Eric Koegel Email & Phone Number

- Assists in translating high-level architectural designs into platform configurations, and iteratively suggests design changes based on testing for the United States Army Central (ARCENT) area of operations spanning multiple sites in several countries.- Participates in troubleshooting network issues both with new installs and assisting with customer issues while on-site.- Performed planning and documentation of proposed changes to the network to include rack elevations, physical and logical network diagrams, as well as training and site turnover documents for the customer operations team. - Projects include: o Created a Virtual Private LAN Service (VPLS) to migrate the tactical services from a layer 3 virtual private network (L3VPN). This change greatly simplified ARCENT’s network design as well as the customers. Migrated this service to an Ethernet Virtual Private Network (EVPN) and coordinated with US Air Force Central (USAFCENT) for an Inter-AS option-C connection to extend this L2VPN on their network. o Built a phase 3 DMVPN on the classified networks utilizing Gem One to push the route list to all the KG-175s building the full mesh underlay. Implemented iBGP to have the spoke site select which order of DISA POPs to utilize to keep external traffic flows symmetric. o Created a point-to-point layer 2 virtual private network (L2VPN) utilizing MPLS TE to only route the connection over a specific portion of the ARCENT network to facilitate the customer’s PACE plan. o Assisted with site tech refreshes and new site deployments to include BGP peer policies with DISA, configurations of network devices such as Cisco ASA firewalls, ASR1K routers, Nexus 9K/5K/2K/3K datacenter switches for each enclave (NIPR/SIPR, etc) required at the site.

Falls Church, Virginia, Us

Supports operation, maintenance, and administration of a medium sized enterprise networkinfrastructure consisting of―o 100+ Cisco switches and routers (6500, 3750X, 2911, 4331, Nexus 5K/2K)o 2 Cisco Unified Call Manager Voice over Internet Protocol (VoIP) clusterso 150+ Cisco VoIP phones (7975, 9971)o 2 Cisco Adaptive Security Appliances (5520)o 2 Cisco Wireless LAN Controllers (5508)o 15 Cisco Wireless MESH Access Points (1552, 1252)- Performs configuration, deployment, and troubleshooting of Cisco Layer 3 Catalyst switchesimplementing 802.1x and AAA (authentication, authorization, and accounting) using TerminalAccess Controller Access Control System (TACACS).- Performs configuration and troubleshooting of remote access virtual private networks (VPN) onCisco Adaptive Security Appliances using smart card certificate based authentication to providesecure connectivity to individuals that are travelling to other locations worldwide. Switched from using IKEv1 via the Cisco VPN client to Anyconnect based IKEv2.- Transitioned from Cisco Prime LMS to Solarwinds Orion and setup Solarwinds NCM policies to enforce network security policies and baselines. - Administers Cisco Unified Communication Manager servers including configuration ofroute/translation patterns, configuration/installation of Cisco VoIP telephones,configuration/installation of voice mail/system call handlers on the Cisco Unity Connection, andconference bridges on the Cisco Unified Meeting Place Server.- Performs configuration, deployment, and troubleshooting of Cisco MESH APs and 5508 WLCcontrollers.- Created engineering documents for new projects, updated network diagrams, SOPs, and TTPs.- Implemented additional security controls per the DISA STIGs such as ACLs to filter voice or printer traffic to only the required ports/protocols, CoPP, QoS, etc.

Tampa, Fl, Us

Supports operation, maintenance, and administration of a large sized enterprise networkinfrastructure consisting of―o 300+ Cisco switches and routers (6500, 4500, 3750G, 3750X, 2811, 2911, 4331, Nexus 5K/2K)o Two Cisco Unified Call Manager Voice over Internet Protocol (VoIP) clusterso 500+ Cisco VoIP phones (7965, 7975, 9971)o 10 Cisco Adaptive Security Appliances (5505/5510/5520/5540)o 2 Cisco Wireless LAN Controllers (5508)o 25 Cisco Wireless Access Points (1552, 1252)- Performs configuration, deployment, and troubleshooting of L2L virtual private networks (VPN)on Cisco Adaptive Security Appliances to extend local network services to remote locationsthroughout the Middle East.- Performs configuration, deployment, and troubleshooting of Cisco integrated services routersimplementing Dynamic Multipoint Virtual Private Network (DMVPN) Phase 1 tunnelling.- Administers Cisco Unified Call Manager servers including end user administration, configurationof route/translation patterns, and configuration/installation of Cisco VoIP telephones,configuration/installation of voice mail on the Cisco Unity Connection, and conference bridgeson the Cisco Unified Meeting Place Server.- Transitioned all networks from port-security to 802.1x authentication with Active Directoryintegration and Mac Authentication Bypass using TACACS and Microsoft Windows NetworkPolicy Server.- Setup Cisco Smart Install to provide a zero-touch baseline to switches before being brought onthe network as part of a new install or tech refresh. Created a similar scripted setup to deployCisco routers with the appropriate template minimizing configuration mistakes.- Transitioned the network from being all static routes with no routing protocol in use to EIGRP over a phase 1 DMVPN in a dual core setup.- Created Standard Operating Procedure (SOP) documents and troubleshooting guides; updated network diagrams, and created engineering plans to support new requirements.

Newport News, Us

Supports operation, maintenance, and administration of a medium sized data center networkinfrastructure consisting of―o 30+ Cisco switches and routers (4500, 3750, 7200VXR)o Two Cisco Unified Call Manager Voice over Internet Protocol (VoIP) serverso 100+ Cisco VoIP phones- Responsible for the design and implementation of network changes in a medium size networkconsisting of SIPR, NIPR, and Coalition connectivity.- Performed configuration, deployment, and troubleshooting of Cisco Layer 3 Catalyst switchesimplementing port-security and AAA using TACACS.- Administered Cisco Call Manager servers; Configured and installed Cisco VoIP telephones.Involved in the planning, design, and implementation of integrating various 3rd party networksand platforms into the CAOC during major exercises such as the Air Force's Red Flag event,USAF Fighter Weapons School, and Virtual Flag.- Created and updated documentation for the CAOC Network Continuity and as-built diagrams.

Arlington, Virginia, Us

Supports operation, maintenance, and administration of Nonsecure Internet Protocol Router (NIPR)/Secure Internet Protocol Router (SIPR) network infrastructure. Network consists of―o 10+ Cisco switches and routerso 2 Cisco Unified Call Manager Express Voice over Internet Protocol (VoIP) serverso 50 Cisco VoIP phoneso 5 Tactical Local Area Network Encryptors (TACLANE).o 2 Active Directory Domain Controllerso 1 KU-Band Satellite Transportable Terminalo 3 10 meter UHF microwave antennaso 1 30 meter UHF microwave antenna- Lead a team of 3 soldiers providing desktop and network support to 500+ users including system baselines, connectivity issues, and hardware troubleshooting during 15 month deployment at a remote Joint Security Station in Iraq.- Member of an 8 soldier team providing desktop and network support to 1500+ users including system baselines, connectivity issues, and hardware troubleshooting during 12 month deployment at a forward operating base in Iraq.- Administered Windows Server 2003 Enterprise Active Directory infrastructure using Microsoft administrative tools (ADUC, GPMC, etc.)- Administered Cisco Unified Call Manager Express servers including end user administration, configuration of route/translation patterns, and configuration/installation of Cisco VoIP telephones.- Performed configuration, deployment, and troubleshooting of General Dynamics Classic, E100, and Mini KG175B TACLANEs.- Setup, operation, and maintenance of KU-band satellite and ultra-high frequency (UHF) 10 and 30 meter microwave antennas as well as associated radios and support equipment for WAN connectivity.- Coordinated circuit outages, maintained circuit diagrams and as-built drawings

Bachelor Of Science (B.S.), Information Technology—Security

High School Diploma