Over 25 years of experience in the network and application engineering field * Cisco ACI: Multi-Site/Pod with L2Out, L3Out, L4-L7 Service Graph• Data Center VxLAN: Cisco DCNM and Arista CloudVision VxLAN• Cisco and Arista VxLAN – MPBGP, L2/3 VNI Bridging/ Routing• Load Balancer: : F5 LTM/GTM; Citrix NetScaler, XenServer, XenDesktop & XenApp; Riverbed Steelhead• Network Automation: Python, Ansible, YAML, Terraform• Cisco ACI includes integration to VMWare VMM, L2OUT, L3OUT, L4-L7 Service Graph Insertion• Campus LAN & Data Center: STP, vPC, vPC+, VSS, Fabric Path, VxLAN in Cisco ACI and VMware NSX-v, GENEVE VMare NSX-T; VxLAN: Cisco DCNM, Arista CloudVision• Cisco DMVPN for large enterprise with BGP• SD-WAN: Cisco Viptela, Meraki, Fortinet, SilverPeak, VeloCloud, Palo Alto PRISMA SDWAN, PRISMA-Access • Palo Alto: Panorama, SDWAN; PRISMA Access• Cloud Based Data Center: AWS, Azure, Google, Aviatrix Multi-Cloud Network Architecture• Routing Protocol: TCP/IP, EIGRP, OSPF, BGP, MPLS, IPSec VPN, MultiCast, DMVPN• VPN: GRE, mGRE, SSL, IPSec, DMVPN, Aruba Global Protect, Cisco AnyConnect• Wireless: Juniper MIST, Cisco WLC, Meraki, HPE/Aruba Master Mobility & Controllers• Fortinet: Fortitoken SSL-VPN; IPSec VPN; ADVPN; SD-WAN; FortiManager/FortiAnalyzer• AWS/GCP/Azure Integration: Direct Connect, Setup VPCs, Transit Gateway, Subnet Routing, Firewall Security, Load Balancers• Aviatrix and Alkira: Multi-Cloud (AWS/GCP/Azure) Integration using Aviatrix and Alkira• Security: NGFW Palo Alto, Panaroma, Cisco FirePower & ASA, CheckPoint, Fortinet, Barracuda, Juniper firewalls

• Lead Network Engineering in design, implementation, support, and documentation of network/security/data center includes various below technologies. • DMVPN with IP-Sec and BGP, PKI Trustpoints, ISE identity • Data Center VxLAN using Cisco DCNM• WAN SD-WAN: SiverPeak, Fortinet, Meraki. 80 Sites with topologies spoke-to-spoke and spoke-to-hub. MPLS primary and Internet secondary. Traffic patterns are defined by the SD-WAN Overlay Business Intent Overlay (BIO).• Fortinet and Palo Alto Firewalls: Internet Egress, DMZ, Global Protect with Split tunnel and No Split Tunnel setup, IPSec VPN tunnels,• Aviatrix Controllers to Setup and Manage Gateways in AWS:• Data Centers: VPCs, MLAG, VxLAN DCNM• AWS/Azure/GCP Design and Deployment:o Cloud Transit Network: Direct VPN/VNET Peering. Hub/Transit VPC interconnects multiple VPCso Aviatrix MultiCloud Software Defined Networks: Using Aviatrix Controllers and Gateways to connect AWS, Azure, GCP and On Premise Data Centers* WAN: DMVPN, BGP over MPLS, * Campus LAN & Data Center: STP, vPC, vPC+, VSS, Fabric Path, VxLAN in DNM, Cisco ACI and VMware NSX-v, GENEVE VMare NSX-T; VxLAN: Cisco Data Center Network Manager (DCNM) v11, Arista CloudVision* Cloud Based Data Center: AWS, Azure, Google, Aviatrix Multi-Cloud Network Architecture (Overlay)* AWS/Azure/GCP Cloud Based Virtual Data Centers: Deep experience architecting and migrating applications to the cloud (AWS/Azure/GCP), * Routing Protocol: TCP/IP, EIGRP, OSPF, BGP, MPLS, IPSec VPN, MultiCast, DMVPN* VPN: GRE, mGRE, SSL, IPSec, DMVPN, Global Protect, Prisma, Fortnet, Cisco AnyConnect* Security: NGFW Palo Alto, Panaroma, FirePower, ASA, CheckPoint, Fortinet, Barracuda, Juniper* Wireless: Cisco WLC FlexConnect, Meraki, HPE/Aruba Master Mobility & ControllersNetwork Access Control (NAC): Cisco ISE, Aruba ClearPass, Radius, 802.1X* WAN Optimization: F5 LTM/GTM; * Extrahop Network Detection & Response (NDR):

SD-WAN: Viptela, Meraki, Fortinet, SilverPeak, VeloCloudCampus LAN & Data Center: STP, vPC, vPC+, VSS, Fabric Path, VxLAN in Cisco ACI and VMware NSX-v, GENEVE VMare NSX-T; VxLAN: Cisco Data Center Network Manager (DCNM) v11, Arista CloudVisionNetwork Vendors: Cisco, Arista, Juniper, Fortinet, HP/ArubaHP/Aruba: Aruba: Core/Data Center: Aruba CX10000, CX 8400, CX 8360, CX8325, CX 8320, CX6400, CX63Aruba: Access: CX6xxx, CX41xx, CX5400R, 3810, 29xx, 25xx Cloud Based Data Center: AWS, Azure, Google, Aviatrix Multi-Cloud Network Architecture (OverlayRouting Protocol: TCP/IP, EIGRP, OSPF, BGP, MPLS, IPSec VPN, MultiCast, DMVPNVPN: GRE, mGRE, SSL, IPSec, DMVPN, Aruba Global Protect, Cisco AnyConnectSecurity: NGFW Palo Alto, Panaroma, FirePower, ASA, CheckPoint, Fortinet, Barracuda, JuniperPalo Alto Training Certifications: Configuration , Design and Operation, Optimizing Firewall Threat PreventionWireless: Cisco WLC FlexConnect, Meraki, HPE/Aruba Master Mobility & ControllersNetwork Access Control (NAC): Cisco ISE, Aruba ClearPass, Radius, 802.1XWAN Optimization: F5 LTM/GTM; Citrix NetScaler, XenServer, XendDesktop & XenApp; Riverbed SteelheadSAN: FC/FCoE to support SAN solution from Dell EMC, HPE Nimble/3PAR, IBM, NetApp Fiber Optic Carrier Integration: SONET, DWDM, ATM, F/R, ISDN, PSTN, T1/E1 T3/E3, Metro Ethernet, MPLSVoice over IP: Cisco Unified Communication Manager, Call Center, Avaya, SIP, MGCPAWS/Azure/GCP Cloud Based Virtual Data Centers:Deep experience architecting and migrating applications to the cloud (AWS/Azure/GCP), Aviatrix Multi-Cloud Networking and Security: Multi-Cloud Network Segmentation, Service Insertion & Chanining, Enteprise Operational Visibility, Secure Cloud Access, Secure Ingress and Egress, Cloud-NativeNetworking: VPC, VPC peering, Direct Connect, VIFs, PrivateLink Services, Subnet, IAM, Cloud Front, Route 53, Transit Gateway, SG, NACL, peering, route table, NAT, Load Balancers, Gatway.

o Cisco Data Center: VxLAN and ACI and Data Center Network Managero Cisco ACI Proof of Concept and Greenfield Deploymento Citrix: NetScaler Load Balancero Aruba: Core/Data Center: Aruba CX10000, CX 8400, CX 8360, CX8325, CX 8320, CX6400, CX63o Aruba: Access: CX6xxx, CX41xx, CX5400R, 3810, 29xx, 25xx o Configure: VSF (VSS/IRF/Virtual Chassis) and VSX (vPC/Distributed Trunking/DRNI/MLAN - Active Gateway Architectureo VxLAN: Configure Multi L2-VNI Bridging – Using Data Plane Learning with Headend Replicationo Aruba Wireless: ArubaOS 8.2 Virtual Mobility Masters (VMM) and Virtual Mobility Controller (VMC) o SD-WAN: SilverPeak, Fortinet, Meraki, VMWare VeloCloud to replace traditional DM-VPNo Cisco Meraki SD-WAN: Using Cloud Portal to Configure Meraki Firewalls, Switches, Access Points (APs) for multiple siteso Configure VLANs, Subnets, Trunk/Access Portso Configure Hub & Spoke and Full Mesh IPSec VPNso Configure Layer-7 Application Firewallso Configure SD-WAN on Meraki MX: using Dual-active path (Active-Active VPN; Policy-based Routing (PbR); Dynamic Path Selectiono Build SD-WAN policies based on service latency, jitter, packet loss--------------------- o Migrating Legacy VPN/DMVPN to SD-WANo Routing: EIGRP, OSPF, BGP (over Ethernet and VxLAN)o Security: Next Generation Firewall Palo Alto – Internet Failover; App-ID Security Policies; IPSec VPN Tunnels; Global Protecto SD-WAN: Viptela for large enterprise setup; Small set up with: Meraki, Fortinet, SilverPeak, VeloCloudo Data Center ACI & VMware NSX-T; Fabric Path; vPC, vPC+ o Network Access Control (NAC): Cisco ISE, Aruba ClearPass, Radius, 802.1Xo Aruba ClearPass Design/Configuration/Troubleshoot/Support: 801.X authentication for Wired, Wireless, BYOD o WAN Optimization: F5 LTM/GTM; Citrix NetScalero Security: NGFW Palo Alto, FirePower, ASA, CheckPointo Wireless: Cisco WLC FlexConnect, Meraki, HPE/Aruba Master Mobility & Controllers

Teletrac Navman provides GPS fleet tracking and management solutions for over 500,000 vehicle worldwide. I were the only one network engineer in Production environment to perform the below summarized tasks:• Data Center Migration:o Design and Implement “Pseudo-wired tunnel - L2 Bridging Across and L3 Network (L2TPv3)” to connect 2 data centers over the Internet to allow gradual network, server, storage migrationo Design and Implement Internet BGP redundancyo Design and implement redundant VPN tunnels to providers’ networkso Design and implement security firewall environmento Design and implement F5 Load Balancers to load balance traffic to server farmso Design and implement LAN network including Core Stack Switches, EtherChannelo Design and implement SAN network include: EMC VNX storage; SAN switches: Brocade FC switches; Juniper 10 Gbps• Routing and Switching: BGP, EIGRP, STP, Switch Stack, Virtual Chassis, LAG EtherChannel• Storage: Brocade Fiber Channel and Juniper iSCSI• Provide network solution including security and load balance for application deployment• On call support for both network and critical applications

Lineage Logistics is a Warehousing and Logistics Company built to deliver sophisticated, customized, and dependable cold chain solutions. Lineage has over 150 large sites. My work as Sr. network lead engineer to lead a group of 8 people to design, implement, support network infrastructure: on premise data centers, large/medium/small sites, and cloud-based Amazon AWS and Microsoft Azure virtual data centers.Technologies involved:AWS/Azure/On-Premise Sites/Data Center Integration:Migrate on premise servers, data base to clouds. WAN primary AT&T Netbond/DirectConnect/ExpressRoute with IPSec VPN as backup for AWS/Azure/On-Premise Sites/Data Center communication. Setup “private” and “public” peering connection. Setup intra/inter/transitive peering with Aviatrix controllers and gateways.Setup cloud Barracuda firewall Intrusion Prevention, Port Forwarding, and Web Application Firewall (WAF).Azure Cloud Redundant Data Center Network Connectivity to support critical application using Microsoft Traffic Manager, Barracuda firewall port forwarding, and Riverbed Steel Head WAN Optimizer. Data Centers: Cisco vPC, Fabric Path, VxLAN with BGP EVPNWAN redundancy: MPLS failover to IPSec via AT&T ANIRA Netgate solutionWAN: MPLS/BGP, IPSec, DM VPNs, SD-WAN, SonetSecurity: Cisco ASA firewalls, Barracuda, Juniper, SonicWallCloud-based Platforms: Amazon AWS, Microsoft Azure, Barracuda FirewallsSoftware Defined (SD) WAN: Riverbed, Cisco MerakiCisco Platforms: Nexus 9000.7000, 5000, 2000, 1000 switches (NxOS); Cisco 2900, 3800, 3900, 4500, 6500, 7000PIX/ASA firewall and VPN; ACS AAA, VoIP CUCM, Unified Contact Center; Video ConferenceWAN Optimization: F5 BigIP Load Balancers; Riverbed Steelhead and Interceptor; Citrix Secure GatewayWireless: RF planning; 802.11 a/b/g/n; Layer-2/3 roaming; Encryption: (WEP, TKIP, AES, CCMP); Authentication (SSID, EAP); Access Control (ACL/Firewall, 802.1x); Cisco and Aruba APs and Controllers

Epicor Software Corporation is a global leader delivering inspired business software solutions to the manufacturing, distribution, retail, and services industries. With over 40 years of experience serving small, midmarket and large enterprises, Epicor has more than 20,000 customers in over 150 countries. Epicor enterprise resource planning (ERP), retail management software, supply chain management (SCM), and human capital management (HCM) enable companies to drive increased efficiency and improve profitability.• LAN with access, distribution, core layers – advance IP routing and switching with standard EIGRP and legacy OSPF; converging EIGRP and OSPF by BGP. Using Cisco platforms 3700, 4500, 6500• WAN with MPLS/BGP, Internet backup, Point to Point – using Cisco ISR-1001, 3945; WAN Optimization Riverbed Steelhead and Interceptor• DMZ with Cisco ASA Firewall, Site-to-Site and Cisco AnyConnect enteprise users’ VPN; SonicWall and Checkpoint firewall; F5 BigIP Load Balancers; Riverbed Steelhead and Interceptor• Site-to-Site VPNs; Cisco AnyConnect Client VPN; DMVPN Spoke-to-Spoke On-Demand VPN• New Data Centers and Data Center Consolidation with Nexus 7000, 5000, 2000 series with NxOS; VMWare ESX, SAN, HP Proliant servers, HP 3PAR and EMC VMAX and Clarion Storage Arrays in cunjunction with Brocade SAN switches.• VoIP and Video with end-to-end Quality of Service; VoIP CUCM, Unified Contact Center; H.323/H.320 Polycom Video• Cisco’s Secure Access Control System (CSACS or ACS) to implement Authentication, Authorization, and Accounting (AAA) • Lead the technical requirements of the business area/project, promote knowledge sharing and the provision of deep technical expertise in Voice and Design and Develop architectural standards for Windows and Unix-based systems.• Provide training support to tier-1 and tier-2 Network Operation Centers (NOCs)

• Work with Business Units to develop detailed plans, design, implementation to consolidate data centers to deliver hosting environment which include secure front-end and back-end secured DMZ. Ensure network team attains 90% SLA. Ensure redundancy infrastructure.• Enterprise and Corporate Extended WiFi – Cisco 5500, 7500, 2500, WLCM2 – to provide wireless for corporate offices and home users’ offices.• Network and security infrastructure to support various enterprise applications, video conference, and call centers.• Provide training support to tier-1 and tier-2 Network Operation Centers (NOCs)• Design and Develop architectural standards for Windows and Unix-based systems.• Build, develop, and maintain all Windows and Unix-based systems network engineering organization, including OS technical support, software/systems programming, and related data center activities • Tracks industry trends and maintains knowledge of new technologies to better serve the enterprise’s architecture needs.• Works to accomplish organizational goals that are consistent in supporting corporate objectives • Executes multiple project priorities and provides technical and administrative support as necessary; ensures appropriate management is apprised of operational status of projects • Communicates critical information to management, users, and staff as necessary • Provide business and technical consultation and support to users and other technical units • Lead the technical requirements of the business area/project, promote knowledge sharing and the provision of deep technical expertise in Voice and Design and Develop architectural standards for Windows and Unix-based systems.

Responsible for network and voice engineering: planning, design, implementation, troubleshooting, support and budget of IP/MPLS network which comprise of over hundred campuses, 5 VoIP Call Centers, and 2 Data Centers. The network includes IP BGP, MPLS, EIGRP, OSPF, MultiCast routing; H.323/SIP Enterprise Video Conferencing; Cisco ICM Call Center, Cisco VoIP, Cisco/Aruba Wireless, Server/Circuit Load Balancer.Lead the project to provide Video Conference service with Call Admission Control using IP routing with RSVP and QoS.Actively performed Level 3 engineering support. Define network and voice engineering requirements base on business goals. Perform new design, implementation and training support to enhance the current network environment to support integration of data, video conference, VoIP call center, DMZ redesign with circuit/serer load balancing; Wireless network; Security between Corporate network and Student network. Performed network capacity planning, monitoring, troubleshooting and disaster backup of local area network (LAN) and wide area network (WAN) data communications.Technology includes: MPLS Traffic Engineering, MPLS VPNs, BGP, Multicast, OSPF, EIGRP, Route Distribution, VPN, IP Sec, H.323/SIP/SCCP VideoConference; Wireless, Server/Circuit load balancer, Firewall.Vendors’ Equipment includes: Cisco routers/switches, Firewall, ICM Call Center, Cisco Unified Communication Manager 7.1.3, Aruba/Cisco Wireless, BlueCoat, F5 server load balancers, Cisco/Tandberg video conferencing.

Sr. Lead Network Engineer – Network & Telephony Services Provided technical network lead in design, implementation, troubleshooting and documentation to upgrade core LAN/WAN network infrastructure, DMZ redesignDMZ Redesign with emphasis in: Availability (circuit load balacing, server/L7 load balancing; GSLB); Acceleration (http/ssl compression, cache); Security (SSL, Application firewall, Content Filtering, TCP Offload (proxy, compression, ssl cert, caching). Evaluated products from A10, Cisco, F5, Citrix NetScaler, Palo Alto.Remote office IPSec Design: Implemented IPSec site-to-site VPN, SSLVPN, Network and Application firewalls using Cisco and Palo Alto solutions.LAN Switching and Routing:Cisco 6500 Virtual Switching System (VSS) Analysis, Vlan Trunking, Spanning Tree Protocol, Core and Access 10-G layer design (6500, 45100, 3700)Data Center Redesign:Implemented FC switching and iSCSI network infrastructure with multiple 10 Gbps Cisco VSS backbone to support VMWare virtual servers and SANWireless Evaluation:Evaluated Cisco and Aruba wireless solution which include: 802.11a/b/g/n, SSID, 802.1x, Authorization (PEAP, PSK, Portal), Encryption (WPA-AES, WPA-2-TKIP), Vlan Seperation, QoS, Radius, WMM to push throughput to 300 Mpbs (40 Mhz wide channels)Authored TAMS Wireless Security Policy and TAMS WiFI Security and Encryption to establish standards that must be met when wireless communication equipment is connected to TAMS networkVoIP RFP & Network Redesign to support VoIP Project:Participated in the RFP process for VoIP RFP. Re-designed and implemented Cisco LAN network changes with QoS to support Nortel VoIP solution. Implemented Nortel VoIP solution with ELAN, CLAN, TLAN, SCADM, CCMSBK, CCMA, CCMS, OTM, MIRAN, Signaling Servers, Media Cards, Meridian Opt 81C.

WAN MPLS Migration:Lead the design and implementation of WAN MPLS to replace T-1 WAN infrastructure. EIGRP routing is used to communicate with vendor MPLS network. Route summarization and ACLs are used to control and manage the network.Cisco Network Admission Control (NAC):Participated in the research and deploy Cisco NAC appliances to dynamically control the network access: users access the network base on their credentials (employee, consultant, guest, partner). The Clean Access Servers (CAS) were deployed in testing environment with L2 & L3 Out-of-Band mode to control VLAN assignment for users.Cisco LAN backbone upgrade and Cisco VoIP evaluationLead the engineering design to upgrade the Cisco 10 Gbps LAN backbone and implemented LAN/WAN QoS to support Cisco VoIP solution

The Disney network is a global enterprise network, which comprises over 2,000 routers and switches. My TS&E engineering position involves engineering strategy, planning, and solution for both data communication (LAN/MAN/WAN) and voice communication (PBX, Voice over IP).Real-Time Video-Conferencing Collaboration Project:• Lead engineer for the global Real Time Collaboration (RTC) project to provide a network solution to control and manage real-time IP videoconference (VC) traffic (H.323 and H.320). Security, Site-to-Site VPNGigabit Campus Network Design:Access Router/Switch: Cisco 2950/2955 Enhance Image, 3560 EMI/SMI, 3750, 45xx w/SupII Plus or SupIV, 65xx w/Sup720, 28xx, 38xx, 831.Distribution Router/Switch: 65xx w/Sup720, 38xx, 7206VXR NPE1G.Boundary Core and Data Center: 65xx w/Sup720Service (VPN, etc.): 65xx w/Sup720, 38xx, 7206VXR NPE1GLayer 2 Distribution: 3560 EMI/SMI, 3750, 45xx w/SupII Plus or SupIV, 65xx w/Sup720Layer 2 Access: Cisco 2950/2955 Enhance Image, 3560 EMI/SMI, 45xx w/SupII Plus or SupIVIOS: General Deployment, 12.2 or later.ATM Backbone Design and Metro-Ethernet MAN Design:Orbital Data WAN Compression and Acceleration:Content Delivery Network (CDN) Project:Pac Rim WAN Upgrade and Redesign:Voice over IP (VoIP) Evaluation/Implementation: Cisco, Nortel, AvayaWireless 802.11

Network engineering for Internet Service Provider (ISP) environment: MPLS, MP BGP, BGP, EIGRP, OSPF, STP, VPC, VoIP, Wireless, Security/Firewall/VPN/DMVPN, QoS.

Director - Network, Telecom, Security, Server