PROFESSIONAL EXPERIENCE:

Confidential

SENIOR NETWORK SECURITY ENGINEER

• Responsible for day to day network administration and evaluation of new turnkey solution
• Deployed Cisco unified wireless solution using the guest/anchor model for the company in 41 of the states
• Member of Network team for network upgrades team for over 50 sites in MPLS environment, this involve a team of six engineers including me as the lead in security
• Split VPN functionality from existing Active/standby cluster on both Datacenters for isolation of the security functions and IPS (Sourcefire) to their own Active/standby for only VPN tunnels and AnyConnect clients
• Moved co - located datacenters from both East coast Wipro to SunGard and likewise the Westcoast
• Migrated MPLS circuits from Sprint to Verizon on 41 sites on different States
• Upgraded routers from 2900/3800 to ISR4331-AX/K9 across the board for WAAS capabilities
• Worked with vendors like zScaler proxy and content filtering also using their expertise for recommendation of enforcing security policies using Cisco ISE/NAC for Centralized Policy, Posture Assessment, Guests Access Services and Device Profiling
• Responsible for answers and solutions about security related new technologies security related and any new cyber threats
• Member of team for the deployment and managing of OKTA FOR SSO and MFA

Confidential  

Analyst and NETWORK ENGINEER

• Configured Cisco ASA firewall, deployed and upgrade NetScaler for DDC provided LAN/WAN administration duties and liaise as point person to ISP and basic desktop

Confidential

Network Engineer

• Senior Network Engineer using both Cisco and Microsoft technologies - Lead for ACS Security Infrastructure team involving day to day implementation and enforcement of City strict security polices: providing access to the multiple DMZ’s/Zones via Cisco ASA’s, Routers and Switches and Microsoft ISA sever, NAC framework for posture assessment and validation responsible for any changes or updating routing protocols or static entries both in firewalls and routers.
• Install and manage Websense and McAfee Administrator for content management
• Recommended solutions and perform upgrades to existing network infrastructure ensuring compatibilities with existing infrastructure.
• Cisco Technology: Cisco VOIP, Cisco Unity, Cisco VPN Concentrators, Cisco Routers, CSS1 Content Switches and NetScalar for Load Balancing, Catalyst and IOS Switches, Firewalls CS-MARS, Cisco IPS. Microsoft Technology: Active Directory, Microsoft Exchange 2000/2007, ISA 2006, DNS, WINS,
• Troubleshoot all Network related issues using basic Cisco CLI’s commands and third-party utilities - SolarWinds and Riverbed products.
• Deployed PALO ALTO for evaluation 1 yr. - configure and deployed objects and rules for enforcing ACS security policies. Designed, implemented and configured Nexus - 7K; 5K and 2K FEX switches in a core, distribution and access layer with VPC's to access layer devices in a recommended best practice design that replaced an existing 6500 ( core and distributed ) switch and 3550 (access) layer design.
• Deployed and configure H3C switches for current network refresh.
• Configured VPN Concentrator for Remote access and Site-to-Site configured and deployed with Cisco VPN, AnyConnect.
• Administered and configured Cisco Call Manager 8.0 Administrator of Microsoft AD and MS Exchange for Cisco VOIP.
• Deployed, evaluated and maintained Cisco and other third party networking administration and management tools: Solarwinds, Riverbed/Mazu, LanScope, CiscoWorks 2000, CSACS, NetForensics, Intrushield and Foundstone.

Confidential

Network Engineer

• Senior Network Engineer for Confidential LAN/Wan networking team.
• Configured Microsoft Networks - Active Directory, Exchange 2000, Group Policy Cisco VOIP, Cisco Unity, Cisco VPN Concentrators, Routers, Switches, Firewalls and Conference Servers.
• Deployed HP MSA SAN Cluster for MS Exchange, Install, configures and maintains HP and Dell servers with server based applications: SQL, Citrix MetaFrame XP and most of Microsoft BackOffice products.

Confidential

Network Engineer

• Network Engineer of the MIS department of ACS to implement an enterprise security solution, which includes Cisco products: Cisco Routers Switches, ASA/ PIX firewall, IDS and IPS and Concentrators and Microsoft ISA, CSACS 3.0, CSPM, Cisco Works 2000 and other Cisco technologies. Implement secure IPSEC environment with Firewall, Switches, and routers, use RSA SecureID for OTP. Deployed Websense, McAfee Web Gateway for URL and content filtering, Configured Palo Alto for remote branch office.
• Used SIEM McAfee for log aggregation and management.
• Configured Perimeter security with Cisco routers. Data Media include: Ethernet, Fast Ethernet, FDDI and Gigabit Ethernet.
• Protocols include: RIPv2, IGRP, EIGRP and has a working knowledge of BGP and OSPF.
• Hardware used: Cisco Nexus - 7K, 5K and 2K, 6000/5000/2900/1900 Series Switches with MSFC/MSM/RSM modules and 2500/7200/2600/2500/1720 Series Routers, and SUN Solaris 2.8.
• Configured Microsoft ISA Server for Caching internal and external web content; LAN’s consisting of switched / shared segmentation and m multiple VLANs.

Confidential

Network Systems Engineer

• Manage network systems group, assuming overall responsibility for the quality, reliability, and security of all data communications and server systems within Touchbridge which include: LAN’s consisting of switched / shared segmentation and VLANs.
• Configured routers, switches and firewalls. Exchange, Administrator for 2000 in a LAN, Heterogeneous server environments consisting of Netware and Window 2000/ Servers, Windows NT/2000/XP Workstations, Cisco, Nortel, SonicWall and Intel internetworking products. Regularly analyze internal and perimeter networks, recommending, and implementing strategies to ensure adequate security
• Build and design Active Directory with local and internal DNS infrastructure. Implement and configured Windows 2000 VPN/RAS solution. IIS Server, SQL2000 and Exchange 2000 administrator. Create Active Directory Tree’s, Domains and OU’s, Used Microsoft Advanced Server used for Clustering. Built support and configured DNS, WINS, DHCP and IIS 4 server and Cluster Server. Used SQL Server 2000 for logging of files. Performed tuning and capacity planning of network. Utilize Compaq insight manager to provide in-band management with RIB lights out edition in case of LAN or Server failure.
• Managed network specialists and consulting teams to successfully, isolate network faults and to improve network performance. Develop and manage LAN/WAN connectivity and dedicated Internet access.

Confidential  

New York

Network Engineer

• Managed LAN/WAN Network for Confidential . Configured routers and Checkpoint firewall.
• Successfully planned and deployed secure and reliable companies’ internet connectivity Cisco’s routers Checkpoint firewall and Microsoft Proxy Server technology.
• Built support and configured DNS, WINS, DHCP and IIS 4.0 server and Cluster Server.
• Configure Microsoft Advanced Server for Clustering. Utilize SMS 2.0 to distribute software, and monitor licensing.
• Active Directory Upgrade to Windows 2000 from NT and Window 2000 to Windows 2003 including MS Exchange.

Confidential

Network Specialist

• Converted Unix OpenLook computers to Windows NT.
• Evaluated of various third part utilities from vendors for company’s Information Technology needs.
• Supported Exchange 5.5 Servers. Recommended and plan upgrades to newer products; Build, configure and manage NT, and Citrix servers; Administered SQL 7.0 Server; Set up VPN software for clients