Category: Network Security Engineer

jessica claire montgomery street san francisco ca 94105 555 4321000 resumesampleexamplecom professional summary network security engineer 4 years experience working large enterprise scale networks involved design clients large enterprise infrastructure implementing cisco ise system including eaptls guest access byod compliance improve corporate network visibility security production environments implementation operational experience large enterprise scale environments several hundreds firewalls security gateways demonstrated abilities enterprise wide network design administration network integration including working dynamic routing bgp ospf flexible call rotation hour support especially upgrades maintenance weekend changes incidents skills cisco 7600 7500 7200 3800 3600 2800 2600 2500 1800 1700 800 series switches nexus 9k7k5k2k cisco catalyst 6500 4500 3850 3560 3750 2960 ip routing protocols bgp ospf eigrp igrp aaa tacas radius acs 555758 ise2421 firewalls cisco asa 5500 checkpoint r80 gaia switching technologies vlan vtp stp rstp mpls ieee 8021q vtp intervlan routing wireless technology cisco 5500 6500 series controller cisco ap lwap access points microsoft visio solar winds kiwi tools splunk ms office applications capacity planning network security wan cli network troubleshooting access troubleshooting byod program implementation wireshark software operational improvement regulatory compliance project organization work history network security engineer 042017 current apex systems falls church va worked extensively device profiling authentication authorization mechanisms using aaa radius tacacs 8021x posture compliance policies access controls remediation process working network access controls nac ise administrator planning designing clients global network network access solution across wireless sslvpn wired networks working design implementation maintenance cisco identity service support posture profilings enforce compliance across remote vpn wireless wired networks managed configured cisco identity service engine ise 8021x corporate users including wireless byod wired network users ip phones printers requiring mac address bypass mab worked extensively access control policies consisting vlan switching snmp applying downloadable acls cisco ise configuring standard extended acls locally upstream switchs cisco nac upgraded cisco ise consisting 40 ise servers north america wide legacy version 21 24 without affecting business operation implemented tacacs radius authenticationauthorization cisco ise central management network devices across us worked enforcement policies autoremediation noncomplaint devices remediating devices misconfigured missing 8021x supplicant configuring probes cisco ise collect device information connected companys switches external routers integrating cisco ise load balancer citrix netscaler f5 ltm manage traffic multiple ise psn nodes order provide aaa services assist deploying troubleshooting pkicertificate based authentications issued digital certificates pki system secure connect public web pages private systems planning designing configuration various policy configurations profile authorizations end device profiling user identities cisco ise ad mapping various attributes levels authorizations network access share knowledge team members different tac teams area expertise including creation guides working design implementation guest network environmentvisitor employee byod nac solution monitoring alert management components related ise nac solution providing ongoing maintenance support solution components patching upgrades capacity reviews lifecycle management engaging across gis infrastructure domains address ise support issues pki server load balancer wan web acceleration security anyconnect capacity planning primary coordinator manage develop ise security projects gather engineering requirements migrating applications create architectural diagrams showing process flow managed company bring device program onboarding employee devices verifying absence inherent security threats network engineer 082016 032017 walt disney co schaumburg il aaa server management user database management configuring privilege level command authorizations using tacacs protocol monitor logs unauthorized login password management users acs backup etc operated network operations wireless team design configure management enterprise wireless hardware software management systems using cisco access points controllers catalyst switches responsibility included centralizing onsite management policies access point deployment improve performance visibility maintaining 101 cisco wireless controllers supporting 5000 access points worldwide engaged solving wlan deploy design problems upcoming sites performing wlan site surveys using ekahau tool improved enhanced performance wifi coverage using heatmaps signal strength parameters cisco wlc cisco prime use tools tufin firewall policy optimization rule base clean poc checkpoint firewall upgrade r77 r8010 r8020 r8030 configuring high availability using cluster xl checkpoint monitor sync status stateful replication traffic active standby member firewall policy provisioning administration including addition object groups policies nat firewalls firewalls mostly cisco check point work b2b ipsec vpn tunnels checkpoint including updating crypto acl encryption domain troubleshooting user connectivity issues using smartview tracker smart log executing tcpdump fw monitor checkpoint firewalls actively work users convert firewall port opening requests firewall change requests process service change management system working ospf internal routing protocol bgp exterior gateway routing work enterprise network environment dynamic routing using ospf bgp external connectivity configured switches proper spanning tree controls bgp routing using community path prepending attributes work bgp routing protocol communication business partners influence routing decision based path prepend attributes worked layer 2 switching technology architecture implemented l2 l3 switching functionality includes use vlans stp vtp functions relate networking infrastructure requirements including internal external treatment configuration security used internal network monitoring tools solar winds ensure network connectivity protocol analysis tools assess network issues causing service disruption monitored network capacity performance well diagnosed resolved complex network problems cisco network engineer 082015 072016 agreeya solutions newark ca managing administration router switch ips asa ise server network topologies involving design network layouts configuration maintenance servers different location worked network security engineer responsibilities maintain troubleshoot protect client environments firewalls siem ids ips manage cisco asa firewalls using cli csm cisco security manager build configure activestandby failover cisco asa stateful replication configure tweak inspection policies firewall allow legacy application traffic configuring static nat dynamic nat inside global address overloading tcp overload distribution overlapping address translation configuring troubleshooting sitesite vpn remote access vpn nat policies comprising class map policy map inspection failover issues asa support routing protocols including bgp ospf routing hsrp load balancingfailover configurations gre tunnel configurations vrf configuration support routers review firewall rules data flows new requirement change existing environment vlan implementation spanning tree implementation support using pvst rpvst mstp avoid loops network trunking port channels creation performed network troubleshooting vulnerability scans identity access management email protection monitor client firewalls content filter ensure 100 compliance network security policies analyze threats network give suitable solutions ensure realtime protection internal external threats troubleshooting networking security related incidents affect environments customers accordance priorities slas communicated cisco tac internet service provider phone via email troubleshoot technical problems recreated reported issues lab customers configurations topology researched read new unfamiliar technologies quick effective adoption master science electrical engineering 052015 university missouri kansas city kansas city mo cisco certified network associate ccna education certifications