Network Engineer Senior

Experience

Top Skills:

Python, Python*, Network Automation, Troubleshooting, Routing Protocols EIGRP, OSPF, BPG, and RIP, Switching, API, JSON

Publix August 2021 – Present

Developed script to add/remove users from F5 devices and to validate state of device. (Active/Standby/Standalone)

Created script to sync Active devices, and alert when what is a known Standby device has gone into an “Active” state. This allowed for catching when device states were outside of the normal production state.

Developed scrip utilizing F5 API and tmsh command line to view the ARP table and find decommissioned servers, Pools, and VLANs that could be reclaimed. Also compared data retrieved from the F5 utilizing the Infoblox API to determine if the network and hosts were configured in DNS.

Made Terraform script to interact with VMWare AVI Load Balancers and NSX-T systems to create new applications and Service Engines.

Created scripts to analyze the network environment to populate new CMDB system.

Utilized scripts to find unused VLANs on switching network and identify the Root and Secondary bridges. In the process solved a bridging loop in the Spine-Leaf topology.

DTCC May 2014 – August 2021

Developer/Network Data Analytics October 2018 – August 2021

Developed scripts in Python3 that would analyze the outputs of reports from the Storage Area Network Team to validate what NetApp NFS Mounts needed replication, to what Data Centers replication was needed, and what replicated systems should be allowed to connect. This included reporting on LIFs, ACLs, and protocols that each volume required to connect.

Created scripts in Python3 that monitored DNS Entries to include mappings between production and secondary ARecords and CNames. The program also queried the SOA DNS Server for each record to validate the DNS TTL associated with each record.

Wrote scripts in Python3 to monitor URLs configured on RadWare Load Balancers for discrepancies between Production and Secondary sites. Scripts validated that each URL was configured in one zone, the server clusters existed, and that there was a DNS record and CMDB record.

Wrote support scripts for access into ServiceNow CMDB to validate records and production status of CIs through the API. Also created similar scripts to access the APIs for the on-premises SharePoint and SharePoint Online.

Presented the output of scripts into SPLUNK Dashboards that could alert proper teams of misconfigurations associated with their systems.

Developed scripts that checked Service Now change records against change logs in network devices and validated that changes were approved prior to implementation. Also, validated the changes against HIPAM records to ensure the engineer preforming the change had the correct permissions and followed the company standards for change process.

Shift Manager/Senior Network Engineer May 2014 – October 2018

Was the lead for Network Disaster Recovery scenarios and exercises that were required by the Securities and Exchange Commission. This required dedicated planning time to ensure that all recovering systems were available as needed and recovered within the designated 2-hour window.

While working as the Disaster Recovery Network Lead, created scripts that allowed for SSH to devices allowing routine changes such as ACL updates to be automated.

Wrote scripts in Python3 that moved an Enterprise Level network to the secondary site in under a minute, made all related DNS changes in under a minute, and DNS pushes to more than 30 servers in less than 4 minutes.

Utilizing the same knowledge, created a universal troubleshooting script, in Bash and utilized the default install of Python2 or Python3, for Unix/Linux servers that could use the systems internal commands to run network diagnostics (ping destination server, traceroute, DNS information, open ports, and routing table) to start troubleshooting systems errors and faults.

Used network troubleshooting tools such as CheckPoint firewalls, Riverbed Profiler, Riverbed Packet Analyzer, Riverbed SteelCentral, and even created tools.

During day-to-day activities monitored and maintained more than 1,200 extranet routers that were located at customer locations all over the world. While troubleshooting this network utilized Verizon, AT&T, Zayo, and Akamai service providers to troubleshoot MPLS service disruptions, and for internal troubleshooting had to look at BGP, EIGRP, OSPF, static routes, and on rare occasions RIPv2.

Routinely participated in Incident/Problem Management calls to troubleshoot ongoing issues, or to find the root cause of an issue.

Worked with external vendor Akamai to detect threats to the network, and to swing network operations to a secondary site if determined that the threat was high.

Created Visio diagrams and spreadsheets that contained device names and IP addresses, and compared what was known on the network against server lists.

Worked with and configured cloud devices such as virtual routers and servers in both AWS and Microsoft Azure.

After DTCC acquisition of Omgeo (Institutional Trade Processing) worked with Akamai to setup authentication to ITP websites.

Worked with other shift leads across multiple global locations to include Dallas, New York, London, Chennai, and Manilla to complete network projects across multiple sites.

US Army

Network Communications Supervisor February 2006 - August 2011

Project:

Setup the network for new camps from the ground up. Installed Cisco switches, routers, and servers.

Configured routers to have multiple networks that were securely separated by ACLs. Installed new systems and implemented multiple routing protocols such as EGRIP, RIP, OSPF, PPP, PAP, CHAP, and DLCI to ensure a fast, safe, and reliable network with as little as possible outage time between networks. With the outage times being as little as possible it saved the government money, and man-hours.

Configured Routers with QoS for voice to allow for more stable voice communications over VoIP.

Installed switching systems with distribution and user level switches. Protocols such as STP and VTP were used to keep network traffic from bottlenecking, increasing the overall performance of the network.

Created multiple VLANs with different levels of access according to the section, position, and country. This prevented unauthorized access to classified network resources.

Made diagrams in Visio with multiple layers to show cabling, network equipment, and host devices. As well, accurate cut sheets were kept in Excel with detailed information of IP, MAC, and VLAN of every device on the network.

Supervised 40 personnel that were from multiple branches of service, and at times worked in multi-national environments.

United States Marine Corps

Platoon Sergeant December 1998 - February 2006

Operated man-packed radio and ensured voice communications from ship-to-shore, ground-to-air, and ground-to-ground.

Served as the supervisor of the radio section, with a total of 25 personnel.

Education

Keller Graduate School of Management

Master's of Information Systems Management, Network and System Administration/Administrator (2012 - 2018)

DeVry University

Bachelor's Technical Management, Network and System Administration (2011 - 2012)

Bitbucket Open Project:

https://bitbucket.org/Darth_Friese/workspace/projects/SHAR

Contact this candidate