Led refresh project at 2 Data Centers at Morgan Stanley/Eaton Vance • Planned refresh project effort by breaking down project into dozens of small milestones in an effort to minimize outages and accommodate business work windows • Led refresh project to make 2 data-centers more resilient to outages and bring up to the company standard by adding an additional 10 circuits, 8 routers, 30 switches, and 1 SD-WAN appliance. • Deployed MPLS and SDWAN solution to provide network… Show more Led refresh project at 2 Data Centers at Morgan Stanley/Eaton Vance • Planned refresh project effort by breaking down project into dozens of small milestones in an effort to minimize outages and accommodate business work windows • Led refresh project to make 2 data-centers more resilient to outages and bring up to the company standard by adding an additional 10 circuits, 8 routers, 30 switches, and 1 SD-WAN appliance. • Deployed MPLS and SDWAN solution to provide network redundancy. Added AWS Direct Connect circuits to give data-center direct access to AWS cloud. Installed new internet circuits to triple bandwidth and migrate to new public IP space. • Increased network security by implementing OOB management network and MACSEC on circuits between branch offices and data-centers • Protocols TCP/IP, BGP, OSPF, HSRP, STP, NTP, SNMP, NAT, Port-Channels, NetflowStandardized Cisco Device Configurations using Ansible at Morgan Stanley/Eaton Vance • Led project to automate updating OS/Rommon/EPLD across enterprise(300+ routers and Switches) by scheduling outages, coordinating testing with different teams, and using Ansible playbooks to perform updates • Use the automation tools to track hardware models and the serial numbers of devices in order to manage support contracts and plan EOL hardware replacement. Put EOL replacement plan in place by building BoMs and working with the appropriate teams to procure • Standardized configurations on all the Cisco devices, which made troubleshooting easier for the operations team and reduced outages, which saved the company money • Responded quickly to new global threats by using Ansible to implement new security configurations to 300+ devices in under 1 day Show less

• Wrote 5+ Ansible playbooks with over 30 plays to maintain 75+ RedHat 7 systems with maximum STIG compliance•Wrote Ansible playbook to transfer updates to the custom repositories, create/sign the repositories, apply kernel updates and patch the systems in the enterprise, then reboot the systems to apply the new kernel as part of automating our enterprise• Designed and configured a Gitlab server to use Kerberos tickets for authentication or password authentication with an IPA server… Show more • Wrote 5+ Ansible playbooks with over 30 plays to maintain 75+ RedHat 7 systems with maximum STIG compliance•Wrote Ansible playbook to transfer updates to the custom repositories, create/sign the repositories, apply kernel updates and patch the systems in the enterprise, then reboot the systems to apply the new kernel as part of automating our enterprise• Designed and configured a Gitlab server to use Kerberos tickets for authentication or password authentication with an IPA server over TLS1.2 encryption, and also configured TLS1.2 HTTPS certificates Show less

• Designed network of 200+ systems from scratch spanning across 8 remote sites, then proceeded to purchase networking hardware, configure, deploy, and administrate network• Minimized exposure to outside network attacks by writing/implementing extended ACLs to limit traffic to only the required Ports/Protocols and maintaining PPSM• Designed QoS policy to avoid saturating our satellite links to remote sites. Created and implemented class-map, policy-map, and service-policy on Cisco ISR… Show more • Designed network of 200+ systems from scratch spanning across 8 remote sites, then proceeded to purchase networking hardware, configure, deploy, and administrate network• Minimized exposure to outside network attacks by writing/implementing extended ACLs to limit traffic to only the required Ports/Protocols and maintaining PPSM• Designed QoS policy to avoid saturating our satellite links to remote sites. Created and implemented class-map, policy-map, and service-policy on Cisco ISR 4331 and ISR 4351• Designed IP address layout scheme by subnetting 2x /24 IP blocks to be used for 8 separate sites all connected together using Cisco DMVPN tunnels• Developed Cisco 2800/ISR 4300 series router, Cisco Nexus 3172TQ switch, Cisco Catalyst 9300 switch, Riverbed CX 3070, and Symmetricom S650 timeserver configuration templates to be used to deploy future hardware• Designed PIM infrastructure to flow multicast traffic from one remote site to another across Cisco DMVPN tunnels• Configured IGMP Snooping on Cisco ISR 4351 embedded switch module and Nexus 3172TQ to limit multicast traffic to devices that join the multicast group using IGMP join messages (Setup Cisco ISR4331 and ISR4351 and IGMP Querier)• Setup Red Hat logging server to receive rsyslog messages from Cisco ISR 4331, ISR 4351, Nexus 3172TQ, Catalyst 9000, Riverbed CX 3070, and Symmetricom S650• Worked closely with the System Administrator to understand server needs, then wrote Red Hat 6 firewall rules in IP Tables and Red Hat 7 firewall rules using firewall-cmd• Used troubleshooting skills in combination with Wireshark to resolve SSH issue due to link MTU being smaller than MTU setting on DMVPN tunnel interface. (PMTU-Discovery not allowed by service provider)• Configured Cisco ISR 4331/ISR 4351 and Nexus 3172TQ/ Catalyst 9000 Switches for maximum compliance with DoD STIG and supported DoD security audit Show less

• Responsible for the integration of the Cisco and Brocade Switches into the United States Army’s second generation Tactical Network• Deployed quarterly networking configuration updates on test systems and installed latest OS on Brocade, Cisco, and Juniper hardware• Configured Cisco and Juniper routers to use OSPF/RIP dynamic routing protocols and troubleshot test system to resolve routing/switching issues• Worked to create virtual test environment in VMWare using virtual Cisco… Show more • Responsible for the integration of the Cisco and Brocade Switches into the United States Army’s second generation Tactical Network• Deployed quarterly networking configuration updates on test systems and installed latest OS on Brocade, Cisco, and Juniper hardware• Configured Cisco and Juniper routers to use OSPF/RIP dynamic routing protocols and troubleshot test system to resolve routing/switching issues• Worked to create virtual test environment in VMWare using virtual Cisco routers Show less