Terry F. Willis Sr. Network Engineer

 

 

 

Professional Experience

 

Boars Head ProvisionsAugust 2014 - Present

Senior Network Engineer

·  Design and implemented new network model for all 9 sites using OSPF and BGP

·  Migrated MPLS WAN vendor for all 9 sites

·  Deployed redundant WAN edge design

·  Deployed DMVPN solution for all 9 sites for dynamic failover

·  Deployed new DIA circuits at 9 sites

·  Deployed Gigamon taps into core infrastructure

·  Deployed QoS at MPLS edge

·  Deployed all new Riverbed Steelheads at all sites

·  Setup direct L2 circuits between 3 sites for replication and backup traffic using PBR

·  Wireless LAN Controllers in HA Pair using Cisco 5508s

·  Refreshed all LAN switching at 7 sites with Cisco switches

·  Created new IP and VLAN schemes for all 9 sites to streamline routing architecture

·  OTV Design using Cisco ASR1001 routers

·  Cisco Nexus 7010s core design using VPC with Access Layer Switches

·  Deployed Cisco Nexus 4500s in VSS

 

 

Flam-Tap Network Consulting, LLCJanuary 2014 - July 2014

Network Security Engineer / Consultant

Contract with RCN

·  PCI Documentation to meet PCI DSS standards

·  FW rule analysis for PCI audit

·  Diagram and data flows

·  PCI network architecture review

·  Emergency / On-Call Engineer

·  Upgrading IOS on various Cisco platforms

·  Deployed Sourcefire IDS virtual appliances

·  Deployed Tenable’s Logging Correlation Engine

·  Day to day break/fix of environment

 

RCNJuly 2012 - January 2014

Network Security Engineer

 

Operate and maintain network infrastructure to include routing, switching, load balancers, and firewalls.  Document current environment and provide clear change control standards.  Secure current environment to meet PCI DSS requirements. Day to day break/fix of environment. 

Highlights:

•   Establish site to site VPN tunnels with external RCN customers

•   Migration of FW services from Checkpoint to Cisco ASA to replace internal and external FWs. 

•   PCI compliance assessment, scoping, and remediation of current enterprise network environment. 

•   Deployment of SSL certificates onto A10 Load Balancers for SSL offloading of secure websites

•   Deployment of new HA Exchange Environment in two sites using Barracuda LBs

•   Developing Configuration Standards for Routers and Switches

•   Firewall Audits

 

Concept SolutionsAugust 2011 - June 2012

Senior Network Engineer

 

NAIMES-II contract

Maintain and operational support of NAIMES-II environment in Oklahoma as well as support of legacy network environment in Herndon, VA.  Consolidation efforts of legacy environment from three environments into one single environment.

 

 

GetWellNetworkMay 2011 – August 2011

Senior Network Engineer

 

Design and deploy networks to support GWN products in hospital environments across the the US.  Equipment used includes Cisco PIX and ASA (7.2 – 8.4.1), Juniper SSG, Checkpoint, 1800 series routers, Dell and Cisco Switches.  Environments require QoS, multicast, site to site VPNs, NATing, and AAA authentication.  Duties include Unix administration of Cacti, Nagios, DNSMasq (DNS & DHCP), and IPTables.  Design phases include working closely with customer resources to determine infrastructure needs which may include:  VRF, security mandates, QoS requirements, multicasting, site policies, and IP addressing schemes.

 

 

Concept SolutionsNov. 2010 – May 2011

Senior Network Engineer

 

NAIMES-II contract

Program required new team of network engineers to assess, document, maintain, and provide change management efforts of existing network infrastructure that consisted of over 180 network devices across two data centers and a third test and development environment.  Parallel migration efforts to move existing program functionalities into two data centers to establish an active / passive globally redundant site.  Established a new environment in Atlantic City to provide a test bed for program functionality in new FAA infrastructure design.  Designed new network environment in a third site (new FAA command center) for backend management support for NAIMES program.  Documented all new FW rule sets to be used by our program within the new FAA NESG design.  Worked with various programs within the FAA to help coordinate program functionality testing, setup of various required circuits, dmz environments, and backend management support.

 

 

GTSI                                                                                                  Sept 2008 – Sept. 2010

Professional Services

Delivery Engineer

 

USDA ARS Network Performance Assessment - Beltsville, MD

Lead network assessment to identify causes of performance issues within ARS WAN and applications.  Measured performance of WAN connectivity between 85 remote sites and 3 hub sites using interface statistics, Netflow, and IP SLA information.  Provided recommendations toward network performance and application availability to improve internal customer experience.

 

DOJ Network Assessment and Design Rosslyn, VA

Lead assessment and redesign effort for DOJ JABS network infrastructure.  Conducted interviews and working session with engineering staff to identify current requirements and gaps.  Assessment report and presentation to provide PMO with findings.  Design created based on assessment findings, best practices, and security mandates to reduce complexity, hardware sprawl, and EOL/EOS equipment. 

 

AphisVMWare Installation Fort Collins, CO

Installed and configured 3 ESX servers on an HP BL460 blade server.  Created VM’s to house vCenter Server to manage the cluster of ESX hosts. 

Hillsborough County Network Assessment, Tampa FL

Lead team for a full network discovery and assessment to determine current infrastructure design, security, documentation, and policies.  This included over 250+ remote sites including two core sites within the county.  Interviews with staff were conducted as well as use of network management tools such as NetformX and CiscoWorks to compile information.  A Gap analysis was provided as well as a technology roadmap.

 

DoE Headquarters – Network Refresh

Deployed and migrated DoE Headquater locations in Washington, DC and Germantown, MD to new Cisco switching gear (3750G).  Installed brand new redundant Cisco 6509 switches in the core/aggregate/server farm layers using a highly available and stable design.  Access layer were migrated to stacks of 3750 switches which included redundant uplinks for redundancy and secured using lastest NIST requirements and STIGs from DoE.

 

 

 

Veterans Affair – Philadelphia, PA

Installation and cutover of core network infrastructure which included 2 Core Cisco 6513 switches and 1 6509 Server Farm switch.  Deployed multiple 6509,6506, and 3750 switches to over 50 closets within this hospital.  Design built on Layer 3 (EIGRP) to the Access layer switches with redundant fiber uplinks to Distribution layer.

 

 

Concept Solutions/FAA                                                                    November 2005 – Sept 2008

Senior Network Engineer

Network Engineer supporting FAA’s MILOPS programs which include SAMS, MADE, SUA, and C3.  Responsible for managing current network infrastructure and maintaining security posture for FAA.

·          Designed and installed secure networked environment for C3 project.

·          Redesigned Milops infrastructure to reflect changing Application environment.

·          Responsible for daily operations of all network equipment

·          Re-established redundancy and upgraded core switch.

·          Redesign of network topology to route all traffic through network core.

·          SCAP audits 2006/2007/2008

·          Created standardized rack deployment design for datacenter.

·          SAMS FW migration from Firmnet to FTI network (27 Remote Sites)

·          Traffic analysis and management

·          Network Upgrades, Maintenance, and Documentation

·          DR Architecture planning

·          Assisted deployment of open source network monitoring workstation.

·          Site-to-Site VPN tunnels between PIX FW remote sites and Central Office

·          RA VPN on PIX FW for remote users

 

 

GTSI CORP,                                                     April 2000 – November 2005

Network Engineer

Duties included maintaining network infrastructure primarily based on Cisco solutions. 

Infrastructure solutions included:

·          Secure Communications: VPN Concentrator, RAS Appliance, Site-to-Site VPN Tunnels

·          6500, 4500, 2900, 3550, 3750 switches

·          PIX Firewalls

·          OpenNMS, MRTG, SolarWinds, and SNMP monitoring

·          Remote Sites in Hawaii, Germany, and Chattanooga

·          Wireless Bridge to warehouse

·          Airespace Wireless Deployment to 4 sites

 

 

 

 

 

 

 

Education and Training

BS - Information Systems – Strayer University (2008)

 

Cisco Unified Communications Support Specialist (2009)

VMWare VCP 4 Course (2010)

Cisco Data Center Networking Implementation I & II (2010)

Cisco Storage Networking (2010)

EIQ SecureVue (2009)

Cisco PIX Firewall Management (2005)

Microsoft Exchange 2000 Management (2004)

NetApp OnTap (2004)

 

 

Certifications

A+ - Comptia (2000)

MCSE – Microsoft NT 4.0 (2000)

SCSA – Sun Microsystems (2001)

CCNA R&S – Cisco (2002)

CCNA Security - Cisco (2013)

CCNP R&S – Cisco (2007)

CCDA – Cisco (2008)

CCDP – Cisco (2008)

Cisco Advanced Data Center Networking Infrastructure Support Specialist – Cisco (2010)

VCP 4 – VMWare (2010)

DCUCI – Cisco (2010)

EIQ – SecureVue (2008)

 

 

Clearance

DoD – Top Secret (Not Active)

Contact Information

 

Phone: 703-864-8871

Email: turkeyqp@msn.com