This document provides a summary of Ian Johnston's qualifications and experience as a senior network engineer. It summarizes over 20 years of experience delivering network solutions, with a focus on next generation firewalls in recent years. It also lists relevant technical skills and experience managing teams and projects.

1. Ian Johnston
11 Bartholdi Avenue,Haskell,NJ 07420 862 621 5065 ipj1965@yahoo.com
Summary
I am a senior network engineer, with over 20 years of experience, delivering effective, efficient and economic
solutions to meet my customers’ needs. For the last few years I have been concentrating on next generation
firewallsandtheirassociated anti-malware, URLfiltering, IDS and IPS capabilities. I have managed teams in both
operations,anddesign & build. I have technically managed several small projects and one larger project, with a
capital budgetof several milliondollars.Ihave developed a standard system for network documentation, record
keeping, and working practices, to ease the burden of operational support.
Recent Experience
Since January2011 I have beenworkingasa contractor providingnetworkengineeringandsupportservicesto
variousclients,including:
Allergan Woodland Park, NJ Senior Security Analyst 1/15 – Date
A pharmaceuticalsmanufacturer,based in Ireland,butwith global presence.
Cytec Inc. Woodland Park, NJ Senior Security Analyst 7/13 – 11/15
Manufacturer of specialistmaterials, e.g. carbon fiber used in aerospaceand automotive industries.
The Affinion Group Trumbull, CT Senior Network Engineer 1/13 – 6/13
Customer loyalty systems and services provider for the banking and airline industries.
NBCUniversal Englewood Cliffs, NJ Senior Network Engineer 7/11 – 12/12
Provider of Global Media, News, TV, Film, and other entertainments.
DressBarn Data Center Suffern, NY Senior Network Engineer 3/11 – 6/11
The work I have done for these clients includes:
 Leading the technical effort to migrate from Cisco ASAs to Palo Alto NGFWs as perimeter protection for
Allergan.
 Developing a flexible configuration migration and optimization toolset to compliment Palo Alto’s own
migration tool.
 Administering and supporting next generation Palo Alto firewalls at Allergan and Cytec.
 Designing and implementing the security solutions for Cytec’s project GO.
 Upgrading a HA pair of PA-2050s to an HA pair of PA-3020s in an operation that resulted in no downtime.
Upgradinga HA pair of CiscoASA firewalls,actingalsoasthe core site routerin Fengxian, China, to an HA pair
of PAN-500 firewalls. This upgrade also allowed the elimination of an outdated Tipping Point IPS.
 Leading the project to find, buy, and release a set of browser based classes teaching IT Security Awareness.
 Designing and implementing site-to-site IPsec VPN solutions from both ASA and Palo Alto firewalls.
 Designingandimplementingnew,secure,networksegmentsusingCisco6500 switches,VRFinstances, FWSM
contexts, and/or private VLANs.
 Designing and implementing data center networks using Cisco Nexus 7000s, 5000s, and FEX products;
implementing VPCs, Rapid STP, backbone-fast and uplink-fast.
 KeyplayerinNBCU’seastcoast data centerbuild out: Configuration of Cisco enterprise and Nexus switches,
ASR9000 seriesrouters, ASA 5585-X firewalls,IronPortproxies, F5 load-balancers, Juniper firewalls, InfoBlox
DHCP/DNS appliances, and Tipping Point IPS appliances.

2.  ImplementingandadministeringCiscoAnyConnectandJuniper RemoteVPN solutions.
 ImplementingandadministeringCiscoNAC
 WorkingwithinPCI,SOX,andHIPPA regulations
All of thishas reliedonmyfundamental knowledge and skills in the following areas: basic networking, the ISO 7
layer model, Ethernet, IP, EIGRP, OSPF, BGP, HSRP, VRRP, VRF,CEF, private VLANs, ether-channel, VPCs, ACLs,
firewall zones and rules, IPsec, IKE, ESP, AH, SSL, SSH & GRE tunneling, multicast, RPF, IGMP, proxies, DNS, x86
host configuration, F5 load-balancing, and many, many others.
Active Video San Jose, CA Senior Network Engineer 10/08 – 12/10
Provider of systems and services to the cable TV industry.
 Designedandimplemented data center solutions: one using Cisco firewalls and switches, to give a fully
redundant, 1 Gb/s network layer; another using a Force 10 switches, and F5 LTMs and GTM.
 Enhanced architectural design of network edge sites for simple scalability
 Introduced HP Storage Works X9300 large volume, network attached storage at the data centers
 Developed standard design and documentation templates, used by operations, to ensure accurate, yet
simple, record keeping of network configurations and host specifications
 Actedas thirdlevel supportandSubjectMatterExpertforswitching,routing,loadbalancing,security,and
VPNs
 Wrote major document describing Active Video's service and system offerings: This document was for
internal use, but became the basis for other documents aimed at customers, resellers, and business
partners
Taos Consulting Santa Clara, CA Network Operations Consultant 6/07 – 10/08
Provider of IT staffing and consulting services.
 Provided network operations support for Yahoo where I helped support the corporate LAN & MAN
networks, which are Cisco based, and their interfaces to the Yahoo WAN, based on Juniper
 Designedandimplementednetwork expansions and updates for other clients, including a LAN redesign
and technology change from Nortel to Cisco
 Developed, documented and executed operational procedures for a client's networked Linux clusters
running systems based around MySQL, Apache, and Jboss
 Provided companywideoversight,consultation,andmentoringfornetworked systems as Practice Leader
for Taos
Trawick & Associates Bethesda, MD Network Operations Manager 4/06 – 2/07
Provider of IT staffing and consulting services.
 Managed a staff of 5 at the Smithsonian Institute's Network Operations Center
 Ensured the effective, efficient, and economic operation of the SI network, a core of Cisco 7200 series
routers, supporting the phones and computers of some 16,000 users across 30 sites
 Introduced and documented Standard Operating Procedures based on ITIL
 Scheduled staff, coordinated with vendors, reported to senior management
 Managed relationship between Trawick and the Smithsonian Institute regarding NOC issues
Leeds University Leeds, UK Development & Support Officer 9/04 – 12/05
YHMAN is the Yorkshire and Humberside Metropolitan Area Network, one of Janet’s regional networks;
basically the ISP for universities and colleges in these counties.
 Engineering and support activities on ADVA DWDMs and Cisco 6500, 4500, and 3600 L3 switches
 Connectivity over dark fiber in the core, Ethernet extended services to clients, ADSL for OOB, and
included a microwave for a trunk link over the Humber estuary
 Met withcustomerstodetermine their connectivity needs, including speeds, security, redundancy, and
multicast routing

3.  Managed projects to connect a customers' campus networks to YHMAN
 Ran project to evaluate, recommend and implement Cisco Works
 Introduced formal development and change processes to YHMAN
 Wrote and presented several technical papers to the YHMAN board, including recommendations for
remote power and out of band management
Absence fromwork 7/01 - 8/04
Extended absence from work due to injuries suffered in a hit and run accident.
 Voluntarywork;passedmyfinal CCNP test; gained a Professional Certificate in Management from the
UK’s Open University.
CSC Baltimore, MD Principal Engineer 8/00 - 6/01
Global provider of IT consulting services.
 Technical leadership and management of a project to design and deliver HCFA’s new network, a 4500
seat campus in Baltimore, MD and 12 remote offices across the USA. This was a move from Token Ring
and FDDI to switched gigabit Ethernet
 Technical and business requirements analysis, network architecture design, detailed network segment
design, hardware, software, and configuration specification and documentation of same
 Vendor comparison and recommendation (Cisco)
 Presentations and vendor recommendation to senior staff and executives; Vendor negotiations and
coordination
 Project was executed in accordance with CSC’s Capability Maturity Model (CMM) process.
Previous Experience
Ten plus years of experience in IT, concentrated in server administration and network fundamentals.
 Sponsored at university with two years of work experience in engineering, concentrating on IT
 Employed as a network server administrator, Unix and IBMOS/2, and network infrastructure engineer,
IBM Token Ring and serial connections up to T3
 Self-employed contractor, providing desktop support and network server administration for Windows
and Novel
 My first job in the USA was with OAO Corporation in Greenbelt, MD, 1/96-4/97. I designed and priced
networkingconnectionsforthe US Coast Guard's Fleet Logistics System, and I was team lead supporting
and administering the DC Government’s networks.
 Senior staff engineer for ARINC, 4/97–7/2000, where I was responsible for design, engineering, and
operations of their US wide IP over frame-relay network and for the introduction of fast Ethernet
switching and VLANs in to their data center.
Education and Life Long Learning
Bachelor of Science with honors: Sheffield University (graduated 1989)
A course in pure and experimental physics covering areas such as classical mechanics, thermodynamics, high
energy particle physics, mathematical methods, special relativity, quantum mechanics, and electromagnetism.
Cisco Certified Network Professional: (certified 2003)
Professional Certificate in Management: The Open University (graduated 2004)
A certificate in management giving a professional level introduction to management theories, finance and
accounting, project management, customer relations, and managing people.
Certificate in Project Management: UCSC Extension (graduated 2012)
A course which formalized my technical skills in project management.

4. Technical Skills Sheet
Technical Skills Years Experience Last Year Used
Palo Alto Networks Next Generation Firewalls 3 2016
PAN Threat Prevention – Antivirus,Applications,& Threats 3 2016
PAN URL Filtering – both Bright Cloud and PANDB 3 2016
PAN Wildfire–unknown malwareprotection 3 2016
Panorama – centralized management system 3 2016
Cisco ASA Firewalls 10+ 2015
Cisco,& Palo Alto VPNs 5 2015
Cisco 2900 - 6500 10+ 2014
Cisco 7200,7500 5 2013
Cisco Nexus 5K & 7K 4 2013
Cisco ASR 1000, 9000 2 2012
Cisco and TippingPointIDS/IPS 4 2012
Juniper, & Checkpoint Firewalls 4 2013
IronPortand BlueCoat proxies 4 2013
Riverbed WAN Optimization 2 2013
Force 10 switches 2 2010
Juniper switches 2 2012
Load Balancers (F5,Cisco, Coyote Point) 5 2012
HP Storage Works 2 2010
Infoblox DHCP and DNS 2 2012
Nortel Passport 2 2007
ADVA FSP DWDM 2 2005
Routing - BGP, OSPF, EIGRP 10+ 2013
Ethernet (up to 10 Gb/s) 10+ 2015
MPLS 1 2013
Frame Relay 5 2005
x.25 5 2003
Token Ring 5 2003
IP Multicast 5 2013
General network security 10+ 2015
tcp/ip 10+ 2015
ipx/spx 3 2000
LES 3 2005
Serial connections,HSSI,DS0-DS3, SONET 5 2013
ATM 1 2003
Cloud computing (Amazon) 1 2010
HEAT trackingsystem, BMC SDE ticketing system 5 2015
Cisco Works 4 2007
HP OpenView 3 2003
Nagios/Groundwork 5 2010
Netscape & Apache Web Servers 3 2010
Shell & Batch Scripting 5 2008
UNIX/Linux admin 3 2007
UNIX/Linux user 5 2013
CCNP ID:CSCO10023332 2003