OBJECTIVE:

Pursuing Cisco Firewall Network Engineer opportunity utilizing and analyzing high level troubleshooting abilities in large fast pace infrastructure.

JOB-RELATED SKILLS:

Strong troubleshoots skills. Demonstrated proficient or intermediate experience on the following:

Hardware:

Cisco, ASR1006, Nexus7000 C7010, ASA5580-40, FWSM, PIX, ACE-VIRT-250 and CSM LB and VPN Concentrators, Bluecoat ProxySG, ProxyAV, Palo Alto Panorama, PA-5000, PA-4050, PA-200, F5 BIG-IP Load Balancer, Juniper SA-6000, Riverbed CMC and Steelhead, Infoblox

Software, Systems and Tools:

Microsoft Exchange, Microsoft Active Directory, Group Policy, Wireshark, OpNet, TACACS, ACS, RADIUS, Snort, eHealth, HPNA OpsWare , VMPS, NMAP, Nessus, VMWare Server, Backtrack, Linux/Unix, CURL

Protocols and Networking:

EIGRP, BGP, OSPF, DMVPN, MPLS, TCP/IP, GLBP, VoIP, QoS, DHCP,

DNS, SNMP, IPSec, Crypto, L2L

WORK EXPERIENCE:

Network Administrator

Confidential

Managed DHS OneNet WAN, firewalls, routers, switches and DMZ. Proficient with Blue Coat proxies, Pala Alto, FWSM. Responsible for the day-to-day operations and management of DHS datacenters, CBP DMZ, WAN, LAN, MAN, DHS Communications Core Network DCN and Participating Government Agency PGA , and Trade extranets, etc. Ensuring that the network traffic that traverse the WAN and LAN is optimize, pass securely and error-free. Troubleshoot and configure local and wide area network, DS3, OC48 routers and layer 3 switches, including planning, designing, monitoring. Establishes and maintains network performance by configuring and implementing load sharing configurations and troubleshooting network problems. Configured VPN concentrators, MPLS, turn-up VZ/ATT/SPRINT circuits to include layer 2, layer 3 routing, GLBP and HSRP. Troubleshoot dynamic and static NHRP and DMVPN/GRE tunnels.

Network Administrator

Confidential

Utilize ArcSight, ISS, Checkpoint, NMAP, Nessus and SNORT IDS to perform investigation and analysis on network traffic in order to determine if the signatures that the IDS sensors fired off are false positive, configuration failure, or an incident. In the event of a configuration issue, Analyst escalates to the ATS team or the external organization managing the device s . In the event of false positive, develop and submit tuning requests for the signature. In the event of an incident, escalates to the Incident Response Manager and/or the client SDM. As needed, perform basic changes to firewalls, VPN devices as well as tuning requests on IDS devices.

Cisco Security Engineer

Confidential

Reviewed Cisco show run configuration of CISCO ISR, 7204, 7600, 6500, 3750, ASA, PIX, SNMP, RADIUS, TACACS and VPN concentrator platforms to identify vulnerability. Performed technical security verification and risk analysis on Cisco gateways, edge routers, Linux, Solaris and various network systems using automated tools and examination. Conduct network security, Pen test and vulnerability assessments, security test and evaluation, and security validation procedures. Analyze system configurations to determine the security posture and recommend risk-mitigation solutions. Familiar with ISS, Stat Scanner, Retnia, Nessus, Nmap. Knowledge of FISMA, NIST guidelines. This involves planning, writing and developing the necessary reports to support these assessments.

Network Administrator.

Confidential

Perform system tasks in Windows NT/2000/ Novell environment provide direct support to customers, create user accounts, train users, move and configure workstations, install and configure servers, perform troubleshooting, answer trouble tickets, install new hardware. Support Microsoft and Novell migration efforts, upgrade operating systems on workstations and servers and reconfigure equipment and cabling as necessary. Effectively migrate 100 Blackberry accounts to a new server. Install Common Access Card, Public Key Infrastructure and DMS. Developed and conduct tests to demonstrate system performance and conformance with specifications. Ensure we stay abreast of changes in hardware technology and software applications so that support services provided are current with the state-of-the-art. Analyze Network performance and suggest methods for improving Network reliability, security, efficiency and maintenance. Ensure technical safeguards are maintained to provide controlled user access, integrity of electronic mail, applications and user data. Review implementation plans to ensure that system resources are available to support both the long and short-term requirements. Coordinate and track service requests to ensure that all customer requirements are handled expeditiously while keeping both the user and manager apprised of significant changes in workload status. Evaluate hardware, firmware, peripherals, and software packages, for use by staff and provide recommendations to accomplish the desired objectives. Provide limited one-on-one desk side training for customers requiring assistance on standard software applications and or IT equipment.

Confidential

Network Engineer.

Responsible for design, security, configuration, and maintenance of networks to ensure communication performance and reliability. Ensure that during the design and operation of the network features are in place to ensure the network is being used, as intended and that communications are secure. Maintain, and monitoring network equipment to ensure continued reliability and ability to identify future needs for expansion and improvement. Perform WAN configuration utilizing network transports routing protocols and architectures such as RIP and OSPF, EIGRP, TFT. Managed, configure, and verify available IP addresses. Backup upgrade Cisco IOS Software Images. Configured Frame Relay point-to-point on sub interfaces, map IP to layer3, and troubleshoot LMI, PVC and down interfaces and line protocol. Configured VLAN and port security utilizing Set based commands. Upgrade Cisco routers ROM, Memory and partition Flash. Analyze, monitor and track network performance to ensure network operations and resolves network problems. Configured NAT, PAT, to access Internet, and standard and extended access lists to filter packets. Build and maintained Compaq ProLiant client servers and Microsoft e-mail Exchange server and connect servers to rack of existing LANs and outgoing circuits. Build Linux Red Hat and Solaris servers and connected them to the LAN. Administer system backup schedule and tape libraries. Ghost image and reload the client data. Migrated from Windows NT server to Windows 2000. Assembled and relocate equipment racks. A team member who contributed in re-designed, evaluating, developing and implementing policies that improved our network infrastructure. Negotiated with vendors and contractors on equipment purchasing, warranty and services. Monitor and maintain user security, user accounts and system accesses levels on the LAN. Plan, organized and executed network system installations, reinstallations and upgrade of servers and switches. Create and manage users accounts on Windows NT/2000/Linux/Solaris and Exchange servers. Maintained ISDN video conference equipment.

Professional Skills:

• Comprehend new concepts quickly resourceful in achieving work deadline
• Highly self-motivated, excellent customer service skills, goal and team oriented.
• Work well in a multi-tasking environment and interact positively at all level.