PROFESSIONAL EXPERIENCE

Confidential, Fl

Sr. Network Engineer

Responsibilities:

• Network Security Engineer working with UCF IT team to provide general network services for staff augmentation purpose. Telecom Staff Augmentation Services
• Participated in network whiteboard/planning sessions for new buildings and enterprise refresh configuration and optimization.
• Mid - level Network Engineer to halp customer with projects and daily tickets.
• Assisted in administration of UCF routing and switching environments.
• Assisted in administration of UCF Wireless environment
• Assisted in administration and/or troubleshooting of Cisco network routers, Cisco & Extreme switches, and wireless equipment.
• Configuration of network and load balancing devices and stacking (routers, switches, load balancers, and Cisco LMS, PRIME, DNA)
• Installed Cradlepoint Out-of-Band OOB fail-over and management at remote sites.
• Assisted in administration of UCF Cisco UC conversion to Microsoft Skype for Business
• Assisted in administration and troubleshooting of UCF Cisco UC IP Telephony, Voice Gateway’s, conferencing, and voice mail systems SIP/H.323/MGCP
• Converting CheckPoint Firewall configurations to Cisco ASA configurations. Utilizing Cisco ASA Config Conversion Tool v1.0.
• Convert NAT Policies and Security Policies between CheckPoint and Cisco.
• Confirming routes and users between Checkpoint and Cisco ASA.
• Migrating firewall rules between Cisco and Checkpoint.
• Configure/replace routers and switches, racking, and stack.
• Configure Cisco and Meraki wireless.
• Installing Meraki Camera’s in all data closets.
• Microsoft Server and Network Administration for Active Directory and Exchange users. Managing group policy and login scripts. Creating and maintaining PowerShell scripts.
• Monitored, analyzed, and corrected system errors and initiated service calls.
• Accurately document instances of hardware failures, repairs, installations, and removals.
• Designed network architecture including VLAN, LAN, WANS and remote networks.
• Provided real time support in diagnosing and resolving networking issues.
• Evaluated and install network and devices to detect security flaws and responded accordingly.
• ServiceNow Security Operations with Vulnerability Response, Security Incident Response.
• SCCM Engineer responsible for monitoring, installation, configuration, administration, troubleshooting and maintenance of technology solutions. Provide technical support, troubleshoot problem and performing scripting/programming to ensure stable and efficient operation of technology solutions.
• Working with SCCM patching and deployments, WSUS management, SCCM PowerShell and WMIC
• Serve as a member of ITS’s Systems Administration and Security Team as a CyberSecurity Vulnerability Management Lead for oversight of teh hardware and software systems for University of Central Florida (UCF), LabCorp/Covance and Disney. Provided on-call support as required.
• Application Packaging for Windows 10 environment including latest release.
• Experience with Scripting, PowerShell, VBScript
• Perform and coordinate routine upgrades and preventative maintenance for teh SCCM infrastructure.
• Analyze performance/scalability of teh environment.
• Technical support; system administration; troubleshooting; networking; system security; system integration; group policy management
• Implementation, administration, and configuration of SCCM Enterprise environment, SCCM 2012 R2 infrastructure
• WSUS and Patching Systems
• Perform SCCM client health checks and troubleshoot barriers to client health.
• SCCM OSD customizations using MDT and troubleshooting OSD issues.
• Analyze SCCM log files, provide monthly patch management support for Windows servers and workstations.
• Develop system architecture documentation and process workflows as requested.
• Microsoft SCCM, Microsoft System Center Operations Manager (SCOM), Microsoft Windows Server Update Services (WSUS,) Microsoft Key Management Services (KMS and Providing server management, customer support, and timely maintenance and problem resolution of service delivery requests, to include technical customer consultation for needs analysis, assessment
• Backup and Patching of Cisco appliances, switches and routers Palo Alto and Bluecoat appliances.
• Configure/replace routers and switches, racking, and stack.
• Configure Cisco and Meraki wireless.
• Installing Meraki Camera’s in all data closets.
• Security Hardening and patch management
• Data Protection installing Synology Active Backup, Synology High Availability, and Snapshot Replication
• Virtualization installing Storage for Virtualization and Virtual Machine Manager

Confidential, Orlando, Fl

Sr. Network Engineer

Responsibilities:

• Managed enterprise computer networks keeping it confidential for all employees and customers.
• Worked with global analysts, engineers, and clients in a Managed Security Services SOC 24/7 shift-scheduled security operations environment.
• HIPPA and PCI DSS 3.2 Compliance to ensure protection against current exploits, addressing new exploits and provides greater privacy, security, and administrative simplification for customer credit card and medical information eliminating Fraud and Abuse.
• Administered HIPPA & PCI DSS compliance standards. Isolate and investigate potential information system compromises.
• Administered firewall and router’s using BlueCoat, Checkpoint, Cisco, Fortinet
• Managed security solutions, including firewall, security cameras, and anti-virus using:

Confidential

Security Solutions for Messaging Systems

Responsibilities:

• Investigated and implemented changes to firewalls policies, as well as NAT and IPSEC routing and patched and upgraded firewalls as needed.
• Performing TCP/IP Network traces/packet captures and interpreting results. Performing Threat Intelligence Analyst, Network Forensics Analyst
• Performed regular penetration testing of all security systems and processes and implementing random and cryptic system passwords are on all firewall and routers. Maintained overall security posture.
• Managed configuration and port changes for Cisco Nexus and Catalyst switches. Administer ACL’s.
• Managed Cisco and Meraki Wireless Access Point’s
• Maintained corporate compliance enforce standards, policies, and procedures for HIPAA and PCI.
• Managed and Create user accounts in Microsoft Active Directory and Exchange
• Maintained Windows servers such as file servers, WSUS, and print servers.
• Administered and maintained end user accounts, permissions, and access rights through Active Directory.
• Implemented Group Policy settings. Write security policies and addresses security issues.
• Administered Enterprise Linux & Windows Servers, including file, print, SCCM, SCOM, and other application servers across multiple sites.
• L3 troubleshooting of DNS, DHCP and other IP conflict problems.
• Implemented Cisco ASA 5500 series and Checkpoint R 75 firewalls.
• Implemented CISCO NEXUS data center infrastructure with 5000 and 7000 series switches includes (5548, 7010) including CISCO NEXUS Fabric Extender (223, 2248).
• Data Center migrations, configuration, incident response, problem solving for a 24x7x365 support.
• Routing and Switching (Cisco IOS and Nexus) and load-balancing (f5) SSL offloading and acceleration, and on-demand scaling.
• Data Center migration refresh for Cisco 7200, 3800, 3600, 3400, 2800, 2600, 2500 and 1800 series Routers, Cisco Catalyst 6500, 4500, 3750, 2950 and 3500XL series switches.
• Utilizing Network Management Tools and sniffers like SNMP, HP-Open view, Wireshark, and Cisco works to support 24 x 7 Network Operation Center. Racked, powered, ran fiber, and wrote configurations to teh core network.
• Implementation of HSRP, VRRP and GLBP for Default Gateway Redundancy.
• Implementation of Cisco ACS RADIUS & TACAS+.
• Configured Routing protocols such as RIP, OSPF, EIGRP, static routing and policy-based routing.
• Team member of Configuration of Cisco 7206 router with VPN and Configuration of Catalyst switches.
• Configuration 7500, 7200 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
• L3/L4 troubleshooting of Network Routing protocols (BGP, EIGRP and RIP) for Data Center Collapse. VLANs, 802.1Q Trunk, RPVST+, Inter-VLAN routing. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture. Implemented, configured BGP WAN routing, converting OSPF routes to BGP (OSPF in local routing). Backup all network devices.
• Implemented Cisco ASA, Cisco Firepower 9300/4100 Security Appliance. Redundancy and load-balance achieved Firepower services.
• Configured HP 5820, 5830, 12518, 10508 and 3800 switches.
• Implemented security policies for Cisco, Checkpoint and Palo Alto firewalls. Implemented rules for B2B Virtual Private Network (VPN).
• Implemented various Juniper products: EX-4500, MX-480, M Series, SRX210, SRX240. Implemented OSPF, BGP on Juniper Routers and SRX Firewalls. Implemented rules and firewall policies on Juniper SRX 550. Configured Virtual Chassis for Juniper switches EX-4200, Firewalls SRX-210.
• Implemented firewall policies and monitoring threats. Analyzed traffic patterns and implemented URL filtering. Improved security and scalability and ensured 100% uptime for 2K clients on Juniper SRX's by installing DMZ.
• Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers.
• Installation and administration Nexus 5K/7K /2K 7010, 5020, 2148, 2248 switches.
• Implementation and configuration of F5 Big-IP LTM-6400 load balancers.
• Installation and administration of Checkpoint R 75.40 Firewall.
• Implemented firewall policy change on teh Checkpoint clusters.
• Verified and Validated teh Firewall policy on Checkpoint R75 clusters for unused rule and halped consolidating rule
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Network Analysis and packet captures troubleshooting using various tools like Wireshark, SolarWinds etc.
• Responsible for Cisco ASA 5500 firewall administration, Rule Analysis, Rule Modification.
• Firewall Engineer providing L3/L4 Support for Firewall's.
• Configured, troubleshoot, and upgraded Checkpoint Firewalls for Manage clients, which included network and/or resource access, software, or hardware problems.
• Opened, resolved, or updated Tier II Support tickets for Manage Firewall clients.
• Provided Manage Firewall Clients' with regular status reports of their trouble tickets.
• Managed installation, and configuration of enterprise Checkpoint Firewall-1 2000 (v41) and Checkpoint Firewall-1 NG (v50) firewalls.
• Maintained High Availability and Clustered firewall environments for customers using Checkpoint HA.
• Lead contact in our group for firewall troubleshooting and maintenance issues, responsible for resolving L3/L4. Resolve RSA SecurID and Cisco RADIUS VPN issues.
• Cisco Identity Services Engine (ISE), Cisco® ASA with FirePOWER, Cisco Prime, F5 BIG-IP, IBM Security QRadar SIEM, NetIQ Access Manager, AppManager, Secure Configuration Manager, support teh 21st century initiatives like Artificial Intelligence, Blockchain, and IoT
• Designed, planned, and implemented system and network architectures that are highly performing, scalable, fault tolerant, secure, and compliant for Citrix, VMware, and Active directory.
• Virtual Environment Administration - Build virtual servers and manage virtual guests on VM Hosts. Provided simple management functions of VI, escalate issues when necessary. Work with teh Corporate Open Systems Team for general direction, standards, & architecture corporate standards.
• Server Hardware - Conducted server builds, installing equipment in data center, racks, cabling, etc. Maintained system BIOS, Firmware, and hardware level drivers to manufacturer recommended levels. Managed lifecycle of server hardware. Analyzed, troubleshot, and resolved system hardware issues. Windows Server 2012-2016 Active Directory, DNS/DHCP/WINS, Domain Trusts, Sites and Services, PowerShell.
• VoIP engineer installing and testing digital audio hardware, and VoIP software for Cisco and Polycom devices.
• Installation and maintenance of all teh video equipment on location, recording live performances.
• Managing sound levels and outputs, and maintaining sound equipment, like amps, cameras, and microphones. As well as all broadcast-related equipment.
• Manage Active Directory and multiple Forests and Trusts. Migration of users and computers to new domain, SSO (ADFS) integration and DNS service integration. Manage BIG/IP and DHCP.
• Manage, Skype and Teams Server as well as Office 365.

Confidential, Fl

Sr. Network Engineer

Responsibilities:

• Managed Datacenters, network security, and implement teh security changes on Checkpoint Firewall’s, Cisco ASA’s and Cisco Firewall’s and Webfilter.
• Managed all network hardware and networking equipment, including routers, switches, wireless AP’s, IP phones, smartphones, printers, and UPS’s.
• Administered network changes for ACL's, VLAN, LAN, WANS and remote networks.
• Responsible for teh Cisco and Avaya phone systems (including mobile telephony - VoIP, SIP, Call Center, web/audio conferencing, video conferencing) including standards, policies.
• F5 LTM Implementations for various clients.
• F5 GTM Implementation and complete DNS Migration from Infoblox
• F5 ASM Implementation
• F5 APM Implementation done for SAML SSO and SSL VPN
• L3 troubleshooting IP Addressing, Subnetting, VLSM and ARP, reverse & proxy ARP. Documentation, Policy implementation, Guidelines, Trained users about Information Security Policies and procedure etc.
• L3 troubleshooting FTP, DNS, HTTP and DHCP.
• Global Enterprise Windows 7 deployment of over 14,000 desktops and laptops for a migration project, transferring teh client's OS from Windows XP to Windows 7, installing Microsoft software as well as loading financial business applications and migrating all user data, including multiple trading floors.

Confidential, Newark, DE

Network Engineer

Responsibilities:

• Administered computer networks, installation of computer hardware and software applications, troubleshooting, hospital specific software. Windows Active Directory/Exchange/Domain controller setup and administration
• Supporting Microsoft Windows Servers, Microsoft Windows workstations and Microsoft Windows applications, VPN’s, Active Directory, Group Policy, Linux and Windows servers along with Hyper-V as required.
• Supporting Office 365 and G-suite administration
• Supporting Linux operating system; command line tools, application configurationand UPS’s.
• Administered network changes for ACL's, VLAN, LAN, WANS and remote networks.
• Managed teh integration of all electronic medical health records, computerized physician order entry (CPOE), and financial information.
• Performed network documentation and created disaster recovery plan.
• Oversaw migration of WAN links to new service provider, designed full mesh WAN, set up TFTP server to backup, and restored configuration and IOS image files for teh PIX, Cisco routers, and Catalyst switches. Analyzed expanding network, ran fiber, and implemented wireless communication. Designed configuration and layout of WAN to include IPT Internet facing VPNs and wireless subnet.
• Migrated network from full mesh frame relay to Point-Point T1 on larger sites and implemented IPSEC VPN on smaller sites.
• Installation, configuration, and administering Firewalls and Threat Management Appliances CheckPoint, and Fortinet
• Active Directory and Exchange configuration and management with 2008R2, 2012R2 and 2016
• Microsoft System Center Configuration Manager 2007 (SCCM) for automated software distribution, software updates (WSUS), inventory and reporting. Administration of monthly Microsoft Security Hotfix deployments via SCCM/WSUS.
• Troubleshoot software distribution failures Perform and maintain software metering and pc inventory.
• Microsoft Exchange and Lotus Notes Engineer providing 24/7 global support. Managing archiving, backup and email policies.
• Supported Cisco, Dell and HP hardware. Building, installing, configuring, and maintaining Windows 2003/2008 Active Directory servers in a multi - Domain / Forest environment with 400k objects.
• Manage Active Directory two-way and one-way trusts. Resolving Tier II and Tier III e-mail related issues.
• Wintel/Microsoft: Active Directory, Blackberry Enterprise, Citrix, Exchange, File Servers, Instant Messaging, Lotus Notes, Meta Directory, Scripting and PowerShell, Print Servers, SMS/SCCM, Terminal Service, VMWare and roaming profiles. UNIX: AIX and Linux. Group Policy Objects (GPO) and SMS installs.
• Troubleshot firewall and webfilter communications for TCP/IP services; DNS, DHCP, EIGRP, FTP/S, HTTP/S, MPLS, OSPF, SSH, SMB, SMTP, UDP and VPN.
• Managed Symantec Endpoint / Backup Exec, HP Thin Clients, SharePoint, VMWare. Antivirus and Spam security monitoring for known and emerging threats. Black box/white box testing of data loss prevention security. Juniper and Cisco VPN, Firewall administration.
• Backup as a service (BaaS) maintaining client backup and restoration services utilizing online and offline data backup providers. Connecting private and hybrid cloud managed backup services. SunGard Availability Services for disaster recovery testing and preparation.
• McAfee Gateway Anti-Malware Engine, for Web Protection to protect against threats delivered via HTTP and HTTPS. Protecting networks from web exploit and detection, zero-day, and targeted threats.
• L3 troubleshooting IP Addressing, Subnetting, VLSM and ARP, reverse & proxy ARP. Also, L3 troubleshooting FTP, DNS, HTTP and DHCP.

Confidential - Cherry Hill, NJ

Network Administrator Communications

Responsibilities:

• Install networks from start to finish including mounting racks, running cables, drilling into floors/walls/ceilings, grounding Wireless Access Points and racks. Also, 66 and 110 punch down blocks and wiring patterns and terminations.
• Documenting mac addresses and locations of all devices>
• Heatmapping including software and hardware. Including heatmapping (Wi-Fi signal testing) at client sites.
• Maintaining firewalls, Wi-Fi, VOIP H.323 and SIP and VPN keeping them running smoothly. Email hosting and website design. Building and supporting Microsoft data servers and Exchange servers, Novell Netware servers, Unix servers. Managing system login scripts. Support for various desktop software applications and installations. Managing user and email accounts in AD and NDS. Blackberry, Treo mobile mail support. Maintaining network email and data security and updating virus definitions for remote businesses. Remove spyware and viruses. Repair fileservers, desktops and laptops. Finding and replacing any coax, data and phone wire causing RF, IP and VOIP problems and TEMPeffecting service. Install and troubleshoot Cisco DOCSIS 3.0 Video 2.0 Routers for broadcast frequency(s), On-Demand content, CDV, and high-speed internet. Install and troubleshoot basic cable, digital cable and cable cards.
• Analyze trending data, & make estimates on when links will be saturated, & develop growth plans to implement growth change before network elements saturate. Support teh design & installation of commercial VOIP, VPN, IP NGN networks. Respond to Cisco Router / DOCSIS network outages.
• Configure switches, routers with IP addresses and VLAN's.
• Responding to trouble tickets, LAN/WAN optimization, security audits, documentation, monitoring threats and traffic, and running updates and patches on Cisco IOS.
• Analyze traffic behaviors and report to management about network performance reports.
• Configure, monitor, and troubleshoot firewalls and VPNs for Cisco.
• Install and troubleshoot Cisco DOCSIS 3.0 Video 2.0, On-Demand content and VOIP.
• Install and troubleshoot digital cable and respond to Cisco DOCSIS network issues.
• Migration of WAN links to new service provider, designed full mesh WAN, set up TFTP server to backup, and restored configuration and IOS image files for teh PIX, Cisco routers, and Catalyst switches.
• Migrated network from full mesh frame relay to Point-Point T1 on larger sites and implemented IPsec VPN on smaller sites.
• Black box/white box testing of data loss prevention security. Juniper and Cisco VPN, Firewall administration. maintaining dedicated appliances.