This document contains a resume for David Fernan. It lists his contact information, professional experience working as a Network Engineer for Accenture and CTBC Bank Philippines, roles and responsibilities in each role, skills, projects, education and certification. His roles involved providing IT support, troubleshooting incidents, managing network infrastructure and security, and coordinating with vendors on projects.

1. FERNAN DAVID
CCNA
0859 Pulung Santol, Porac,
Pampanga, Philippines
(+63)9176204061
email address: davidfernan1008@gmail.com
Professional Details:
Accenture (Philippines) (July 2016 – Present)
15th
Floor Cybergate 2, Pioneer Street, Mandaluyong City, Metro Manila.
L3 Network Engineer
As an L3 network engineer of Accenture (Philippines), I am responsible in Provide day-to-day
IT Support for the organization in the area of IT Infrastructure. Resolving Critical incidents or
problems related to the server, network and communication infrastructure. Manage
projects/initiatives related to the IT infrastructure.
Roles and Responsibilities:
• Responsible in handling Critical incidents.
• Responsible i ntrouble shooting on assigned incidents and providing resolutions based on
agreed targets. Perform troubleshooting functions involving: Firewall/VPN, LAN/WAN, and
other related Communication services.
• Responsible in providing timely and accurate update and information on assigned
incidents and service request.
• Responsible on timely escaltion of incidents which cannot be resolved on time or would
need vendor/third party support.
• Coordinates with concerned teams, vendors, and/or appropriate third party as part of
operations escalation as necessary. Ensures that all escalation information is accurate
and periodically uodated, and that all relevant members of the team are regularly
informed on the status of the operations escalation process.
• Work closely with service providers to:
o Resolved service outages and/or in provisioning new services.
o Carry out equipment acceptance testing an system integration testing.
• Ensures the security of Network Infrastructure technologies is in accordance to standards
and best practices (e.g. standards implementation/configuration hardening, secure
access control, patch updates, etc.)
• Responsible in providing inputs during root cause analysis.
• Responsible in reviewing technical root cause analysis report.
• Responsible in providing solutions (options) on determined root cause/s of problems.
• Ensures that action items based on the agreed solution are completed.
• Reviews non-standard change request/request for information and high impacting
changes.
• Responsible in project management of initiatives related to IT Infrastructure.
• May be tasked to coordinate or be a member of various continious improvement
initiatives of the organization.
• Performs assigned activities or tasks which are aligned to the set objectives by the
management.

2. CTBC Bank Philippines (February 2012 – July 2016)
16th
floor The Fort Legend Bonifacio Global City, Taguig, Philippines
Network and Security Engineer
As network security engineer, I am responsible for the efficient and accurate operations of
network and communication infrastructure. Basically, I manage the activities of the Network
Operations including security policies, as well as the telecommunications facility and
equipment. I am also responsible in maintaining the upkeep of the bank’s network
infrastructure, equipment, security and telecommunication systems and peripherals.
Roles and Responsibilities:
• Manage Different Firewalls (Corporate, Carmona DR Site and connection to our Taiwan
Counterpart (Checkpoint R75.4, R75.47 and R77.1). Ensuring the up to date security on
new attacks.
• Configure and Manage Firewall Policies (Source, Destination, Traffics and Port Services) as
well as URL Filtering (HTTP and HTTPS).
• Configure NAT security on each web server and domain servers.
• Daily update on IPS Security ensuring all new attacks are prevented.
• Manage Firewall Logs for audit and compliance and regular backup of all firewall.
• Manage routing under firewall (Static, DHCP routing and IP based routing)
• Ensuring the availability of VPN site for email users and remote admins.
• Quarterly BCP testing of DR Firewall Device ensuring the availability 24/7 including
backup.
• Manage Core Network Devices including the distribution switch and access switch.
Making sure the router and switches are functional.
• Managing TCP/IP, EIGRP and Static Routing are well configured.
• Manage Departmental Firewall security on internal connection.
• Manage Riverbed Bandwidth optimizer for end to end utilization.
• Handle change and capacity management including business continuity plan
• Perform research and development on Voice and Data network as well as end-user
computing trends and new technology
• Oversee efficient and accurate operations of the entire network and communication
infrastructure such as Voice, Network, WAN, LAN, Firewall/VPN, Capacity Management,
Treasury Dealer System and External Network (Visa, Bloomberg, Bancnet, Reuter, etc.)
• Manage the daily network operations and telecommunications facility and equipment
• Maintain the company’s network infrastructure, network equipment, ATMs and
telecommunication system/peripheral
• Design Network Infrastructure (LAN & WAN), PABX, Security Firewall, Network equipment
capacity management and other ICT system
• Spearhead all projects related to upgrade and update of the network systems currently
running
• Lead the Research and Development for Voice and Data Network as well as end-user
computing trends and new technology and recommends implementation
• Monitor daily network infrastructure performance and submitting daily report to top
management
• Provide technical support to internal clients on a daily basis
• Troubleshoot major problems that arise from time to time while closely coordinating with
vendors regarding specific IT equipment issues
• Review issues reports prior to recommending action plan to prevent same problems from
recurring in the future

3. Major Projects/Accomplishments:
• Implementation of Firewall High Availability and Application Control URL Filtering, Site to
Site VPN
• Implementation of Core Network High Availability
• Set up of Riverbed Bandwidth WAN Optimizer
• Implementation of AVAYA IP telephony, Voice VLAN, DHCP server for voice VLAN,
Avaya – Active directory integration, GSM gateway, CTP Philippines – Taipei VOIP
trunking, VOIP for branches
• Implementaion of Verint Impact 360 VOIP and Analog Voice Logger.
• Implementation of Solarwinds Network Performance Monitoring , Network Traffic Analysis
• Implementation of branch network infrastructure migration to MPLS, GRE tunnel, Exinda
network monitoring, branch router GLBP
• Implementation of Data Center setup including Network Infrastructure upgrade, Firewall
upgrade to R77.1, Web server setup, VLAN Implementation and bankwide network HSPR
implementation
• Implementation of Active Disaster-Recovery Site, setup of VISA, Bancnet and Web Server
Disaster Recovery
Skills:
• Project Management
LAN, WAN, Infrastructure setup, Data Center relocation,
System Capacity planning, TCP and BCP, Network Architecture design,
IT Project management, Voice Logger
• Technical Skills
Checkpoint Firewall (Policy, NAT, PAT, VPN and IPS)
CISCO ASA (Policy, NAT, PAT, VPN), Routing (RIP, EIGRP, OSPF, BGP, MPLS, VRF, Static
Route), Switching (VLAN, QoS) and Security (Access-list, DHCP Snooping, ARP
Inspection)
Juniper SRX and Netscreen (Policy, NAT, PAT, VPN, VRouter, Zones), Switch (VLAN,
QoS, DHCP Snooping, ARP Inspection)
Voice – AVAYA, Nice, Verint, SIL Logger and AudioCode
Shapper – Bluecoat Packet Shaper,
Treasury dealer board - IPC / IQ MAX, Etrali
Network monitoring – Exinda, JFFNMS, whatsup Gold, Solarwinds NPM-NPA-APM
Desktop and Server - Windows 2000, 2003, 2008, Windows 7
Others - Wireless hongdian router, Linksys, UTM-EDGE, CCTV IP camera, Votek, Vivotek
Trainings & Seminars Attended:
• Check Point HA Admin Training
January 2014
• Watchguard Departmental Firewall
Admin Training
September 2014
• Verint Impact 360 Voice Logger
Admin Training
May 2015
• Aruba WLC and AP Provisioning
July 2016

4. Education / Certification Acquired :
• BSIT Major in Network Administration
Holy Angel University (2007-2011), Angeles City
• CISCO Certified Network Associate ( Lic# CSCO10890190)