SUMMARY

Highly proficient Certified Cisco Network Associate Engineer with more than 20 years of Information Technology experience. A self - starter and team player with hands-on experience in large to mid-sized networks, that includes routing and switching, VLAN, Cisco CBAC firewall security, IPsec, VPN, and IPv4 subnet design - and is mandarin self-taught. The gaps in my resume is the result of me taking some time off to care for my elder brother who is stricken with severe stroke.

TECHNICAL SKILLS

Cisco Hardware: IPS, ASA 5520, 3825 series routers, 2960G/3560/6509E 720 and 2T supervisor engine switches

Network Technologies: Infoblox DNS-DHCP, Microsoft Active Directory, Cisco IOS, IPv6, Routing

Protocols: BGP, TCP/IP, EIGRP, OSPF, 802.1Q, STP, PVST+, QoS, 802.11, NAT, AAA, SNMP, HSRP

Security: Cisco ASA, IPS; Check Point, ACLs, switchport port security feature, IOS commands, Sophos

Cryptography: VPN IPSec, 3DES, MD5, IKE, Sha-1

PROFESSIONAL EXPERIENCE

Confidential, Columbia Maryland

Network Engineer

• Requires upgrading Cisco ASA 5510/5520 firewall running IOS code 8.2 and 8.3 to 8.4 code then to 9.8 version.
• Migrate from ASA 5510/5520 IOS software to ASA5516X next generation firewall
• Configure Cisco VPNs that includes the customer requirement to quickly learn Cisco new flex VPN.

Confidential, Maryland

Network Engineer

• Teamed with engineers from several companies on the same task to migrate the DoD web of networks to their regional network security hub where various security devices: firewall, IDS/IPS, Cisco routers, switches, and F5 load balancer are arranged in the network topology layout.
• Daily morning meetings with the migration teams to discuss configuring EBGP and IBGP, VRFs on routers running IP service enterprise class license, route reflector cluster, MPLS, route target and route distinguisher.
• Lockheed advertised the position located in Maryland. A week after being hired, I was surprisingly informed to commute to Springfield VA to work. Not wanting the hectic commute to Virginia I updated my resume and put it back online then terminated my employment the beginning of June

Confidentia, Maryland

Network Engineer

• Short-term temp assignment to apply patch management of new Cisco IOS layer 2 switches and IPS signature files.
• Reconnect Cisco switches, SFP (small-factor pluggable transceiver), trunk ports, CAT5e, computers, and printers.
• I took the job knowing full well the position would expire Confidential the time it came to conclusion.

Confidential, Washington DC

Network EngineerNovember

• The first week on the job Confidential UCDC I identified a security hole in the Cisco ASA enterprise firewall. I requested to my manager that we should better secure the network and was given permission to insert CheckPoint best practice stealth rule to protect Cisco (CBAC) firewall technology and place this rule near the top of the firewall rule base.
• Signature-tuned Cisco AIP-SS20 IPS frequently, good understanding of IPS Inline mode and signature files
• Stateful inspect ICMP thru ASA global policy so ICMP is not used as a dry run leading up to network attack
• Support the University IPsec dial-on-demand L2 VPN where end user connection is integrated with Active Directory
• Demonstrated know-how designing networks and positioning a firewall and IPS within the network IP address scheme.
• Harden network security on all Cisco networking devices by downloading the most recent IOS file updates
• Segment Cisco 6509E 720 supervisor engine switch, L3(3560) and L2(2960) via VLANs and trunk (802.1q) to core.
• Tested the University perimeter security by pinging outward to DMZ to obtain . From DMZ ping inward for ….
• Used access-list to control internal security, and port security feature to control MAC addresses on Cisco switches.
• Implemented 802.1D best practice procedure to select the root bridge, and not the switch dynamic lowest MAC address.
• Expand the University RFC-1918 space addresses from /24 to /21 to support more than 4,000 new wireless end devices.
• Troubleshoot network routing using the TCP/IP stack, Cisco IOS show commands, debug, and wire shark.
• Modified BGP edge router neighbor network commands. Configure non-production EIGRP and OSPF test networks
• Tasked to research new DNS-DHCP server. Researched and recommend Infoblox enterprise server that I assisted
• Documented the University network using MS Visio displaying the wired and wireless devices with IPv4 layout.
• Assisted the Microsoft team with NAS storage technology; have a good understand of FCoE in the Ethernet world.

Confidential, Washington DC

Network Engineer

• Racked HP and Confidential servers, and configured Cisco PIX behind Federal Aviation Administration intranet.
• Installed MS SQL, Norton ISA servers, configured VMware ESX and Windows 2003 cluster servers.
• Configured VLANs on Cisco 4006 switch, assist with F5 load balancer configuration

TEK System - Deployment

Confidential, Washington DC

• Upgrade desktop computer hardware, upload end user’s data to network storage then download said data to newly deployed systems. Configure new desktop computer identical to the old one it replaced.

Confidential, Virginia

Accenture Network Support

• Supported DoD classified environment configuring RSA card to enhance end user secure login.
• Configured Sonic firewall to close ports deemed a security risk.
• Installed windows server 2003, configured active directory, IIS, created user accounts and GPOs.
• Troubleshoot PC problems using ping, ipconfig, netstat, traceroute, DNS/DHCP, and network cabling.
• Advised and assisted end users to backup PST files, and make file size no larger than one gigabyte.
• Configured RSA cards to enhance secure login, and implemented policy to lock-away unsecured laptops.

Confidential, Maryland

Network Administrator

• Managed local area network, PBX, backup user data, troubleshoot computer issue from desktop to wiring closet.
• Configure Microsoft servers, connect user desktop to local area network and support issue w
• Advised users and department’s heads about computer brands, specification, and pricing.

Confidential, Maryland

Firewall Engineer

• Used Provider 1 to manage more than 300 Check Point firewalls, Configured Checkpoint VPN and secure remote.
• Configure static routes, VRRP, used routing table, firewall logs, tcpdump troubleshoot and track firewall real-time data.
• Used Visio to diagram and support the verification of switches and servers in the DMZ.

Confidential, Maryland

Network Administrator

• Working for the IRS customers document, design, set up, and configured, and support local area networks.
• Installed various computer applications in support of user request for testing.
• Upgrade Cisco router, configure routers in support of DNS testing, use Visio to diagram network modification.

Confidential, Maryland

IT Support

• Supported Health Human Services HRSA MIS department’s network risk assessment.
• Inspected network configurations, servers, location of peripherals, and documented information.
• Purchased, and tested Kane Security Analysis software based on best practices to audit HRSA NT and Novell servers.
• Developed documentation summarizing the project and provided recommendations to further improve security.

Confidential, Maryland

Desktop Support

• Working Confidential Marriott International I supported end users break/fix hardware/software, that includes many commercial-off-the shelf (COTS) applications.
• Worked in a NOC environment where technicians would take and own a trouble ticket until it is resolved.

Confidential, Maryland

Sr. Network TechnicianOctober

• Managed the delivery of quality network support to end users and department directors Confidential Confidential FSA division.
• Provided back-up to junior technicians troubleshooting LAN/WAN and break/fix issues.