1. TIANQIANG (CARL) YU
SUMMARY:
More than 8 yrs experience in IT / Networking / Customer Service / Technical Support
(Customer relationship maintenance – 7 yrs, Requirements gathering and analyzing – 6
yrs, Routing & Switching – 7 yrs, Security – 7 yrs, F5 Load Balancing Platform – about 3
yrs, Palo Alto Firewall – 2 yrs.).
• Experience in discussing, communicating and gathering the business requirements of
partner companies and endpoint customers.
• Experience in translating the business/service requirements into the actual technical
points based on mainstream techniques and devices.
• Experience in mining customer’s requirements periodically based on their current
budget and setting up the development plan for their service system.
• Strong knowledge on Routing Protocols, Layer 2 Technologies and Secure Networking
Technologies
• Experience in installing and configuring networking devices of the general enterprise
network and the commercial bank network.
• Experience in installing, configuring, maintaining and troubleshooting the load balancing
systems (F5).
• Experience in installing, configuring, maintaining and troubleshooting the wireless
routers/Access Points/Adapters
• Strong experience in supporting Corp clients and work with the technical/management
team of the client’s company.
• Proficient in network administration and configuration of Microsoft Windows operating
systems including Windows XP /7/ 8 environments.
• Worked on a number of Engineering and integration projects that involved planning and
leading teams in meeting timely deadlines
• Experience in IT decision-making, policy direction, planning, and team management.
History of rapid promotion. Practical knowledge of systems and equipment. Committed
to the highest levels of professional and personal excellence.
• Knowledge on Juniper enterprise routing products.
• Knowledge on Cisco IOS, NX-OS, ASA OS.
• Knowledge on DMZ infrastructure
• Strong documentation skills on both daily report and knowledge base.
• Strong connections to the vendor. Always keep a very good communication to the
technical support team and can get supporting resource in very limited time.
• Background in Information Security Analysis.
SKILLS:
Fluent in writing/speaking/reading in both Chinese (Mandarin) and English
Knowledge in standard technical support process of Cisco’s products
Design, analysis, troubleshoot and implementation the networks using CISCO products
and related technologies
Operating System: Windows XP/2000/2003/2008/7/8, Linux
Load Balancing System (F5): BIG-IP (Initial Installation, Monitors, Methodologies,
Profiles, NAT/SNAT, essential iRules, Redundant Pairs, High Availability)
Network Devices: Cisco Routers and Switches / Cisco Firewalls (PIX and ASA); IDS/IPS;
Mirapoint Anti-spam system.
Routing/Forwarding Protocols: RIP, OSPF, EIGRP, BGP, MPLS, MPLS VPN
Layer 2 Technologies: VLAN, VTP, STP, RSTP, PVSTP, MSTP, 802.1q, ISL
Security Technologies (NAT, Access List, IPsec, GET VPN, DMVPN, Easy VPN, AAA)
Virtualization Technologies: VMware Workstation
Network Monitoring: Solarwinds Network Monitoring Platform, NetScout
Network Simulating: Opnet / NS-2 network simulator
SIEM Solutions: Cisco CS-MARS, IBM QRadar
Configuration Management and Analysis: Cisco NCM, Algosec Firewall Analyzer
Page 1 of 5
Cisco CCNA (2007)
Cisco CCNP (2009)
Juniper JNCIS (2007)
2. PROFESSIONAL CERTIFICATIONS:
Cisco Certified Network Professional (CCNP)
Cisco Certified Network Associate (CCNA)
Cisco Certified Internetwork Expert (CCIE- Security) – Written cleared & Lab in process
Juniper Networks Certified Internet Associate (JNCIA-SP)
WORK EXPERIENCE:
ACCENTURE. Jun 2014 – present
Client: Citizens Bank
Environment:
Protocols: OSPF, Layer 2 Switching Technologies, IPSec VPN
Devices: Cisco Routers/Switches/ASAs; IBM QRadar, NetScout, Zenoss, Palo Alto
Firewalls; F5 LTM/Firepass; Algosec Firewall Analyzer
Roles & responsibilities
Worked as a Security Operation Engineer (and also carries some project work) for the
Citizens Bank. This position is responsible for network and security operational support
escalations.
• Serving as an expert in the technical field of network and security knowledge;
• Driving recommendations and solutions in the area of design, development, testing and
implementation of technology solutions;
• Configuration, design and troubleshooting of network infrastructure including but not
limited to firewalls, IDS, and networking equipment and managing network escalations;
• Provides an architectural perspective when providing improvements to existing standards
and methods of delivery;
• Review and Assign the security related work to the corresponding technical resources;
• Lead, take ownerships and manage small teams.
CHINA TELECOM SYSTEM INTEGRATION CO., LTD. Oct 2010 – Jun 2014
Client: Bank of China (Los Angeles, US) / Local & Remote Comprehensive Support
Second Client: China Development Bank
Environment: BGP(iBGP/eBGP), OSPF, VRF, MPLS; Cisco Routers/Switches/CS-
MARS; Mirapoint RazorGate; Cisco ASAs; Venustech IDS/IPS; F5 BIG-IP;
Title: Network Security Engineer / System Engineer
Roles & responsibilities
Worked as System Engineer for one the most important customer of our company, which
is a large bank in China, to perform system monitoring/troubleshooting, solution testing
and advanced technical support for the global (U.S) branch and the head office. At the
same time, worked as Network Security (Consulting) Engineer for China Development
Bank at the same time for the remote supporting.
• Design and optimize the current campus network configurations and structure.
• Provide the partner DMZ support of the campus network and DMZ area.
• Perform the policy-based routing modifications based on the daily requirements
• Perform the mid-period requirement analysis for the IT management team of the bank
and write the deployment plan.
• Perform the maintenance and troubleshooting on OSPF, EIGRP load balancing and
BGP.
Page 2 of 5
3. • Provide the Corp-to-Corp network security service, including the network monitoring
(network security devices, e.g. IDS/IPS, Cisco CS-MARS, Anti-spam mailing system),
implementation and configuration of the network security policies/settings.
• Perform the site-to-site VPN configurations and the firewall rule settings with the
Checkpoint firewalls R7X platform.
• Troubleshoots the system failure issue of the IDS system of the bank (our customer),
provide detailed troubleshooting plan including considering the security rules of the
bank. My role on the project is to design the troubleshooting plan based on the
communication between our maintenance team of our company and the management
team of the bank (customer); Find out the issues of system with various redundant
networking device including Cisco switches and SPAN technologies of the switch.
• Write business requirement documents / security standard documents for customers.
• Perform pre-sell testing of the Internet Behavior Management Platform based on the
actual requirements of functionality and performance figures. Output the testing report,
provide the technical suggestions, and following up the commercial process so as to
finish the system upgrading mission.
• Perform product testing based on performance requirements and function requirements
which acquired from the customer.
• Perform day-to-day security incident monitoring of the core network for the customer.
• Responsible for maintaining the F5 BIG-IP systems, optimizing the current
configurations periodically and deploying complex configurations based on the latest
requirement of service contents and performance levels.
• Provide advanced on-site management support to the specific managers or director of
the customer.
• Coordinate with the security officers of the customer for daily incident analyst. Plan,
and perform the security policy weekly updates based on the daily/weekly reports.
• Coordinate with the software vendors and our customer to improve the performance and
the function’s applicability based on the requirements of the specific security level of
anti-phishing.
• Design the training materials for our department.
• Manage and support the knowledge database of our department.
• Maintain network devices (e.g. routers, switches, firewalls, intrusion detection system
and anti-spam system).
BITLANYUAN DEVELOPMENT TECHNOLOGY, BEIJING Jan 2010 to Sep 2010
Network Systems Engineer / Network Security Engineer
As an experienced IT services company, Beijing BITLANYUAN Development Co., Ltd. has
always been committed to providing high-quality professional software development and
systems integration services.
Client: Sinotrans Air Transportation Development Co., Ltd - SINOAIR (China)
Environment: Cisco Routers/Switches; Cisco ASAs/PIXs; F5 BIG-IP LTM; Solarwinds
Platform, Wireless (802.11b/g), OSPF, Access-control List, Policy-based Routing.
Title: Network Systems Engineer / Network Security Engineer
Roles & responsibilities
Worked as a Network Engineer for an important national logistic enterprise (SINOAIR /
SINOTRANS), to maintain/extend the network systems.
• Responsible for constant engineering and maintaining the client’s network systems. It
involves network architecture design, hardware and software maintenance, user
support, and overall network support.
• Responsible for installing, configuring, troubleshooting and maintaining the intranet and
load balancing system (F5 BIG-IP).
Page 3 of 5
4. • Planning the technical solutions of sub-branch for customer based on the business
requirements of performance, availability and security consideration.
• Supporting the client’s IT management team on the deployment, configurations and
monitoring of current Checkpoint firewalls with management server connections.
• Responsible for installing the Solarwinds network monitoring system.
• Assisting the client’s management team for Contingency and Recovery plan for all the
core network devices/points.
• Responsible for installing, configuring, troubleshooting and maintaining the Cisco
Wireless Access Points of client.
• Responsible for educating the client’s employees so as to use the current networking
tools (e.g. ping, tracert, DNS settings, DHCP) for basic troubleshooting on the personal
desktop environments.
CISCO SYSTEMS
Client: Cisco Technical Assistance Center Jan 2008 to Dec
2009
Environment: Windows XP, Oracle E-business Suite, Citrix, Cisco IP Phone, Cisco
Routers and Switches
Title: Global Contact Center Agent (GCC)
Customer Support Specialist
Customer Support Specialist – Cisco Certification (Global)
Roles & responsibilities
• Verify the entitlement for the technical support and allocate to designated engineers
• Responsible for handling customer complaints, as escalation point of GCC team to deal
with complex issues with Cisco Global TAC team.
• Coordinate with other teams, like Golden Partner, Logistic team, Pre-sales team to meet
Cisco service commitment to customers
• Liaise with other TAC centers globally so as to schedule the technical support resources
flexibility.
• Support the global candidates of Cisco Career Certifications
SHENZHEN SIHUAXING NETWORKING, BEIJING, CHINA
Client: SHENZHEN SIHUAXING NETWORKING (Beijing Branch) - Oct 2005 to Jan 2008
Environment: Windows XP, Windows Command Line Interface (CLI), Cisco Routers and
Switches, Cisco Simulators (Dynamips)
Title: Associate Network Administrator / Trainer
Duties & Company Accomplishments
• Design the campus network which including the Hubs and Cisco Routers/Switches
• Responsible for configuring and maintaining the branch networking system in order to
ensure almost 100% connection availability.
• Responsible for delivering the partial contents of Cisco CCNP course to the candidates
of the training department.
• Responsible for delivering the Cisco CCNA course to the candidates of the training
department.
• Responsible for solving any issues related to the PC hardware and the Operating
System.
Page 4 of 5
5. EDUCATION:
2012/7 – 2013/11 (FULL-TIME, BUT EITHER DO JOBS REMOTELY OR TRAVELING)
PLYMOUTH UNIVERSITY (UNITED KINGDOM)
Major: MSc. Network Systems Engineering.
Project: TCP Implementations Evaluation and Optimisation
Key Words: TCP, Congestion Control, NS-2, Simulation, Tcl Scripts.
Degree: Master of Science with Merit
To be continued: Technical communication on network simulation and analysis of TCP
agents, related protocols; design of city/national mobile network (May be extended to a
PhD program).
2003/9 – 2007/7
BEIJING INFORMATION SCIENCE & TECHNOLOGY UNIVERSITY (PREVIOUS NAME:
BEIJING INFORMATION TECHNOLOGY INSTITUTE)
Major: E-Commerce
Bachelor’s degree of Management
OTHER: Piano - Passed the China Central Conservatory of Music Piano
Assessment
(Level 8)
Page 5 of 5
6. EDUCATION:
2012/7 – 2013/11 (FULL-TIME, BUT EITHER DO JOBS REMOTELY OR TRAVELING)
PLYMOUTH UNIVERSITY (UNITED KINGDOM)
Major: MSc. Network Systems Engineering.
Project: TCP Implementations Evaluation and Optimisation
Key Words: TCP, Congestion Control, NS-2, Simulation, Tcl Scripts.
Degree: Master of Science with Merit
To be continued: Technical communication on network simulation and analysis of TCP
agents, related protocols; design of city/national mobile network (May be extended to a
PhD program).
2003/9 – 2007/7
BEIJING INFORMATION SCIENCE & TECHNOLOGY UNIVERSITY (PREVIOUS NAME:
BEIJING INFORMATION TECHNOLOGY INSTITUTE)
Major: E-Commerce
Bachelor’s degree of Management
OTHER: Piano - Passed the China Central Conservatory of Music Piano
Assessment
(Level 8)
Page 5 of 5