Ed A. Email & Phone Number

United States

Complete re-architecture of enterprise Azure infrastructure to remove legacy limitations and prioritize future reliability, redundancy and security at scale. Creating new management group structure to support evolving policy needs. Created new Azure networking model to improve communications and establish centralized security model supporting multiple embedded security policy levels. Architected and developed multi cloud edge security as well as providing guidance and requirements for a functional fully secure cloud. Modified existing cloud vendor connectivity models (SaaS/IaaS/PaaS) to utilize newly designed secure scalable model which meets or exceeds updated security compliance requirements. Key contributor to Enterprise level decision making and direction for Hybrid Multi-Cloud strategy.

Master Network engineer responsible for hybrid networking, architecture and cloud based operational security. Provided insight to improve infrastructure controls and monitoring across cloud environments. Upgrade of Hybrid edge connectivity model to support multiple high-speed connections and further secure cloud growth. Provided architecture and guidance for cloud migration efforts, ensuring that applications were deployed in a well-designed architecture to support scalable secure operations. Collaborated with deployment and application teams to limit downtime in any migration or re-architecture.As a member on the Cloud Center of Excellence, Re-Architected and developed AWS infrastructures including segregated control towers and security zones based on individual workload requirements. Currently re-architecting enterprise Azure infrastructure to remove legacy limitations and prioritize future reliability, redundancy and security at scale. Created new Azure networking model to improve communications and establish centralized security model supporting multiple embedded security policy levels. Architected and developed multi cloud edge security as well as providing guidance and requirements for a functional fully secure cloud. Modified existing cloud vendor connectivity models (SaaS/IaaS/PaaS) to utilize newly designed secure scalable model which satisfies updated security compliance requirements. Key contributor to the migration to infrastructure as code utilizing Terraform to standardize infrastructure deployments and develop fully automated cloud deployments.

Burlington, Massachusetts, United States

Senior Network engineer responsible for complete AWS infrastructure redesign focused on security, operational stability, and reducing overall operational cost. Designed and implemented next generation secure infrastructure to support diverse client deployments across multiple technology types. Implemented systems to provide end to end encryption for smart city applications in support of multiple international IOT deployments. Designed well architected fault tolerant network connectivity to clients based on individual client need and technology available. Created architectural designs and diagrams in support of all customers, new and existing, to increase operational efficiency and establish baseline requirements moving forward. Provided exceptional tier 3 operational support to customers regarding integration and connectivity to hybrid cloud environment through secure methods utilizing virtualized Cisco and native AWS products. Consistently revitalized company understanding of Cisco 6LowPan protocol interfacing and deployment. Worked with Cisco business unit to optimize deployment and architecture of new IOT networks. Provided detailed reports and action items to improve network performance and network reliability across global AWS platforms. Developed multiple new security practices that were shifted to production for end to end encryption and operational security. Provided expert level guidance in creation and timeline of security roadmap which would lead to international ISO 27001 security certification for lighting controls and solutions.

Greater Boston Area

Amazon AWS Solutions architect supporting enterprise level migrations and solutions with a specialization in networking and security deployments. Provided expert level architecture and implementation of AWS deployments including complex distributed and highly available solutions. Provide technical oversight and transition to service management teams. Evaluate and develop new technical deployment options as the industry advances. Act as escalation point for AWS technical issues and discussions. Develop and manage AWS GOVCloud implementations and managed services.Led the effort to expand deployments beyond simple routing to provide customers with higher performance and reduce external network exposure. Expanded the network implementation of the Apps Associates team by testing and implementing more dynamic routing infrastructure

Keen Nh

Manager of Enterprise Networking, Feb 2016 – May 2017Responsibilities:Manager of Enterprise Network Engineering reporting to the Director of Infrastructure services, Managed a geographically diverse team that designs develops and maintains network connectivity with 24x7 support to over 70 locations across the US. Led the effort to audit technical inventory which had not been changed in over 2 years. This included validation and verification of all online equipment, all spares equipment and support for all equipment across 70 locations and 3 data centers. Standardization and documentation of patch levels as well as roll-out path to bring all devices on to current supportable IOS versions.Identified the need and developed standards for change control requests that were later adopted across the complete Infrastructure services department.Project lead on the replacement of legacy Cisco ACE load balancer system. Collaborated with application and development teams to create matrix of requirements. Analyzed technology solutions for each requirement and created a cost to benefit analysis as well as a recommendation to upper management.After analyzing current technology and identifying issues with tertiary (4G) connectivity fail-over technology, worked with principle engineer to design, develop and implement a company wide DMVPN redesign. This redesign added stability to the 4G fail-over which previously would lock up during script initialization. New connectivity provided connectivity to multiple data centers and stabilized site connectivity company wide.

Waltham Ma

As the Manager of IT Network Engineering, reported directly to the Director of IT Infrastructure, Provided technical and operational leadership for a team of 4 engineers deployed around the globe to support 24x7 network LAN/WAN and multiple diverse datacenter operations.Provided complete BGP and OSPF redesign of primary data center to go from manual fail-over of critical services to less than 30 second fail-over of redundant resources within the data center or to DR Data Center as needed. In support of the Acquisition of CLS, provided technical leadership to design and deploy the Lionbridge network to each of the 12 worldwide locations to support the normal business operations. In addition designed segregated secure infrastructure to support security requirements for government and banking customers through two factor VDI access.Redesigned corporate DMVPN infrastructure to provide dynamic failover and allow redundant tunnel head ends to function as required

Merrimack Nh

As a Senior Network Engineer delivered expert level technology support and leadership across the PC Connection Network. Provided leadership and guidance to a team of engineers responsible for maintaining the PC Connection infrastructure including On-call rotation.The primary technical resource to design and manage the redesign of the PCC corporate infrastructure from legacy Nortel equipment to the Cisco Technology stack. Designed and implemented dynamic redundant wan connections across the US including MPLS BGP and EIGRP. Provided extensive documentation, continuing leadership and knowledge for the Network technology group on new technologies deployed during the network redesign.Designed and implemented new multi-tiered remote access with in home VPN and Cisco Anyconnect client/client-less secure remote access for PC Connection and Affiliates. Created individual portals and extensive smart tunneling capabilities based on internal customer needs.Designed and implemented new security for the internet edge at a corporate Datacenter and Imaging Lab. This included development of a DMZ and ongoing rule optimization. Positioned the security firewalls to provide additional metric reporting and future IDS/IPS capabilities.

As a member of the Network Operations team, provided expertise in the maintenance and operations of the MIT Lincoln Labs enterprise network. Provided design, implementation and support on multiple Nortel switch types Cisco and Juniper routers . Contributed to on call after hours support of network operations as part of the team rotation. Assigned to support the Enterprise Network Monitoring solution as the primary administrator where responsibilities included implementation, escalation and integration with other critical monitoring systems.Served as a lab senior technical resource for Cisco products and support including supporting DOD security scans of research group equipment, working directly with the Information Security Department to streamline and maintain access control lists and supported operations in relation to the Cisco core. Lead technical resource for the Lincoln Lab DMZ working with Cisco and Juniper firewalls.

As network consultant was involved in many different projects across the continental US. Included are some projects of note.Aetna Insurance - (Hartford , CT)Network Engineer - International LAN Refresh/Lab Engineer▪ Network Engineer responsible for planning and implementing the logistics of an end of life program for data equipment in international locations. Liaison to international clients ensuring they understand network requirements and equipment importing process. Planning new network infrastructure under client guidelines while minimizing downtime and impact during implementation.▪ Network Engineer responsible for day to day operation of Pre-Production network. This network provides the basis for all Pre-Production servers and services within the environment. Daily responsibilities include troubleshooting connectivity issues and managing Lab-to-Production security.M&T Bank - (Buffalo NY)Verizon Wireless - Network Auditor ▪ Provided technical documentation and evaluation of current VoIP and Wireless infrastructure. ▪ Performed gap analysis on all Wireless and VoIP documentation and made recommendations based on current network standards including security and efficiency of implementations.

Provide on site and on call 24x7 support for Cisco based integrated Voice over IP telephone and Data service provider. Designed and implemented Network Monitoring and reporting systems, including out- of-bandwidth emergency notification. Maintain and integrate security protocols across all Digicel Aruba Systems. Provided technical assistance to Core Network Ericsson AXE Switch engineers in regard to troubleshooting upgrades and Voice related problems.As IP Network Manager, managed and implemented all new IP related products while remaining the local operational engineer. Was single point of contact for all tier 3 support issues within the Dutch Caribbean Island chain. Projects included adding and modifying new destinations and international connections. Project lead for inter Island change to OSPF and redundant call routing design across Miami -Dutch Caribbean - Jamaica links. Led the QoS implementation across all Digicel islands including training local personnel to configure QoS across their respective networks and integrate these procedures on relevant devices.

Team Leader - Upgrading and installing 802.11 b/g wireless networks. Performed on-site client hardware and software upgrades. Set up and implemented small business VPN. Provided security assessment and supervised implementation of new procedures. Supplied ongoing system administration and end user support for Windows NT/XP/2000 environments.Additional duties included start-to-finish design, configuration, installation and support for both server and desktop components of mixed-environment LANs.

Member of 24X7 team that managed uptime of web, mail, application and database servers. Responsibilities included remote monitoring and administration of critical server processes for multiple Unix and NT based servers and troubleshooting systems outages. Performed network evaluation and trending tests to proactively ensure system reliability. Responsible for timely escalation of problems and daily turnover.

Network administrator responsible for maintaining and monitoring the Nabisco global network of over 400 sites. My main responsibilities included troubleshooting circuit problems, providing total network tier 2 and 3 support, configuring and monitoring Cisco 7000 routers, Cisco Catalyst 5000 series switches. In addition to in house problem resolution, also coordinate national vendors, local exchange companies, and local/long distance carriers to maintain maximum uptime for the corporate LAN/WAN.Other duties included configuring and maintaining Ciscoworks 2000 Campus Suite (VlanDirector, ATMDirector, TrafficDirector, Ciscoview and other customized CWSI programs), maintaining Network Operation Center Unix system resources, configuring and maintaining Netview, Optivity views. Configuring and using Network General Sniffers to maintain network integrity, security, and resolving network bottle necks and issues. Problem ticket resolutions were maintained using Remedy.

Billets held:• Special Projects Assistant Manager, Nov 98 - Feb 99• Data Team Assistant Chief, June 98 - Nov 98• Trouble Desk Manager, June 96- June 98Responsibilities:Managed 4 teams of 5 technicians from a central trouble desk to ensure proper operation and maintenance of a 16-server, 12-router network consisting of over 2000 users. Attended daily meetings with upper level management to discuss such topics as connectivity problems and customer service enhancement. Built NT and Banyan Vines servers and managed all user accounts on the servers. Provided account administration, shares, permissions, security, trusted domains and exchange configuration and administration. Installed and configured all garrison Cisco 4000 routers and Cisco catalyst 1900’s and 5000’sAs Data Team assistant Chief, I managed a team of 5 technicians to plan, engineer, implement and maintain deployed networks and insure connectivity from various sites around the world. Planned TCP/IP network subnets utilizing variable length subnet masking. Planned, implemented and installed multiple secure (SIPRNET) networks providing connectivity to various Unix machines and other secure networks worldwide.Special Projects Assistant Manager allowed me the opportunity to work with newer technologies and in different areas. Built the first Marine Corps Windows NT servers that ran the Streettalk for NT services and allowed different platforms to be utilized. Worked extensively on providing integrated UNIX and NT network services.

Education record

Infomation Systems