Eddie Kontrec Email & Phone Number

Sydney, New South Wales, Australia

Sydney, New South Wales, Australia

Sydney, New South Wales, Australia

• Delivery for new and existing customers• Managed services L3 network engineer for multiple customers• Experience with VMWare Velocloud, Cisco VManage, Jira, Meraki, Palo Alto, Logic Monitor, Lastpass, MS Teams/Sharepoint

Mississauga, Ontario, Canada

• Managed & planned on-site DC complete overhaul from neglected legacy Brocade to Nexus 9K/3K distribution/ToR 10/40/100G for segmented internal client business unit. Custom ordered and installed fibre MPO cabling run throughout DC server ToR cassettes to bulkhead aggregation in network rack. Uniform APC rack PDU’s installed to replace the mish-mash of consumer grade power bars providing electrons to compute equipment. Actual cutover time took less than full weekend• Commissioning of 10G VPLS backbone between major corporate sites in TO/LA/NY, decommissioning legacy 50Mbps MPLS architecture• Replaced aging Juniper SRX345/EX4200 internet edge infrastructure with highly redundant Cisco ASR-1002X/stacked Cat9300 combo. Existing 2x1G circuit upgraded to 2x10G LR optics with diverse tier 1 providers. Full BGP table exchange• Updated VPN termination from Azure native to Azure hosted PAN VM300 appliance, facilitating Azure AD IdP authentication of IMAXs SSO enabled corporate applications• Design/implementation of Cisco WLC5520/AP380x wireless controller/APs, stacked Cat9300 mGig switches to support full PoE power delivery for 34 Cisco APs• Install/configuration of redundant WLC5520 unit to facilitate hot standby WiFi failover• Decommission single Meraki MX100 headend unit with MX84 redundant pair to enable seamless AutoVPN connectivity for Meraki enabled satellite offices• Full network refresh in Meraki satellite offices: Tokyo (onsite), Ireland (remote), IMAX Indianapolis at the Indiana State Museum (onsite), IMAX Esquire Sacramento (on hold Covid-19)• Installation of TrippLite B097 console servers• Implemented Endrun Technologies Sonoma D12 NTP server for local stratum 1 GPS service• Software updates for Cisco IOS/Nexus/Meraki, Juniper EX, Palo Alto, F5 BigIP VE• Solarwinds Orion Network Management – migration of dated 12.2 NPM/NCM/NTA/IPAM/EOC to new host/IP instance, maintaining existing database and to secure against the SUNBURST supply chain vulnerability

Toronto

Toronto, Canada Area

• Experience in deploying virtual cloud cross connects using Megaport cloud network services provider for direct connectivity to cloud providers (Azure/AWS)• Experience in deployment and configuration of Palo Alto virtual firewall appliances in Azure• Involved in co-ordination/upgrades of multiple Palo Alto firewalls and Panorama management appliance from v7 to v8, and PAN User-ID Agent upgrades• Rebuild and installation of Cisco ACS 5.6 multiple virtual appliance deployment• Software upgrade of redundant Cisco 5520 Wireless LAN Controllers with 100+ Aironet 3700 series lightweight AP’s to maintain software currency and address KRACK vulnerability, WebAuth/WebAdmin certificate implementation

Toronto, Canada Area

• Upgraded existing and new perimeter zones to multiple redundant Palo Alto NextGen (PA-5020/3060) security appliances utilizing App-ID, User-ID/agent, URL filtering, Wildfire, Threat Prevention, Global Protect VPN ultimately providing additional redundancy and security over existing setup; provided on-going maintenance of these appliances from PAN-OS code v6.0+• During new data centre deployment, designed and implemented Cisco Nexus 5K/2K core network with multiple VRF support and multi vendor security architecture encompassing Palo Alto/Cisco ASA-X redundant appliances• During new build of G&M CMS project, established Amazon AWS DX (Direct Connect) connectivity + VPN backup enabling a more robust next gen publishing system for daily operations• During building move, identified opportunity to improve security by implementing Cisco ISE 2.1 redundant virtual ESXi platform leveraging next generation NAC and AAA functionality linked to Meraki WiFi solution to enable 802.1x client authentication• Facilitated and executed move of local compute in legacy HQ to 2 remote DC locations, resulting in 75% size reduction in raised floor HQ server room and state of the art wired and Wifi infrastructure• Leveraged extensive testing during migration of Single-Point-of-Failure B2B VPN portal to new Cisco 29xx series appliances incorporating active/active Stateful Switch-Over IPSec VPN infrastructure to ensure 99.999% uptime to key business partners’ networks• Upgraded end of life appliances for G&M, performed remote access SSL VPN migration of redundant Juniper SA-4000 appliances to Juniper/Pulse Secure MAG-4610 appliances and VPN client setup• Migrated physical RSA Authentication Manager v7.1 and SecurID instance to virtual hardware + software upgrade to v8.1 to maintain our 2FA security enhancement

Toronto, Canada Area

• Advanced knowledge of BGP functionality to multiple upstream private (Bell, Allstream/Zayo, Cogeco, Cogent, Terago, Peer1) providers, plus public peering (TorIX). Managed the BGP configuration for the www.theglobeandmail.com & tsn.ca websites, among others• Highly experienced in management and maintenance of the Catalyst 65xx/76xx product line including redundant supervisor engines, redundant FWSM modules and Ethernet/fibre ASIC switching fabric• Migration of redundant Cisco PIX VPN appliances to secure hardened Cisco IOS 2821 routers utilizing DMVPN, GRE and dynamic routing technology for efficient branch site connectivity• Major upgrade of basic Websense Web Filter product to total package of Websense V10000G2 hardware appliance and Web Security Gateway including SSL decryption and transparent proxy/WCCP redirect

Toronto, Canada Area

• Assessed feasibility of upgrading CATOS/IOS on Cisco equipment• Built, configured and tested virtual machine host and guest operating systems including migration to and from physical to virtual environments using IBM xSeries servers• Implemented and tested new routers for production frame relay connection

Sydney Area, Australia

• Designed, implemented and maintained the Pacific region head office network from the ground up, consisting of Cisco Catalyst 4506 core/distribution switches, stacked Catalyst 3750 server farm switches, and Catalyst 2950 access switches. Ongoing maintenance and support of LAN/WAN infrastructure for local and remote branches• Managed & negotiated with domestic and international telecommunications vendors to provide cost effective & reliable network services to all corporate locations within the Pacific region topology, including B2B and joint ventures• Participated on global team to implement and pilot new VPN remote access solution worldwide, integrated with Verisign digital certificate (PKI) authentication for highly secure corporate access which also paved the way to secure and encrypted email transmission.

Sydney, Australia

• Performed help desk, phone and technical support for 1200 users• Administrated Windows desktop platforms• Configured Outlook client software, administered domain and Exchange accounts