SUMMARY

• Obtain a job managing or leading a group of highly qualified engineers to design, deploy and maintain a complex, evolving network environment operating under varying constraints
• Senior Network Engineer with 10 years extensive experience supporting, designing, maintaining, installing and upgrading small, medium and large networks

TECHNICAL SKILLS

Routers: 2800 series, 3800 series, 7600 series, CRS series, plus older models

Switches: 2900 series, 3500 series, 4500 series, 6500 series, Nexus 2k and 5k series, plus older models, MDS9100 series SAN switches

Firewalls: ASA, plus older PIX models

Wireless : 1100 series, 1200 series, Meraki MR24 and MR34

Network routing technologies: TCP/IP, RIP, EIGRP, OSPF, BGP, IPv6, NAT, PAT, VPN (GRE, IPSec, DMVPN)

Network switching technologies: STP, dot1q, 802.1q, VTP, PVST/PVST+, RSTP, MLS, NetFlow, CEF, HSRP, VRRP, LACP, EtherChannel, VACL, SPAN, RSPAN, vPC, VRF

Other network technologies: SIP, QoS, Multicasting (PIM, IGMP, CGMP, DVMRP, MSDP), WAN (PPP, HDLC, Frame Relay, MPLS, MLPPP), NTP, DHCP, AAA, TACACS+, RADIUS, 802.1x, dot1x, SSH, SFTP, SNMP, Wireless, WEP, WPA2

Non network skills: Windows, Linux, Office

WORK EXPERIENCE

Confidential, Seattle, WA

Senior Network Engineer

• Full installation, configuration and build out of new Frankfurt office to support European operations.
• Identified numerous corrective issues on network, including extensive OSPF redesign of internal network, route summarization, network segment simplication from 5 segments to 3, BGP load sharing of incoming traffic, OSPF implementation on edge to allow outgoing load balancing, enabling ISSU upgrades of server switches, standardization of configurations, improved security protocols across various devices, simplification of management network and suggested implementation of best practices for management of production network and devices.
• Worked on project plan for DR cloud-based proof-of-concept. Provided a list of options, including required and optional components, a high-level architectural drawing of how to integrate the DR solution into the existing infrastructure. Discussed with members of the systems engineering team how to make the solution elastic and scalable.
• Worked on high level network architecture for separating backend traffic from customer-facing traffic and attaching networked storage options to this separate infrastructure, so high-volume traffic would be isolated from the core network to provide stability and performance gains.
• Reviewed and assisted with resolving issues related to ongoing PCI compliance audits and scans. Ensured devices were secure, patched critical vulnerabilities in a timely manner, and performed regular reviews of ACLs, authorized user lists and patch levels.
• Designed and created new DMZ segment, as there was previously no DMZ segment. Started plan to move all relevant servers to DMZ segment so they would be handled accordingly
• Performed POC for installation of network taps to monitor network traffic at certain critical sections of the network to monitor for network issues and to determine application performance across network.

Senior Network Engineer

• Work with client (Rhapsody International) to support day-to-day operations. This includes handling ticketing systems, priority issues, on-call work, upcoming projects, design work, network stability and configuration cleanup, maintaining existing network infrastructure and building out new infrastructure
• Set up new circuit with second ISP to provide redundant connectivity between primary office and datacenter. This involves working with ISP on circuit details as well as verifying circuit installation, performing stress testing on new circuit, connecting new circuit to existing network, and configuring circuit to handle traffic along with existing circuit.
• Set up connectivity to new client in Germany for providing service to client’s customers. This involved working with client in Germany on security settings for interconnectivity, as well as testing and configuring new secure connection to client. This circuit also requires ongoing support as part of day-to-day operations.
• Worked on reconfiguration of WAN accelerator to support clients in 14 new European markets to provide content. This involved creating new networks to separate and streamline traffic flow from London datacenter to Seattle datacenter. It also involved reconfiguration of the equipment to pass traffic via the new streamlined route while keeping existing production traffic flowing without interruption. Also created a test tunnel to assist with troubleshooting any new clients wishing to use the WAN accelerator pipeline.
• Working on design for new Frankfurt office
• Upcoming project work for Latin America expansion

Network Engineer

• Assist with network maintenance, upgrades, configuration and testing
• For network maintenance, worked with and was part of 3rd tier (Tier 3) engineering team. Was required to be on-call to assist with major issues with core network that could not be resolved by first two tiers of support. Required familiarity with all core networking components (Cisco routers, Juniper firewalls, Ciena and Foundry switches, Sandvine packet inspectors), as well as Linux servers within core network. Determine appropriate resolution and/or escalation path.
• For network upgrades, worked with the Core Network Engineering (CNE) team as part of a large project designed to replace older hardware with new equipment designed to handle higher traffic loads. This initially involved replacing near-EOL Foundry equipment with newer equipment, later involved replacement of Foundry architecture with Ciena equivalent equipment. This was all required to be performed with minimal customer impact
• For network re-configuration, worked with CNE on a project to migrate Las Vegas traffic from slower Seattle connection to faster Los Angeles connection. Required familiarity with Ciena equipment as well as being able to create temporary paths to migrate traffic without customer impact. Multiple steps included lab testing, creating dual traffic paths, moving traffic from Seattle to Los Angeles, then cleaning up old Seattle-based network configurations
• For network testing, worked with Corporate Network Entry Testing (CNET) / Operational Acceptance to test configurations for various new markets before markets are declared ready for customer use. Involved reviewing hardware and software configurations to ensure they meet company standards, as well as intentional hardware device/interface disabling for redundancy testing. Ensured that all devices pass a thorough checklist of items before being passing inspection.

Network Administrator

• Maintained a growing network environment - as of time of leaving included approximately 30 routers, 60 switches, 15 firewalls, 15 wireless access points, 8 load balancers and 10 IPS devices
• Designed solutions to support expansion of the network to handle new clients and projects
• Installed various network equipment in different office locations based on need
• Setup new office in Chengdu, China (Project) - setup network switches, routers and firewalls, setup agent workstations, backhaul connectivity through corporate MPLS network, internet connectivity, VPN connectivity to client
• Setup MPLS network backbone infrastructure (Project) – Lead a team to analyze existing point-to-point network architecture. Determined bandwidth needs and designed network connectivity via MPLS for all office locations. Configured QoS to enable voice calls over MPLS network. Configured multicast over MPLS network to enable remote offices to access server farm. Designed redundancy of MPLS network and configured preferred traffic flow paths
• PCI Compliance (Project) – Analyzed security requirements for PCI compliance, submitted a plan for securing all network devices. This included securing NTP, web (changing HTTP to HTTPS), DNS, console access (changing telnet to SSH), VPNs, file transfers (changing FTP to SFTP), hardening DMZ access rules and NAT rules, configuring wireless security (changing from WEP to WPA2), SNMP, logging, authentication, authorization and auditing
• Core Network Upgrade (Project) – Replaced older hardware with newer hardware in multiple locations, eliminated single points-of-failure to create full redundancy in network, created redundancy in internet connectivity by working with ARIN and BGP internet providers to provide multi-homed solution
• Setup PeopleSoft CRM environment (Project) – Created a firewall scheme to restrict internal and external access to production critical environment, set up internal agent access and corporate client access to servers, configured server blade switches to allow inter-server connectivity as well as connectivity to the rest of the network
• Performed supervisory role over Junior Network Administrator for period of one year as part of training for managerial duties. Assigned tasks, monitored work flow and work load, acted as mentor, helped with training and certifications, discussed career path.

Desktop Support Specialist

• Provided on-call and email support to student body for personal computing needs
• Replaced faulty hardware – motherboards, hard drives, memory, etc.
• Re-installed and re-configured corrupted operating systems
• Troubleshot issues with WAN/LAN connectivity, modems, network cards
• Created hard drive backups for storage using Norton Ghost
• Performed system recoveries, installed system updates, anti-virus and anti-spyware

Junior Network Administrator

• Maintained a network of 75 computers
• Designed, configured and maintained a network of 10 Cisco routers and 2 Cisco switches
• Helped conduct Cisco training classes
• Installed and configured various Windows and Linux servers