Cliff Keller Email & Phone Number

• AWS Scripting• Develop Bash scripts to customize Packer AMI creation for software installation, updates and patching• Develop Yaml script for Cloudformation stack template• Develop Python/Bash script for Cloudformation deployment• Utilize Ansible and Jenkins to automate execution of Cloudformation stacks to manage cloud services.• Utilize GIT for scripting version control with CentOS.• AWS Automation• EC2 instances using AWS or Custom AMI- Select instance… Show more • AWS Scripting• Develop Bash scripts to customize Packer AMI creation for software installation, updates and patching• Develop Yaml script for Cloudformation stack template• Develop Python/Bash script for Cloudformation deployment• Utilize Ansible and Jenkins to automate execution of Cloudformation stacks to manage cloud services.• Utilize GIT for scripting version control with CentOS.• AWS Automation• EC2 instances using AWS or Custom AMI- Select instance type- Enable Public IP- Assign Storage- Enable Security Group access- Install custom software packages• VPC with Public and Private Availability Zones- Assign Subnets for Public and Private AZ - Attach Internet Gateway to VPC- NAT Gateway for Private AZ Internet Access- Bastion Host for AZ Access and Administration- Develop Route Tables for IGW and VGW traffic- Security Group and Network Access Control List for Secure VPC/AZ Access• Application Load Balancing- Load Balance Application between EC2 instance, ALB Security Group and Target Group- Autoscaling - Launch Template and Security Group for EC2 instances• Manage Route 53 for mission DNS resolution • Manage RDS Instances database for Developers• Manage Amazon S3 with KMS encryption to secure role based access to resources• - Backup and Archiving in S3 with Lifecycle Policies and versioning Show less

Mclean, Virginia, United States

• Integrate Firepower FTD• Manage FTDs with FMC in HA designi. Utilize FMC Port-channel feature for vPC uplink to 7K and ACI Fabricii. Convert FMC from SLR (Specific License Registration) to PLR (Permanent License Registration) utilizing the manage_plr.pl script to removing the Satellite Server requirement for License Registration of FTD for FMC.• Integrate ACI mode fabric into Nexus Data Center Design.• ACI Fabric Connectivityi. Add Fabric Node members ii. ACI APIC… Show more • Integrate Firepower FTD• Manage FTDs with FMC in HA designi. Utilize FMC Port-channel feature for vPC uplink to 7K and ACI Fabricii. Convert FMC from SLR (Specific License Registration) to PLR (Permanent License Registration) utilizing the manage_plr.pl script to removing the Satellite Server requirement for License Registration of FTD for FMC.• Integrate ACI mode fabric into Nexus Data Center Design.• ACI Fabric Connectivityi. Add Fabric Node members ii. ACI APIC Fabriciii. Interface Policiesiv. Interface Policy Groupv. Leaf Interface Profilevi. Switch Profile1. vPC2. vPC Domain• ACI Design• Tenant Designi. Network1. VRF2. Bridge Domainii. L2/L3 Out1. Tenant Fabric Exit Pointa. L3 Out b. L2 Out• Fabric Designi. Spine1. Leaf Interconnectsa. vPC associationii. Leaf1. Interconnect vPCs to APIC, Spine and Endpoints within Fabric• F5 Design• Viprion Design• Configure Trunks and Port-channel for VPC interconnect to Data Center Core• Big IP DNS, LTM and Bare Metal Server integrationi. Create DNS listenerii. Configure GSLB for load balancing between multiple Data Centers using LTM and Bare Metal Servers.• Big IP APM and LTM integration• Utilize iApp template to automate Proxy designi. Resource Pools1. Use LTM to create Resource Pool with health monitors for load balancing HTTPS pool membersii. Profile Creation1. Client SSL for traffic decryption2. ServerSSL for traffic re-encryption3. Access Profile with Access Policy for AD authenticationa. Create AAA server for AD domain authenticationb. Create Access Profile to select Profile Type and Languagec. Edit Access Profile to add Access Policyd. Create Virtual Server in LTM• Network Design Documentation• Created Visio and supporting documentation of existing network design• Core Interconnects• Spanning Tree Root placement• L2 Broadcast Domain• vPC Domain • vPC VLAN Trunk allocation• L3 design Show less

Mclean, Virginia, United States

Data Center/Campus Redesign• Hardware Refreshiv. Refresh all data center and campus network hardwarea. Data Center (C6509 and N5K-C5548UP upgrade to N5K-C5572UP)b. Campus (C6509, C3750G and C3750X to C3850) •Network Redesign• Document existing network scheme.• Created Visio and supporting documentation of existing network design• Design and documentation transition solution for implementation of the new design.• Created Visio and supporting documentation of… Show more Data Center/Campus Redesign• Hardware Refreshiv. Refresh all data center and campus network hardwarea. Data Center (C6509 and N5K-C5548UP upgrade to N5K-C5572UP)b. Campus (C6509, C3750G and C3750X to C3850) •Network Redesign• Document existing network scheme.• Created Visio and supporting documentation of existing network design• Design and documentation transition solution for implementation of the new design.• Created Visio and supporting documentation of transition network• Develop a System Design document for new network scheme in a lab environment• Provide proof of concept test plan• Produce solution for network infrastructure refresh implementation• Develop configuration items for design documentation• Present System Design to Customer Engineering Group• Implement new network scheme based on customer data flow and system requirements• Integrate 40G backbone throughout customer campus and Data Center • Firewall implementation• Integrate firewall at customer network perimeter• Document existing traffic flows entering and exiting the customers perimeter• Design and implement firewall Active/Standby failover solution at the customer perimeter• Design site DR site network• Allow replication to DR site through dedicated VPN Firewall/Encryption• Allow customer access to DR infrastructure during Disaster Recovery through Cisco Anyconnect Show less

Fairfax, Virginia, United States

Capture, analyze and define the scope of System Design Requirements• Create and Develop System Design document• Present System Design document to Engineering Group• Present proof of concept as required• Perform Test Plan development and testing procedure documentation• Present test results and recommendation to Engineering Group• Design documentation• Develop configuration items for design documentation• Create Method of Procedure for design implementation or… Show more Capture, analyze and define the scope of System Design Requirements• Create and Develop System Design document• Present System Design document to Engineering Group• Present proof of concept as required• Perform Test Plan development and testing procedure documentation• Present test results and recommendation to Engineering Group• Design documentation• Develop configuration items for design documentation• Create Method of Procedure for design implementation or automation• Pilot solution for network infrastructure architecture implementation guidance as required• Develop Interface Control Documents• Define customer interface requirements for service• Tier 3 engineering support for Juniper and Cisco enterprise routing and switching platforms• Juniper: M40e, M10i, M7i, J6350, J6300 and J2350 platform• Cisco: 3750, 2960 and 2950 • Tier 3 engineering support for Juniper and Cisco Firewall/Encryptors• Juniper: SSG 550 and NS 5GT• Cisco: ASA 5505 and 5510 • Perform Global Enterprise Infrastructure Engineering design and support.• Specializing in Class of Service • Design Enterprise Class of Service to prioritize network traffic from end to end by developing the design to present a predictable behavior on a per hop basis throughout the enterprise.• Develop firewall filter to classify and police network traffic in a multi-access environment.• Develop multi-access forwarding class schedulers based on customer traffic priorities to distribute shared resources consistently within the forwarding class.• Develop traffic control profiles to meet customer in-contract data rate across the enterprise by applying an output-traffic-control-profile to guarantee and control access across a shared resource. • Maintain consistent classification and rewrite rules from end to end to deliver a predictable behavior on a per hop basis throughout the enterprise.• End to end MPLS VPN design and support• Securely deliver a VRF routing instance across an MPLS LSP. Show less