SUMMARY

• Business - minded, results-oriented IT professional, committed and focused with over fifteen years of experience and proven success in the IT industry within multicultural teams and environments, leading IT infrastructure personnel and international projects with a high technological component in them. High level technical and methodological competencies, whose value is focused on being a factor of positive change for the organization through influence and joint work with multidisciplinary groups.
• Skilled & technically proficient with multiple firewall solutions, network security, and information security best practices and industry standards.
• Strong hands-on experience in installation, configuration and troubleshooting of Cisco Routers, Switches, Wireless, Security and IP Telephony products and solutions.
• Strong knowledge of Networking Protocols BGP, OSPF, EIGRP, IPv4/IPv6, FHRP, Frame Relay, MPLS, QoS, VTP, VLANs, IPSEC VPNs and VoIP.
• Experience in problem solving on IP Core networks including routing convergence issues, routing configuration issues, WAN protocol issues.
• Architecture Design and Implementation of Cisco ASA appliances as per the business requirements.
• Expert in Data Center Technologies such as Virtual Networking, Server Virtualization, Routing Protocols, STP, Stackable Switching, HSRP, GLBP.
• Took a scheduled downtime and production cutover using the Change Management Process for the migration and performed post conversion audit, reporting, and best practices documentation.
• Work to monitor the network traffic post migration and validate the Cisco configuration meets you needs as well as a complete fine-tuning and optimization of the configuration and features.
• Monitored security events, analyzed the results and escalated, when necessary, to the appropriate group for remediation.
• Knowledge in planning, design, implementing and troubleshooting complex networks and advanced technologies; manage the firewall deployment, rules migrations, and firewall administration.
• Fully versed in the syntax of security platforms, and rule verification, installation, configuration, maintenance and administration of Checkpoint Firewall.
• Provide documentation of how various applications worked after reverse engineering
• Updated and created Visio diagrams on network flow to assist team with troubleshooting
• Wrote troubleshooting guide for Jr engineers including explanations of CLI functions, diagrams, flowcharts
• Plan, Upgrade, Install and Troubleshoot on a variety of equipment and solutions: Cisco, Fortinet, Check Point, VMWare, Linux.
• Log Rotations, Data backup and recovery plans

TECHNICAL SKILLS

Operating Systems: Windows Server (2003/2008/2012 ) DOS, LINUX Ubuntu/SuSE/RedHat- Release 6.0, 6.1, 6.2, HP-UX 10.20, 11.0, Windows 10

Protocols: TCP/IP, IPX/SPX/PIM, SMTP, POP3, IMAP, FTP, BGP, OTN, OSPF, MPLS, IGMP

Checkpoint: 15000, 13000, 12600, 12200, 4600, 2200, 1100 series

Routing Protocols: RIP, OSPF, BGP, MP-BGP, EIGRP

Switching: VLAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switching, Multicast operations, Layer 3 Switches, Ether channels, Transparent Bridging

Network Devices: Routers/Switches, Repeaters, ISR Routers (1000/2500/3600/4000 ), Nexus Series 2k, 5k, 7k and 9K, Cisco ASR 1K and 9K, Catalyst 6500, 3750, 2960; Wireless LAN Controllers, Access Points, Fortinet FortiGate Firewalls, Cisco ASA appliances, Cisco Unified Communications Manager and IP phone sets.

Hardware: Dell 8250, 6300, 4300, 1300, IBM Compatible PC, PC/AT, Pentium, Print servers, Modem and Network card configuration, Installation of Compaq Proliant & Prosignia servers & desktops, RAID1/RAID 5

Software Applications: SCCM 2012, SCOM 2012(Deployment), CDN, VPN, NAT, ADS, Proxy Server 1.0/2.0 (Firewalls), Git, Docker Win NT (WINS/DNS/DHCP), UNIX (NIS, NFS & Samba), Print Servers (Hardware & Software), Cisco Prime, and Experienced with VMWare ESXi on Windows 2012 Servers.

Tools: Ping, tracert, NetMon, F5, Powershell, GTM, Telnet, tracemon Nslookup, L3 and F5 Load, Wireshark Network Analyzer, PuTTY.

Security: Balancing, Ping, Ipconfig & other utilities, wire shark, Solar Wind Network Performance Tool), Network Trouble Shooting Tools - Performance monitor, Network Monitor (HP Open View), Cisco Secure ACS.

Languages/Scripts: Microsoft Check Point Firewall, ISS, Power Broker, TCP/IP Wrapper

Database: HTML, Python, Perl, JSON, YANG, JavaScript, Unix Shell Scripts (Korn and C-Shell) & REST. MS Access, MS SQL Server 7.0/2000

Monitoring: Smarts, HPNA, Alogsec NetScout, HPOV, SmartsIC, SolarWinds, OPnet, TCPDUMP, Cisco Prime

SSL VPN: SA6500, PSA7000 series.

PROFESSIONAL EXPERIENCE

Confidential, Redwood Shores, California

Senior Network Engineer

Responsibilities:

• Strong hands-on experience in Installation, Configuration and troubleshooting of Checkpoint and Cisco ASA firewall.
• Experienced Checkpoint Firewall, Security and Network Administrator as well as a Cisco Certified Network Associate (CCNA), routing and switching.
• Strong knowledge of Protocols BGP, OSPF, EIGRP, IPv4/IPv6, PPPoE, MPLS, QoS, VTP, IPSEC.
• Interaction with the MPLS service provider in order to perform the associated MP-BGP configuration on Cisco ASR 9000 routers.
• Design and configure WAN links for data and VoIP communications for central site and 4 remote distributed offices.
• Performed analysis and diagnosis of complex networking problems in area of IP Core and MPLS/VPN networks.
• Hands on experience on Cisco Switches 6500, 4900, 4000, 3750, 3500, 2900 series switches and 7200, 2900 series routers
• Knowledge in planning, design, implementing and troubleshooting complex networks and advanced technologies.
• Advanced knowledge in TCP/IP suite and routing protocols, such as OSPF, BGP, and EIGRP.
• Advanced knowledge in Data Center Technologies such as Cisco Nexus platforms and NX-OS.
• Highly Experienced in Cisco Catalyst 6500 Platform and its Service Modules
• Monitored security events, analyzed the results and escalated, when necessary, to the appropriate group for remediation.
• Expertize skill set includes solutions for clients & technology services domain.

Environment: Cisco Catalyst switches: 3560, 3750, 4500, 6500; Routing protocols: EIGRP, OSPF, BGP; First Hop Redundancy protocol: GLBP; Vlans, inter-vlan routing, STP, VTP, RSTP, PVST, NAT, PAT, ACL, Route-maps, Route redistribution, Cisco ASA, Checkpoint firewall; Load balancer: BIG-IP F5; VPN: IPSEC, SSL VPN; Tools: Cisco ASDM, Wireshark Network Analyzer, MS Visio.

Confidential, San Jose, CA

Senior Wireless Network Engineer

Responsibilities:

• Extensive experience in balancing Information Security requirements by having a broader perspective on the business process of security administration.
• Gather requirements for implementing new methods for enhancing performance and reliability for processes and procedure while also creating and maintaining detailed documentation and metrics.
• Create and communicate weekly status updates to project team and senior management.
• Configuring and installing IEEE 802.11 b/g/n/ac wireless LAN WiFi, Access Points
• Use and strong understanding of TCP/IP, UDP, MAC, Discrete Network Simulator NS-2, TCP Congestion Network, Wireless routing protocols e.g., AODV, DSRP, voice sampling for transmission over IP Networks, Encapsulation, access methods CSMA/CD/CA, RTS/CTS, (FDMA, TDMA, CDMA), IEEE 802.11 MAC contention, Packet loss, FEC strength, Physical Tx-Rx propagation
• Strong understanding of OSI and TCP model and across-layers interactions, Mobile, Energy, Propagation and Error models affecting wireless.
• SSID configuration, cleanup, securing and policy enforcement.
• Used VMware Technologies and Cloud Computing to Install, configure and maintenance of Windows 2008/2012 servers, which run as Domain controllers, Exchange Server, DNS server, SMS, DHCP server, File server, Backup server, Database server and Print server.
• Assist in the development of reporting to address management requirements to obtain information
• Identify legacy systems integration and migration problems and provided suitable answers in terms of models and practical implementation solutions for the wireless network.

Environment: Cisco Aironet 1240 & 3702 Access Points; Cisco 2504 Wireless LAN Controllers; Vlans, inter-vlan routing, STP, VTP, RSTP, PVST, NAT, PAT, ACL. Tools: Cisco Aironet AP-to-LWAPP Upgrade Tool, Wireshark Network Analyzer, MS Visio, PuTTY.

Confidential, San Diego, CA

Senior Network Engineer & Architect

Responsibilities:

• Design and configure WAN links for data and VoIP communications for central site and 4 remote distributed offices
• Important savings on reduced long distance calls
• Increased sales by reliable data shared among remote branches offices
• Install, test, maintain, and operate LAN hub and switching equipment in internal networks
• Install and Manage Fortigate Firewalls
• Perform system administration functions on all switching or hub platforms
• Recommend placement and configuration of LAN hub and switching equipment
• Administer IPv4 address space and Domain Name Registration
• Configure, optimize and maintain WAN services through IPSecVPNs
• Monitor network WAN bandwidth using MRTG (SNMP)
• Maintain network design documentation in detail
• Performed Configuration of HSRP, Bundle Ethernet Config, Assigning DHCP profiles.
• Maintain Network & IP Telephony Device Inventory.
• Support Cisco IP Telephony rollouts and conduct detailed System Maintenance on IP Telephony
• Co-ordinate with service providers and specified project teams for development of IP telephony, LAN and WAN Services.

Environment: Cisco Catalyst switches: 3560, 3750; Cisco UC560 & 6900 IP Phones; Fortinet FortiGate 200 series Firewalls; WAN connectivity established through IPSec VPN tunnels. Tools: Cisco Configuration Assistant, Wireshark Network Analyzer, PuTTY, MS Visio.

Confidential, Irving, TX

Lead Data Center Engineer

Responsibilities:

• Manage and coordinate across multiple departments and diverse disciplines to implement Infrastructure projects on a Global basis.
• Manage and report Infrastructure Specific KPI's.
• Develop Technical Architecture designs.
• Develop and maintain Technical Standards.
• Manage Tier 3 Infrastructure Escalation Support.
• Manage customized implementation of Infrastructure Services.
• Active Directory and DNS/WINS
• Cisco LAN Implementation
• Storage and Backup services
• Virtualization services
• Performed Configuration on Nexus 9000 includes HSRP, EtherChannel configuration, assigning DHCP profiles.
• Experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 series, Cisco Nexus 9000 series, 5000 series, 2000 series data center switches
• Data center and remote sites network infrastructure and servers support
• Continual network monitoring of data center support, troubleshoot and diagnose hardware problems
• Provide internal consulting/support in Networking infrastructure for data center

Environment: Cisco Catalyst switches: 2960, 3560, 3750, 4500, 6500; Nexus 9000 & 5000 Routing protocols: EIGRP, OSPF; First Hop Redundancy protocol: HSRP; Vlans, inter-vlan routing, STP, VTP, RSTP, PVST, NAT, PAT, ACL, Route-maps, Route redistribution; Physical and Virtual Servers; VMWare vSphere & ESXi running on HP servers in turn running Windows Server 2003. Tools: vSpehere Client, Cisco Works, Wireshark Network Analyzer, MS Visio, PuTTY.

Confidential, NY

Telecommunications Lead

Responsibilities:

• Nationwide Telecommunications infrastructure administration (LAN, WAN, Telephony and Information Security) of 200 MPLS sites all VoIP-enabled.
• Responsible for many project management related task and manage multiple projects
• Network re-engineering and re-design using new technologies implementation (IP Telephony, VPN, Wireless LAN, Security).
• Responsible for Network Monitoring/Management of Cisco CUCM, PUBs, SUBs, IPCC, UCCE, VoIP, SIP, MGCP, H.323 Gateways
• Experience with installing and configuring Spanning Tree Protocol, Trunking (dot1q and ISL) and Ether channel on Campus Network Design Architecture.
• Installed and configured Cisco ASA 5500 series firewall and configured remote access IPSEC VPN on Cisco ASA 5500 series.
• Strategy definition on cost reduction and phone billing control
• Relation and negotiations to internal clients and service providers
• Communications equipment configuration and administration
• SOX compliant documentation and control
• Implemented Zone Based Firewalling and Security Rules on the Cisco PIX/ASA Firewalls.
• Troubleshooting and repair of complex IP (data/voice) and telecom communications equipment hardware or configuration issues, within defined service level agreement periods
• Direct customer interface on install and repair requests related to new equipment installs and overall functionality of IP (data/voice) and telecom communications equipment
• Experience with implementing and maintaining network monitoring systems such as Cisco works and HP Open view and have experience with developing complex network design documentation and presentations using VISIO.
• Involved in the removal of Static Routing from all devices and making EIGRP the primary routing protocol.
• Experience working in Datacenter environment, configuration changes as per the needs of company.
• Configured Cisco ASA 5510 for VPN Network Access Control integration with Cisco Secure ACS.
• Mentoring/Training/Coaching of associate and junior network engineers
• Documentation of all activities per defined procedures

Environment: Cisco Routers: 7200, 2600, 2500, 1700; Cisco Catalyst switches: 2900, 3500; Nortel PBXs, Cisco Call Manager; Cisco Aironet Standalone Access Points; Routing protocols: EIGRP, OSPF, BGP; First Hop Redundancy protocol: HSRP; Vlans, inter-vlan routing, STP, VTP, RSTP, PVST, NAT, PAT, ACL, Route-maps, Route redistribution, Cisco ASA Firewall & VPN; VPN: IPSEC, SSL VPN; Tools: Cisco Secure ACS, Cisco Works, HP OpenView, Fluke Network Analyzer, MS Visio.