Brought in to design an advanced network infrastructure for using Converged Plantwide Ethernet (CPwE) architecture to optimize IT/OT segmentation. Ensured secure data sharing through Industrial Demilitarized Zones (IDMZ). My work includes integrating defense-in-depth strategies and role-based access control (RBAC) to protect Industrial Automation and Control System (IACS) assets. Additionally, provided increased L7 operational visibility and advanced IDS/IPS support via deep packet inspection.Contracted to assist with multiple Palo Alto Network firewall upgrades, software and hardware.Worked to help redesign routing infrastructure and consolidating routing protocols to a simpler design.Worked with company to design out better network segmentation options to split manufacturing data from LAN/WAN.

As a key collaborator with engineering teams, I leveraged technical expertise and process-based, structured thinking to develop practical solutions aligned with business objectives. In this role, extremely effective communication with geographically disparate teams was critical to ensure success. Additionally, I actively identified opportunities for process improvement, and helped implement new processes to drive efficiency. Examples of systems developed -JACE8000 system automation integration.Solar PV controller integration for green initiatives.Off-boarding legacy hosted applications to new cloud solutions.Identified and resolved process and human error issues that had remained unsolved, in some cases for years.

SA role involving working with strategic vendors such as Palo Alto, Aruba, and Fortinet.

Assisted on a 6-month contract to lead network redesign, create process improvements, and assist as needed with projects and/or operations.

Assisting with documentation, process improvement, and life cycle replacements in order to help bring the business to increased scale.

Harley-Davidson Corporate in Milwaukee, WILead engineer that worked extensively on-site in York, PA to configure and install Catalyst 9400 and Rockwell Stratix 8000 switches in order to bring up a new production line that produced the first Harley-Davidson electric motorcycle; Livewire.Responsible for coordinating and configuring the LAN/WAN for a newly built Thailand plant for Harley-Davidson; worked with on-site contractors to ensure power, configuration, and wiring standards were met to HD standards.Extensive on-floor wireless troubleshooting of automated carts for moving motorcycles through production line.Extensive troubleshooting under 2.4GHz and 5Ghz U-NNI bands.Lead engineer responsible for decommissioning all Cisco infrastructure equipment at the Harley-Davidson Kansas City, MO plant.Worked extensively with multiple project managers at Harley-Davidson in order to ensure complex projects were completed within time and budget constraints.

Cisco ISE configuration deployment across infrastructure.Migrated organization away from ACS to ISE for infrastructure equipment.Design and placement of Access Points for new locations using heat maps and Cisco Prime.Cisco Prime operational support.Project Management of LCR (Life Cycle Refresh) of networking closets using 4510R+E chassis and Supervisor 8 Engines.Ensured ISE, security, and configuration standards were followed per corporate standards.Process and technical mentoring within the team.

Identified security risks and vulnerabilities based on proven methodologies using Fortinet firewalls.Acted as an interim network engineer and mentor until the hired engineer was available to start the role.Built out a network operations center using PRTG.Developed a company-wide refresh plan in order to replace aging switching gear with new models under 4510/3850 platforms.Operational remediation of network issues.Upgraded Fortinet firewalls to latest code and configured security policies for new services.

Worked in a lead design role for the Harley-Davidson Global Security project in bringing ISE (802.1X), IDS/IPS, and East/West WAN security to data centers and production facilities for protection within the network.Lead engineer responsible for replacing aging 65xx switches with 4510R+E switches across the organization.Responsible for working with the CISO security team to develop standardized model configurations for routers and switches.Replaced the entire Harley-Davidson DMZ infrastructure using ASA5555, 4120, and 8350 Cisco platforms under cluster and fail-over configurations.Worked with Advanced TAC for several weeks in order to isolate and develop ISE code fixes for their 3750X 15.0(2)SE platform. Cisco bug CSCuu00897 was an IOS code bug that I petitioned Cisco to work with me and resolve. After extensive testing and Wiresharking, they released a fix.https://quickview.cloudapps.cisco.com/quickview/bug/CSCuu00897

This role was primarily an architect role under a service provider model using multi-tenancy (VRFs or routing-instances).Designed new data center infrastructure rows from access layer (servers) to routing to firewall to edge to Internet at Latisys (Tier III+) in Oakbrook, IL.Designed and built a new Tier III+ data center row at OneNeck (Zayo) in Madison, WI.Deployed Dell ISensor IDS and IPS systems at multiple hosted data centers.Extensive experience with Fluke Systems TruView and NetFlow / SFlow.Designed the DMZ using routing-instances (VRFs) under multi-tenant model.Primarily responsible for architectural design of the LAN and WAN enterprise infrastructure under Junos and Cisco Vendors.Provided leadership and mentoring for other Sr. level engineers.Negotiation with 3rd party vendors (OneNeck, Latisys (Zayo), AT&T) in order to meet primary objectives of new networking designs.Developed change control standards and SOPs for other engineers that make changes on the LAN/WAN.Design, configuration, and implementation of Dell ISensor, Fuke Truview Operational Monitoring, Juniper EX4550 switches, Juniper SRX240 firewalls, Juniper EX3550 switches (VCF), Juniper MX104 routers, Juniper SRX1400 firewalls, Cisco ASA515 firewalls, and Cisco 3750 switches (Stackwise).Deployed Cisco Collaboration VoIP System, ASA 5515 SSL phones for remote users, and Cisco AnyConnect client for 100+ users.Designed and wrote Cisco ASA5515 code from ground up.Responsible for designing and diagramming network design proposals.Installation of Fluke TruView operational monitoring systems.

Network analyst in a large environment responsible for complete network support of the Affinity hospitals in North Eastern Wisconsin. Supported Cisco architecture for St. Elizabeth Hospital (Appleton), Mercy Medical Center (Oshkosh), Calumet Medical Center (Chilton), and surrounding Affinity clinics including all LAN, WAN, NAT, and L2L VPNs.Management of 750,000 devices and 43,000 interfaces.Performed many (10+) LCR (Life Cycle Replacements) of legacy switches and completely replaced closets with Cisco 3750v2 switches (IOS 12.2.52-55SE) under Cisco StackWise, RPS2300 (Redundant Power System), and LWAP PoE configurations.Led the project to upgrade St. Elizabeth in Appleton, WI hospital network core from 4506 to 4510+ chassis.Negotiated and configured L2L IPSEC VPN tunnels with third parties using AES256 encryption and PSK configurations on Cisco 5520 firewalls.Deployed network systems for Affinity clinics per EHR (Electronic Health Record) standards to provide high levels of fault tolerance and reliability.Supported virtualized Citrix environment up until LACP/PaGP Ether-Channel hand-off to VirtualConnect on blade chassis.

Assisted with start-up implementation of the JDEdwards ERP suite from the GROUND UP, including a mix of NT, AS/400, and TSE (MetaFrame 1.8 and XP) servers in 2000. Compaq hardware used (DL360 and DL380); redundancy achieved by implementing MSCS clusters, RAID5, and Cisco Fast EtherChannel. We took a paper mill and deployed an entire ERP package to build the business. Go-Live was a success in October, 2001.Corporate network engineer responsible for project management and deploying network upgrades since 2000.Worked with process automation to upgrade legacy systems using virtual machines as cost savings measure.Authored articles for the company newsletter to communicate IT uses of technology.Installation of Lefthand SAN for use with Exchange and other open systems.Installation and support of Cisco Catalyst 6509 core switches.Implemented corporate wireless 802.11b Wi-fi with Cisco Wireless LAN Controller using a consistent campus security deployment.Administration of company phone switch (Rolm 9751) and VM; Adds/Moves/Changes.Managed corporate upgrade project to remove all access layer hubs and replace with 3548 and 3550 Cisco switches from start to finish.Management of contractors.Wrote and presented Capital Authorization Requests to senior executives.Corporate Exchange (750+ mailboxes) and Microsoft Cluster AdministratorManagement of Exchange 5.5, 2000, and 2003 clusters.Designed migration project from Exchange 5.5 to Exchange 2000.Designed migration project from Exchange 2000 to Exchange 2003.Designed and built redundant clusters for fault-tolerant applications using EMC Symmetrix SAN.Supported 100 nodes in a WAN configuration employing T1s, dial-up, frame relay, and VPN. Responsible for designing and maintaining routers (EIGRP) in a WAN configuration that services distribution centers in surrounding states.

Installed and configured LANs using proprietary satellite Internet connections (Satellite / Dial-up).Serviced equipment from HP, Compaq, IBM, Dell, and Sony.Serviced NT servers and fault-tolerant systems including RAID5 configurations.

Contracted technician employed under multiple contracts.Administer digital/analog phone networks and related equipment. I assisted with Win95 rollout and the placement of 2000 workstations. Supported Win95 systems under WAN. Diagnose PC-related problems via telephone. Diagnosed and repaired HP LaserJet and DeskJet printers. Worked with AS/400 system under RUMBA emulation.