Jonathan Cote Email and Phone Number

• Connect remote contingency operation sites to a central network system via a wideband satellite link to allow direct data transfer, voice, and video, facilitating communications between various ground forces. Topology is comprised of eBGP WAN on the black core to KG encryption device, OSPF within the LAN, subnet SVIs on the ASAv for end-user subnet gateway/layer four packet inspection, and network security best practices.• Monitor and manage network data, voice, and video infrastructure, including cryptographic equipment to include the KG – 175 A/D/XS trunk encryption devices for classified networks. Infrastructure comprises deployable modular systems allowing swift link backbone communications for deployed forces in austere environments.• Troubleshot and sustained Cisco Routers, Switches, Firewalls, Redcom voice module, and VMware ESXi to maintain the optimum equipment up-time to 30 mission-critical Air Force personnel.

• Strategically orchestrated WAN architecture planning, design, and configuration phases, including ASR9K, Catalyst 9300/9500, Firepower 1150, NSO, and ISE. Engineered a robust infrastructure, ensuring program resilience, redundancy, and fortified security measures using STIGs for seamless and secure communications.• Designed and configured Cisco Network Services Orchestrator on a virtual platform, providing use-case-built device template XML automation scripts and executing multi-node configuration changes supported by Ansible.• Configure and integrate Cisco Identity Services Engine into RHEL IDM external identity source, in conjunction with AAA services for infrastructure devices, providing granular control and oversight over accountability.• Provide technical leadership and guidance for enterprise network technologies used by federal customers regarding technical solutions, overcoming roadblocks within the Dev and T&I system, satisfying requirements leading to project ATO, and successfully deploying production equipment to their respective Prod remote sites.• Exemplified expertise in strategic planning, meticulous design, and proficient implementation of the RHEL 8 Satellite infrastructure. Orchestrated seamless deployment and integration with appropriate manifest, showcasing advanced troubleshooting skills to ensure optimal performance and reliability in a dynamic environment.• Guided and spearheaded the comprehensive planning, configuration, and successful implementation of a resilient High Side architecture build, harnessing cutting-edge technologies, including RHEL 8, ESXi, and Firepower 4125 virtual firewall instances. Masterminded the seamless deployment of numerous hardened virtual RHEL 8 instances, intricately woven into the infrastructure fabric with logical segregation and adeptly managed through RHEL 8 Satellite, establishing and maintaining a secure landscape supporting cross-functional teams.

• Design SD-WAN solution which implements a phase 2 DMVPN Hub/Spoke Spoke/Spoke architecture to bring multiple platforms online to transfer data from a Persistent Systems MPU-5 Wave Relay radio using S/L Band• Designed and implemented LAN/WAN solution using procured Commercial Off the Shelf (COTS) and Government Off the Shelf (GOTS) products to be integrated into the AERONet project • Design, configure, and test a network architecture within Google Cloud Platform, providing a traffic generation capability with custom-crafted stateless and stateful packets to work in line with a network impairment device • Design and configure a system using capacity planning accounting for volume and surge demands within an XR2 cluster underlay with a VMware NSX-T overlay, providing scalability, resiliency & security• Developed conceptual, logical, and physical network designs with Visio to show traffic flow and layers 1 through 4 of the OSI model with details to include link speed, VLANs, L3 interface IPs, and routing boundaries• Designed, built, and configured AWACS JWICS testbed proof of concept utilizing IPSec VPN underlay transport with the service provider. An implemented Phase 3 DMVPN w/ IPSec overlay that connects the AWACS platform. Routing from the ariel platform to Ground Entry Point is complete using eBGP on the WAN side, redistributed into an OSPF instance for LAN routing to a KG-250. The KG utilizes the routing architecture to obtain and maintain a Security Association with the JWICS connectivity platform.• Designed, architected, and configured the ANGI APN failover utilizing advanced routing techniques by implementing multiple ISP connections managed by traffic engineering. These consist of Best Path selection through Local Pref on primary, AS prepend for secondary, and IP SLA.

• Designed a customer requirement that entailed the moving workload from an on-premise datacenter to Azure by securing the network utilizing SD-WAN from Viptela and Meraki MX appliances with AMP. Within the condition was the use of AnyConnect and Umbrella. This designed implementation placed an ASAv hosted in Azure parallel to the Viptela vEDGE appliance giving both WAN security and the ability to use AnyConnect with Umbrella roaming security module.• Plan, designed and executed a complete routing protocol overhaul to include removing the iBGP/eBGP relationship and integrated OSPF for an interior gateway routing protocol and moved iBGP/eBGP to the edge to complete the customer edge to ISP relationship. • Assessed, planned, and designed the network security layout of an environment that needed a complete security overhaul and implementation of best practice to include OSPF/BGP MD5 authentication, MAC filtering, VLAN segregation, IP segregation, Site-to-Site/Site-to-Cloud VPN protection, client VPN protection, Umbrella DNS protection, and visibility with Stealthwatch/AMP.• Assessed, planned, and designed a net-new infrastructure for a pharmaceutical client that required ease of management and UI configuration. Proof of concept with Meraki was demoed for the client to show the completion of requirements. The setup included MX400 Firewall for WAN, MS425 Core devices, MS350 to support Multigigabit for aggregate WAP access, and MS250 switches provide traffic flow for the access layer.

• Design solutions to complement issues regarding current network infrastructure tie-ins between customer transport links and requirements including NAT/VRF solutions to solve IP overlap issues.• Review and approve proof of concept designs and implementation that have been built to spec, personally test the solution to verify it meets the given requirements of the customer.• Brief senior leadership with the guidance of new technology during SLA discussions, upgrades to current infrastructure, buildouts to future implementations using Visio to show high-level overview down to physical connections.

• Design, test, and implement Certification Testing Plan with the McAfee Web Gateway to verify appliance security features against NIST 800-53 which consists of appliance steps and procedures verifying claims of a hardened boundary protection proxy filter and a Risk Management Matrix schedule when a control can’t be met.• Part of the systems integration team to carry out the System Security Plan which consists of performing risk assessment against the LAB system before integrating into production once a build out is complete.• Designed, configured, and implemented dynamic routing for the Enterprise Cross Domain Solution on Low, Medium, and High enclaves through VRF implementation, SVI gateways, Layer 2 VLAN implementation, and subnet structure• Maintain STIG security requirements on Linux RHEL 6, Windows 2012 servers, and Brocade network equipment based on ACAS scans and milestones set by the risk assessment.• Provide network guidance towards architecture and buildout, presenting a design through a Visio drawing including device layout, rack elevation, out of band management circuits with management Loopback interfaces/IP’s, management/user VLAN with SVI’s, enclave area subnets for respective network devices

• Planned, redesigned, and implemented IP subnet structure for VTC units to traverse network in a standardized format. This includes; redesigning VLAN number/naming scheme, adding networks to EIGRP, allowing VLAN to traverse trunk links, creating layer 2/3 VLAN with SVI on the router, NAT exempt on Firewall.• Planned, designed, and executed installs on multiple off site VPN tunnels with 2921/892FSP Cisco routers. VPN install includes carving a new main subnet, deploying multiple smaller subnets for the user VLAN DHCP pool, AAA authorization/authentication for Cisco ACS (TACACS+), SNMP for Solarwinds monitoring, 2 phase VPN configuration using ISAKMP and IPSEC, and adding the subnets with site to site VPN configuration to Firewall using ASDM, these specific off site installs create a two layer VPN tunnel.• Supported new standup of a main line of connectivity for failover/upgrade reasons. This secondary line consisted of installing Type 1 encryption devices and running new copper from the main network to network of interest. Once the type 1 encryption was created, a GRE tunnel was needed for Point to Point connectivity. To influence desired tunnel, delay is manipulated to sustain primary and a tolerance metric for failover to secondary.• Tier 3 Network support to include troubleshooting routing/switching connectivity, Firewall permit/deny statements, Firewall Site-to-Site VPN, VoIP cisco Unity configuration and management.

• Plan and carry out network administration system design, development, testing, installation, and maintenance of Local Area Network (LAN) and Wide Area Network (WAN) architecture and to seamlessly integrate network systems consistent with existing network infrastructure.• Assists in performing existing network system analysis and evaluation, prepare concise reports as to the results including recommendations for planning, installation, maintenance, and management where necessary.• Schedules, plans, and performs periodic scheduled maintenance to ensure systems are operating at optimal levels and identifies steps necessary for optimization and performance fine tuning which allows me to monitor and control the performance and status of the network resources.• Responds to customer issues and evaluate problems providing technical guidance, advice and assistance to organization personnel.• Manage and troubleshoot customer workstation hardware and/or software to include; assisting in managing and refining the methods and techniques being used with Linux and Windows Server hardware and software.• Performs backups and maintenance of networked systems and locally installed telecommunications equipment and components such as file servers, routers, modems, printers, and other hardware.

- Managed and mentored a four person team under high - pressure circumstances, maintaining team integrity through efficient decision making and keeping enemy forces at a tactical disadvantage- Managed an inventory using Microsoft Excel which consisted of 12 pieces of equipment worth more than $100,000 including; personal and heavy military vehicles, night vision devices, and Automated Net Control Devices used to fill radio equipment - Coordinated with four other team leaders to establish specific measures for technical assigned responsibilities including actions on contact, rally points, and leadership roles and disseminated information to team members.- Advised senior leadership on strategic planning to improve the quality of service