Leadership of a network team for major defensive systems contractor project, driving growth of skills and productivity across all architects and engineersDevelopment of a large-scale NIST/FedRAMP compliant enterprise network security architecture, built upon multiple industry-leading platforms from both Palo Alto (including PA-400/3200/3400/VM Series and Panorama) and Fortinet (including FortiGate 100F/1100E/2200E/VM Series, FortiManager and FortiAnalyzer). This architecture included SD-WAN dynamic mesh IPsec VPNs, ATP, DLP SSL Decryption, Decryption Mirroring, plus tight integration with Zscaler Zero Trust Exchange infrastructure and Broadcom DX NetOps tools.Cisco ISE-focused NAC design review and implementation project development for a major federal contractor.

Leadership in product development, large-scale projects, partnerships development, sales strategies and engineering infrastructure for 24/7 managed security services, cybersecurity consulting services and other technology-driven IT security solutions.Management and mentorship of a trusted team of network security, Windows systems, Linux systems and storage engineers and architects, driving growth of skills and productivity across all personnel.Key startup leadership role in company’s business growth since late 2019, building partnerships, projects planning/execution and overall customer success. Key success stories include: - Design and deployment of Fortinet, Cisco and SonicWALL security solutions for K12, higher education and municipal government agencies - Leadership of cybersecurity assessment and design services for large enterprises, non-profit institutions and municipal governments across the New York metro area. This included large-scale cybersecurity programs development and incident response plans creation to meet intensive requirements of compliance standards (CMMC, PCI-DSS, NJ MEL, CJIS and other standards) - Detailed IT security assessment and cybersecurity program development for the Borough of Oakland, NJ to meet NJ MEL requirements - Increasing sales volume with industry-leading technology partners

In a quota-carrying role, successfully executed rapport building, opportunity qualification and solution pitches to enterprise and service provider accounts across the multi-state territory. Work has included in-depth needs assessment, design sessions and large-scale presentations to executive and technical teams.Skilled development and maintenance of trusted professional relationships with the territory customers’ technical decision-makers, keeping them regularly up-to-date on Juniper product roadmaps, specifications, discussing essential performance criteria and overcoming sales objections (especially those related to competing vendor solutions)Collaborative work with key Juniper teams, addressing emerging customer requirements / use cases, analyzing competitive landscape, along with close coordination with Juniper partners

Product development and direct sales for enterprise-class, PCI DSS-compliant security solutions to customers nationwide. These solutions leveraged multiple security platforms, providing in-depth systems monitoring, security monitoring, configuration management, log retention and other features.Product development and direct sales for WiFi solutions to customers nationwide. These solutions leveraged industry-leading technology platforms and provided in-depth monitoring of coverage, capacity, load-balancing, WIPS and many other aspects of WiFi network performance and security.Design and build of many large-scale L2/L3 networks, including EVPN-VXLAN and VRF-segregated BGP network across NYC metro area for national colocation provider. Designs leveraged data center grade platforms by Juniper Networks, Cisco and other best-in-class manufacturers.

Successfully managed a skilled team of UNIX and Windows System Engineers and Application/Database Developers, critical team projects including Microsoft Exchange migrations to Office 365 and physical server and application and compute migrations into purpose-built Microsoft Azure and AWS multi-tier environments.Designed multiple 24/7-managed solutions and project-based professional services offerings for BCM One, including application layer security and cutting-edge SD-WAN features focused on Versa Networks. These solutions focused heavily resilient real-time traffic protection features, including FEC and packet duplication and latency/jitter-triggered path failoverDeveloped and presented detailed sales proposals and Statements of Work for numerous managed network services and cloud-centric professional services opportunities.Designed and implemented the service provider network for BCM One, delivering services to diverse customers throughout the New York metropolitan area. Built upon Juniper MX104 routers and EX4550 switches, this network included redundant carrier-class infrastructure at diverse network gateways, high throughput Internet and MPLS WANs, full BGP routing and resilient transport connectivity to citywide commercial buildings.

Designed a robust Juniper Networks MPLS L2/L3 BGP VPN backbone solution for O3b Networks. This design followed best-practice design principles, while leveraging multiple Juniper Networks product lines (include MX and ACX products). This design met the customer’s SLA requirements of granular control of customer traffic, rapid detection of network congestion/failures and interoperability with non-Juniper network devices.Designed and implemented a secure, Juniper-based enterprise network for colocation provider, Cologix. This scalable design included secure and redundant network paths between Cologix’s North American sites; customized per-site designs to meet the per-site requirements of data center systems; and COS-based prioritization of VOIP traffic, personnel and vendor wireless (including Juniper WLC, WLA and Ringmaster), DCIM services and end user data traffic. Successfully planned and executed a multiple large-scale enterprise migrations and greenfield data center installations of Juniper EX4200/EX4500 virtual chassis for customers in the United States and Europe. Utilized expert knowledge of virtual chassis physical and logical configuration and recommended design approaches based on customer requirements.

Designed/implemented networks for DigitalGlobe commercial and U.S. government projects, including: requirements; budgeting; hardware and software procurement via multiple vendors; high-level and detailed logical/physical design; hands-on hardware/software deployment; detailed documentation creation; and ongoing operational support. All projects followed network design best-practices, proving high-availability, performance and scalability.Designed and implemented network security solutions for U.S and worldwide locations. This work required comprehensive understanding of application traffic, IPSec (including vendor interoperability), SSL and vendor-specific configuration knowledge/experience. Utilized network security platforms including: Juniper IDP75/8200 IPS, SA4000/4500 VPN concentrators, SRX1400/3600/5800 firewalls, ISG1000 firewalls and SSG5/350/550M firewall (both JUNOS and ScreenOS) and Cisco PIX 501/515/535 and ASA5505/5510/5580 firewalls and Avocent ACS6000 console servers.Led multiple LAN/WAN redesign/upgrade projects for Longmont, CO and multiple remote locations. These projects supported the WorldView2 satellite launch and other DigitalGlobe projects including high-performance computing, multi-site wireless services, satellite Direct Access Program, remote ground terminals deployment, WAN acceleration and NFS-based Isilon/NetApp/Hitachi storage clusters. Utilized network hardware including: Juniper EX2200/4200/4500/8200, SRX1400/3600/5800, J4300/4350 and M-series; Cisco 1200/2800/3500/4500/6500/7300/Aironet series; Foundry/Brocade FESX624/648, RX8, SX800, TurboIron and WS; and Aruba access points and controllers.F5 BIG-IP 6400/6900/8900/LTM-VE implementation, including: SSL profiles/certificates, virtual servers, iRules and pool health monitors using BIG-IP LTM 9.x through 10.x.

Developed and executed many detailed lab test plans including: Cisco 6500/7600 Sup1A and Sup720 QoS testing (including WRED, output queuing, policers, input Layer-2 and Layer-3 classification, and EXP/DSCP/PBIT rewrite); Overture 2200/5000/140/180/45+ feature and regression testing; Force10 S25P and S50V initial performance testing (including throughput and QoS functionality); Cisco 7600 Sup720 BFD-OSPF stability and failover testing; ECI IPVPN Multi-VRF QoS over Gigabit Ethernet and DS3; and Cisco SIP600/SPA-OC192 stress testing. I designed, cabled and configured all physical network test beds for these and other test plans.Conducted many detailed presentations of test plan results for IP Architecture and IP Engineering staff. These presentations included extensive data analysis and graphing, and were vital in successful rollout of new Level3 services.Gained proficiency with Spirent traffic test equipment including: SMB2000 and SMB6000 with FastEthernet and DS3 traffic generator/analyzer modules; AX4000 including OC48,OC192,1GigE and 10GigE traffic generator modules; and Spirent SX-12 and SX-13A Data Channel Simulator.

Served as Tier 3 escalation point for IP Core NOC for troubleshooting core network issues included IP routing, MPLS, circuit, operating system and hardware failures. Hardware included many Cisco, Juniper, Laurel and Redback platforms. Served as lead Ops Engineer for Laurel and Redback vendor issues, including bugs, feature request and issue troubleshooting. Created multiple training documents, including detailed Laurel QoS configuration, Cisco and Laurel QoS packet flow and troubleshooting. I trained both Ops Engineering team and IP NOC staff and received praise from NOC staff and management on these valuable, interactive training sessions.Created detailed device acceptance testing documents for use by Ops Engineering team. These were vital in standardizing network-wide device configurations.Created multiple customer architecture analysis documents, for Yahoo and other major accounts. These documents were formally presented by VP and Director-level staff at key customer meetings.