Sr. Network Security Engineer Jersey City, Nj
3.00/5 (Submit Your Rating)
SUMMARY
- More than 23 years of experience in Network Administration, IT management, and Security.
- Strong background in Implementation, delivery, Network design and support documentation.
- Solutions - focused, team oriented with broad-based experience and hands-on skill in the successful implementation of highly effective client-server networks and the cost-effective management of innovative customer and technical support strategies.
- Proven ability to successfully analyze an organization's critical support requirements identifies deficiencies and potential opportunities, and developed innovative solutions for increasing reliability and improving productivity.
- A broad understanding of computer hardware and software, including installation, configuration, management, troubleshooting, and support.
PROFESSIONAL EXPERIENCE
Confidential
Sr. Network Security Engineer
Responsibilities:- Onsite contractor with Regeneron Pharmaceuticals Inc.
- Plan, engineer, design, implement and manage Cisco infrastructure and responsible for oversight of configuration, maintenance and capacity planning for technologies in scope.
- Accountable to execute project engineering and solution processes & functions for technologies in scope. Responsible for service and project delivery.
- Accountable to define, maintain, communicate, implement & execute the enterprise architecture, engineering & standards strategy and for its operational usage across the enterprise for technologies in scope. Upgrade IOS versions on 4510/4507 and Nexus 7k
- Upgrade IOS and ASDM on Cisco 5500 ASA FW with Firepower, and ICE servers
- Update ACL’s for server access to HTTP, HTTPS, and various ports
- Design New MDF closet with Nexus 7700, Cisco ASA 5585 with Firepower
- Design New MDF with Bluecoat, Infoblox, DMVPN, and Console adapter.
- Infoblox admin, DHCP, DNS, configurations
- Update Blocked list on FW
- Support WiFi network controllers, Prime and WAP’s(3802i)
- Refresh IDF’s and install new Core switches to replace end of life switches
- Implement FW rules to allow servers limited
- Built new redundant MDF’s with Nexus 7710 core routers
- Follow ITIL standards to implement changes
- Worked with 3rd party vendors (Lighttower, ATT, Time Warner) to migrate circuits from 1G to 10Gig
- Engage vendors for pricing and availability of network equipment.
- Configure WAP’s and controller for new Wireless installs
- Update sharepoint and Network docs using Visio
- Educate & mentor the technical virtual team and appropriate management in the use of the technologies in scope.
- Establish and maintain strong collaborative relationships with strategic partners from within IT Service Management, Business Partner Manager, Project Portfolio Management, and Application Operations as well as all external outsourced IT infrastructure service providers.
Confidential, Jersey City, NJ
Sr. Security Engineer (Contractor)
Responsibilities:- Work within the Security team to deliver several key projects within the Banking environment.
- Projects included upgrading ASA, Juniper, Checkpoint appliances from 75.40 to 77.20
- Resolved request from customers using the ITIL ticket process (Service Now)
- Managed McAfee Web gateways, Fortinet Firewalls and Bluecoat proxy servers
- Install, configure, and troubleshoot, Checkpoint, Smart Dashboard 77.20 and Bluecoat proxy.
- Replaced Checkpoint appliance clusters to meet company standards.
- Updated documentation via SharePoint for support
- Implemented BIG IQ system to manage F5 environment
- Infoblox, DNS DHCP configurations
- Created F5 LTM/GTM entries per customer requirements (Wide IP, Pools, VIPS, virtual servers)
- Configure and maintain Cisco Firepower 7000 (Security Intelligence, Policies, URL Filters, etc)
- Create users, ACL, and IDS reports in Cisco Firepower 7000
- Updated HPNA, Solarwinds, Spectrum Monitoring tools for Security group
- Create DNS entries via InfoBlox (Host, CNAME records etc)
- Utilized Aperture, clarity, Backbox, Tufin, ISTM tools.
- Audit Firewalls rule base for obsolete rules, NAT’s and host.
- Train new team engineers on BNP environment.
- Created training material and “How to Docs” for BNP employees
- Work within Extranet technology to upgrade T1 Circuits at Bassett Furniture. Subcontractor for CenturyLink.
- Employed by DBGS/Dell Computer. Location Boeing St. Louis. Doing install of Cisco 3750 and 4507 in Charleston SC and St. Louis Mo. Installing approx. 300 switches and configuring them to Boeing standards. Utilizing HPNA, NNM9 for troubleshooting. Installing NAT routers for some molding equipment. Working trouble tickets to resolve network issues. Participate in on-call rotation.
Confidential,Earth City, MO
Sr. Network Engineer
Responsibilities:- Work within the Network Security WAN Group to deliver several key projects within the BT environment.
- Part of Design team to architect network upgrades
- Designed network environments to meet customer needs
- Work with WAN team on various projects.
- Install, configure, and troubleshoot, Checkpoint, Smart Dashboard 77.20 and Bluecoat proxy.
- Created policies procedures, nodes, groups, Nat’s, and VPN configuration (Built firewalls in clusters and stand alones)
- Configured, installed, and troubleshot F5 Load balancers.
- Created VIPS, Pools, and installed hot fixes and OS upgrades
- Upgraded software, and maintained stand alone and synced F5
- Configured, installed, and troubleshoot Cisco routers, Catalyst switches. Upgrade OS, performed
- Installed and configure Nexus 7k, 5k and Fex’s
- Spanning tree configes, created vlans, trunks etc.
- Worked on Nexus 5000 Series, 7000 Series, installed FEX’s modules.
- Familiar with all catalyst switches ranging from 2960s up to Catalyst 6509.
- Familiar with Cisco Prime and airnet wireless.
- Built 6509s using HSRP and built as VSS
- Responsible for DNS, Active Directory, and documentation using MS Visio.
- Configured wireless access points.
- Work with India Development team to build the Network Infrastructure and Implement the design for MPLS, and migrate T1 to T3 infrastructure.
- Installed and configured, Cisco WAN routers 2911 and 871 for VPN access,
- Upgraded DNS for host records and cname records.
- Configured SNMP for monitoring and location and contact information.
- Upgraded static DHCP configurations and dynamic IP configs.
- Configured BGP pairing to ISP and IBGP for pairs of routers.
- Configured VPN and tunnels for modem access.
- Troubleshot BGP route advertisement to ISP. Implemented BGP pairing.
- Implemented policies on PIX FW and would block unwanted IP’s.523/8854111
- Implemented AAA and TACACS thru Cisco Ciscoworks as an Administrator
- Utilized Cisco Prime, Solarwinds, Orion and NetAPP for storage
- Documented the network with Visio and Runbooks.
- Trained engineers on Firepower and Cisco CSM
Sr. Network Engineer
Confidential,St. Louis, MO
Responsibilities:- Work within the Network Security Group to deliver several key projects within the TR environment. (GQS,Editorial, Electron, MIS, Real Time, etc.)
- Work with London Development team to build the Network Infrastructure and Implement the design for MLS,GQS, and FMS Servers for the GQS rollout.
- Installed and configured, Cisco 6506’s VSS, 4948’s, 3750 2960’s, Nexus 5500 series, Advocent Terminal Servers, and Extreme Switches for various projects and support. Created documentation to support implementations for installation of Cabling and utilized Reuters internal document procedures for management of Network Devices
- Provide documentation for Formula, ReACT, TACAC’s, Ciscoworks, and all NetSec databases for Network Management. Developed Network Drawings to capture newly installed equipment for Net Sec support. Supported documentation to Monitoring group for management Troubleshoot wireless connections 802.11g.
- Configured Cisco switches per BAU request for capacity and upgrades. Implement and configured Netscreen firewalls to allow connectivity to worldwide Datacenters. Implement Nexus 5500 switches for new Plano DC and configure data flows for connectivity to other DC. Support the Migration of datacenters to consolidate DC to reduce cost and overhead. Utilized Cisco CSM for FW management
- Troubleshot BGP route advertisement to ISP. Implemented BGP pairing.
- Write firewall work instructions for implementation for BAU request. Utilize ITILv3 procedures for change control and Incident reports. Provide On-call support on rotation basis for the Network team
- Perform other duties for NetSec as requested to ensure Level 2 support is provided to Reuters America .Configured Checkpoint and Netscreen Firewalls.
- Datacom testing equipment for cable testing, PoE, LanMaster
- Part of Design team to architect network upgrades
- Designed network environments to meet customer needs
Network Administrator
Confidential
Responsibilities:- Implemented Blackberry Server for use with 50+ users and devices.
- Maintain Telco equipment and procured 3 network copies. Train users on scan/fax/email to reduce paper cost.
- Supported 50-75 Users
Network Administrator
Confidential
Responsibilities:- Installed and configured VPN for remote sites.
- Purchased and installed Cisco VoIP phone system and administered Call Manager and Voice Mail.
- Trained all employees on VoIP, Webmail, Office 2003/2007 MS project, and Construction database.
- Maintained SQL Server 2000 to support ProLog Database.
- Implemented program to reduce printer cartridge use and charges and a recycling program.
- Prioritize, recognize, and resolve end user computer problems. Established and document policies and procedures.
- Supported over 100 Users
