·     Routing & Switching

·     Security:  Firewall, VPN, IDS/IPS, & SIEM

·     Packet capture & analysis (7 layers)

·     A+, CCDP, CCNP, JNCIA-EX, JNCIS-ER, JNCIS-SEC, Linux+, MCDBA, MCNE, MCSE+I, Network+, PAN ACE, Project+, Security+
 

·     Monitoring

·     Troubleshooting methodology

·     Documentation/Diagramming

·     Project Management

·     Linux proficient

·     Military experience (USN, Submarines)

·     Secret security clearance

·    2012-Present  Principal Network Security Engineer, DirecTV/AT&T, Marina Del Rey, CA
Manage Firewalls (ASA 5585, 5580, 5555, 5550, 5525, 5520, 5510), VPN (S2S, RA), CRS, ASR, 4500, 6500, 7600, Nexus (7000, 5000, 2000), Linux, Aruba Wireless Controllers, F5 BIG-IP, Brocade ServerIron ADX 10000, Cisco Security Manager (CSM), Cisco Secure Access Control Server (ACS), SolarWinds Orion NPM, Lancope Stealthwatch, Infoblox IPAM, Firewall auditing (AlgoSec), Security Incident Event Manager (SIEM) QRadar, Gigamon, Netscout, NetMRI, NetBrain, Splunk. 
Evaluated, tested and deployed Solarwinds to monitor security infrastructure and some load balancers and router/switches.  Also evaluated, tested and deployed AlgoSec FF/AFA & QRadar for Auditing and monitoring security infrastructure.

·    2011-2012  Sr. Network Engineer, Los Angeles County – Department of Public Health, Commerce, CA
Deployed ASA 5510 firewalls to 20 sites, upgraded firewalls at 6 sites from ASA 5505 to ASA 5510, upgraded memory on (5) ASA 5510 & (4) ASA 5520 to run latest IOS image, Re-addressed IP subnets for (3) sites, completed wireless POC (redundant 5508 wireless controllers, (4) 3502 AP’s & Identity Services Engine (ISE) 1.1), setup SSO on 6509 w/SUP720 & SUP32, installed & upgraded SUP720's & SUP32's.
Supported 3000+ employees at 68 sites county wide using ASA 5505, 5510, 5520, 5555, Catalyst 6500 series, FWSM, 3560, 3750, 3560X, 3750X, PIX, 1841, 2651XM, 2821, 2921, 3745, 3845, 7206VXR, ACS 1112, Solarwinds Orion, Footprints, APC & Tripplite UPS'.

·    2010-2011  Sr. Network/Security Engineer, First American Title, Santa Ana, CA
Designed & successfully tested disaster recovery procedures
Completed PoC for firewall audit automation for OTS, FISMA, GLBA, SOX, PCI compliance with AlgoSec FA, Tufin SecureTrack, Secure Passage Firemon
Automated switch/router/firewall/LTM configuration management with RANCID
Implemented Splunk for syslog indexing, searching & troubleshooting
Implemented OpsView & NTop for network monitoring
Deployed PIX 525 firewall (v8.x), ASA 5520 firewall (v8.x), & VPN 3000 concentrator
Supported HA pairs & standalone PIX 525 firewalls (v6.3 & v8.x), ASA 5520 firewall (v8.x), 6509 core switches, 3560 switches, 3550 switches, 3750 switches, 3030 switches, 1800 series routers, 2600 series routers, HA pair of F5 BigIP LTM's, & VMWare vSphere 4.0, and multiple vendor extranet connections & applications (Wire transfer application, BankServ GFX, SunGard Addvantage, Federal Reserve Fedline Advantage, P&H/ACI, JPMC, & Bloomberg)

·     2007-2009  Network Architect, Yum! Brands, Inc. (A&W Restaurants, KFC, Long John Silver,  Pizza Hut, Taco Bell),  Irvine, CA
Upgraded 6500 company and franchisee stores with Cisco 800's using VPN over ADSLoPOTS, Cable, or 3G-EVDO cellular adding redundancy (VSAT failover), policy based firewall, IDS/IPS, multiple VLAN support, split tunnel, 802.11 b/g wireless with WPA-PSK encryption; Contributed with Taco Bell achieving and maintaining tier 1 PCI compliance; Documented store network; Trained IT department in Networking/Security
Served as network subject matter expert, project management, acted as liaison between Taco Bell IT teams and Yum! Brands IT teams, managed QA in testing of POS terminals/appliances/applications, DVR’s, and new technology, performed protocol capture/analysis of POS SSL transactions (Wireshark), monitored POS and web applications for latency or other connectivity issues (Spectrum, Solar Winds, Smokeping, NetQoS, NTop, Cacti, Splunk, Unicenter, eHealth, MRTG), designing/planning network topology/technology/change management, managing two broadband vendors and the NOC’s connected to 6500 company and franchise stores, generating reports and managing Bluecoat (Packeteer) PacketShaper 10000, managing F5 BIG-IP 3600 web accelerator, supporting HA pairs (active/active) of Cisco ASA 5580 firewalls, (2) Catalyst 6509 switch routers using EIGRP, (20) Aironet 1232AG, (12) 4506 switches, (3) 7206VXR routers, (16) node WAN running BGP over MPLS.

·    2004-2007  Network Engineer, Canon Business Solutions, Inc.,  Gardena, CA
Deployed Cisco IDS 4210 v5.0, Cisco Event Viewer v5.0, NetWare 6.5 servers (Dell Power Edge 2800), Silkworm 400E fiber switches, VMWare hosts (Dell Power Edge 2950) with 1.5 TB Fiber SAN (EMC² AX150), Cisco IDS/IPS 4210 v5.x, Cisco IEV and Linux Fedora Core 7 monitoring servers (MRTG, NW-MRTG, SmokePing, NTop, OpenNMS, Mediawiki, Splunk, WebHelpDesk, Apache, Tomcat, MySQL, PostgreSQL, NMap, Ethereal/Wireshark). 
Maintained corporate HQ, and eleven satellite offices (two site to site VPN over DSL) and WAN (DS3 PPP/ATM/IMA/MPLS/BGP/ISDN BRI), Cisco 6509 core switches, 3750, 3725, 3661, 2621XM, 871, Orionoco/Proxim WAPs (AP-4000, AP-2000, NetWare 6.5 servers (five VMWare), Windows 2000/2003 servers, Linux Fedora Core 7 servers, Dell OpenManage 5.x, HP Systems Insight Manager 4.x & 5.x, What’s Up Gold. 

·    2004  Network Engineer, BNFY, Los Angeles, CA
Implemented Cisco IDS-4215 v4.1, IDS Device Manager (IDM), VMS/IDS Management Console (IDSMC), IDS Event Viewer v4.1 (IEV), Threat Response 2.x and Vulnerability probe (Nessus, NMap, Ethereal, Snort & MRTG on Red Hat 9.0). 
Supported servers (Windows NT 4.0 Server, Windows 2000 Advanced Server, Windows 2003 Enterprise Edition), Exchange 5.5/2003, Citrix MetaFrame XP, switches (Catalyst 5500, 3500, 2900), routers (Cisco 2500, 2600, 7206VXR), firewall (Watch Guard Firebox 1000), IDS/IPS (Cisco 4215); Microsystems DocXchange document conversion from Word Perfect 6 & 10 to Word 2003; Interwoven iManage suite Desksite 8.x and Mailsite 8.x; Compulaw Vision docketing system running on SQL server 2000.

·    2003-2004  LAN Consultant, LA County – Office of the Assessor, Los Angeles, CA
Supported 50 HP/Compaq servers running Windows NT 4.0/2000/2003, Exchange 5.5, SMS 2.0/2003, 1000+ clients at main site, 50-200 clients at each of five satellite sites, workstations running Windows NT 4.0/2000/XP.  Applications supported include Outlook 98/2000/XP, Office 97/2000/XP, Symantec Anti-Virus Enterprise Suite 8.x/9.x, and custom applications.

·     2000-2003  Network Analyst, PMI – Delta Dental, Cerritos, CA
Deployed two remote offices including servers and network, implementing enterprise wide network monitoring & notification enterprise wide through Compaq Insight Manager, BMC Patrol and Cabletron (Aprisma) Spectrum.
Multiple project management (Windows 2000/ADS migration, cc:Mail to Exchange migration, Disaster Recovery, Backup/Recovery for all network devices, Satellite offices, Expanded Exchange with multiple sites and Exchange server rebuild, Websense implementation, HIPPA standards planning, Vendor testing and implementation, Asset Inventory) utilizing change control process and providing third level support for NetWare 4.11/4.2 servers (2 SFT III servers), Windows NT 4.0 & Windows 2000 Advanced servers running Exchange 5.5, Internet Information Server 4.0, Proxy Server 2.0, Citrix Meta Frame 1.8, SQL Server 7.0 & 2000, ArcServeIT 6.x, NetShield 4.x, GroupShield 4.x, NDS for NT 2.01, Cisco 500 Series PIX, Cisco 3600 series routers, Cisco 2600 series routers, Cabletron (Enterasys) Smart Switch Router 8600, Cabletron (Enterasys) Smart Switch 6000, and Shiva LanRover 4/E.

·     Experienced in Network Operating Systems (NetWare, Windows NT Server, Windows 2000 Advanced Server, Windows 2003 Enterprise Edition, Windows Server 2008, and Linux (Red Hat Enterprise Linux, Fedora Core, Debian, Ubuntu) installation, upgrading, patching, maintenance, troubleshooting, and administration.

·     Knowledgeable of design, implementation, administration of directory technologies:  Microsoft Advanced Directory Service (ADS), Novell Directory Services (NDS), Lightweight Directory Access Protocol (LDAP)

·     Experienced with Internetworking Operating System: Cisco IOS, PIX OS (Finesse), Adaptive Security Appliance 5500 series (ASA), JunOS, PanOS

·     Experienced with Intrusion Detection Systems/Intrusion Prevention Systems (IDS/IPS):  Cisco 4210, 4215, VMS/IDS Management Console (IDSMC), IDS Device Manager (IDM), IDS Event Manager v4.1 (IEV), Threat Response and Snort

·     Experienced with firewalls, routers, switches, hubs with various vendors including 3COM, Cisco, Enterasys (Cabletron), Juniper, Linksys, NetGear, Netopia, SonicWall

·     Wireless experience w/ 802.11A/B/G/N, WLAN Controllers and Lightweight AP’s.

·     Experienced in server processes such as Cisco ACS, VMWare, Apache, Tomcat, Microsoft SQL, MySQL, PostgreSQL, Microsoft Internet Information Server, Exchange, Citrix Metaframe, Mediawiki, WordPress, Novell NDS for NT, NDS Corporate, eDirectory

·     Experienced with Point of Sale (POS) applications, protocols and PCI compliance.

·     Experienced with network appliances: Packeteer (Bluecoat) Packetshaper 10000 for QoS prioritization and reporting, F5 BIG-IP 3600 web accelerator, Brocade ServerIron ADX 10000

·     Experienced in the following Routing protocols: BGP, EIGRP, OSPF, RIP, MPLS

·     Experienced in the following Layer 2 protocols: STP, CDP, DTP, VTP, PaGP, LACP, LLDP

·     Experienced in the following Application Protocols: TCP/IP, IPX/SPX, NetBEUI, NetBIOS, DHCP, HTTP, HTTPS, IPP, POP3, IMAP, SMTP, SFTP, FTP, FTPS, TFTP, Telnet, NTP, SMB, NCP, SNMP, RMON, TACACS+, RADIUS, and NetFlow.

·     Experienced with PKI, VPN, & encryption technology: PGP, GnuPG, L2TP, PPTP, SSL, TLS, SSH, IPSec, ISAKMP, 3DES, MD5, RSA, AES, RC2, RC4, SHA, IKE, WEP, WPA & WPA2.

·     Experienced with network monitoring and analyzing software and equipment: Fluke LAN Meter, HP One Touch, Dolch Sniffer, Network Associates Sniffer, What’s up Gold, MRTG, SmokePing, NTop, OpenNMS,  Snort, RANCID, NMap, Nessus, WireShark, Splunk, Aprisma Spectrum, SolarWinds Orion and NetQoS.

·     Experienced with LAN infrastructure including Fast Ethernet (10/100Base-T), Gigabit Ethernet (1000Base-T), Ten Gigabit Ethernet, Fiber, and FDDI.

·      Experienced with WAN infrastructure including Metro Ethernet, Frame Relay, ISDN PRI/BRI, ATM, SONET, DSL, VSAT, EVDO, DOCSIS, DS3 and T1.

·     A+ Certified

·     Network+ Certified

·     Project+ Certified

·     Linux+

·     Security+

·     Master Certified Novell Engineer (MCNE Client/Network Solutions:
IntraNetWare & Windows NT Integration)

·     Microsoft Certified Professional (MCP SQL Server 2000 Administration)

·     Microsoft Certified Professional (MCP Exchange 2000)

·     Microsoft Certified Professional (MCP Windows XP)

·     Microsoft Certified Professional (MCP Windows Server 2003)

·     Microsoft Certified Database Administrator (MCDBA)

·     Microsoft Certified Systems Engineer + Internet (MCSE+I)

·     Cisco Certified Design Associate (CCDA)

·     Cisco Certified Network Associate (CCNA)

·     Cisco Certified Design Professional (CCDP)

·     Cisco Certified Network Professional (CCNP)

·     Juniper Networks Certified Internet Associate – Enterprise Routing (JNCIA-ER)

·     Juniper Networks Certified Internet Associate – Enterprise Switching (JNCIA-EX)

·     Juniper Networks Certified Internet Specialist – Enterprise Routing (JNCIS-ER)

·     Juniper Networks Certified Internet Specialist – Security (JNCIS-SEC)

·     Palo Alto Networks Accredited Configuration Engineer (PAN ACE)

·     Associate Science in Computer Networking: Cisco with Honors; Coastline College; June 2012

·     Cisco CCNP-Security/CCSP track; Coastline College; FV, CA; CCSP pending; President’s List

·     Cisco CCIE track; Coastline College; Fountain Valley, CA; CCIE pending; President’s List

·     ISC² CISSP track; Coastline College; Fountain Valley, CA; CISSP pending; President’s List

·     Network Associates’ Sniffer Training; NAI; Los Angeles, CA

·     PanOS 4.0/Panorama training; Palo Alto Networks, Irvine, CA

·     Computer Networking Specialist/Microsoft Certificate; Coastline College; FV, CA

·     Computer Networking Specialist/Novell Certificate; Coastline College; Fountain Valley, CA

·     Computer Networking Specialist/Cisco Certificate; Coastline College; Fountain Valley, CA

·     Computer Science major; Golden West College; Huntington Beach, CA; BSCS Pending.