Chinyelugo augustine Umenwaliri

addvl2@r.postjobfree.com 336-***-****

Summary

IT professional with over 19 years of professional and progressive experience in implementation, configuration, escalation support/ticket resolution and troubleshooting of various technologies which includes proficiency in security, firewalls, routing, routing protocols, switching technologies;- Cisco Routers ASRs/ISRs, Cisco Catalyst/Nexus (3,5,7,9K)Cisco ASA firewalls, Palo Alto, Checkpoint Firewall, Juniper SRX series, F5 Big IP, AAA - TACACS+/RADIUS, SSH, VPN, SSL/IPSec, Port Security, RIP, OSPF, EIGRP, BGP, MPLS, Wireshark, Cacti, Nagios, ForeScout and Solarwinds .

Experience/Accomplishments Highlights

Proven background and experience in reviewing design documents and implementing/deploying technologies including provisioning, deploying, configuration, validation and documentation in a timely and proficient manner based on following internal policies and procedures and mandated compliances.

Strong proficiency with administration and support including handling change requests, Tier 2 and 3 escalated tickets based on service level agreements (SLA) and documentation administration.

Work well independently and in a team environment including verbal and written communications with technical and non-technical professionals, third party vendors/service providers and clients.

Proven skills as subject matter expert (SME) to both technical and non-technical professionals including acting as advisor/mentor for various technical, professional and operational activities.

Technical Certifications & Skills

Security Firewall Administrator SFA

Cisco Certified Network Associate – Routing & Switching CCNA

Cisco Certified Network Professional CCNP

Juniper Network Certified Network Associate, Junos JNCIA-Junos

PaloAlto Network Certified Network Security Engineer PCNSE

Certified WAN Professional / Certified WAN Enterprise Administrator CWP / CWEA

Microsoft Azure Architect Technologies AZ-300

Technical Skills Detail

Routing/Switching Technologies - Cisco Routers ASRs/ISRs, Cisco Catalyst/Nexus, Juniper, Citrix, and H3C Routers & Switches, WAN, LAN, TCP/IP, Cisco IOS, Spanning Tree Protocol, BPDU, CDP, ACL, NAT, PAT, RIP, OSPF, EIGRP, BGP, MPLS, VTP, SNMP, SMTP, Static & Stub Routing, VLAN Trunking, Multicast, HSRP, SVI, CEF, VSS, VPCs.

Security/Firewalls Technologies - Cisco ASA firewalls, Cisco Security Manager Suite, Cisco IPS/IDS, Cisco ISE, Checkpoint Firewall, Juniper SRX series, Palo Alto, AAA - TACACS+/RADIUS, SSH, VPN, SSL/IPSec, Port Security

Monitoring/Data Center Technologies/APPS - Wireshark, Cacti, Nagios, Solarwinds, Sniffer, Orion, Remedy – VMWare, F5, Citrix Netscaler, Cisco AnyConnect, Cisco Prime, Meraki, SNMP, DNS, DHCP, FTP, Telnet, HTTP(S), SMTP, SFTP

Voice Technologies – VoIP/SIP, CUCM, UCCM, UCCX, RSTP, STP, Quality of Service (QoS), PoE, MMDS, LMDS, CVP, IVR, PBX/PBS. GSM, Cisco, Siemens, Alcatel, PBX, Huewai, PSTN,

Wireless Technologies - Cisco WLC, IEEE 802.1x & 802.11, WLAN, WAP, AP, LWAPP, Aironet,

Other Technologies/Languages – VMware, Active Directory, Exchange 2003/2007/2010, SQL Server, Windows NT, 2000, 2008, 2012, MAC OS, MS Office, 2003/2007/2010

Summary of Professional Experience

WIPRO Comcast (New Jersey) Sr. Network Security Engineer 2019–Present

INFOSYS CenturyLink (Colorado) Network Security Engineer 2018–2019

Careernation (Arizona Mentors) Network Engineer (NSA) 2015–2017

Siemens ICN Sr. Network Engineer (TSE) 2002–2014

Education

Bachelor of Science in Computer Science & Engineering Enugu State University of Science and Tech

Master of Science in Information Technology, Security Management Colorado Technical University

Professional Experience Detail

WIPRO Comcast ad: Cloud Enthusiast (New Jersey) Sr. Network Security Engineer June 2019–Present

F5 Responsibilities

Collaborating with Application owners, Network Team, DNS Team, and Firewall Team, to migrate applications from Legacy Juniper Pulse Secure Load Balancer to New F5 BIG-IP Local Traffic Manager

Migration of applications from Juniper Pulse Secure to F5 LTM.

Maintenance and analysis of the F5 network for any possible up-gradation

Configured and troubleshooting the F5 LTM and providing level 2 support for the customers.

Created the AAA servers for LDAP and AD authentication in F5 APM.

Implemented Web traffic load balancing function and manipulated.

Configured SSL offloading, bridging and pass through for custom applications per business needs.

Handling various trouble tickets, firewall rule changes, assisting other teams to bring the device to production, making DNS changes and routing changes.

Extensive knowledge of Load balancing technology including algorithms and health check options

Extensive knowledge and experience with hosting SSL certificates on the F5 BIG-IP platform

Extensive knowledge and experience regarding F5 BIG-IP LTM VIP configuration with health check

Extensive knowledge and experience with F5 BIG-IP GTM Wide IP configuration

Knowledge and experience with F5 BIG-IP iRule programming and troubleshooting experience

Citrix Netscaler Responsibilities.

Handling of Citrix Farm & Zone creation, Citrix Servers installation, server configuration and managing

Performing Pre-installation tests and Post-installation tests for Citrix components and applications on test servers.

Installing, configuring and administering all the Windows Infrastructure & Application servers.

Monitor, optimize and troubleshoot Citrix Web Interface and Citrix Secure Gateway

Creating, maintaining & monitoring Citrix farms (XenApp 6.5, PS 4.5)

Documenting all the changes and updates made to the farm servers

Performing monthly deletion of XenServer log files.

Firewalls Responsibilities

Utilized ForeScout to create lists of devices imported from a third party source to determine which authorized devices are disconnected from the network at any given time.

Configured the monitoring solution in ForeScout, and executed a systematic gamut of checks, to ensure network monitoring accuracy.

Listening for SNMP traps from network infrastructure in ForeScout.

Scan the network IP ranges and fingerprint OS type in ForeScout.

Assess, compare and contrast DHCP authentication in ForeScout.

Monitoring and troubleshooting traffic on PaloAlto-5020 /2020 firewall.

Creating and modifying rules and objects on PaloAlto-5020/2020 firewall

Back up, Restore and upgrade of CheckPoint and Fortigate firewall appliances.

Fortigate S2S & SSL VPN Implementation

Analyze logs and make necessary network report using smart reporter console application.

Configure checkpoint and fortigate firewall to authenticate users based on user identity, user group, session and PC-User Authentication.

Configure IPSEC and SSL VPN with Palo-alto, Cisco ASA, Fortinet, Checkpoint and Router.

Manage and configure the Cisco ASA 5585 and ASA 5525 Firewalls to maintain network security and provide IPSEC LAN to LAN VPN to vendors and business partners. Utilize AnyConnect remote access VPN and certificate base VPN for all employees and vendors.

Configure and install the Cisco IPS modules integrated in the ASA5585 Firewall to monitor and block unwanted traffic as a security measure.

Monitoring and alert management of all components related to the Cisco ISE solution

Troubleshoot firewall issues using CLI and GUI.

Manage Palo alto, Checkpoint, Cisco ASA and Fortinet policy and network

Creates, and maintains Bluecoat proxy policies

Implementation of Bluecoat proxy, implementing authentication using client certificate and SSL interception using Client Sub CA certificates

Troubleshooting issues of internet traffics via Bluecoat Proxy

Worked or Bluecoat proxy SG500-20, and CAS appliance implementation for client\’s Internet traffic

Aruba Responsibilities

Routing and Switching experience with EIGRP, OSPF and BGP configuration, troubleshooting, configuration of DHCP and DNS on routers and switches at various remote site Designs

Design and setup of Aruba Controllers 7200 and 7400 series and stacking switches 3800 series

PCI Compliance auditing with Cisco/Aruba Wireless Security Assessments and Wireless Site Surveys

VPN implement and troubleshoot IP-SEC tunnels, GRE Tunnels, SSL-VPN on Aruba Controllers

Aruba Switch s3500 & 3810 Complex Stacking topologies and profile configurations

Aruba ClearPass server Authentication: 802.1X, AAA, Policy Management, Guest Access, B.Y.O.D.

Perform standard configuration, management, and maintenance tasks for Linux servers, requests, escalation support/ticket resolution and analysis in an enterprise LAN/WAN environment for datacenters, corporate, WAN links, and branch offices.

Technologies include but not limited to routing, switching, security, wireless and voice throughout an enterprise network of corporations from data center, corporate, WAN links to regional and branch offices.

Other activities included as needed and schedule reports to senior management on the status of technical implementation activities, professional/technical review on LAN/WAN Professionals and its overall success, monitored and worked to streamline/improve the company’s standards and processes.

INFOSYS Century Link (Colorado) Snr. Network Security Engineer August 2018 – June 2019

Member of a team of professionals responsible for analysis, maintenance, support, and troubleshooting in an enterprise LAN/WAN environment for Internet services access with direct client and third party.

Team lead on Onshore/ Off Shore environment

Technologies in network environment include but not limited to routers (BGP, Cisco ISR/ASR, Juniper, Alcatel), switches (Vlans, VTP, Cisco catalyst)

Support Network Engineer for CenturyLinks for Starbucks activation that includes the design and implementation of Juniper SRX 300, EX 2200, Cradlepoints, Broadband Cables and circuits, IPSec and BGP

Perform standard configuration, management, and maintenance tasks for Linux servers, requests, escalation support/ticket resolution and analysis in an enterprise LAN/WAN environment for datacenters, corporate, WAN links, and branch offices.

CareerNation Network Engineer New York, 2015–2018

CareerNation a global staffing, logistics company specializing in human resource, service and technology solutions for destination entry postal drop shipping within the direct mail industry. DLI also provides discounted shipping logistics solutions for non-mail, paper based products including printed material and raw print stock.

Managed/mentored a team of engineers nationwide responsible for design, implemented, support and maintenance of network infrastructure (physical, logical and virtual) for various clients and environments.

Knowledge and demonstrable experience of Security Information Event Management systems (Sentinel, Intel, QRadar, RSA, Splunk)

Assisted with implementation of Windows Update Services server which greatly reduced administrator overhead for routine patching and security analysis duties

Feature testing and automation of Brocade 9850 series of data center router

Tested Cisco IOS, IOS upgrades, configuration upgrades, implemented VLANS, Sniffers. Maintained the following Cisco platforms 7600, 7500, 7200, 7000, 3560, 2900, 2801, 2000, ASA55XX, Catalyst 6500, 4500, 3560 and 2900.

Troubleshooting IPSEC VPN Tunnel related issues on PaloAlto firewall.

Maintenance and configuration of policies on PaloAlto as per business requirement.

Configuration and maintenance of new policies on PaloAlto firewall

Perform SIEM product support and implementation

Increased team productivity and automated repetitive tasks by using batch files, PowerShell and WMI.

Specific engineering/troubleshooting activities including troubleshooting LAN/WAN connectivity including handling routers, switches, various WAN links (Frame Relay, TDM, LAN lines), monitoring/analysis and resolution of complex routing issues using various routing protocols including BGP, OSPF and EIGRP and acting providing technical mentoring/assistance to other technical team members and teams.

Monitored and administered F5, RSA Security Analysis, Vulnerability Management, Cisco and Juniper Firewall to identify malicious activities

Seasoned Systems Administrator familiar with MS Windows 2000-2003 Server, 2000, XP OS

Additional responsibilities included proactive analysis, developing best practices, policies and procedures, reviewing analyzing Runbooks, MOP, network schematics including logical and physical diagrams.

Siemens ICN Senior Network Engineer (TSE) Lagos, 2000–2014

Company Overview – Siemens ICN Mobile offers a complete range of mobile solutions, including mobile devices infrastructure and applications. Is a fast growing business in a fiercely competitive, burgeoning wireless industry faced with the need for rapid product innovations and operations excellence. Senior management at this 29,000-person business unit of Siemens AG wanted to strongly link its strategic direction to everyday operations.

Member of an enterprise network / telecom engineering team responsible end to end implementation of an enterprise nationwide network that included conducting site assessment, designing the implementation schematics/configurations, deploying the technologies, handling the advance configuration, testing and validating including hand off to the operations team for day to day support/administration.

Acted as IT consultant and business analyst in improving and maintaining software systems across the firm, ensuring both data.

Administration of Win98, NT4, & Mac OS9; Cisco Catalyst 3500, 4000, 5000, 6500 series switches; Cisco 2500, 2610, 7500 routers; Sonicwall firewall with a familiarity with Pix 520, Local director, & Net Ranger Intrusion Sensor; cable network management

Experience with large variances and model classes of Cisco switches 2960, 4948, SG-200, Nexus7009and routers 2500, 2600, 1800, 2800, 2900, 4400

Scheduled and allocated project activities, identified tools, standards, and guidelines suitable for the project.

Provided risk management by monitoring the project schedule and quality.

Reported project status regularly through emails and weekly meetings; formally tracked problems and issues to closure

Additional responsibilities included Tier 3 support for any escalation support and acting as SME for major

Hands-on experience with PaloAlto firewalls and a comprehensive knowledge of Policy.

LDAP Synchronize with Palo Alto firewall and implement policy accordingly.

Working knowledge on Cisco AnyConnect and Palo Alto VPN’s.

change requests along with conducting annual technical audits to ensure proper functionality and compliance.

Responsible for up to 150 servers and over 10,000 users in a global technology environment. LINUX OS supported web services, email, and a significant CRM application for this client.

Experienced in many aspects of computer security technologies such as: IDS/IPS, port and vulnerability scanners, and network detection used in performance of daily activities and to perform assessments and audit

Technologies in network environment included both voice/telecom and data network but not limited to routers, switches, security, firewalls, voice / collaboration (application, voicemail, email, text), wireless (GSM, access points, controllers, site surveys) and related technologies along with various server/application administration, system reimaging, and remote setup.

Contact this candidate