TECHNICAL SKILLS

Routers: Cisco 2600, 2800, 3800, 7600 series. Juniper 8216, Juniper, MX104, Cisco ASR 9k, Arista, 7120,7060

Switches: Cisco 3500, 3750, 3800,4506, 6509 series. Juniper 4500,Juniper MX,Juniper EX, Nexus 93180, Nexus 7k,Nexus5k, Brocade ICX6610, Borcade 6740, Arista 7000 series

Firewalls: Cisco ASA 5520, Cisco 5585 (Context), Cisco Firepower (Sourcefire), Fortinet 200c,600c,1500c, Checkpoint R77, Juniper SRX340, Palo Alto 3020, 5060 and 7050 series,Sophos 310 XG,PFSense,Sonicwall

Load Balancers: Citrix Netscaler, F5 (LTM/GTM),A10

Wireless: Cisco 2500, Cisco 1800, Cisco Mobility Express.

Network / Protocols: LAN/WAN, TCP/IP, DNS, DHCP, Ethernet, SNMP, VPN, NAT, BGP, OSPF, ISIS MPLS, HSRP, VLANS, Multicast, SONET,VSS,VPC

Software and Cloud: Vmware Vshpere, VCloud Directior, Hypervisor, Cisco Secure ACS, Cisco ADSM, HP Openview, Solarwinds, Wireshark, Juniper NSM, Checkpoint Smartview Tracker, Fortinet Fortianalyzer. Network Observer, Bluecoat Threat Pulse, Palo Alto Panorama, Tufin Secure Track, Netscout

PROFESSIONAL EXPERIENCE

Sr. Network Implementation Engineer

Confidential, Denver, CO

Responsibilities:

• Perform new client network infrastructure build out and configurations. Including VLAN assignments, routing advertisements and uplink configuration and testing.
• Provide Professional Services support to customer per SOW requirements. This activity ranges from streamlining customer design and configurtions, troubleshooting networking issues, VPN tunnel build, security posture assessments as well overall environments recommendations
• Perform hardware and software upgrade on routers, switches, firewalls, and WLC devices as needed to remediate issues or as part of audit requirements
• Responsible Data Center support projects. Including full network cutover from VSS to VPC technologies. This also includes dynamic routing setup, VLAN assignments, port configurations, VPC configurations, and ground up baseline configuration.
• Perform firewall replacements of firewall appliances for both shared Virtual Domains and Standalones for Fortinet, Cisco, Juniper SRX,and,Sonicwall,PFSense, and Sophos. Includind firewall run creation,NAT translation builds, DHCP configuraton and all net - new requirement builds.
• Troubleshoot all network related issues for colocation and Managed Services customers
• Perform VMWare edge gateway, Distributed Port Group, and Distributed Switch configuration and troubleshooting.
• Perform VSwtich buildout within Hypervisor and all associated parameter to support physical to virtual firewall migrations.
• Perform both network and cloud decommissions as required
• Assist PMO team with SOW creation as well as Project scope and timeline buildouts.

Sr. Network Architech

Confidential, Denver, Co

Responsibilities:

• Worked with migration of entire school district to new 10G backbone network which composed of over 150 schools. This included converting 4503 core infrastructure to 3850 platform.
• Responsible for spearheading migration of Cisco ASA VPN solution to Palo Alto site-to-site VPN technology for 8 affiliated charter schools.
• Worked closely with server team to configure Nexus 7k access, trunk ports as well FEX ports on Nexus 5k to Nexus 2k for network connectivity needs
• Performed ground up provisioning of Netscout platform in order to monitor and perform deep pack inspection for Layer 7 visibility.
• Performed Cisco IOS upgrades across all router and switches to remediate bugs and hot fixes
• Created network template to streamline new installation of new and existing schools. This included: IP allocation Layer 3 VLAN, OSPF assignments, ACL, and AAA standardization
• Worked closely with field engineers and school staff to perform after hours cutovers and troubleshooting
• Manage Solarwinds monitoring tool to ensure proper alerting was in place
• Created process for Threat Remediation and handling.
• Created process for site to site VPN configuration and troubleshooting

Sr. Network Security Engineer

Confidential, Broomfield, Co

Responsibilities:

• Oversee current Firewall environment including Cisco ASA, Fortinet, Checkpoint, and Palo Alto.
• Managed all day to day firewall operations and client request related tasks.
• Lead the design of the Palo Alto Next Generation firewall deployment and migration strategy.
• Ground up builds of Palo Alto 5000 and 7000 series firewall and Panorama M-100.
• Performed High Availability setup for both Active/Active and Active/Passive
• Created baseline configurations for Next Generation Firewall
• Created Threat Prevention, Data Filter, and Zone protection profiles based on client needs
• Performed firewall rule builds and NAT translation within Cisco ASA, Fortinet, and Palo Alto firewall
• Configured Layer 3 and Layer 2 uplinks within Cisco Nexus 7k and 5k devices
• Configure BGP peering within Nexus 7k and Palo Alto firewalls.
• Build VIPS across both F5 and Netscaler load balancers as needed.
• Collapsed and converge firewall policies to streamline firewalls and remediate audit findings.
• Perform Risk Assessments to identify and evaluate security vulnerabilities.
• Engage in complex production impacting technical issues and work to troubleshoot and restore servic

Technical Manger (Network Operations)

Confidential, Co

Responsibilities:

• Performed daily firewall rule administration and access-list updates to allow and restrict ip, tcp/udp ports within Cisco ASA, Juniper SSG, Fortinet, and Checkpoint Firewalls.
• Assisted with virtual firewall creation for Layer 2 Transparent and Layer 3 mode configuration support within Cisco ASA’s, Fortinet, and, Palo Alto, and Checkpoint firewalls.
• Created both dynamic and static NAT entries as needed to support external connectivity
• Created web filter profiles and IP Signature updates within Fortinet UTM for threat prevention
• Created customer IPS signature updates to mitigate security risks.
• Assist with all company security audits and high risk assessments of firewall policies for PCI compliance
• Perform DNS entry updates as needed via Windows and BIND to support newly created websites.
• Created VIP’s within F5 LTM/GTM version 10.x and 11.x Load Balancers. This includes: Virtual IP creation, VLAN creation, Route Domain creation, backend server and pool setup, CSR generation, certificate installation, 2way SSL setup, basic i-rule setup, and custom http profile setup as required
• DailyVIP creation within Citrix Netscaler 9.x and 10.x. including rewrite and responder policy creation, GSLB setup, and SSL off-load configuration for wildcard URL support
• Configured and deployed routers and switches to new sites. This includes ip allocation, VLAN creation, access ports, trunk port configuration, and address translation setup depending on client requirements
• Worked closely with ISP’s to configure BGP peering as well as OSPF redistribution setup for inbound and outbound route advertisement.
• Managed a team of 6 Network Engineers.
• Interviewed all potential new hires for both Network Operations and Network Project teams.
• Conducted new hire On-boarding and training.
• Approved PTO, Vacation as well as timesheets request for full time and contract employees.
• Completed performance reviews for all direct reports.
• Responsible for submitting and tracking contractor invoice management to accounts payable.
• Conducted bi-weekly team meetings to address new policy and processes
• Managed Change Advisory Board (CAB) call to approve all network change tickets and validate

Sr. Network Engineering Consultant

Confidential, Denver, CO

Responsibilities:

• Work with multiple vendor s to receive price quotes for upcoming projects.
• Assisted sales and marketing department with creating and updating company product brochures.
• Traveled to client sites for customer facings consultations.
• Maintain daily IT operations for offices through configuring and updating Cisco 2811, Cisco 3560, and Cisco 3750 equipment. This includes provisioning routers and switches as well as well replacing defective equipment and upgrading existing hardware and software as needed.
• Assisted clients with design, planning, and implementation of onsite labs to provide proof of concept for Cisco related projects.

Sr. Network Engineering Consultant

Confidential, Denver, CO

Responsibilities:

• Repsonsible for manange configuring and deploying routers and switches for USDA remote locations
• Managed Juniper SSG firewall environment
• Troubleshooting of all network outages and customer complaints