Network Engineer Information Technology

Terrance M. Hedgepeth

* **** **** ****, ***** Laurel, NJ 08054

**************@*****.***

QUALIFICATIONS

Professional Senior Network Engineer with 17+ years of proven experience in Information Technology

Track record for finishing projects on time and under budget

Convey complex technical issues to easily understood communication to non-technical staff and clients.

Motivated self-starter with a strong desire to learn more.

TECHNICAL SUMMARY

Windows Server 2003/2008 R2/2012r2, Hyper-V, PowerShell scripts, Windows XP, 7, 8.1 and 10, Active Directory, Group Policy, Microsoft Exchange Online (Office365), SCCM/ConfigMgr, Cisco ASA 5550, Cisco, 2900, 3800, 4000, 7200 and 7600 series routers, Cisco Nexus 5k and 7k NX-OS virtual device context (VDC), Cisco ASR Routers, Cisco 3700, 3800, 2900, 4000, 6500, switches (layer 2 and 3), Aruba/HPE Switches (2920 and 2910 POE), HSRP, VRRP, Checkpoint Firewalls, VPN, T-1, T-3, ISDN, MPLS, Ethernet (802.3) TCP/IP, NAT/PAT (RFC 1918), Multicast, STP, VLAN, VTP, WMM, HTML,WEP, WPA, WPA2, SNMPv3, WLAN, BYOD Management, Cisco VOIP, Citrix, DNS, DHCP, Microsoft Bit-locker Encryption, DES/3DES,AES, Apple IOS, Ricoh Printers. VMware ESX 5, vSphere 5.0, VMware workstation, Wireless controllers (Aruba 7200, Cisco 5520 and Aruba/HPE MSM760), Cisco ACS, Cisco Prime Infrastructure, Cisco NCS, Kerio Connect, Barracuda Firewalls, Riverbed Cascade (Mazu Sensors and profilers), F5 & Kemp load balancers, Wireshark, Source Fire Firepower IPS/IDS, Juniper Netscreen VPN, Skype for business, Cisco SMARTnet support, CiscoTAC, TACACS+, AAA, Radius, Disaster Recovery, High Availability, Change Management, Aruba Clearpass, Solar winds Orion, IPAM, CUCM 9.x and Cisco Unity express, SIP/SCCP, LDAPv3, SNTP & NTP, OSPF, EIGRP, SYSLOG (Splunk), QOS (802.11p)/COS, IPV4/6, VLSM, OSPF, EIGRP,APC UPS, Veeam, Mitel, Office 365, WSUS, Microsoft Azure (Dirsync), Nagios, CIFS, Pulse secure VPN, HPIMC, PSTN Gateways, HP Open View, TeamViewer 12, Avaya, DMARC extensions, DSCP and Precedence Values, Route redistribution, Route summarization, CDP/LLDP,PPP,HDLC, ARP, Mac Address, Port Security, GRE tunneling, Loopback testing, IP SLA, ACL’s (extended and standard), HWIC-2T Wan Cards, IDF, MDF, PPoE, MLPPP, MTU, DMZ, Port Forwarding, EMC Storage, Dell EqualLogic and Blade Servers, EHWIC-4G-LTE-V (Verizon), Palo Alto Firewalls, Blue Coat ProxySG 900, Fibre Channel, SAN, Big Leaf SD-WAN, Cisco ACI, SEIM, Cisco ISE, Meraki Wireless

PROFESSIONAL EXPERIENCE

NJM Group

April 2022-January 2025

Sr. Network\Security Engineer

System Administrator for PRTG and Cisco Prime monitoring software

Troubleshoot network/systems issues and outages on organizations Cisco wireless, LAN and WAN

Cisco Wireless LAN administration and SSID and AP group management on companies’ corporate wireless network Cisco Wireless controller and Cisco Meraki

System Administrator for Cisco network devices LAN/WAN,

NAC\Policy management through use of CISCO ISE software product from Cisco.

Cisco ISE PAN and PSN version upgrades as well as annual cert renewals for machine-based certificate authentication for the production wireless network access.

Cisco Secure Firewall ASA Virtual via AWS administration: Firmware upgrades, split tunneling and VPN timeout updates via ASDM to the companies hosted AWS environment

Adhered to weekly change management procedures to ensure proper tracking, documentation testing and approval were provided due to changes to the production environment

Management of companies AWS VPC subnets, availability zones, route tables for disaster recovery and production strategies as well as route 53 DNS updates and changes for new resources in AWS.

Amazon Web Services – Problem determination regarding; Transit Gateways, VPCs, Route Tables, Direct Connect, Security Groups.

AWS Network security implementation configuration and troubleshooting. (Security Groups, NACL, and Flow Logs)

Configure and Advertise new BGP routes in AWS transit gateway portal.

Cisco catalyst C9407 and C9010 EOL switch replacement on a quarterly basis for companies access layer switching infrastructure at all 3 locations.

BDP International\Tek Systems

June 2021- Dec 2021

Security Engineer (Contractor)

Configuration, design, and maintenance of Firewalls (Palo Alto), load balancers (Citrix NetScaler), routers (cisco), switches (Cisco and Aruba) and wireless technology.

Management of companies AWS VPC subnets, availability zones and route tables

Amazon Web Services – Problem determination regarding; Transit Gateways, VPCs, Route Tables, Direct Connect, Security Groups.

AWS Network security implementation configuration and troubleshooting. (Security Groups, NACL, and Flow Logs)

Configure and Advertise new BGP routes in AWS transit gateway portal.

Citrix NetScaler device administration troubleshooting, VIP and NAT address management.

Palo Alto Firewall Administration, Rule Analysis, Rule Modification, software upgrades and central management support through Panorama

Global Protect VPN implementation, management and support on Palo Alto Firewall.

Upgrade firmware code, Wildfire updates, AV and threat definitions on the Palo Alto firewall to meet company’s strict security policy standard.

Palo Alto Firewall ruleset clean-up (duplicate object removal, rule analysis and modification as well as NAT/PAT clean up)

Implemented Zone Based Firewalling, Security Rules, Profiles and URL Filtering on the Palo Alto Firewall and verify that all logs are sent to SIEM server for managed service provider’s review.

SIEM device logging for troubleshooting and firewall threat traffic analysis.

Troubleshoot network/systems issues and outages on wireless, LAN and WAN.

IT change control best practices for predictable results

Monitor the network ticket queue and update and escalate tickets in accordance with Service Level Agreement requirements

Network capacity planning, performance tuning and troubleshooting

Wireless AP Migration project (HiveManager Online to HiveManager NG)

Network monitoring application usage, troubleshoot and support for real time network insight (SolarWinds NPM and NCM for monitoring, configuration, and alerting for all network devices)

LOG4J Vulnerability remediation and support

Implementation and execution of PowerShell scripts for data transfer from one virtual environment to another (VMware)

Quest Diagnostics\Wipro

April 2019 – June 2020

Sr Network Engineer (contractor)

Traveled across the country to upgrade core (Nexus 9K/7k), and access layer switching infrastructure from EOL hardware (Cisco) to warranty supported products from Aruba \HPE

Wireless Networking 802.11x, installed and configured wireless Access Points, Aruba/HPE wireless controllers, setup security and encryption WEP, WPA, WPA2, and MAC ID Filtering.

Conversion of AT&T MPLS network to Verizon/Versa SDWAN managed service solution of Tier 1-3 sites consisting of lab, office, and datacenter locations

Network Architect for sites requiring SD-Wan conversion from MPLS

Monitoring of site bandwidth utilization through use of SEVone for MPLS sites and then Versa director after SD-WAN conversion.

Enterprise level IP address and DNS management internal and external (Infoblox)

Adhered to change management procedures to ensure proper tracking, documentation testing and approval were provided due to changes to the production environment. (HP Service Manager)

Data Center troubleshooting and management

Configuration, installation and proactive monitoring of security events and alerts on Cisco ASA, Palo Alto Firewalls, Fortinet FortiGate (501e and 301e models).

Troubleshoot network/systems issues and outages on clients wireless, LAN and WAN.

FMC Corporation

September 2018 – April 2019

Sr Network and Support engineer (contractor)

Troubleshoot network/systems issues and outages on clients wireless, LAN and WAN.

Installation and support for Layer 2 HP devices and associated VLAN changes

Escort Telco vendors on site to preform circuit upgrades.

Assist in site transition over to FMC networked devices from Dupont devices due to FMC purchase of site.

Digital and Analog phone troubleshooting with telco vender (FUZE)

Switch Port management and accounting through use of HPMIC management software.

Voice and Data Vlan design and management.

IPv4 address space design and management.

Active Directory, Office 365, Sharepoint and Group Policy troubleshooting and maintenance with Remote Server Administration Tools for Windows 10

Led Windows 7 to 10 upgrade project due to windows 7 end of life support.

Document and respond to trouble tickets utilizing Service Now

Exelon Corporation

January 2018 – June 2018

Cisco Network Engineer (contractor)

•Respond to trouble tickets requiring troubleshooting of network outages, latency, and CPE failures on all Cisco network devices and UPS’s (HP Service Manager)

•Lead technician on upgrading switching infrastructure (Cisco 3800, 4500 series) from EOL hardware to new in warranty and SMARTnet supported products from Cisco (network refresh)

•Perform hardware and software upgrades on network hardware and network operating systems (NX-OS, IOS, CatOS) on all Cisco Devices.

•Adhered to change management procedures to ensure proper tracking, documentation, testing and approval were provided due to changes to the environment or application.

•Enterprise level IP address and DNS management (Men and Mice)

•Checkpoint Firewall implementation and support with Firewall security team

•Documentation of network changes and updates via Microsoft Visio

•Worked closely with cabling vendors to ensure proper layer 1 buildouts (cabling and network racks\patch panels) and ensure budget as well as deadlines are met within project scope.

•Data Center troubleshooting and management

•Management of Cisco ACI endpoints and management policies using the Application Policy Infrastructure Controller. (QOS parameters and associated applications)

•Support of redundant leased line services MPLS, Cable and T1/Ethernet

Wistar Institute August 2016 - December 2016

Network/Support Engineer (Project)

Level 3 troubleshooting of network issues/outages on company’s Aruba/HPE LAN, Aruba/HPE WLAN and WAN.

Wireless Networking 802.11x, installed and configured wireless Access Points, Aruba/HPE wireless controllers, setup security and encryption WEP, WPA, WPA2, and MAC ID Filtering.

Sited Surveys to ensure proper, secure and optimized signal usage. Indoor/outdoor WLAN Installation. (Modulation, Antennas, MIMO, Spatial Streams, SNR, Noise Floor, RF survey).

Upgraded switching infrastructure from EOL hardware to new in warranty products from Aruba/HP

Documented and resolved trouble tickets utilizing Manage-Engine Servicedesk Plus 9.2 Build 9213

Configure, deploy and manage Aruba/HPE switches and PSTN Gateways for data and voice communication to ensure voice calls maintain the highest quality.

Proactive/Reactive monitoring of Network Core/Edge devices using monitoring platform (Nagios) to isolate and troubleshoot all network related issues.

Server Administration through use of VMware ESXi 5.5 (Type 1 “bare metal”) and VSphere client for deploying Windows 2008/2012R2 servers for use with network monitoring applications (Nagios and HPIMC)

Configure Aruba ClearPass policy and AAA solutions to provide built-in device profiling through the web-based administrative interface for comprehensive reporting/enforcement with real-time alerts.

Deploying and decommission of VLANs on Aruba layer 3 switching core

Experience with Firewall Administration, Rule Analysis, Rule Modification (sonicwall)

Server Administration (Server 2012r2) and assisting help desk team with windows patching through use of WSUS and Manage Engine’s Desktop Central

Server Administration with troubleshooting VMware back-up failures. (Veeam)

Server Administration with transforming servers from P2V through use of VMware vCenter Converter Standalone

Implementation and troubleshooting of VPN tunnels. (Pulse Secure)

Linux configuration and troubleshooting: CentOS based systems for radius authentication against wireless clients

Capture and analyze packets using variety of tools like Wireshark and Pcap.

COMP-Consulting LLC August 2015 - July 2016

Network/Security Consultant (contract)

Troubleshoot network issues/outages on clients wireless, LAN and WAN.

Support Cisco networking solutions which include wireless, datacenter, UC and CUCM VOIP solutions.

Configure Cisco switches, PSTN\SIP Voice Gateways and CUCM Product for data and voice communication to ensure that voice calls maintain high quality (Dial Peers, IVR, VM, CDR, Call Routing & Dial Plan management).

Advise client on best IT security practices to prevent data breaches and protect companies’ digital assets.

Aramark

November 2014 - July 2015

Cisco Network Engineer

Respond to trouble tickets requiring troubleshooting of network outages, latency, and CPE failures on all Cisco network devices and UPS’s

Upgraded switching infrastructure from EOL hardware to new in warranty and SMARTnet supported products from Cisco

Support for firewall rules, changes, and new implementations (Checkpoint [SMART Console], ASA and Juniper Net screen) Traffic Control Methods, Packet Filtering – Specific Rules for Allowing/Denying Traffic – Explicit Deny at the end of the policy

Performed hardware and software upgrades on network hardware and network operating systems (NX-OS, IOS, CatOS) on all Cisco Devices.

Worked with service providers to trouble shoot and configure Cisco ASR for ethernet handoff. (OS-XR)

F5 Load Balancer maintenance, diagnostics and monitoring. (Global Traffic Manager (GTM) and Local Traffic Manager (LTM) with Pool and Virtual Server Concepts)

Installed, maintained, and documented network-based software packages for Cisco IOS devices.

Maintained network documentation including but not limited to network diagrams, circuit inventories, network hardware inventory and configurations, server interfaces.

Participated in monthly weekend maintenance windows for off-hours upgrades to address system security vulnerabilities and hotfixes that address software bugs in various network related systems

Proactive monitoring of security events and alerts through use of Sourcefire Firepower defense center 5.3.0 Build 571.

Adhered to change management procedures to ensure proper tracking, documentation, testing and approval were provided due to changes to the environment or application.

Bluecoat proxy redirect diagnostics troubleshooting and monitoring

Configure Aruba ClearPass policy and AAA solutions.

Wireless Networking 802.11x, installed and configured wireless Access Points, Aruba/HPE wireless controllers, setup security and encryption WEP, WPA, WPA2, and MAC ID Filtering (airwave)

Enterprise level IP address and DNS management (Infoblox)

Implementation and troubleshooting of VPN tunnels. (Pulse Secure)

Upgraded user’s telecommunication systems to compatible Skype for business (Lync 2013)

IP phones, videoconferencing solutions and desktop app.

Campus Apartments Technologies

March 2014 - November 2014

Network and Support Engineer

Provided Level 2 technical support to over 2,000 employees and executives across multiple physical sites

Provided technical support for routers, servers, networks, operating systems, PC computers, smartphones and other peripheral devices

Installed and troubleshoot computer peripherals (Ricoh printers, scanners, and fax machines)

Troubleshoot users network issues both wireless and on LAN

Troubleshoot Layer 2 switching technologies (STP, VLANs, VTP, Trunking.)

Created trouble tickets with Internet Service Providers when disruption in service occurs

DNS (internal and External)/DHCP and IP Address Management

E-mail support for Smartphone devices and computers (Kerio Connect)

Virtualization Software installation & support (server and desktop)

Monitored, tested and managed networking equipment’s performance and health through SNMPv3 via PRTG

Created, implemented and trained fellow employees on hardware, software, and social media policies and procedures.

Implementation and troubleshooting of VPN tunnels. (IPsec)

Installed, configured and troubleshoot Cisco Voice over IP (VOIP) solutions

TD Bank

January 2014 - February 2014

Senior Systems Analyst (Contractor)

Imaged PCs while migrating them from Windows XP to Windows 7.

Resolved help desk tickets.

21st Century Media (formerly The Journal Register Company) December 2010- January 2014

Network Engineer\System Administrator

June 2012 - January 2014

Installed and configured Cisco routers, switches, ASA firewalls and Access Points for deployment in remote locations.

Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls

Installed, configured and troubleshoot Microsoft Windows family, VPN, Remote Monitoring and Remote Access.

Experience using and managing network design documents and presentations (PowerPoint and Visio) and document management software such as Google Docs and Microsoft SharePoint.

Knowledge of TCP/IP addressing and sub-netting

Knowledge of TELCO technologies (T-1, T-3, MPLS, Frame-relay, ISDN, Pri/Bri)

Knowledge of IP networking concepts (NAT, TCP/IP, Multicast, etc.)

Troubleshoot users network issues both wireless and on LAN

Working knowledge of best practice IT security concepts (Access- lists, File Permissions and Authentication)

Knowledge in troubleshooting Layer 2 switching technologies (STP, VLANs, VTP, Trunking.)

Planned, implemented, installed, configured and troubleshoot Cisco Voice over IP (VOIP) solutions. (Cisco 7961 IP Phones)

Wireless Networking 802.11x, installed and configured wireless Access Points and Cisco wireless controllers, setup security and encryption WEP, WPA, WPA2, and MAC ID Filtering.

Sited Surveys to ensure proper, secure and optimized signal usage. Indoor/outdoor WLAN Installation. (Modulation, Antennas, MIMO, Spatial Streams, SNR, Noise Floor, RF survey).

System administrator for automated backup for all Cisco IOS devices using Manage Engine’s Device Expert software

Administrator of Real-Time Monitoring of syslog messages, error counts and traffic on all on Cisco devices with the use of Just for Fun Network Management System (JFFNMS) and Solar Winds Network Performance Monitor and other network monitoring applications via SNMPv3.

Managed authentication, authorization, and accounting (AAA) through use of Cisco ACS Version 5.4

Windows Server enterprise edition (2003, 2008 r2, 2010) installation, upgrade, maintenance, troubleshooting and support for management of network related monitoring software (Solar Winds Orion and Manage Engine’s Device Expert.)

Created trouble tickets with lease line MPLS providers (XO and Quest) when disruption in service occurs.

Configured BGP Statements for WAN connectivity to lease line MPLS service providers to route traffic between autonomous systems.

DNS (internal and External)/DHCP and IP Address Management

Technology Support Specialist III December 2010 - June 2012

Provided technical support to over 3,000 employees, 10 executives and the executive’s support staff across 10 physical sites.

Documented trouble tickets utilizing Manage-Engine Servicedesk Plus 8.0.0

Provided technical support for Routers, servers, networks, operating systems, PC\Apple computers and other peripheral devices

Installed, configured and troubleshoot Citrix, VPN and AS400 issues

Installed and troubleshoot computer peripherals (printers, scanners, monitors and projectors)

VMware Virtualization Software installation & support

Maintained all Active Directory user accounts and distribution lists for network and email systems

Administered accounts and permission to network resources for authorized users (AD manager Experience)

Documented procedures and troubleshooting steps

Installed, upgraded, supported and troubleshoot Windows 98, Windows XP, Windows 7 and Mac OS

Installed, upgraded, supported and troubleshoot Microsoft Office 2003, 2007 and 2010

Windows Server enterprise edition (2003, 2008 r2) installation, upgrade, maintenance, troubleshooting and support.

Supported, troubleshoot and archive user’s emails in Microsoft Outlook 2003, 2007 and 2010 in a Microsoft Exchange environment (Exchange server 2007 and 2010) (ActiveSync Email support for mobile devices) (Blackberry Enterprise Server 5.0 experience for blackberry devices)

Identified, quarantined, and cleaned issues related to viruses, malware, and spyware (experience with Symantec Endpoint Protection 12)

Evaluated and tested new products (hardware and software)

Supported, troubleshoot, and ordered of mobile devices including Blackberry, Android, iPhones and iPads with both AT&T & Verizon

Configured and installed workstations utilizing Symantec Ghost

FTP setup, maintenance, and troubleshooting

Monitored user licenses and resource utilization.

DNS/DHCP and IP Address Management

Provided training for employees on hardware/software solutions.

Supported and trained for document management solutions (SharePoint and Adobe Acrobat)

D.U.E. Season Charter School

August 2009 - December 2010

Technology Assistant

Troubleshoot PC and network related issues.

Configured and installed workstations on an as needed basis utilizing Acronis True Image

Provided technical support to over 20 teachers and 3 administrators and the support staff.

Performed disk backups as required.

Ensured teachers know how to use available software and hardware.

Trained users for full utilization of hardware and software

Installed new software.

Evaluated hardware and software and make purchase recommendations.

Troubleshoot printer malfunctions.

E-mail support for schools Smartphone devices. (Blackberry, iPhone, Palm, Windows Mobile)

Supported, troubleshoot and archived teacher’s emails in Microsoft Outlook 2007 in a Microsoft Exchange environment (Exchange 2007)

Westampton Public School District July 2008 - July 2009

Technology Assistant

Provided technical support to over 75 teachers and 25 aides across two physical sites. Support includes, but not limited to, break/fix issues, new software installations, new hardware rollouts.

Configured and install workstations on an as needed basis utilizing Symantec Ghost

Maintained detailed inventory of workstations, printers, and consumables.

Maintained school servers with regular backups and regulatory maintenance.

Assisted in installation of routers, switches, firewalls, and servers.

Maintained records and inventory for proper equipment disposal.

Mercer County Board of Social Services Summer 2005 & 2006

Information Technology Intern

Assisted in customer support.

Assisted in applications development and/or systems development.

Maintained other technology related activities.

Education

Network Learning Institute - Mt. Laurel, NJ January 2017- January 2018

Studied CCNA and MCSA.

Mercer County Community College - W. Windsor, NJ 2007 - 2009

Network Engineering

Trenton Central High School - Trenton, NJ 1999 - 2003

Cisco Network Academy Student

Urbanus Technical Institute - Elizabeth, NJ 2001 - 2002

Studied A+

Studied Network +

Received PC/LAN Support Specialist certificate of completion.

Contact this candidate