Network Architect /Network Support Engineer

Robert Half Technology. 03/14/2016- 05/20/2016. International Paper. TN

CVS  Louisville Kentucky.06/13/16-    09/12/16      CVS RX Crossroads,KY  

Responsibilities

included: 
Senior Firewall Network Engineer responsible for the design of infrastructure Cisco based network infrastructure. Duties include; critical evaluation and selection of the software and hardware components of the infrastructure; report any potential issues and be able to present recommendations. Responsible to coordinate and work with the NetOps team to resolve any day to day and complex related issues and be responsible for any required updates to network documentation resulting from any modifications.

·   Worked with multiple systems including Windows Server 2008 R2, Systems Administration Server Installation and Support, Active directory migration, Data Recovery Service and Data Backup, Spyware and Virus Removal, Network Service and Monitoring, Virus, Spyware, Malware Removal and Internet Security Solutions.

·   Extensive experience with all aspects of Active Directory 2003 & 2008R2.

·   Experience with TACACS administration

·   Experience with Kerberos, SPNs, constrained delegation and application utilization and integration with Kerberos

·   Responsible for new IPS deployments, upgrade execution and IPS retirement.

·   Provisioning, Monitoring and management of Firewall/Intrusion Detection / Prevention System using tools

·   Manage Enterprise Intrusion Detection / Intrusion Prevention Systems IBM ISS, McAfee Intrushield etc.

·   Identify security incidents through log investigation, correlation and analysis

·   IBM Site Protector Tool Experience

·   Experience with SSL Certs – specifically with VMWare View 5. 1 – 5.2

·   Experience with Trend Micro Deep Security 9 together with Vshield

·   Technology strategy& Architecture Dci&In Ngdc&Ti Virtualization VMWare Virtual Desktop infrastructure

·   Knowledge of Internet security / Market Data / DMZ network architecture

·   Excellent understanding of proxy technologies, FTP, SOCKS, TCP relay, proxy-chaining, authentication.

·   Proxy – Bluecoat, McAfee WSG (Web Security Gateways), Proxy-pac scripting

·   Implement complex, project and lifecycle changes in the Proxy and Threat Prevention disciplines

·   Proxy and Malware-mitigation (BlueCoat, Radware, FireEye

·   Threat detection and data leakage protection (Network DLP/Vontu/Symantec, Guardium. Imperva, StealthAudit.

·   Perform design validation and QA testing of new services to ensure successful production deployment.

·   Understanding of ITSM process and workflow (ITIL)

·   Familiarity with Integration technologies (web services, ODBC, etc.)

·   Experience designing, developing, or testing customer apps

·   Technical experience with networking and/or data center operations.

·   Designed, implemented and supported all routing, switching and security aspects of a multi-tiered, multi-data center IT enterprise.

·   Responsibility for all circuit types including Internet access, point-to-point data circuits, MPLS/VPLS and others.

·   Some support for standard voice connectivity (Knowledge of TDM technology such as ISDN (PRI), T1/T3, OC-x, and more.

·   LAN and WAN technologies, dynamic routing (OSPF, BGP-4, MPLS (RSVP/LDP) and QoS (RED, WFQ) etc), remote access via VPN, network security standards and best practices, circuit resiliency and failover mechanisms between diverse data centers.

·   Checkpoint expert, including an expert on troubleshooting the firewalls, implementing monitoring and upgrading

·   Check Point Technology function

·   Upgrading Deployment Platforms

·   Tuning Security Policies

·   Identifying threats within Traffic and Connections

·   Advanced User Management and Authentication

·   Advanced IPsec VPN and remote access

·   Auditing and reporting

·   Build, test and troubleshoot numerous deployment scenarios

·   Build, test and troubleshoot a clustered Security Gateway

·   Backup your Security Gateway and Management Server

·   SmartCenter

·   Create custom dashboards to monitor only what is relevant to your organization.

·   Widgets and chart templates optimize visual display, making security data easy to understand

·   Customize reports for the different stakeholders

·   Correlates logs from all Check Point enforcement points, including end-points, to identify suspicious activity from the clutter. Rapid data analysis and custom event logs

·   Extensive knowledge of best practices in network security architecture and configuration, i.e. firewall zones, application flow, use of VLANs, etc

·   Good knowledge of Web Application Firewall configuration, preferably Citrix NetScalers

·   Design, implement and manage complex firewall infrastructure.

·   Act as Subject Matter Expert for other Security issues

·   Hands-on Checkpoint/Nokia Firewall

·   Experience with Provider One or Check Point's Smart Center management station Tipping Point Intrusion Protection System or Sourcefire management and configuration experience

·   Provide expert technical knowledge in the implementation and testing of a BC/DR solution consisting of VMware SRM, EMC Recoverpoint, and VCE Vblock technologies.

·   Solid understanding of Cisco network and EMC storage design and implementations

·   Expert on Cisco Call Manager, Unity, and UCCX

·   Expert Setup and manage user accounts in Cisco Call Manager (CCM)

·   Experience in Agile, iterative and parallel development model

·   Experience with Cisco routers, CSU/DSU's, switches and PIX /ASA firewalls.

·   Extensive experience with Application and Infrastructure layer KPIs on URLS (http get/post), WSDL call, Servers, Network, firewalls, Load-Balancer.

·   Experience with service Oriented Architecture (SOA)

·   Experience with building/Working on Integration Layer

·   Experience with cloud computing

·   Experience with open Source technologies

·   Solid understanding of EA frameworks.

·   Experience with salesforce.

Network Architect/Network Support Engineer     02/2000 – 03/2011

Motorola, Sunrise FL

·   Systems management, infrastructure and architectural design and integration and related components and applications

·   Involve conceptualizing, planning, designing and implementing complete and integrated information technology solutions

·   IT systems management, infrastructure and architectural design and integration and related components and applications

·   AD/DNS, IIS, Clustering, ISA

·   Cloud-based service delivery

·   Server Clustering

·   SCCM 2007 deployment and infrastructure knowledge including troubleshooting, design, and implementation experience

·   11 Years of hands-on experience with CI frameworks (Jenkins/Hudson, Urban code, etc.)

·   11 Years of  Implementing enterprise CMDB tools and processes

·   11 Years of Experience in enterprise-level change management / knowledge management tools such as Remedy          

·   11 Years of Knowledge of both traditional SDLC and Agile/Scrum development methodologies

·   13 Years of Implementing CMR process improvement.

·   Deploying updates with Systems Management Server or System Center Configuration Manager

·   SCOM Management Pack tuning

·   (SCOM/MOM) Management technology to support a designated set of strategic Enterprise customers

·   Experience designing and implementing highly available infrastructure solutions using VMware Vsphere (ESX, VCenter, VMotion, HA, DRS, Converter).

·   PowerShell/Windows Management Instrumentation (WMI) Query Experience

·   Experience global Windows 7 Migration Upgrade

·   Automation/Management Tool Experience

·   Experience in Manufacturing Environments

·   Experience with User State Migration Tool (USMT) and Microsoft Desktop Optimization Package (MDOP

·   Re-designed Motorola's internal core network. Migrating from EIGRP and RIPv2 routing protocols to an OSPF multiple area network design. Interconnect through BGP to the other existing departments. Upgrade from 3550 series switches to Cisco 6509 Catalysts. Design, implementation and support of the core network (Spanning tree re-design, Trunking, VLAN setup). 3rd. level support for both LAN (Gigabit Ethernet) and WAN mainly consisting of Frame-Relay and ATM circuits. Fault finding by means of sniffers such as Ethereal and Packetyzer

·   Responsible for the overall network security including Intrusion Detection Systems (IDS), Cisco PIX Firewalls, Checkpoint FireWall-1 NG Firewalls, Cisco ACS Servers and VPNs. Building a Cisco based IDS solution from nothing.

·   Expert on Cisco Call Manager, Unity, and UCCX

·   Expert Setup and manage user accounts in Cisco Call Manager (CCM)

·   Responsible for network administration of Global Network

·   Support and maintained Cisco SSG, Cisco SESM, Cisco CNR, Cisco CAR, Cisco CSS Load Balancers and Cisco WLSE. Perl- and Shell script development in order to automate daily backup and monitoring tasks. Design, implementation and rollout of special event WLAN hotspot solutions. Implementation of roaming partners

·   Core network redesign to move from IOS Access Points to an LWAPP based centralized solution.

·   Taught in-house Cisco courses (CCIE, CCNP, IPv6, WLAN) to internal departments. Internal security audits and penetration tests on small to large networks in order to tighten up network security utilizing the following toolsets: IPScanner, Immunity Canvas, Metasploit, NMAP, Nessus, ISS Internet Scanner, GFILANGuard NSS, Cisco Security Scanner, N-Stealth Scanner, CyberCop Scanner, Ettercap, Etherape and Linux Live Security CDs such as "The Auditor", "PHLAK", "iWHAX", "BOSS", “BackTrack” and others

·   Experienced with VMware ESX server and vCenter experience, managing Virtual Machines, MS SQL 2008 Server, HP Blade Servers, WSUS server deployment and support.

·   Implemented and managed Disaster recovery and conducting mark test on schedule basics.

·   Implemented and managed Virtual Machine Infrastructure.

·   Implemented and monitored network activities and securities in server-end.

·   Configured and customized Microsoft server software (e.g. Window server, Clustering, performance tuning, Security, Active Directory, SQL Server , and IIS).

·   Clarion, Brocade Switches, Celera, VNX File, Neap

·   Red Hat Linux, CLI only, data migration, Celera performance, Celera health check

·   Net app, Recover point

·   Evaluated Brocades for performance issues

·   Set up Brocades for LDAP authentication

·   Created automated clip dump of capacity info for VMAX and DR DMX

·   Expertise in the hardware configuration of the VNX storage array and highly skilled

·   Cisco routers and switches, firewalls, Load Balancers, Proxies, VPN’s which include software installation, and administration, customization and network management

·   Supported VBLOCK 700 Series

·   Understand the Automation Workflow Requirement

·   Provide All Pre-requisites needed for Implementation

·   Automated System Integration Testing at the API level for various internal frameworks. Leverage MS tools like MS Visual Studio, TFS (Team Foundation Server) and MS Test

·   Experience of working in ITIL compliant processes & ticketing systems like Service Now, Remedy etc.

·   Represent HP as a technical expert for HP Automation Software Solutions

·   Experience with HP Software IT Operations portfolio: HP Server Automation, HP Operations Orchestration

·   Performed software upgrades patching, and compliance changes to the network systems (routers, switches, load balancers, proxies, firewall, DNS, etc

·   Documented and trained Level 1/Level 2 Team for respective components and VBlock"

·   Created and pushed firewall rules

·   VMware center Update Manager (VUM), and other utilities

·   Server Outside/inside communication Ports Release and block using Cisco firewall as per the application requirements.

·   Strong technical base in working with networking and firewalls

·   IIS Management, Configured web server for Creating websites and virtual directories for an IP based and domain based links.

·   Experience with Blue Coat Secure Proxy server

·   Proficient with Blue Coat Secure Proxy configurations.

·   Experience with vulnerability management and remediation processes

·   Strong working knowledge of Checkpoint and Cisco firewall platforms

·   Solid understanding of CICS, DB2, IMS, MQ, TCPIP, z/OS concepts

·   Windows and server maintenance concepts.

·   Knowledge of Epilog, JCL, RMF, WLM, SAS; Linux, vim; UDB,DB2, Oracle, Perl scripting

·   REXX, Tivoli Enterprise Portal Universal Agent Administration and configuration

·   Handled socket, IP and domain base issues, Monitoring and enhancing the performance of Network Bandwidth, Storing the Client’s oriented data on the NAS server.

·   Supervised a team of 20 members.

·   Understood OSI Model and various communication protocols including TCP/IP. Specialization Identified (Security, Network Management, IP Telephony, etc.)

·   Architected and designed detailed configurations for advanced Local Area Network Solutions

·   SAS 70 experience/exposure (implementing, auditing, or SOX compliance). SSL certificates (procuring, implementing, maintaining.

·   Load balancers, Routing, switching and Quos, RIP, OSPF, BGP or EIGRP, Network management tools, Concentrators, Application layer security.

·   Design and implement features within the Core Open Stack projects to drive Cisco’s Open Stack platform development effort.

·   Infrastructure, such as KVM, VMware, and Hyper V

·   Configured and tested network connectivity like firewalls, Cisco switches and Cisco routers.

·   Supported Network related issues in Cisco environment like WAN, LAN, Routers and protocols, WAN circuits and IP networks.

·   Managed VoIP server systems, VoIP infrastructure and providing escalation support to solve networking issues.

·   Working knowledge of networking protocols and components including TCP/IP, DNS, NFS.

·   Infrastructure/System Engineering experience with systems running Enterprise Linux and Microsoft platforms.

·   Expertise in infrastructure troubleshooting, deployment, operations and maintenance, and upgrades

·   Citrix, EMC, Neap, VMware, Cisco, Microsoft, Mediate, Business Continuity and Disaster Recovery

·   Strong experience with testing, packaging and certifying various Authentication Security product versions

·   Microsoft Office Applications and Visio Diagramming.

·   Experience with EMC shared storage solutions (Symmetrix, CLARiiON, Celerra).

·   Experience with protocol analyzers   Ethereal and Net Scout.

·   Familiarity with network diagnostic tools such as Wireshark

·   Experience of IP network technologies such as IP addressing (CIDR, VLSM), ARP, etc.

·   Collaborated with Application and Infrastructure teams and provide architectural and technical guidance as well as oversight for directory services, single sign-on, federation, and remote access.

·   Acted as lead technical advisor for enterprise-wide directory services' architecture, integration, compatibility and customization, including design development and system implementation

·   Led, created, managed, and participated in the analysis, planning, design, implementation, and maintenance of software and 3rd part products pertaining to information security environment

·   Led the integration of new software and hardware into current system and tests to ensure accuracy and efficiency.

·   Developed and oversaw testing strategies to ensure rigorous testing and validation of security systems prior to production.

·   Analyzed existing, new, and emerging technologies for appropriateness, fit, and functionality with our current and future technologies, and our IT Strategic Plan.

·   Interfaced with vendors to assess their competency and ongoing support abilities and integration into our security framework.

·   Engineered security roles for highly privileged account usage.

·   Formulated integrated network architectures based upon demand, capacity, emerging network services, trends, and technologies.

·   Supported configuration and deployment efforts of Cisco ASR9000.

·   Upgraded 3550 series switches to Cisco 6509 Catalysts.

·   Designed, implemented and supported core network (Spanning tree)

·   Supported both LAN (Gigabit Ethernet) and WAN mainly consisting of Frame-Relay and ATM circuits

·   Supported planning and deployment efforts of nationally scoped project including ordering equipment, developing MOP, providing field support, and documenting As-Built.

·   Responsible for the overall network security including Intrusion Detection Systems (IDS), Cisco PIX Firewalls, Checkpoint FireWall-1 NG Firewalls, Cisco ACS Servers and VPNs

·   Built a Cisco based IDS solution from nothing. 3rd. level support and performance management for the entire network.

·   Supported and maintained Cisco SSG, Cisco SESM, Cisco CNR, Cisco CAR, Cisco CSS Load Balancers and Cisco WLSE. Perl- and Shell script development in order to automate daily backup and monitoring tasks

·   Design, implementation and rollout of special event WLAN hotspot solutions.

·   Experience in Guidewire implementation

·   Good project experience in GOSU skill-set

·   Experience in Java technologies

·   Neap, EMC, HP, Celera, VNX, Clarion, Symmetric DMX/VMAX, Hitachi, Storage works, MSA, Brocade and Cisco MDS fiber switches, Logic/Emulex HBA

·   Experienced Storage and Systems Engineer with strong technical aptitude in infrastructure, systems management, SAN management and NAS management in a heterogeneous environment

·   Storage provisioning with Dart/Flare and Ontap

·   Linux and networked services, including CLI, daemon/init, interface IP and route, ACL and security, VPNS and web services, e.g. SSL, XML, JavaScript, PHP, SQL, FTP/SCP, etc.

·   IP Network and Systems Administration, including APs, VPN solutions, Switched Infrastructure, Cisco IOS/PIX and advanced IP routing & services Understanding of Motorola / Symbol wireless controllers). Similarly for L3 LAN/WAN.

·   Understood Motorola / Symbol wireless controllers), similarly for L3 LAN/WAN, knowledge of Cisco LWAPP / CAPWAP Access Points.

·   Capable of configuring Cisco ambassador, Cisco WCS, NCS configuration have strong knowledge in Cisco Wireless LAN Controllers and strong working knowledge of Network Protocols TCP/IP, RDP, TELNET, FTP, expert knowledge of system and network management tool concepts, DNS, DHCP, WINS, TCP/IP, SMTP, SNMP, PXE, NAT and network related technologies such as LAN/WAN topologies, transports and routing.

·   Knowledge of Juniper SA6500 in an SSL/VPN configuration

·   Knowledge of Juniper SA6500’s

·   Knowledge of Juniper 6500 and 6000

·   Experience creating SSL VPN's using Juniper SA6500's

·   8+ years’ experience with Juniper 6500 and 6000, VPN, integration and support of the RSA Token system, including trouble shooting, applying patches to the RSA system, and configuration and management.

·   Knowledge of Cisco ASA, in an SSL/VPN configuration

·   Knowledge of Juniper SA6500 in an SSL/VPN configuration

·   Expertise in Cisco Routers including the configuration and troubleshooting networks incorporating Cisco 800, 1600, 1700, 1800, 2500, 2600, 2800, 2900, 3600, 3700, 3800, 3900, ASR1000, 7200, 7300, 7500 and 8500 series.

·   Experience with Cisco 3390/3395 NAC appliance Manager, Cisco 3350/3355 NAC Server, 3350 NAC Profiler and Cisco 3310 NAC Guest Server.

·   Excellent knowledge of Cisco Secure ACS, TACACS+ and RADIUS.

·   Good working knowledge of Blade Network Technologies 8124 and Arista 7124-SX low latency switches.

·   Expertise in Cisco Routers including the configuration and troubleshooting networks incorporating Cisco 800, 1600, 1700, 1800, 2500, 2600, 2800, 2900, 3600, 3700, 3800, 3900, ASR1000, 7200, 7300, 7500 and 8500 series.

·   Expertise in the design of campus, WAN and Service Provider IP/MPLS networks, network implementation, network monitoring and network troubleshooting

·   Experience with Firewall Virtualization technology

·   Experience with Checkpoint Firewall-1 and Provider-1

·   Experience with Cisco Call Manager 7.1.x and above, Unity Connections, CER, and IPCCx

·   Advanced knowledge in design, installation and configuration of Juniper Netscreen Firewall ISG 1000/2000, SSG series and NSM Administration

·   Implementation and administration of Juniper WX/WXC devices for WAN Traffic acceleration

·   Advanced knowledge, design, installation, configuration, maintenance and administration of Checkpoint Firewall R55 up to R70 version, Secure Platform Installation, VPN.

·   Knowledge in planning, design, implementing and troubleshooting complex networks and advanced technologies.

·   Advanced knowledge in security risk analysis, attack mitigation and penetration tests

·   based on LPT methodology.

·   Advanced knowledge in Cisco Switches and Routers Configurations

·   Analyzed, designed, developed, tested, implemented, and maintained computer applications systems to meet functional objectives of the business. Will also participate in systems responsibilities and some application design and have overall management.

·   Account administration, Exchange server support, Patching servers, troubleshooting messaging issues, troubleshooting SMTP gateway problems. support devices connecting by active sync.

·   Microsoft Exchange 2010, Microsoft Lync, SMTP, Windows Active Directory.

·   Network Administration, Cisco Knowledge, Juniper Knowledge, Network Monitoring, Bandwidth Analysis, Multicast Video experience.

·   Dive Driver development (Wi-Fi CHIP), WLAN, Wife domain.

·   Firmware and Middleware software development (Connection manager & Security protocol.

·   Experience working with Website authentication technologies (RSA Clear trust, Tivoli, CA.

·   Test planned firewall changes in advance

·   Broad understanding of internetworking technology principles with demonstrated expertise in Network Firewall, Network Load balancers and DNS/DHCP

EDUCATION:

·   Bachelor Degree: Management Information System (Director List)  

·   Associate Degree: Computer Network Engineering.

Certifications/Training:

·   Window Desktop Administrator

·   MCSA

·   A+ Certified

·   CCNA Certification.

·   CCNP Certification.

·   CCIE Certification.

·   CSA) Certification

·   CCVP Certification

·   CCSE Certification

·   CCP-V    Citrix Certified Professional - Virtualization

·   CISSP Cerification

·   CISM Certification

·   ITIL  Ceritfication