SUMMARY

• Experienced IT Network Engineering Professional and Leader
• More TEMPthan 15 years experience operating and architecting large global networks, focusing on core campus services, security, unified communications, and datacenters.
• Advanced technical, communication, root cause analysis, and project management skills.

TECHNICAL SKILLS

Network Protocols: TCP/IP, IPv6, AppleTalk, IPX; RIP, EIGRP, OSPF, BGP, PBR, PIM, VRF (EVPN), MPLS; Ethernet, 802.1q, 802.1d/w, RSTP+, Openflow/SDN, 802.11 WLAN, 802.1x, 802.1ae, LACP, FHRP, VACL, SPAN, NAC, IPSec, SSL, DMVPN, AAA, QOS; SONET, CWDM/DWDM, ISDN, DSx.

Switches: Cisco Catalyst 2900, 3500, 3750, 4K (SupII - 7E), 4500-X, 4912/5Ks (CatOS), 6500 (Sup1a- Sup2T), Blade Switches (CIGESM, 3110), Nexus 2k, 5k; 7K, 7700; HP, ATI, 3Com, Juniper EX4K

Routers: Cisco 2500, 2600, 3600, 7500; ISR 2800, 2900, 3800 & 3900; 7200, ASR 1001, 1006.

Security: Cisco VPN3K, PIX, FWSM & ASA-SM, ASA 5500, IOS FW, NAC, AAA; IDS, IPS, SRX.

Wireless: Cisco APs and Bridges, 5500 WLCs, WiSM1, WISM2, Juniper, Mikrotik, and Ceragon.

Load-Balancing: F5 LTM BigIP 3400, 3600, 6400, 8900, VIPRION; GTM 3600, Cisco WAAS.

Optical and TDM: Cisco CWDM, DWDM ONS MSTP 15454 M12; T1/T3 CSU/DSUs.

DNS and DHCP: ISC BIND, MS Windows Active Directory, ISC dhcpd, DNSManager (PHP)

Network Mgmt: CiscoWorks, Prime; Intermapper, MRTG, Torrus, Netflow (nfdump/nfsen), Fluke/Acterna, Truesight, APC, Service Now, HP Service Mgr, Wireshark, tcpdump, iperf, mtr, syslog-ng

Operating Systems: Windows Server, Windows (3.1 - 8), Mac OS (Classic-X), UNIX (Solaris, FreeBSD), Linux (RHEL); Support for VMware, Citrix, IBM, Dell/HP, Cisco UCS, APC, ALC BMS, etc.

Other: MS Office, Visio, Google Apps, Remedy, RT 4.x, IIS, Apache, Oracle, sshd, VLC, MySQL, RCS, Twiki, Jira Confluence, vi, nano. Use of Regex, sed, awk, grep, basic shell scripting, PERL, TCL, C.

PROFESSIONAL EXPERIENCE

Senior Datacenter Network Consulting Engineer

Confidential, New York, NY

Responsibilities:

• Test, build, and validate a full-scale Datacenter architecture upgrade in support of mission-critical customer-facing applications. Develop logical routing plans, secure trust zones, and external load-balancing services. Document/communicate project status.
• Edit/review MOPs and device configurations to comply with client standards and security requirements. Integrate new CIs into the client’s existing CMDB and NMS.

Manager Data Networking

Confidential

Responsibilities:

• Lead the University’s central Network Engineering team in maintaining, designing, and expanding the global enterprise network (NYU-NET) to provide LAN/WAN and Internet services for staff, faculty, students, and visitors across all campuses and datacenters.
• Manage the resolution of NOC requests related to L2/L3 networking, DNS, DHCP, firewall, VPN, NAC, AAA, multicast, performance issues, datacenter, optical DWDM, carrier services, etc. in support of a broad range of client and backend core services.
• Provide technical and generalized leadership for the life cycle of projects with diverse sets of clients. Edit the High-Level, Low-Level Designs, and Implementation plans.
• Perform strategic planning and major incident response with Directors and the Executive team. Develop and maintain relationships with key vendors and providers.
• Create/edit documentation for change management, MOPs, network inventory/topology, and best practices. Edit documentation for non-technical audiences.
• Develop a detailed network integration plan for a merger with Polytechnic Engineering.
• Create and execute the network design and project plan to upgrade all of the central Campus core and distribution routers/switches, supporting tens of thousands of users.
• Architect the network design and the build of materials to upgrade the DMVPN routers for the Regional WAN, containing thousands of users, using Metro-Ethernet services.
• Plan and lead the network portion of a graceful shutdown and turn-up of a multi-tenant Datacenter. Manage large-scale upgrades/repairs. Provide updates to the Executive team.
• Oversee new LAN/WAN design and install for Global sites: Tel Aviv, Paris, and Prague.
• Architect the network design for a new Global campus in Pudong/Shanghai with partners.
• Coordinate with NYU Abu Dhabi group to plan the network services for a new campus. Create and support related wireless POC labs in NYC. Design and manage DNS services.
• Design and plan the upgrade of the Remote Access VPN from IPSEC to SSL/TLS.

Project Leader Network Engineering

Confidential

Responsibilities:

• Supervise a team of engineers maintaining NYU-NET, and serve as technical or PM lead for Global DC/Campus design, Datacenter, network management, and security initiatives.
• Lead the network design and workflow for a dozen DC co-location projects. Develop custom solutions for clients with specialized needs: B2B, compute clusters, virtualization.
• Expand and maintain the enterprise DNS namespace, domains (zones), and delegations.
• Troubleshoot service degradation or outage events, including those related to fiber cuts, power outages, and natural disasters (e.g. Hurricane Irene, Superstorm Sandy, etc).
• Lead an upgrade project for all network firewalls in the Datacenters and DMZs. Create and implement the project plan to replace all legacy security appliances, firewalls, etc.
• Serve as the technical lead for the deployment of Wireless LAN Controllers to provide ubiquitous wireless services. Perform service upgrades for tens of thousands of users.
• Test and configure internal DHCP and DNS servers and, cloud-based recursive DNS.
• Perform and oversee the network design for the deployment of enterprise VOIP solutions.
• Plan and perform the upgrade of the NYC WAN from TDM to a Metroethernet solution
• Upgrade the DWDM network and provision ISLs with SAN admins and vendors.
• Serve as the lead for the network at the interim Shanghai site, using custom traffic engineering, VPN, and DNS solutions. Integrate with central DNS/DHCP databases.
• Design and cutover to a new “Services Edge” DMZ network for the Global WAN. Utilize ISPs, NRENs, and MPLS for transit between hubs and spokes.
• Lead Global WAN QOS and WAN Application Acceleration projects to prioritize and/or provide guaranteed bandwidth, and enhance user experience.
• Manage the design and implementation for a full Campus network upgrade at the 57-acre Florence, Italy location. Oversee the Datacenter, WLAN, and the VOIP deployments.
• Serve as technical project management lead for new high performance peering networks.
• Oversee technology/service refreshes for sites in Berlin, London, and Washington, D.C.

Senior Network Engineer

Confidential

Responsibilities:

• Serve as the Network Engineering lead on projects, NOC escalation, and perform technical supervision. Collaborate with external vendors, carriers, and project managers.
• Perform the logical/physical re-design of existing Datacenters supporting central HPC, IDM, and web applications. Convert from a legacy design to a multi-zone model.
• Transition the enterprise’s central Email/Calendaring services to a cloud-based solution.
• Collaborate on the design of a redundant peering network with the Medical School, using BGP routing. Architect the L2/L3 re-design of the Law School’s campus network.
• Complete the design of network services and cable plant for a new multi-tenant 174-rack Datacenter. Lead the installation and network turn-up/migration.
• Develop and implement a DWDM ring. Document requirements for the optical circuits (Ethernet/SAN). Oversee the implementation plan and deployment with the vendor.
• Architect a new Global WAN VPN solution to interconnect remote sites with the hubs. Cutover existing global sites from static IPSEC and crypto ACLs to DMVPN.
• Perform the network design and implementation for new VOIP solutions to support Call Manager servers, Voice Gateways, and endpoints.
• Design VRFs in the Core/DMZ for specialized network connectivity or segmentation.
• Upgrade the DMZ design, employing a BGP Route-Reflector (RR) domain for IPv4 unicast/multicast & IPv6. Deploy the new design with RR client and non-client routers.
• Deploy network security via storm-control, DHCP snooping, DAI, IPv6 RA, PACLs.
• Design and implement the network for a new remote Disaster Recovery location.
• Deploy the Abu Dhabi interim campus. Enable setup of CE/PE routers for Global MPLS. Provide network addressing, templates, and use the national MPLS service and DMVPN.
• Lead the technical implementation of network services for a new Tisch Graduate film program in Singapore. Perform on-site test/turn-up and Global VPN connectivity.
• Plan and complete a network upgrade for the 57-acre NYU campus in Florence, Italy. Survey, design, and implement an upgrade of the legacy network and providers.
• Lead the implementation of NAC services, updating the AAA server’s TCL logic.
• Plan and implement an upgrade of the RA VPN. Transition the crypto, group policies, and other settings. Update/test AAA settings. Setup new NAT and addressing schemes.
• Facilitate the network connectivity and traffic mirroring for IPS and IDS configuration.
• Design an enterprise-wide Internet access solution for privately-addressed clients.
• Deploy a redundant head-end in the central Datacenters for Global VPN terminations.

Network Engineer

Confidential

Responsibilities:

• Fulfill or resolve NOC requests/issue, security incidents, and perform upgrade projects.
• Manage the complete network refresh of the University’s Library. Redesign the preexisting network architecture to provide increased redundancy and scalability.
• Integrate a remote dormitory, housing more TEMPthan 1,100 residents, into the University’s campus. Create a comprehensive survey and analysis report.
• Develop and implement a network upgrade plan for the Dental College. Perform an analysis to review performance, and create detailed technical and executive summaries.
• Successfully upgrade branch WAN sites from legacy T1/T3 circuits to a provider-hosted SONET ring. Provision circuits, and troubleshoot outages or service degradation.
• Implement new services: WLAN, DR, registration tools, VOIP, and new ISP turn-up.