RESUME

Peng Zheng (Ph.D, Penta CCIEs R&S, Security, Voice, SP and DC, AWS Certified

Solutions Architect Associate/Professional , JNCIP)

SUMMARY:

Senior Penta CCIE #13584 with Ph.D in wireless broadband network and 15+ Yrs experience of

technical and project management skills. Extensive experience in architecture, information

security policies, IP Telephony, network security design and implementation and support of

large-scale multi-vendor networks. Extensive experience with Customers, technical support and

documentation.

SKILLS:

Hardware: Cisco Routers/Switches, CRS-1, NEXUS 9000/7000/5000/2000/1000v series and

ME3600 series, VPN concentrator, IPS sensor, Cisco ASAs, Cisco Unified Communications

Manager, Unity, CUCCX, presence server, Juniper M320, netscreen Gateways, Hadoop. Over

15+ Yrs of extensive firsthand experience.

Network: VoIP, VPN, IDS/IPS, VXLAN, SDN/OpenFlow/OpenStack, network security,

wireless network including 3G UMTS and 4G LTE. Over fifteen years of experience in

network-related research and development.

LAN Media: Ethernet/FastEthernet/Gigabit Ethernet/tenGigabitEthernet.

WAN Media: MPLS, ATM, Frame Relay, T1/T3, ISDN, PSTN, leased lines.

Network Management: Cisco LMS/RME/ANA, Protocol Analyzer

Protocols & Applications: MGCP, H323, SIP, TCP/IP, MPLS, BGP, RIP1/2, OSPF,

EIGRP, ISIS, VLAN, trunking, Spanning Tree, HSRP, VRRP, IPSec, AES, DES, 3DES,

ISDN, DNS, SMTP, POP3, WEB, DHCP, NAT, PAT, VoIP, SNMP, load balancing, HA,

DMZ etc. Over 15 Yrs of hands-on experience network applications and protocols and six

years of hands-on experience on VoIP.

Platform: Windows 95/98/2000/XP/7/8, Linux, Openbsd, snort, AWS, Google Cloud,

VMware ESXi

Languages: C/C++, Java, ASP, Python, VBScript/JavaScript, SQL, HTML, Assembly.

Documentation: Microsoft Office Suite, Visio, MS Project

EDUCATION:

Ph.D. In Computer Network, University of California, Irvine, 09/1999-03/2004.

M.S. In Electronics and Information Science, Lanzhou University, China, 09/1994-06/1997.

PROFESSIONAL EXPERIENCE:

Cisco Cloud Infrastructure Architect, Cisco Systems, 12/2014-04/2016

· Provide infrastructure Solutions for Nexus 9k standalone and ACI mode with openstack.

· Build the solution verification lab.

· Provide the design documents and golden templates for production.

· Use Python to do automation for ACI Fabric through SDK and RESTful interface.

Cisco Collaboration Architect, En Pointe Technology Inc., 06/2014-10/2014

Peng Zheng

Email: pzheng2004@yahoo.com Tel: (310)218-6090

Santa Clara, CA 95051

· Hardened the Security Configuration and Set up network and storage in Data Center

· Got Familiar with Cisco Hosted Collaboration Service set up

· Brought up UCS Blade, installed and configured VMware ESXi Hypervisor through UCS

Manager.

· Installed CA based certificate through UCS manager and configured access control through

ACS 5.2 for UCS Manager Access.

· Configured ASA5520s and ASA5585s to make sure they are compliant with CIS benchmark

· Enabled access control on ASA5585s (all security contexts)

HTTS Security Engineer, Cisco, 06/2012-05/2014

· HTTS Security Support including all Cisco Security Products, troubleshoot production

network and recreate cases in lab.

· Provided break-fix support for Cisco's largest Service Provider and Enterprise customers.

· Responsible for diagnosing, troubleshooting, and repairing complex Cisco hardware and

software products implemented in enterprise and service provider networks.

· Responsible for timely acceptance, complete ownership, and drive to resolution of

customer issue.

· Embraced strong communication, documentation, collaboration tools and escalation skills

in order to meet the customer’s needs.

· Managed workload and other assignments efficiently while resolving time-critical

situations reliably and professionally.

· Analyzed of network activity data for security relevant events using a variety of networkdata

processing platforms and identified security events, characterize events, provided

recommendations for remediation of those events, and define analytical methods to automate

the analysis customer’s network.

· Developed solution on Zero downtime migration for ASA 8.2 or lower to 8.3 or 8.4 or

higher.

· Provided customized VPN solutions for DMVPN, L2L, VPN client, anyconnect.

· Provided 2-factor authentication solution based on ACS 4.x/5.x.

· Provided access control solution for ASR, CRS and Nexus switches.

· Provided solution for ISE upgrade, ISE certificate update, ISE profiling and posture.

· IPS sensor configuration and troubleshoot.

·Troubleshot Router/Switch, ASA,IPS, ACS, ISE,ASR, Nexus by checking logs and packet

capture.

· Migrate from IPv4 to IPv6/Dual Stack, configure NAT64 on ASR and ASA.

· Implement IPv6 ND (neighbor discovery) and ND inspection and secure ND and RA

(router advertisement).

Tier-4 System Design Engineer, AT&T, 09/2010 – 06/2012

· Designed and Tested the solutions and wrote over 30 deployment guide and

implementation guide for mobility projects (including 3G UMTS and 4G LTE) and

instructed the operations during FFA maintenance windows as FFA leader. Successfully

made all upgrades, migrations and deployments.

· Responsible for the design, engineering, testing, and Tier 4 support of complex mobility

network solutions for AT&T.

· Worked on Cisco 7609 to build Multi service Node’s (MSN) and also Cisco 2941 to build

Smart integrated access devices (SIAD) to build the mobility cell site backhaul.

Peng Zheng

Email: pzheng2004@yahoo.com Tel: (310)218-6090

Santa Clara, CA 95051

· Designed, planed, trained and supported various migration activities for UMTS and LTE

trasport such as RNC Rehome, MLPPP rehome, Node B rehome, cell site rehome etc.

· Migrated IPv4 to dual stack.

· Tier-4 consultant for Mobility/LTE launch.

· Troubleshot escalations in field.

· Designed and built network management system by using VMware hypervisor, deployed

ALU’s 5620 SAM, Cisco’s ANA and LMS in Tier-4 lab, improved the efficiency of new

deployment and helped troubleshooting.

· Conducted verification by using Spirent TestCenter and IXIA IxLoad.

Director of System Engineering and IT, Mavrix Technology Inc. 10/2005 –08/2010

· Built and led 20+ people System Engineering team and 3 people IT teams.

· Responsible for the training, development, and performance evaluations of employees,

with corrective action taken as necessary on a timely basis, in accordance with company

policies.

· Designed and built the system architecture according to production spec and resource

availability.

· Scheduled and coordinated system development activities to meet the goal of quality,

delivery, flexibility and effectiveness.

· Designed and implemented the company network using netscreen SSG-140 and NS-5GT,

and set up VPN connection between US site and China site.

· Designed and implemented SIP based VoIP network between US site and China site by

using Asterisk.

·Designed and built Cisco Unified Communications Manager, Unity, IPCC and presence

based solutions for clients, implemented MGCP, SIP gateway for different sites, gatekeeper

and advanced call routing for call admission control, integrated presence server so that users

can control their IP Phone through CUPC client, implemented features like SRST, traffic

shaping, Tail-End Hop-Off, Single Number Reach, “+” dialing, time of day access etc.

Senior Engineer, CPI Solutions Inc. 04/2005-10/2005

· As customer’s most preferred consultant, served and redeemed picky customers and

became designated consultant for them.

· Consultant for networks, security and Cisco call manager 4.0 VoIP design.

· Simplified and optimized CPI’s Security design for existing customers by combining

DMVPN and client VPN.

· Troubleshot and fixed implementation issues for existing customers.

· Conducted security and VoIP integrated design for several customers.

Senior Engineer, Panway Systems Inc. 06/2004-02/2005

· Consultant for network and security design. Designed and configured the network using

Cisco router, PIX and VPN concentrators.

· Designed and built an integrated security gateway box based on OpenBSD platform.

Senior Engineer, IST International, 12/2003-05/2004

· Finalized a wireless TCP project. Designed and implemented a wireless TCP transparent

proxy in the bridge mode, without changing the existing network configurations.

· Set up a gateway in one Korean ISP’s network and configured and integrated their Cisco

Peng Zheng

Email: pzheng2004@yahoo.com Tel: (310)218-6090

Santa Clara, CA 95051

network devices into their existing system.

· Designed the architecture and conducted the simulation for ATS (Active Transport

Service, which was a framework for wireless multimedia) project, funded by Korean Mobile

operator KTF.

Ph.D Candidate, NETROL Lab at UCI, 09/1999-03/2004

· Worked as a principal researcher on "Issues on QoS Stability, Sensitivity, Flow and

Congestion Control in Wireless Broadband Networks" project funded by National Science

Foundation (NSF) and conducted extensive researches on QoS related area.

· Implemented various cases of simulation of wireless broadband network on OPNET.

· Developed CORBA applications based on C++ on Linux.

· Developed Embedded Applications for Palm OS.

Visiting Researcher, Institute of High Energy Physics, the Chinese Academy of Sciences,

Beijing, China, 03/1996-09/1999

· Worked as IT for IHEP’s network of Cisco Routers and switches.

· Worked as a team leader of the state key project "Research and Development of Key

Computer Security Technologies" funded by the Chinese Academy of Sciences, headed by

Dr. Rongsheng Xu, who is generally regarded as the father of Internet in China.

· Jointly designed and implemented a vulnerability detection system based on Linux and

Solaris.

· Designed and implemented a penetration testing system which is the core component of

the above project. The project was honored “CAS S&T Progress Awards” (1st Award)

(Science and Technology Progress Awards from the Chinese Academy of Sciences) in 1999

and “National Science and Technology Progress Awards” (2nd Award) in 2000.

· Served as a consultant in network architecture and security for XI'AN DATANG CORP.

· Served as a consultant for Sparkice Inc. to install and maintain the earliest streaming media

servers in China that provided Realvideo services on the Internet and timely reported U.S.

President Clinton's China visit.

· Served as a consultant of network architecture and security for Zlnet Inc., the 4th ISP in

China.

INTERESTS:

· Build and integrate open source alternative solutions like Linux based transparent firewall,

asterisk.

· Enjoy having hand-on experience to have better understanding of the technologies,

including VMware, Xen, KVM, OpenStack, Hadoop.

Peng Zheng

Email: pzheng2004@yahoo.com Tel: (310)218-6090

Santa Clara, CA 95051