ISSA KATUGA

Owings Mills MD | 4437645292 | [email protected]

Summary
•Highly skilled and accomplished Network & Security Engineer with over 15 years of diverse experience
in configuring, deploying, and maintaining network devices such as Cisco routers, switches, firewalls,
and load balancers. Adept at delivering network support and troubleshooting connectivity issues in
both small and large enterprise environments. Proficient in LANs, WANs, Firewall security, cloud
network, SD-WAN, Load Balancers and various Network Management systems.

Experience
SR NETWORK ENGINEER | NetFortify | DEC 2023 TO DATE |
• Configured and managed next-generation firewalls (Palo Alto, Cisco Firepower, Fortinet) to enforce
security policies and block malicious traffic.
• Designed and implemented secure network architectures for enterprise environments
• Conducted vulnerability assessments and penetration tests, identifying and remediating critical
vulnerabilities
• Deployed and maintained SIEM solutions (Splunk,) to monitor and analyze security events
• Implemented VPN solutions to secure remote access for employees across multiple locations.
• Conducted regular security audits and risk assessments, ensuring adherence to regulatory
requirements.
• Monitored network traffic for anomalies and potential threats, mitigating [X] attempted breaches
annually.
• Developed and enforced security policies and procedures, ensuring compliance with industry
standards and regulations.
• Provided technical support and troubleshooting assistance to clients during and after the migration
process, resolving issues and ensuring customer satisfaction.

NETWORK ENGINEER | NTT DATA | JUN 2022 TO DEC 2023| THERMOFISHER

• Firewalls such as Cisco ASA, Sophos, Fortinet, SonicWALL, Palo Alto and Cisco Firepower
• Load balancers ex F5, Kemp, NetScaler
• Wireless network implementation with Cisco WLC, Aruba, Aruba ClearPass and Meraki
• SD-WAN implementation with Viptela, Silver Peak and Meraki
•Configured and deployed SD-WAN appliances, including edge devices and controllers, ensuring
seamless integration with existing network infrastructure.
• Implemented and managed routing protocols (BGP, OSPF, EIGRP) to establish connectivity between
SD-WAN and on-premises data centers or cloud environments.
• Collaborated with cross-functional teams, including network architects, project managers, and
vendors, to design and implement SD-WAN solutions tailored to client requirements.
• Worked closely with security teams to implement firewall and security policies, ensuring network
protection and compliance with industry standards.
• Provided technical support and troubleshooting assistance to clients during and after the migration
process, resolving issues and ensuring customer satisfaction.
• Cisco ACI, Cisco DNA Center implementation and Operations
• ISE Aruba ClearPass and Fire scout, operations and implementation
• AWS Direct connect, Transit and DX Gateways, VPC Peering, network ACL, ALB, Cloud watch, Firewall
• Azure design, and implementation of Azure Networking Services: Virtual Network, Load Balancers,
Application Gateway, VPN Gateway, Azure DNS, Traffic Manager, Express Route.
• GCP cloud network operations such as GCP Cloud Interconnect, VPC, VPC peering

SR NETWORK ENGINEER | CYBERIUM TECHNOLOGY | FEB 2022 TO JUNE 2022| BALTIMORE MD

• Worked with MSP to provide technical support through various projects for different end clients
• Operation support for routing and switching issues from day-to-day activities
• Wireless network implementation with Cisco WLC, Aruba, Aruba ClearPass and Meraki
• SD-WAN implementation with Viptela, Silver Peak and Meraki
•Firewalls support for Firepower and Palo Alto.
•Support in on prem to cloud migration projects involving AWS/Azure and GCP
•Worked Cisco ISE projects migrating ACS to ISE and enforcing 802.1x for wired and wireless

NETWORK SECURITY ENGINEER | XORIANT | SEPT 2021 TO FEB 2022 | NTT DATA
• Firewalls design and implementation Palo Alto and Cisco Firepower
• Cisco ISE design and implementation
• Wireless network implementation with Cisco WLC, Aruba, Aruba ClearPass and Meraki
• Cloud implementation with AWS and Azure
•Network security management

NETWORK INFRASTRACTURE ENGINEER | DELOITTE | JAN 2021 TO SEPT 2021| CLIENT SPIRIT
AEROSYSTEMS | WICHITA KS
•Involved in smart factory collaboration with Spirit AeroSystems
• Installation RFID equipment architecture, design and implementation
•Designing and architecting the network infrastructure for smart factory implementation
•Integrating the network RFID design with Spirit AeroSystems
•Acting as technical leader and trusted advisor with Deloitte for Smart Factory Implementation
• Analyzing the logs captured in the network to troubleshoot network issues
•Managing, configuring, and troubleshooting AWS and Azure cloud infrastructure
•Managing, configuring, and troubleshooting Palo Alto firewalls

SR NETWORK ENGINEER/RESIDENT ENGINEER | MONDO/EXTREME | JUN 2020 TO JAN 2021 |

CLIENT ASCENSION HEALTH | WICHITA KS
•Migrating the Cisco infrastructure to extreme fabric infrastructure
• Installation of Avaya/Extreme Campus Fabric switches
•Design and implementation of SD-WAN solution with Viptela
•Integrating the existing network infrastructure with extreme campus fabric
•Managing, configuring and troubleshooting AWS and Azure cloud infrastructure
•Managing, configuring and troubleshooting Palo Alto firewalls
• Managing AWS, Azure and GCP Infrastructure on Network and Security
• Troubleshooting the Network Issues using Wireshark including Wireless, VoIP and VPN issues
Page 2
SR NETWORK ENGINEER | INSIGHT GLOBAL| OCT 2019 TO MAY 2020 | CLIENT LAUREATE
EDUCATION | Baltimore MD
•Migrating the on-premises data center to Cloud
• Managing Cisco ISE for wireless and wired authentication
•Migrating Cisco ACS to Cisco ISE
• Managing GCP Infrastructure
•Managing Amazon AWS infrastructure such as ELB, NLB, VPC Transit gateway, peering, Security
groups
•Configuring and managing F5 load balancer
• Managing Azure Infrastructure
•Managing, configuring and deploying Cisco ASA and AnyConnect VPN
•Configuring and deploying SD-WAN solution using Cisco Meraki and Viptela
•Migrating the MPLS circuits to SD-WAN
•Managing and configuring Palo Alto Firewalls
• Managing Microsoft Azure and Amazon AWS infrastructure

SR NETWORK&SECURITY ENGINEER | TRIGYN | FEB 2016 TO FEB 2020 | CLIENT BALTIMORE

CITY POLICE | Baltimore MD
•Designing network infrastructure for organization as well as optimization and future expansion
•Architecting, design and Installation of Cisco Next generation firewall Cisco Firepower 4150
•Designing and deployment of cisco Identity service engine Cisco ISE
•Designing and deploying VPN solutions both site to site and client VPN using AnyConnect VPN
• Managing Azure, AWS and GCP Infrastructure
• Managing SD WAN infrastructure with Viptela/Meraki
•Design and deployment of wireless Local area network solutions
• Managing F5 load Balancer
• Nexus 9K deployment to support Data center environment
• Managing Data infrastructure
•Managing the datacenter and providing tier 3 support for network issues
•Managing and Cisco ASA, Palo Alto firewalls and security operations
•Configuring and managing Intrusion detection systems and Intrusion prevention systems as well as
providing technical support when issue arises using Sourcefire before Firepower deployment

NETWORK ENGINEER | ATOS | AUG 2015 TO FEB 2016 | CLIENT MARRIOTT | Frederick MD
•Providing Network support for Marriott hotels Infrastructure including routing, switching and
wireless issues management
• Providing network security support by managing firewalls, web sense proxy and DNS management
• Deploying the Viptela and Meraki SD WAN infrastructure
• Monitoring and troubleshooting the SD WAN with Meraki and Viptela
•Providing support for VPN infrastructure to various other sites as well as other vendor portability to
Marriott network and client VPN using AnyConnect
•Configured and managed local area network, servers, and communications connections to remote
locations. Installed network routers, switches and firewalls.

Page 3
NOC ENGINEER |TEKSYSTEMS | AUG 2014 TO AUG 2015 | CLIENT ASTRAZENECA | Gaithersburg
MD
•Providing Level 2 support for various issues including issues with network, wireless and voice
•Monitoring organization infrastructure and provide necessary support for any issues arises
•Working in configuring the IP phone and user management in Cisco CUSM and Cisco Unity
• Providing network security support by managing firewalls, web sense proxy and DNS management
• Providing network security support by managing firewalls, web sense proxy and DNS management
•Managing patching in windows server environment as well as other virtual environment including
VMware and Citrix administration
•Troubleshooting the issues with cisco routers, switches, wireless LAN client and issues with wireless
including access point
•Troubleshooting the issues with site-to-site VPN as well as with AnyConnect remote access VPN
•Configuring IP phones for VoIP setup and providing technical support for any issues arises

SYSTEM/NETWORK ENGINEER | HEALTHCARE SYSTEM CONNECTION | AUG 2013 TO AUG2014

CLIENT: MID-ATLANTIC LONG-TERM HEALTHCARE | York PA
•Design and implementing the network infrastructure for different clients as well as upgrading the
hardware including routers, switches and access point
•Designing and implementing the security infrastructure such Firewalls and Intrusion Prevention
System for different clients as well as monitoring them, troubleshooting and provide technical support
when incident occurs
•Configuring, managing and troubleshooting different Firewalls including Cisco ASA, Juniper and Sonic
walls as well managing firewall rules and policies
•Configuring and setting up different VPN ranging from clientless VPN to LAN to LAN VPN between
Client and different vendors
•Providing Server administrator support such as managing Active directory and group policies as well
managing users and resources for Mid Atlantic servers
•Providing technical support for user as well as managing resources in the window’s terminal server
environment
•Managing Firewalls and network infrastructure for meeting HIPAA compliance
•Managing Windows exchange server such managing emails account and distribution groups
•Computer Network Security: Implemented policies for employee use of Internet and e- mail •Technical
Support: Provided technical support and end-user training to internal and external customers on
network, software, and computer systems.
•Performed security checks of servers and networks to verify adequate virus protection and compliance
with corporate and government procedures.
•Designed and implemented an inventory to track network equipment, computers, servers, and
software.

NETWORK SUPPORT ENGINEER | GLOBAL MOBILITY | JAN 2013-TO AUG 2013 | Chicago IL
•Design and Implemented OSPF and BGP on various sites for routing enhancement, high availability,
and reducing administrative overhead
•Maintained and configured Cisco enterprise devices such as Cisco 1900, 2811, 2900, 3900
Series ISR Routers, Cisco Switches 2960, 3560, 4500, 6500
•Cisco IOS experience on 2900 hardware in complex WAN environment and experience on Cisco OS.
•Built LAN/WAN TCP/IP network comprised of Cisco Switches (2960, 2950, 2900XL).
Page 4
•Experience in configuring routing protocols like EIGRP, RIP v2, OSPF & BGP.
•Experience in designing, installing & configuring Cisco ASA.
•Experience in creating and maintaining firewall configurations, updating documentation and log
analysis
•Monitored traffic and access logs in order to troubleshoot network access issues
•Provided support to internal project teams by adding firewalls, switches and routers to managed DMZs
•Experience in configuring & upgrading of Cisco IOS
•Experience on designing and troubleshooting of complex BGP and OSPF routing problems
•Experience in configuring VLAN’s STP (Spanning tree Protocol) & RTSP (Rapid Spanning Tree
Protocol)
FIELD TECHNICAL SUPPORT | GEEKS DC | JAN 2011- DEC2012 | Washington DC
•I was working with computer technical Support Company called Geeks operate in DC, MD and
Virginia providing technical support on client site such as
•Desktop support and PC troubleshooting
•Network installation and troubleshooting
• Responsible for monitoring network performance in order to maintain excellent network stability.
•Monitoring system performance and error logs for potential issues, proactively seek out solutions to
network related issues
•Working knowledge of the OSI network model Experience with variety of networking protocols,
including TCP/IP, Ethernet and frame Relay
•Resolving issues related to data communication systems including hardware, software and
applications, including Switches, Routers, and Firewalls, IP, IPX, Frame Relay, VPN, IP
•Provide first line support for service interruptions, LAN cabling issues, power outages, and wireless
drops and creating trouble ticket

SYSTEM ADMINISTRATOR | INFINITY COMMUNICATION LTD | JUN 2006- DEC 2009 | Tanzania
•Part of a team responsible for configuration, security and technical support for telecommunication
networks, performed site Surveys and maintained Cisco Routers. •Planned and designed network
addressing scheme with IP Sub netting.
•Provide user training for the end users as well as fellow team members
•Installed & configured LAN & WAN using Cisco 2600, 2800 series Routers and 1900, 2900 series
switches.
•LAN/WAN hardware including, Ethernet Hubs, Cisco Switches, switches panel’s installation,
configuration and troubleshooting.
•Provided network security administration functions including hardware access, software access,
passwords, user privileges and related tasks
•Cisco router configuration set up routing protocols like RIP, EIGRP.
•Implementation of NAT with a pool of public IP addresses.
•Switching related tasks included implementing VLANS and configuring ISL trunk on Fast- Ethernet
channel between switches.
•Provided troubleshooting and maintenance for CISCO IP phones.
•Led efforts to build and maintain Visio documentation database of network topology and ensured
successful project implementation

Page 5
Education
MASTER OF SCIENCE | 05/17/2013 | HOOD COLLEGE
•Major: Computer Science
•Minor: Network and Information Security
•Related coursework: Software Engineering

BACHELOR OF SCIENCE | 09/18/2008 | INSTITUTE OF FINANCE MANAGEMENT

•Major: Computer Science
•Minor: Information Technology Management
•Related coursework: Database Management

Certification
•Certified Information System Security Professional CISSP
•Cisco Certified Network Professional CCNP Routing & Switching
•Cisco Certified Design Professional CCDP
•Cisco Certified Network Associate CCNA Security
•AWS Certified Solutions Architect Professional
•Palo Alto Networks Certified Network Security Engineer PNCSE

Skills & Abilities

Network Support: Cat OS Switches: 9000, 6500, 4500, 3850. Cisco Router: ASR 1001X,
7200, 3000/2600/1600 Series. Cisco ASA 5585, Firepower 4150, Cisco
ISE, Nexus 9K,7K,5K, Meraki MX 250, Meraki MS 250, Viptela, ClearPass
Network/Protocol: LAN/WAN, TCP/IP, WINS, DNS, DHCP, POP3, SMTP, FTP, TELNET, VPN,
ICMP, TFTP, Ethernet, RIP, IPSEC, IGRP, EIGRP, OSPF, BGP, MPLS, VPLS
VoIP, H.323, SIP, BFD, ZTP, OMP
Load Balancer BIG-IP F5, A-10

Routing Protocols: RIP, EIGRP, OSPF, BGP, IS-IS,

L2 Protocols: VTP, STP, RSTP, PVST, ISL,802.1q,802.1X, 802.1D

Switching VDC, VRF, VLANs, PVLANs, Ether-Channel, PAgP and LACP
WAN Technologies: SD-WAN, SDN, PPP, MPLS, EVPN, Metro Ethernet
Tools Wireshark, Solar Wind, Infoblox, Cisco Prime, Nagios, DNA Center,
HPNA, extreme management center (XMC)
Cloud & AWS, Azure, Google Cloud, VPC, UCS, VMware ESXi, Microsoft Virtual
Virtualization Server, Xen,
Programming C, C++, C#, VISUAL BASIC, LISP, PROLOG, Shell scripting PERL,
PYTHON, PHP, HTML
Page 6