SUMMARY:

• Network Engineer, System Administrator and Security Analyst with 12+ years experience in IT industry.
• Team Lead for large - scale Windows servers, Linux servers, Routers, Switches and Firewalls deployment.
• Act as the owner of a problem through resolution. Analyzes issue and takes actions to resolve problems including Root Cause Analysis and Problem Remediation.
• Experience in network management and security tools like SNMP, Netflow, Syslog, tcpdump and Wireshark to troubleshoot high severity issues.
• Excellent skills to implement VLANS, Voice VLANS, Port security, standard and extended ACLs for managing access based network security.
• Fiber Channels, 1G/10G Ethernet, VPNs, WAN/LAN/WLAN, TCP/IP Protocol, IP Addressing and Subnetting, ACLs, Routing Protocols, Applications Protocols, VLAN, Port Mirroring, Port Security, Trunking and Etherchannels.
• Solid background in maintaining and troubleshooting Ubuntu and CentOS servers.
• Installed and configured SSH, FTP, DNS, DHCP, Apache, Tomcat, MySQL, PHP, Firewall, Squid, NMS, SIEM, NIDS, HIDS, IPAM, VoIP PBX and Syslog.
• Deployed, managed and maintained on premise and cloud based network monitoring systems.
• Experience with Dell SonicWall 4500 series, Cisco Router 2800 series, Cisco Switch 4500, 3500, 2900 series, ASA 5500 series
• Installed and configured enterprise level Hypervisors, Citrix XenServer, ESXi and MS Hyper-V.
• Adept in preparing technical documentation and presentations using MS Visio, Cisco Packet Tracer and GNS3.
• Window Server 2008/2012, DHCP, DNS, Active Directory, Group Policy, Load Balancing, Failover Clustering, Backups, WSUS, WDS and NTFS and industry security principles.
• Solid background with Windows PowerShell for automation.

TECHNICAL SKILLS:

Networking: Cisco Switches 2960, 3560, 3 750 and 45 00 Series Cisco Routers 2 800 and 29 00 Series, HP Procurve 1 810 and 25 10, Dell PowerConnect M6220

Wireless Access Points: AeroHive AP230, Aruba 105. Cisco Aironet 702

Security: Cisco ASA 5505, Dell SonicWall 4600, OSSEC HIDS, SNORT IDS/IPS, OpenVAS, Alien Vault SIEM, Trend Micro, Sophos

VoIP/SIP: Asterisk - FreePBX, Cisco Unified Communications, Polycom VVX 300/400/500/600

Hardware: Dell M1000e, PowerEdge, OptiPlex and Latitude, HP ProLiant

Virtualization: ESXi, Microsoft Hyper-V, Citrix XenServer

Network Monitoring Systems: OpenNMS,, ZABBIX, Rsyslog, NetFlow Analyzer, ntopng, Dell OpenManage

Syslog Management: Graylog, Adiscon, OpenNMS, Nagios Log Server

Scripting: Windows PowerShell 3.0, Bash Shell Script, Python

Operating Systems: Windows 7/ 8/ 10/ Server 2008/ 2012 Linux Debian, Ubuntu, CentOS.

Cloud: AWS, Microsoft Azure

PROFESSIONAL EXPERIENCE:

Confidential

Network Administrator

Responsibilities:

• Deployed, documented, managed and maintained MPLS network infrastructure for over 40 locations nationwide including headquarter office.
• Planned and managed all phases of network installation.
• Designed and implemented headquarters office network.
• Monitored 400+ nodes using OpenNMS, Hive Manager and Graylog.
• Planned and migrated phone systems from analog to VoIP.
• Configured, deployed, managed, maintained, and supported 120+ Cisco networking hardware and 170+ Aerohive Access Points.
• Designed and implemented network security policy.
• Evaluated and recommended specific network technology products and platforms to provide cost-effective solutions that meet business and technology requirements.
• Created and maintained support documentation and technical drawings of the enterprise network infrastructure.
• Improved network failover design using VPN, VRRP, BGP, iBGP, Track Reachability and BFD.
• Managed, maintained and supported network administration and monitoring tools TACACS, NMS, Syslog, FTP, Main Relay, IPAM and Vulnerability Scanner server.
• Coached IT deployment team with network related tasks.
• Designed and proposed network installation qualification test plan for quality assurance purposes.
• Responsible for reviewing and signing installation qualification documents.
• Provided consultation and solutions to complex IT related challenges in the organization.
• Acted as stakeholder and participated of behalf of IT Infrastructure team in meetings regarding new projects.

Confidential

Network Security Analyst

Responsibilities:

• Worked in 24x7x365 global security operation center analyzing threats and cyberattacks detected by Snort IDSs.
• Resolved and escalated high severity incidents within 15 min SLA window.
• Employed advanced forensic tools and techniques for attack reconstruction and intelligence gathering.
• Performed network traffic analysis utilizing raw packet data, IDS, logs and custom sensor output as it pertains to the cyber security of communications networks.
• Utilized understanding of attack signatures, tactics, techniques and procedures associated with advanced threats.
• Maintained continuous monitoring of a global network intrusion detection system (NIDS), firewall, and log correlation tools for potential threats.
• Responsible for initiate an investigations and response to incidents to counteract potential threats/vulnerabilities.

Confidential

Network Systems Administrator

Responsibilities:

• Designed and created the Unified Monitoring Solution (MeshVU)
• Designed, implemented and analyzed complex LAN, WLAN and WAN.
• Designed, managed and maintained open source network monitoring system.
• Designed and provided high availability and redundancy solutions.
• Installed and configured virtual Linux servers on Citrix XenServer.
• Installed and configured VPN access server by using OpenVPN.
• Researched, evaluated and recommended hardware and telecommunications equipment to enhance the performance of the network.
• Researched and recommended innovative and possible automated approaches for system administration tasks.
• Identified potential IT security risks and recommended detection and prevention strategies; investigates and utilized new technologies and processes to enhance security capabilities and implementing improvements by using Linux based solution
• Installed new/rebuilt existing servers and configured hardware, peripherals, services, settings, etc. in accordance with standards and project/operational requirements.
• Managed Trend Micro worry-free business security services.

Confidential, Houston, TX

System Analyst Level 3

Responsibilities:

• Assisted in the planning, designing, documentation, and implementation of various systems to include desktop PC’s, servers, network equipment, and software applications.
• Assisted in migrating VoIP system from Cisco UCM to PBX
• Worked in PCI complaint environment and implementing PCI security standards.
• Maintained, supported and troubleshoot of workstations to over 1000 nodes.
• Assisted in migrating VMs from ESXi to MS Hyper-V.
• Administrated Active Directory and Group Policy.
• Developed automation scripts through PowerShell.
• Generated and managed hardware and software inventory.
• Designed and implementing security policies.
• Archived and audited Active Directory logs.
• Managed and maintained Windows Deployment Server
• Monitored and maintained EMC VNX storage
• Responsible for organization’s hardware and software inventory.
• Managed and installed windows update through WSUS.
• Responsible for disaster recovery plan.
• Designed and implemented backup strategies.
• Responsible for planning, deploying and managing Windows 7 migration for over 700 PCs.
• Monitored and audited OSSEC HIDS.

Confidential, Houston, TX

IT Technician

Responsibilities:

• Recommended and implemented network wide security management solution, including firewall rules and configuration and router access-lists.
• Responsible for WAN connectivity between four locations through VPN.
• Maintained desktops and application server.
• Implemented users’ security policy.
• Installed, configured and implemented network-based services and applications.
• Designed and maintained company website.
• Installed and configured Security Camera System.

Confidential

Network Administrator/Owner

Responsibilities:

• Responsible for maintaining Cisco Access Routers and serving dialup internet over E1 circuit.
• Responsible for managing and maintaining DNS servers
• Responsible for managing and maintaining Active Directory.
• Responsible for administrating and accounting up to 1000 dialup users.
• Installed and configure outdoor Point to Point wireless bridge.
• Configured and tested all necessary network platforms under extreme time constraints resulting in successful customer acceptance.
• Installed and configured point to point wireless network.
• Provided 24/7 technical support service.