Kelvin L. Caraballo

 

Network Design w Network Engineering w Network Security

 

Qualifications Profile

 

Experienced, MBA Educated, PMP, CCNP, ITIL, CCNA, CCNA Security, CCDA, JNCIA and CEH certified Network Engineering Manager / SME; with a CCIE Security Written and over 14 years proved experience in directing all facets of IT operations. TS/SCI/CI cleared technical expert; with verifiable success in driving multimillion-dollar strategic large-scale IT programs. He earned recognition for consistently producing quality deliverables within constraints. Adept at streamlining operations, in alignment with business process improvements; as well as applying the most cost-effective and value-added solutions resulting in maximization of profit margins.

 

Areas of Expertise

 

¨        Project Methodologies: ù          IT/CE Project Initiation ù          IT/CE Project Planning ù          IT/CE Project Execution ù          IT/CE Project Control ù          IT/CE Project Closing ¨        Network Design ¨        24/7 Network Operations ¨        IT Service Improvement ¨        Data Privacy ¨        Network Routing and Switching

¨        ITIL V3 ¨        BMC Remedy ¨        Network Security Design ¨        Network Intrusion Prevention ¨        Cyber Security ¨        IT Service Operation ¨        Network LAN/WAN Engineering ¨        IT Service Strategy ¨        IT Service Design ¨        Cisco QOS ¨        Access Control

¨          Network Management Tools ¨          Performance Management ¨          Change Management ¨          Technology Integration ¨          Cryptography ¨          Cisco Firewalls ¨          Network Security Architecture ¨          Device Security ¨          Network Admission Control ¨          IP Routing & Services ¨          Perimeter Security

 

Professional Experience

 

¨        Responsible for all aspects of an organization's network systems including software and hardware.

¨        Leverage technical expertise in providing superior hardware and software configuration management, baseline change control, provisioning, incident response, maintenance, and network management support for several high-performance, controlled access networks; leading over 10 network engineers

¨        Perform comprehensive research pivotal in designing, configuring, deploying, all network equipment including: Brocade MLX 4, Brocade MLX 8, KGs, HAs, ASA 55XX, Servers, along with Cisco 2900, 3700, 3900, 4000, 5000, 6000 series switches

¨        Proficiently handle the review of audit and event logs as well as monitoring of hardware and software health statistics; performing and monitoring system backups and restores; installing security patches and critical updates; and maintaining standard operating procedures

¨        Conform to customer requests and management approvals in developing and approving network access policies and collaborated with vendors to generate customized solutions

¨        Closely work with engineer and vendor support organizations to remediate software and hardware issues as well as perform system-tuning activities and implement approved changes

¨        Render LAN/WAN Network Engineering and support, efficiently installing, maintaining, configuring, and troubleshooting network equipment including Cisco 2800, 3700, 3800, 7200, 7500 series routers

¨        Administer the implementation of network protocols (TCP/IP, UDP/IP, ICMP, BGP-4, NTP, SNMP, SSH), routing, IPSEC, VLANs, AAA, MPLS, QoS and enterprise network communications as well as the monitoring of profile and performance measurement using sFlow and IP SLA

Career Highlights:

ù          Adopted innovative ideas in designing and developing IT processes and procedures

ù          Partnered with federal agencies and departments in developing LAN/WAN solutions

ù          Led efforts in enhancing network monitoring and management tools to simplify network operations

ù          Played a lead role in implementing various layers of security and encryption across several NOCs

ù          Assured proper application of design and transition by effective management on IT business risk and compliance

 

¨        Delivered keen oversight to the configuration of networking equipment in support of the FBI next generation network project

¨        Provided direct supervision to the configuration of the network infrastructure and requirements for FBI sites across the United States along with Cisco routers ranging from 2811 routers to 7201 and 4509 Cat OS router and switch modules and 3600 and 3800 series routers with tunneling and sub interfaces

¨        Presented solutions focused on OSI layers 1-5. Designed, Engineered, and Secured on Cisco 831, 871, 1700, 1800, Cisco 2500, Cisco 2600, 2800 Cisco 3600, 3700, 3800, Cisco 7200, 7500 series routers along with Cisco 2924, 3500, 3600, 3700, 3900, 4000, 5000, 6000 series switches. Led the successful integration of Cisco Switch Service Modules, Cisco ASA 5500, Cisco PIX, and Cisco modules

¨        Exemplified technical skills in troubleshooting and deploying Access control servers, appliances, and industry standard servers as well as the content engine, content switch, and load balancers

¨        Identified the correct version of IOS that will run on network, implemented IOS version changes, and performed IOS diagnostics. Adapted accurate variables in developing all configuration files for overt and covert sites

¨        Designed all phases of Taclane KG-175, KG-175E and Taclane mini encryption units, including loading encryption keys as well as the routing protocols, port security, speed setting, and link redundancy

¨        Mentored and supported all fellow network engineers and trained the network engineers on more expeditious IT procedures

 

Career Highlights:

ù          Worked in partnership with Verizon in successfully migrating all circuits from old ATM network to new MPLS network on DS1 and DS3 circuits

ù          Guaranteed easy access of all end users to networks, including FBINET, JABS, SAMNET and VOIPNET by troubleshooting VLANS

ù          Made major contributions in the voguish design and implementation of total network systems solutions

ù          Accomplished comprehensive analysis of software, hardware, and network systems for processors and LAN/WAN communications

 

¨        Provided direct administration to network of numerous technicians in completing IT infrastructure projects across all 50 States, Canada, Puerto Rico, and Mexico

¨        Administered the proper functioning of all wiring infrastructure and that VLAN segmented Cisco 3750 and 2960 were properly working

¨        I ensured that phone extensions and T1 lines are functioning properly from the DEMARC

¨        Administered the completion of more than 200 project and service calls per month; supervising technicians across state lines and in other countries

¨        Provided continuous leadership and guidance to more than 20 technicians simultaneously; ensuring all projects are turned in on time and under allotted budget

 

¨        Applied best practices in running the resources of IT/CE departments, including more than 100 people and 2 project managers in reaching organizational goals in the areas of communications, information technology, and civil engineering

¨        Chosen over peers by the COO to take on IT/CE project management role based on solid project management success

¨        Managed and coordinated the execution of IT, communication, and CE projects; developed plan, work, schedule, and timeline for goals

¨        Reduced errors and network conflicts through development of accurate log of all IP addresses

¨        Executed technical expertise in supporting and managing services for more than 1200 customers along with all servers, including Microsoft Server, UNIX, Cisco and Linux

 

Career Highlights:

ù          Played a pivotal role in achieving organizational goals by running upwards of 20 large scale IT projects simultaneously ranging from PCs to network applications and infrastructure

ù          Employed network monitoring tools and traffic management applications and designed network topology to monitor routing and switching using Solar Winds and Wireshark

ù          Oversaw the entire phases of capacity planning, including allocating storage, providing hardware and software redundancy, and planning future expansion of network systems

 

Other Experience

 

 

Education

 

Master of Business Administration in Technology Management   2010

University of Phoenix   Phoenix, AZ

 

Associate of Applied Science in Communication Electronics CCAF   2007

Community College of the Air Force   Montgomery, AL

 

Bachelor of Science in Administration   2006

Excelsior College   Albany, NY

 

Bachelor of Science in Management   2006

University of Phoenix   Phoenix, AZ

 

Associate Electronics Technology   2005

University of Phoenix   Phoenix, AZ

 

Technical Skills

 

¨   Windows NT/ME/XP/Server/Vista/DOS/7/8 ¨   UNIX Shell Scripting, Mac OSX, Linux, Red Hat, Junos OS, Foundry OS, Cisco IOS ¨   VLAN Creation, VLAN Trunking, VPNs  ¨   HTML and Web-based Technologies ¨   Cisco LAN/WAN Engineering ¨   OSI Layer 1 through 7 Hardware & Software ¨   Cisco Unified Communications ¨   Telecommunications, OC 192, T1-T3 Installs ¨   End-user Device/Application Troubleshooting ¨   Cisco/Brocade/Juniper Routers & Switches ¨   SNMP Trap Forwarding ¨   Syslog and SDEE Forwarding ¨   GRE Tunnels, CBAC, ZBFW ¨   Cisco IOS Firewall, ASA 5500, PIX, FWSM ¨   Cisco, Brocade Juniper Security Protocols

¨    Circuit and Network Cutovers ¨    Safenet SMC I, Safenet SMC II ¨    Topology Design, Solar Winds & Visio ¨    Loopback Testing, TCP/IP ¨    Multi-layer Routing and Switching ¨    Database Integration and Management ¨    Multiplexing and De-multiplexing ¨    Hardware/Software Upgrade Planning ¨    Router/Switch Integration ¨    Fiber Optics, Coaxial Cable, Cat5, Cat6 ¨    Network Deployment Management ¨    MPLS, VPLS, BGP, EIGRP, OSPF ¨    Enterprise Management Tools ¨    IP Version 4 (IPV4) and IP Version 6 IPV6, IP Multicast Routing ¨    ACLs, VPNs, ASDM, SDM, IPS, IDS

¨     Server, DHCP, DNS, Active Dir. ¨     Arcsite, Splunk, EIQ Securevue ¨     IP Management and Protocols ¨     KG 340,175, 175e, 194, 84 ¨     CSU/ DSU Management, Putty ¨     ATM, LAN/WAN Management ¨     Switching and Routing Protocols ¨     Client Server Technologies ¨     IT Diagnostic and Troubleshooting ¨     IT Management and Consultation ¨     Network Security Architecture ¨     Network Security Engineering ¨     NetQOS, BMC Remedy, Cisco ACS ¨     Data Integrity/Disaster Recovery ¨     Brocade MLX Series Switches ¨     AAA, TACACS+, RADIUS

 

Certifications

 

¨   CCIE Security Written	2013	¨   Network+ A+	2005
¨   CISSP	Prog.	¨   Computer, Network, Switching and Cryptographic Systems Specialist	2005
¨   Project Management Professional (PMP)	2012
¨   Six Sigma	2012	¨   CCNP Security	2013
¨   CEH	2012	¨   CCIE Security LAB	Prog.
¨   Information Technology Infrastructure Library V3 (ITIL V3)	2010	¨   ITILV2	2005
¨   Security+ CE compliant	2010	¨   Project+	2005
¨   CCDA	2013	¨   JNCIA	2013
¨   CCNA	2013	¨   CCNA Security	2013