THOMAS FRASER

 frasedude@gmail.com

Phone:49-1525-3427950

 

 

 

SENIOR NETWORK ENGINEER

 

Intelligence Systems ~ Coalition Networks ~ Cisco ~ Juniper

 

Network Engineer with Top Secret Security Clearance

 

PROFESSIONAL EXPERIENCE

 

 

LOCKHEED MARTIN                                                      2015- Present

Staff Network Monitoring Analyst

Network Operations Watch Officer working at the USAFRICOM Theater Network Operations (NetOps) Control Center (TNCC) and DISA Enterprise Operations Center (EOC) located in Stuttgart, Germany. Serves as a Watch Officer and Information Security Advisor to maintain C4 situational awareness in support of command and control (C2), accomplish Command-wide long-haul communications infrastructure management, manage HQ and theater Authorized Service Interruptions (ASI) programs, coordinate response to emergent cyber events, and mitigate operational impacts resulting from significant theater and enterprise communication and service outages. This position actively participates in communication systems analysis and cross-organization coordination. It requires expertise supporting continuous communications service to all enduring, tactical, and afloat locations in the COCOM area of operations. This position also provides technical oversight for Information Security services, customer support initiatives, and tracking of DoD issued Information Assurance Vulnerability Alerts (IAVA). This position coordinates responses to emergent cyber events, and mitigates the operational impacts resulting from significant theater and enterprise communication and service outages. This position provides comprehensive incident, problem, and change management reports/requests to improve efficiency and maximize network availability. It also requires NetOps expertise to assist in managing multiple networks across the COCOM area of operations. Employee prepares daily TNCC network operational status briefs with relevant operational impacts. Watch Officer is responsible for coordinating reports and communication issues with USAFRICOM Headquarters and Service Components regarding overall COCOM network system operations, policy, and planning issues. Works closely with Theater and Global Information Assurance and Network Defense personnel to facilitate a coordinated Theater NetOps and Net  Defense posture. Watch Officer prepares and provides reports, oral and written, pertaining to C4 deas, statuses, and impacts to individuals or groups effectively taking into account the audience and technical nature of the information. Position includes continuous rotational shift work in a 24 hours-per-day, 7 days-per-week JCFCwatch.

 

 

 

 

 

 

LOCKHEED MARTIN                                                         2014 – 2015

Staff Network Engineer

Develops and implements strategy for generating multiple alternate designs at each development level, and trade-off results which trigger iteration of the design process. Designs and implements highly complex networks that typically link numerous computing platforms, Responsible for the implementation of engineering processes that provide for timely and appropriate integration of all engineering disciplines to ensure a network system design that meets all requirements. Identifies problems and risk areas and mitigates their impact. Performs technical design reviews. Evaluation of performance monitoring software, equipment, telecommunications, integration and modeling of large computer based systems. Configuring and implementing data communications processors, routers, Switches, voice/video gateways, firewalls, phones, and related equipment. Design of Standard network suites, hardware configurations, and standard cable schemes to include cable engineering.

Projects: Currently designing, integrating, installing, and level 3 support of network for U.S. DOD GPS satellite systems.  Currently undertaking Systems design, installation, integration, testing of new networks for USAF DOD operating systems, and network topologies across widely dispersed geographical areas. GPS operational environment. Equipment: Cisco ucme, Cisco 6807-XLs, Cisco ASR1004s, Cisco 5525X-ASAs, Cisco 3750Xs, Cisco ISR-2901s, Raytheon RT Logic Guards(proxy firewalls), Cisco ISE, and more. Highly technical, redundant configuration for 0 downtime of operational networks. PKI non-repudiation, vpn, ip-sec, opsf, gre, sip, routing, management of Linux, Solaris operating systems workstations. Performed IA duties, STIGs all networking devices, system security design, system analysis and auditing of systems.

 

 

TELEDYNE BROWN ENGINEERING2013- 2014

Network Design Engineer

Assigned to MDA at Schriever AFB as an enterprise design engineer.  In this position I am directed to research, design, test, implement and transition new networks, enclaves and systems into MDA's infrastructure.  Projects worked on: Allow DISA HBSS servers to push updates to clients at remote tail sites.  Edit ACLs to allow for HBSS access, add network/routing statements for BGP to advertise to DISA BGP routers and coordinate the implementation with DISA.

Cisco 6509s to Nexus 7K upgrade/migration:   My function was to logically cutover the 6500 configurations to Nexus 7K format.  Install the systems and complete the hot cutover of the distribution network switches. Diamond II security system: integrating, migrating and move logically workstations in the network, modifying acls, while adjusting policies on the firewalls to keep connectivity to all remote sites. Coordinated with several departments such as, Boundary protection, cable plant, O&M networks, and sustainment in order to put this project in place and ready for installation.   Modified current switch configuration to allow access for a new vlan/subnet and configure switch ports to accommodate the Diamond II servers.    Created acls to allow and block access as needed by the requirements and functionality of the servers and systems. Riverbed SSL optimization:  Had to configure riverbed wan accelerators for ssl to encrypt with certificates the https traffic to the sharePoint portal.  Setup for failover between sites.  Installed root and intermediate certificates onto all riverbed appliances server-side, and domain servers.  Converted some certificates for import into the riverbeds and pre tested all in a lav environment.

 

 

GENERAL DYNAMICS                                                                                                          2012-2013

Satellite Network Engineer

Assigned to A&E department to support network engineer projects for NSHQ-NATO/SHAPE. 

Engineered public to private ip space transition for mesh deployed satellite network in support of NATO deployed SOF units.  Perform maintenance actions on satellite systems NMSS lite/medium/heavy deployable kits.  Engineered into the satellite light kits the M5 SCS100.  Completed an engineering project on Motorola microwave link from SHAPE to Chievres AB for backup connectivity.  Reconfigured medium kits with packstar and secnet 54 (HAIPE) for ipsec vpn to border router for remote site connectivity for unclassified and NATO BICES networks.  Currently working on satellite connectivity via a new hub (Skywire Satellite hub) at Cheivres AB.  Setting up a new dmvpn hub phase 3 with new ip subnet for remote site connectivity.  Currently working on another new satellite hub, (IDIRECT hub), (Comtech ViperSat hub) capable of SCPC bandwidth management for high volume video/ip phone traffic across multiple remote sites.  Train and work with NATO members to perform operations and maintenance actions on all satellite equipment.  Troubleshoot and resolve network satellite issues down range.

Manage and install Cisco, DMVPN remote networks, ip-sec, gre tunnels, eigrp, ospf,vtc,dvtc, and cisco video phones.

 

 

RAYTHEON2010-2012

Senior Network Engineer (Lead)

Manage US Army USAG Hohenfels JMRC site network systems including 15 remote sites. 

Engineered satellite communications network from main-site to a remote sight.  Entailed configuring 2 Cisco asa5520s,2 Cisco IPS-SSM-10s, 6 TCP accelerators, 2 TCP shapers, E1s, 2 3800 Cisco routers, 2 Comtech Satellite modems for a total design/functionality concept. The satellite communication network was designed for contingency and tactical operations.

Engineered and configured the IA design for a remote site that entailed 33 Cisco switches 2 Cisco routers, and 5 Cisco ASA 5520 firewalls/ips'. System certified for 3 year ATO pr U.S. Government.

Installed and configured 2 Cisco ACS Servers version 5.2 for AAA of network accountability.

Manage day to day operations of site networks to include network management, maintenance, troubleshooting, and integrating new Cisco/Juniper switches/routers/firewalls into the operational network.

Manage Network/Security Operations Center of over 80 pieces of network gear.

Maintained, troubleshot, and installed network systems for Radiant Mercury. 

Maintained network management systems based on Linux and Unix.

 

 

 

GENERAL DYNAMICS          2009-2010

Network Engineer

Manage HQ USAREUR G2 JWICS-SIPR-NIPR-BICES-NATO-SECRET networks.  Manage projects for upgrading and enhancing customer networks.  Install, operate, and maintain several types of software and hardware such as; whats up gold, solar winds, CiscoWorks, acls, taclanes, Tandberg vtc suites,  fastlanes, Cisco ios, switches, routers, and communication devices.   Write and update SOP's, build documents, design documents, system diagrams, change requests, incident, after action, and status reports.  Work with external vendors and government agencies such as Telecom, Cisco, and DIA to update firewall, DNS and routing policies and configurations on systems.  Support initiatives of the Manager of Configuration Manager, and Information Security Officer.  Perform capacity planning and optimization for systems and services.   Provide analysis and support for the acquisition of hardware, software, and services.  Provide guidance, technical direction and assistance to help-desk and government staff.  Support special tasks as directed by the customer.  Perform direct mission support by integrating various functions of network and telecommunications equipment into functional systems applying NSA security and networking standards. Document equipment layout, taking into account NSA security, configuration management, and deployment governance processes. Understand, integrate, and perform end-to-end troubleshooting of core IT network infrastructure equipment which includes but is not limited to Cisco routers, switches and firewalls. Understand emerging telecommunications trends and technologies and implement new technologies as appropriate.

 

 

 

RAYTHEON2007-2009

Network Engineer

Manage Hohenfels JMRC site network systems.   Duties were to manage SOC/NOC, network projects, network operations, network installs, network troubleshooting, network maintenance, and/or otherwise stated anything that has to do with network data/video systems.  Systems managed include over 15 Juniper firewalls and over  30  Cisco switches/routers.  Partner directly with clients to analyze, recommend, and support network solution projects.  Ensure the network is operational 100% of the time, during exercise rotations.  Use network management tools to enhance and proactively manage the network.  Detect network intrusions by maintaining and configuring Symantec IDS’s, Juniper IDSs, syslogs servers, and reviewing firewall activity.  Configure, maintain, and troubleshoot Cisco IOS switches/routers.   Manage ACLs, CisoWorks, VPNs, Solar Winds,  Syslog servers, Ntp servers, SNMP configuration and troubleshooting.  Achieve project milestones by collaborating with engineering groups, system engineers, system users, and support staff.  As a secondary duty perform as help desk for  administration of apple servers and apple desktop computers such as; G5s, mac pros, and others.

 

 

LOCKHEED MARTIN2004-2007

Senior Network Engineer/Information Assurance Engineer

Oversee comprehensive network systems including operation, installation, planning, maintenance and upgrades; systems include over 10 Cyber guard Firewalls, Concord Nethealth, HPOV-NNM 7.5, Cisco Works, Agilent Probes, and Tacacs-ACS servers in switched networked environment containing over 200 pieces of Cisco devices.  Partner directly with clients to analyze, recommend, and support network solution projects.  Ensure the network is functioning properly by using network management tools.  Detect network intrusions by managing and configuring Cisco IDS’s and Nam blades.  Configure, maintain, and troubleshoot Cisco IOS and COS switches.  Manage all Cisco devices with Cisco-Works.  Maintain and analyze all security aspects of the network.  Manage ACLs, TFTP Configuration servers, Syslog Servers, and SNMP configuration and troubleshooting. 

Achieve project milestones by collaborating with engineering groups, system engineers, system users, and support staff.  Support clients by testing shell command authorization sets for multiple levels of access and varied Cisco management equipment network device groups.  Investigate security issues using tools such as: IDS, syslogs, SNMP  traps, firewall activity logs, and port scans.  Investigate ip spoofing, and coordinate with ISSO personal on security issues.  Support system development and engineering concepts in support of security initiatives to configure, test, and certify information systems for the USAF.

 

 

SCIENCE APPLICATIONS INTERNATIONAL CORPORATION2003-2004

Senior Network/Systems Engineer

Provide HQ USAFE directorate with network and system engineering support. Maintain and support networked communication servers translating data from rs232 to tcp/ip, tadil-j/k, TDIMF, TDDS.   Perform project-engineering tasks as required by the directorate. Perform tasks such as project management, systems analysis, and system integration.  Engineer, plan, implement, and test information technology systems relating to USAFE mission. Perform network upgrades and improvements as needed. Install and support all networked applications. Installed, deployed and tested tactical inmarsat phone systems.  Build Windows 2000-Professional, and Sun Solaris servers to support the mission.  Provide systems analyst/engineering support for Gale-Lite servers and TBMCS servers to USAFE units throughout the European theater.

 

 

LOCKHEED MARTIN2001-2003

Senior Electronic Technician

Implement, install, test, maintain and upgrade network systems and infrastructure.  Perform site surveys on future network system installations.  Coordinate and configure all network/computer systems involved with an installation.  Troubleshoot and repair network/computer systems and infrastructure.  Terminate fiber runs with crimp on and hot melt connectors.  Provide complete and comprehensive network support.

 

 

MANTECH ADVANCED SYSTEMS2000-2001

Network Specialist

Provide support and training to C2NOC personnel on existing networks, atm, fddi, Ethernet, network management systems and network troubleshooting techniques.  Network management software used includes: Hp Open view, Cisco-Works, Fore-view and Network General Sniffers. Maintain and troubleshoot vast networks of 1800+ users. Augment network personnel by testing and analyzing network issues.  Perform hardware and software maintenance on a variety of computer systems such as Sun, Dell, Compaq and HP.

 

 

SCIENTIFIC ATLANTA1998-2000

Associate Field Engineer

Oversaw all aspects of Digital Broadband Delivery Systems (DBDS) including onsite engineering and installation support for digital video systems and troubleshooting network anomalies.  Repaired RF network connectivity issues between head end and remote distribution facilities.  Installed and configured digital satellite receivers, Cisco, Fore, and Xylan switched digital networks.  Performed DBDS system installations and upgrades for many major cable companies around the United States.

 

 

FLORIDA AIR NATIONAL GUARD1994-1998

Data/Network Systems Engineer

Supervised 5 technicians in support of tactical digital networks while in garrison and deployed in support of Special Operations units.  Performed configurations and maintenance on all aspects of networked computer systems including local and trunk encryptions units.  Performed tech control functions to troubleshoot wan paths from end to end.  Provide leadership and direction while programming, installing, maintaining, and upgrading tactical secure data networks.  Engineer, test, and evaluate tactical secure data networks.  Develop, plan, implement, and maintain Cisco Routers/Windows-NT Servers/Cryptographic equipment and all (SIPR/NIPR) data communication equipment to ensure a secure tactical environment (while deployed) for Special Operations Command (JOSTFs).  

 

 

UNITED STATES AIR FORCE1983-1992

Data Communications Specialist

Performed duty at many locations around the world including a four year assignment with NATO.  Tasked with installing, testing, maintaining, and troubleshooting SIPR/NIPR Data networks for the USAF and NATO.  Duties ranged from; cryptographic equipment maintenance, printed circuit board troubleshooting and repair, mainframe support including repair of disc platter drives, and the troubleshooting of secure audio/video/data networks. 

 

Education

UNIVERSITY OF PHOENIX

Master of Science in Computer Information Systems, 10 credits

COMMUNITY COLLEGE OF THE AIR FORCE

Associate in Arts-Communication Applications Technology, (Intelligence), 2001

COMMUNITY COLLEGE OF THE AIR FORCE

Associate in Arts-Electronic Systems Technology, 1995

UNIVERSITY OF SOUTH FLORIDA

Bachelor of Arts in Criminology, 1994

HILLSBOROUGH COMMUNITY COLLEGE

Associate in Arts-Criminology, 1993

 

Certifications

CCNP

CCDP

CCDA

CNS 4011

CCNA Security

ITIL v3 OSA

ITIL v3 Foundation

CCNA

CASP

Network +

Security +

Top Secret Security Clearance, SSBI, April 2016

 

Hardware/Software

 

Cisco- series 2950, 2960, 3560e, 3750x, 4500e, 6500e, 6800, 7000/9000 nexus, msfcs, asa5500x series firewalls, Cisco ISE, ssm-10, ips/ids', 3800,2800,1800 series routers, unity, cisco express call manager, voip phones, nam blades, ids, ips, agilent probes, hp probes, sniffers, packet analyzers, firewalls,  secnet-54, kg-250, kg-175d, fastlane, squid, cyberguard, sonicwall, juniper isg1000, netscreen 500, 204, juniper idp-200, symantec,  siprnet, niprnet, dsl, wlan, voip, inmarsat tactical data networks,  fastlane, taclane, kg94, kg194, kg84, kiv7, kiv19,  retina, nessus, nmap, nes, trs, tdp, jwics, exceed, hpov 5.7,  gccs-cop, netscape, gale-lite, raindrop, cisco-iptv,  cisco works-lms, wlan, voip, concord nethealth, agilent probe software (ntc), falcon-view, tbmcs,  tadil/j/k, linux-red hat-enterprise server, acs/tacas servers, solaris-8 & previous, apple-osx, linux, asterisk pbx,  sip, idirect modems, skywire modems, norsat managment terminals, idirect evolution x3 satellite router.