PROFESSIONAL SUMMARY:

• Senior Network Architect Engineer with 17 years’ experience in managing, maintaining and migrating networks with proven five nines reliability. Understands risk management providing SOP documentations, R&D solutions & mentoring to junior engineers.
• Deployed on - premises end-to-end network management and cyber security solutions to proactively enforce compliance.
• Empowering businesses with the insight to securely manage, analyze & monitor network infrastructure traffic.
• Focusing on policy management of routers, switches, firewalls, VPNs, and other related security devices,
• Improving operational integrity with SIEM solutions to ensure reliable redundant networks and reducing risk.

TECHNICAL SKILLS:

• Network Design, Configuration, and Troubleshooting (LAN//WAN/WIFI)
• Network & Security deployments, upgrades and migrations.
• Wireless: 802.11 wireless Layer-2/3 roaming with autantication and encryption.
• Network Security: Firewalls (ASA, Palo Alto, Sonicwall) VPN, GRE, IP-Sec, TACACS+
• Network Monitoring: SolarWinds, Netbrain, SmokePing, Net Flow.
• Basic Deployment and understanding skill set of F5.
• Basic Deployment and skill set of JuJu & Puppet Ansible.
• Basic Deployment and understanding skill set of Vmware, KDE.
• Basic Deployment and understanding skill set of Openstack and SDN.
• Linux experience with Python automation capabilities.

PROFESSIONAL EXPERIENCE:

NTT Services

Confidential Forest CA

Responsibilities:

• Instrumental in orchestrating team leadership towards expediting and resolving network severity related incident for both Data Centers, remote sites & third party vendors.
• Providing comprehensive postmortem detailed reports for Incident Management.
• Coordinating & collaborate with Apria, NTT groups and third party vendors for any new change management requests.
• Managing day-to-day operations by facilitating ongoing communication with
• Influential in kick starting the newly identified "Network Project Priorities" allowing the opportunity for the NTT team to continuously work side by side in executing Apria's network steady state and set expectations for future network architectural design efforts.
• Aligning support with Apria's Security lead in remediation network related vulnerabilities.
• Proactively implementing new network router & switch templates in compliance with NIST & HIPAA auditing.
• Managing & supporting the NTT network engineers in rolling out NetBrain in efforts to troubleshoot implementation related issues, testing feature functionalities, and mapping Apria’s network.
• Facilitate open forum Friday conference call to discuss concerns, address blockers and provide mentoring.
• New 4500x/4510 Tech refresh tasks involved implementation of new design, complete R&S configuration to include integrated Cisco ISE for all new and existing deployments, submit migration playbooks documentation, finalized wiring matrix, and cabling validation of LAN/WAN/WIFI functionality after migration.
• Ekahaus software heat map placements and design for wireless access points to accommodate new or existing sites.
• Configuration of new Aruba controllers, playbook documentation, site survey validation after migration.
• Provisioning of new Aruba 225 access points for new or existing build outs.
• Ongoing Cisco software & ROM upgrades related to bug issues or Ebay’s standards.
• Office in a box architect for new build outs to include hardware specifications, design and BOM.
• Cyclades 6000 series deployment, configuration and replacements for existing sites.
• Trace ticketing system requests for ongoing router & switch configuration changes.
• Circuit related upgrades.
• Training and mentoring for new hire junior engineers to meet Ebay's standards.
• Senior Network Consulting supporting for Cloudify project plans.
• Managed & project delivery to Cal State Los Angeles efforts for the Cisco Access Control Server (ASC) upgrade from 5.3 to 5.6. Implementing new VM ACS servers to the existing cluster and conducted fail over redundancy scenarios on all ACS servers for HA capabilities with expected results.
• First order of priority entailed the coordinating/ migration of the existing network 60 remote sites of the MPLS XO Service Provider and implementation of backup redundancy to Zayo hosted provider. Migrating off the redundant Cisco 5580 ASA and deployed / configured over to the Palo Alto Next Generation Firewall layer seven inspection
• Senior network manager responsibilities included overseeing day-to-day maintenance of creating ACLs for the Cisco ASA Firewall Switches & Router configurations.
• Conducted a total network assessment and security posture analysis.
• Research & Design for syslog server vulnerability scanner Netflow software to comply with HIPAA regulatory compliance.
• As part of the Corelogic network migration team daily operations included:
• Design, architecting & execute fibre cable management requirements necessary for TOR, with the Cisco Nexus 5K & 2K equipment
• Rack & Stack Nexus equipment for Data Center and DR.
• Rack & Roll of the Nexus 5K / 2k TOR for the existing Major Bank client’s networks and the data center migration forklift.
• .Architect / Designing of the Cisco 4500-x Switches with VSS functionality for VM DR sites.
• Cisco 4551-X VSSP configuration for Eline P2P
• On Going Support and troubleshooting analysis related to pre and post migration upgrades.
• Documentation of playbooks and final review for CAB approval related to Bank segregations.
• 24/7 on call support and conference during migrating window.
• Scheduled ACL auditing & configuration assistance for Cisco ASA 5545.
• Routine maintenance and upgrade of Cisco ASR 1002 Routers, Nexus 5K 2K switches.
• Scheduled configuration changes & modifications with the Brocade Switch infrastructure.
• Solarwinds build out & deployment for Monitoring & Troubleshooting.
• Provide an overall network, security & risk assessment on behalf of Corelogic’s existing infrastructure with emphasis on an overall migration plan for both their Data Center and DR in conjunction with the build out of the new Cisco Nexus environment.
• Worked with a team to design, reviewed and execute a high level LLD & BOM to meet Corelogic’s requirements.
• Worked directly with vendor’s to insure and review proper equipment, licensing & SmartNet, ordered, tracked and inventory for the migration.
• Wrote up detailed playbook / spreadsheet for any network related changes to be presented to CAB for approval.
• Routine maintenance / configuration changes of Cisco & Brocade routers and switches.

Confidential

Network Engineer

Responsibilities:

• Provided Security & Risk Assessment on the existing hospital’s network design as it relates to HIPAA compliance.
• Redesigned and upgraded the hospital’s network on all routers, switches, APs, ASA and pix.
• Perform analysis and troubleshooting for DICOM fiber networks.
• Troubleshoot MRI coaches for connectivity related issues 3G/4G EVDO Cisco routers.
• Provided documentation and network recommendations based on Cisco’s best practices towards optimizing, securing and future corporate network expansion.
• Assisted with Security Policies and implementation of Solarwinds, Wireshark, TACACS + Cacti and Kiwi Syslog.
• Provided technical support to users for application and network related issues.
• Assisted in noledge transfer to allow for their IT mangers to use Cisco’s ASDM, switch & router Gui.
• Scheduled configuration changes & modifications with Long Beach Memorial Brocade Switch infrastructure
• 10gig campus wide infrastructure upgrade.
• Install, upgrade IOS, configure, and burn in of Cisco VS G-3C / 3CXL modules into new or existing 6505 or 6509 chassis.
• Scheduled site survey the day before installation, as well as perform pre-cutover checklist.
• Prep, installation and pre-testing for 10gig WS-X6148-SFP modules.
• 5:00 a.m. scheduled maintenance outage with a two hour window to completely replace equipment and bring full connectivity back on line to the Berkeley’s OSPF network.
• Post-cutover checklist after install, run the diff command between old and new configuration and make any necessary IOS configuration changes after a full review.
• Provided network analysis using Wireshark to resolve issues with the client’s network, servers and application issues.
• Provided rack and stack for the 2800 Routers and 3570 Switches at the Irvine remote office to confirm network & voip connectivity to headquarters.

Confidential

Network Engineer (Contract Assignment)

Responsibilities:

• Provided Security & Risk Assessment on existing corporate network design.
• Analyzed Superlative’s current running configuration on all Cisco routers, switches and pix.
• Provided documentation and network recommendations based on Cisco’s best practices towards optimizing, securing and future corporate network expansion.
• Assisted with Security Policies and implementation plans for an improved Security solution.
• Configured and designed WhatsUp Gold 12.4 alert system for Data Center and Corporate.
• Provided technical support to users for application and network related issues.
• Performed, Design & Documentation for DMVP networks for new and existing clients.
• Configured and managed Cisco 7200, 3800, 2800 and 1800 series routers.
• Configured Cisco ASA Firewalls and FWSM.
• Configured VPN templates used for deploying remote sites and Corp Headends.
• Maintained and managed security audits for PCI compliant clients.
• Configured and managed remote sites that utilized 3G technology for redundancy.
• Provided L4 support for WAN environment for remote clients.

Confidential

Network Security Engineer

Responsibilities:

• Designed, configured, managed and upgraded Cisco 3560, 5500 and 6500 switches.
• Designed, configured managed, and upgraded Cisco 2600, 3600, 2800 series routers
• Configured, managed and upgraded layer 2 and layer 3 Cisco ASA 5520 firewalls.
• Configured, managed Cisco Security Client to eliminate virus and malware for desktop users.
• Designed, deployed, and managed Microwave Broadband WAN connection for remote site.
• Redesigned and configured both Central and branch offices for IPSEC VPN tunnels.
• Configured and managed Cisco TACACS servers.
• Network and security documentation.
• Responsible for Maintaining and troubleshooting VPN WAN.
• Conducted Network audits and penetration testing using Nessus and Wireshark.
• Maintained and monitored Wireless, DS3 and T1 connections for central and all branch offices using MRTG.
• Built, configured and maintained Linux base projects for network security and monitoring.
• Responsible for all tape backups and restores using Backup Exec.

Confidential

Network Engineer

Responsibilities:

• Build, stage and install Windows 2000 Servers with Exchange for varies clients
• Implement both Cisco and Windows VPNs.
• Configured Pix 515.
• Migrated NT 4.0 servers to Windows 2000 servers in the enterprise network.
• Performed Security upgrades on Win 2000 servers for remote and local users.
• Troubleshoot PC’s and Printer Hardware.
• Rolled out PC’s using ON Technology to 16,000 nodes at various call centers locations.
• Racked and Stacked Compaq Proliant servers.
• Windows NT and Novell GroupWise for users administration.
• Troubleshoot PC's and printer hardware.
• Desktop support on Windows 2000, GroupWise, Office 97 and DOCS Management, software installation.