Design, deploy, troubleshoot networks in a high security, high risk, extremely hostile locations.* Orchestrated creative solutions to deploy mobile data getting a WAN into remote isolated terrain.* Worked with diverse teams that rapidly deployed infrastructure solutions in under 30 minutes which included no hard lines, video, voice, and data over secure VPN.* Ensure solution design was repeatable, secure and be able to take power outages and other forms of physical damage. * Ensure custom monitoring solution was in place to detect failures in Network and non Network equipment, using a distributed network threat monitoring solution.

Redesigned and migrated 290 site global WAN from legacy Frame/X.25 to MPLS/IP VRF Backbone. Including design of new parallel WAN, migration strategy, proof of concept, optimal route migration path for OSPF, iBGP and eBGP. Including dual homed carriers on Juniper MX10 and Cisco ASR 1006 Routers for vendor redundancy.Designed new site campus design migration strategy for sites as they were migrated to new WAN topology. Designed included a collapsed core/distribution layer model with a “routed campus” design. Also designed/configured OSPF topology, OSPF timers, route aggregation, route summarization, OSPF authentication and redistribution of iBGP to OSPF and Summary Default injection of OSPF from core to WAN Edge into iBGP.Built automated router and switch configuration archival tools using Perl for Juniper and Cisco Routers and Switches to meet PCI Compliance.Enhanced end users’ understanding of network systems by conducting per-implementation workshops, delivering group and individual training sessions and creating user-friendly training materials.Develop corporate Network and Infrastructure budget for next quarter including project cost estimations, RFP proposals and presentation to senior management for approval.  Performed in-depth analysis to develop the next generation network design and strategy for various government sector clients including; business requirements, capacity trending/forecasting, industry/technology trends, product life-cycle, and industry bench-marking. Gathered complex management directives for fiscal year and converted into project lists and technical directives for network and systems management teams.Created and communicated the yearly vision and strategy for network services, following a systematic approach that included defining objectives, compiling relevant input data, analyzing alternatives, and prescribing specific directions based on yearly approved projects list.

Responsible for providing support of all routers, switches, firewalls, load balancers, wireless, and voice components for client. Responsible for technical architecture and performance engineering of the extensive Network encompassing four continents and 18 countries. Worked on production, pre-prod, DEVQA environments to configure routing, firewall rules and staff augmentation as needed for senior network team members. Key projects:• Responsible for redesign and architecture of the enterprise network monitoring solution. Compared and evaluated multiple vendors such as PRTG, Nimsoft, NMIS and more.• Helped troubleshoot complex internetwork problems encompassing Cloud networks, BGP, OSPF, redistribution, QoS and multiple VPN/Firewall transversal problems.• Provided feedback into design considerations of new datacenter core network from stacked EX4200’s to possible Cisco Next 7000 core, or Juniper Core. * Worked extensively on Palo Alto Firewalls for security, ssl, and vpn.• Helped redesign workflow processes in change management to create a Firewall change reqest template which was adopted and decreased time to resolution on change tickets by 75%.

Lead project manager for EOL switch replacement initiative. This included creating Business/Functional plans, evaluating, testing and reccomending EOL switch replacement which saved the company $5 million over 3 years.Lead core team for standardizing code, version control, inventory control and maintenance scheduling for over 4000 devices.Migrated company from legacy monitoring systems to Nimsoft distributed monitoring, and improving network availability by 17%.Wrote custom Perl programs to do log parsing (including setting up centralized SYSLOG-NG server with multiple rules), network discovery, and network inventory, resulting in time to resolution for network problems by over 70%. Lead troubleshooting and root cause analysis of complex multi-tier/multi-vendor problems that affected the enterprise as a whole. Supported network and infrastructure operations during the rapid migration of Planet Hollywood casino from previous owners to Caesars systems in less than one week. Including IP Address reassignment, NAT, network routing protocol redistribution, network convergence, storm control, DHCP, DNS, and all other communication systems to support core hotel, casino, and hospitality network for staff of over 5000 people.Lead Infrastructure project lead for migration from IBM DART financial systems to ACS Rapid. Including design, configuration and deployment of WAN, ordering circuits, B2B VPN, and creating training guides. Installed, configured, documented and trained network staff on network management and monitoring tools including NetScout, NetMRI, Nimsoft, and SNMP based monitoring. Designed, configured and deployed BGP, OSPF, Frame, ATM, Optical, Datacenter Operations, Load Balancing, Network Monitoring, Stress Testing, Product Evaluations solutions.Received numerous accolades including “master of Disaster Prevention”, “DEFCON Defeaters Award”, “Weekends Schmeekends’ Award”, “That’s a lot of savings! Award”.

Designed a global high speed data (HSD) network for real-time engineering collaboration and document sharing across multiple sites. Migrating from Bay Stack switches and legacy Cisco routers to 6500 platform and ASR1000 units for CE WAN edge. Designed migration strategy for migrating from legacy frame relay network to new high speed SONNET, GIG-E, and leased lines. Including routing redistribution from EIGRP and RIP legacy network to OSFP and BGP (including route maps for segregating E-BGP and I-BGP). Also documenting a IP address assignment scheme and multiple VRF configuration for security and scalability. Led company to the adoption of virtualization in its network infrastructure, reducing the required number of physical servers by 30%. Including design of Cisco 7000 VSS switch infrastructure to support FCOE to connect multiple 1000V switches (for extending L1 across a L2 backbone). Including beta adoption of 1000V series switch code for integration into hypervisors.

* Managed complex multi tier relationships with business partners, customers, contractors and vendors. Including but not limited to contract review, SLA negotiations, TCO calculations, RFI/RFP submissions for large scale network and security projects. * Responsible for evaluating new and emerging technologies for business continuity and to lower TCO for the organization. Included projects such as Cisco Guard/Detector for a DDOS solution, SSL VPN (Juniper, Netscreen and ASA), Application and Web Load Balancing (evaluated BIG5, NetScaler, and ACE) solution to replace legacy systems.* Led complex and multi variable projects that were time sensitive. Including readdressing the entire public block by switching from 4 /24 IP blocks that were owned by the carriers to a /20 from ARIN. Ordering IP block from ARIN, subnetting, and documenting all affected systems. * Mentored and taught in weekly training sessions to fellow employees regarding new and emerging technologies. Encouraged cross platform training and supported initiatives to increase general professionalism in IT services.* Developed logging systems for all SYSLOG entries that allows engineers to search a single location for troubleshooting complex related events. Reduced response to resolution for complex network issues by over 80%. * Managed, designed and supported a complex global WAN encompassing over 140 sites. Including Frame Relay, MPLS, Leased Lines, VPN, and SONNET. Including circuit provisioning, term/contract review, ensuring vendor compliance with SLA and terms.* Managed a complex multi faceted project to replace legacy VPN appliance with Cisco ASA SSL based solution. Including site design, policy design, rule construction, business service review, business and partner service level rules. Developed custom LUA code for complex business flow to map to the SSL VPN Solution.

Migrated 150+ User campus network from San Jose to Sunnyvale. Included New site design, migration strategy to move from legacy Cisco to Foundry FastIron SX1600, Juniper Netscreen SSG-520's, IP Addressing, VPN Connectivity, and Circuit Provisioning.Designed Global multi site full mesh VPN network over MPLS and backup over Internet. Included provisioning circuits, IP Addressing, GSLB, RTT based DNS location, data center location selection, and bandwidth calculations.Redesigned production data center from ground up. Included hardware selection (Juniper Routers and Firewalls, Foundry Switches, Netscaler Load Balancers), addressing, application delivery tuning, architected a service delivery model based design rather than a standard tier based design, migration path, optimizing customer SLA experience and monitoring to ensure end to end design validation.

Managed team of local and remote engineers to deliver complex high availability solutions for Network, Systems and Application infrastructure.Designed complex multi vendor network for five nines (99.999) uptime. Included design of MPLS, Multi Site failover, LEC Switch Diversity Option (SDO), IGP redistribution for automatic route redundancy and VPN based backup.Upgraded switch infrastructure from 6500’s running SUP-1 MSFC-1 to SUP-32 and SUP-720 to support 802.1x NAC Framework.Designed new datacenter to move from a fully hosted environment to complete ownership model. Including design of IP topology, protocol selection, DMZ’s, IDS placement, FW placement, Multi Tier services based topology, SAN layout, VLAN’s, Community Vlans, NAT, and Load Balancer topology. Standardized network equipment at all sites: IOS trains, hardware and developing standard baseline configurations for routers and switches.Developed process documentation for automating requests for firewall, load balancer, VLAN, VPN, and route changes.Managed multi tier vendor relations from Enterprise Class Carriers, to individual contractors. Included but not limited to NDA, POC, SOW, and contract review.Centralized enterprise wide circuit ordering and deployment as company was experiencing rapid growth through acquisition. This resulted in consistent vendor selection, and extended corporate discounts company wide for all new Voice and Data circuits.Created quarterly and annual network budget for senior management review.Created project definition documents, functional requirements documents, ROI Calculation documents, and complex multi tier project plans for large enterprise projects.

Configured, Planned, and migrated entire campus consisting of over 400 users from San Jose to Sunnyvale. Involved migrating Routing , Switching, and voice from PBX to Avaya VOIP.Supported and maintained complex wan infrastructure consisting of 40 sites and main data center. Involving several DS3’s, DS1’s, Gigabit Ethernet to ISP’s, IPSEC using 3DES and AES with complex multi-page ACL’s.Responsible for ensuring all routing, switching, content, and voice gear was standardized, monitored, reported, with logging, config backups and SNMP traps being monitored. (Worked everyday with 6500 series (MSFC-2 and SUP 720), 7200, 7600, 2900, 3500, CSS 11500, Arrowpoint’s, 2600, 3700, Avaya G700, Avaya S8500)Migrated corporate website from legacy Arrowpoint’s to new CSS 11500 with Integrated SSL daughter cards. Including configuration of proxy lists, services, content, rules, groups and closed pages.Configured and maintained routing protocols such as OSPF, and I-BGP. Including route summarization, redistribution, static routes and default route originations.Supported and maintained complex ACL’s on routers, MSFC’s and PIX’s. Included ACL’s to separate voice and data networks. Extensive utilization of network monitoring tools such as Bigbrother, NMIS and Cisco works. Working with on-call rotation for network emergencies.Designed migration strategy to move 37 remote sites from DS1 to internet and IPSEC, to MPLS. Including review of multiple vendors MPLS offerings (Masergey, ATT, MCI, and SBC). Worked with extensive QOS settings on CAT6500’s and routers to segregate and prioritize VOIP traffic. Including setting up CBWFQ, class maps, call control and voice setup. Maintained extensive documentation including configs, Visio’s, implementation plans, incident reviews, and IP spreadsheets.Managed complex VOIP system involving multiple PRI’s, local LSP’s at each campus, and TUVOX IVR system.

Designed and deployed complex Multivendor switched multi-gigabit Metro Network consisting of Nortel Passport 8600’s, and multiple Cisco switches. Setting up and configuring Enterprise Load Balancers for 100,000+ hits per day website hosted in-house.Migrated 17 Site LAN’s from Token Ring / Legacy ATM 155 to Fast Ethernet and Gigabit Ethernet.Migrated 15 Sites from Legacy Frame-Relay to MPLS/ATM Enabled backbone for WAN connectivity; including protocol, IP hierarchy, network, and integration design and configuration.Managed team of five Engineers locally and 10 remote engineers. Including technical guidance, training, hiring, retention and mentoring.Worked extensively on setting up core OSPF routing and BGP Interoperability. Including Route Injection, summarization, ABR’s, Stubs, Default Routes, MED, Transit AS, Weights, Local Preferences, and Confederations.Maintained and operated MAN Core including Alteon, Checkpoint Firewalls, Nortel 8600, Cisco 3550, Multiple OC-3, DS3 and Gigabit Links.Deployed HPOV – NNM for monitoring of network devices, including setting up all necessary MIB’s, scripts, triggers, thresholds, maps and notifications.Setup redundancy at core and distribution layer using VRRP, HSRP, Dual Homing, SMLT, FEC, and ISL.Managed the interfaces between technical and non-technical teams, business/change owners, and executive management.Extensive vendor management including contract review, NDA management, SOW review, project assessment, quotes, and contract negotiation.Lead role in determining process-oriented solutions and provide communication to the team, partners, and other interested parties in an open and timely manner; lead solution selection from design to support.

Managed 15 people (Comprised of Systems Engineers, Network Engineers, Systems Administrators, and Project Managers)Extensive Vendor Management, Including Contract review, and Beta Testing of vendor solutions. Followed by extensive rate negotiations, contract negotiation (wording, responsibility, flexibility).Managed migration of 15 site Frame Relay network to IP Enabled ATM cloudProject manager for several IT projects (OWA, WAN, Unix, etc)Lead Engineer and Project manager for Companywide AD migration project.Project manager for migrating 70 server data center from Santa Clara to Redwood City. Including routing, switching, services, servers, and misc network equipment.Worked Extensively with ATT LNS, ENS, and Core to get DS3, ATM IMA, and Several PTP T1’s to the “cage” on time and in ready status.Setup, Maintained and secured mail infrastructure (Exchange 5.5, Setup server at Primary and secondary data center, which both had OWA, POP, and IMS. Setup redundancy between two data center mail services)Created extensive documentation and reports for several levels (End Users, Managers, Directors, and board of Directors)

Designed and Deployed nationwide 35 site ATM Cloud for major entertainment company. Designed and Implemented SMS solution for Biotech firm with 14 national and 5 International sites.Worked on California Superior Court Project (Created complete IT infrastructure form ground up. Designed Server room, Data Center, Mail Systems, File, Print, Imaging, Network, SLA’s, Helpdesk System, Monitoring, and trained support staff)Deployed GSR 12000 routers nationwide for major nationwide Cable Company (Including Configuration, Turn-up and acceptance of OC48, OC12, and several DS3 Circuits per site. Configured IOS and failover) Mentored fellow engineers for careers guidance, technical skill-set development, soft skill development and documentation help.Wrote Statement of Work, Project Definition Documents (PDD’s), created Project plans, and documented existing and future states, for several large projects.Designed ad deployed complete AD infrastructure for a 50-site company (Involved in OU, DNS, DDNS, Active Registration, Forest, FISMO Placement, GC [placement and replication configuration], AD Connectors for Exchange 2000,and Customized Schema Design.)

Designed and Deployed nationwide 35 site ATM Cloud for major entertainment company. Designed and Implemented SMS solution for Biotech firm with 14 national and 5 International sites.Worked on California Superior Court Project (Created complete IT infrastructure form ground up. Designed Server room, Data Center, Mail Systems, File, Print, Imaging, Network, SLA’s, Helpdesk System, Monitoring, and trained support staff)Deployed GSR 12000 Routers for Major nationwide Cable Company (Including Configuration, Turn-up and acceptance of OC48, OC12, and several DS3 Circuits per site. Configured IOS and failover) Mentored fellow engineers for careers guidance, technical skill-set development, soft skill development and documentation help.Wrote Statement of Work, Project Definition Documents (PDD’s), created Project plans, and documented existing and future states, for several large projects.

Managed vendor relations for purchasing, support contracts, and Consulting companies. Created helpdesk system that lowered report to resolution time for problems by 75%.Migrated entire company infrastructure from NT4 to AD including Exchange 5.5 to 2000 migrations.