* Deployed / Managed Openstack stack* Deployed / Managed Cisco ASA with BGP, VTI tunnel, VPN-MFA, PBR, and AAA* Deployed / Managed Cisco catalyst VLAN, etherchannel, trunk, and AAA with Ansible* Fully Automate CDE node provisioning with Ansible and Cobbler* Deployed / Managed OpenVPN site-to-site tunnel with FRR* Automate laptop provisioning with Microsoft MDT* Design Corporate and remote Office infrastructure

* Deployed/Managed Openstack stack with baremetal instance build up (Ironic).* Deployed and customized configuration management Chef cookbooks.* Automate CDE node buildup from pxe boot to fully operational node.

Automation Engineer: Contract position reporting to Deployment Manager (Collabera)• Developed a ruby script using selenium with SOAP to automate printers’ web GUI configuration for stores.• Created a Jankins job to create JSON files for servers build.• Create and customize cookbook to install RVM and basic gems and tomcats.• Customize ruby gems to automate server build on VMware and Openstack platform.• Automate server provisioning procedure for VMware and openstack.• Chef configuration management:• Deploy and update wrapper, library cookbooks.• Configure or Update vault, data bags, roles and node objects.

Equilar Inc.: Market leader for premier source top-five compensation benchmarking, providing clients with instant access to presentation-ready data drawn from SEC filings.• Manage and trouble shoot windows servers, linux servers, PIXs, switches, and routers.• Configure and Manage Redhat ES 4 and 5 server with Nagios, snmp, iptables, MRTG, apache, jboss, wordpress, postgressql, mysql, bugzilla, and syslog.• Manage windows exchange 2003, DC, OWA, spector, perforce, ninja, TrendMicro antivirus and veritas backup.• Configure and manage cisco router with access-list, load balancing with cef, and backup router with rtr monitoring.• Configure and manage cisco PIX with access-list group, vpn tunnels, NAT, and backup route with rtr monitoring.• Configure and manage cisco catalyst with port monitoring, port fast, and spanning tree.• Customize and debug the PHP intranet.• Customize and redesigned bugzilla for tracking helpdesk ticketing and nagios alerts.• Trouble shoot crons shell scripts.• Support users with any helpdesk issues.

Friend Finder Inc.: The FriendFinder Network is the leading global online relationship network, allowing over 20 million registered members to confidentially and anonymously meet people with similar interests and mindsets in a safe, exciting environment. Founded in 1996 and privately owned.• Manage and troubleshoot windows 2003 severs.• Implement Windows domain policies.• Trouble shoot IIS and apache issues.• Configure and Manage Windows Media Service.• Configure and trouble shoot Flash Media Servers.• Installed and configure Symantec Antivirus.• Trouble shoot any hardware issues.

Don Todd Associates Inc.: Provides Project & Construction Management Services. The company is a culturally diverse team of program and construction managers, architects, engineers, cost estimators, schedulers, inspectors, and support personnel. • Configured and manage West and East Coast Offices VPN tunnel using PIX 515 and 506 firewalls, and 1700 series Cisco routers. Enabled SSH for remote administrations. All the network traffic logs are remotely store at the syslog server for debugging and archive. • Design and implement the corporate office network to support multiple environments: DMZ, servers, and inside VLAN. The server VLAN (the most secure subnet) traffic is controlled by one to one relationship with necessary ports opened only. All the nodes on server VLAN has no direct access to the internet. The DMZ (the second most secure VLAN) traffic is controlled by one to many relation with specific port opened. The DMZ VLAN has partial internet access. Finally with users VLAN (the least secure subnet) traffic is controlled by many to many relationships. The users VLAN has full access to internet. In some offices NAT is also implanted as a supplement.• Implemented and manage Corporate and remote offices servers: Exchange 2003, ADP, Veritas 9.1, Multi users Expedition 9.1, Timberline Estimating, Timberline Accounting, 2003 SSL OWA, 2003 Domain Controller, RAS / DHCP, FTP, McFee mail relay, File / Printer, and Sybase on Windows 2003 platform. Server policy, Server firewall / traffic logs, and access logs are in process in implementation.• Configured and manage Linux Red Hat 9.0 servers: syslog, sendmail relay, and DNS (bind 9) with iptables enabled. Implement N-top traffic analyzer on Solaris 8.0 platform.• Provide leadership and support for East Coast Office IT staffs in any issues for servers and networks equipments.• Support users 24X7 on any issues on Windows XP and 2000 platform.

• Configured fault tolerance edge routers 3660 with HSRP, BGP, and access-list. The active router with active priority 100 and tracking the WAN Serial interface has a T1 point to point connection to the ISP. The standby router with standby priority of 60 has a shadow T1 point to point to the ISP. BGP is configured as a private AS advertising a class C LAN IP through route-map. Inbound traffic is controlled via static access-list and logging to the log server all the deny attempts. Outbound traffic is also controlling via static access-list also and permitting only the LAN class C IP address. LAN to LAN VPN traffic is cap by traffic shaping. Crypto key is generated for SSH connection. A crossover cable was used to interconnect the two routers.• Configured PIX 525 firewall access-list for users, server, DMZ, QA, outside, and inside VLANs. Generated a crypto key for SSH administration connection. Static mapped servers on DMZ. Port address Translation is used for users VLAN only. LAN to LAN VPN is also configured for interconnecting global sites.• Configured 6509 and 2924 switches. Two 2924 were configured for External and DMZ VLAN. Each of them has two VLANs and with two fiber trunk links (802.1q). Administrative interface was configured on DMZ VLAN. A 6509 and two 2924 was configured for user, server, and QA VLAN. Triangle topology was form interconnected via fiber trunk. The two 2924 served all the servers traffics and the 6509 was serving all the users traffic. Administrative interface was on server VLAN for all the three switches. 6509 has the role for the server for VTP.• Administered the cluster Exchange 5.5, Domain Controller, file / print, Varitas Backup exec 9, SSL OWA, and McFee SMTP relay. • Configured bugzilla 2.16.1 servers with: MySQL access controlled via IP with authentication, sendmail was configured as relay, and apache was customized with different homepage and access.

8/2000 - 11/2001 San Francisco, CAMiFund, Inc.: An international financial services company that provides comprehensive solutions for the distribution of mutual funds. Senior Network Engineer / Senior NT Administrator: Reported to the Director of IT.• Designed and maintained the production site and multi corporate sites for a fault-tolerance networks (PIX 515 and 525, 3640 and 2621 routers, VPN concentrator, and Catalyst 4003, 2948G, 3548, and 2948) with HSRP, NAT, access-list, OSPF, trunking load balancing, VRRP, VPN, spanning-tree and VLANs.• Configured the Corporate network with: two 3640 routers, two 4003 switches, two 515 PIX firewalls, and two 2948 switches. The two routers were configured for HSRP and access-list. The two 2948 was configured with two VLAN for DMZ and external subnet. The two PIX firewall access-list was controlling traffic for inside, outside, server, DMZ, front-end QA, and back-end QA VLANs. The two 4003 switches was configured with four VLANs. Administrative interface was on server VLAN. • Troubled shoot any network related issues. • Scanned traffic logs (syslog), and network / nodes statistics (N-Top).• Resolved any network attacks, using PIX / routers logs or protocol analyzer.• Configured and maintained Windows 2000 advance server, exchange 2000-enterprise cluster, Veritas 8, DNS, DHCP, VPN, OWA, Network Associate virus scan, and FTP. • Configured Linux BIND 8 server DNS cache on VA-Linux servers. • Responsible for overall security strategies and procedures, including the development and implement network intrusion detection strategies.• Supported end-user with any issue related to Windows 2000.• Managed and trained Jr. System Admin, and on call NT admin roles / responsibilities and schedules. • Evaluated new and emerging products and technologies.• Supported Software Engineer and Programmers with related issues in contract to the production vs. Network.

• Configured two L3 BigIron switches for mailcity.com production data center. VRRP was configured for the internal VLAN. OSPF, VRRP, and access-list was on the external fiber interface connected to two 5500 switches. A fiber cable was used for trunk. Created two mirrors port for monitoring.• Replace the whowhere.com corporate 7400 router with an updated IOS and upgraded the NVRAM. • Troubled shoot and configured Cisco routers (Cisco 7500, 2600, 2500, 3600) and switches (Catalyst 5500 with RMS) at Exodus data center and corporate building.• Configure and troubleshoot OSPF areas and BGP routing protocol with route-map.• Configured L2 FastIron switches VLAN, VTP, and trunk for Lycos Shoreline office. • Configured and implemented terminal DEC servers. Customized cat 5 for console connection for Cisco and sun equipments.• Monitored Cisco load balancer and Arrow Point load balancer. • Monitored the network for any outage, connectivity, and congestion on Fast Ethernet, DS3, T1, and Gig Ethernet. • Resolved any routing, connectivity, packets lost or access-list issues.• On call for network 24x7 operations support.

• Telnet to Cisco core, red-back, and dedicated Cisco routers to trouble shoot customers T1, DSL, ISDN, DS3, and Frame-relay connections using UNIX and NT box. • Troubled shoot customers' email server through telnet session on port 25, and verify customer's domain has the proper DNS records.• Troubled shoot dialup customers: email, NIS+, performance, authentication, and MAX or TNT switch.• Followed through with diagnostics report and resolution with the customer.