Specializing in:•Design, configure, and deployment of Cisco Prime Infrastructure & Cisco Identity Services Engine (ISE) within a Windows 20xx AD – TACACS+ & RADIUS. 802.1x & MAB Authentication & Authorization for Wired & Wireless (Router, Switch, FW and WLC) - network and appliance.•Configuration/Establishment & integration of Certification Stores, Authentication & Authorization w/ Cisco ISE and MS Active Directory & Certificate Authority. Anyconnect: EAP-FAST w/ MSCHAPv2 & EAP chaining (user and machine) - Windows Supplicant: TEAP w/ EAP-TLS & EAP chaining•Establish TACACS (AA profile & policies, command sets, shell profiles, conditions) services for device administration w/ internal and MS AD groups within Cisco ISE.•Implemented and documented custom fully redundant and HA WLAN environment utilizing 550x Wireless LAN Controllers, 33xx ISE Appliances, and Wireless Access Points of 11xx, 350x and 360x series.• Design, migrate, deploy, configuration and administration of virtualization of Cisco ISE Servers with VMWARE ESXi and/or VM Server/workstation (platform and networking).• Create the repository for the backup and performing upgrades.• Installing or Upgrading Cisco IOS Software for router, switch, ISE, FW / ASA, IDS/IPS, WLC, WAP systems•Desktop Virtualization, Application Virtualization, Server Virtualization, Storage Virtualization, and Network Virtualization• AWS Direct Connect (DX) & Microsoft Azure ExpressRoute - Connection establishment• AWS network services: Route 53, S3, EC2, CloudFront, CloudFormation, VPCs and subnets, Direct Connect, Transit Gateway, NACLS & Security Groups, WAF• AWS Route 53 - Registration, Hosted Zones, Records (naming, types, policy etc), DNS FW, DNSSEC, Traffic Polices, Test Records• AWS S3 - Naming, regions, access control, properties, metrics, Access points• AWS EC2 - Amazon AMI, Instance types, storage, tagging, security groups, EBS volumes, Snapshots, Key pairing, Network interfaces, Elastic IPs.

• Aruba SDWAN - Migration LAN/WAN Dual-homed environment: Physical & Cloud Networks (MPLS/P2P and AWS, AZURE & Oracle)Sites LAN & SDWAN w/ OSPF - Cisco- Cloud AWS/Oracle VTI-TGW/DRG w/ BGP, AZ LB• Design, configure, and deployment of Cisco Identity Services Engine (ISE) v.3 within a Windows 20xx AD – TACACS+ & RADIUS. 802.1x and/or Mac (MAB) Authentication & Authorization for Wired - network/end devices• Configuration/Establishment & integration of Certification Stores, Authentication & Authorization between Cisco ISE V3 and MS Active Directory & Certificate Authority. PEAP, MSCHAPv2 and EAP-TLS - established PSN’s in a VM environment - ESXi• Integrate and configuration of TACACS (AA profile & policies, command sets, shell profiles, conditions) services for Network device administration with internal and MS AD stores within Cisco ISE.• Create the repository for the backup and performing upgrades.

Key Achievements: •Havana, CUBA - FIRST FLIGHT / New Station Startup: Awarded United Airlines Extraordinary Achievement•Responsible for East Coast Region. Work closely with Program Managers and Product Engineers to lead a product/system development projects.•Lead teams to deploy an Enterprise Wide CISCO (core/distribution/access) route/switch and Wireless (controller/wap) at Small, Medium, Large & HUB airports - year 5: led migration to HPE ARUBA (core/distribution/access) route/switch and Wireless (controller/wap)•New/Refresh Hardware & Software (IOS) Upgrades-Rack/Stack/Mount & Configuration Network Devices - 400+ Routers and 7,000+ Switches & 20,000+ Transceivers, Modules, Stacking Media (SMLHS Airports: Terminal, Gate, Ramp, UA Clubs / Polaris Lounges, Common Use/EASE Additions WIFI, Break rooms, Kiosks, Car Rental facilities and Airport Authority CPE)Terminal/Ramp - Cisco Industrial Ethernet Switches - IE3xxx to IE4xxxAccess and/or Distribution - Cisco 45xx, 35xx, 36xx to Cisco 37xx to Cisco 38xx to Aruba 38xxCore - Cisco 37xx and/or 38xx & 45xx & Aruba 38xxRouter - Cisco 28xx, 29xx, 43xx & 44xx ISR•Lead and support UA teams at 50+ Airports (Network Operations, Digital Technology Field Services, Project Management, Change Management, IP Provisioning, LAN/WAN, Security FW/VPN/IDS, Baggage Handling Services, Terminal, Gates, Ramp, RoIP, VoIP, CCTV, WIFI, DIGITAL SIGNAGE, SAN, Network Architecture/Infrastructure) in the East region (not limited to) for assigned projects in support UA and Airport Authority company projects and/or issues.•Creation and submission & completion of over 1120+ Service Now IM/INC ticketsITIL Service Now & ITSM Change Management SRP's - 660+FireMon Policy Planner Security Requests - 400+Network Engineering Work Orders (Diagram/NE equipment & configurations/BOM/FW) - 530+IP Provisioning Workbooks - Completed & Approved 675+Network Bill of Material Workbooks - Completed & Approved 800+

Daily responsibilities included design, implementation, support and administration internal and external customer security products (Cisco Pix/ASA Multi-context, IPS, ACS, and McAfee SIC).Responsible for assessing threats, risks, and vulnerabilities from emerging security issues and to update and maintain security configuration standards and baselines procedures to reflect the organization’s internal and external “best practices”. Train team in security, route / switch, VMware/ESXi/Vswitch and network operating systems.AT&T engineer working on customer (FAA) premises.  Work with systems engineering/architects team to produce testing of network design, product hardware and product configuration based on customer requirements.  Responsible for upgrading (IOS, interface/modules, memory), configuration (routed & routing, security and multicast protocols) of all Cisco equipment prior to being placed into customer's production network.

Responsible for design, setup, installation, upgrades, security and performance ofinternal and external voice and data communication networks. - Serve as advisor and consultant to PCI management in the development of lobbying andbusiness development strategies for IT clients. Design and provide e-business developmentopportunities. - Responsible for design, deployment / cutover, installation and management of CiscoUnified Communications Manager & Cisco Unity Voice Messaging over Multi-site environment.

Served as analyst and advisor in the design and development of the Rural Access toBroadband Technology Program funded by the Congress in collaboration with the U.S. ArmyNational Guard. As member of an IT technical support team, developed the Distance LearningProgram for the Defense Acquisition University.

Cutover and acceptance testing procedures for Fairfax County Public School. Specificprocedures are site dependent and are specified in the sales contract and/or theinstallation plan. Equipment: Cisco (approx) 250 routers, 10,000 switches. - IP addressing design/assignment and processing with Cisco Route-Switch Module (RSM) andCisco Multi-layer Switch Feature Card (MSFC). - Redundancy design in switched paths using trunks with EtherChannel, ISL, 802.1q - VLAN management with Cisco proprietary VTP domains, pruning, and policy enforcement (e.g. VMPS). AAA architectures, network management / monitoring systems.

Responsible for network infrastructure design, setup, installation, upgrades, andperformance of all WAN devices (Routers, Firewalls, Proxies). - LAN management, design, installation, management, and security. - Service provider networks: (ordering, installation, connectivity, and billing) AT&T,

- Responsible for providing information systems security with design, implementation,integration and testing on Windows NT Server/Workstation & UNIX Server operating systems. - Determine, develop and write documentation with emphasis on security and dataprotection: Trusted Computer System Evaluation Criteria DOD standard 5200.28-STD, Class(C2). - Create, maintain and update standard and extended access lists for WAN and LANinterfaces for Cisco 1000, 2500, 4500 and 7505 series Routers.

- Deployment, installation and support of large-scale client / server installation withCompaq Proliant 7500 / 6500 & Dell PowerEdge 6300 Novell NetWare and Windows NT serversand 450+ Compaq Armada Windows 98 / NT clients.

- Planning, designing and deployment of Microsoft Windows NT 4.0 Servers, Novell NetWare4.x Servers, Windows NT 4 / 95 / 98 workstations and Power Macintosh. - Hardware/software of LAN/WAN equipment: Installation, configuration, troubleshooting,repair and upgrades. - Administrator and Programmer of Fujitsu Series 3 PBX Switch; adds, moves, changes, callredirection and pickup groups. Administrator of Voice Mail Services: ProComm * VoiceMessaging.

Installation, configuration and administration of 200-node network serving Windows NTand IIS, Novell NetWare Servers. Maintained switched Ethernet Local Area Networks as wellas routed Wide Area Network for Data (IP and IPX) and Voice (Digital and Analog)Communications. Maintained and configured 3Com router, Frame Relay circuits and CSU/DSUs. - Administrator and Programmer of Harris 20/20 PBX Switch: adds, moves, changes, callredirection, pickup groups and screening Groups. - Administrator Voice Mail Services: CallLeague * Voice Messaging.

Responsible for assembling and testing computer hardware and software to fulfillcustomer orders in accordance with the standard operation procedures of the company'sintegration department. Responsible for troubleshooting and replacing defective equipmentby adequately testing all products prior to shipment.

- End-user support, troubleshooting Microsoft Windows 3.11 / 95 applications. - Network login and printing services for Novell 3.11 and 4.1. Integrated Compaq computersystems installed DOS, Windows 3.11 and 95 and applications for end-users.

13 Bravo (primary) & 11 Mike and 88 Mike- Field Artillery: Cannon Crewmember