Network Enigneer
Booz Allen Hamilton
Total years of experience :16 years, 4 Months
Professional Experience
Network Engineer Booz Allen Hamilton
November 2015 - Present Washington, DC
• Achieved a dramatic and immediate reduction in the number of reported vulnerabilities within the Department of Labor (DOL) Office of Chief Information Officer (OCIO) Infrastructure Services Division (ISD) network infrastructure. Served as the network infrastructure (servers, desktop, application, database, and storage) SME under the DOL OCIO Patching Compliance Initiative in a fast paced and demanding environment.
• Provide input to the security architecture in building out a proposed future environment that meets the security, compliance and privacy requirements of the DOL CSIRC
• Used IBM Endpoint Manager (BigFix) for vulnerability reporting and remediation
• Redesigned Bigfix infrastructure at DOL to enhance performance and increase response time
• Demonstrated core expertise includes design concepts, IT architectural analysis/analytical thinking, innovation management, enterprise perspective and process knowledge.
• Analyze opportunities with a broad, strategic view from a networking prospective; integrate technology requirements to achieve cross-domain solutions that work across the enterprise; apply methodologies that are appropriate for multiple users / tech platforms.
• Demonstrated expertise in system interaction with Data Center compute technologies, including Cisco UCS (x86), VMWare virtualization, hypervisor (Openstack/KVM), OS (Linux/Windows), workload mobility
• Configured and managed networks in the Sudan, Kenya, and Somalia.
• Configured multiple Windows server 2012 Domains, Sonicwall firewalls, Cisco switches and routers, Lifesize video conference systems, backup and system imaging platforms.
• Utilized Cisco switches and routers to subnet and divide multiple broadcast domains into several VLANS.
• Setup routing through EIGRP and OSPF routing protocols and utilized Access Lists and Application Firewalls to enhance network security.
• Created and maintained network documentation for each country.
• Setup and enforced network security policy across each country and provided technical support for IT personnel on physical, operational and management policies to effectively translate security policy into action.
• Created and implemented security awareness programs for each country.
• Worked with VMware technology and setup multiple application and file servers.
• Setup several networks in Afghanistan, Iraq, Jordan, Niger, Chad, Burkina Faso, Liberia, Mozambique, Zimbabwe, and Indonesia.
• Installed and configured multiple Windows Server 2008 Active Directories, fileservers, print servers, Symantec AV Servers, backup and data retention platforms, WLANs, VPNs, video conferencing units, Riverbed appliances, and SonicWall firewalls.
• Installed Dell, HP Procurve, and Cisco switches and routers. Configured VLANS, VTP, STP, EIGRP, and OSPF.
• Managed Windows server 2008 domains, Active Directory, DHCP, DNS, and Domain policies in different countries through VPNs.
• Managed the worldwide company firewalls and configured address objects, NAT policies, access rules, application firewall, and multiple complex access lists.
• Managed network peripherals, switches, routers, servers, printers, through SolarWinds and Simple Network Management Protocol (SNMP).
• Provided IT support for different clients and IT technical staff in different countries remotely and on site.
• Provided technical support for IT officers and technical staff, and helpdesk support for 4000+ users worldwide.
• Maintained network security and configured remote access through SSL VPNs.
• Fully responsible for firewall monitoring, IPS and IDS management.
• Experienced in different virtualization technologies, VMware workstation, VMware Fusion for MAC, Virtual Box and vSphere.
• Managed the migration of 40+ physical servers into virtual environment in a data center, and provided access to virtual system through secure VPN tunnels to all remoter users worldwide.
• Setup, configured, and maintained Symantec Antivirus management server, installed updates, patches and routine workstations scanning to ensure network integrity.
• Created and managed user accounts / security groups and GPOs.
• Installed a Mitel VOIP phone system and managed local and international extensions and teleworkers.
• Administered the site wide e-mail system, Microsoft Exchange Server. Resolved all email related issues including spam, undeliverable messages, connectivity, personal folders, archiving and virus protection.
• Installed and maintained Riverbed Steelhead appliances for WAN optimization thereby increasing productivity by 70%.
• Performed server migration and consolidated physical servers into virtualized environment in a data center.
• Provided secure access to the company’s virtual network for remote offices through SSL VPN.
• Used different tools for network scanning and penetration testing, and remediated security vulnerabilities encountered that can be used by an attacker.