Sergiy Pitel Email & Phone Number

Boston, Ma, Us

Cincinnati, Oh, Us

Designing Aruba 345, 365, 367 and Cisco wireless AX Wi-Fi or 802.11ax/802.11ac Wi-Fi, Wi-Fi 6 for Arenas and one of large energy supply company, implemented and migrated to Catalyst 3650/9200/9500 access switchesManage the Cisco SD-WAN, Deploying the device templates to the WAN Edge routers, Performing Whitelisting the Access point on Aruba Master controller, Designed configuration golden templates. Configures switch POE+ ports, reserved networks on IPAM for OPTION 43 and 60 for new dhcp networks, VLANS, wireless Cat9200/9120AX AP, with Catalyst switches. Designed documentation Level 2-3 Visio Connectivity diagrams, Policy and procedures.

Advisor360°/Commonwealth Financial Network is the only unified financial advisor software suite that powers your entire business. The largest privately held RIA-independent broker/dealer ranking highest in advisor satisfaction. We are the RIA-B/D that puts you first. My responsibilities:• Architecture and design highly available network solutions across several locations• Installed, configured, and maintained Cisco ISR3800 /ASR 1000 Routers, Cisco Switches Cat C4507R-E, Nexus 3048 updated from 77.0(3)I4(7) to v9.2.2, 9372 v9.2.2, 9502 v9.2.2, Nexus configured VPC,OTV/VDC, Fiber path, Keep Alive, VPC Peer-Link Domain, QOS quality service and OSPF/EIGRP routing.Troubleshoot asymmetric routing and policy based routing. Configured Palo Alto PA820, PA5250 v8.0 - Installed update 8.1.5, Licensed device, Configured Zone, Interfaces and OSPF routing. Implemented Global protect VPN, Manage Palo Alto Policy, High Availability, NAT. Added Palo Alto to Panorama, Configured URL filtering, File Blocking.Configured and troubleshoot Clearpass and Dell Aruba Access points APIN0114 and network devices across our multi-site network.Configured NAC- ClearPass Policy Manager with Aruba wireless. Configured CyberArch and PindID for two factor authentication to all network hardware.

Kista, Stockholm, Se

My project is to Manage my team of 3 network /systems engineers and lead data center migration firewalls from physical to Microsoft Azure cloud PAN-OS 6.1.5. Performs AUDIT with Microsoft Azure Tenable Nessus, Scan and identify volubility for PCI compliance, Run Rapid7 Nexpose scans and Coalfire scans and reports. Tripping wire enterprise for identify systems and network changes and network, systems volatilities, SQL injections, http attacks and others DDOs attracts. Manage Tripwire log collector reviewed logs, ConnectWise Incidents response, Production changes, emergency network troubleshoot, On call rotation Manage network hardware such as Cisco IDS/IPS .Juniper QFX switches: configured aggregate channel for LACP, configured OSPF/BGP. Cisco switches cat 45k, 65k, Nexus 2k/5k/7k/9k, ASR/ISR 3800 routers, managing MPLS connections. Cisco ASA Firewalls 5510, 5545, 5500. Configured RSA token on network devices. Palo Alto firewalls NAT, GlobalProtect SSL VPN, managed policy, managed routing OSPF, BGP, EIGRP, VLANS, Port Channel/ STP, VPC, VDC, OTV, FiberPath. Created documentations Visio Connectivity Policies, Procedures, User instructions.

Hillsboro, Oregon, Us

Lead network security design; coordinate 8 engineers from offshore India. Implement, and operations perform network segmentation and traffic analysis. Analyze data center in Oregon, San Jose and others client location Japan, Philippines, Shenzhen, Germany, France. Configured Cisco ASA 5510/5520 v9,1- removed duplicate network objects and ALC entries, configured ASA policy, Managed Masergy IPS tickets. Troubleshoot networks connectivity and performance LAN and WAN connections. Configured Global Protect SSL vpn, IPsec tunnel on ASA configure troubleshoot, NAT, Access Lists, emergency response for network support, manage IPS tickets, Configured and troubleshoot network Cisco Nexus 5548 and Fex extenders manage CISCO switch C2960 assing Vlans and Trunk, Manage Cisco WLC, troubleshoot using SolarWinds, Wireshark, created documentation Visio Diagrams, NAT table, routing information.

Responsible for ensuring Network Services architectural principles are utilized throughout the design, deployment, and development of the Reebok and Adidas International LAN & WAN networks. Engaged in project management, including analysis needs, Network planning, implementation, design documentation VISIO - IP and connectivity. Participate in data center migrations from Canton MA to Portland OR and LAN and WAN troubleshoot. Supporting the ongoing management and maintenance of network service components encompassing switches, routers, wired and wireless networks, Designing GRE, IpSec Tunnels building DMVPN between 15 sites, Migrated VPNs from Nortel Contivity to Cisco 2900/3900 routers. Setup OSPF Multi Area, EIGRP routing. Manager firewalls such Cisco ASA, Checkpoint Smart Dashboard R77 nodes, policies and rules ACL/NAT. Assigning IP addresses, managed vLANs and network-related servers and services such as RADIUS, DNS, and DHCP. Configure NEXUS 5596 - VPC, Port channels, registering 2000 FEX extenders and configure network-related servers and services such as RADIUS, DNS, and DHCP.

Dublin 2, Ie

Data Network Implementation Lead project. Configured Cisco ASR, Cisco 650x platform. Implement and support Cisco ASA NAT, VPN solution such as AnyConnect/ Site to Site. Set up Nexus 2K/5K/7K devices with VM environment for Disaster Recovery. Configure OSPF, BGP, VRF, routing on Nexus, VPC, Port-channels, Processed port, IP, firewall and load balancer requests, Perform network summarization for optimize network routing. Configured and support disaster recovery and mainframe testing, configured SNMP monitoring, troubleshoot network connectivity used QRadar to identified Firewalls activity

New York, Ny, Us

Designing and implementing large-scale networks, network routing, switches, firewalls, load balancer, firewalls (including client and PTP VPN), WAN accelerators and internet-related networking and security technologies. Design and implement security-related improvements / enhancements to customer and internal networks. Designs, implements and tests Internet Commerce sites, provisions VPNs, develops intrusion detection and firewall management architectures. Deploying Cisco ASA network firewalls and Cisco ACLs. Design 10gig redundant network for EMC DD990, NetApp, implementation and direct support of customers. Managed Cloud Services Platform, network infrastructure supporting Core distribution and Access switches. Implementing security policies and infrastructure in a multi-customer ISP Data environment. Support and configure new Cloud offering, DaaS, IaaS and SaaS. Managing OSPF, HSRP, BGP, Radius, Tacacs+ and SNMP, BGP, Tacacs+. Manage network / systems security, implement policies, processes PCI, HIPAA compliance. Develop solutions to network and security problems.Network equipment: Cisco Routers and switches, Cisco Catalyst 6509 as well as ASR 9000 and Nexus 7K, 5K and 2K Routers / Switches, particularly in a fully meshed, fault-tolerant Ethernet environment. Deploying network load balancers Cisco CSS11xxxTools used: network monitor CA Spectrum, Snort, Nessus, nmap, ntop, snoop, tcpdump, wireshark and other Open Source tools. Participated in an On-Call rotation.

Us

Leading in an enterprise data center migration. Working with the existing team to complete project work, assist with tier III alerts, such-as emergency, guide technician to install/replace hardware at datacenter facilities. Performing Dell SecureWorks' Vulnerability Management, blocking scanning IP on IPS module on Cisco 6500 catalyst switch. Implementation SNMPv3 network monitoring for whole datacenter, finding OID's, setup custom sensors. Daily perform task such as: Opening ASA/PIX/Cisco Firewall Service Module (FWSM) opening Firewall rule, manage OSPF, NAT, VPN, NEXUS 5k/7k, configuring Cisco 7600 Series Routers, Cisco 6500 Series Catalyst Switches, configuring FEX Nexus 2k module (Fabric Extenders), VLAN, VPC, Port-channels, configuring Cisco ACE for server farm for load balancing, identifying firewall issues using Capture, packet-tracer and some tools such as Wireshark Nessus, nmap, NA/Sniffer Pro, assist with ITIL implementation, some work with HP with iLo and Proliant BL460c blade running linux and many more.

Boston, Ma, Us

Lead MPLS implementation project team to assist in all stages installation and maintenance in state-of-the-art voice/data network technology include Video - Streaming Media, Wireless, Telco Circuits and Transport T1/T3/DS3/OC3. My daily responsibilities were to prepare devices configuration. Attending hosting services cut over meeting over 900 company offices. Install new and upgrade Cisco routers 2811, 2921, 3925, ASR1002-5G w/ SFPs. Network Management and troubleshoot - DNS, DHCP, BGP, preffics list, Access list, IGRP, HSRP, VLAN, Infoblox - IP Management, Avaya Avaya G350/450 gateways, Avaya voicemail, Avaya IP Office branch system w/ stations 4620sw/4621sw /Cisco voice, Avaya Site administration.

San Jose, Ca, Us

The project to coordinate and responsible for migration all CISCO testing laboratory running multipurpose Voice VoIP, Video Conferencing for running effective tests solutions for various Cisco devices and software equipment which is over 360 on 26 racks networking & systems containing Cisco 6500 Switches, Linux Based high-end Servers, Storage SAN, NAS. Setup voice Cisco 2800/3800/2900/3900, Cisco CME, connecting cisco phones. Configured Cisco 2950 switches, 7200 Routers and 4500 Switches, Multi service Modular MDS 9222i, Cisco Voice Gateways VG224/248.• Configured and troubleshot; VLAN’s, STP, VTP, Tranking, DNS, DHCP EtherChannels, Access Lists, EIGRP, NAT, MPLS and static routing. Configuration OSPF on Nexus 5000/7000/2000 FEX Extenders• VSXi installation on Cisco Server Chassis UCS-5108, UCS 6120xp for new product testing and development, in both a test and production environment. * Configure and maintain a variety of modules for the 6500 Switch including; AON, NAM, Sup2, Sup720, and Switch modules for both copper and fiber.Coordinate lab move, planned bldg power shutdown, bldg power outage issues and lab bring up. Install and administer numerous Linux solutions including; NFS, Apache, MySQL, and a variety of Java based Cisco apps, and tools.

ESC consulting company specializing in software projects consulting and technical support. Lifecycle: analysis, design, testing, deployment serves various industries: financial, brokerage, banking, insurance, health care, manufacturing, pharmaceutical, and many others. Being responsible for consulting and technical support Linux and other systems, networking, wireless, Network implementation: Cisco routers 2811, 2921, 3925. Cisco switches 3850/6500/4500. Implement CISCO ASA 5510, 5515, 5520, 5585-firewall virtualization, rule base revalidations and migrations for multi customer environments. Configured VPN site to site, NAT, PAT, Cisco Nexus 7k, 5k, 2k / network replacement at all US colo’s. Installed and migrated the various cloud/customer physical network pods into this new virtualized Cisco infrastructure perform such as architectural configurations, troubleshooting. Develop architectures and standards documents for wireless networks for customers. Performed AirMagnet site survey for wireless Wi-Fi coverage technologies end products for multivendor WLC 4402/5508 controller and access point systems with Cisco Aironet 3700/2700 with CleanAir Technology for Accurately identifies source, location and roaming. Performing estimation technology wireless network protocols based IEEE 802.11a, IEEE 802.11b, IEEE 802.11g and IEEE 802.11n carrying the actual traffic. Configured BGP/OSPF routing protocol for suitable to the actual network physical topology. Configured IEEE802.11s with Hybrid Wireless Mesh Protocol to use longer-range lower-bandwidth service. Implementing Cisco Aironet Omnidirectional Antenna outdoor and Indoor 5GHz, 3.5dBi Omni/Dipole Antenna for best wireless performance.. Manage protocols: TCP/IP, UDP, SSH, FTP, HTTP, SMTP, POP3, IMAP, DNS, STP, RSTP, IPSec, LWAPP, RIP, EIGRP, OSPF. Assisting all technical environments with effective monitoring solution. Wirelesses network implementation based on CISCO Aironet 1100,1200, Cisco 1520/1522 Mesh Access Points.

Dallas, Tx, Us

AT&T is the largest provider of local, long distance telephone services in the United States, and also sells digital subscriber line Internet access and digital television. AT&T is the second largest provider of wireless service in the United States, with over 81.6 million wireless customers, and more than 150 million total customers. Being responsible for configuration, maintenance and monitoring of clients firewalls, routers and load balancers, I worked as Network security engineering team to support, troubleshoot with a wide range of hardware devices including but not limited to CISCO, PIX ASA, Cisco Nexus Switches, Aventail, Nokia, Checkpoint NGX (R65-R80), Provider-1 and many others. In my work I’ve utilized various software products such as Cisco Works, Lotus Notes and many other databases, Remedy, ticket management MAXIMO, R1 and others. Used Nessus scanner for Network Scan External/Internal large networks with many hosts. Installing Session Initiation Protocol ("SIP") and Gateways administration, Performing network security packets scanning using capture tools tcpdump and Wireshark, Nmap to analyze to identify network problems. Manage spanning tree network, 802.1q trunking and VLAN, Proxies and VPN, Configured DNS, Manage the network scripting using bash to perform some automated tasks. Revalidate firewall rules to optimize the rules and recommend for specific clients application types. Responsible for life cycle and End of Live networking devices, Improve process documentation improvements to prevent compliance violations. Planning and performing the network security audit, Service Activation and Deactivation, Incident Responses. Assisting all Systems Development Life Cycle (SDLC), Vulnerability Scanning Assist team leader with service planning and maintain PCI network security documentation, ITIL procedures and processes to improve service delivery and reporting. Work with team on-call rotation.

Armonk, New York, Ny, Us

IBM, the world’s largest multinational computer technology and consulting corporation with over 338,000 employees and over 170 offices worldwide. At IBM Global Services Delivery Center I administered firewalls, switches, routers and load balancers for Deutsche Bank, one of the largest clients of IBM and one of the largest financial institutions in the world. Being responsible for support for configuration, maintenance and monitoring of client’s firewalls, routers and load balancers, Revalidating firewalls rules and identify rules that can be removed if not used by clients application. I worked with a wide range of hardware devices including but not limited to CISCO Switches and routers, PIX/ASA Firewalls, Checkpoint NGX R62/R65/R70 Provider- 1, IBM xSeries, Foundry Server lon and others. In my work I’ve utilized various HP and Dell, AIX servers and others include Bralde Logic and CVS, Assisting all Systems Development Life Cycle (SDLC) and supporting Web Applications, reverse-proxies, socks and many others. Using network security analysis tools Wireshark, TCPdump, to sniff traffic, using monitoring software CA Spectrum, Qradar identifying security assets, analyzing log, flow, vulnerability, user and asset data troubleshoot devices and firewalls. The position required from me extensive work with low level network protocols management, security tasks such as defining and managing ACLs, hands-on working with advanced network technologies such as virtual private networks, tunneling, remote access and management, demilitarized zones, etc.

In the "Obolon" Hotel I Lead IT infrastructure team with 4 engineers. I have developed architectures and standards documents for wireless networks for customer. Been responsible to coordinate my team for such as design, implementation, configuration, and management of enterprise wireless hardware, software, and implementing Wireless Control systems (WCS). Design wireless systems operation of IEEE 802.11 b/g, 11n, 11ac, Manage Cisco WCS, installed WiSM into Catalyst 6500, Performing AirMagnet site survey for wireless Wi-Fi coverage technologies end products for multivendor WLC 4402/4404 controller and access point systems. Implement Cisco Wireless LAN Controller Modules NME-AIR-WLC8-K9 with 3845 Services Router used for robust coverage with 802.11 a/b/g to deliver unprecedented reliability using 802.11n and Cisco' Next-Generation Wireless Solutions. Setting up Cisco AP 3700/2700 with CleanAir and AIR-AP1010/AIR-AP1020 to use (LWAPs) to control multiple Wi-Fi wireless access points at once. I submitted a proposal to hotel Director to create and set up Wireless Internet Access for whole hotel infrastructure using wireless technology performing site-survey and analyzing signal spectrum. I have planed and coordinate system utilization and capacity, involving configuration and testing with vendor. My team was responsible for advanced enterprise wireless LAN/WAN design, troubleshoot, Configured hardware: Cisco Catalyst 6509/4510/Cisco routers Cisco routers 2811, 2921, 7603/ASA 5505 configured customer access lists, DNS, VLAN, OSPF, NAT, VPN, Create wireless mesh networks, and point-to-point and point-to-multipoint topologies. Implement Network Monitoring and data acquisition with TCPdump, Wireshark, many others.

UNK is one of the leading anti-age clinics. I’ve been hired to upgrade network systems environment increase bandwidth lan/wan Gigabit Ethernet and 54Mbps. Setup Wi-Fi network as well as a 100 Mbit Ethernet routed network. A heterogenic environment was set up. Platforms included: PC, Solaris, Apple Mac, Microsoft Windows 2000, XP, Vista, Microsoft Windows 2003, Active Directory, Setup DHCP/DNS/NAT. Supporting windows domain controller, Mobile Devices, and Specific Medical Devices over Network and Wireless Bluetooth. NOTABLE ACCOMPLISHMENTS• Successfully established a dedicated terminal server to make ERP software available to multiple users in distributed environment.• Specific medical hardware was successfully configured and connected to interact with traditional PC hardware.

VCC is a Christian Mission center. Ministers serve in different locations and need reliable access to internal network resources. I deployed a secured VPN solution along with POP3/IMAP/SMTP/WebMail servers and a Caching Proxy server, Perform the migration Mysql database,M backup database, build SQL queries to import/export data to My SQL. Configured DHCP/DNS/NAT. Backups and imaging systems. Network resources were secured by hardware Cisco PIX ASA firewall. Technical support for local and remote include Microsoft Windows 7, Microsoft Windows 7, Microsoft Windows Server 2003/2008/Microsoft Exchange 2003/2008/2010, VMware VSX, Linux, Unix, Analyzing network problem with TCPdump, and other systems and networking.NOTABLE ACCOMPLISHMENTS• Successfully Secured Wi-Fi was set up to be permanently accessible from conference rooms. • VoIP solution was implemented to allow inexpensive communication between distributed offices.

At SPD Novikov A.O. (DBA: iConsultant.biz) I designed and deployed a Gigabit Ethernet and 54Mbps Wi-Fi network as well as 100Mbit Ethernet routed network. A heterogenic environment was set up. Platforms included: PC, Apple Mac, Linux, Mobile Devices. I have offered the VoIP and videoconferencing solution deployment and support and managed VoIP gateway with PSTN routing. The idea was accepted and I designed and implemented the system.• Network design and implementation• Depl, securing and supp. of WiFi net.• Streaming video conferencing solution implement.• VoIP and videoconferencing solution depl. and supp.• Tech. supp.• Hard. diag. and maintenance• Linux server supp.Environment:MS Win2003/XP/2000/Me/98, Linux server, Ethernet, TCP/IP, Wi-Fi, Bluetooth, GPRS, Roaming, Wireless Security, VPN, WMWare, 802.11b, 802.11g, VPN, V.90, V.92, V.34, V.34bis, V.42, V.42bis, Modems, LAN, VoIP Devices and software, Managed Routing and Switching Hardware.

Kiev Christian University is a State accredited theology school. It has several computer classes and a distributed campus network. In Kiev Christian University I was employed as the System and Network Administrator. The distributed network model I designed consisted of two subnets (teachers and students rooms). The two subnets were secured in a one-way limited access (i.e. teachers have access to students subnet but not vice versa). The whole network was integrated into Active Directory Domain. A Windows Server 2000 was the Domain Controller, Server decommission, Server modification and upgrade, Hardware support, backup-streaming solutions. NOTABLE ACCOMPLISHMENTS• Successfully performed upgrade and migration to Windows Server 2003 Active Directory, ISS, VMware, Exchange server 2003.• Successfully set up a FreeBSD based server to allow secured access from both subnets to High Speed Internet over a wireless link. The Unix, Linux server also featured email (SMTP/POP3/IMAP/WebMail) and proxy server.

In the Internet Café “Na Kuznechnoi” I performed duties of Network Administrator. I managed LAN connected to Internet over a SHDSL leased line and provided technical help and support to Café visitors. I have configured and managed shared access (including usage accounting) to the Internet and LAN resources. I have also upgraded hardware and performed OS migration from Microsoft Windows 9x to NT 5.0. Responsibilities:• Network Support• Technical help and support for clients• Software Installation• Hardware maintenance• Troubleshooting• Leased Line supportEnvironment:Microsoft Windows 2000/NT/Me/98/95, Ethernet, TCP/IP, Internetworking, NAT, ISDN, LAN, WAN, PC Hardware

In Youth Union Club I performed duties of a System Administrator. I maintained an Ethernet local area network of 12 PC computers with shared Internet Access. I have also set up and maintained a Dedicated Game Server. As a part of my duties I provided technical support to users.Responsibilities:• Troubleshooting• Network support• Dial Up access configuration (including NAT for users)• Game server configuration• Hardware maintenanceEnvironment:Microsoft Windows NT/95/98, Ethernet, TCP/IP, Internetworking, NAT, PAT, V.34, V.34bis, V.42, V.42bis, Modems, LAN, WAN, PC Hardware

Certified, System, Networks, Security

Master Of Business Management Degree, "Information System Management”

Business

Microsoft Certifications, Microsoft Training "Implementing And Supporting Microsoft Windows Nt Server"

Education record