SUMMARY:

• Information Technology Professional with extensive hands - on experience in all aspects of design, implementation and support of complex network and computer systems. Excellent communication and interpersonal skills, outstanding problem solving and troubleshooting skills.
• In-depth knowledge of Cisco network infrastructure including design, installation, configuration and troubleshooting of routers, switches, firewalls and wireless equipment. Extensive knowledge of Microsoft server technologies.

TECHNICAL SKILLS:

Network Switching: Spanning Tree, STP, VTP, VDC, VPC, EtherChannels, QoS, OTV

Network Protocols: TCP/IP, EIGRP, BGP, OSPF, RIP, HSRP, MPLS

Cisco OS and Management Interfaces: Cisco IOS, NX-OS, CLI and ASDM

Microsoft Servers: 2008, 2008R2, 2012, 2012R2, 2016

Server Technologies: Active Directory, DNS, DHCP, IIS, ADFS, HA Load Balancing & Clustering Services

Virtualization Products: VMware ESXi 5.1, 5.5, 6.0, Vblock, Microsoft Hyper-V Server 2008R2, 2012R2

Back Office Products: Exchange Server 2007, 2010, SQL Server 2008, 2012, Office 365, Skype for Business

Cloud Technologies: MS Azure, Google Applications

Network Monitoring: Cisco Works, MRTG, Cacti, NetScout, HP OpenView, Scrutinizer, SolarWinds Orion

Cisco Routers: 2851, 2921, 3845, 7206VXR, ISR-4331, ASR-1001X, ASR-1004

Cisco Catalyst Switches: 2960, 3750, 3850, 4507, 4510, 9348, (Sup IV, 7L), 6509E, 6513E (Sup 2T, 720)

Cisco Nexus Switches: 2248, 4000i, 5548, 5596, 5672, 56128, 7010, 7018, 7710

Meraki Switches: MS210, MS225

ASA Firewalls: 5508, 5515-X, 5516-X, 5525-X, 5550, 5580, 5585-X, Virtual Contexts, IDS, IPS

Meraki Firewalls: MX64, MX65

AAA Architecture: TACACS+, Radius, Cisco ACS

Cisco VoIP Technologies: Cisco Communication Manager, Unity

Cisco Wireless LAN Controllers: 4402, 4404, 2504, 5508

Cisco Wireless Access Points: 1242, 2702, 3602, 3702

Meraki Wireless Access Points: MR33, MR42

HP Switches: 8206zl, 8212zl, 10504, 10508

IP Enterprise Management: Infoblox IB1410

Network Load Balancing: Citrix NetScaler VDX8200, SDX18500

Remote Access: Cisco AnyConnect VPN, Microsoft Terminal Services

Document Management Systems: iManage; Open Text PcDocs

IBM System X & Blade Servers: 3650M1, 3650M2, 3650M4, HS23

HP ProLiant Servers: BL260, BL460, DL360, DL380, DL580, ML370, ML570

Cisco UCS Servers: C220M3, C240M3

SAN Products: HP MSA2000, EVA5000, SanSymphony, EMC, IBM StorWize3700, QNAP

Backup Products: Arcserve 11, Symantec Backup Exec 2012, 2015, NetBackup 6

Technical Project Management: Advanced skills in development project plan, change management, and version control using industry standards tools and best-practices, MS Project, Visio, and MS Office Suite.

PROFESSIONAL EXPERIENCE:

Network Engineer

Confidential, Paramus, NJ

Responsibilities:

• Responsibilities include network and systems design, implementation, maintenance and monitoring in the company Headquarters, Data Centers, offices and stores.
• Upgraded cisco catalyst 4500 and 3750 legacy switches in the data center and headquarters IDF’s with the cisco high performance redundant Nexus 56128 and catalyst 9348 switches allowing significant improvements in performance and reliability.
• Upgraded DNS & DHCP services based from the legacy Windows 2008 server platform to the redundant virtualized Windows 2016 servers which resulted in increased performance & reliability.
• Upgrading in company stores cisco legacy wired, security and wireless network equipment, with Meraki MS225 switches, MX65 redundant firewalls and MR42 wireless access points allowing stores to have high performance fully redundant network equipment combined with easy administration and maintenance permitted by cloud management.
• Performing network monitoring by utilizing SolarWinds Orion suite allowing proactively monitor network and systems performance and address potential problems before they affect company offices and stores connectivity, application delivery and phone communication.

Network Engineer

Confidential, NYC

Responsibilities:

• Responsibilities included network infrastructure installation, upgrade, maintenance and monitoring in the company headquarters, DR Data Center and regional offices.
• Upgraded & consolidated vpn remote access infrastructure consisting of cisco vpn concentrators into redundant ASA 5525-X firewalls allowing users secure, reliable remote access to the firm applications and services.
• Migrated middleware application from the stand alone physical servers to the virtualized system based on HP C7000 blade system.
• Upgraded and replaced network equipment, maintaining OS software up to date based on vendor’s recommendations, performed network and systems monitoring utilizing Cacti, MRTG and SolarWinds suites.

Senior Network Engineer

Confidential, RYE, NY

Responsibilities:

• Planned, designed, installed & upgraded network infrastructure in company global & regional HQ and remote offices. Implemented network infrastructure upgrade in AVON HQ utilizing Cisco Nexus 7018, 7710, 5672 switches and 2248 fabric extenders.
• Build High Performance SQL server farm based on a virtualized clustered Windows 2012R2 server systems housed in a IBM H Class Blade platform for the E-Commerce application that resulted in increased uptime, performance and manageability.
• Upgraded WAN Edge infrastructure utilizing ASR-1001X & ASR-1004 routers. Migrated standalone ASA 5550 firewalls, to a fully redundant ASA 5585-X firewall appliance bundle utilizing virtual contexts.
• Upgraded Wireless network infrastructure utilizing high performance Cisco WLC 5508 and AP 3702wireless lan controllers and access points.
• Participated in a company Disaster Recovery exercises simulating entire and partial loss of IT Infrastructure with subsequent restore of lost infrastructure in the DR Data Center within SLAs.
• As a result, AVON has a new efficient, resilient, fully redundant Core, Edge and Wireless network infrastructure.

Senior Network Engineer

Confidential, NYC

Responsibilities:

• Planned, designed and implemented Network Infrastructure upgrade in the new Data Center utilizing Cisco Catalyst 4510, Nexus 5596 and 4000i switches, 2691 routers consolidating network infrastructure into redundant, high speed and capacity capable infrastructure making an optimal platform for provisioning applications and services delivering it on time & within the budget.
• Upgraded wide area network infrastructure from sonic wall firewalls and disperse ISP providers to the Cisco ASA 5515-X firewalls and standardized on Cogent and Verizon ISP simultaneously achieving performance increase, redundancy, network stability & savings.
• Designed and implemented wireless network infrastructure based on Cisco 2504 wireless controllers & 3602 access points allowing users, firm tenants and visitors fully independent protected and secure wireless access.
• Administered & supported firm phone system infrastructure utilizing Cisco Communication Manager and Unity systems.
• Performed Active Directory Upgrade from legacy Windows 2003R2 to 2012R2 domain controllers bringing AD to the current level and able to support new applications and services.
• Managed Active Directory infrastructure; Organization Units, sites, subnets, group policies, users and groups to adhere to the business needs, security & compliance policies.
• Consolidated firm server infrastructure from disperse server systems into high capacity IBM blade server systems providing highly capable server platform for mission critical applications.
• Upgraded storage from a direct attached to a multi-tiered SAN storage environment, creating scalable highly redundant storage system, providing security and protection of snapshots and staggering backups.
• Planned and implemented secure redundant remote access solution based on Cisco SSL VPN & MS 2012R2 remote desktop services virtualized server farm, providing firm users secure dual authentication remote access to the firm’s applications & services.
• Designed and implemented firm virtual high availability environment based on VmWare ESXi 5.5 and Microsoft 2012R2 Hyper-V virtualization platforms that resulted in increased application uptime & reduced administrative overhead.
• Upgraded E-Mail system from standalone Exchange 2003 environment to the high availability clustered, virtualized Exchange 2007 servers environment, building clustered server farm for the mailbox, hub transport & edge servers. Evaluated and performed migration of on premises exchange 2010 email system to the Office 365 Platform.
• Implemented Cloud based Email redundancy, protection & archiving utilizing Google Applications Continuity & Vault services allowing users continue to use email during email maintenance, access to archived email & protection against email malware & viruses.
• Upgraded firm mission critical multi-tiered PcDocs document management system consisting of DM, MS File and SQL servers from a standalone system into redundant virtualized environment.
• Implemented firm backup and Disaster recovery infrastructure utilizing Symantec Backup Exec & IBM StorWize SAN creating two-tier onsite and offsite hierarchical backup system allowing for a quick backup and restore of mission critical data, applications and long-term archiving.

Senior Network Engineer

Confidential, NY

Responsibilities:

• As a member of engineering team implemented major upgrade in Confidential school’s network infrastructure utilizing Cisco Catalyst 6509, 6513, 3560 and 3750 series switches, 3745 and 3845 routers, ASA 5525 and 5550 firewalls, 4402 and 4404 Wireless LAN controllers and 1242 series wireless access points. As a result of this project DOE schools have new cost-effective, fully redundant CoreWired and Wireless network infrastructure.

Senior Network Engineer

Confidential, Tarrytown, NY

Responsibilities:

• Designed and implemented LAN upgrade in headquarters using Cisco 6509, 3560 and 3750 series switches allowing gigabit network access to the servers in the Computer Room and user’s desktops, providing increased uplink bandwidth from the access to the core switches, redundancy and high availability at the network core.
• Upgraded firm internet access infrastructure from 2 separate T1 lines to 6 T1 lines multilink bundle increasing 3 times available bandwidth, allowing much improved remote access and web hosting.
• Designed and implemented B2B site to site and remote access VPN solutions utilizing Cisco ASA 5520 firewalls allowing business partners and sales and marketing groups secure redundant high speed access to the corporate applications and services.
• Planned and implemented in headquarters and satellite offices wireless access solution based on Cisco 1130 access points working in conjunction with cisco wired infrastructure allowing marketing representatives and remote users roam between offices and have seamless wireless access to the network applications and services.
• Upgraded and consolidated firm stand-alone MS SQL 2000 servers into high-end redundant MS SQL 2005 cluster systems resulting in less overhead, better utilization and increased availability.

Senior Network Engineer

Confidential, New York, NY

Responsibilities:

• Planned, designed and implemented entire LAN infrastructure upgrade in NY headquarters and remote offices utilizing Cisco 6513, 6509 and 4507 series switches allowing gigabit network access to the user’s desktops, providing redundancy and high availability to the network core, utilizing MSFC modules and HSRP and EIGRP routing protocols, that resulted in increased productivity due to much improved network up-time and quicker application and data processing.
• Designed and implemented firm-wide fully meshed VPN network utilizing Cisco 2651, 2691, 3745 routers and PIX515E and 525 firewalls allowing remote offices to have a redundant path to the headquarters and other remote offices, giving benefit of secure local internet access w/o saturation of WAN bandwidth with Internet traffic.
• Planned and implemented secure redundant remote access solution utilizing Cisco authentication-proxy, Cisco Secure server and RSA radius server, giving users secure redundant token based remote access solution to the Citrix, Exchange and Elite (Accounting) servers.
• Designed and implemented Enterprise based Infrastructure monitoring solution based on CA-Unicenter Cisco Works LMS, NetScout and nGenius applications, allowing proactive monitoring and timely addressing of network, storage and applications performance issues.
• Designed and installed MS ISA 2006 server farm utilizing MS ISA array and network load balancing cluster technology providing users with the high capacity redundant, load-balancing internet access solution.
• Planned, designed and implemented E-Mail upgrade from MS Exchange 5.5 to Exchange 2003 environment building clustered server farm for the database back end servers and NLB clusters for the Exchange bridgehead servers, that resulted in increased productivity due to improved servers uptimeand quicker application and data processing.
• Replaced Stand Alone dispersed tape backup solution with the centralized staggered backup system utilizing MS Storage Server, Symantec NetBackup & BacupExec with SanSymphony & MSA 1000 Fibre-channel system, allowing fast SAN based scalable backup solution for the servers & applications.
• Designed and implemented Firm-Wide wireless network utilizing Cisco 1200 aironet access points and wireless vlan and trunking technologies, working in conjunction with cisco switches allowing users and firm clients while working together on a project secure, independent wireless access to their respective network environments and applications.