SUMMARY

• Resourceful Network Consultant with strong knowledge in Routing, Switching, Data Center, Wireless, Network Automation, Application Control and Cloud Solutions.
• Solid Architect and Engineering background. Experience with several Managed Service Providers, multi - vendor infrastructures, solution planning, and design. Aptitude to work autonomously.
• Created, designed and troubleshoot various types of networks and technologies, using different protocols and topologies including Dynamic Routing Protocols, Dynamic and Static Security Control, Network Virtualization.
• Configuring, monitoring and maintaining virtualized environments with VMware, Citrix, OpenStack, Hyper-V
• Experience with WAN acceleration devices like Riverbed, Cisco, Sylver Peaks, Bluecoat, Zscaler, Citrix.
• Experience with Security devices: Cisco, Fortinet, Checkpoint, Palo Alto, Juniper, Sonicwall, WatchGuard
• Experience with Automation Tools: SDN, Cisco ACI, VMware NSX, SaltStack, Ansible, Chef, Puppet, OpenStack
• Designed command line tools for network engineers to make easy script calls, Python, TCL, EEM, C++
• Design, implementation and troubleshooting of Tunnel Technologies like static, DMVPN and GETVPN
• Designed showcases using physical equipment, GNS3, Quagga/Zebra, VIRL
• Developed multiple SOW for teh other engineers in teh team
• Worked on environments dat follow specific frameworks like Agile, Six Sigma, Scrum
• Expert in teh design and delivery of cost-effective, high-performance information technology infrastructures and applications to address complex business problems
• Experience working with several monitoring tools like Nagios, Spiceworks, Orion, PRTG, Opsmanager, Ipswitch,
• Experience with several Database Paradigms and Big Data
• Experience with compliance regulations: ITIL, PCI, HIPAA and SOX
• Languages: Spanish native speaker and fluent in English

PROFESSIONAL EXPERIENCE

Confidential

Sr. Network Engineer Consultant

Responsibilities:

• Focus on consulting services, design recommendations and deployment.
• Deployed and redesigned several sites
• Redesigned Primary and Secondary Service Providers for Internet and MPLS services
• Redesigned their Fortinet infrastructure
• Redesigned their Wireless infrastructure, mix of Cisco and Fortinet
• Redesign their Application Access Control within FortiManager and prepared it for future changes
• Designed their Zscaler implementation
• Designed teh migration from Data Centers to AWS as part of teh new company direction
• Designed teh AWS Network and some services
• Designed and migrated some microservices and Windows IIS Services to Azure
• Worked with Cisco Nexus and IOS firmwares
• Redesigned their Riverbed infrastructure. Backups, Physical Design, Logical Design, Rules, Templates
• Administer and redesigned their Solarwinds implementation to an Enterprise level with multiple sites
• Redesigned their Routing and Switching Standards, mostly Cisco platforms.
• Redesigned several Routing environments to fit their Enterprise level, adding QoS, replacing static to dynamic routing, redirecting traffic to their least used pipes.
• Designed a SDN environment using OpenStack
• Redesigned their External DNS to use Cloudflare
• Redesigned their Citrix NetScaler Load Balancer implementations
• Installed and configured their Cacti solution to increase network visibility
• Redesigned their Active Directory based Websense
• Created tools using Python to automate network tasks
• Delivered several reports to present to teh business for specific projects
• Worked autonomously on many projects, from discussion, design and implementation
• Tested Silver Peaks and IWAN as part of a SD-WAN trial
• Tested Fortinet SD-WAN product to compare to teh other solutions
• Tested Meraki products for their Wireless refresh
• Troubleshoot and administer their AlgoSec implementation
• Created several SOWs to improve support quality

Confidential

Sr. Network Engineer

Responsibilities:

• Maintained several Networks concurrently using a general ticketing system.
• Oversaw onboarding process, to bring customers with an obsolete design to a more current, redundant and resilient.
• Maintained a myriad of vendors including Palo Alto, Cisco, Fortinet, Checkpoint, Meraki
• Worked with several Palo Alto products, including PA-5060, Wildfire and Panorama
• In teh Datacenter environment, worked with several products including several brands and models: Cisco Nexus 2k, 3k, 5k, 7k; HP switches, Brocade switches, Juniper.
• Experience with Cisco ASA 5500-X Series and FirePower 4100 and 9300 Series.
• Experience with teh Cisco FirePower 4110
• Installed, configured and maintained several monitoring software like Solarwinds, PRTG, Nagios, Cacti, Spiceworks, OpManager, New Relic, Cisco Prime Infrastructure, Custom made software as well
• Configured and maintained several Load Balancers and Concentrators like Citrix Netscaler and Gateway, Juniper Pulse Secure, Kemp, F5, Blue Coat Proxy
• Managed several varied Wireless environments with Cisco, HP, Aruba, Meraki
• Inherited, configured, redesign and maintained EMC RSA deployments
• Designed and developed several RADIUS implementations
• Configured and maintained Steelhead products. Automated many weekly reports
• Developed Chef and Puppet automation to ease transitions and acquisitions
• Inherited and maintained several VMware products, including teh Cloud Foundation with vRealize, vCenter, NSX, vSAN
• Redesigned customer environments to fit teh business direction
• Extensive work with MPLS, DMVPN, GRE, IPSEC and vendor specific Tunneling and Label protocols
• Worked with OpenStack as SDN solution
• Using Python, scripted several mundane tasks and created a useful library dat was key on customer onboarding to review current design, match found devices with customer provided spreadsheets, understand AAA implementations, Security Permissions on each device
• Maintained TACACS implementations with Cisco ACS
• Continued education by using a quarterly goal system
• Maintained several MPLS networks, mainly using Cisco routers and switches
• Maintained several voice implementations using Cisco Unified Communications Technologies
• Maintained several Cisco Wireless Controllers with over 500 Access Points
• Configured, redesigned and maintained customers with Anyconnect and Forticlient implementations
• Constantly continued education by providing a quarterly goal dat included more TEMPthan one certification or course and peer reviewed design proposals for each company
• Maintained perfect communication with customers and continue driving and setting expectations
• Recommended and delivered network redesigns for each customer, as part of teh onboarding process and as an ongoing healthy relationship

Confidential

Sr. Network Engineer

Responsibilities:

• Install, troubleshoot and maintain Cisco Routers, Voice Gateways, Switches, Firewalls and Wireless Controllers.
• Experience with Cisco ASA 5500-X Series and FirePower 4100 and 9300 Series.
• Experience with teh Cisco FirePower 4110
• Maintained other vendors like: Checkpoint, F5, Force10, Fortinet, and Juniper
• Specialized in Routing OSPF and BGP
• Optimized teh LAN environment using STP and restructuring teh L2 to L3 design.
• Involved in projects with InfiniBand and FCoE with Mellanox and Nexus platforms.
• Apply teh use of software’s like Opnet, Solarwinds, Infoblox, CounterACT, Nagios, Domain Manager, ASDM, Gigamon, ExtraHop and others locally developed.
• Design and implemented new sites (acquisitions): integration to teh MPLS cloud, route filtering with BGP across teh tunnel and OSPF locally, Checkpoint Firewall configuration, documentation and local implementation.
• Reviewed migration to Palo Alto Networks for their security edges
• Continued education by using a quarterly goal system
• Developed several scripts using Python
• Developed an application for managers to visualize their ticketing system using Python
• QoS implementations for L2 and L3 environments
• Developed TCL and EEM scripts for specific implementations aiming to hundreds of switches
• Troubleshot Cisco ACE for TACACS+
• Worked directly with F5 Load Balancers, customizing reports and automating tasks
• Redesigned teh MPLS cloud to use DMVPNs or GETVPN instead of static Tunnels.
• Troubleshot issues based on a locally developed ticketing system.
• Worked with several SDN implementations
• Designed and implemented Cisco ACI
• Designed and implemented OpenStack solutions
• Configured and maintained SaltStack
• Worked in teh integration of teh NAC Forescout CounterACT within teh Network
• Worked directly with Service Providers to troubleshoot circuit issues
• Developed scripts to solve network and application problems using Python

Confidential

Sr. Network Engineer

Responsibilities:

• Install, troubleshoot and maintain Cisco Routers, Switches, Firewalls and Wireless Controllers.
• Experience with Cisco ASA 5500-X Series and FirePower 4100 and 9300 Series.
• Experience with teh Cisco FirePower 4110
• Install, troubleshoot and maintain HP Procurve Switches and Wireless Controllers, also using HP PCM for compliance regulations and centralized configuration point.
• Install, troubleshoot and maintain Juniper SRX and SSG
• Install, troubleshoot and maintain Meraki Networks, Fortinet Firewalls, Adtran Routers.
• Maintaining over 1000 VPNs of all kinds for clients.
• Maintained OpenStack
• Monitoring our network infrastructure with PRTG, Nagios, Kiwi and Scrutinizer.
• Redesigning networks for managed clients and new projects.
• Worked on site for many customers, to provide visual presence
• Day to day troubleshooting tasks, especially with VPNs
• Optimizing current devices configurations; preparing Network Diagrams; Suggesting network changes, Performing Network Assessments for new clients.
• Maintaining Compliance at all cost, using RFC (Request for Change), SOP (Standard Operation Procedure), SOW (Statement of Work), RCA (Root Cause Analysis)
• Worked on call rotation

Confidential

Sr. Network Engineer

Responsibilities:

• Installed and maintained several ASA Firewall 5510: ACL, NAT, QoS, VPN
• Installed and maintained several Cisco Catalyst 3560.
• Installed and maintained ESXi Server
• Installed and maintained an Astetrisk Elastix PBX Server: IVR, Ring Groups, Extensions, ACL, Users, iSymphony, FOP, Remote Extensions, Forwards, Voicemail, MOH, and Email.
• Installed and maintained Vtiger CRM: Profiles, Users, Groups, Access Rules, PDF, Email, Templates
• Installed and maintained an Active Directory Server with a backup server.
• Installed and Maintained Great Plains CRM from Microsoft using a SQL database
• Installed and Maintained other customized Server with SQL database integration
• Installed and maintained a Terminal Server
• Provided new design for a tunneled network to interconnect sites
• Setup and maintained a backup server using local backups and online backups with iBackup software
• Setup and maintained antivirus using Symantec.cloud services
• Maintain current email using Appriver’s services
• Maintain current Fax using Ring Central services

Confidential (Business Computer Associates)

Network Engineer

Responsibilities:

• Designed networks on a LAN and WAN scale using mixed equipment (Cisco, Barracuda, HP, Dell, Fortinet) and Routing Protocol (BGP4, OSPF, EIGRP, IGRP, RIPv2), Routed Protocol (TCP/IP, SCCP, SIP).
• Implementation, Maintenance and Administration of Cisco Pix Firewalls, ASA Firewall, Routers, Switches
• Implementation of QoS for VoIP Cisco phones, EtherChannel, Rapid Spanning-tree (RSTP), PortFast, VLAN, VTP, AAA, IPv6.
• Implemented traffic filters using Standard and Extended access-lists and Prefix-lists.
• Implementation, Maintenance and Administration of Cisco VOIP Technologies
• Migrate Physical Servers to Virtualized environment in VMWare and Citrix
• Build, configured and Deployed VMs and Templates in VMWare ESXi 5
• Maintained and redesign Networks for each customer
• Completed Physical-to-Virtual (P2V), Virtual-to-Virtual (V2V) and Virtual-to-Physical (V2P) migration of several OS (Windows and Linux based)
• Implementation and Configuration of Disaster Recovery Plans for different types of environments including physical and virtualized.
• Implemented SNMP on devices to allow for network management.
• Implementation of SSH, DHCP, DNS, FTP, TFTP, MPLS, Frame Relay.
• Implementation, Maintenance and Administration of Barracuda Load Balancer (340, 440).
• Implementation, Maintenance and Administration of PBXs (FreePBX, trixbox, Vicidial, Asterisk, Elastix).
• Implementation, Maintenance and Administration of Active Directory (Group Policy, Scripting)
• Implementation, Maintenance and Administration of Backup Software and Services (Symantec, NovaBackup, Ahsay)
• Implementation of RADIUS Servers.
• Implementation of Wireless Solutions with Wireless LAN Controllers (WLC), Cisco Wireless Control System (Cisco WLC), using LWAPP Layer 3.
• Visited customers on a regular basis to provide physical assistance
• Implementation, Maintenance and Administration of SQL, MySQL databases.

Confidential

Network Engineer

Responsibilities:

• Designed their Network Infrastructure with limited resources
• Implemented several Open Source applications to optimize teh business direction
• Designed their Production and Development virtualized environment
• Designed their Wireless Infrastructure
• Designed their Remote Infrastructure
• Migrated teh business from a Workgroup environment to Active Directory
• Consulted for their application development team in regards to teh network portion
• Deployed their application network solution using encrypted USB keys
• Deployed their Automated Linux environment

Confidential

Network Consultant

Responsibilities:

• Designed and implemented a Customized PBX solution for a client. Designed a new type of queuing system for this client. Developed teh project in a timely manner.
• Designed and implemented a few security implementations for a client. Implemented Cisco Firewall Solution with Failover and segregated teh network using VLANs and protected switchports with port security features.
• Designed and implemented a Cisco NAC (Network Admission Control). Teh switching design had to be redesigned as well.
• Designed and implemented a Hierarchical Switching Design for a customer dat was upgrading teh switching infrastructure, using Cisco 6500 Series with VSS.
• Troubleshot PBX voice codec issues dat were affecting a customer in critical time.
• Troubleshot customer security holes dat were causing constant attacks to teh network.
• Troubleshot and redesign a Tunneled network for a client with multiple locations. Using protocols like MPLS, GRE, IPsec, BGP and OSPF.
• Developed server-side program dat gather’s information from Checkpoint CMAs, including all configurations; then developed a website using Web2py dat would display dat information to specific requestors. Useful for clients dat needed to see a segment of teh firewall, not all of it.
• Developed an application dat gathers devices information from Solarwinds, specially all teh devices IP addresses and MAC; then based on a specified source and destination, teh program would automatically connect to each device in teh path. Useful when teh network TEMPhas ICMP disabled.
• Developed an application dat converted a convoluted Access List (ACL) to many ACLs dat formed part of a route-map. Then created a web application dat would take an input dat would be converted to an ACL line and deployed in teh correct ACL.
• Configured a Network using Integrated IS-IS in teh core routers
• Developed a Python plugin for HPCC environment