Austin, Texas, United States
Over 20 years of experience in the design, implementation, troubleshooting, operations, and documentation of IP LAN/WAN networking systems w/ in Enterprise Campus, Remote, ISP/Telecom/VoIP, Data Center, Hybrid-Cloud, SDN, and Wireless (Regulated and Unregulated) environments. Highly Proficient with network hardware and software technologies including Enterprise, Service Provider and Data Center IP routers, 1/10/40/100 GB ethernet switches, zone-policy, and route-based firewalls, MPLS VPNs, IPSec VPNs, Client VPNs, DMVPNs, PKI Infrastructure, Load-Balancers/ADCs, AAA, 802.1x, 802.11 WLAN Controllers and WAPs, and Next-Gen Cloud Technologies IaaS, SaaS, FWaaS, FaaS, SDWAN, and Hybrid Multi-Cloud Networking Architectures (AWS, Azure, GCP, OCI, vSphere, Cisco ACI, OpenStack, and Kubernetes) - Excellent working knowledge of TCP/IP protocol suite and OSI layers. - Highly proficient with Firewall Administration, Rule Analysis, Rule Modification and Implementing traffic filters using Standard, Extended and Named ACLs; Implementing security policies with ACLs, IPSec, IKEv1, IKEv2, SSL, VPN, DMVPN, VTIs, AAA RADIUS, TACACS, AD, LDAP, OCSP, Cisco CA/PKI, Microsoft CA/PKI - Extensive experience in configuring and troubleshooting IPSec tunnels. - Expert proficiency implementing and troubleshooting complex L2 technologies such as VLAN, Trunks, VTP, LACP, VPCs, VSS, STP, RSTP, MST - Highly proficient using FHRP technologies HSRP, VRRP for Default Gateway Redundancy. - Extensive experience in configuring and troubleshooting large Service Provider Network Protocols: BGP, MPLS, Multicast, IPTV, SIP, OSPF, IS-IS, RSVP-TE, L3VPN, L2VPN, L2TPv3, and VPLS. - Highly proficient configuring and troubleshooting DC networks including Edge, DMZ, Load-Balancing, DCI routing, HSRP, vPCs, VxLAN BGP EVPNs, Multicast, OSPF, EIGRP, IS-IS - Highly Proficient with using Microsoft VISIO, o365 Suite, PowerBI & LucidChart/Spark as technical documentation and presentation tools. - Extensive Experience in communicating with customers, solving complex problems in a timely manner
Infrastructure Architect / Project Manager for a global enterprise software company, headquartered in Austin. Responsible for the complete design and implementation of both the corporate and hosted Production LAN/WAN, Wireless, MPLS, On-premises Data Centers, and Hybrid Multi-Cloud infrastructure.
Project Portfolio... • Azure Infrastructure Design and Implementation - Plan, Design, and Implement, Secure hybrid networking, Hub-Spoke VNets, NSGs, VNGs, Site-to-Site Tunnels, ExpressRoute, and Azure Private Link, ADDS, Azure File Shares, Reverse Proxies, Route Tables, Azure Route Server, Azure Bastion, Application Gateway, Traffic Manager, Azure Firewall, VPN Gateways, Local Network Gateways, Hybrid Connections, Blob Storage, Storage Accounts, Web Apps • AWS Infrastrucure Implementation - VPCs, VPC Peering, VGW, IGW, TGW, VPC NAT Gateway, Route 53 • Deploy Infrastructure in Azure and AWS via Terraform, ARM Templates, Azure Template Specs and AWS CloudFormation • Global MultiCloud PoC - Design includes CSPs Azure and AWS, Aviatrix, Palo Alto Prisma SDWAN and Prisma Access, NGFW, and F5 Networks BIG-IP. • SD-WAN Vendor selection, PoC, global design, and deployment (Cloud Controller w/ HA-Data Center, HA-Branch) • Next-Gen Data Center (Cisco Nexus 9K, 5K, 2K, and UCS/Hyperflex) design, support, HW refreshes, and migrations. • Extensive ASA Firewall Administration, support, Software upgrades, and Migrations. • Extensive IPSec site-to-site/site-to-cloud VPN (IKEv1, IKEv2, BGP over VTI) design, implementation, support, and migrations. • Client VPN (Cisco AnyConnect, DUO) administration, support, SW upgrades, and migrations. • Design and deployment of out-of-band management VPN and LAN networks. • Internal routing protocol (IGP: EIGRP to OSPF) migration. • Meraki wireless, security, and SD-WAN deployment and administration. • Monitoring and logging systems migrations • F5 ADC administration - LTM, AFM, ASM, AWAF • Global MPLS and DIA turn-ups and migrations.
Contract Enterprise Data Center Sr. Network Engineer and Project Manager for Aerospace Global Supply Chain Management company Wesco Aircraft. Project Portfolio ReDesigned Data Center Edge to a validated design, Migrated HA virtual ASA DMZ Firewalls to HW Palo Alto HA Firewalls (Planned, Designed, performed policy migration, re-wrote policy to adhere to modern security best practices, rebuilt NAT rules. Project Manager (Networking Data Center projects) – DCI, MPLS and SD-WAN interconnect. vSphere 6 Admin: Provisioned and configured vCenter vDS networking services, managed and deployed SDN VMs (ASAv, CSR1000v, Palo Alto VMs, F5-LTM VMs) Managed Linux RHEL 6,7 VMs – (Built and managed DMZ jumphosts, managed and deployed LDAP servers) AD Integration, PoC Deployments, Create and Management of VM templates. Create clones from live and parked VMs. Assist in VM migration, Configure HA, Install UCS drivers to optimize performance. Azure Cloud Admin: Planned and Implement cloud infrastructure in Azure (Built policy and route-based IPSec tunnels to connect on-prem data center networks to Azure, Managed Azure AD, Resource Groups, vNets, and VMs, Create and configured SDN-based routers (CSR1000v, Palo Alto VM-100 and ASAv firewalls) in Azure, design and implement public and private DMZ networks within Azure's Infrastructure to prepare for future resource migrations.