Network security. DDoS mitigation engineer and architect

Network securityMaintain Juniper and Cisco access listsArchitected and deployed A10 networks based CGNAT solutionManage Arbor PeakflowSP deployment for DDoS detectionArchitected and Deployed DDoS mitigation technologies such as flowspecDirect AOL’s DDoS detection and mitigation efforts. Troubleshooting network and firewall issues , and resolved or escalated to proper Operational teamsEvaluated endpoint network security solutions for deployment in AWS and in AOL DatacentersDeveloped NACL and security group standards for AWS VPCs

• Serve as Subject Matter Expert (SME) and Project Lead across DDoS mitigation security products for both internal Verizon infrastructure and commercial service offering. • Engineer highly scalable MCI/Verizon Business Security Center architecture for deployment of multi-tenant and multi-service, network- based services environments in the core Internet network. Utilizing Cisco 7600 and Juniper MX480 / 960 series routers. • Direct architectural efforts for deployment of Verizon Business’ Distributed Denial of Service Mitigation and Detection product offerings mainly on Arbor Networks (TMS, APS, SP, NSI) and Cisco Guard platforms.• Coordinate with marketing, sales teams, and operations in developing and evaluating new features and products to address new markets and applications. Work closely with vendors to ensure timely deliverance of components vital to business success.• Develop documentation for the deployment and operation of security products for the Security Operations Center (SOC).• Develop test labs for vendor evaluation utilizing test tools from IXIA, Shenick, and Breaking Point Systems. Evaluated DDoS mitigation products from a number of vendors including, F5 (ASM, GTM, LTM), Radware DefensePro , Corerro , RioRey, A10 networks .• Manage engineering lab: install and configure hardware from vendors, including Cisco, Juniper, Arbor, Fortinet, F5, Shenick, IXIA, Breaking Point, McAfee.• Work closely with internal network security teams to protect core network assets from denial of service attacks.

UUnet / Worldcom / MCI , then Verizon .High-speed Installation, 2005-2008Engineer - High-speed Installation (with MCI/UUNet), 1999- 2005 Coordinated activation of T-1, T-3, OC-3, OC-12, OC-48, various Metro Ethernet products and frame-relay lines installation for customers. Managed installations - including testing and troubleshooting, configuring CPE routers and CSUs (including BGP V.4 and EBGP configurations), updating DNS zone files and providing general customer support.Worked extensively with Cisco, Juniper, and Tasman (Nortel) routers, Cascade (Lucent) frame switches.Provided troubleshooting for BGP routing issues across the Internet - used tools such as Looking Glass and route servers.Provided point of contact for all escalated technical issues.Provided technical sales advice to customers in selecting products to meet technical needs.Advised marketing department in developing procedures and configurations for our Network- based firewall product.Interviewed prospective engineers.Worked with high profile customers, including FCC, Intel trace, Home Depot, Amazon.com, Orbital, ATF, CIA, FCC, US Postal Service

Monitored DIGEX's national Internet backbone and core news, mail, dial-up, and web servers. Managed and updated monitoring software and the NOC intranet website.Identified network anomalies that would range from BGP routing issues to physical circuit; applied appropriate resources to resolve those issues.Used Remedy trouble ticket system.Utilized HP OpenView and Netcool to monitor network availability.

Assisted customers on the phone and in person to configure their Internet connection and software on Windows 3.1, Windows95, WindowsNT, and Mac machines. Responded to support e-mail. SKILLSRouters:Cisco (ISR, 1700, 2500, 2600, 2800, 3800, 7000, 12000 GSR series)Cisco 3900 Catalyst switchesJuniper M-Series, MX-Series as well as SRX firewall and EX series switchesTasman (Nortel) 1000, 1200 1400, 4100Internet and networking:TCP/IP Usenet MPLSVLANs Sendmail BGP v.4PPP Ethernet HTMLTelephony technologies (monitoring, installing and troubleshooting):D8-0 (56K) SONETDS-1 (T-1) Frame RelayDS-3 (T-3) ATM