Stephen Phillips 179 Malmesbury Park Road Charminster Bournemouth BH8 8PU Tel: (H) (M) Steve_Phillips_UK@yahoo.

Transcription

1 PROFILE Stephen Phillips 179 Malmesbury Park Road Charminster Bournemouth BH8 8PU Tel: (H) (M) Steve_Phillips_UK@yahoo.com Experienced and versatile Information Technology Professional, accustomed to working on own initiative in a variety of disciplines, as well as being a valued member of a team. Excellent communications / presentation skills with a positive approach even when under pressure. KEY SKILLS/ACHIEVEMENTS Designing a green filed overseas national network based on the end customer and prime contractor (PCO) requirements, the life cycle went from design to lab proving / test and acceptance into full integration and installation. Employed by the subcontractor for the communications sub-system, I was working closely with other sub-contractors to provide a fully functional converged secure network, which included VoIP, Multimedia, Public Address and business critical application servers that required tight bandwidth control. Managing a European Frame-Relay Wide Area Network (WAN) and Local Area Networks (LAN), configuring and troubleshooting any issues as they occur to ensure the minimum amount of downtime. Providing the configuration to improve the performance of network and recommending upgrades as required. Providing detailed statistical analysis of the WAN for management reporting Instrumental in the design and planning of the migration to a new Frame Relay Network, which provided diverse routing using shadow PVC s and ISDN dial-around the cloud backup lines. Specifying equipment, dealing with suppliers and providing configurations in advance to ensure a smooth transition. More recently the company have moved the network to a mixed environment of MPLS (Verizon) for the major sites and VPN tunnels over SDSL using Sidewinder firewalls for the smaller sites. Project Managed, planned and installed a number of major Local Area Network upgrades in Sigma s Central European facilities using Cisco switching equipment. The main upgrade consisted of 1000 ports across 10 buildings within one Campus. Gigabit Technology was utilised for the backbone and the connection of key servers. Responsible for the configuration and application of perimeter security systems, using Secure Computing Sidewinder Firewalls (utilising Smartfilter) and PIX Firewalls, as well as continuing my previous tasks of WAN, LAN and remote access management.

2 CAREER BACKGROUND/HISTORY SELEX Communications Security Cleared System Engineer / Deputy System Design Authority (SDA) November 2007 present Part of the sub-contractor team responsible for design and implementation of the communications subsystem portion of an overseas national network comprising of multiple sites and mobile satellite communications. Primarily responsible for designing, documenting, testing (lab) and implementing a secure IP data network (including IP Schema, Remote Access, Network Time Systems (NTP)) and partial design / implementation of Network Management Systems (NMS), based on customer requirements. This involved working closely with an extended internal team responsible for Voice, Video, multimedia and public address, as well as having constant communication with the prime contractor and external sub-contractors responsible for the computer sub-system to ensure the integrity of the design. Additional duties included Deputy System Design Authority (SDA) assisting the SDA in end customer, prime and sub-contractor presentations / meetings, ensuring customer requirements were met and the design (High and Low-level) was fully documented, this included writing technical clarifications, problem/observational reports, test and acceptance and ensuring information flowed as required. In addition to this I managed a team of contractors that were employed to ensure targets were met. The network based on Cisco commercial off the shelf (COTS) products comprised of fixed and mobile installations utilising Cisco 6509 Catalyst switches with routing capabilities in a collapsed core /distribution configuration in the main facilities and 3800 / 2800 ISR in the smaller fixed and mobile facilities. The switches and routers utilised various line cards to ensure connectivity requirements were met. All WAN links were IPSEC encrypted point to point VTI tunnels over E3 or E1 lease lines configured for full redundancy, time-based authenticated EIGRP was utilised as the routing protocol. The distributed access layer comprised of multi-homed (Ether-Channelled) stacked Cisco Catalyst 3750 switches and Ether-switch modules. HW utilised in the network Cisco Catalyst 6509 with E3 / E1 port adaptors, mixed-media 24 port 6724 blades, IPSEC Carrier with VPN SPA Card and a Supervisor 720-3B. Copper and Fibre SFP modules Cisco Catalyst 3750 switches with POE capabilities Cisco 2851 & 3845 ISR routers utilising 4 port serial cards (HWIC-4T), E1/T1 Voice cards, E1 G.703, PRI cards, PVDM2-64, PVDM-36DM (Digital modems), 1 port Gigabit Ethernet modules and Ether-switch modules. Cisco VG-224 Gateways Cisco ASA 5510 Firewall Technologies utilised IPSEC encrypted VTI Tunnels with Pre-shared key phase 1 negotiation. EIGRP routing with time based authentication, distribute list and full summarisation. RS-530 serial connection to Satellite communications using dialler interfaces Hot Standby Routing Protocol (HSRP) with authentication NTP with Authentication Quality of Service Traffic flow Access Control lists Multiple Spanning Tree fully defined for optimal routing.

3 RADIUS and TACACS+ authentication to Cisco ACS and Token based RSA SecureID server. Virtual LANs (VLAN) traffic separation and access control. Full security hardening NMS Tools Solarwinds Network Performance Manager (NPM) and Network Configuration Manager (NCM) Manage-engine Net flow Analyser Cisco Voice Management Tools (limited exposure). Cisco Works LMS (limited exposure) In addition, certain functionality was required to be able to fully test the systems, as a result I installed AD, DNS, DHCP and a MS Certificate server in the lab environment to assist with integration testing. This was necessary due security restrictions and issues getting a fully functional Computer Sub-system from the responsible sub-contractor. Sigma-Aldrich Chemicals Network Administrator June 2000 November 2007 Responsible for managing the European side of a Frame Relay Network (provided by MCI) for this US company. The European network has approx. 30 sites in various locations across Europe linking up to the US from a central Hub site in Munich. Responsible for the DNS updates for the 110 sites globally. Main Duties include the configuration/installation of Cisco Routers / Switches, Perimeter Security systems using PIX and Sidewinder Firewalls and liaising with the US and European site contacts to ensure circuits are delivered on time, travelling to site when required. In order to protect the business critical SAP system from network failure, I provided the network design and co-project managed an upgrade to ensure diverse routing (using shadow PVC s) and ISDN (dial around the cloud) backup functionality in case of frame failure. Configuration of basic QoS to prioritise traffic for business critical applications, such as SAP and VoIP. IP sub-netting for all sites and connections Implemented Traffic Shaping Technologies (Packeteer) and Cisco QoS to ensure key business critical applications were given adequate bandwidth and response times across the Wide Area Network. Responsible for Remote Access to the Company s Network using Dial-in (Cisco 3600 Router) and VPN Technologies (Cisco VPN 3000 Concentrator), wireless access all authenticating with a Cisco ACS \ RSA SecureID token based authentication system. Provisioning of VPNs using Sidewinder firewalls and SSL VPN connections for remote and roaming users. Project managed the upgrade of a Sigma-Aldrich acquisition including all network equipment and structured cabling. I was also responsible for the UK & Scandinavian LANs (using Cisco Catalyst switches), firewalls (PIX and Sidewinder) and network management, providing statistical information as required, using Compuware NetworkVantage, ISDNwatch, HP Openview, Solarwinds, Ciscoworks, Netflow and MRTG.

4 Sigma-Aldrich is a large company of approximately 8000 people and the IS teams are split into areas of expertise, I am classed as a WAN specialist, but get involved in everything from Laptop builds / configuration to troubleshooting AD issues across the network (This does not include managing the AD domains and GPOs) Abbey Life Assurance Limited Network Administrator October 1995 June 2000 After a year within Abbey Life as a member of the Technical Services team, I was promoted into a network support roll. I was responsible for upgrading the Token Ring network (approx users) from a bridged to a switched solution. I have also been involved in the configuration of external links using ISDN, Megastream and Kilostream. Protocols used across the network are IP, IPX and SNA. Responsibility for the installation and configuration of LAN and WAN equipment within a switched Token Ring environment; primarily using Madge and BAY Networks equipment. Ensuring the Abbey Life network was operational at all times, using analytical network management tools. Project managed a variety of projects including substantial network upgrades. I was also responsible for the configuration and standardisation of software installations and workstation builds. Project managed a variety of projects including a corporate Anti-virus project. Alldays Stores Limited Support Technician November 1993 October 1995 My first position after leaving University, I was employed as a Field Support Engineer, responsible for the configuration and installation of EPOS equipment into stores nationwide. The installations used peer-to-peer networking technologies with additional wide area links to Head Office. After a year in this role, I became an office based network engineer. I was one of a team of seven responsible for installing an Ethernet network into a green field site (approx. 400 users).

5 EDUCATION and TRAINING Accreditations Qualifications Courses Cisco CCNA certified Higher National Diploma in Computer Studies Ordinary National Diploma in Computer Studies First Diploma in Engineering GCE O Levels in 4 subjects. Incl. Maths & English Language CSE grades in 7 subjects. Incl. Maths & English Language Cisco CCNA Voice (IIUC) Securing Network with ASA fundamentals (SNAF) Implementing Secure Converged Wide Area Networks (ISCW) Optimising Converged Cisco Networks (ONT) Building Scalable Cisco Internetworks (BSCI) Building Cisco Multi-layer Switched Networks (BCMSN) Introduction to Cisco Router Configuration (ICRC) MIMESweeper Content security Checking for Networks Checkpoint Firewall-1 (Certification lapsed) Fundamentals of the UNIX system (HP) HP Openview Fundamentals for Administrators Project Managers Foundation Course (PA Consulting) Using and supporting OS/2 Warp Windows NT Fundamentals (incl. Server) Token Ring Networking (Madge) TCP/IP, ASN & Optivity (Racal) How do networks work? Understanding Industry PERSONAL DETAILS Date of Birth : 14 th April 1971 Marital Status : Single Dependants : 1 Health : Excellent Nationality : British Mobility : Car Owner