Firewall Engineer primarily focusing n large financial institution headquartered in Charlotte NC.

Same Job Description as before Job Title change as Juniper SME

Design and build security and network polocies for AT&T global security clients

Network Based Firewall/Network Enablement Manager Premise Based Firewall/Network Enablement ManagerDesigned and built security policies and network configurations for AT&T Global security services clients both network and premise based. Fortune 500 as well as large global clients including government agencies worldwide.Worked personally with each client from sales through Implementation until customer was completely functional and turned over to NOC for monitoring.Worked with Global clients with very complex routing scenarios using 3 separate global routing regions US, Asia Pac, and European Countries.Worked with several different firewalls including Cisco Checkpoint ,PIX, ASA, Juniper Netscreen, Fortinet, Worked with Several different Routers and switches Including but not limited to Cisco 2800 - 12000 series routers and several different series of switches, as well as Junipers full range of routers and firewalls. Worked with a 8 person team to accomplish this via virtual office from home. Used several pieces of proprietary as well as commercial software to accomplish this.Insured there were no issues with multiple locations by completing discovery process for IP and firewall conflicts as well as any routing issues that could cause problems either regionally or globally.State of Georgia was on of my clients while working this position I also delt with all the equipment mentioned. Juniper 4200,4500 and Juniper SRX 8216

Firewall / Lan/Wan) Experience with various operating systems including, but not limited to Solaris, FreeBSD, Microsoft Windows, NetScreen ScreenOS (JNCIS certified), Cisco IOS, and JunOS on J-series routers System and network administration experience relating to user and group management, rights assignments, scheduling and managing system upgrades, and reacting to system and product vulnerabilities Networking and systems knowledge: TCP/IP networking, IPv6, IP routing(BGP, OSPFv2/v3), Linux iptables, OpenBSD's pf, VPN technologies (IPsec , IKE, and OpenVPN), Intrusion Detection and Prevention, Apache Web Server, BIND 8/9, MySQL, Samba, numerous network utilities including tcpdump, MRTG/RRDtool, scapy, socat, Wireshark, dsniff,Nmap, arpwatch, Snort, and others; Created a web-based interactive firewall policy database to assist in compliance Performed routine configuration and management of NetScreen 200, SSG,ISG and 5000 series firewalls Configured VPN tunnels between NetScreen firewalls and 3rd-party IPsec implementationsAdministered and troubleshot security policies and routing issues on Time Warner Cable's WAN Managed multiple firewalls with NetScreen -Global PROAssisted in the configuration and management of HP OpenView's Network Node ManagerControlled all LAN/WAN data center equipment installation , ip addressing security zone placement firewall rules ect. From planning to turn up (servers,SAN's, Switches,Routers,ect)Was part of the integration team that rolled Time Warner's acquisition of portions of Charter Communications into Time Warner's Corporate network. Worked with Comcast who also acquired portions of Charter 's network to insure no future conflicts.

Alpha was 3 separately purchased companies with Approx. 60 locations in 3 states. My job was to integrate those 3 companies IT departments into 1 in order for them to go public in 02/2005. Renegotiate telecom and vendor contracts to encompass all of them and cut per annum costs. Update antiquated systems Telecom, Server, Data Storage, Disaster recovery,security ect.Help write IT department's portion of Corporation handbook and write all it SOP's so that the dept. would be in compliance with Sarbanes-Oxley act. Work closely with several contractors from Deloitte Touche in order to accomplish this. I negotiated with several vendors to replace old analog phone systems with digital systems to run VOIP to make 4 digit dialing possible across all company locations. Had 2 of my guys trained in satellite instillation and had satellite's installed at all locations where high speed access was not possible or cost prohibitive. Had central satellite installed at Corporate headquaters and connected to the network.Used Cisco Gigabit Interface Converter to network nearby analog locations to digital hub locations where we owned physical Phone lines. Kind of a voice/data dsl system.I negotiated and implemented new vendor contracts and cut Telecom cost from 3.2mil/yr to approx. 750k/yr.This includes new circuits for voice,Data, and video conferencing where needed as well as Long distance for mobile sales people. Satellite communications and local land lines where OSHA required local 911 service be available.(Mine sites,ect)I wrote several SOP's including: Acceptable use policy, Security Policy, Environmental monitoring policy, Information Storage Policy, Ect.I also managed day to day activities of helpdesk and site technicians as well as being an escalation point if needed. Compiled weekly reports of these activities as well as project progress to report to my director. As well as conducting bi-annual worker review's of all IT employee's below me..

Once this was complete I was promoted to the GNOC (Global Network Operations Center). Ron Stears group who had previously been my manager before the split. My job here was to monitor and troubleshoot the Global IP Backbone. We migrated all customers off of the legacy mci backbone onto our new N3 backbone. Also integrated several ISP's that C&W bought in Europe into our single AS3561 network. Upgraded several ckts to oc-192 and helped set up an mpls network. I was also involved with setting up a parallel (Totally Cisco) ip-vpn network connected to our as3561 network through two cosine boxes one on each coast. I have troubleshooting experience with many issues on the global backbone in U.S. Europe and Japan, some of which was gained during this implementation period where I was able to gain a great deal of experience troubleshooting on a very large scale network. During this whole time I also worked with site techs to complete various maintenances such as code upgrades, hardware upgrades. Replacing malfunctioning equipment. I typically walked the Tech through the hardware and had him available in case of issues with software and code upgrades.

Last July the INOC split into two groups GSOC for customers and GNOC for backbone. The first 5 months of the split I functioned as shift lead in the GSOC to help integrate former Raynoc (dial) engineers into the ip environment and to maintain our High level of Customer service. I also had to assure that they learned to interface with our various vendors in a professional manner and assisted them with technical details they were not familiar with. My job was to assure that the integration went as smoothly as possible and that the new engineers became proficient as soon as possible. I was shift lead for about 14 ppl on swings shift.

This position overlapped with the above position, where my responsibility was to critique all trouble tickets and assure that no technical mistakes had been made and that all avenues to correct the problem had been taken (in the proper order and with proper efficiency)

* Helped with completing SOP and vendor contracts to implement Managed router Product* Worked with marketing and various other groups from the time I joined US LEC till the start of the offering.* I worked along with others on defining the vendor contracts: SLA, Maint agreements ECT. * I now troubleshoot all managed router issues and function as a technical lead for the data TAC on all data related issues. I am one of two on-call tier 2 24/7 escalation points for the Data TAC.* I also work on VOIP issues for managed router customers and do various Mac changes as requested by managed router customers.Before I left also started work on a VOIP product offering Separate from managed router product.

Handled all day-to-day network administration responsibilities on Windows 2000, NT 4.0 servers and SCO UNIX servers.* Set up active network monitoring using Dell Open manage and HP Openview.* Configured network from 10mbps to 100mbps. * Documented and submitted 2003 Department Budget. * Troubleshot day-to-day server and network issues. * Troubleshot problems with office equipment Printers, scanners, digital senders ECT. * Dealt with vendors on new equipment purchases and bids for projects. * Troubleshot day to day issues with mrp system. * Advised and worked with vendors and senior management on software upgrades ex. CMM software, SAP software, CMS software, and Visual Plant software. * Worked with shop floor to insure that new software would interface with existing hardware ex. Seimens PLC's and Allen Bradley PLC's. * Restructered server's Active Directory and user groups, users , groups, etc.

While in this position I monitored the network backbone using various software, HP Openview, Cascview, Netcool, Foremon, Tecnet.Iprov, Windows 2000, Windows NT. Unix, Sun Solaris 8, some perl for Unix scripting and clarify. Worked with various vendors, MCI, AT&T, lec's, Verizion, mci, ECT to correct various backbone issues. From down hard ckts to errored ckts to mis configurations along the path. I am very good. During this time I also worked Customer trouble tkts and resolved various customer issues from physical layer problems to logical layer problems. Some of the equipment I worked with during this time was Digital link CSU, verilink CSU, Cisco 36xx series, Cisco 75xx series, Cisco GSR's, Juniper M20, juniper M 40, Juniper M160, Unisphere routers, Cascade switches, Foundry Big Iron Switches, Extreme Black Diamond switches, various protocols I worked with were BGP,IGRP,MLPPP,IS-IS,MPLS,IP-VPN , OSPF , ect.

I have assisted in the design, building, configuration, and management of a new campus andSatellite campus network. The network consists of seven Ethernet-based LANsIn a star and extended star topologies. I helped configure the Routers (2501's and 3660's) configured the v-LANs on the switches 1900's up to 6509. The protocols used were TCP/IP, RIP and IPX. Operating systems were Novell on the servers and NT on workstations. Security is double Firewall configuration using Pix box and proxy server on the District office and Cisco 12.2 os and proxy on the other LANs access lists (standard, extended, and IPX) are also used for networkSecurity. Network management is using Cisco works 2000. A class a addressingScheme is utilized inside with NAT configured on outgoing interface of district office. Points to point connections are used between most LANs and frame relay is used for out going traffic. WE are also utilizing VOIP between LAN hubs. Enhanced CAT 5 was used for cabling with a multimode fiber backbone. I have also worked with BGP, HDLC. T-1 and T-3 connections. All link-state and distance vector protocols. Store and forward as well as, cut-through switching and multiplexing.

Worked at Honda of South Carolina job site in power and distribution.

Worked in vacuum motors department from research and development of newMachinery through testing and calibration.

Trouble shooting and repair of infrared and laser sensor systems ofFixed-winged aircraft