SUMMARY:

• Subject Matter Expert of over 12 years of IT, Network Engineering, and Network Security realm. Worked with multitude of technologies ranging from networking, security, to back - end server devices and applications. Providing wide ranges of real life experiences from Start-Ups, Enterprises, NOC/SOC's, Data-Center's, and Federal Department. Examples of some of my accomplishments are as below:
• Design, implementation, and documentation of PKI model IPSec VPN on Backbone Management Network for greater scalability and security.
• Design, implementation, and documentation of Product Support System Highly Redundant Dual Data Center to support ISP Management Systems.
• Engineered and Documented Global Server Load Balance (GSLB) for Confidential ensuring high availability even in an event of data-center disaster.
• Web Application Firewall deployment and constant fine tuning of WAF policies to safeguard mission critical application from malicious hackers as well as internal threats.

PROFESSIONAL EXPERIENCE:

Confidential, Arlington, VA

Sr. Cyber Security Engineer

Responsibilities:

• On site Security Engineer in supporting Confidential Internal and External Customers, providing guidance and advice on all aspect of Application Environment Modernization Program.
• Evaluation, design, and deployment of new Network equipment into the AEM Network.
• Web Application Firewall deployment and constant fine tuning of WAF policies to safeguard mission critical application from malicious hackers as well as internal threats.
• Engineered and deployed Global Server Load Balance (GSLB) for Confidential ensuring high availability even in an event of data center disaster.
• Enforcing Network Security between tiers of application environments via stringent firewall policies.
• Daily coordination with Application Developers to ensure seamless integration and deployment into AEM environment with security as the main priority.

Confidential, Chantilly, VA

Sr. Security Engineer

Responsibilities:

• Security SME for Confidential Customers, Internal IT, and ISP backbone, providing guidance and advice on all aspect of the network security.
• Design, implementation, and documentation of JabNet Secure Management infrastructure for Major Motion Movie companies.
• Design, implementation, and documentation of Product Support System Highly Redundant Dual Data Center to support ISP Management Systems.
• Security redesign and migration of Corporate IT network scattered throughout the nation with Juniper SSG firewalls and MPLS L3-VPN.
• Design, implementation, and documentation of PKI model IPSec VPN on Backbone Management Network for greater scalability and security.

Confidential, Dulles, VA

Sr. Network Engineer

Responsibilities:

• Designing, customizing and maintaining LAN/WAN infrastructure.
• Architects network infrastructure solutions to support the Technology Transformation initiative, migrating from Mainframe to Distributed environment.
• Install, customize and maintain all network infrastructure devices including Cisco Routers and layer 2 and layer 3 Catalyst switches, Content Switches, PIX, VPN Concentrators, IPS, ACS, and other networking equipment.
• Providing support services to protect critical network assets and ensures compliance with corporate policies/standards and industry best practices for network configuration and monitoring.
• Install, customize and maintain RANCID to backup configurations of all Layer 2 and Layer 3 Network Devices and IPPlan to centralize IP tracking, monitoring usage, and to eliminate IP overlapping.
• Write and maintain network architecture documentation and Standard Operation Procedures.

Confidential, Reston, VA

Sr. Security Network Engineer

Responsibilities:

• As a MSSP company, we manage all of Confidential Security customer’s security devices to include Cisco PIX, ASA, Checkpoint, and Juniper Netscreen firewalls, Cisco 3000 series VPN Concentrators, and Cisco Routers in a 24x7x364 SOC environment.
• Daily Interaction with customers on escalated issues resolving any customer issues from an architecture perspective to a managing standpoint.
• Working hand in hand with IDS Analyst in a SOC environment on VPN tunnel encryption from customer site to Confidential SOC to ensure integrity of the information.

Confidential, Beltsville, MD

Network Engineer III

Responsibilities:

• Manages Confidential Enterprise customer’s Layer 2 & 3 networks to include Cisco routers, switches, VPNs, SSL, Checkpoint and PIX firewalls as well as content delivery networks (load balancers) in a 24x7x364 enterprise environment.
• Responsible for building and designing new customer’s CSS-115XX for Content Delivery Network services and Checkpoint IP-XXX Nokia Firewalls.
• Operate and interpret data analysis tools such as sniffer, snoop, rspan and tcpdump to assist with troubleshooting.
• Intermediate level of knowledge in Cisco routers and switches, IOS/CatOs, Local & Distributed Directors, STP, VTP, TCP/IP, VLSM, HSRP, VRRP, VPN and OSPF, CDN, F5, PIX, Checkpoint and Nokia hardware.

Confidential, Reston, VA

Security Analyst

Responsibilities:

• Responsible for analyzing and managing. networks, routers, firewalls, ids, URL filter servers for MSSP’s Fortune 500 customers.
• Primary responsibility is to monitor the status of an Intrusion Detection System (IDS) and to perform in-depth analysis of IDS security events.
• Cooperate and coordinate with Analysts, Engineers, CERT, customer security personnel, and law enforcement officials as directed by the customer.
• Coordinate and provide leadership to customer on creating IDS Security policy.
• Escalating anomaly traffic alerts to customer in real-time and providing sound advise on handling the alert when necessary.
• Perform change request policy on customer firewall on coordinated scheduled time frame. (Mainly Cisco PIX and Checkpoint)

Confidential, Bethesda, MD

Sr. Systems Engineer / Incident Response Team

Responsibilities:

• IRT member responsible of overseeing the entire Confidential computer security posture and responding to any computer related security issues.
• Performing Penetration Testing for the entire Confidential organization, which includes 28 Institute Centers.
• Produce Policies and Reports to Management for standardizing throughout the Confidential organization.

Confidential, Chantilly, VA

Wireless Information Analyst

Responsibilities:

• Analyze Raw data collected by the Benchmark Engineer from series of cities around the nation.
• Utilizing Wireless Benchmarking Tools such as, TEMS Deskcat 4.3, TEMS Investigation GSM, TEMS OptimEyes, and Mapinfo.
• Provides technical support for Benchmark Engineers in the field, whether its software or hardware issues.
• Planned, installed, and configured Cisco router and PIX firewall for the corporate security.
• Enabling Remote Users such as Telecommuters/Mobile Users the ability to connect to Corporate LAN securely with Cisco Secure VPN Client.
• Monitoring Intrusion Detection System utilizing Cisco PIX Device Manager.
• Troubleshoot WIFI’s, PC's and laptops for the corporate users.

Confidential, Mc Lean, VA

Sr. Network Engineer

Responsibilities:

• Security design and implementation, utilizing Cisco PIX and Cisco Router as Firewall for Internet Security.
• Established VPN tunneling to remote site to site with IPSec and IKE protocols according to HIPPA compliancy.
• Enabling Remote Users such as Telecommuters/Mobile Users the ability to connect to Corporate LAN securely with Cisco Secure VPN Client.
• Responsible for configuration, implementation, and maintenance of LAN/WAN connections for all of company's remote sites utilizing Cisco Routers and Switches.
• Responsible for Microsoft Back Office configuration, implementation, and maintenance, such as Exchange 5.5, Project Central 2000, and IIS 4/5.
• Designed a Web Server with Outlook Web Access through SSL (x.509v3) certificate for Globally Accessible Confidential Web Interface Secure E-mail.
• Authored the E-mail and Data Security Policies for the company.
• Utilized Websense to filter URL’s and Internet usage reporting tool.
• Unicenter from CA was utilized for Network Management Tool.

Confidential, Falls Church, VA

Data Network Engineer

Responsibilities:

• Activation of Data products, such as Dial-Up, DSL, T-1, BBO Products, and etc.
• Designing Circuit with the best route to customer’s location.
• Configuration using Vlan’s (802.1Q) on High-End Routers and Switches, such as Cisco (7200 & 2600), Juniper (M10 & M20), ASC, Tiara and Extremes.
• Firewall Protection from Hackers utilizing Extended Access List on Routers.
• Allocate Internet Protocol (IP) addresses from ARIN to clients.
• Create Zone Files on BBO’s Authoritative Domain Name Servers.
• Setup of Email account for customer with POP3 and Exchange.
• Order new circuits (DSL, T-1, and T-3) and provision it with ILEC/CLEC.

Confidential, Falls Church, VA

Network Administrator

Responsibilities:

• Implemented Virtual Private Network to all Users using Checkpoint software.
• Configured and Installed 30% of the company’s computers.
• Build a database of the users on VPN.
• Upgraded all user systems to Windows 2000 Professional.
• Troubleshoot user problems in a company of 350 and increasing.

Confidential, McLean, VA

Technical Sales Coordinator

Responsibilities:

• Managed the entire OSHA project on Ergonomic Standards.
• In charge of bringing in more than 60,000 pages of documents.
• Implemented training course for new recruits— speeding profitability.
• Quality Control on document imaging processes.

Confidential, NY, NY

Computer Network / Technician

Responsibilities:

• Installed Windows 3.11, 95/98, NT 4.0 Workstation and Server.
• Troubleshoot Client Hardware and Software problems.
• Build a complete system from ground zero.
• Repair and Upgrading Client Workstations.
• Extensive knowledge in Bio’s, DOS and MS Windows.