Professional Experience:

Confidential

Network Architect / Sr. Network Engineer

• Aruba wireless solution for international company. Virtual Controllers', Clustered AP's Access points, Airwave management
• Aruba Clear Pass authentication solution for guest and corporate connectivity internationally Dot1q
• TACACS authentication and RADIUS authentication Aruba / Cisco ACS
• Created HP - UNIX, RedHat Enterprise Linux build hardening documentation to move the client Lennox Intl to CIS Level I compliancy.
• Developed UNIX/LINUX Server Patch management Policy for Lennox Intl.
• Updated risky protocols to satisfy internal Information Security Audit.
• Developed a process for maintaining secure server builds
• Troubleshot Mexico based manufacturing site network infrastructure and WAN/LAN connectivity for network infrastructure latency and IP related DNS issues.

Confidential

• Project based Consultant Network Architect All projects completed
• Implemented Cisco VSS 6509 in core datacenter for HHS. Utilized VLSM to accommodate IP schematics.
• Transitioned access layer switches from Cisco NAC to Dot1q Cisco ISE authentication.
• Implemented Cisco PRISM for WLAN connectivity in new building.
• For Trustmark, I assisted them in Desktop image migration to Windows 8.1 64 Bit, utilized Microsoft SCCM servers. Approximately 50 seats.

Confidential

Project based Consultant All projects completed

• Completed complex AD implementation and core infrastructure for Dept. of Transportation and AARP Cisco/Core 10Gb switching and connectivity at Rockville Data Center 12/2013
• DOT Montgomery County, Designed the collapsing of antiquated NT4.0 Domain and Unix DNS and File structure, Implemented Microsoft Active Directory, DNS and exchange on VMWARE. Dell SAN was put in place as their new file storage solution.
• DOT Montgomery County, I designed the fiber loop to all the traffic signals and 1100 cameras, the traffic controllers passed SNMP traffic to the traffic control center to allow them to adjust the timing patterns for the red light signals during peak and off peak traffic times. In my design I implemented DSLAM for copper remote traffic signals which were then connected to the fiber rings.
• AARP redesigned the core switching architecture into access and distribution layers, optimizing the IP architecture via VLSM. The WAN utilized BGP, EIGRP and was optimized with MPLS VPN cloud architecture.
• F5 Link controllers, F5 Big IP 7000 and 10000 series hardware utilized LTM and GTM for network performance and fault tolerant connectivity to public facing web operations.
• At AARP, Fortinet Fortigate 1000 Firewall Appliance in the core data center with Fortigate 200-300 series at multiple branch offices.
• FortiAnalyzer was utilized for the weekly information security reporting mechanism.
• TACACS and Radius servers for Cisco Core infrastructure were utilized.
• VDI architecture was implemented for 100,000 user environment F5 LTM was utilized for virtual optimization.
• Transitioned Avaya VoIP solution to Cisco VoIP handsets and Cisco Call Manager.

Chief Network Architect / Sr. WAN/LAN Engineering

• Perform Chief Network Architecture for a medium sized IT firm in the Baltimore area as a consultant on an as needed basis, assist several small/mid-sized local businesses in maintaining their IT infrastructures and solutions.
• Perform daily maintenance on Servers, telephony, desktops, laptops, VPN connectivity for remote staff and 3rd party vendors.
• Network administration, desktop support, internet connectivity and information security solutions to include updates, patches, intrusion detection, SPAM, VPN IPSEC tunnels, WAN architecture, site to site connectivity and firewall solutions.
• Fortinet Firewall Appliances, Access Points, Aruba Wireless, Cisco Wireless and unified communications, Cisco ASA and PIX Firewalls Checkpoint, and Palo Alto firewalls

Confidential

Chief Network Architect

• Assisting in creating the mobile Wireless EVDO / GPS connectivity for the State of New Jersey Police Department. Responsible for designing, testing and providing guidance on the rollout for the technology manufacturing client Link Communications, LTD.
• This project involves complex security requirements due to federal connectivity to the NCIC system from St Police patrol vehicles. Also streams media from patrol cars during traffic stops and this will be stored in a central repository as states evidence.
• Complex WAN communications are encrypted traffic, private IP architecture and various layers of authentication. Layer 7 shaping occurs for the H.323 streams and MP4 compressions.

Confidential

Sr Network Engineer III

• Went on payroll to assist Web Operations, which is approx 1700 core intranet and internet web sites.
• Designed the core infrastructure changes necessary to accommodate collapsing a data center and expanding servers and services to two datacenters strategically located in the US.
• This entailed splitting out current infrastructure into L2/L3 core, dist and access layers, opted to implement VSS core switching, and 10GE modules over fiber for VMWARE ESX Sun servers. ACE modules, FWSM and Supervisor 720 10GE VSS Also took on HP Openview NNM and OVO Windows network management.
• Specified new HP Operations Manager and various SPI plug-ins to maintain SLA agreements within the VA.
• Unfortunately there was very limited Core infrastructure in WebOps, handful of switches and Cisco content modules, FWSM, Pix hence seeking a perm career or long term Opportunity Immediately.

Confidential

Chief Network Architect / SR. WAN/LAN Engineer

• Independent Consulting for various businesses and clients in the Baltimore-Washington Corridor. Projects for Sprint / Paytec ISP, PTS, Harbor Towers/Cavalier Telephone MSP Division, Red Bull, Nano Technologies, Varia Systems, ISA, DELL and PlanIT.
• Assisted former CTO of Mercantile Bank in establishing a Network Services Division of a large woman owned storage company, Alliance Technology Services in Hanover Maryland. I took the role of Chief Network Architect, designing VoIP and Data services in Alliance's existing 41 Million dollar client base, along with sales and pre/post sales roles in establishing this new support division.
• Extensive firewall assessments and designs, core infrastructure routing switching and layer 7 load balancing and VoIP integrations.

Confidential

Sr. WAN/LAN Engineer

• Senior level WAN / LAN architecture and design. Designed and built out the mid-atlantic Federal Credit Unions Disaster Recovery Data Center. I hands on handled from the demarc in on the WAN/ISP side and wrote and certified the security of the core LAN infrastructure design and implementation.
• This DR facility currently has 120 Federal Credit Unions it is supporting. This entailed high end information security design, AD replication and messaging recovery.
• Packeteer specialist for streamlining and channelizing similar to MPLS architecture. QoS / CoS VoIP implementations utilizing CISCO core routers and switches. Router protocols I specialize in are OSPF, BGP, EIGRP, HDLC/Serial. I also implement Cisco VoIP solutions, VLAN, IP design and Layer 3 switch routing / Inner VLAN routing. ISDN EIGRP backup schema's, and conduct pilot programs for Microsoft's SMS 2003 server. Pre/Post sales engineer, business metrics and identity management solutions.
• SSO / ESSO architectures, RSA secure ID, Checkpoint firewalls and VPN appliance solutions. F5 Load balancers, Fatpipe and BGP WAN implementations for fed civilian, commercial and retail environments. Penetration tests per customers' requirements for various security designs that we implement. Implement bandwidth shaping solutions for WAN deployments, this shapes the layer 7 traffic. F5 Partner, design, implement and maintain link controllers / load balancers and firepass.
• Roles are from pre-sales all the way through implementation and support/maintenance.
• Perform pen tests on various financial clients edge devices and firewalls etc specifically to certify that the end client meets national federal government audit requirements.

Confidential

Chief Technology Officer

• Miscellaneous consulting tasks WAN/LAN and Desktop. Performed XP Pro Migration and Windows 2003 server on the Dell Computers / Wyndham Hotels Contract. Responsible for Server migrations from Compaq servers to Dell Servers. Migration was from Windows NT v4.0 2000 to 2003. Desktop environment was from 2000 to XP Pro. Outlook was migrated to Outlook 2003.
• Perform CISCO configuration work for SBC Contract at various Maryland locations as per needed. This contract is for Frame-Relay T-1 and fractional T-1 services.
• Performing various Server installations for local client base HP, DELL and managed a staff of up to 5 technicians / engineers who performed work for a variety of clients in the Baltimore area.

Confidential

Network Consultant

• Lead WAN engineer for a nationwide WAN transfer project.
• Designed the infrastructure and coordinated the rollout of CISCO based customer premise technology.
• The infrastructure has multiple concentrator/PVC/DLCI points on the coastlines, with point to multipoint traffic shaped over ATT, MCI, Bell, Qwest circuits, fully redundant and load balanced.

Confidential

Chief Technology Officer / Business Partner / Sr. Network Engineer

• Responsible for various IT functions for approximately one hundred commercial clients in the Baltimore Washington Corridor.
• Performed Server installation, configurations and system administration on Windows NT v3.51, NT v4.0, 2000 and Novell NetWare domains v4.x, 5.1
• Responsible for network design and implementation of email, LAN/WAN and Internet connectivity. Email platforms consisted of Novell GroupWise, Microsoft Exchange, Pegasus and Eudora EIMS Internet connectivity consisted of DSL aDSL, sDSL 64k to 1.5M, fractional T, T-1, T-3, and fiber optic dark fiber and white OC-3, OC-12.
• Recommended, install/configure and maintained various Firewall and Intrusion Detection Systems IDS . This included Raptor, CISCO Pix, Checkpoint Firewall-1, Gauntlet, Lucent Brick and Black ICE defender. Platforms consisted of NT, Sun Solaris and LINUX.
• Utilized McAfee and Norton virus products on all servers and workstations.
• Performed desktop level support on Windows 95/98/ME/2000/XP including migrations from version to version.
• Designed and implemented storage solutions from 1GB to 5TB Terabyte of data. This included SAN / NAS, RAID arrays.
• Implemented Disaster Recovery plans for IT equipment and telecommunications.
• Implemented and maintained backup solutions for all clients including hardware and software configurations. Software utilized consisted of Veritas and Backup Exec. Hardware consisted of Automated Tape Loaders ATL, DAT and DLT drives. Backup and restoration functions were performed under mission critical service level agreements that included contingency plans. Offsite storage, rotation schemes
• Published many articles, here is a link to one specifically on Data Backups: 2001 focus/5.html
• Comprehensive PKI architectures for various clients. These PKI solutions were for Intranets and business to customer B2C transactions. Some of the versions of PKI that were utilized were Entrust, VeriSign, Baltimore Technologies, RSA Keon, Xcert and Netscape, Digital Signature Trust and Interclear.
• RSA Secure ID was utilized at Concert Technologies, Applied Data, Association of the Plastics Industry, and the Association of Parental and Enteral Nutrition.
• Oracle E-Business solutions were utilized for clients in the manufacturing end of the business. These processes were implemented into existing infrastructures and supported. Processes included Marketing, Financials, Procurement, CRM, Sales, HR, Manufacturing, Supply Chain Management and Product Lifecycle.
• My HR functions were managed by a HR vendor which utilized PeopleSoft application, and required migration into our existing corporate infrastructure.
• Configuration Management / Change Management were utilized on CISCO router configurations as well as switches. This was implemented to limit human error in core WAN functions.
• Extensive Network capacity planning / Client server capacity planning was designed and implemented for company growth. This core function was performed for approximately 20 Clients ranging from 50 end users to 1200. Along with this, Email Server capacity planning was utilized for Microsoft Exchange and GroupWise environments. A comprehensive model was developed to map Internet connectivity and usage statistics were documented. Core examples of these documents are available.
• This service applies sophisticated analytic techniques to the area of capacity planning for Client/Server environments. The client was assisted in developing workload profiles, volume estimates, resource requirements and performance predictions based on existing workloads and projections of business unit growth. This process also included analysis and sizing of the network component.