SUMMARY

• Highly motivated I.T. professional with over 10 years of experience in engineering, administration, analysis, implementation and troubleshooting of various network technologies for professional to global enterprise environments which includes proficiency in routing, switching, security and wireless technologies.

Technical Certifications & Skills

• Cisco Certified Network Professional - Enterprise Route/Switch CCNP
• Cisco Certified Network Associate - Security CCNA - Security
• Cisco Certified Network Associate - Wireless CCNA - Wireless
• Cisco Certified Confidential Network Operator CMNO
• Microsoft Certified Solutions Associate MCSA Server 2012
• Comp TIA A+ A+
• Network + N+
• Server + S+

TECHNICAL SKILLS

• Network/ Data Center Tech: Cisco Routers (ISR, 3900, 2900, 1900), Cisco Catalyst Switch (9K series, 6900, 6800,6500, 5500, 4900, 4500, 3X50), Cisco Nexus (1K,2K,5K,7K,9K), ExtremeNetwork Switches (X2, X4, X6 series) Cisco ASA, Viptela,, Cisco Confidential, Cisco WLC, SonicWALL Router / Firewall combos, VMware VCenter, VMware ESXi Hypervisor, FortiGate, Fortimanager, NetScaler, Riverbed
• Routing/Switching: WAN, LAN, TCP/IP, Spanning Tree, Network Address Translation (NAT), Port Address Translation (PAT), Access Control List (ACL), RIP, OSPF, EIGRP, BGP, VTP, SNMP, SMTP, Static Routing, VLAN, HSRP, vPC, VDC
• Security Technologies: ASA, AAA, IPS/IDS, TACACS+, RADIUS (802.1x), SSH, VPN, Cisco ACS/ISE, Data Loss Prevention, IPsec, DMVPN, Public Key Infrastructure (PKI), Internet Key Exchange, Port Security, MAC Address Filtering, Cisco IronPort, WCCP
• Voice/Wireless Technologies: VoIP, Unified Messaging, CUCM, PoE, 802.11, WLAN, WAP, SSID, LWAPP, CSMA/CA, Bluetooth, Aironet, BSS, ISS, ESS, Confidential, Ekahau. Mitel
• Monitoring/Apps: Wireshark, Cacti, Nagios, VMware, Confidential, F5, Cisco Umbrella, Cisco Security Suite, DNS Servers, DHCP Servers, Mail Server, Web Servers, PRTG
• Other HW/SW: Project, Visio, McAfee, VPN, AD, IIS, Linux, RDP, Remedy, Service Now (SNOW), Terminal Services, Office 365, Windows Server, Dell/HP Servers, HP/Xerox/Brother Printers, Elfiq Load Balancers, Ruckus ZoneDirector/ZoneFlex, Motorola Wireless Controllers/Access Points, HP Wireless Controllers/Access Points, Cisco Wireless Controllers/Access Points, F5 &Elfiq Load Balancers.

PROFESSIONAL EXPERIENCE

NFP Network Engineer

Responsibilities:

• Replace Cisco ASA 5506’s & 5512’s with FortiGate 80E’s & 100E’s
• Replace Cisco WAPs with FortiAPs
• Replace ELO switches with Cisco Confidential
• Configure and deploy FortiGate firewalls
• Configure wireless network with Confidential SSID utilizing 802.1x with ISE on the backend
• Monitor & support numerous remote sites via Fortimanager, PRTG & Confidential
• Configure and deploy VMWare ESXi hosts on Dell R family servers
• Integrate network infrastructure of newly acquired offices including:
• Cisco Catalyst 3750s, 3850s, ISR 1101, 1900, 2801, FortiGate 80E, 100E, 200E.

ABM Network Engineer

Responsibilities:

• Configure IPsec tunnels on Cisco ASA 55xx’s and Cisco ISR routers
• Configure and deploy Cisco Confidential MX65, 67,68 & 100 firewalls
• Configure and deploy Cisco ASA 5508-X and 5506-X firewalls
• Design and implement new and upgraded networks for remote sites across the U.S.
• Implement AAA/TACACS throughout network environment with Cisco ISE on backend
• Decom Catalyst 6509’s and replaced with Nexus 7K’s for datacenter core
• Coordinate with ISP to deploy P2P and broadband circuits for various remote sites
• Upgrade firmware on Cisco 5508 WLC and 250 Aps
• Monitor data center and remote sites via Confidential
• Conduct pre and post wireless surveys via Confidential

Confidential

Manager/Sr. Network Engineer

Responsibilities:

• Upgrade firmware on Cisco Wireless Controller and 350 APs
• Upgrade firmware on Cisco ASA 5585 HA Firewalls
• Audit ACLs on Cisco ASA 5585 HA Firewalls
• Configure IPsec tunnels for third party connectivity on Cisco ASA 5585 HA Firewalls
• Conduct any ACL or Routing changes as needed on Cisco ASA HA Firewalls
• Implement BGP for ISP redundancy on Cisco ISR 4400 Routers
• Implement complete network redundancy in hospital
• Reconfigured wireless network for more efficient operation
• Coordinate re-cabling of Data Center and all IDFs
• Implemented dark fiber and various Point-to-Point circuits for DR and third party connectivity
• Devised and implemented data center access guidelines
• Decreased yearly department expenditures by over $300,000
• Responsible for daily network operations and support via Remedy ticket queue
• Responsible for IT Infrastructure projects coordination and completion
• Maintain Cisco environment, including, Network (Nexus 7K Core and Distribution, UCS, ACS, ISE, Catalyst 6510 and 3850 Access, ASA 5585) Voice (Call Manager 9.1, 7965 IP Phones, Informacast) and Wireless (Cisco 5508 WLC, 3602 WAPs, Cisco Prime)
• Responsible for opening health clinic and designing & implementing network infrastructure
• Vlan design, maintenance and modifications
• Devised and wrote network and network security standards including but not limited to port-security, DHCP snooping, dynamic arp inspection, IPS and spanning tree standards.
• Completed first stage of project to replace McAfee Security apparatus with Cisco’s Security Suite (SourceFire Firewall, Umbrella, Threat Grid, StealthWatch, ESA, WSA)
• Devised, architected and wrote network Disaster Recovery plan
• Reconfigured wireless environment for better performance (implement 802.11r, 11v & 11k, QoS tagging and completed campus wireless survey with Confidential
• Completed first stage of project to upgrade all Wireless Access Points to new 802.11ac capable waps.

Confidential

Sr. Network Engineer

Responsibilities:

• Configured and deployed new Cisco ASA 5505 for HA
• Upgraded ISP circuit from 10MB to 100MB to Gig
• Re-subnetted entire hospital to simplify network and allow for growth
• Planned and implemented new Cisco wireless infrastructure
• Managed Cisco Call Manager environment
• Composed policies and procedures for IT staff
• Upgraded firmware on all cisco equipment
• Coordinated with ISP to deploy point to point MPLS connections for 3 remote sites
• Created all network documentation
• Relocated IDF
• Implemented HSRP in environment
• Trained full time field support team and Jr Network Engineer
• Established various GPO policies for hospital

Sr. Network Engineer

Responsibilities:

• Configured and installed Cisco Catalyst 4507R switch as upgrade from 4506
• Repurposed/reconfigured cisco catalyst 2960 from edge switch to DMZ switch
• Planned and upgraded Cisco Wireless infrastructure: Configured and deployed Aironet 2600 Series WAPs
• Re-subnetted main office from /24 to /22 to support current and future growth
• Establish two frame-relay point-to-point connections between a central site and two remote sites
• Configured and deployed Dell SonicWALL NSA 3600 firewall appliance
• Configured and deployed Dell SRA 1600 VPN appliance
• Maintain and administrate Cisco Unity Connection/Cisco Unified Communications Manager
• Create and maintain all network documentation
• Integrated static NAT/PAT to provide access to services located on a server in the private network to the public network. Implement standard and extended access-lists to filter network traffic

Confidential

Network Engineer

Responsibilities:

• Meet with clients to discuss network needs and product solutions
• Design network layout, project scope and SLAs
• Visit client site as lead engineer with team of 3-10
• Oversee fiber and cat6 cable installation
• Configure and deploy cisco catalyst (2960,3650,3850,4500,6800), nexus (7K), and HP (1820,2920,5400,5800,8200) switches
• Configure and deploy cisco routers (2811, 2951)
• Configure and deploy cisco (ASA 55xx) and Dell SonicWall firewalls
• Conduct pre-deployment wireless site survey utilizing Confidential & Ekahau
• Configure and deploy Wireless infrastructure - Wireless Controllers: Ruckus ZoneDirector (1K,3K,5K), Cisco WLC (5K,), Motorola RFS (6K,7K) - Wireless Access Points: Ruckus ZoneFlex Family, Cisco Aironet family, Motorola AP
• Complete post deployment wireless survey/heatmapping utilizing Confidential /Ekahau software suite
• Mitigate any post project wireless or hardware issues

Confidential

Network Engineer

Responsibilities:

• Member to a team of professionals responsible for the day-to-day administration, 24/7 support and maintenance of the IT infrastructure to include onsite administration and support, remote support, scheduled installation, configuration and troubleshoot activities for mission critical LAN/WAN infrastructures.
• Technologies handled by the team include but not limited to local area network (LAN) technologies, wide area network (WAN) technologies, server and enterprise applications and desktop technologies.
• Professional responsibilities included administration, following Confidential policies and procedures, documentation, and scheduling as needed reports to management.
• Configure trunk ports and implement granular control of VLANs and VXLANs using NX-OS to ensure virtual and flexible subnets that can extend further across the network infrastructure than previous generation of switches
• Administrated Local VLANs based on department function, and configure ports with static VLAN assignment, static 802.1Q trunks, and dynamic trucking for layer 2 forwarding. Utilize VLAN Spanning-Tree in conjunction with PVST+ for compatibility between Cisco and Juniper switches. Configure edge ports for fast-transitioning into the forwarding state to fix workstation startup connectivity delays. Modify spanning-tree parameters for manual root bridge assignment. Implement ether-channels between each switch using PagP for negotiation. Modify ether-channel load balancing method.