Managing, Maintaining, and Troubleshooting Palo Alto Security Appliances, Panorama, and features. Configuring URL Filtering Policies, Decryption Policies, Wildfire, High-Availability, GlobalProtect, Routing, Prisma Access, and DLP (Data Loss Prevention)Designed a Greenfield Security Architecture solution to route locations through PA HA appliances based on Security Zones, App-ID, User-ID, and integrating LDAP for pulling dynamic User-Groups into Security Rules. Executed Implementation, Testing, and held weekly meetings across teams to optimize Security Policies and Standards.

IT Consultant

Created a Network Assessment for Mercuria Corporate Network. Building and Troubleshooting network solutions including PRTG Monitoring Solution for all Palo Alto appliances with appropriate MIB’s, and creating best-practice escalation policies and procedures. Improving overall Network Architecture and traffic flow, and replacing End-of-Life Remote Office 3850 switches with Cisco 9300 hardware.

● Working as part of a professional delivery services team to implement a wide array of technologies including ACI, DNAC, ISE, SD-WAN, Palo Alto, and Meraki for clients across the eastern region.● Scoping and reviewing various customer SOW – Implementing defined solutions with assigned engineers.● Building Greenfield remote offices solutions using Palo Alto 200/400/800 Series with features like Wildfire, URL Filtering, Panorama, Globalprotect VPN, Site to Site VPN, & OSPF/Route Tuning.● Executed a large scale remote sites hardware refresh using Aryaka and Palo Alto 220/820 appliances with Active/Active HA, and BGP peering on hub and spokes routers. Managing Day 2 Bootstrap Installs and Day 3 Cutover Testing.● Migrating Vlans from legacy Nexus 5k/7k into 9k ACI Spine and Leaf Architecture.● Refreshing EOL IDF/MDF lifecycle equipment such as Cisco Catalyst 3850’s or older to new 9300/9500 switches. Staging and configuring new switches and features as necessary.● Performing Network Assessments and Site Surveys for clients – building high and low level diagrams & Creating optimization/best practice recommendations.

● Network Engineer for a global wealth management company supporting a highly converged and secured TCP/IP corporate network with remote sites throughout the Globe.● Spearheading a major network project to improve network efficiency, security, and availability. Project includes these key components:● Overhauling corporate remote site architecture to conform to Cisco’s I-WAN design specifications offering Transport Independency, Application Based Failover, Performance Routing, and overall cost savings.● Upgrading all remote site’s WAN connections to AT&T MPLS circuits and coordinating on-field communication with ISP & Vendors.● Revamping the Network Monitoring Solution to create a more automated, and comprehensive alerting & escalation system utilizing WhatsUp Gold to retrieve SNMP data & configuring appropriate policies & actions.● Up keeping valuable documentation & diagrams to latest revisions to ensure compliance & informational accuracy.● Learning and designing using the latest cutting-edge technologies such as VMware NSX, Cisco ACI, & Palo Alto.● Supporting the following technologies: MPLS, BGP, EIGRP, OSPF, IDS/IPS, IPSEC Tunnels, HSRP,SIP/RTP, VOIP, CUBE, STP, ACL, Cisco’s Sourcefire, ASA & IOS, NX-OS, Nexus 5k,7k & 9k, Scrutinizer & Riverbed ARX Apps for NetFlow & Spanned Data’s Graphical depictions & Packet Analysis. Netscaler Load Balancer, Palo Alto Firewalls & Ansible for Network Automation.

● Working as a Tier 3 technician supporting a robust and cutting edge VOIP Cloud Platform.● Coordinating repairs for customer locations with Verizon and other Off Net Carriers.● Shipping and Configuring VOIP products (Mitel, Polycom) and cisco routers with on-site Broadview technicians.● Utilizing SIP and Minet Protocol for examining call examples and call quality issues.● Analyzing customer networks for VOIP issues by testing for Consistency, Bandwidth, Latency, Jitter, MOS, and by collaborating with customer’s internal IT for problem resolution.● Providing Fail-over service by configuring IP-SLA for automatic switch in case of router failure.● Troubleshooting and resolving network issues efficiently with focus on minimal downtime.● Supporting the following technologies: MPLS, T1, BGP, Access-lists, Frontline-Firewall, SIP/RTP, Cisco IOS, Traffic Analysis Tools.