Resume

***** C. ***

Email: *******@*****.***

Phone: 951-***-****

Education

California State Polytechnic University, Pomona, CA

Bachelor of Science, Computer Information Systems

Professional Certifications:

CCNA - Routing & Switching (Current)

CCNA - Security (Current)

Cisco Firewall Specialist Certification (Current)

CCSP - (Current)

CCNP - (Expired) Recertification in progress

Technical Skills

Cisco Router: 1700, 2500, 2800, 3600, 3800, 4500, 7206VXR,

7500 w/VIP2 & dual RSP

Cisco Switching: Catalyst 2900, 3560, 3700, 4500, 5000, 5500,

6500

Cisco AVVID: CallManager 3.3, Unity 4.0, Cisco 7960 & 7905 IP

phones, 6608 T1 PRI MGCP gateway for Catalyst 6500

chassis, Cisco IOS MGCP gateways, FXO ground start

trunks

Switching: Cisco, Foundry, Force10 Networks, Extreme, Nortel

Firewalls: Cisco ASA, Cisco Pix, Juniper NetScreen, Checkpoint NG

Wireless Networks: Cisco Wireless, Cisco Access Points, Aruba

Wireless

WAN connectivity: T1/T3, OC3, OC12,, MPLS, Frame-relay, ATM,

ISDN (PRI & BRI)

General Telecomm: ATM (VBR-nrt), ATM to Frame Relay

internetworking, IPSec, SSL, VPN, NAT, GRE, OSPF,

EIGRP, BGP4, xDSL, FDDI

Operating Systems: Windows 98/2000/XP, Linux (RedHat and SuSE),

Solaris, AIX, HP-UX

Network Applications: Cisco ACS, Cisco MARS, Cisco ASA, PIX, Cisco

CSA 6.0, Checkpoint/Nokia FW1, IRONPORT, Bluecoat

Proxy, F5 Load Balancer, OPNET ACE, SHUNRA WAN

Simulator, HP LoadRunner, Raptor Firewall, Tripwire,

DHCP, DNS, RADIUS server, Active Directory, sendmail,

SpamAssassin, Apache, IIS, RADIUS, RightFAX, MySQL,

LDAP, Riverbed WAN Accelerators

Languages: Perl, C, JCL some TCL

Professional Summary

Team-oriented Senior Network & Security Engineer with over fifteen years

experience in providing network solutions for LAN's, WAN's, Wireless, VOIP

and Network Security. Expertise includes design; implementation and

support of internet networked switched and routed systems, with

specialization in network security solutions, application analysis and risk

analysis.

Experience

ESPN, Los Angeles, CA

2/2009 - Present

Sr. Network Engineer

. A $34 billion multinational, multimedia sports entertainment

company.

. Provided 24x7 on-call operational support for all aspects of ESPN's

On-Air broadcast network & security infrastructure which includes;

LAN/WAN/WLAN/VOIP/VPN/Network, firewalls, IPS and network security

infrastructure in a Linux, Windows and Unix environment.

. Responsible for implementation, configuration and supporting Cisco

6500 Switches and F5 Load balancers which support On-Air EPSN

SportsCenter and access to ESPN.Com high volume WEB sites.

. Responsible for support and troubleshooting ESPN's, mission critical

broadcast transmission operations 10Gbs WAN, which transports all

Video/audio signal feeds into the facility, in order for the editors

to capture highlights for SportsCenter show.

. Responsible for supporting ESPNS Multi-Protocol Label Switches

(MPLS) backbone network, which provides on-air connectivity. ESPNs

MPLS network spans four continents and consists of state-of-the-art

broadcast equipment.

. Responsible for supporting Multi Dual Cisco 6500 10gig switched

network infrastructure, with dual 10 Gb/s SONET WAN connections to

Bristol Connecticut.

. Responsible for installing, configuring and troubleshooting Cisco

ASA's site to site, IPSEC VPN tunnels, SSL clientless/ Anyconnect,

Tunnels between ASAs, Routers and end-user VPN client access.

. Mentored junior systems administrators and editors in quickly

troubleshooting and resolving technical on-air application

performance problems.

. Implemented 2 Cisco IronPort gateways for anti-spam & spam

mitigation. Also responsible for supporting IronPort PXE encryption

technology for secure encrypted email delivery, between ESPN and 3rd

party business partners.

. Responsible for supporting Cisco Security Agents CSA 6.0 (HIPS)

installed on DMZ servers supporting

ESPN.LosAngeles.com/ESPNDallas.com. Responsible for continued

upgrades and troubleshooting all issues.

. Provided 2nd - 3rd level security incident investigation and liaison

to ESPN's and Disney's Incident Response Office.

. Responsible for monitoring and responding to MARS security

incidents alerts. Resolved, categorized MARS events and security

issues, ensuring that none of ESPN's broadcast infrastructure has

been compromised.

. Responsible for managing, maintenance and upgrades to ESPN's mission

critical perimeter web and email security infrastructure appliances:

Cisco ASA firewalls and Bluecoat Proxy systems.

PFF Bank and Trust, Rancho Cucamonga, CA 9/2007 - 2/2009

Sr. Network Engineer

. A $4.3 billion financial and banking services company.

. Provided 24x7 on-call operational support for all aspects of the

banks network infrastructure which included;

LAN/WAN/WLAN/VOIP/VPN/network security network.

. Successfully migrated 50 PFF bank branches from Frame Relay to

USbanks managed MPLS WAN network

. Responsible for installing, configuring and troubleshooting Cisco IP

Telephony/Cisco Unified Communications products including Cisco

Unified Call Manager Express, Cisco Voice Applications, Voice

Gateways (H323, SIP, and MGCP) and Cisco IP phones at 50 branches.

. Implemented 4 Cisco IronPort gateways for anti-spam & spam

mitigation and to meet federally mandated secure email compliance

requirements.

. Successfully deployed Cisco Security Agents CSA 5.2 (HIPS) to 50

branch ATMs, 150 servers and 1,500 bank desktops. Responsible for

continued upgrades and troubleshooting all issues.

. Implemented IronPort PXE encryption technology for secure encrypted

email delivery and to meet federally mandated secure email

compliance requirements.

. Successfully implemented and deployed two F5 Loadbalancers/3-DNS

controllers, configured Wide-IPs and DNS to load-balance and monitor

real-time network conditions, for the banks mission critical online

banking portals, across two data centers infrastructure located in 2

distinct regional data centers.

. Headed the design, configuration and deployment of 2 Cisco CSS

11500 load balancers for customer content delivery and SSL

termination, which dramatically improved application, infrastructure

availability and uptime.

. Worked closely with the Banks Information Security & Operational

Risk Management teams to monitor & responded to MARS security

incidents alerts. Resolved, categorized MARS events and security

issues, ensuring that none of banks electronic infrastructure has

been compromised.

. Responsible for managing, maintenance and upgrade the Banks mission

critical perimeter web and email security infrastructure appliances:

IronPort and Bluecoat Proxy systems.

. Responsible for managing and maintenance of the Banks perimeter ASA

& PIX firewalls, Intrusion Prevention systems, IronPort gateways and

other critical network infrastructure.

. Assisted information security with the design, implementation and

management of an enterprise Intrusion Detection System.

Warner Bros. Entertainment, Inc., Burbank, CA 11/2002 - 9/2007

Sr. Network Security Engineer

. An $8 billion entertainment division of TIME WARNER INC.

. Environment: Windows, Unix.

. Supported Warner Bros WAN which consisted of 72 sites located

worldwide and connected via frame-relay and IPSEC VPN tunnels.

. Successfully upgraded 74 Warner Bros WAN routers from Cisco 2600s

routers to Cisco 2800. This project required coordinating down time

and interfacing with business divisions, management divisions and

technical divisions worldwide.

. Provided 3rd level international network technical support by

resolving technical user issues escalated from the Help Desk and

NOC. Also performed WAN maintenance, upgrades and repairs locally

and remotely.

. Administered Qualys vulnerability management solution for threat

analysis and prevention across enterprise network systems.

. Implemented and monitored Network Access Control solution (NAC) and

administered NAC policies in support of corporate security policy

and standards.

. Implemented and managed Tripwire to help monitor perimeter network

configuration changes and validated network configurations to

minimize security risk and maintain SOX & WB security compliance.

. Interfaced with business units for all 3rd party (B2B, B2C) LAN-to-

LAN IPSEC, SSL VPN connection requests. Responsible for

documentation, configuration, testing/troubleshooting and deployment

of all 3rd party connectivity supporting WB global enterprise.

. Participated in a 24x7 "on call" rotation schedule for security

related enterprise incidents and all aspects of the WB network

infrastructure which included; cabling-racking

LAN/MAN/WAN/WLAN/VoIP/VPN/FIREWALL and wireless.

. Successfully implemented Cisco CSS11506 load balancers for content

delivery which dramatically improved application and infrastructure

availability and uptime.

. Responsible for day-to-day management, configuration and

troubleshooting of WB domestic Cisco 3030 IPSEC, VPN Concentrators

with secure network authenticating to RSA tokens supporting 4,000-

users worldwide.

. Lead high-visibility migration of ~60 mission critical DMZ servers

from Checkpoint/Nokia FW1 to Cisco PIX 535's infrastructure; working

closely with site IT leadership to plan and efficiently resolve all

network, connectivity and security issues, ensuring smooth cut-over

with zero downtime. (Received People's Choice Award for these

efforts).

. Responsible for managing and maintenance of WBEI perimeter firewalls

and other mission critical network infrastructure.

. Assisted Information Security, with the design, implementation and

management of an enterprise Intrusion Detection and Prevention

System.

. Served as a subject matter expert of network design team and in

collaboration with Information Security, network vendors and

architecture group, developed strategic plans for secure network

architecture.

. Participated in development of information security baselines for

network devices including firewalls, routers, switches,

concentrators, etc.

. Responsible for WAN application performance management and

application Capacity Planning utilizing OPNET IT Guru, OPNET ACE to

analyze, diagnose and resolve business-critical application

performance issues in real-time for faster throughput and higher

network uptime.

. Successfully installed and configured Cisco 6509's including

firewall & VPN modules to support Warner Bros. worldwide rollout of

SAP EBP/R3/BW. (Received People's Choice Award for these efforts).

. Utilized OPNET IT Guru, OPNET ACE application Capacity Planning to

ensure superior and more efficient bandwidth utilization for support

of global WAN locations.

DirecTV, El Segundo, CA 1/1997 - 11/2002

Network Engineer

. An $8 billion entertainment division.

. Provided network services and support for 1,500+ VPN users worldwide

and Implement authentication mechanisms using Tacacs, Radius and RSA

Secure Tokens.

. Lead multiple security engineering projects such as Firewall

migrations (Checkpoint NG Clusters, Cisco PIX, and Symantec Raptor),

. Provided WAN support and troubleshooting to backhaul local

television channels signals to two Broadcast Centers via frame-

relay. This required Carrier/Telco coordination, circuit ordering,

circuit tracking and troubleshooting.

. Successfully upgraded DirecTV's Internet access from a single Raptor

Firewall and T1 access to Cisco Pix firewalls and DS3 Internet

access.

. Implemented two Nortel Contivity 4500 VPN gateways to provide

reliable and secure remote access from practically anywhere it the

world. This resulted in a net savings of over 50% on remote access

charges and greatly increased the satisfaction of our internal

customers.

. Led team that successfully deployed ATM over SONET that provided

redundant connectivity to both broadcast centers. Deployed, Cisco

6500's for two complete building build outs.

. Responsible for all business partners connectivity, which included;

several DS3 ATM circuits, multiple T1s, ISDN PRI's and Frame Relay

utilizing Checkpoints FW1 as gateway and Migrated of existing

business partners WAN links to VPN (where feasible).

. Provided 2nd and 3rd level network support including support of the

LAN/WAN and Engineering CBX OC-3 networks.

Whittier Police Dept., Whittier, CA

5/1992 - 1/1997

Information Systems Manager (11/1995 - 1/1997)

. Successfully designed, configured and implemented Frame Relay WAN

Network with PRI ISDN backup support access to California Department

of Justice.

. Successfully deployed 375, Motorola 9100-386 Mobile Digital

Computers, utilizing TCP/IP over an RF infrastructure, to support of

law enforcement in Whittier and the neighboring City of Santa Fe

Springs. As part of the above project, directed the rollout of a

cleaner IP addressing scheme, using DHCP throughout the enterprise.

All subnets were allocated /24 blocks from a /16 block.

Summarization was used back to the rest of City.

. Worked with Network Engineers from the FBI and DEA and successfully

configured, tested and installed an encrypted remote access NAS

which provided Whittier's narcotic officers secure access the State

Wide Integrated Narcotic Network (SINS).

. Implemented frame relay connections to Los Angeles County Sheriffs

Department and LA PD for intra agency collaboration in joint Auto

theft and Anti Gang task forces.

. Installed and configured routers, DSU/CSUs, Repeaters, Windows NT

Advanced server software, Pathworks Client Software and TCP/IP.

. Supervised the upgrade and installation of CAT5 cable plant, racks,

and patch panels, fractional T1 lines. Other duties included network

trouble shooting, capacity planning, system tuning and user

training.

. Installed, configured, and deployed Microsoft Exchange Server and

client software.

Programmer/Analyst (5/1992 - 10/1995)

. Responsible for providing 24-hour on call system management, and

user support for the Police Departments Local Area VAX Cluster,

which consisted of 3 DEC Alpha's and a Pathworks network.

. Other duties included, system security management, DCL programming,

system maintenance coordination and Network Software Support.

. Independently analyzed, evaluated and installed computer hardware

(Terminal Servers, Repeaters Hubs, Routers and Network Interface

Cards), software and networking components.

. Designed, developed and implemented software programs to support law

enforcement personnel. Planned the organization and efficient usage

of computing resources.

. Monitored daily systems activities and resolved problems.

. Prepared user documentation and provided user training as needed.

. Responsible for all administration and procurement actions

associated with the operation of these systems.

Boeing Corporation, Long Beach, CA 2/1987 - 3/1992

Sr. Engineer/Systems Manager

. Ensured that all computer systems, software and peripherals, were

classified, marked and handled in accordance with the Defense

Security Service (DSS) & Department of Defense (DoD) governing

regulations.

. Provided assistance to DSS & DSS Counterintelligence (CI) staff to

ensure that polices and implementing procedures related to other

areas of computer security including physical security

countermeasures, information security and industrial security were

being maintained.

. Served as the focal point of contact for all LAN & computer system

audits. Was awarded letter of commendation from DOD for assisting

with the security & remediation.

. Provided classified/unclassified VAX/VMS and PC computer support

which consisted of the following: Authorized user accounts,

installed, updated and upgraded the systems and their layered

products, assisted in feasibility studies of new hardware/software,

defined/configured new system components.

. Configured Decnet-VAX Ethernet local area networks, and Local Area

VAX Clusters, troubleshot hardware/software problems, wrote DCL

utility programs and interfaced with users, vendors and managers.

. Trained new users, safeguarded information assets from unauthorized

access, loss, or damage.

. Managed all aspects of information and equipment access on a 24-hour

on call basis.

. Worked multiple subcontractors to assure that avionic software being

developed and maintained on VAX/VMS systems complied with MIL-S-

52779A & DOD-STD-2167A. And if any problems were detected in

subcontractor processes/products these where promptly reported and

entered into software corrective actions.

. Security Clearance: Top SECRET

Aerojet Ordinance Co., Tustin, CA 6/1985 - 1/1987

Programmer/Analyst

. Advanced Systems Division

. Designed and maintained database programs utilizing DATATRIEVE and

ORACLE Forms 3.0 for program administration.

. Performed systems management on DEC VAX/VMS systems this included

authorizing user accounts, installing, updating and upgrading the

systems and their layered products.

. Provided programming, training and technical support to end users;

purchased installed, configured and maintained PC hardware/software,

network and peripheral equipment.

. Security Clearance: Secret

Contact this candidate