PROFESSIONAL SUMMARY:

• Senior Network Engineer with more than 20 years of LAN/WAN Administration/Design/Security/Implementation and troubleshooting experience. Proactive, ability to handle escalations, interface well with customer, solve complex issues, and mentor junior team members.
• Project Management - Manage teams to design/deploy network solutions Network design - comprehensive physical and logical including IP schema with fully redundant networks for small to large sites.
• Switching and Routing - install, upgrade and refresh configuration and code
• Network Security - Network security configuration, monitoring, intrusion detection, firewalls, DOS, DHCP snooping, port-based security, Dynamic ARP inspection, switch spoofing, VLAN hopping, 802.1x port-based authentication
• VPN - Implement site-to-site IPSEC tunnels to connect offices and remote access, MPLS
• Hardware - installation, maintenance and upgrade of network devices
• Multicasting - IGMP, PIM, Sparse-Dense Mode, troubleshooting
• Quality of Service - Classification, Queuing, Policing, Shaping
• Experienced with HSRP, SPAN, PVST+/Rapid-PVST+ spanning-tree, and Port-channel design and implementation
• Monitoring, troubleshooting, administration and reporting using SolarWinds, Nagios, Neuralstar, CiscoWorks, OpsWare and Confidential Business Direct.
• IP Telephony - Avaya 9610/9620 phones, Cisco 7970 phones, QOS/AutoQOS configuration and troubleshooting
• Cisco Wireless - WLSE, WIDS, Wireless AP and controller configuration, maintenance, and administration

TECHNICAL SKILLS:

Technologies: OSPF, IP, BGP, EIGRP, MPLS, VPN, SSH, VSS, DMVPN, IPSEC, ACL, SPAN/RSPAN, HSRP, VLAN, VTP, STP, SNMP, NAT, SCP, TFTP, FTP, Remote Access, Dialup, T1-T3 Circuits, Multilink, Frame-Relay, MPLS, Cisco ACS, TACACS/RADIUS servers, RSA, ISP changes, Unix

Hardware: Cisco Routers (891, 2900, 2600, 3800, 7200, 7500 series) and Switches (Catalyst 2950, 3500, 3600, 3700, 3850, 4503-E & 4506-E, and 6500 series), Juniper SSG5 and SRX100/240 Routers, F5 LTM, Palo Alto 5060, McAfee S-5032, Stonegate 5206, Checkpoint NG and Cisco ASA 5505/5510 firewalls, SafeNet, Cylink and Nortel Encryptors (T1&T3), Taclane Micro, Tandberg Z150, Riverbed, Cisco Autonomous and Lightweight Wireless Access Points and Controllers, CAT 3-CAT6 Ethernet and SM/MM fiber cabling, APC UPS, 110 block punchdown

Tools: Nagios, Ciscoworks LMS, Junos, OpsWare, Neuralstar, HP Openview, NetCool, Infoblox, Solarwinds Watch It, Putty, SecureIT, CiscoSecure ACS, MRTG, MS-Visio, Tivoli Netview, PCAnywhere, What s Up Gold, Protocol Analyzers (Wireshark, Etherpeek), Unix

PROFESSIONAL EXPERIENCE:

Network Engineer

Confidential

• Primary Engineer/Project lead on project to turn commercial product into one managed by State Department to manage personnel tracking devices Confidential all embassies worldwide.
• Support SMSe team in deploying SMSe new and upgrade routers worldwide; and troubleshooting network issues utilizing OSI model (layer 1-7)
• Primary Engineer on Switch Redundancy project to upgrade EoL switches and install redundant switches located in the DMZ area of the PSD network.
• Prepare Engineering Orders to deploy 450x and 3850 switches Confidential multiple ESOC sites nation-wide
• F5 Load Balancer Enterprise Design project including best-practices from numerous government and NGO sources.
• Support for the PTL (Personnel Tracking Locator) program worldwide including evaluation of commercial design to bring it in-house and troubleshooting networking issues
• Upgrade network devices to comply with DS security guidelines and best-practices

Senior Network Engineer

Confidential

• Switching and Routing Support for U.S. Navy Yard unclass and class networks
• Root Cause Analysis, diagnose application/network performance issues using various network tools while meeting established SLA deadlines
• Update Routers and Switches to be compliant with DISA STIGs
• Insure all Cisco device hardware and IOS are updated on regular basis to remediate software bugs and other hardware/compatibility issues
• Update Router ACLs weekly to comply with Navy Security regs
• Update approved “whitelists” to support Navy web users using proxy servers

Senior Network Engineer

Confidential

• Supported the contract for classified//unclassified FBI networks worldwide
• Root Cause Analysis, diagnose application/network performance issues using various network tools while meeting established SLA deadlines
• Network Design and engineering support for FBI sites worldwide
• Setup/configure MPLS VPN’s
• Deployed new routers/switch and support activation of new/upgraded circuits
• Switching and routing support for operations and maintenance of FBI devices
• Configuration of DMVPN, VSS for redundancy
• Multicast support - sparse-dense mode w/RP, troubleshooting issues
• Switching support - VLANs, HSRP, subnetting, ACL’s, TACACS
• Network LAN/WAN monitoring - NMIS, What’s up Gold
• Utilize OSI model for troubleshooting layer 1-7 networking issues

Technical Analyst

Confidential

• Provide world-class technical support to Marriott client brand helpdesk support reps, LAN/WAN, dial-in clients and system users world-wide
• ISP cutovers including ACL and routing and DNS updates
• Setup/configure Overlay VPN’s
• Provide monitoring and troubleshooting support for Marriott LAN/AN
• Root Cause Analysis, diagnose application/network performance issues using various network tools while meeting established SLA deadlines
• Escalate remedy tickets to level 3 or ISP when required
• Provide documentation via Remedy and management reports daily or ad-hoc
• When required, provide technical development and support skills within the LAN/WAN environment

Senior Network Engineer

Confidential

• Supported the TWD Domestic contract for U.S. State Department (over 2300 nodes) and ENS Executive Programs
• Setup/configure peer-to-peer VPN’s between Main State and remote sites
• Root Cause Analysis, diagnose application/network performance issues using various network tools while meeting established SLA deadlines
• Network Design and engineering support including BOM/BOE submissions
• Engineering support and network design for contract proposals as needed, including Wireless proposal work for Cisco/Aruba for DISA
• Switching and routing support for operations and maintenance of TWD devices
• Multicast support - sparse-dense mode w/RP, troubleshooting
• Switching support - VLANs, HSRP, subnetting, ACL’s, TACACS
• Network LAN/WAN monitoring - Neuralstar, HPOpenview, CiscoWorks,
• Utilize OSI model for troubleshooting tier 1-7 networking issues

Network Engineer

Confidential

• Supporting the NASA HQ Network contract in Washington, D.C.
• Assisted with Routing using OSPF, BGP routing protocols
• Switching support - MLS, VLANs, HSRP, subnetting, ACL’s, TACACS, SSH
• Enabled PIM sparse-dense mode on NASA emergency response voice network
• Network LAN/WAN monitoring - HPOpenview, CiscoWorks, MRTG
• Checkpoint NGX firewall changes, maintenance and upgrades - Dual Sunfire V65
• Cisco Autonomous Wireless support - WLSE 1130, WDS and AP’s model 1210 maintenance and upgrades
• IP Telephony/Cisco 7970 phone support and QOS/Autoqos configuration – VoIP servers and gateways configuration and maintenance
• Network troubleshooting and engineering design changes – TCP dump, nslookup, traceroute, ping, sniffer
• Utilized OSI model for troubleshooting tier 1-3 networking issues

Senior Network Engineer

Confidential

• Supported the FAA contract for the users of the ABA group
• Cisco router and switch maintenance and support – 6500, 4500, 2950, 2600
• Installed, configured and tested new 4500 cisco router for the Financial office
• Performed routine maintenance for routers and switches
• Upgraded IOS images and hardware on routers and switches
• Utilized port security for all switches
• Network monitoring - MRTG
• Windows 2003 server and helpdesk/desktop support
• Level 2-3 Troubleshooting of unclass network and legacy apps

Network Engineer II

Confidential

• Supported the Navy/Marine Corps Intranet (NMCI) contract Confidential the Pentagon and Quantico Marine Base NOC
• Daily interaction with government and contractor clients
• Supported legacy, unclass and class networks for Navy and Marine Corps in a large enterprise environment
• Utilized OSI model for troubleshooting tier 1-3 networking issues
• Rerouted and prioritized BGP traffic through the use of cost or BGP attributes
• Standard/extended ACL creation and implementation
• Configured and troubleshot T1 circuit between Cisco routers
• Worked on Cisco switches and routers models 2500, 2924, 3500, 3600, 4000, 5000, 6500, 7200
• Assisted with IT Project management
• Locate and shut rogue ports upon request
• VLAN creation/modifications and switch port activations
• Utilized Cisco Works and Tivoli Netview in everyday problem resolution
• Problem reporting using Remedy Ticketing system
• Preparation of miscellaneous network reports for Management
• Used MS-Visio to design and document customer connectivity for SIPRNET and NIPRNET networks
• LAN/WAN design recommendations
• Assisted in Technical proposal writing
• Project management
• Feasibility studies for Software/Hardware purchases
• Netware 5.1 to Windows 2000 TCO/migration study
• Consulting with clients to resolve software/hardware/connectivity issues
• Customized Systems Integration, site surveys nation-wide
• Installation and configuration of proprietary software on Win2K servers and workstations
• Utilized OSI model for troubleshooting tier 1-3 tier networking issues
• Technical Documentation
• Management of multiple projects
• 2nd – 3rd tier help desk dealing with VPN/ISP authentication, connectivity and routing issues
• Worked on Windows 2000, 2003 and SQL 2000 servers, Cisco 2651 router, 3524 and 3550 switches, and IDS 4235
• Utilized OSI model for troubleshooting tier 1-3 tier networking issues
• Disabled unused ports, set local passwords, and assign VLAN port assignments as needed
• Used Terminal Server to access workstations, configure servers, DCPROMO, set up DCs as Global Catalog servers
• Setup and configured DNS, DHCP, DFS, Win2K sites and subnets
• Migrated user accounts
• Installed and configured Host and Network based Cisco IDS devices
• Physical Setup of server and router/switch racks
• Assisted in coordination and installation and upgrade of Military Smartcards using SSL/PKI
• Troubleshooting of PKI, IPSEC, and RAS issues
• Worked on Cisco 2651 routers and various Cisco switches
• Performed DUN setup and VPN configuration using RAS and PPTP
• Utilized OSI model for troubleshooting tier 1-3 tier networking issues Confidential remote sites
• Facilitated dial-up to ethernet conversions
• Advised on project management and managed projects using MS-Project
• Created and updated standard and extended Cisco ACLs
• Initiated cut-over plan and documentation for new engineer orientation
• Utilized Peregrine ServiceCenter to update database

LAN/WAN Administrator

Confidential, Arlington, Va

• Administered/upgraded and backup of a mixed NT 4.0/Novell 3.12/Unix network
• Utilized OSI model for troubleshooting tier 1-3 tier networking issues
• Managed hardware, software, and software license assets
• Utilized MS-Project to coordinate all MIS projects
• Provided MS Exchange 5.5 administration and support
• Assisted with IIS 4.0 support and administration
• Oversaw Security Plan implementation (hardware, software and policies)
• Developed and produced documentation of existing LAN/WAN network
• Researched and designed Disaster Recovery Plan