Network Security Systems Engineer with over 15+ years of experience in information security and network design. Expert with a wide variety of security, engineering, networking, and application. Possess a Master’s degree in Information System, Cisco Certifications, VMware, and CISSP.
Skills
Azure Fundamentals
Routing Protocols BGP, EIGRP, OSPF, ISIS, and RIP
MicroSoft Certified System Admin
CCNA, CCNP, CCIE Written
VMWare VCP Certification
CISSP Certification
Security Fundamentals
Work History
02/2015 to Current
Senior Network Security Engineer [Manager] Microsoft Corporation – Fort Collins, CO,
Lead team of IT personnel to design, install, troubleshoot, and maintain network infrastructure.
Designed and implemented Network, Security, Wireless and VoIP infrastructure.
Configure, Manage and Monitor Palo Alto Firewall [PA-220 and PA-3260].
Performed migrations from Check Point firewalls to Palo Alto using PAN Migration Tool.
Performed migrations from SonicWALL firewalls to Palo Alto Firewall.
Implement advanced Palo Alto Firewall features like URL filtering, User-ID, App-ID, Content-ID on both inbound and outbound traffic.
Designed, documented, implemented the upgrade of Core infrastructure across 150+ locations to a Cisco core infrastructure which included Cisco 4000 series routers , Cisco 9200 and 3850 catalyst switches.
Designed, documented, and implemented two new Data Centers which included Core 9500x catalyst switches, Nexus 9k and 2K switches, Checkpoint Firewalls, Nutanix VMWare appliance, Cisco ISE, Cisco DNA, MPLS, Sangoma VoIP SBCs and PBX.
Designed, documented, and implemented SD-WAN deployment using CloudGenix which replaced our MPLS deployed at remote locations.
Designed, documented, and implemented NetScaler Load Balancer.
Configured AAA Server (RADIUS and TACACS+) for authentication and authorization of all remote VPN and local users.
Created security policies and procedures. Monitored security alerts and risk vulnerabilities.
Installed Cisco Umbrella for DNS Security.
Installed Email Security using Proofpoint.
Installed Endpoint Security using SentinelOne EDR.
Ran and analyzed security scans using QualSys.
Coordinated with third-party security information and event management (SIEM) providers to maintain protections and predict threats.
Installed network Wireless Infrastructure using Cisco Meraki.
Used Ekahau Wireless Heat Map Tool to generate heat maps for wireless deployment.
Work with various routing protocols such as BGP, OSPF, EIGRP and network protocols such as HSRP, VRRP, VSS, VCP, GLBP, NAT, ACL, Route-Maps, QoS, Multicast, etc.
Used SolarWinds and PRTG for networking monitoring solution.
Work with various vendors such as MPLS and ISP providers.
Provided detailed technical documentation, including network diagrams, process flow charts and procedural guidelines.
Conducted security assessments and made recommendations for disaster recovery, remote access, network appliances, servers and directory services security.
Managed, tracked and coordinated problem resolution and escalation processes.
Responsible for researching and evaluating new technologies. Developed IT strategy in concert with company’s core objectives.
Provide budget requirements and needs for yearly projects and upkeep of infrastructure.
11/2010 to 02/2015
Senior Network Systems EngineerColsa Corporation – Fort Benning, GA,
Work within a team of IT Engineers to troubleshoot and maintain network and system within the United States, Europe, Middle East, and Asia.
Configured, troubleshooted, and upgraded various Cisco appliances such as Cisco 2900 and 4000 ISR series routers, Cisco 2900, 3750x, 3650, and 3850 catalyst switches, Cisco 1001 ASR routers, Nexus 7k Chassis switches, and Cisco Wireless Controllers 4000 series.
Configured, troubleshooted, and upgraded Checkpoint Firewalls.
Configured, troubleshoot, and upgraded Cisco Firepower Firewalls.
Installed and part of SD-WAN deployment team for Fortinet SD-WAN migration.
Part of deployment team for Azure Cloud where we created a Data Center in Azure for offices in Asia.
Deployed Azure for VMWare migration using Azure Migration: Server Migration tool.
Configured and troubleshoot NetScaler Load Balancers.
Configured pac files and troubleshoot issues around Zscaler for web proxy.
Worked with Cisco Prime for network deployments and monitoring.
Worked with Cisco ISE for endpoint security, AAA, BYOD, and TACACS.
Endpoint security included Tanium, Carbon Black, ForeScout, and Cyberreason.
Worked with SolarWinds monitoring.
Worked with Sumologic and Splunk for log security audit.
Configured and deployed servers within VMWare environment on the Cisco UCS platform.
Upgraded ESXi platform from 5.5 to 6.0 and from 6.0 to 6.5.
Work with various routing protocols such as BGP, EIGRP, and OSPF.
Work with various network protocols such as MPLS, DMVPN, HSRP, VSS, VCP, VRRP, QoS, Route-Maps, SD-WAN, etc.
10/2007 to 11/2010
Network EngineerCarillion Health System – Salem, VA,
Worked within Network Operations to troubleshoot and maintain network infrastructure throughout NSLIJ Hospital System.
Configured, installed and troubleshoot Cisco ISR 2900 and 3900 series routers, Cisco 2900, 3750x, 4500, and 6500 catalyst switches, Cisco ASR 1000 series routers, and Cisco 4000 series wireless controllers.
Install and maintain Wireless AP and infrastructure.
Troubleshoot and maintain Metro E MPLS circuits.
Troubleshoot and maintain DMVPN locations primarily used for satellite offices.
Configured and installed Cisco Prime and SolarWinds for monitoring solution.
Worked with Security Team to remediate network vulnerabilities.
Worked with various routing protocols such as BGP, EIGRP, and OSPF.
Worked with various network protocols such as VSS, VCP, HSRP, VRRP, NTP, NAT, QoS, PBR, ACL, etc.
Test and evaluate new firmware and software
09/2000 to 10/2007
IT Network ManagerMTA New York City Transit Authority – City, STATE,
Lead a Team of Junior and Senior Engineers for the newly formed MTA Business Service Center (BSC) on all Network Infrastructure.
Installed and configured Avaya 4000 series routers and 4800 series switches.
Worked with routing protocols such as RIP, BGP, and OSPF.
Worked with network protocols such as VRRP, ACL, MPLS, DNS, DHCP, AD, STP, and FTP.
Installed McAfee IPS/IDS security gateways.
Installed, configured, and maintain Checkpoint Firewalls.
Installed, configured, and maintain Alteon SSL Load Balancers
Installed, configured and maintain NetScout appliance for packet capturing.
Installed, configured, and maintain Barracuda Web Proxy.
Work with Application Team on support of PeopleSoft ERP System on Oracle Platform.
Develop and implement policies and procedures for network and security infrastructure.
Implement and maintain security authentication with RSA Tokens and Checkpoint Endpoint blade.
Manage the financial aspect of IT Network Department. Responsible for the procurement, inventory, and disposition of hardware and software components. Projects consisted of budgeting, designing, installation, customizations, resource allocation, testing, and acceptance.
Education
Expected in
Master of Science: Information Systems University of Phoenix - Tempe, AZ GPA:
Expected in
Bachelor of Science: Telecommunications New York City Technical College (CUNY) - Brooklyn, NY, GPA:
Certifications
CISSP, CCNP Routing and Switching, CCNP Security, VCP, MS Azure Fundamentals
Any information uploaded, such as a resume, or input by the user is owned solely by the user, not LiveCareer. For further information, please visit our Terms of Use.