Senior Network Engineer w/strong PaloAlto and InfoSec experience

ANDREW MOUW

954-***-**** / ********@*****.***

OVERVIEW

Experienced Network and Systems Engineer with more than 17 years of experience in the IT field. Cisco Certified with a BS in Information Systems Security. Extensive experience in multiple areas of Information Security and network infrastructure including: diagonosis, troubleshooting, access, management and monitoring. A dedicated self-starter with leadership and project management experience.

EXPERIENCE

September 2017 – Present – Senior Network/Systems Engineer TouchSuite/ Boca Raton, FL

Currently leading Network/Systems Engineering team in redesign/architecture of existing network. Existing infrastructure has been susceptible to EOL equipment failure causing random failures.

Working with business leaders to develop a technology roadmap for the company.

Responsible for working with PCI auditor to meet compliance for 2017. Was the team lead for the audit of all systems/networks and implementation of required remedies. Received PCI 3.2 ROC/AOC for year 2017.

Configured redundant Linux BIND servers as forwarders for Active Directory servers due to PCI 3.2 requirements.

Migrated all corporate servers from Hyper-V to VMware. Upgraded hosts from PowerEdge 2950 to R710 servers.

April 2016 – September 2017 – Lead Network Engineer 3C Interactive / Boca Raton, FL

Managed the Network Engineering team in redesign/architecture of existing corporate and enterprise network. Existing network design lacks redundancy and resiliency. This position also requires close interaction with our primary customers who rely on our services for their business to operate on a 24x7x365 basis. Primary clients include all of the major cellular carriers.

Working to redesign the corporate network infrastructure to provide dynamic routing without impacting production. Current topology consists largely of static routes as well as PBR and disjointed OSPF areas.

Responsible for maintaining and monitoring F5 Signaling Delivery Controller platforms in redundant datacenters. This work includes establishing new connectivity for cellular carriers as well as testing/troubleshooting site failovers (both planned and unplanned). This platform is RADIUS Accounting based monitoring for cellular handset usage and reporting to the customer for billing the end users.

Responsible for design of the RADIUS platform expansion across multiple datacetners. This includes installation of hardware, network connectivity, and planning for future growth of the RADIUS environment. Includes deployment of HP C7000 Series Chassis, Cisco Nexus 5k and 3k platforms for future growth, as well as working closely with F5 Networks Operations Team to deploy the new infrastructure.

Working with multiple clients to provide connectivity to both the RADIUS platform as well as the proprietary SMS messaging platform. This includes IPSEC VPN, MPLS (L2&L3), BGP over GRE tunnels, and other remote connectivity technologies.

Sept. 2013 – April 2016 – Network/Systems Engineer Chewy.com / Fort Lauderdale, FL.

Provided network engineering support to a 2000+ employee E-commerce storefront based in Fort Lauderdale. Responsibilities include designing, engineering, and monitoring of critical infrastructure for the fulfillment centers, corporate office, call center, and datacenters.

Responsible for design and deployment of all systems, voice, and network infrastructure in primary 550,000sq.ft. fulfilment center. Designed and deployed environment in 2 week turnaround time. Performed wireless site survey using Fluke AirMagnet; deployed 100+ Meraki Wireless APs to the fulfilment center.

Responsible for design and deployment of a 200+ agent call center in Dania Beach. Responsible for all systems, voice, and network infrastructure. Planned and migrated the 24x7 call center without downtime.

Moved 800# / DID’s to new SIP provider while maintaining functionality of voice system. Programming of inbound call queues and voice prompt directories. Created a 10+ TV “wall board” display throughout the enterprise call center using HDMI over Ethernet to display current call queues, agent statuses, and other various call statistics from a single workstation.

Assisted in deployment of VCE vBlock environment to datacenter in Ashburn, VA. Deployed site as primary datacenter for Chewy.com E-Commerce site.

Assisted in the design and configuration of the main E-Commerce and Enterprise firewall policies for virtual environments while maintaining PCI security requirements.

Designed and configured out-of-band network device access systems using Cisco 2811 Asynchronous modules to connect to console ports of core networking equipment at each site.

Designed and configured Solarwinds Orion NPM / SAM deployment for 100+ Cisco nodes and 200+ Windows / VMWare nodes. Configured monitoring thresholds and alerting for critical nodes.

Designed and implemented Cisco ASA Site-to-Site and Client VPN access. Added Multi-Factor authentication to Client VPN solution using Duo/Okta MFA solutions. Built Cisco WebVPN portal for vendor access to specific internal resources without requiring an internal address

Assisted in development of highly available site links using MPLS and IPSec tunnels.

Designed and implemented redundant Cisco SecureACS servers. Deployed to networking equipment to provide accounting and Active Directory based authentication for employees.

June 2013 -Sept 2013 – Systems/Network Engineer Boomtech IT / Boca Raton, FL.

Provided extensive systems and network support for various clients in South Florida region.

Migrated VMware 3.5 environment to 2012 Hyper-V virtual environment with Dell EqualLogic ISCSI SAN to provide redundancy in the event of a single system failure. Migrated to 10 GB switches during the rebuild process for faster failover and client access.

Developed and deployed remote access solution for 50+ remote support staff at large property management firm in Boca Raton, FL.

Migrated 100+ user law firm from Exchange 2007 to Office 365 with no loss of service to the business. Migrated servers into Azure Cloud and created redundant links to provide higher availability.

Sept 2011-June 2013 – Systems/Network Engineer NTS America / Pompano Beach, FL.

Provided systems and network support for multiple billion dollar companies based in South Florida area.

Lead the deployment of a new datacenter for Heico Aerospace in Peak10 in Fort Lauderdale, FL. Consisted of IBM DC3400 FC SANs, HP DL380 servers, Cisco 4500 switches, Cisco ASA 5540 firewalls.

Designed, proposed, and implemented P2V migration of 15 physical servers to ESX 4.0 with a PowerVault SAN. Replaced networking with Gigabit switches to improve core performance. Created Veeam backup solution to provide redundancy in the event of a systems failure.

Designed and installed ESX environment for multi-site plastic surgery facility. Created site redundancy using MPLS and IPSec tunnels to the primary office. Deployed Watchguard XTM firewalls and built remote access solution with client VPN software. Migrated 150+ user mailboxes to Exchange 2010 in a virtual environment.

Migrated Truly Nolen branch office of 50+ users from webmail to Office 365 with no impact to the business.

Used GFI LanGuard / eEye Retina to perform infrastructure audits for various clients.

Sept 2010 - Sept 2011 - IT Manager OneSource Telecom / Pompano Beach, FL.

Provided all IT services to the business during this time. Handled all technical systems, network, and voice.

Maintained SIP to analog phone system. Updated customer lists from vendors (ATT, Verizon, Sprint) in auto dialer.

Deployed SonicWall firewalls to provide connectivity to vendors via IPsec tunnels.

Migrated file server to 2008 Hyper-V environment with Dell Powervault DAS.

Created email-to-fax system using analog lines with a 32 channel analog fax card and GFI FaxMaker.

Expanded call center from 50 agents to 150 agents, upgraded call paths to support additional agents.

Sept 2008 - Sept 2010 – Systems/Network Engineer 4Corner IT / Fort Lauderdale, FL.

Provided systems and network support for multiple businesses based in South Florida area.

Responsible for deploying and maintaining 10+ medical offices’ voice, data, and network systems in FL and NV. Deployed redundant site links using MPLS/IPSEC Tunnels using SonicWall firewalls in HA pairs.

Responsible for all P2V projects (Hyper-V & VMware) with the company.

2001 - Sept 2008 – Field Tech / Desktop Admin Boston, MA / Ashville, NC

Worked on contract and FT for various Managed Services Providers in the Boston and Ashville areas. Provided support for desktops/servers, home theater systems, DirecWay satellite services, basic networking for private residences, country clubs, realtors, and other small businesses.

TECHNOLOGIES

Site to Site IPSEC, WebVPN, and Client VPN access

Cisco ASA NGFW, PaloAlto, Fortigate, Watchguard XTM/XTMv firewalls

Cisco Routers/Switches (Nexus/Catalyst)

Juniper Routers/Switches (SRX/EX series)

OSPF, EIGRP, Static/RIP, IP sla, HSRP, VPCs

Basic knowledge of BGP protocol.

Cisco SecureACS system (TACACS+/RADIUS)

PCI 3.1/3.2 Compliance for both systems and networks

Solarwinds Orion NPM/NCM/SAM, PRTG Network Monitor

Riverbed Cascade Pilot / VirtualShark / Wireshark / Nmap / IXIA iLinkAgg

Microsoft Server 2000 and up, VMWare vCenter/ESX 5.5-6.5

Dell EqualLogic / Powervault ISCSI & DAS SANs

Physical security access controls / IP camera / DVR systems

CERTIFICATIONS

Cisco Certified Network Associate v2 – 2015

Certified Meraki Network Associate - 2014

CompTIA Network+ - 2013

Watchguard WCSP - 2013

Microsoft MCITP SA – 2013

Microsoft MCSA - 2003

EDUCATION

2010 ITT TECH INSTITUTE - BS INFORMATION SYSTEMS SECURITY DAVIE, FL

Contact this candidate