Designed, implemented, and managed complex routing protocols across a multi-site enterprise network, including BGP, OSPF, and EIGRP.Configured and optimized Cisco IOS devices to ensure efficient and reliable network connectivity.Implemented and maintained firewall policies on Cisco ASA and Palo Alto firewalls to enforce network security measures.Deployed and managed VPN solutions (site-to-site and remote access) to secure corporate network communications.Utilized IDS/IPS systems… Show more Designed, implemented, and managed complex routing protocols across a multi-site enterprise network, including BGP, OSPF, and EIGRP.Configured and optimized Cisco IOS devices to ensure efficient and reliable network connectivity.Implemented and maintained firewall policies on Cisco ASA and Palo Alto firewalls to enforce network security measures.Deployed and managed VPN solutions (site-to-site and remote access) to secure corporate network communications.Utilized IDS/IPS systems like Snort to monitor and mitigate network threats and vulnerabilities.Conducted network traffic analysis and troubleshooting using Wireshark to diagnose and resolve connectivity issues.Executed penetration testing and vulnerability assessments using Metasploit and Nessus to identify and address security weaknesses.Developed automation scripts in Python and PowerShell to streamline network configuration and management tasks.Implemented cloud security best practices in AWS and Azure environments, including network security groups and VPN gateways.Led on-site deployment, operational management, and seamless integration of network architectures utilizing the Cisco Meraki platform alongside traditional Cisco switches, showcasing a hybrid approach to modern wireless and wired network solutions.Played a pivotal role in developing and designing LAN/WAN infrastructure, focusing on the strategic layout of primary and redundant data centers. This included the deployment of Next-Generation Firewalls, IPS/IDS sensors for enhanced security, and advanced switching and routing techniques to ensure high availability and performance. Directed the transition from traditional ASA firewalls to Meraki's next-generation firewall solutions, facilitating the migration of IPSEC tunnels, ACLs, NAT rules, and comprehensive policies to an SD-WAN framework. This move underscored a strategic shift towards more scalable, manageable, and efficient network security and connectivity paradigms. Show less

Spearheaded multiple global deployment projects, focusing on the enhancement and support of network infrastructures, including switching, routing, firewalls, load balancers, and proxy services, with a keen emphasis on Cisco wireless technologies. Expertly designed and deployed Palo Alto firewall systems, including application and URL filtering, SSL decryption, and SSL Forward Proxy configurations. Demonstrated proficiency in IPSEC and SSL VPN setups on Palo Alto Firewalls and executed the… Show more Spearheaded multiple global deployment projects, focusing on the enhancement and support of network infrastructures, including switching, routing, firewalls, load balancers, and proxy services, with a keen emphasis on Cisco wireless technologies. Expertly designed and deployed Palo Alto firewall systems, including application and URL filtering, SSL decryption, and SSL Forward Proxy configurations. Demonstrated proficiency in IPSEC and SSL VPN setups on Palo Alto Firewalls and executed the successful installation of PA-5000 series firewalls in data center environments, serving as perimeter defenses. Led the transition from ASA to Palo Alto next-generation firewalls, leveraging migration tools for seamless integration of IPSEC tunnels, ACLs, NAT rules, and policies, thereby enhancing network security postures. Managed complex network environments using Juniper devices (M, MX, T series routers), focusing on advanced service provider technologies such as MPLS VPNs and Traffic Engineering, underlining a broad expertise in network engineering beyond Cisco systems. Oversaw the administration of Active Directory Domain Controller, DNS, and DHCP servers, ensuring robust network identity and access management. Specialized in Cisco ISE 3.0 for comprehensive user authentication mechanisms, including Security Group Tags, MAC-based authentication, and advanced encryption protocols (802.1X, EAP, PEAP), highlighting a deep understanding of Cisco wireless security frameworks. Administered a large-scale IP Address Management (IPAM) system utilizing SolarWinds and Infoblox solutions, demonstrating exceptional capabilities in DHCP, DNS management, and security implementations. Delivered expert-level advice in security and networking, focusing on perimeter security, IPS, DNS, DMZ security, and internet security strategies, contributing to the long-term security initiatives and the deployment of cutting-edge networking technologies. Show less

Assisted in troubleshooting and resolving network issues, achieving a 20% reduction in downtimeDesigned and implemented scalable network architectures using Cisco routers and switches.Supported the deployment of the Cisco Identity Services Engine (ISE) for network access control (NAC).Configured and optimized routing protocols, including BGP, OSPF, and EIGRP, to ensure efficient data flow across the network.Implemented network security measures such as Cisco ASA firewalls and… Show more Assisted in troubleshooting and resolving network issues, achieving a 20% reduction in downtimeDesigned and implemented scalable network architectures using Cisco routers and switches.Supported the deployment of the Cisco Identity Services Engine (ISE) for network access control (NAC).Configured and optimized routing protocols, including BGP, OSPF, and EIGRP, to ensure efficient data flow across the network.Implemented network security measures such as Cisco ASA firewalls and Palo Alto next-generation firewalls, including VPN configurations and IDS/IPS systems.Conducted regular network assessments and vulnerability scans using tools like Nessus and Snort to mitigate security risks.Developed and maintained network monitoring solutions to ensure high availability and performance using tools like Wireshark and SolarWinds.Collaborated with cross-functional teams to troubleshoot network issues and ensure timely resolution.Documented network configurations and procedures, enhancing team efficiency and knowledge sharing. Show less