• Responsible for work on both cloud infrastructure & cybersecurity engineering teams• Aid with complicated issues regarding hybrid cloud network designs/solutions• Responsible for the cloud Virtual Datacenter Security Stack (VDSS) engineering, implementation, operations and troubleshooting• Works with the tier 3 DISA routing and security boundary teams on a daily basis to troubleshoot external connectivity issues from NIPRNet to internal NGA networks• Works with project managers to complete cloud and cybersecurity projects• Troubleshoot connectivity issues from on-prem to cloud & cloud to on-prem• Aid in design of numerous cloud networks used by engineering & operations teams to understand & troubleshoot complex network issues• Produce advanced network diagrams to aid in understanding traffic flow & full site network designs• Design, build, maintain, & troubleshoot complex hybrid cloud networks across multiple security classifications (NIPRNet/SIPRNet/Top Secret); plan & coordinate with customers migrating from legacy on premise networks to AWS cloud platforms• Perform packet captures and use wireshark to troubleshoot and identify network issues• Lead cloud engineer for many of the agency’s new & complex projects which require in-depth knowledge of transport networking from legacy on-premise equipment/domains to cloud domains (hybrid cloud)• Work daily with other cloud & network engineers to meet ever-changing cloud requirements• Received multiple bonuses/awards in 2022/23 for helping prevent major cybersecurity attacks and for providing the design and implementation of complex hybrid cloud networks to several high priority intelligence agency customers under very strict timelines• Provide cloud infrastructure & cybersecurity services to over 10,000 internal NGA customers & many other external customers, including but not limited to the intelligence community (CIA/NRO, etc.)

Bowler CBT Labs was created with one simple vision in mind, to provide free top quality practical and step by step instructional videos for people interested in computer networking. Whether you are studying for computer network certifications (Cisco/Juniper etc...), a college degree or just trying to broaden your skillset to obtain a computer networking career, these videos will provide you the knowledge and practical experience that is needed to achieve those goals.Enjoy the videos and feel free to reach out to me with any questions, comments or ideas for future videos! https://www.youtube.com/@bowlercbtlabs

• Responsible for the network engineering, design, & architecture of Next NGA West (N2W)• Member of N2W Transport team, making recommendations to N2W government leads on network equipment to be installed inside N2W• Researched newest technology in areas of core and access layer network equipment including routers/switches/wireless/software defined network (SDN) devices• Scheduled meetings with vendors (Juniper, Cisco, Commscope etc.) in these key areas to help learn and make decisions on network equipment needed inside N2W that will allow for NGA to make use of the most up-to-date technology offered and provide future proofing considerations.• Created & briefed key presentation on single-mode fiber (SMF) vs multi-mode fiber (MMF) to the end user to lead N2W government personnelo Informed the decision-making & recommendations given to the N2W design builder (McCarthy HITT) for implementation of their fiber layout strategy inside N2W• Scheduled & participated in meetings with other NGA teams including circuit actions, UFS, DCS and CIO-T (Transport) to obtain current network design & architecture plans of 2nd Street to ensure proper network transitioning of all current equipment/circuits to N2W• Attended meetings with DISA personnel to develop & provide key information for future circuit planning & demarcation of those circuits at N2W

• Responsible for the network design, architecture and implementation of USTRANSCOM's cloud network migration to AWS through the Secure Cloud Computing Architecture (SCCA). This includes all integration work done with DISA into their CAP (Cloud Access Point) network through AWS using the GovCloud regions• Engineered the Virtual Data Center Security Stack (VDSS) to provide isolation of Production and Non-Production traffic• Created the Virtual Data Center Managed Services (VDMS) & other VPC’s network solutions to service both production and non-production network environments in AWS• Key contributor & creator of over 30 network diagrams which were instrumental in the onboarding, engineering, & implementation of complex & detailed USTRANSCOM AWS infrastructure• Detailed work done on Palo Alto VM-Series firewalls and Cisco CSR1000v routers inside AWS console include the creation, deployment, monitoring and troubleshooting of ec2 instances, ENI's, EIP's, route tables, subnets, security groups, NACL's, Virtual Gateways (VGW's), Customer Gateways (CGW's), Site to Site VPN's, Internet Gateways (IGW's), & more• Detailed work done on Palo Alto VM-Series firewalls inside Panorama includes creating network interfaces, zones, VPN tunnels, BGP peering, advanced routing policy, security policy, NAT policy, enabling FIPS-140 security, DISA STIG device hardening, & more• Detailed work done on Cisco CSR1000v's includes creating network interfaces, VPN Tunnels, BGP peering, virtual routing and forwarding (VRF's) for traffic isolation (Non-Prod ZONE A/ZONE B), advanced routing policy, IP Service Level Agreement (SLA), Embedded Event Manager scripts (EEM), DISA STIG device hardening, & more

• Researched, architected, & configured migration solutions from existing legacy networks (on-premise) transitioning/migrating data services into Amazon Web Services (AWS) via implementation of 10GIG direct connects• Engaged in activities with AWS teams to provide the successful implementation/testing of administration and data services from on-prem networks to AWS• Migrated legacy networks to Amazon Web Services (AWS). Designed solutions inside AWS using/creating services such as AWS Virtual Private Cloud (VPC), Virtual Private Networks (VPN), Direct Connect, Virtual Private Gateways, Subnets, Route Tables, Security Groups, EC2 instances (vMX's, vSRX's, CSR1000v's), Elastic IP's and more• Advanced knowledge of configuring/troubleshooting both pre-shared key and certificate based IPSEC VPN's on Juniper devices.• Lead Engineer responsible for upgrading the enterprise network from 1GIG direct connect to 10GIG direct connect• Created network diagrams for documenting migration of on-prem network equipment to AWS, configured/troubleshot IPSEC VPN’s (both hybrid and cloud native VPNs), network interfaces (in AWS and on legacy equipment), network protocols (mainly BGP and some OSPF), advanced routing policies, GRE Tunnels and more• Attended project and troubleshooting meetings with customers, other senior engineers and resident/principle engineers from vendors such as Amazon, Juniper and F5.• Managed and maintained on-premise Cisco and Juniper equipment at St. Louis and Arnold.o These devices include many Cisco and Juniper access/distribution and core devices. (Routers, Switches and Firewalls) Maintenance includes keeping devices IOS and JUNOS code updated to meet current DISA STIG requirementso Replaced devices that are End of Life/End of Service and upgraded hardware (line cards etc…).

• Site Lead responsible for managing, maintaining, & upgrading complex network systems & infrastructure (routers/switches/firewalls etc.) for multiple sites across Colorado• Managed software upgrades to many devices, both Juniper & Cisco• Engineered & upgraded existing pre-shared key-based VPN’s to more secure PKI based VPN solutions on Juniper SRX and Cisco ASR platforms• Proactively monitored all Colorado sites’ devices via HP Network Node Manager• Used HPNA to bring devices into security compliance via software upgrades & device hardening• Performed technical assessments on upcoming projects• Lead engineer working with government site leads to provide technical expertise in the areas of network operations, management, and engineering

• Worked on the Enterprise Network Infrastructure Initiative team.• Responsible for special projects including upgrading the NGA WAN/LAN infrastructure for all of NGA’s classified and unclassified networks• Lead Technician on multiple projects responsible for strengthening the security of all NGA’s routers & switches. The STIG/PL3 project was designed to help make the NGA WAN/LAN more efficient, DISA STIG compliant, and easier to manage/maintain for both existing and new devices as well as proactively preventing it from unauthorized users• Work with Cisco & Juniper resident engineers to design, develop & upgrade NGA Networks• Extensive Engineering performed on Juniper routers/switches to include but not limited to T640’s, M320’s, MX480’s, MX10’s, MX5’s, M10’s and EX 4200’s• In-depth knowledge of Juniper hardware components which includes FPC’s, PIC’s, SFP’s/XFP’s, Routing Engines, Control Boards, & more• Maintained Ciena 3606’s and 3616’s, and building digital cross connects for circuits• Created & established multiple security policies to meet DISA STIG standards using the network management tool HPNA• Used HPNA to push software & upgrade network devices

• Tier 2 network support from the Global Network Support Center (GNSC) to all military branches within the Defense Information Systems Agency (DISA) Continental United States (CONUS)• Troubleshooting complex networking issues in the DISA CONUS network and between DISA and our customers• Performed router & hardware upgrades on both Juniper and Cisco routers/switches (all platforms)• Troubleshooting escalation issues when tier 1 technicians were unable to find a resolution

• Provided Tier I network support from the Global Network Support Center (GNSC) to all military branches within the Defense Information Systems Agency (DISA) Continental United States (CONUS).• Proactively monitored & troubleshot network circuits through Network Management Systems (such as HP Openview and Netcool) for Sensitive Internet Protocol Router Network (NIPRNET) and Secret Internet Protocol Router Network (SIPRNET)• Provided troubleshooting for network encryption devices (TACLANES, FASTLANES, KIVS) on both customer end & DISA CONUS end of the network circuit• Troubleshot routing issues for static routes, Access Control Lists (ACL’s), Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), Multi-Protocol Label Switching (MPLS), Intermediate System to Intermediate System (IS-IS) and Enhanced Interior Gateway Protocol (EIGRP)• Managed & maintained OC-192’s, OC-48’s, OC-12’s, OC-3’s, DS3’s, T1’s & fractional T1’s; Juniper T-640’s, T-320’s, M-40’s & M10’s• Loop tested intermittent & erroneous circuits with commercial providers (AT&T, Verizon, etc.)

• Managed & Maintained Elmendorf Network composed of over 6000 users• First line of network/computer system support• Worked on both unsecure & secure DISA systems• Information Technology Help Desk (CCC) for the majority of the time – the central location for monitoring the Elmendorf AFB network• Worked in the network operations, network support, and configuration management back shops• Provided fast & reliable first line information systems customer support• Areas of work include Active Directory, Microsoft Exchange Server 5.5, Print Servers, File Servers, DNS, DHCP, Microsoft Outlook Web Access, Remote Access (VPN), Server Monitoring, TCP/IP troubleshooting, basic MAN troubleshooting, secure & unsecure systems, Computer Management, Systems Management Server, troubleshooting Microsoft Office 2000, XP and 2003, Windows 2000, XP and 2003 Server Operating System

Worked the Information Technology Help Desk and provided first line support for the hospital’s information systems. Work included ghosting, installing, updating and fixing computers and printers.