Naperville, Illinois, United States
Hands on with: Palo Alto NGFW 220, 440, 820, 850, 3000, 3200, 3400, and VM-Series models both standalone and with Panorama. Configuring BGP, IPSec, tunnel monitoring, policy based forwarding with symmetric return, security zones and policies, GlobalProtect, Host Informaton Profiles, log forwarding to external servers and SIEM platforms. Cisco ASA 5505, 5525X, and 5585X models. Multiple context and VRF configuration, security zones and policies, Anyconnect remote access and Hostscan enforcement. Cisco Integrated Service Routers (ISR) - 800, 2800, 2900, 3800, 3900, 4300, and 4400 models Configuring EIGRP, OSPF, iBGP, and eBGP routing protocols, DMVPN with GRE tunnels and NHRP, IPSec, VRF, HSRP and VRRP. Cisco Catalyst switches - 2960, 3550, 3560, 3650, 3750, 9200, 9300, 9600, 6500, 6500-E, 6807-XL, 6880-X, and 6800ia models Configuring Stackwise, Powerstack, and FlexStack, 802.1q VLANs, Per-VLAN RSTP, optical fiber and transceivers (SFP, GBIC). Cisco Nexus switches - 2232, 2248, 5020, 5548, 5596, and 7000 chassis Configuring Fabric Extension (FEX), VDC, FibreChannel and FCOE (5000, 5500 only) Cisco 5500 and 9800 model Wireless controllers with various access points Radio tuning, AAA configuration, 802.1x, certificate management, and TACACS, RADIUS or LDAP authentication Various Meraki MS switches, MR access points, and MX security appliances. Various Ubiquiti switches, access points and UniFi management platforms. In-house enterprise VOIP with Cisco Unified Communications Manager and Unity Connection with 7900 and 8800 SIP or SCCP phones. Configuring DSP, QoS and CoS traffic marking, SRST failover and licensing, local Call Manager Express, and CUBE roles, Cisco Emergency Responder, +E164 dial plan compatibility, intersystem PRI and SIP trunk setup and troubleshooting. Various cloud enterprise VOIP providers like 8x8 or Nice with softphones or Polycom SIP desk phones. Network storage connectivity with Cisco 6332 Fabric Interconnects and Cisco MDS 9100 fibre channel switches. NFS, FibreChannel, or FCOE connectivity to Dell/EMC Clariion, VNX5500, VNX5800, and Unity storage arrays. Many variations of Dell, HP, and Cisco UCS rack mountable servers and blade chassis. VMware ESX 1.1 to ESXi 6 and assorted versions of VSphere or VCenter management.
Supplement Microsoft staff to deliver their “Fairwater” Nvidia GB200 data center, MKE03, ahead of schedule with customer-facing services live Q1 2026. Complete internal training: Microsoft CO+I Learning DC Ops Breakfix I, II, and III; PG25 drain and fill kit; and Corning back-end custom cabling. Perform and teach basic data center deployment, break/fix, and investigation concepts to teammates: • Read and understand what a GDCO ticket is asking and where in the diagnostic workflow the actions requested belong. • Recognize workplace risks, apply appropriate PPE, and raise any questions to the Team Lead for the Task Hazard Assessment. • Identify endpoints both within GDCO/Datacenter Central and at the physical tile, rack, device, and port in the data center. • Understand how patch, test, scope, clean, and pull optical fiber. • Identify and replace field-replaceable server and network components. • Log disposal of data bearing devices (DBD). Use Valyrian workstations and the Phynet portal to validate work with optical link checks or IOSXE or SONiC diagnostic commands to hardware. Assume Team Lead duties when team is split or Team Lead is unavailable. Test and troubleshoot copper and fiber Management Fabric (MGFX) connections between BCM head node, NVLink switches, PMDU rack managers, Belimo coolant valves, top of rack switches, and Cisco 4451 Routers (C0), or Nokia 7200 (M0) row management switches. Understand GPU Back End Fabric (BEFX) connections between NVLink switches, Corning EDGE fiber enclosures, Arista 7000 (B0) switches, custom single mode fiber MTP cabling harnesses, connector polarity, color coding, and patching throughout the cell to the B0-B1 connectivity panels. Troubleshoot Front End (DCFX) fabric between Arista 7000 (T0) top of rack switches, Cisco 8100 (T1) row aggregation switches, and Arista 7816 IDF chassis (T2) including active optical cabling, LC and MTP single mode fiber, and connections between power cell rows in MKE03 and IDF rows in MKE04.
Manage repair for ISP and telecom circuits suppling more than 50 national Material Recovery, Transfer, Portable or Landfill locations. Configure and install new Masergy/Comcast circuits and Palo Alto 440 branch firewalls to transition from ad hoc to centrally managed ISP connections. Complete Q3 project to replace end-of-support Palo Alto PA220 branch firewalls with modern PA440 NGFW. Develop LAN, WAN, and Wifi, house cabling plan and BOM for 2 new site openings and 4 large scale renovations in Indiana and Illinois Q3 and Q4 2025. Extend and improve Ubiquiti UniFi Wifi coverage in mechanic shops and parts inventory areas to accommodate expanded use of handheld tablets. Identify bottlenecks in Ubiquiti UniFi headquarters wifi related to daisy-chained switch cabling and propose design change. Eliminate reoccurring issues in the field due to hazardous environments, water, pest infestation, and exposed or haphazardly deployed infrastructure.
Deliver week-to-week convention center wired and wireless LAN needs for vendor booths, multimedia displays, and live performances. Identify Meraki MX features, netflow reporting, and modern hardware to replace 1Gbps bottlenecked BlueCoat WAN accelerators. Provision network and assist with setup for on premise Chicago Police Department security command center with centralized radio, telephone, and security camera monitoring for an expanded CPD presence during NASCAR Fan Week.
Lead Infrastructure tasks for headquarters move to Merchandise Mart with aggressive 6 month delivery Q4 2022. • Revise floorplans for IDF location, electrical, and cooling needs, pathways for interconnectivity, and house cabling within IEEE standards. • Order and activate circuits, coordinate demarc extension and riser management into MDF. • Create BOM, source, receive, configure, and deploy Palo Alto 3400 firewalls, Cisco 9300 switches, 9800 Wireless Controller and 3500 APs. • Close gaps with badge access systems, security camera and recording platforms, alarm systems, and Google Meet rooms. Revitalize relationships with Netrix, CDW, Palo Alto Networks, Cisco Systems, DataTel Communications, Sayers, Equinix, Lumen, and Verizon. Improve partnership between IT Operations and Security Operations teams. • Coordinate with vendors for penetration testing, network design reviews, and firewall configuration audits. • Enable Palo Alto and Cisco device log ingestion to CrowdStrike SIEM dashboard. • Ensure preparedness for early PCI 4.0 adoption while continuously improving quarterly PCI audit scores. Eliminate tech debt. • Update or create network documentation, diagrams, and IP address management needed for design and auditing. • Enact a regular patch and maintenance schedule for Cisco and Palo Alto Networks platforms. • Identify gaps in data center redundancy and develop replacement plans for end-of-life Palo Alto and Juniper hardware.
Manage carriers, report outages, and escalate repairs for hundreds of telecom circuits serving more than 200 retail locations. Repatch all IDFs and help redesign call center floorplan for agent seating in line with social distancing during pandemic. Convert all storefronts from mixed MPLS and DMVPN WAN connections to VeloCloud SDWAN. • Standardize a cabling template for Cisco 3650 or 9200 switch connections to ISP circuits, routers, POS terminals, and future VeloCloud Edges. • Migrate POE security cameras to their own independent HP POE switch. • Categorize retail store readiness based on hardware present, and deploy missing Cisco switches as parallel project with SDWAN conversion. • Train and coordinate network team teammates and field technicians to install switches and recable retail locations with minimal disruption. • Coordinate with Windstream field technicians to eliminate Windstream MPLS router, convert MPLS circuit to DIA, and activate Edges. • Conversion routine was perfected to roll the site from MPLS to DMVPN, deactivate MPLS, install the DIA circuit and Edges, then roll from DMVPN to SDWAN in less than an hour, during the business day, with no transaction interruption. Reduce hardware footprint and tech debt in primary data center. • Update VSAN zoning and repair FCOE fabric redundancy between Nexus 5596 and UCS 6332 fabric interconnects. • Decommission and remove several racks of end-of-life EMC VNX 5500 and 5800 storage nodes. • Power down, untangle connected cabling, and remove end-of-life or damaged Cisco switches and cancelled ISP equipment. Update and troubleshoot auto dealership branch Meraki guest and garage handheld wireless networks. Design in-store, PCI-compliant bank card printing station pilot in coordination with PLS SecOps, Entrust, and FIS.