Redesign and migrate company Internet edge to dual ISP connection with provider independent IP address space and Ulta’s autonomous system(AS393587). As a part of the project Cisco ASA firewalls have been replaced with new hardware(ASA 5545-X) and configurations have been migrated from 8.2 to 9.2.Architecture and implementation Cisco ASA IPSEC/SSL/AnyConnect VPN to support 3rd parties and engineering staff.Network infrastructure evaluation/architecture/implementation/support for production and pre-production environments.Research new technologies and provide directions to improve Ulta’s network(SD-WAN, Smart OutOfBand, SDN, automation).Lead engineer on Infoblox DNS/DHCP redesign project and infrastructure upgrade/refresh. During the project end-of-life appliances have been replaced and all infrastructure have been upgraded to the latest available stable code without any down time.Lead engineer on F5 infrastructure upgrade/standardization project. Provide daily support for application owners to create optimal load balancing solution and troubleshooting application issues when needed.Assist in design and deployment Ulta ACI ready datacenter with spine and leaf architecture using Cisco Nexus 9K/7K/5K/2K line. Internal routing protocol has been migrated from EIGRP to OSPF.Design, implement and support wireless solutions for remote locations using Cisco Wireless Controllers and lightweight WAPs or Cisco Meraki Wireless.Implement and manage company wide monitoring system using Solarwinds Orion and Netbrain.Automate repetitive network tasks with Python scripts.Training and mentoring network engineers and operations staff.Participated in 24/7 on-call rotation.

Design and deploy corporate network infrastructure solutions including routers, switches, firewalls, WAPs and other network related hardware. Handle day-to-day routing/switching/firewall administrationDesign and implement BlueCoat Internet caching solution with user authentication in Active DirectoryManage F5 BigIP LTM load balancers for internal and external facing environments. Work closely with application owners to create custom F5 setups using custom monitors, F5 SSL offload and adjusting traffic flows using iRulesConfigure and deploy lightweight WAPs using Cisco Wireless LAN Controllers and Cisco Prime InfrastructureManage SolarWinds Orion monitoring solution for network related services

Designed and deployed corporate LANs/WANs/WLANs including routers, switches, firewalls, WAPs, Lantronix, UPS, transfer switches and other network related hardwareDesigned, implemented and maintained new distributed F5 load balancing infrastructure (GTM/LTM); lead engineer for F5 load balancing infrastructure migration project from v9 to v11Managed F5 BigIP LTM and GTM load balancers for numerous internal and external facing environments. Worked closely with application owners to create custom F5 setups using custom monitors, F5 SSL offload and adjusting traffic flows using iRules. Created custom F5 tmsh scripts to automate company DR test. Troubleshoot F5 performance using tcpdump and analytic profiles.Designed, installed, and maintained Riverbed SteelHead 6050 WAN Optimizer appliances to reduce traffic between company Data CentersConfigured and maintained Cisco ACS 5.3. Lead engineer for ACS 4.1 to 5.3 migration projectParticipated in company wireless refresh project; provided help with design, configuration, installation and troubleshooting of Lightweight Wireless access point, Wireless LAN Controllers and Cisco Prime Network Control SystemAnalyzed network performance and connectivity issues using OmniPeek/WireShark and Netflow; troubleshot both connectivity issues and hardware problemsDocumented procedures and maintain network diagrams and other related materialsConfigured, monitor LAN/WAN links and enterprise-level network devices 24/7/365 for failures and performance issues via CA Spectrum, Solarwinds Orion, Syslog/Splunk and Netflow (NetQoS)Participated in 24/7 on-call rotation, and work off hours and weekends when necessary to meet business needs

Configured and troubleshot DS3 and T1 linksConfigured and IOS updated for cisco switches(3550, 3524, 2950) and routers(7206, 2821)Planned and migrated from TFS Secure Messaging Server(Windows 2000) to Postfix MTA(FreeBSD)Installed and configured FreeBSD as web (apache+php) and mail (Postfix) server with MySQL support, Dovecot (secure IMAP/POP3 server), Roundcube (webmail interface)Configured Barracuda Networks Spam Firewall to work with new mail serverTroubleshoot cisco routers and switch configurationInstalled and configured RADIUS server; configured Cisco devices to authorize with RADIUS serverPlanned and migrated from Windows NT4 Server domain to Windows 2003 Server domainImplemented Active Directory policies and startup scripts to connect network drives and printers