Network/Security Engineer

Jack of all trades with a penchant for networking & security. Wide & deep knowledge set and thirst to learn new technology to stay on the cutting edge.

SUMMARY OF QUALIFICATIONS

• Multiple Project Management

• Learn new technology quickly.

• Exceptional end user support

• Customer communication skills

• Speak/Read/Write Spanish and Russian

• Troubleshooting

• Monitoring

• Linux proficient

WORK HISTORY

• 2010-Present First American Title, Santa Ana, CA

Sr. Network/Security Engineer

Designed & successfully tested disaster recovery procedures

Completed POC for automating firewall audits for OTS, FISMA, GLBA, SOX, PCI compliance with AlgoSec FA, Tufin SecureTrack, Secure Passage Firemon

Automated switch/router/firewall/LTM configuration management with RANCID

Implemented Splunk for better syslog indexing, searching & troubleshooting

Implemented OpsView & NTop for NMS

Deployed PIX 525 firewall (v8.2.4), ASA 5520 firewall (v8.3.2), & VPN 3000 concentrator

Supported (8) HA pairs & (3) standalone PIX 525 firewalls (v6.3.5 & v8.2.4), (1) ASA 5520 firewall (v8.3.2), (2) 6509 core switches, (14) 3560 switches, (2) 3550 switches, (6) 3750 switches, (16) 3030 switches, (4) 1800 series routers, (4) 2600 series routers and (6) HA pair of F5 BigIP LTM's in a VMWare environment, and multiple vendor connections/applications (BankServ GFX, SunGard Addvantage, and Fedline Advantage)

• 2007-2009 Yum! Brands, Inc. (A&W Restaurants, KFC, Long John Silver, Pizza Hut, Taco Bell), Irvine, CA

Network Architect

Upgraded 6500 company and franchisee stores with VPN over ADSLoPOTS, Cable, or 3G-EVDO cellular adding redundancy (VSAT failover), policy based firewall, IDS/IPS, multiple VLAN support, split tunnel, 802.11 b/g wireless with WPA-PSK encryption; Contributed with Taco Bell achieving and maintaining PCI compliance; Documented store network; Trained IT department in Networking/Security

Served as network subject matter expert, project management, acted as liaison between Taco Bell IT teams and Yum! Brands IT teams, managed QA in testing of POS terminals/appliances/applications, DVR’s, and new technology, performed protocol analysis of POS SSL transactions (Wireshark), monitored POS and web applications for latency or other connectivity issues (Spectrum, Solar Winds, Smokeping, NetQoS, NTop, Cacti, Splunk, Unicenter, eHealth, MRTG), designing/planning network topology/technology/change management, managing two broadband vendors and the NOC’s connected to 6500 company and franchise stores, generating reports and managing (2) Packeteer (Bluecoat) PacketShaper 10000, managing (2) F5 BIG-IP 3600 web accelerator, supporting 4 pairs of Cisco ASA 5580 firewalls running HSRP, (2) Catalyst 6509 switch routers using EIGRP, (20) Aironet 1232AG, (12) 4506 switches, (3) 7206VXR routers, (16) node WAN running BGP over MPLS.

• 2004- 2007 Canon Business Solutions, Inc. - Canon USA, Inc., Gardena, CA

Network Engineer

Deployed (10) NetWare 6.5 servers (Dell Power Edge 2800), (2) Silkworm 400E fiber switches, (2) VMWare hosts (Dell Power Edge 2950) with 1.5 TB Fiber SAN (EMC2 AX150), Cisco IDS/IPS 4210 v5.x, Cisco IEV and (2) Linux Fedora Core 7 monitoring servers (MRTG, NW-MRTG, SmokePing, NTop, OpenNMS, Mediawiki, Splunk, WebHelpDesk, Apache, Tomcat, MySQL, PostgreSQL, NMap, Ethereal/Wireshark, Dovecot, SquirrelMail).

Maintained corporate HQ (1000 users), and eleven satellite offices (two site to site VPN over DSL) and WAN (DS3 PPP/ATM/IMA/MPLS/BGP/ISDN BRI), (2) Cisco 6509 core switches, (19) 3750, (2) 3725, (1) 3661, (1) 2621XM, (2) 871, (6) Orionoco/Proxim WAPs (AP-4000, AP-2000, (15) NetWare 6.5 servers (five VMWare), (12) Windows 2000/2003 servers (2 Virtual Machines), (2) Linux Fedora Core 7 servers, Dell OpenManage 5.x, HP Systems Insight Manager 4.x & 5.x, What’s Up Gold.

• 2004 BNFY, Los Angeles, CA

Network Engineer

Implemented Cisco IDS-4215 v4.1, IDS Device Manager (IDM), VMS/IDS Management Console (IDSMC), IDS Event Viewer v4.1 (IEV), Threat Response 2.x and Vulnerability probe (Nessus, NMap, Ethereal, Snort & MRTG on Red Hat 9.0).

Supported servers (Windows NT 4.0 Server, Windows 2000 Advanced Server, Windows 2003 Enterprise Edition), Exchange 5.5/2003, Citrix MetaFrame XP, switches (Catalyst 5500, 3500, 2900), routers (Cisco 2500, 2600, 7206VXR), firewall (Watch Guard Firebox 1000), IDS/IPS (Cisco 4215); Microsystems DocXchange document conversion from Word Perfect 6 & 10 to Word 2003; Interwoven iManage suite Desksite 8.x and Mailsite 8.x; Compulaw Vision docketing system running on SQL server 2000.

• 2003- 2004 LA County – Office of the Assessor, Los Angeles, CA

LAN Consultant

Supported 50 HP/Compaq servers running Windows NT 4.0/2000/2003, Exchange 5.5, SMS 2.0/2003, 1000+ clients at main site, 50-200 clients at each of five satellite sites, workstations running Windows NT 4.0/2000/XP. Applications supported include Outlook 98/2000/XP, Office 97/2000/XP, Symantec Anti-Virus Enterprise Suite 8.x/9.x, and custom applications.

• 2000- 2003 PMI – Delta Dental, Cerritos, CA

Network Analyst

Deployed two remote offices (Maitland, FL & Irving, TX) including servers and network, implementing enterprise wide network monitoring & notification enterprise wide through Compaq Insight Manager, BMC Patrol and Cabletron (Aprisma) Spectrum.

Multiple project management (Windows 2000/ADS migration, cc:Mail to Exchange migration, Disaster Recovery, Backup/Recovery for all network devices, Satellite offices, Expanded Exchange with multiple sites and Exchange server rebuild, Websense implementation, HIPPA standards planning, Vendor testing and implementation, Asset Inventory) utilizing change control process and providing third level support for (6) NetWare 4.11/4.2 servers (2 SFT III servers), (20) Windows NT 4.0 & (5) Windows 2000 Advanced servers running Exchange 5.5, Internet Information Server 4.0, Proxy Server 2.0, Citrix Meta Frame 1.8, SQL Server 7.0 & 2000, ArcServeIT 6.x, NetShield 4.x, GroupShield 4.x, NDS for NT 2.01, (3) Cisco 500 Series PIX, (10) Cisco 3600 series routers, (3) Cisco 2600 series routers, (3) Cabletron (Enterasys) Smart Switch Router 8600, (7) Cabletron (Enterasys) Smart Switch 6000, and (4) Shiva LanRover 4/E. Supported five separate networks, Production, Development, Production Testbed, Integrated Services Testbed, and DMZ.

• 1994-Present Chandler Communications, Signal Hill, CA

Owner and Operator

Networking/Security consulting for small and medium sized businesses. Technical support via remote control, telephone, E mail, or on site. Installation, upgrade, configuration, and troubleshooting of routers, firewalls, IDS, VPN’s, switches, servers, and network appliances. Network design & implementation, VLAN creation/management, IOS upgrades, ACL management, DMZ design/management, PAT/NAT configuration, anti-virus management, and security strategy.

• 1990- 1994 United States Navy, Norfolk, VA

Sonar Technician Submarines, Third Class (Submarine Service)

COMPUTER SKILLS

• Experienced in Network Operating Systems (NetWare 3.1x, IntraNetWare 4.x, Netware 5.x & 6.x and Windows NT Server 4.0, Windows 2000 Advanced Server, Windows 2003 Enterprise Edition, Windows Server 2008, and Linux Red Hat 7.x-9.x, Fedora Core 1-14) installation, upgrading, patching, maintenance, troubleshooting, and administration.

• Knowledgeable of design, implementation, administration of directory technologies: Microsoft Advanced Directory Service (ADS), Novell Directory Services (NDS), Lightweight Directory Access Protocol (LDAP)

• Experienced with Internetworking Operating System: Cisco IOS (v11.x-12.x), PIX OS (Finesse) 6.x-8.x, Adaptive Security Appliance 5500 series (ASA) 8.x, JunOS v7.x-10.x

• Experienced with Intrusion Detection Systems/Intrusion Prevention Systems (IDS/IPS): Cisco 4210, 4215 (4.x-5.x), VMS/IDS Management Console (IDSMC), IDS Device Manager (IDM), IDS Event Manager v4.1 (IEV), Threat Response (2.x) and Snort (2.x & 3.x)

• Experienced with firewalls, routers, switches, hubs with various vendors including 3COM, Cisco, Enterasys (Cabletron), Juniper, Linksys, NetGear, Netopia, SonicWall

• Wireless technology experienced w/ 802.11A/B/G/N and Bluetooth.

• Experienced in server processes such as Cisco ACS, VMWare 2.x-4.x, Apache (1.x-2.x), Tomcat (4.x-6.x), Microsoft SQL (7.x-2000), MySQL (4.x-5.x), PostgreSQL (8.x), Microsoft Internet Information Server (4.x-6.x), , Exchange (5.5, 2000, 2003), Citrix Metaframe (1.8, XP), Mediawiki (1.x), WordPress, Novell NDS for NT (all), NDS Corporate, eDirectory

• Experienced with Point of Sale (POS) applications, protocols and PCI compliance.

• Experienced with network appliances: Packeteer (Bluecoat) Packetshaper 10000 for QoS prioritization and reporting, F5 BIG-IP 3600 web accelerator

• Experienced in the following Routing protocols: BGP, EIGRP, OSPF, RIP, MPLS

• Experienced in the following Layer 2 protocols: STP, CDP, DTP, VTP

• Experienced in the following Application Protocols: TCP/IP, IPX/SPX, NetBEUI, NetBIOS, DHCP, HTTP, HTTPS, IPP, POP3, IMAP, SMTP, SFTP, FTP, FTPS, TFTP, Telnet, SSH, NTP, SMB, NCP, SNMP, RMON, TACACS+, RADIUS, and NetFlow.

• Experienced with PKI, VPN, & encryption technology: PGP, GnuPG, L2TP, PPTP, SSL, TLS, IPSec, 3DES, MD5, RSA, KEA, AES, RC2, RC4, SHA, IKE, WEP, WPA & WPA2.

• Experienced with network monitoring and analyzing software and equipment: Fluke LAN Meter, HP One Touch, Dolchi Sniffer, NAI Sniffer 4.x, Compaq Insight Manager 6.x-7.x, HP Systems Insight Manager 4.x-5.x, What’s up Gold 10.x-11.x, MRTG 2.x, SmokePing 2.x, NTop 3.x, OpenNMS 1.x, Snort 2.x-3.x, Nmap 3.x-5.x, Nessus, Ethereal 0.x, WireShark 0.x-1.x, Splunk 2.x-4.x, Aprisma Spectrum 7.x, and NetQoS.

• Experienced with LAN infrastructure including Fast Ethernet (10/100Base-T), Gigabit Ethernet (1000Base-T), Ten Gigabit Ethernet, Fiber, and FDDI.

• Experienced with WAN infrastructure including Metro Ethernet, Frame Relay, ISDN PRI/BRI, ATM, SONET, DSL, VSAT, EVDO, DOCSIS, DS3 and T1.

CERTIFICATIONS

• A+ Certified

• Network+ Certified

• Project+ Certified

• Master Certified Novell Engineer (MCNE Client/Network Solutions:

IntraNetWare & Windows NT Integration)

• Microsoft Certified Professional (MCP SQL Server 2000 Administration)

• Microsoft Certified Professional (MCP Exchange 2000)

• Microsoft Certified Professional (MCP Windows XP)

• Microsoft Certified Professional (MCP Windows Server 2003)

• Microsoft Certified Database Administrator (MCDBA)

• Microsoft Certified Systems Engineer + Internet (MCSE+I)

• Cisco Certified Design Associate (CCDA)

• Cisco Certified Network Associate (CCNA)

• Juniper Networks Certified Internet Associate – Enterprise Routing (JNCIA-ER)

• Juniper Networks Certified Internet Associate – Enterprise Switching (JNCIA-EX)

• Juniper Networks Certified Internet Specialist – Enterprise Routing (JNCIS-ER)

• Juniper Networks Certified Internet Specialist – Security (JNCIS-SEC)

EDUCATION

• Cisco CCSP track; Coastline College; Fountain Valley, CA; CCSP pending; President’s List

• Cisco CCNP track; Coastline College; Fountain Valley, CA; CCNP pending; President’s List

• Sniffer Training; NAI; Los Angeles, CA

• Computer Networking Specialist/Microsoft Certificate; Coastline College; FV, CA

• Computer Networking Specialist/Novell Certificate; Coastline College; Fountain Valley, CA

• Computer Networking Specialist/Cisco Certificate; Coastline College; Fountain Valley, CA

• Computer Science major; Golden West College; Huntington Beach, CA; BSCS Pending.

Contact this candidate