Summary

• I have been in Network Engineering and Security roles for about 15 years plus with background of Operations, Engineering, and Architectures with expertise in infrastructure scalability from datacenter build, business continuity, research, evaluation, solution assessment and testing to first line of support to CTO and CEO in regards of projects and operations. I am a hands-on technical person with years of experience in routing, switching, firewall, servers, and security to mention a few .
• I am looking for a senior position with balance of supports, projects, and possibility of team lead role.

Technical Skills

• Circuits
• DWDM Unprotected Wave , 10 Gbps Ethernet, OC-x, DS-x/T-x, Frame Relay, ISDN
• Network Hardware
• Cisco switches : Catalyst 6500, Nexus 7000, 5000, 2000
• Cisco routers : ASR 1000 1006 and 1004 , 7600, 7200 VXR
• Cisco firewalls : ASA 5515-X, 5540, 5520 , PIX 525, 515E
• Arista switches : 7150S, 7124SX
• Juniper routers : MX 80, 40 M 7i, 5
• Juniper firewalls : SRX 8500, 650, 240 , Netscreen
• Juniper switches : EX 8200, 4500
• Telephony : Cisco, Avaya
• Wireless : Cisco
• Security
• Cisco PIX, Cisco ASA, Cisco IPS Manager, Checkpoint Firewall, NMap, Cisco TACACS , Bluecoat Proxy
• WAN Accelerator
• Riverbed Steelhead
• Network Protocols
• BGP including MP-BGP , OSPF, EIGRP, RIP, SPT, SIP, DHCP, DNS, EIGRP, finger, FTP, FTPS, HTTP, HTTPS, IMAP, IPSEC, IPV4, Kerberos, LDAP, NetBIOS, NFS, NTP, OSPF, PPP including PPPoE , POP3, SMB, SMTP, SNMP, SSH, SSL, SYSLOG, Telnet, TCP/IP, TFTP , WINS
• Network Tools
• CiscoWorks, HP Openview, NetScout, Sniffers, NetFlow Analysis Modules, OPNET, tcp dump, and Wireshark, Corvil
• Network Management Software
• HP Openview Network Node Manager, Network General Sniffer and Distributed, MRTG, CiscoWorks, Solarwinds, Cisco MARS, and Cacti
• Operating Systems
• Linux, Windows, and MS-DOS
• Scripts
• UNIX Shell

Work Experience

Confidential

Senior Network Engineer/Project Manager

• Evaluate and recommend best solution to business unit in terms of building data centers, selecting telco circuits, choosing network gears, network monitoring system testing, and such from performance and financial perspectives
• Proactively research of new technology or product that may be beneficial to business unit requirements
• Design storage solution with Nexus 7000, 5000 and 2000 switches for proprietary data archiving and replications. This includes but not limited to FCoE, VPC, VDC, and OTV evaluation, testing, and implementation.
• Design IP-based voice and video solution over Private and Public network including fine tune QoS parameters and stateful firewall passthrough and setting up user account in Call Manager
• Design, Implement, and Maintain high-speed low-latency Multicast feeds using Arista 7150S and 7124SX based on BGP and OSPF Unicast routing table
• Design, Implement, and Maintain Internet redundancy using Juniper SRX 240H and Cisco 881 router based on BGP, OSPF, and RIP
• Create, Monitor, Consolidate, and Adjust specific data-traffic security policies to restrict, allow, or deny access to network services based on OSPF NSSA, Security Zone segregations, static routes, access lists, and VRF design with addition of using various auditing tools
• Design DMZ and multiple security zones using Cisco ASA 5515-X and Juniper SRX 650 firewall. This includes and not limited to security policy, IDS/IPS, and IPSec VPN remote access and redundancy
• Upgrade Cisco ASA and Juniper SRX firewall firmware to latest version
• Use LINUX-based servers to perform various administration tasks such as file existence monitoring, configuration change detection, and trade reports
• Provide first-line of technical support to CTO and CEO of various issues such as PC, server, network, phone, and email
• Rack, Stack, Commission, Decommission, Cable Patch cross connect to telco providers, Exchanges, switches, routers, firewall, PC, servers, NAS

Confidential

Senior Network Engineer

• Evaluating network design and standard practice of network engineering and implementation on Cisco routers and switches in Global Infrastructure group. This includes getting liaisons of essential groups, consolidate network monitoring system, and revamping engineering and implementation process.

Confidential

Senior Network Engineer

• Evaluating network design and standard practice of network engineering and implementation on Cisco routers and switches in North America region. This includes recommending BGP best practice implementation, discussing network requirements with business partners, updating network team with latest Cisco switch technologies, and assisting network team work load in daily basis.

Confidential

Senior Network Engineer

• Engineer and Implement North America region network and Global network connectivity using Cisco, Juniper, and Arista switches.
• Design, Implement, and Maintain high-speed low-latency Multicast feeds from various Exchanges such as NYSE SFTI , NASDAQ, and ARCA/BATS using Juniper EX 8200 series and Cisco Catalyst 6500 series
• Design, Implement, and Maintain redundancy network connectivity to direct-clients, business partners, and various Exchanges to use proprietary applications via BGP Standard Community List as external and internal connectivity, OSPF as IGP, and RIP as external connectivity
• Design, Implement, and Maintain point-to-point links and IPSec VPN tunnels between Cisco 7206 VXR hub router having channelized DS-3 and Juniper SRX 210 having T1 at remote offices
• Migrate Cisco CSS Load Balancing to F5 Big IP
• Migrate Netscreen SSG520M, Cisco PIX Firewall 525, Cisco FWSM, and Cisco ASA 5540 into Juniper SRX 650 running JUNOS version 11
• Update F5 Big IP rules, configuration, and code to follow new global standard
• Assist Project Managers to build up SOW Scope Of Work from direct clients and business partners regarding technical detail such as cross connect requirements, circuit bandwidth, source and destination IP addresses, TCP/UDP ports, latency metrics, and redundancy
• Test and Maintain Cisco Nexus 7018 switches running EIGRP to support SAN fiber channel and Ethernet networks
• Upgrade existing Cisco 6509 switches and Juniper MX 80 routers with Arista 7000 series switches in High-Speed Trading environment
• Use UNIX- and LINUX-based terminal servers to perform various tasks ranging from network gear configuration and scripting to file and database management

Confidential

Network Architect/Senior Network Engineer

• Collaborate with business unit, executive management and department leaders during project development. This includes gather business and technical requirements, identify business and technical risk level, asses existing power, physical cabling, and network infrastructures, work with vendors, set project time lines, analyze costs to come up with best solution that meets or exceeds business expectations
• Acts as team lead in setting global network standard practice to ensure network unification, scalability, performance, security, and compliance
• Design, Implement, and Maintain BGP, OSPF, EIGRP, and RIP network separation and integration to support low-latency Market Data network including globally-dispersed Active/Active Bloomberg FIX connections between private network and Internet. This includes redesign Internal, External, and DMZ CAN and Market Data private MP-BGP networks of US and UK DR Disaster Recovery site
• Relocate US DR site where includes redesign Internal, External, and DMZ CAN and Market Data BGP networks tune BGP, OSPF, EIGRP, and RIP networks to manipulate Production and Market Data multicast traffic routes and implement new VRF-VLAN routing to support exclusive networks of Internal, External, and DMZ CAN and Market Data networks
• Design, Implement, and Maintain multiple exclusive networks of Productions, Lab, and Market Data by using pairs of Cisco ASA 5520 on Active/Active mode Multiple Context , Nexus 7000, and VRF routing
• Design, Implement, and Maintain Subnet Load Balance among multiple sites using BGP Extended Community SoO Site of Origin and Extended Community Cost applied on BGP-based private network
• Design, Implement, and Maintain Cisco MARS-CSM integration, monitoring, detecting, preventing, and reporting with various Cisco equipments such as 7206 routers, VPN 3020 Concentrators, PIX 525 and ASA 5520 firewalls, FWSM Firewall Switching Module on redundant Catalyst 6509 switches, and IDS/IPS 6.0 on various sensor platform including 4215, 4240, AIP-SSM for ASA 5500 series, IDS/IPS Network Module for routers
• Design, Implement, and Maintain WCCP integration of globally-dispersed redundant BlueCoat Proxy SG 810 and Proxy AV 810 appliances and Catalyst 6509, Catalyst 4506, Catalyst 3560 switch to regulate, proxy, cache, and accelerate Unicast and Multicast Internet and Market Data traffic
• Design, Implement, and Maintain WAN acceleration and QoS across global MP-BGP MPLS private network using Riverbed Steelhead 5050 and 5520 to accelerate database replication such as SLX Sales Logix , CRM, and other SQL-based applications and to prioritize critical application traffic such as international trading between US and UK
• Work with Voice team to migrate Avaya-based PBX to Cisco IP-Telephony based with Call Manager and Unity, including setting up voice gateway, voice firewall, setting up trunks between IP Phone and switches, testing voice circuit, and creating user profiles based on MS Active Directory database
• Design and Implement Cisco Nexus 7010, Nexus 5000, and Nexus 2000 with combination of Catalyst 6509E, 4507E, and 3560 switches to support Voice and Data traffic

Confidential

Senior Network Engineer

• Global Redundant MPLS Network Design, Implementation, and Troubleshooting to support, monitor, maintain AMEX critical DR servers, VPN tunnels, and infrastructure including 100 Cisco 7206 routers 100 Cisco Catalyst 6509, 4506, and 3560 switches 20 Cisco PIX 525 and ASA Firewalls 5520, 50 Cisco Aeronet AP 1231 Wireless, 10 Cisco VPN Concentrator 3030, 10 Cisco CSS Load Balancing 10 F5 Big IP, and 10 BlueCoat Proxy SG 510
• Design, Implement, and Maintain Active/Active globally-dispersed Reuters Bridge product through Savvis and Radianz private networks
• Design, Implement, and Maintain Active/Active globally-dispersed Fidessa and Fortis private network connections to support Market Data network
• Document changes and recommendation using MS Visio, Word, Excel

Confidential

Network Engineer

• Configure redundant HP Blade Enclose servers to LACP Port Channel fiber trunks to Cisco Catalyst 6509 switches
• Manage mixed UNIX/LINUX and Windows network environment, including NetBIOS and UDP Broadcast Forwarding DHCP maintenance
• Site turn-ups involving OC-x OC-3, OC-12, OC-48 , ATM, SONET/SDH, Gigabit Ethernet, DS-3, T1, ISDN circuits including circuit commission and decommission DSU/CSU Mux management STDM, and TDM Dial Frame Relay, SDLC, PPP encapsulations and routers, switches, wireless, firewalls deployment
• Review, Analyze, and Diagnose inside wirings and cablings specification and testing with Fluke meters
• Review and Analyze wireless connection issues including signal strength, SSID, and VLAN