Azure Site-To-Site Active-Active HA VPN Gateway
Lead engineer of site-to-site VPN connection from the university's on-prem network to its Azure environment. As a greenfield project, I worked with my team to plan and implement a pair of geographically-diverse Palo Alto PA-440 firewalls to serve as the university's main network route to Azure. Using multi-path eBGP through a pair of IPSec tunnels per firewall, the implentation provides a robust, dually-redundant connection. Azure VNets are now advertised to the Virtual Network Gateway via iBGP and then in turn to the campus router via eBGP. Challenges included implementation and testing with minimal service impact to the campus network and meeting strict security requirements of the environment.
- Palo Alto NGFW
Remote Office Connectivity Migration
Migration of network connections to university remote offices and third party vendors, from end-of-life Cisco ASA hardware to new Cisco Firepower hardware. As lead engineer of the project, I wrote configurations for almost a dozen site-to-site VPN tunnels. In addition to migrating the tunnels to a new Cisco Firepower appliance HA pair, I was able to improve security of the tunnels by changing them from IKEv1 to IKEv2 and modifying crypto settings. Collaborated with technical contacts at each of the remote sites in order to meet deadlines and minimize impact to end users.
- Cisco ASA
- Cisco FirePower
- Cisco IOS-XR
- Cisco NX-OS
- Palo Alto NGFW
Mag Lab WiFi Deployment
Project lead for greenfield wireless deployment at National High Magnetic Field Laboratory in Tallahassee, FL. Scope included three multistory buildings, totalling over 300,000 sq ft. Responsible for entire wireless deployment from start to finish; a total of 100+ new access points. Conducted pre-deployment wireless survey and worked with network infrastructure team to plan out recommended Access Point locations. Post-deployment wireless survey validated the design and received praise from customer.
- netAlly AirMagnet
- Aruba AirWave
- Aruba Mobility Master
Documentation System Deployment
Tasked with cleaning up and restructuring documentation process for departmental IT group. Implemented a Confluence wiki server to allow for transparency in knowledge base and typical procedures within the group. Authored an efficient process for creation of consistent wiki pages and provided training on writing effective documentation. This project tested and ultimately strengthened my Linux, HTML, and MySQL abilities.