### Professional Experience

**Consulting Systems Engineer** | TBX | May 2022 - Present
- Serve as SME for service provider networks (Meraki SD-WAN/Fortinet Security Fabric)
- Develop technical go-to-market strategies and conduct POC deployments
- Implement network automation using Python/Ansible for configuration management
- Deliver technical enablement through workshops and training sessions

**Network Development Engineer** | Amazon Web Services GovCloud TS/SCI position | Sept 2021 - May 2022
- Troubleshoot complex cloud networking issues (BGP, OSPF, Direct Connect, Transit Gateway)
- Develop network automation tools for monitoring/management (Python)
- Create technical documentation including network diagrams and SOPs
- Serve as Tier 3 escalation point for critical network incidents

**Principal Network Architect** | Verizon | Jan 2020 - Sept 2021
- Design enterprise-scale networks (LAN/WAN, SD-WAN, data center solutions)
- Lead RFP responses and technical solution design for Fortune 500 clients
- Developed pre/post diff Bash scripts for config validation
- Mentored teams in YANG, NetConf, and Meraki API Python automation
- Led Avis migration from Cisco to Versa SD-WAN/Aruba solutions
- Spearheaded Walgreens nationwide WAN optimization project

**Cloud Network Engineer** | Entrust | Jan 2020 - Present
- Implement AWS network infrastructure with PCI-DSS compliance
- Manage F5 BIG-IP load balancers and Palo Alto NGFW deployments
- Automate network provisioning using IaC tools (Terraform, Ansible)
- Built staging environment despite organizational challenges
- Created Ansible playbooks (cisco.ios) for ACL whitelist management
- Assisted Illinois CU VPN deployment for overwhelmed customer team

**Senior Network Consultant** | Zivaro | Oct 2018 - Present
- Design/implement Cisco ACI fabric and DNA Center solutions
- Developed network migration strategies for cloud adoption
- Resolved Simmons Foods VOIP QoS issues; proposed Ansible over DNA Center
- Designed VXLAN data center fabric for Denver Health
- Implemented Layer 3 to edge for CDPHE despite team opposition
- Played key role in Cisco Gold Partner recertification

**Data Center Network Engineer** | Charter Communications | Sept 2018 - July 2019
- Managed F5 LTM/GTM and A10 Thunder load balancing infrastructure
- Implemented EVPN/VXLAN overlay networks
- Automated TACACS with Bash scripts
- Implemented RANCID for config backups
- Identified buffer tail drops on Data Domain SSL replication (port 29000)
- Used PRTG to pinpoint saturated links
- Coordinated cross-team Video VPN deployment

**Network Infrastructure Engineer** | American Residential Services | Jan 2018 - Jan 2019
- Migrated 100+ sites to Cisco Viptela SD-WAN
- Standardized firewall configurations (Cisco ASA/Juniper SRX)
- Deployed Cisco Umbrella DNS filtering
- Implemented RANCID for config management
- Designed cost-effective OOB/UPS solution using eBay gear ($15K+ savings)

**Senior Data Center Engineer** | Kaiser Permanente | June 2016 - May 2018
- Deployed Cisco ACI across multiple data centers
- Migrated Nexus switching infrastructure (7K/5K to 9K)
- Fixed Exadata OSPF issues to meet vendor deadlines
- Resolved Data Domain buffer drops affecting encrypted replication
- Rectified wrong SFP orders delaying DR buildout
- Enhanced HPNA functionality for operational efficiencies

**Senior Technical Architect** | AT&T (TIAA-CREF) | July 2010 - May 2016
- Led $100M network refresh (Nexus/ASR/F5)
- Migrated load balancing from Brocade to F5 BIG-IP
- Optimized mainframe OSPF (Area 51 routing)
- Standardized blackhole routing configurations
- Overcame challenges in DC buildout
- Identified NetApp LACP RFC non-compliance via Tcl scripts
- Implemented OSPF on F5 devices

### Technical Skills

**Networking:**
- Routing: BGP, OSPF (including F5/mainframe implementations), EIGRP, MPLS
- Switching: VLAN/VXLAN, EVPN, ACI, Nexus
- SD-WAN: Cisco Viptela, Meraki, Fortinet, Versa
- Load Balancing: F5 LTM/GTM, A10
- Protocols: LACP (RFC compliance analysis), STP

**Cloud & Automation:**
- AWS: VPC, Direct Connect, Transit Gateway
- IaC: Terraform, Ansible, Python
- Scripting: Bash (config diffs/TACACS), Tcl (NetApp analysis)
- Monitoring: PRTG, RANCID, Splunk

**Security:**
- Firewalls: Palo Alto, Cisco ASA, FortiGate
- Compliance: PCI-DSS, NIST
- VPN: Site-to-site, client (including troubleshooting)

**Management & Collaboration:**
- Technical documentation (SOPs, network diagrams)
- Cross-functional team leadership
- Vendor management (Exadata, NetApp)
- Cost optimization strategies

---

ATT
- Backup -- spanning-tree bridge
- F5 -- OSPF
- Pre/Post diff bash script
- DC build out -- many roadblocks
- mainframe OSPF - assist team optimize OSPF area 51
- NetApp -- LACP TcL script -- identified NetApp didn't follow RFC
- Blackhole project -- standardized config and validated functionality

Kaiser
- HPNA -- added to functionality -- improved efficiencies
- DR data center build-out -- order wrong SFPs
- data domain -- identified buffer tail drops -- port 29000 SSL encrypted replication
- Exadata -- help vendor with OSPF issues to meet his deadline -- learned ES switch OSPF config

Charter
- RANCID 
- DNS helped Linux team ran network topology refresh SME
- PRTG -- identified links being saturated
- TACACS -- automated with BASH
- Video vpn -- over-all project -- drive different teams

Zivaro
- Simmons QOS -- difficult customer -- lowered VOIP call quality issues
- Simmons automation -- SoW for Ansible -- Steered away from DNA AE didn't agree $$$
- CDPHE layer 3 to edge -- team didn't agree
- Denver Health -- vxlan DC build out
- Cisco gold partner -- took over high profile role

ARS (Consulting Systems Engineer III, Zivaro (Oct 2018 - Jan 2020))
- RANCID -- setup
- Data center design -- team didn't agree with approach -- simplified design
- OOB/UPS project -- prior to roll out manager had to come in to reboot for us -- save $$$ using ebay to obtain gear
- Umbrella -- 

Entrust (Consulting Systems Engineer III, Zivaro (Oct 2018 - Jan 2020))
- Staging build out -- VP difficult
- Il CU VPN assistance -- customer in over his head
- Whitelist -- ACL Ansible playbook using cisco.ios

Verizon
- Avis -- Cisco shop -- SA went Versa and Aruba
- Walgreens -- over-all above and beyond
- DRs-in calls -- mentor SAs to learn automation -- YANG, Netconf, API, Meraki Python package
