Ron Larson Email & Phone Number

United States

High level NOC utilizing advanced troubleshooting and privileges with reduced need for escalations to the next tier support groups. Monitor, troubleshoot and resolve network connectivity issues to and within Huntington Bank branches, offices and business partners. Conduct after hours network hardware replacements and configurations. Serve as after-hours implementor on change control for major network infrastructure components including Cisco and Arista routers, switches, F5 load balancers, Palo Alto NG firewalls and web proxies. Work with telco vendors to resolve WAN circuit issues. Troubleshoot, dispatch and/or resolve network LAN\WAN issues at all locations. Run packet captures and analysis to assist in diagnosing network related issues. Participate in incident bridges as representative of Network technologies.• Utilized Panorama to view real-time and historical events to aid in troubleshooting network connectivity and log in issues.• Worked closely with other teams in other IT departments to help troubleshoot and solve IT issues in the network.• Assessed and mitigated high-priority production issues in real time

Maplewood, Minnesota, United States

Provided global Tier 1 support for Cisco NGFW 5516, 5525, 5545, 1100 and 2100 series firewalls utilizing Adaptive Security Appliance and FirePower Threat Defense software in a highly productive manufacturing environment. Team leader in lab testing of new equipment and applications to ensure company stays on the leading edge of current technologies. Instrumental in working with Palo Alto Network representatives in planning fleet-wide migration to Palo Alto firewalls, as well as the Panorama centralized management system to improve our network infrastructure, as well as improve and harden our network security. Contributed to company-wide site refresh projects, upgrades, and standardization. Lead individual site lock down procedures of firewall rules across global fleet. Oversaw SSL certificate additions for new equipment and renewals for legacy assets to insure highly secure remote access to network assets. Worked with Cisco Beta testing team to test, troubleshoot and provide feedback for new Cisco platforms such as new Cisco ASA software upgrades and Cisco Defense Orchestrator. Set up and monitored SCADA systems for production lines for monitoring and data collection.• Utilized Cisco Security Manager to view real-time and historical events to aid in troubleshooting network connectivity and log in issues.• Provided training to team members regarding new global standards and optimization for the current network environment.• Assessed and mitigated high-priority production issues by being on 24/7 on call rotation.

Directed key networking operations while working with Checkpoint 1450, 23k, 15k firewalls in the production environment. Headed vital operations surrounding transference of licenses across Checkpoint devices, ensuring that each device is licensed properly. Installed and configured new firewalls for a more robust and efficient work environment utilizing new Palo Alto network infrastructure. Liaised with storage team to create new standards for disaster recovery regarding backups and snapshots of firewalls in case of a catastrophic failure in production environment. Utilized ServiceNow to monitor user tickets and general day-to-day workflow. Maintained knowledge and understanding of next generation related technologies and practices, including, creating, implementing firewall and network security, pushing policies, data packet flow, encryption, segmentation strategies, vulnerability management, secure remote access, and B2B set-up. Oversaw deployment of L2TP VPN to provide tunnels between individual LANs, offering easy access to resources across locations, throughout network. Applied Packet filters to confine certain traffic types, as well as created packet captures and Wire Shark to assure operation and verification of traffic.• Offered expertise on firewall, segmentation, network security, vulnerability trends and remediate systems based on supplied threat intelligence information.• Ensured connectivity for remote users and vendors by migrating 150 B2B VPN tunnels from a firewall having single point of failure to core.• Assessed and mitigated high-priority production issues by being on 24/7 on call rotation every 2 weeks.

Madison, Wisconsin, United States

• Utilized Cisco Meraki MX65W, MX80, MX400, and MX600 auto VPN features to deploy self-configuring site-to-site VPN• Deployed End Point Protection Services with ISE to quarantine malicious endpoints from the rest of the network• Lead a team of technicians responsible for the day-to-day administration and maintenance of ASA firewalls, F5 load-balancers and Juniper SRX series firewalls• Integrated Cisco ISE with MobileIron MDM to support end user device registration• Implemented ASA B2B and B2C solutions including AnyConnect, ASA Phone Proxy, Easy VPN and DMVPN• Configured Meraki MX480 as hub-and-spoke design for datacenter failover• Migrated from Juniper SRX firewalls to ASA 5585 pairs for new data center extranet environments• Configured Cisco ASA Phone Proxy and DMVPN solutions for work at home call center agents• Configuration and Administration of Palo Alto PA-3020 as Internet edge Firewalls• Provided Tier 3 support for escalated issues related to Palo Alto FWs• Used ISE based probes to profile end host to provide secure access to the campus network• Deployed 3750 stacks and 4500 series modular switches for end host and phone port aggregation respectively• Generated policy maps and ACLs to handle company migration from Cisco VOIP to Skype for Business and ensure all traffic was marked appropriately• Configuration and implementation of Cisco’s AnyConnect as RAVPN solution for multi-tenant infrastructure• Configuration/Administration of McAfee Sidewinders (NAT/ACL/Dynamic Routing/VPN/Troubleshooting)

Minneapolis, Minnesota, United States

• Implemented BFD for BGP on Cisco ASR1000 and Nexus 7700s to improve convergence during indirect next-hop failure scenarios• Migrated over 100,000 firewall rules from Cisco PIX firewalls to Cisco ASAs and Juniper SRX firewalls• Migrated from Juniper SRX firewalls to ASA 5585 pairs for new data center extranet environments• Lead in greenfield design and implementation of customer Data Center utilizing Cisco Nexus 56128’s and Nexus 7700 with F2e and F3-series line cards• Designed Meraki MX series for application visibility and control with deep packet inspection• Deployed Meraki MX series in hub-and-spoke DC-to-DC failover configured in NAT mode• Primary test lead of IPv6 platform in research and planning for future implementation• Configured EIGRP and OSPF redistribution and gradually migrated from EIGRP to a complete OSPF environment• Deployed multiple pairs of M7i and M10i routers as edge routers for multiple remote sites utilizing MPLS for data center connectivity• Used Palo Alto Migration Tool to migrate 8,000 Policies, 1,800 Address Objects, 600 Address groups, 300 service objects, 120 Service Groups• In-depth knowledge of virtual-chassis design, best-practice & implementation on both MX & EX series devices• Worked extensively with MX960, EX4500 & EX4200 series devices as Core, Aggregation & Access layer devices respectively• Configured and installed Cisco 1841 and 2811 as CPE devices for IPSEC VPN connectivity• Configured Internet based 3DES VPN Tunnels to connect to 3rd party vendors on Cisco IOS routers

Dallas, Texas, United States

• Lead efforts with NetApp/N1K/VSG implementation on UCS 6248 Fabric Interconnects to N7K• Developed configurations deployment strategies and test plans for datacenter equipment, which included Cisco Nexus 7k, 5k, 2k and 1000v switches utilizing VPC, VDC’s, OTV, ISSU, FabricPath.• Upgraded Cisco Nexus 9396PX from 6.1(2)l2(1) to NX-OS release 6.1(2)l3(1) in support of 2200 series Fabric Extenders (FEX)• Configured, deployed, and managed Cisco Meraki MS220-24, MS320-24, MS320-48, MS410-32, and MS420-48 Series Switches• In-depth knowledge of virtual-chassis design, best-practice & implementation on both MX & EX series devices• Designed and implemented redundant DMVPN hub-and-spoke with EIGRP to provide small/medium size office connectivity to tier 2 offices• Configured Cisco's Meraki MX Security Appliances with automatic VPN route generation, IKE/IPsec setup and key exchange via Cisco Meraki’s secure cloud• Installed global protect on remote users’ laptops for VPN connections through Palo Alto’s PA-3020• Integrated Palo Alto IPS signatures as a global policy in addition to App-ID rule sets• Updated the existing Palo Alto iVPN configuration to allow secure connection into MPLS network from remote site• Configured Palo Alto PA-5060 for use as enterprise proxy solution using URL Filtering features• Designed and implemented automatic VPN route generation, IKE/IPsec setup and key exchange • Provided analysis, risk assessment and recommendations of hardware/software for migration from IOS to NX-OS• Stage and documentation of GETVPN on ASR 1Ks in lab environment to validate functionality as proof of concept• Researched, designed, and implemented pilot SSL VPN solution to complement existing IPSEC VPN in to meet goals from executive leadership and from directives in accordance with the Telework Act, OMB, NIST publications, and DOJ orders

Boise, Idaho, United States

• Implementation engineer on Multiple 6500 to Nexus core tech refresh projects extending to the LAN and WAN edges• Designed and implemented RBAC schema for UCS environment to restrict and authorize access based upon user organization• Cisco Nexus 7k, 5k, 2k / ASA 5585 firewall virtualization/network replacement at all US locations. Installed and migrated the various cloud/customer physical network pods into this new virtualized Cisco infrastructure• Designed and implemented BGP in various configurations including EBGP Multihop, AS Path Pre-pending and Policy Based Routing• Designed and migrated from Cisco ASA 5585-Xs to Palo Alto PA-5060s in an existing data center• Configured and implemented Cisco 6500 and 4500 series switches with Layer 3 functionality as Core devices• Provided detailed QoS configuration on the Cisco 3850 for a successful implementation of VoIP solution• Provided daily network support for national wide area network consisting of MPLS and B2B VPN• Created DMVPN head end at two different data centers in a redundant configuration to provide work at home agent solutions with 881 remote routers

Phoenix, Arizona, United States

• Configured various routing protocols including OSPF, BGP and EIGRP. Utilized technologies such as route tagging, BGP communities, AD manipulation and distribute lists to ensure optimal packet pathing• Provided information and suggestions to Network team regarding implementation of new firewall rules across entire Core network• Designed and implemented Cisco wireless infrastructure using 8540s with 8.1 code for centralized control and management• Conducted site surveys and contributed to planning of new offices, remote sites and relocations• Maintaining a Syslog (Kiwi) server for all events on the enterprise network. Including analyzing logs periodically• Viewed statistics regarding connection count and node status from TMSH show LTM commands.• Set up Router VPN tunnels to allow encrypted traffic to flow across the CENTRIXS systems utilizing SIPR tunnels.• Design and deployment of multi-tiered DMVPN solution over a large enterprise MPLS network for increase security and route control