office of the Chief Information Officer (OCIO). Primary responsibility to provide national network monitoring, management and operational health status for ninety-eight satellite offices and research universities connected to the ARS MPLS network.
• Analyze data traffic patterns and bandwidth requirements within network infrastructure, detecting operational problems and recommending improvements to ensure optimal network performance.
• Configure and manage Cisco Nexus, Cisco legacy routers, switches, firewalls, IDS/IPS systems according to ARS security requirements ensuring security breaches do not occur and information are safeguarded from unauthorized users. Configure Cisco ASA, Juniper and Palo Alto devices for remote access via VPN for ARS scientific community.
• Work with various telecommunications ISP providers (AT&T, Verizon, Sprint, Qwest, and the Local Exchange Carrier (LEC) to resolve ARS DS1 and DS3 circuit outages and report and\or escalate per SLA. Liaison to local and regional researchers and IT leads to troubles shoot DS1\3 connectivity anomalies as related to Internet and data communications connectivity.

Confidential

Sr. Lead Network IPT Engineer

• Project lead and Sr. Architect Engineer for Allegis UC/IPT/R&S network engineering team. Liaison for Allegis Business Group Units, sales/procurement, Network Operations, Real Estate, and UC/IPT/R&S/Network Storage deployment teams. Responsible for gathering business requirements for Confidential Operational Business Companies. Provide design, deployment, implementation, L3 connectivity and support of multiple CUCM clusters inclusive of 15, 000 routed/switched voice, data and video end points.
• Oversee analysis, Enterprise LAN/WAN/ VoIP network design, QoS, bandwidth requirements, implementation and support for Allegis data telecommunications network in support of new office expansion. Provide hands on configuration of multiple L3 network routing switching vendors. Report and trouble shoot LAN/WAN network anomalies and assist in restoration of voice /data service for all operational companies.
• Perform integration lab testing of network appliance config's to support change control of production BGP, MPLS, EIGRP, MGCP, H.323 and SIP network protocols. Tier 3 support for Call Manager 8.x, Cisco Call Manager Express, Unity Express, Cisco Presence, Cisco Emergency Responder, CUPC, and Tandberg Video MCU & end points.
• Proficient in NMS platforms including Verizon Enterprise Service Center, HP Node Manager, PRTG, Cisco Network Operations Manager, and Solarwinds. Active member and engineering implementation approver for Allegis CCB Network/IPT projects, RFI sizing, Business Continuity Board. ITILv3 and Cisco Certified for best practice IT processes and procedures.

Confidential

Sr. Network Engineer

• Hired to provide national/international engineering design, documentation, implementation, deployment and 24/7 tier 3 support for the Federal Food and Drug Confidential ’s (FDA) multi-cluster IPT initiatives. Deployed Cisco Unified Communications (CUC) platform for (ninety offices, six cluster, 30,000+ VoIP phones, wireless, IP Paging, IP Video) infrastructure.
• Liaison for GSA construction, electrical, and cabling contractors for new FDA facilities scheduled for VoIP implementation. Provide high-level documentation inclusive of rack elevations, logical and physical network diagrams, technical project plans, security assessments, project timelines and change control management for Cisco CUC product suite.
• Entrusted to ensure accuracy of client user-lists for comma delimited or Cisco BAT/TAPS utility. Hands on creation of master implementation project plans, CUCM upgrades, CSS, device pools, phone profiles, route partitions, dial plans, hunt-groups, MTP, MGCP, H323 and SIP. Work with FDA security for end to end NAC implementation and VPN support for hard wired and wireless network connections.
• Configure and troubleshoot ISP PRI and SRST for VoIP failover. Utilize Cisco NAM, Spectrum, NetCool, SolarWinds, Wireshark, to troubleshoot network anomalies. Report directly to executive management for project implementations, security considerations and 508 compliance change control management weekly.

Confidential

Sr. Network Engineer

• Responsible for the design, procurement, testing, implementation, deployment operational health and network configuration monitoring management for all Middle East Broadcasting (MBN) offices. Inclusive of Virginia Headquarters, Hall of States Washington DC, Virginia based SAWA Radio, Baghdad, Beirut, Cairo, Jerusalem, and Dubai.
• Solely responsible for configuration and support of international routing and switching, security device configuration and upgrades, ISP and Satellite link monitoring, Websense monitoring and configuration, VPN concentrators, IPsec tunnel VPN configuration, HD broadcast network routing and switching and design and implementation of VoIP network (Call Manager 3x -7x, CME 7x and Unity).
• Implement twenty-four seven network monitoring and alerting system for all circuits, links and layer three equipment attached to the MBN international network infrastructure. Additional duties include incident response, analysis and investigations, performing intrusion detection and monitoring, and providing perimeter protection.
• Report directly to MBN executive management on current risk assessments and perform IT security system audits on internal and external system. Implement, configure and deploy SolarWinds and Orion NMS inclusive of MPN, NCM, APM, Netflow and IP SLA Manager, Document appropriate recommendations for mitigation based on analysis and results.

Confidential

Sr. Network Engineer

• Accepted position with Confidential (CI) to assist Sr. IT Director with network engineering design considerations, RFP support, power consumption requirements, cooling requirements of MDF/IDF, and procurement of all network equipment for the new CI International Headquarters Data Center. Assisted in vendor selection process and presented written case for vendor(s) selection process.
• Responsible for finalization of selected vendor's bill of materials (BoM) for Core MDF, IDF equipment, PIX/ASA, MGCP, Cisco Call Manager\Unity servers, 7900 VoIP phones, and cabling topology. Negotiated with network equipment vendor to reduce total cost of L3 and VoIP equipment purchase saving the company $75K on purchase.
• Provide daily operational support for HQ core network. Implement, configure and deploy Solarwinds and Orion NMS inclusive of MPN, NCM, APM, NetFlow and IP SLA Manager, Monitored and managed forty-six international offices and provided documented analysis of network health, application performance and voice\video traffic. Monitored forty-five Cisco PIX full mesh IPsec VPN tunnels.
• Hands on configuration of Cisco switches, routers, security appliances, and WAN acceleration products (Riverbed). Work with team members for timely network problem resolution for forty-six international offices. Report directly to executive management located in Washington DC metro-area and San Palo Brazil for project updates.