Technical

• Expert knowledge: Cisco, F5, Checkpoint
• Internetworking Design and Implementation: LAN/WAN design, implementation and troubleshooting with an emphasis on Cisco products, Systems administration and integration, project management and network management.
• Protocols and Technologies: T1, E1, Frame-Relay, X.25, DS-3, E3, ATM, ISDN, xDSL, Cable, SONET, IP, SMDS, BGP, OSPF, IGRP, EIGRP, RIP, SNA, SDLC, SDLLC, RSRB, DLSW, CIP, VIP, BOOTP, DHCP, DNS, VoIP, NTP, IPX, PPP, VPN, L2TP, PPTP, IPSec, ODR, CRB, IRB, NetBIOS, and HP OpenView.
• Troubleshooting Tools: Sniffer tools such as Fluke Meter, LAN Analyzer, Transcend, Network General Sniffer Sniffer Pro/DSS , NetScout, OPNET SP Guru, OPNET IT Guru, OPNET ACE, NetCool, NetIQ, and NetQoS.
• Leadership
• Strategic Planning: Planning, developing, and implementation of information solutions to facilitating corporate directives and growth
• Risk Management: Implementing process and procedures to mitigate and provide contingency plans by maintaining communication with the various departments or stakeholders
• Efficiency and Creativity: Reduction in labor cost by automation and streamlining process and procedures
• Infrastructure management: Define network management, support, deployment and installation process and procedures
• Result driven: Consistently meets and exceeds all goals and objectives
• Coaching and Mentoring: Lead cross-functional teams with diverse technical backgrounds. Provide advance technical training to engineering staff

Enterprise Application Performance

• Analyze and profile new applications on the corporate network for bandwidth usage, application behavior, and latency using OPNet ACE, OPNet SPGuru, NetIQ End2End, NetQoS SuperAgent Probe and Network General Sniffer.
• Network Management
• Advise NOC as 2nd and 3rd level network engineer using NetCool, and Solarwinds NMS. Developing network management tools to assist engineers to better utilized their time performing tedious tasks so they can concentrate on real network issues.
• Internet Access/Remote Access
• Configure and setup of Cisco AS5200/AS5300 remote access router with multi-T1 lines for corporate dialup access. Setup and configure VPN for remotely access their internal application and services using Cisco PIX and Checkpoint Firewalls.
• Project Management
• Worked with account teams, program managers, implementation teams, engineering teams and others to determine the scope, technical requirements and coordinate the process of managing a customer for a major Network Managed Services vendor. Manage the migration of 3rd party connections to the new infrastructure.

LAN/WAN Implementation

Implement Data Center LAN and WAN connectivity to corporate headquarter. Provide architecture to deploy a global MPLS core network. Perform detail network assessment, design and implementation for network migration and planning.

Network Security

Develop security architecture and standards for data transmission to ensure data integrity, confidentiality, and availability. Perform venerability assessment to evaluate the current network security infrastructure for potential threats for both internal and external access. Develop network security infrastructure design and support matrix. Develop procedures and/or process for security incident reporting, security management process, information access control, personal security, configuration management, audits, incidents recording, contingency plans, authentication and access controls, security trainings, and termination due to security violations. Perform system administration and maintenances for CheckPoint FW-1 and PIX, firewalls. Provide firewall support to remote access users and analyzing access logs. Analyze network traffic using protocol analyzers such as NAI Sniffer, Wandel, and EtherReal Analyzer. CIS-SCAN tool for security benchmark the current level of system security for Solaris, HP, Windows, and Linux operating systems.

LAN/WAN Troubleshooting

Extensive troubleshooting skills dealing with mix vendor networks of over 300 customer networks with more than 12,000 routers and switches. Hands-on experiences with protocols such as VoIP, IPSec, SNA, SRB, DLSW, STUN, SDLC, SDLLC, IP, IPX, DECNET, RIP, OSPF, EIGRP, IGRP, BGP, ODR, CRB /IRB, Bridging and NAT.

Confidential

Present Contractor Sr. Cisco Network Engineer

• Tier 3 Engineer ACES - Advanced Customer Engineering Services working with customers, clients, sales engineers doing break/fix, pre and post sales technical engineering and development. Handle support for Cisco, and F5 products.
• Worked extensively with application and server owners to change VIP keepalives, backside, frontside ports and modified CSS and F5 parameters to improve performance
• Created a phased migration plan of one VIP at a time that was migrated from CSS and MS LB to Cisco ACE and F5 BigIP/LTM
• Responsible for overall network design, operations, and tier 3 support for the third largest school district in Ohio, supporting 36,000 students and over 22,000 workstations at 66 schools in a switched environment of four major vendors Cisco, FortiNet, Foundry, Juniper, and Extreme
• Configured Juniper M-Series and J-Series routers for IP/MPLS connectivity
• Configured ACS to support Tacacs authentication based on group access
• Implemented Nexus 7010 as Core switches, 5548s as Distribution and 2248s as TOR design with VPCs
• Configured and implemented Cisco 6500, Nexus 7018, Nexus 5596 and 2248 switches with Layer 2/3 functionality as DMZ and Server Farm devices
• Cisco Nexus 7k, 5k, 2k / ASA 5585 firewall virtualization/network replacement at all customer datacenters and remote sites.
• Migrated over 500,000 firewall rules from preexisting Cisco PIX firewalls to Cisco ASA's.
• Installed and migrated the various cloud/customer physical network pods into this new virtualized Cisco infrastructure.
• Installed and integrated new ACS appliances with existing legacy RSA infrastructure and migrated network devices to it for authentication.
• Migrated subnets, equipment and firewall rules/policies from being decommissioned to other, still active locations
• Designed and implemented new, redundant Cisco campus network utilizing Cisco 4006-L3 and 3548 switches. Migrated from old Bay Networks infrastructure to new Cisco infrastructure. Implemented CiscoWorks Campus Manager to manage all new switches.
• Created Data and Voice CBWFQ QoS standards which were implemented throughout the enterprise
• Configured and implemented Cisco 2800, 3800, 2900, 3900, ASR1000 and 7200 series routers with T1, MLPPP, IMA, DS3, OC3 and Ethernet Handoff interfaces
• Performed Pen Testing with Nexus and security audits to validate that sites were security compliant
• Worked with risk management to qualify new M A activities and new projects
• Experience with F5 Bigip, Cisco CSS and CSM loadbalancers
• Designed new ASA 5500 object oriented rule configurations and policies
• Migrated from Checkpoint to Cisco ASA firewalls in various locations that required SOX or PCI compliance
• Implemented Checkpoint NG on DL380 and Nokia appliances and object oriented rule sets with Tuffin to validate rule utilization
• Designed and implemented Cisco MARS and ASDM for firewall management
• Implemented Cisco 4200 IPS in inline mode with NAC for high security network segments
• Designed and implemented dual core MPLS network with AT T and Verizon. Also implemented VRF Lite with separate VRFs within the Data Centers
• Designed and implemented TrustSec and SecureX feature sets with ISE/NAC
• Implemented 802.1x authentication for wired and wireless devices via Cisco Secure ACS 5.x
• Designed and implemented consistent enforcement of context-based policies across wired and wireless networks
• Performed accurate device identification using ISE-based probes, embedded device sensors, active endpoint scanning
• Implemented WLC 5500 for centralized configuration and administration of LWAPs
• Created Linux platform on ESXi and utilized as centralized configuration builder for router and switch configs
• Implemented ASA B2B and B2C solutions including Anyconnect, ASA Phone Proxy and DMVPN
• Created policy based routing policies throughout the core network via BGP route-maps.
• As part of the IPT cutovers, replaced existing switches with Cisco 3560 and 3750 stacks. Utilized Cisco 4500's and 6500's as Core Switches.
• Configured OSPF virtual links, area hierarchy via NSSA, SA, TSA and summary addresses.
• Designed and implemented various EIGRP and RIP redistribution configurations.
• Designed and configured BGP confederations, dampening, regular expressions, EBGP Multihop, route reflectors, policy routing, and summarization.
• Performed site migrations from Frame Relay to MPLS and from 2900 switches to 3750 stacks. Also migrated from 2600 to 3800 series routers.
• Performed Data Center migrations from 4500 series switches to 6500 in order to consolidate server farm switches
• Created triangulated Data Center MAN for local Data Centers for high bandwidth backup scenarios
• Implemented remote user 3DES IPsec based VPNs with Cisco 3000 series VPN concentrators
• Setup HSRP for end user redundancy and network failover.
• Designed and implemented Cisco 6500 with MSFC/Sup720, 5500 with RSM, 4000, and 3500 switches in redundant configurations.
• Evaluated current Core, Distribution and Access layer routing and switching architectures and made recommendations on how to improve performance and create more redundancy.
• Configured Spanning-Tree STP , VTP Domains, UDLD, and VLANS on Cisco 6500 and 5500 Switches.
• Migrated from Checkpoint to Cisco ASA firewalls in various locations that required SOX or PCI compliance
• Implemented Checkpoint NG on DL380 and Nokia appliances and object oriented rule sets with Tuffin to validate rule utilization
• Designed and implemented Cisco MARS and ASDM for firewall management

Confidential

Contractor Sr. Cisco Network Engineer

• Network Architecture designs technical solution for confidential. My focus was to research and test new technologies / hardware to determine what was needed to be implemented. Some of the projects were wireless technologies, implementing QOS, MPLS upgrades, etc. Once the technical solution had been designed, it went into testing to get certified prior to be put into production. Once the solutions had been certified they had it off to another team of engineers to be implemented. Some additional tasks were to: establish standardization router configuration, Quality of Services/Class of Services, make recommendations for network management, security, network equipment, IOS versions, and implementation plans.
• Created Data and Voice CBWFQ QoS standards which were implemented throughout the enterprise
• Reviewed and performed QA on various network designs and configuration for accurateness and conformance to standards
• Designed the physical network architecture at various Datacenters to cost effectively utilize existing infrastructure such as conduit, multimode / single mode fiber, and HVAC.
• Implemented BGP with full Internet routes to redundant carriers
• Designed migration strategy from Frame Relay and Point-to-Point circuits to an end to end MPLS network with support of DSCP based QoS throughout
• Configured and implemented Cisco 2600, 3700, 2800, 3800, and 7200 series routers with T1, MLPPP, IMA, DS3 and OC3 interfaces
• Utilized Cisco Works RME to implement TACACS authentication for all routers and switches
• Configured and troubleshot issues with Cisco 1900, 2900, 3500, 3700, 4500, and 6500 series switches in Layer 2 and Layer 3 configurations
• Performed various site cutovers from legacy RIP and EIGRP networks to OSPF with BGP MPLS based networks
• Configured and implemented several head end Frame Relay routers with DS3's that supported all remote facilities with T1's with appropriate CIR's
• Configured Frame Relay FECN and BECN to support error correction
• Configured AS5300 at the head end to support ISDN as a backup in case of Frame Relay WAN outages
• Setup VTP transparent mode for all switches to avoid VLAN issues from Client/Server setup
• Created router on a stick Trunking configurations for remote sites that had Layer 2 switches in order to separate VLANS
• Utilized Microsoft Project to create detailed flow charts of project responsibilities and timelines to more effectively manage projects.
• Configured Cisco 2900, 3500, and 6500 series switches with VLAN's to segment user groups.
• Implemented various access-lists, IOS upgrades, static routes, and debugging for network troubleshooting and connectivity.
• Removed static routes and implemented EIGRP throughout the network to create a dynamic environment throughout
• Migrated from Static to BGP for Internet access with redundant ISP's
• Created configuration templates for all routers and switches to provide consistency for all configurations
• Created EIGRP summary routes to reduce routes advertised to remote sites with lower end routers
• Configured Internet based 3DES VPN Tunnels to connect to 3rd party vendors
• Designed a campus fully meshed non-blocking switching architecture using Catalyst 6500 and 3500 switches. The proposal included VOIP capabilities such as QoS and powered switches that will be implemented in the future. VOIP Design was configured in the proposal for future growth and implementation.
• Streamlined Qos for Voice bearer and control traffic to minimize jitter and latency for voice calls.
• Configured and troubleshot Call Managers in Centralized and Distributed deployments.
• Setup 6509's with 6608's for PRI's and Media Resources.
• Prepared scopes of work, technical justifications, and Visio diagrams for project proposals.

Confidential

Network Consultant Engineer

• Network Consultant Engineers are assigned to work on the National Data Center Resiliency and Optimization Project. The project teams will take the necessary steps to improve network symmetry and resiliency across the four National Data Centers including the development of implementation plans for network changes while minimizing impact to all running services.
• Discuss and identify key issues impacting and stability of National Data Center.
• Develop Engineering Plan documenting design strategy and steps required to implement changes focusing on layer 1-3 optimization.
• Network Discovery audit and Gap Analysis.
• Implement network changes by developing MOP Method of Provisioning .
• Performed Service Requests to implement new 3rd party connections via Internet based VPN's
• Implemented Frame Relay core routers with DS3's and cutover remote sites to the new Frame Relay nodes
• Configured and implemented Cisco PIX firewalls for Internet facing DMZ's and 3rd party connection access control
• Configured various access layer switches such as Cisco 1900, 2924 and 3524's for remote sites using vlans and trunking.
• Designed and implemented separate dedicated PIX firewall pairs for company outbound Internet access, 3rd Party Access, and DMZ server farm access in order to create a more hierarchical organization
• Migrated from a mixture or RIPv2 and static network to EIGRP end to end in order to simplify the network
• Replaced Juniper and Foundry network equipment with Cisco routers and switches
• Configured Cisco 1600, 1700, 2500, 2600, 2800, 3800, 3600, 4000, and 7000 series routers.
• Configured BGP full routes to redundant ISP's with route-maps to control routes
• Worked with 3rd party vendors to integrate the networks via point-to-point links and VPNs that were filtered by firewalls
• Utilized NAT in various scenarios of 3rd party integrations of duplicate addressing and other special cases
• Implemented and troubleshot T1's, IMA, MLPPP, DS3, and OC3 circuits
• Utilized Visio extensively to document the network
• Implemented various access-lists, IOS upgrades, static routes, and debugging for network troubleshooting and connectivity.