SUMMARY:

• IT professional and network expert. Known for using strong technical expertise and industrial experience to provide services that support the firm’s business needs and contribute to its bottom line. Expertise in architecture, design, engineering, implementation, operation support, and project management of telecommunication and LAN/WAN networks. Extensive hands - on in configuring routers, switches, firewalls, and wireless. Strong experience with multi-vendors network technologies/platforms - Cisco, Juniper, FortiNet. Excellent Data Center experience in planning and executing vast network deployments. Strong experience in redesigning and implementing technology solutions to meet business continuity requirements during major incidents. Experience in Data Center build-out, AWS Cloud integration, and hands-on in supporting HFT/Low Latency networks. Fluent in Chinese; US citizen.

PROFESSIONAL EXPERIENCE:

Confidential - New York, NY

Senior Network Engineer

• Manage network architecture and design for the InfoHedge Hosted Platform to provide network services on par with those of Tier 1 banks without the associated capital expenditures for Hedge Funds, Prime Brokers, Broker Dealers, Asset Managers, Investment Advisors, Private Equity, and Investment Banks customers with a combined client base, on the buy side, that exceeds $550BB AUM.
• Oversee network engineering and implementation of the InfoHedge Networks to ensure network configuration deployment adhere to best practices and industrial standards.
• Manage, formulate & create network best practice guides and configuration templates for standard deployment.
• Manage strategic and product evaluation & testing for the InfoHedge Hosted Platform network.
• Manage and hands-on completed on time & on budget the upgrade project of the firm’s data center fabric infrastructure from legacy Cisco 1-Gig switches to Cisco Nexus 10-Gig series multi-layer fabric switches that provides additional capacity & high throughput for growing new business requirements and opportunities to boost revenue, and saved nearly $24,000 per year in support contract costs.
• Manage and hands-on upgraded the firm’s internet gateway infrastructure on time & on budget from Cisco 3800s to Cisco ASR series routers that provides high throughput to meet increasing growth and boost revenue.
• Manage & hands-on facilitated the firewall infrastructure migrations from legacy Cisco ASA & Juniper SSG to FortiNet FortiGate to take advantage of the high throughput, new security & content filtering features to gain new business & boost revenue, and saved an estimate of $225,000 per year in support contract costs.
• Design and hands-on implemented OSPF & BGP routing on the firm’s data center Core, Financial Service, & Perimeter firewalls infrastructure to client sites firewalls utilize IPsec VPN tunnels connectivity and saved over $1,000,000 per year in dedicated private circuits connectivity costs.
• Manage and execute a wide range of network service requests for InfoHedge Hosted Platform customers to meet different business requirements.
• Architected and hands-on build-out Low Latency Networks using Cisco Nexus 3000s series switches for high frequency trading customers successfully on time & on budget.
• Design and hands-on implemented AWS Cloud VPC integration to the firm’s data center and selected client sites firewalls.
• Design and hands-on implemented 802dot1x port security on Juniper EX series switches to provide added security for network access for selected customer sites.
• Design, engineering, and hands-on implemented VoIP for client offices to utilize existing ISP circuits and saved nearly $10,000 per year in dedicated T1 voice circuits costs per client per office.
• Manage and build-out X-connects to various exchanges, market data providers, & financial service firms on Wall Street colo-ed in the Equinix NY4 data center - i.e. NYFIX, BBG, BT Radianz, Confidential, Morgan Stanley, Credit Suisse, Deutsche Bank, JPMC, BAML, Thomson Reuters
• Manage and implement site-to-site IPsec VPN tunnels to IHRAD clients and third party vendors.
• Design, engineering, & hands-on implement WiFi solution for selected customer sites.
• Manage and implement firewall change requests to meet new business needs.
• Review/validate/remediate BCP designs and configurations to ensure DR Failover test meets business needs.
• Manage and conduct DR Failover test to ensure BCP configuration works as expected.
• Manage and provide 2nd and 3rd level network escalation to resolve operational and production issues.
• Hands-on troubleshoot complex routing, switching, firewall, VoIP, 802dot1x, and wireless issues to resolution.
• Hands-on configuring and troubleshoot critical X-connects, private circuits, ISP circuits to restore services.
• Provide training to new network & security engineers on multiple platforms to improve their support skills.

Confidential - New York, NY

Senior Network Engineer (Consultant)

• Manage and execute network service requests for a wide range of platforms and technologies to meet different business requirements.
• Design and implement VoIP for regional offices to utilize existing WAN circuits to save cost.
• Configure and optimize QoS configuration to support VoIP service over MPLS cloud.
• Manage and hands-on upgrade the firm’s internet gateway infrastructure to provide additional capacity to support new business requirements.
• Manage and implement firewall and proxy requests to meet new business needs.
• Provide 2nd and 3rd level network escalation and technical support to resolve operational and production issues.
• Review/validate/remediate BCP designs and configurations to protect the firm from internet DDoS attack.
• Manage and conduct BCP test for DDoS attack with clean-ip service provider.
• Manage and facilitate Cisco ASA firewall migration in the DMZ.

Confidential

Senior Technology Analyst (Network)

• Managed and executed network implementation and changes for a wide range of platforms and technologies.
• Configured and optimized OSPF and BGP routing to support critical services.
• Installed and upgraded Port Channels and WAN circuits to meet additional B/W needs.
• Configured QoS to support different type of services requirement.
• Activated new and re-sized/re-ip existing subnets with HSRP to meet business needs.
• Implemented and updated VCAL/ACL to protect services from unauthorized access.
• Configured BGP route reflector/client to support Fast Failover for Virtual IP (VIP) service.
• Implemented PIM and Multicast to support market data service.
• Hands-on implementation and operation support of the HFT/Low-Latency Zone networks.
• Configured route distribution using route-map to control traffic flow/load-sharing.
• Set up Virtual server (vserver) for HA (high availability) service using Citrix Netscaler.
• Configured Fiber Channel circuit, trunk, port channel, and zoning to support SAN service.
• Managed and conducted network monitoring, fault isolation and resolution across all network platforms.
• Conducted detailed troubleshooting and monitoring of all types of network problems.
• Provided troubleshooting support for internal and external clients, vendors and exchanges connecting to Confidential .
• Used established troubleshooting procedures and tools to quickly identified faults and brought them to resolution to minimize production impact to the business.
• Used Cisco, HP, and EMC network management tools for network monitoring and fault management.
• Used Niksun’s 1-Gig and Endance’s 10-Gig probes for data capture to assist in fault isolation.
• Used Wireshark and Ethereal to analyze data packets to pinpoint gaps and issues.
• Worked extensively on a wide range of Cisco platforms.
• Project managed and performed hardware and software upgrades for networking platforms.
• Managed and performed best practice configuration audit and remediation for network devices.
• Thousands of devices were successfully audited and remedied to avoid production service impact.
• Designed and implemented the Data Center build out project in Bridgewater, NJ to support a number of business initiatives.
• Successfully managed and executed the NDS (Network Desktop Server) expansion and build out project in both Data Center and Co-Lo environments to support the firm’s local desktop PC to NDS migration initiative.
• Led the new IP based Main Frame environment in the new Bridgewater DC to support Main Frame migration and expansion.
• Redesigned and implemented technology resources to build “War Room” environments to support critical business requirements during the 2008 financial crisis.
• Completed on time and on budget the Cable Restack project for IGX/BPX ATM WAN switches in two Data Centers to rectify air flow to meet building compliance.
• Redesigned and implemented WAN circuits around the World Trade Center disaster site to maintain connectivity to regional sites during the 9/11 crisis.
• Mentored and trained over 50 technology staffs on multiple platforms to improve their support skills.

Confidential - New York, NY

Internetwork Solutions Engineer

• Formulated and provided the best practice procedures for their IGX/BPX network to operate.
• Designed and implemented an IGX/BPX training LAB environment.
• Conducted IGX/BPX training for the supporting staffs.
• Cisco System Engagement: ( )
• Field Engineer support in Cisco’s Professional Service and Network Implementation Service Group.
• Provided proof of concept, technical support, and all the related documentations to customers.
• J.P. Morgan Engagement: ( )
• WAN Specialist in a project team to assist and support VPN assessment and design project.

Confidential - Jersey City, NJ

Network Engineer

• Developed and managed TMI's Global Frame Relay network using Cisco StrataCom WAN switches.
• Extensive hands-on different types of configuration and implementation on the StrataCom network.
• Provided 2nd and 3rd levels support to TMI's Global Network Management Center (GNMC).

TECHNICAL SKILLS:

Cisco Routers & Switches: Nexus 10Gig series switches, ASR series routers, 6500s, 4900s, 4500s, 3700s, 7200s3800s, 7500s, 3600s, 2800s, 3500s, 2900s, 5500s, 2600s, 9000 MDS SAN switches

Cisco Firewall & WiFi: Aironet WiFi Controller & AP, ASA/PIX firewalls, Ironport proxy

Juniper Firewall & Switch: SSG-550, SSG-350, SSG-140, SSG-5, EX-3300, EX-22000, WiFi, SSL appliance

FortiNet Firewall & Switch: FortiGate 600D, 200E, 200D, 140E-POE, 92D, 60E, Switch 248D-FPOE, WiFi, AP

Other Hardware Platforms: Citrix NetScaler, Arista 10G switch, CheckPoint/Nokia FW, HP ProCure switchBlue Coat ProxSG, Niksun & Endance probes, Apcon matrix switch, SourceFire IDS/ IPS appliance, F5 load balancer, Riverbed Optimizer, Aruba Controllers & AP

Protocols: OSPF, BGP, RIP, RIPv2, EIGRP, TCP/IP, HSRP, VRRP, PIM, IGMP, Mutlicast, STPPPP, HDLC, ATM, Frame Relay, MPLS, QoS, VOIP, IPSec, SNMP