Network Administration Course Instructor

• Recognized as the #1 instructor for the 2024 Kean University IT Student Rotational Learning Program.

Network Security & Infrastructure

• Configured a WatchGuard firewall to host AD, Group Policy, Linux DNS, MFA, DHCP, and a captive portal for network access.
• Imaged and configured pfSense and OPNsense firewalls on mini-PCs and integrated them into network security appliances.
• Deployed Splunk Enterprise SIEM, improving threat detection and response efficiency.
• Developed a Firewall Recovery Plan for a WatchGuard Firebox, ensuring rapid restoration, failover, and business continuity.

Data Center Network Operations

• Collaborated on a data center reorganization project, optimizing space and rack positioning.
• Decommissioned legacy servers and PDUs, installed new ones, and mapped, inventoried, and labeled servers while tracking operational status in Excel.
• Set up and deployed Extreme Networks switches using PuTTY and assisted with data center integration.

Active Directory & Identity Management

• Managed 20,000+ AD objects (users, groups, devices), enforcing security policies for authentication and compliance.
• Migrated a Windows Server 2019 AD to Microsoft Entra ID (Azure AD) for user access across hybrid cloud environments.

Senior Project: Portable Mobile Network (See portfolio page for more details)

• Designed and deployed a scalable mobile network for enterprise field use. Integrated Fortinet FortiGate 90D, pfSense, Cisco Catalyst 2960-X, GL.iNet router, and a NAS with a captive portal.
• Deployed an AI-powered troubleshooting chatbot and website to support users.

Hybrid Cloud VPN Network Deployment (See portfolio page for more details)

• Deployed a hybrid network with AWS Lightsail Windows Server VMs connected via WireGuard VPN on an ASUS router; configured one as a NAS and another as a MySQL server for secure file and database access.

Full-Stack Enterprise Network Environment Lab

Designed, built, and maintain a comprehensive Unifi network infrastructure featuring the Cloud Gateway Ultra, Ultra POE switch, Power Distribution Pro, and NanoHD access point. This network integrates and hosts multiple enterprise-grade firewalls, including pfSense, SonicWall TZ400, WatchGuard M370, Fortinet Fortigate 90D, and Palo Alto 220 Next-Gen Firewall. The environment also includes a Cisco stack composed of a Catalyst 2960-X switch, a 1900 series router, and an ASA 5515-X Firewall. Remote access and endpoint management are enabled via Tailscale.

Notable Projects

• SIEM Deployment & Log Ingestion Project: Deployed Wazuh (OSSIM-based SIEM) on Proxmox to monitor Windows and Linux endpoints. Configured secure agent enrollment with authentication keys and AES encryption. Customized manager and syslog ports for optimized log ingestion. Integrated UniFi syslog feeds and ensured real-time log collection and parsing.
• Automation Lab (Infrastructure as Code): Implemented automated information parsing utilizing Ansible playbooks to enhance deployment efficiency.
• Network Access Control & VLAN Segmentation: Configured UniFi network with role-based access control and automated VLAN assignment. Implemented dynamic VLAN segmentation for IoT, guest, and internal devices based on credentials.
• Active Directory Deployment: Configured a Windows Server-based Active Directory Domain Controller to manage user authentication, apply Group Policy, and streamline device administration for multiple Windows clients in Proxmox.
• Network Monitoring Dashboard: Deployed a full-stack monitoring solution using Prometheus, InfluxDB, Unpoller, and Grafana to visualize and analyze network and system performance hosted on Proxmox with Ubuntu and Docker for container orchestration.