Summary:

• Firewall/Security/Network Engineer with 10+ years of experience in Secure platform with Enterprise Network Infrastructure Design and Deployment.
• 8 yrs into Networks and Security administration including routers, switches, firewalls and VPNs
• Extensive hands-on experience with complex routed LAN and WAN networks, Cisco routers, switches and PIX firewall deployment, IP Telephony design, in-depth knowledge of TCP/IP architecture, TCP/IP protocol suites and dynamic routing protocols including RIP, EIGRP, OSPF and BGP.
• Design and implement security policies using ACL, PIX firewall (515, 520) and security gateway Juniper ISG2000
• Configuration of Cisco routers (2600/3600/7500 series) and switches (1900/4000 series).
• Designed strategy for Checkpoint migration to Cisco PIX Firewalls.
• Implemented DMZ and firewall solutions for merger. network cleanup and risk mitigation. Responsible for the configuration and monitoring of PIX, ASA and Netscreen firewalls.
• Configure and isolate faults in Cisco Wireless LAN. Assessment of WAN Encryption options. Managed the WAN staff and was responsible for the day to day operations of the 3 data centers.
• Monitored (SNMP, Sniffer ) and enhanced network traffic and server performance and telecommunication services.
• Experience with BACC, BTS, Packet Cable Solutions and Cisco CNR. Responsible for the infrastructure upgrade of the Pennsylvania State Legislature data center infrastructure.
• Change management, design and extensive exposure to ISO qualification requirements and implementation of those requirements for an international WAN.
• ATM core experience with GX550 and 500 in addition to Naviscore, Stinger, Packetstar and Pathstar Voice Over IP solutions. This includes knowledge of QOS and MPLS.
• Administer and implement Y2K compliance changes for LAN/WAN routers and peripherals with over 500 sites including IOS upgrades, responsible for the configuration and troubleshooting for global frame relay backup, ISDN and dial backup.

Education:

• B.A. Business Administration
• Classes: Managing Cisco Network Security, Cisco IP Telephony, Cisco Wireless LAN, Cisco Content Switching, Building an Intelligent Trading Floor, ICRC, Cisco Internetwork Troubleshooting, Building Cisco Remote Area Networks, Lucent ATM Core with Naviscore, 5ESS, Stinger, Lucent Pathstar, PacketCable, BACC, BTS10200, CNR. (Cisco Network Registrar). On CCSP Track. Taken and passed SNAF 642-524.

Skills:

• Network Devices: Cisco routers and VPN Concentrators, Firewalls (PIX, Netscreen, and Checkpoint), switches (Cisco, Cabletron and Foundry), Call Manager, Unity, Wireless APs, Spirent and Agilent test equipments, Cisco ACE, Link Proof Load Balancer, Juniper ISG 2000 Juniper Firewall, Cisco CSM, and Aventail SSL.
• Network Technologies: IP Telephony design, Security Policy Design & Assessment, Firewall and VPN architecture, VLAN configuration, MGCP, H.323, ACL, VOIP, SIP, RIP/OSPF, IPSec and NAT/PAT design, GRE over IPSec, SSL, QoS, IDS/IPS solution, Juniper NSM (Netscreen Security Manager)
Network protocols: TCP/IP, IPv6, IPX/SPX, OSPF, OSPFv3, IGRP, EIGRP, RIPv1v2, RIPng, MPBGP, iBGP, eBGP, IS-IS, TDM, SMDS, VoIP, IBM/SNA, PPP, HDLC, SDLC, IGMP, PIM, HSRP, VRRP, QoS, WCCP, SIP, Wireless 802.11, RTP, H.323, MGCP, MPLS VPNs
• MS Office Suite: Microsoft Outlook, Excel, Word, PowerPoint, Project, VISIO

Professional Experience:

Confidential, (Contract Engineering) Aug. 2001 to Present
Sr. Network Engineer Contractor/ Director-Team Lead

• Primary clients: Millipore Corporation, SkyRiver Communications ,Cossette Post Advertising , Elan Pharmaceuticals, Xtelesis Corp., Hampton Galleries, Capital One Bank and Capital One Mortgage, Fimat Global a division of Société Générale Group/Trading Firm.
• Firewall management using Provider-1 to manage the internal farm of CheckPoint Firewalls \Management of PIX/ASA and FWSM 3.X using both Cisco Adaptive Security Device Manager (ASDM), Cisco Security Manager (CSM) and CLI
• ProvidedCisco PIXfirewall remote monitoring, alarm troubleshooting, and diagnosis of security logs for network remediation and response of network threats and attacks.
• Currently consulting with Société Générale, The Pediatric Group-PC. Rebuilding VPN connectivity for BUP, implementing Firewall Redundancy, Lab Work for GET VPN, and troubleshooting Multicast PIM issues.
• Consulted and implemented Cisco Routing/ Switching , TCP/IP.
• Design and implement security policies using ACL, PIX firewall (515, 520) and security gateway Juniper ISG2000 and provide intranet VPN solution using Cisco 2621 and IPSec Tunneling.
• Implementation of Juniper series firewall and NetScreen Security Manager, which centralized management and monitoring of all corporate Juniper firewall devices.
• Configuration of Cisco routers (2600/3600/7500 series) and switches (1900/4000 series).
• Escalation point for Firewall, Router , Switch and Load Balancing issues. This includes advanced troubleshooting of connectivity problems, VPN solutions between Checkpoint 4.1 & NGX, Cisco PIX , and NetScreen.
• Handled the administration, maintenance, configuration and design of Juniper ISG 2000 Juniper firewalls
• Design and implement security policies using ACL, PIX firewall (515, 520) and provide intranet VPN solution.
• Designed strategy for Checkpoint migration to Cisco PIX Firewalls.

• Responsible for the implementation, execution and testing of a redundancy for Fimat's WAN.
• Implemented Office VPN's
• Design, monitor and modify 8 PIX firewalls. Architecture Consultation. Monitor Firewalls and implement changes within change control guidelines.

(EDRE contract) Confidential 3 month Contract

(EDRE contract) Confidential October 2006 to July 2008

• Network integration for Capital One Finance/Bank/Mortgage. Key position as a WAN Manager and engineer in the integration of Capital One Finance with Northfork Bank, Hibernia Bank and GPM.
• Implementation of the overall security system including access-list and NAT design for Cisco PIX firewall 535 series.
• Implemented DMZ and firewall solutions for merger. network cleanup and risk mitigation. Responsible for the configuration and monitoring of PIX, ASA and Netscreen firewalls.
• Designed Cisco Works for COM, designed and implemented BGP changes to support redundancy, redesign traffic flows for Oracle B2B site. Redesigned and implemented changes for the learning center.
• Configure and isolate faults in Cisco Wireless LAN. Assessment of WAN Encryption options. Managed the WAN staff and was responsible for the day to day operations of the 3 data centers.
• Monitored (SNMP, Sniffer ) and enhanced network traffic and server performance and telecommunication services.

(EDRE contract) Confidential (Finance) Contract Ended: November 17, 2006

• Responsible for the Infrastructure upgrade and failover, a nationwide financial institution encompassing 15 offices.
• Responsible for the documentation design, implementation, execution and testing of a redundancy for the current WAN.
• Created a fully meshed VPN network for FR failover and create GRE tunnels to enable routing protocols over Cisco 3000 Concentrators.
• Design, monitor and modify 11 PIX firewalls. Planning and consultation for future MPLS network. Set up of Syslog servers for PIX and monitor for security breaches.

(EDRE contract) Confidential, Contract Completed March 2006

• Provide high speed Data/Voice/Business Continuity solutions for service providers and cable companies. Voice over IP, in-home media distribution, home networking, video on demand and streaming video over IP.
• Experience with BACC, BTS, Packet Cable Solutions and Cisco CNR. Responsible for the infrastructure upgrade of the Pennsylvania State Legislature data center infrastructure.
• Consult Versatile on disaster recovery and compliance, documentation design, implementation, execution and testing. Participated in the creation and documentation of the Cisco CNR 6.2 class.

Confidential 1 year contract and Confidential 2 year contract

• Perform WAN/LAN validations. Instruct in FDA validation process, including TA/IQ and OQ documentation design, implementation, execution and testing of Millipore and ELAN's wide area networks, which contain 2600, 3000 and 4000 series routers, 6000 series switches and a variety of servers, including TACACS, HP and Compaq HW supporting SAP, MS and more.
• Change management, design and extensive exposure to ISO qualification requirements and implementation of those requirements for an international WAN.
• This includes, change control administration, 21 CFR Part 11 compliance investigations/deviations, computer systems validation document/data review & control quality engineering.
• Additional responsibilities include technical writing and management/project leadership as well as LAN /WAN troubleshooting. Staff education and presentation of change management protocols. LAN/WAN re-design.

Other Clients SkyRiver Communications: BGP troubleshooting
Engage Corporation: Network Design and Troubleshooting
Cossette Post Advertising: Perform implementation of Cisco Load Director
Xtelesis: Implementation of national VOIP network for a major financial client in San Francisco on behalf of Xtelesis in conjunction with Mitel and a variety of their PBXs.

Confidential, Jul. 2000 to Jul. 2001
Sr. WAN Engineer/Team Lead

• Installation of Cisco equipment such as 5000 and 6000 series catalyst switches, routers 2000 through 7000 series and PIX and Checkpoint Firewalls. Plan and execute disaster recovery and contingency planning for enterprise networks.
• Create documentation of all WAN nodes, create network designs and implement for clients. Further responsibilities include training staff on networking and on Cisco routing products and protocols.
• Change control administration, 21 CFR Part 11 compliance investigations/deviations, computer systems validation document/data review & control quality engineering for pharmaceutical clients.
• ATM core experience with GX550 and 500 in addition to Naviscore, Stinger, Packetstar and Pathstar Voice Over IP solutions. This includes knowledge of QOS and MPLS.
• Maintain relationships with third party vendors and install and troubleshoot domestic and international connections. Introduction of change management protocols and other general network management tools to assist with network design.
• Acting director for transitional companies, such as Xtelesis. Consult to VAR's, financial companies, pharmaceuticals, law firms, chip manufactures and more.

Confidential, Jul. 1997 to June 2000
Sr. WAN Engineer/Team Lead – Computer Specialist

• Support and troubleshoot global frame relay network. Implement changes and design within the WAN. Troubleshoot frame relay, ISDN and dial connections, routers, DSU's and a variety of telecommunications equipment.
• LAN/WAN with HP OpenView, Windows 3.1, Windows 95,98 and 2000. Responsible for configuration, planning and implementation of support of field technicians, 2500 routers, cabling and networking issues for Naval Command.
• Administer and implement Y2K compliance changes for LAN/WAN routers and peripherals with over 500 sites including IOS upgrades, responsible for the configuration and troubleshooting for global frame relay backup, ISDN and dial backup.
• Responsible for access servers for vendors and dial-up users nationally and internationally.
• Award: Commendation for outstanding network change management for the re-design of Navy Command's main Data Center. Commendation: Navy Command's first microwave link in cooperation with DISA, between Roosevelt Roads and Sebana Seca, Puerto Rico.

Confidential, Nov. 1996 to Jul. 1997
Network Engineer

• Responsible for the installation, repair and administration of LAN's and WAN's for IBM corporation. Design and integrate LANs into pre-existing WANs.
• Procurement of hardware and software for all projects. Build servers and maintain client support and installation for OS/2, Windows NT and Novell servers, retail and corporate. Clients: GAP, MAZDA, Pearl Vision, and HP and many other POS environments.