Responsibilities:- Design, maintain, support and document corporate LAN and WAN for over 80 sites and 1400 employees.- Review, configure and maintain corporate security hardware, software, and implementation policies- Configure and maintain corporate remote access systems- Configure and maintain corporate wireless network- Coordinate Internet and WAN circuit installations- Maintain Shoretel and Vonage VOIP systems and provide QOSAccomplishments:- Designed and configured colocation network, featuring fully redundant core, security and distribution layers- Implemented Cisco ASA SSL/Anyconnect VPN for secure employee access- Migrated firewall from single Cisco FWSM firewall to redundant Cisco ASA cluster- Installed and configured Splunk syslog management software to facilitate troubleshooting- Implemented dynamic routing between remote MPLS sites using OSPF and BGP- Configured Solarwinds and WhatsUp Gold NMS to provide Netflow statistics for Cisco routers and switches, resulting in increased network visibility- Implemented Cisco ACS in order to support TACACS authentication on all Cisco network devices- Implemented redundant, meshed DMVPN network for remote sites in order to facilitate VOIP- Facilitated build-out of broadband Internet and accompanying hardware for satellite officesHardware: Cisco 800, 1600, 2600, 2800, 3600, 3800, 7700 series routers and 2900,3500 and 6500 Catalyst switches and Nexus series switches, Cisco ISR routers, Sonicwall VPN, Cisco ASA firewalls, Cisco FWSM, Palo Alto Firewalls, Cisco WLC, Cisco Aironet Wireless Access Points, Juniper Netscreen firewalls, Juniper SRX firewalls, Shoretel and Vonage VOIP, Riverbed Steelhead Network Accelerators.Applications: Microsoft Word, Excel, Visio, TACACS, Solarwinds, WireShark, PRTG, WhatsUp Gold, Splunk, ZenMap, MySQL, Microsoft Active Directory, DNS, DHCP, IPAM and Active DirectoryPlatforms: Windows, Linux, Solaris, VMWare, Hyper-V, AzureRouting Protocols: BGP and OSPF

Responsibilities:- Remediation of PCI security vulnerabilities- Implementation of firewall/load balancer service requests- Installation and configuration of network hardware- Network design for data centers and remote sites- Development of firewall configuration standards- Coordinate with 3rd parties to create and maintain IPSEC VPN connections to the Autodesk networkAccomplishments:- Implemented TACACS authentication on all Autodesk routers and switches, resulting in greatly improved auditing ability as well as PCI compliance- Configured screening features on firewalls to prevent malicious traffic- Redesign and installation of Autodesk lab network, resulting in improved network speed and reliability- Replaced Data Center DMZ and IPSEC VPN Juniper firewalls in order to increase performance and support new features- Created new data center network design for Autodesk Showroom- Created template for Autodesk standard firewall configuration- Upgraded all firewalls on the Autodesk network to standard version in order to simplify configuration and maintenanceHardware: Cisco 2600, 7200 series routers and 3500, 4500, 6500 Catalyst switches, Brocade switches, Juniper Netscreen firewalls, Juniper SRX firewalls, F5 load balancers, Silverpeak Network Accelerators.Routing Protocols: EIGRP

Responsibilities:- Lead engineer for the Chronicle network, encompassing 2000+ nodes and 20 sites, operating 24x7.- Management of two additional Network Engineers- Network design, build-out and maintenance- Development of maintenance and troubleshooting procedures- Evaluation of new products and services- Formation of capital budget requests and accompanying justification- Formulation and execution of data security policies including maintenance of PCI and SOX compliance.- Administration of MS DNS, DHCP and WINS servers.- Provide QOS for Avaya VOIPAccomplishments:- Replacement of aging Foundry network gear with new Cisco routers and switches- Replaced HP OpenView with open source NMS- Redesign of page transmission network to remote printing plants- Implemented in-house wireless Internet access throughout the SF campus.- Implemented Juniper SSL VPN, to replace client-based Checkpoint VPN- Migrated Cisco support from misc. vendors to a single “shared support” vendor, as well as negotiating for 24x7 monitoring of critical network devices - Implemented Secure Works remote Internet security probe, providing 24x7 remote analysis of incoming/outgoing Internet traffic for malicious activity.- Implemented ScanSafe Internet content filtering, drastically reducing the amount of Trojans and Viruses infecting Chronicle workstations.- Migrated Frame Relay WAN to Managed MPLS service, resulting in improved redundancy as well as lower capital and monthly costs.- Migrated from Checkpoint Firewalls to Juniper Netscreen Firewalls, saving support costs and providing increased availability via the use of multiple ISPs.- Implemented QOS on WAN links to support VOIP to remote sites.Hardware: Cisco 800, 1600, 2500, 2800, 7200 series routers 4500, 6500 Catalyst switches, Foundry switches, Checkpoint firewalls, Checkpoint VPN, Juniper VPN, Avaya VOIP, Riverbed Network AcceleratorsRouting Protocols: EIGRP and OSPF