SUMMARY:

• Cisco Certified Network Professional (CCNP R&S, Security, Voice, Collaboration) Engineer experienced in configuring and managing Routers, Switches, Networking devices and appliances, Cisco Unified Communication Manager suites as well as choosing, deploying, supporting and troubleshooting Firewalls, VPNS, IDS/IPS solutions.
• In - depth knowledge of Network Administration, VOIP, Risk Management, Best Practices, Hardware and Software implementations with the ability to apply them to the strategic benefit of the organization.
• Performs strategic planning of network and application security solutions, enterprise data security including data privacy, identity management, and user provisioning.
• Highly skilled with ability to multi-task in a fast paced environment and work closely with all level of employees.

TECHNICAL SKILLS:

• Microsoft and Infoblox DNS servers
• Cisco Unified communications
• Cisco Firewalls, Routers, and Switches
• RSA VPN Token/Key, RSA SecureID
• Cisco VSS and VPC
• VLAN, STP, VTP, ISL,  802.1Q, IGMP, Etherchannel
• SCCP, MGCP, H323, SIP signaling protocols
• Radius and TACACS Authentication protocols
• Active Directory, DNS, and Microsoft Exchange
• All versions of Microsoft Windows for workstations and servers
• Disaster Recovery, including capacity planning, staging, implementation
• IPS using Cisco/PaloAlto/Fortinet/Checkpoint Firewall products
• Auditing, mitigation, or assisting in producing documentation of procedures and processes associated with standards of practice, set forth by the architects.
• Certified Cisco Network Professional, Certified A+ technician
• Cisco Firewall Security Specialist, Cisco VPN Security Specialist, Cisco ASA Specialist, and Cisco IPS Specialist.
• Expert knowledge with OSPF, EIGRP, RIP, & BGP network protocols
• EE, Electrical Engineer, CCNA, CCNA Security, CCNA Voice, CCNP, CCSP, CCVP, CCNP Security, CCNP Voice, CCNP Collaboration
• CUCM, UCCX, Unity, VCS, Jabber, OSPF, BGP, MPLS, VSS, VPC

PROFESSIONAL EXPERIENCE:

Senior VOIP Consultant

Confidential, Reston, Virginia

• Cisco Unified Call Manager, IM & P, Unity Connection, CER, UCCX 10.X/11.X; VCS/Expressway 8.9; Cisco Meeting Server 2.1.1; Cisco Jabber
• Routers (Cisco ISR 3900, 4400)
• Upgraded the UC environment from 10.5 to 11.5
• POC implementation of CMS server for video conferencing
• Project - SIP trunk provider termination on Cisco Cube for all sites
• Project - VTC system with Telepresence, VCS, CMS, MCU
• Project - Implemented Jabber MRA with Cisco Expressway and split domain
• Expert in Cisco VCS/Expressway configuration

Senior Network/ VOIP Engineer

Confidential, Arlington, Virginia

• Cisco Unified Call Manager, IM & P, Unity Connection, CER 10.5; UCCX 10.6; VCS/Expressway 8.7; Cisco Meeting Server 2.0.1; Cisco Jabber, Akkadian serverless Attendant Console
• Routers (Cisco ISR 2800, 2900, 3900, 4400)
• Switches (Cisco Nexus 2000, 5000, 7000 and Catalyst 3750, 3850, 6500)
• Worked on POC implementation of CMS server (Acano) for video conferencing
• Reconfigured and updated SRST configuration for remote sites
• Installed Cisco Prime Assurance and Provisioning 11.5 servers
• Worked on design of NSX with Nexus 9k with leaf-spine topology

Principal Network/Security/ VOIP Engineer

Confidential, Germantown, Maryland

• Cisco Unified Call Manager, IM & P, Unity Connection, CER 8.X, 9.X, 10.X, 11.X; CUAC, UCCX 9.X, 10.X, 11.X; VCS/Expressway 8.X; central Enterprise License Manager 9.X, 10.X, 11.X; Cisco Meeting Server 2.; MCUs, Cisco Jabber and Finesse
• Cisco UCS (Chassis 5108; FI 6248UP ; Blade Servers B22, B200, B230, B260; Rack Servers CC200, 220, C240)
• Routers (Cisco series 7200, ISR 2900, 3900, 4400, ASR 1000, 9000)
• Switches (Cisco Nexus 2k, 3k, 5k, 7k, 9k and Catalyst 2960, 3750, 3850, 4500, 4500X, 6500)
• Aruba Wireless (Controllers 600, 3400, 3600, 7000, 7200; APs series 100, 200, 300)
• Aruba Airwave and Clear Pass
• Big IP F5 (6900, 8950, 11000, ViprionC2400)
• Cisco Prime, Cisco ACS 5.2, SolarWinds, Wireshark and CA net-flow analyzer
• Firewalls (Cisco ASA 5585-X, Fortinet 60D, 300C, 310B, 800C, 3951B, Juniper ISG-1000, ISG2000, SA2500, SA4500, PIX 500 series, Checkpoint 2200, 4600, 122000)
• Team lead in design and configuration of new data center based on Nexus platform
• Full documentation of the design with bill of materials, Visio drawings and configuration items
• Update documentations, drawings, and data flows for all additions and decommissions
• Team lead in VOIP deployment for 30 sites from a mixture of Nortel/Avaya PBX systems and older Cisco call managers
• Documentation of required UCS servers, ESX resources, VM servers information, and all interconnection between all applications in the UC environment
• Implemented transitional call routing between different VOIP and PBX systems as we roll out and cut over sites to one Enterprise Cisco UC platform
• Implementation of gateways with MGCP, SCCP, H323, & SIP
• Implementation of ISDN PRI as well as SIP with CUBE, SBC.
• CUCM, CUC, and IM&P Certificate management for Jabber with certificate issued by third party CA.
• CUCM bulk certificate management to update Initial Trust List files when migrating phones from older versions to newer versions
• Configuration of Unity connection distribution lists, call handlers, unified messaging, broadcast messages and integrating Unity with other voicemail systems
• Managed all adds/moves/changes of collaboration end points
• Configured and maintained UCCX agent workspace with Cisco CAD and finesse.
• Implementation UCCX database dips and screen pop ups
• Configured and maintained all corporate UCCX IPCC scripts for call centers and documented the scripts with Visio flowcharts tracing call flows and triggers.
• Configured and maintained VCS Expressway for MRA and B2B
• Configured and maintained Riverbed UCExpert for Unified Communications
• Monitoring, troubleshooting and reporting of UC environment using UCExpert
• Optimize the performance and availability of network and end-user infrastructures through the application of best practices such as performance monitoring, capacity planning and trend analysis and advocates improved methodologies.
• Collect and interpret log files, recommend service packs and hot fixes, stage and install
• Configured and maintained BGP MPLS connections with Cisco ISR and ASR WAN routers
• Migrated sites from ATM and OC3 to MPLS
• Implemented redundant MPLS circuits with dual WAN edge routers
• Implemented access lists and route maps for dynamic routing between IGP and BGP for dual MPLS connections
• Increased distribution layer efficiency by implementing VPC and VSS for multi-chassis ether-channel connections
• Configured and maintained Nexus 7010 with VDCs allocated for core, distribution, and DMZ sections
• Configured and maintained Aruba Wireless across 30 different campuses and Airwave for monitoring the wireless network
• Configured and maintained Aruba IAP for small sites with central management of AirWave
• Configured and maintained Aruba clear pass for Radius, Tacacs, BYOD and NAC system
• Created proof of concept solutions, including documentation and proof of concept designs of VoIP systems
• Configured and maintained RSA for network device access authentication
• Configured and maintained F5 load balancer for different back end applications
• Configured and maintained firewalls for both site-to-site and SSL VPN
• Managed ESX hosts using VMware’s vCenter
• Configured and maintained the physical network for VMWare NSX
• Provisioned and maintained servers using VMware’s vSphere
• Tested new LAN/WAN equipments and softwares before purchase and deployment
• Reviewed network configurations and practices to enhance network functionality, performance and reliability.
• Documentation of issues, troubleshooting, and resolution and sending RCA to management for Sev1 issues.
• Supervised and coached junior engineers on the tasks related to planned activities in the network

Sr. Information Security Analyst

Confidential, Washington, DC

• Firewalls (Cisco ASA 5540, 5520, 5510, 5505, Palo Alto 2050, 2020, 550, and PIX 500 series)
• Routers (Cisco series 7200, 3600, ISR 2900 and 2800, ASR 1002 )
• Switches (Cisco Catalyst 2960, 3750,4948, 4500, 6500)
• Cisco unified call manager, Unity Connection, and unified presence 8.X
• Configured and maintained CP-7941, CP-7961 phones, CIPC and CUPC for CUP
• Configured and maintained Cisco Meeting Place for conferencing
• Helped in adds/moves/changes of Cisco phones 7941 and 7942
• Configured and maintained ASA 5540 firewall with more than 50 Lan-to-Lan VPNs and also IPSec and SSL Remote VPNs serving more than 4500 users.
• Configured and maintained Palo Alto firewalls with policies to selectively block/allow web access (such as social media sites) using application filtering.
• Provided end-user support involving installation, configuration and troubleshooting of remote VPN clients and issues for different platforms.
• Installed and configured Cornerstone MFT server to replace the existing Linux SFTP server.
• Installed and configured Phone Factor for two-factor authentication with Active Directory synchronization for Citrix remote access.
• Mange Proofpoint e-mail encryption system.
• Configure e-mail firewall rules to specifically encrypt outgoing e-mails that have information protected by HIPPA, PHI, PCI and other industry and government regulations.
• Maintained a secure and compliant network by using GFI LanGuard vulnerability assessment and patch management system.
• Managed Quest4 change auditor and reporter for Active Directory.
• Managed Microsoft ISA servers for OWA access.
• Managed Cisco call manager and unified presence 8.X
• Managed Cisco ACS, SOPHOS antivirus Console, Access Auditor, DNS servers, and Syslog server.
• Configured and maintained access switches for PCs and IP phones
• Configured and maintained a DHCP server for guest wireless in the DMZ.
• Managed user and computer accounts within Active Directory.
• Audit and review various aspects of the IT operations and data protection including system passwords, access logs, password complexity rules, etc and provide data to external auditors.
• Responsible for managing 10 Cisco ASA firewalls and CSM, 3 Palo Alto firewalls and Panorama, 1 PIX firewall, 2 ISA servers, 3 Cisco ACS servers, Cisco AS5300 dialup, 5 C4948 Switches, 1 7002 Router, 2 ASR1002 Routers, and several windows servers.

Junior Network Engineer

Confidential, Washington, DC

• Routers (Cisco series 7000, 5300, 4000, 3600, 2600, and 2500)
• Switches (Cisco series 6500, 4500, 3500, and 2900)
• Routing Protocol (BGP4, OSPF, EIGRP, RIP, IS-IS)
• Cisco call manager and Unity 6.X
• Implemented QOS Auto QOS, DiffServ, Weighted Fair Queuing, Priority Queuing, Custom Queuing, RSVP, and RED
• Configure and maintain PIX firewalls with Access Lists
• Implemented SNMP on devices to allow for network management
• Implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, and Route Maps
• Implementation of HSRP, DHCP, DNS, FTP, TFTP
• Install Cisco IP phones, new hardware, systems, and software for networks
• Install, configure, and maintain network services, equipment and devices
• Plan and support network and computing infrastructure
• Document network problems and resolution for future reference
• Monitor system performance and implement performance tuning
• Manage user accounts within Active Directory, Outlook 2007 Email Client, McAfee anti-virus

Dynamic Data Storage & Retrieval 

Confidential, Alexandria, Virginia

• investigate each application to ascertain that the invention is described sufficiently to allow a skilled person to use it
• examining the invention from a technical standpoint
• searching through earlier publications, technical literatures and online databases to ascertain that the application is novel
• making a final decision as to the novelty of the invention, which is written in a final report
• discussing and negotiating with the applicants and patent attorneys to resolve any matters raised in the final report