Duane Frederick Email and Phone Number

Current Projects:Assist migrating three medium-sized datacenters to a single COLO data center cage while significantly reducing cabinet footprint and operational expenses. This included seamless integration with cloud environments such as Nutanix Xi Leap and AWS Workspace and VPC.Major Accomplishments:August 2019 – Network Segmentation – Primary role in construction and configuration of network segmentation architecture to isolate and control connectivity between web, application, and database layers using multi-VR design on Palo Alto Next Generation firewalls.• Design and build of Palo Alto firewalls and network architecture to meet business requirements for data segmentation• Seamless integration of new system and its controls over the data without impact to production system uptime• Extensive work with application developers to identify, classify, and permit required traffic for system functionality• Continued review and scrutiny of new traffic to ensure security measures are being fulfilled after the projects inital completionNovember 2019 - Algosec Fireflow – Install, configure and maintain Algosec firewall analyzer• Major analysis component used to scrutinize security policy implementation of segmentation environment along with remote office and other purpose-build firewalls (B2B VPN, DR, Mainframe)May 2021 – Implementation of Nutanix on-hypervisor FLOW for Network Segmentation Project• Used to integrate same security posture deployed in Palo Alto Next-Gen firewalls where Nutanix cluster East-West traffic benefits by on-hypervisor security module instead for reduced latencyResponsibilities:• Primary role is to provide SME support for Panorama and Palo Alto firewalls including escalation troubleshooting, software upgrades, and high-level system troubleshooting

Recent Accomplishments:May 2017 – Using Palo Alto’s Migration Tool, successfully consolidated two Palo Alto Firewall pairs containing multiple layer 3 interfaces, layer 2 virtual wire interfaces and user-id.October 2017 – Using Palo Alto’s Migration Tool along with manual configuration file edits, successfully consolidated two Palo Alto Firewall pairs into a single pair multi-vsys containing multiple layer 3 interfaces, layer 2 virtual wire interfaces, GlobalProtect portals/gateways, site-to-site VPN tunnels, multiple Policy Based Forwarding rules, user-id and BGP.• Responsible for maintaining Rout53 DNS entries, AWS Sophos UTM's & Security Groups for VPC/EC2/ELB's, routing (IGW & VGW) in 3 different regions.• Install, configure, maintain and troubleshoot Palo Alto Firewalls, Cisco routers and switches, Meraki Security Appliance/Switches/Access Points and Motorola Access Points (WiNG). Palo Alto Firewall migration/consolidation using Migration Tool 3.3 and manual efforts.• Provide Tier 3 network troubleshooting support for approximately 740 Wawa chain stores (Panorama/Palo Alto Firewalls, Cisco 2911 Routers, Cisco 2960X Switches). Sprint 3G/4G Cellular services, PNC ATM connectivity, Credit Card services, EIGRP and BGP issues.• Create, maintain and troubleshoot IPSEC VPN tunnels both static and DMVPN.• Maintain assets in Solarwinds and Cisco Prime.

• Install, configure, maintain and troubleshoot Cisco 5520 & 5505 ASA’s. Cisco 7200, 3800, 2800, 1900, routers. Cisco 4500, 3560, 2960, 2950 switches. BlueCoat PacketShaper 7500, Palo Alto PA-500, Exinda 4710.• Remotely administer Cisco devices for various downrange sites in North America, Caribbean and Europe. • Create, maintain and troubleshoot IPSEC VPN tunnels both static and DMVPN.• Interface with various vendors for technical issues, maintain network diagrams• Maintain and monitor Solarwinds Orion NPM• Maintain Windows 2003 and 2008 servers for both physical and virtual environment.• Perform helpdesk functions such as AD password reset, create AD accounts for local users and remote VPN users, reset voicemail passwords.

• Site Project Manager/Senior Network Engineer for JNSM FOB Ghazni under CJTF-1/JNCC-A.• Managed a diverse team of highly motivated individuals providing O&M services for Helpdesk, Network Engineering, Systems Administration, SATCOM and Information Assurance.• Attended weekly PM meetings designed to provide upper management with logistics information of people, materials and project status.• Directly interfaced with US Army, US Air Force, US Navy and ISAF customer representatives to ensure all specific requirements were being delivered in a timely and professional manner.• Create and manage projects and tasks assigned via MS Project, Visio and Remedy other software tools.• Provided technical oversight for the design of network infrastructure and implementation of networking equipment as well as security requirements.• Provided management and oversight of local Afghan subcontractors hired to facilitate projects as needed.

• Deputy Site Project Manager/Lead Network Engineer for JNSM Camp Deh Dadi II under JNCC-A.• Attended weekly PM meetings designed to provide upper management with logistics of people and materials.• Assisted Project Manager with management of personnel assigned to Camp Deh Dadi II.• Directly interfaced with US Army and US Air Force customer representatives to ensure all specific requirements were being delivered.• Maintained projects and tasks assigned to Networking Team via MS Project.• Provided technical oversight for the design and implementation of networking equipment as well as security requirements.• Provided management and oversight of local Afghan subcontractors hired to build new living and working facilities for personnel assigned to Camp Deh Dadi II.• Assisted Inside/Outside Plant with cable/fiber installation and fusion splicing.• Created and updated network design drawings and fiber layout for Camp Mike Spann.• Temporarily assigned Lead Network Engineer for Camp Mike Spann for approximately 2 months.

• Network Engineer/Systems Engineer/Technical Lead for the Command and Control Virtualization Project (C2V) in support of the US Army in Korea.• Provided technical oversight for the design and implementation of networking equipment as well as security requirements.• Directly interfaced with customer representatives on a daily basis to ensure all specific requirements were being delivered as promised.• Provided logistical support by updating MS Project to meet current objectives as well as maintained spreadsheet to track servers/systems during the migration process from physical to virtual.• Managed C2V project for 3.5 weeks with positive results from the customer.

• Installed, configured and maintained Cisco networking equipment such as 3750 switches.• Installed, configured and maintained Cisco networking equipment such as Cisco Systems Intelligent Gigabit Ethernet Switch Modules for IBM eServer Blade Center (CIGESM).• Configured ACL’s, OSPF, Trunk Links, VLAN’s, Ether-Channels, Stacking, spanning tree, syslog, SNMPv3.• . Installed, configured and maintained Systel, IBM Rack Server and IBM Blade Center Servers running Windows 2003 Server R2.• Configured and maintained Storage Area Networks.• Add and remove user accounts on Active Directory for the PSDS2 system.• Assisted with Group Policy upgrade.• . Installed, configured and maintained audio/video surveillance equipment such as CC Decoders, Amino’s, Windows Media Services/Encoding.• Creation of Publishing Points using both Multicast and Unicast streaming.• Installed, configured and maintained Solarwinds Orion NPM.• Maintained web java applications running on Apache and Tomcat.• Created maintenance log using SQL as the repository and MS Access Database as the front end.• Provided intelligence information to US Army command personnel directly correlating to live UAV video feeds.

• Provided network administration for SDREN.• Created Engineering Design Plans for logically segregating network traffic using VRFLite at Layer3 and Layer2 VLAN to interconnect core elements and to reduce impact to production users.• Facilitated Engineer Design Plans for IPv6 upgrade for the entire Aberdeen Test Center campus infrastructure.• Created as well as maintained projects within the TDAP (Technology Development and Acquisition Program) system to gain proper funding for future networking design projects.• Set up architecture for SNMPv3.• Setup Cisco WiSM (Wireless Services Module), Cisco WCS (Wireless Control System) and Cisco WLA (Wireless Location Appliance) for use with Cisco LWAPP (Lightweight Access Point Protocol) wireless devices.• Provided technical support for mobile wireless solutions designed to provide communications to automotive testing courses.• Provided technical support for long distance wireless solutions acceding 10 miles to radar facilities along the Chesapeake Bay as well as for remote branch offices and testing facilities not capable of wired solutions.• Installed, configures and maintained Solarwinds Orion NPM for monitoring network devices.• Installed and configured Site Protector for the SDREN.

• Successfully migrated Aberdeen Test Center’s wireless infrastructure from insecure WEP to WPA2/AES.• Conducted site surveys for installation of new wireless hardware.• Conducted WAR Driving using AirMagnet/NetStumbler with GPS.• Design and implement wireless solutions using MS Visio and MS Project.• Installed and maintained wireless production devices such as Cisco Aironet 1500, 1300 and 1200 series access points.• Implemented wireless security configurations such as AES-CCMP encryption, EAP-TLS/LEAP/PEAP, MAC/Machine authentication with Cisco ACS Radius/TACACS+ and Cisco WLSE.• Configured and installed PIX 501 Firewall and Cisco 3200 VPN solutions for building to building solutions security.• Installed and configured Cisco 2900/3500/3700/4500/6500 series switches.• Configured and administered VPN 3000 series Concentrators and servers running Windows 2000 Server and Windows 2003 Server.• Subject Matter Expert for all network related issues.