Principal Engineer
Femme Comp Incorporated
Keywords
Cloud Computing
Data Centers
Intrusion Detection Systems
Routing
Cisco Nexus Switches
Object-Oriented Software Development
Software Engineering
Active Directory
Amazon Web Services
C++ (Programming Language)
Skills
Microsoft Active Directory, MS Active Directory, EC2, S3, VPC, AWS Certified, Amazon AWS, Ansible, AntiVirus, Mac OS X, Data Backup, RF terminals, Bioinformatics, BGP, C/C++, C++, Catalyst, Cisco, Nexus, Cisco Nexus, Nexus 7000, Cisco ASA, Cisco Routers, Cisco Switches, client/server, cloud services, cloud computing, cloud, cloud technologies, network stability, computer network, cyber security, Information Security Policy, data center, data centers, datacenter, database systems, disaster recovery, electronic document management system, DNS Server, DHCP Server, Enterprise Architecture framework, enterprise applications, Ethernet, Extranet, XP, fail over, Firewalls, Frame Relay, HP Openview, user interface, AIX, 802.1x, IPv4, IPv6, identity management, Information System, Information Technology, development environment, IPSec, ISPs, internetworking, IDS, intrusion detection system, Intrusion Detection systems, Java, Juniper, JUNOS, local area network, local-area network, Matlab, mainframe computers, AntiVirus system, Microsoft Azure, MS Exchange, Microsoft Exchange Server, MFC, Security Essentials, Windows 2000, Windows NT, Windows 95, monitoring systems, MRTG, MPLS, multicast, NetApp, Network Management, network architecture, Network Architect, network engineering, network design, network security, secure network, servers, network cabling, networking devices, Opnet, OOA, OOD, Object-Oriented Analysis and Design, OSPF, Oracle database, OTV, packet capturing, Perl, Postman, Programming languages, PKI, RSA, Rational Rose, remote access, Route53, Routing, Routing Protocol, Routing Protocols, SQL, server virtualization, server-side, Service Oriented Architecture, SOA, Simple Network Management Protocol, Snort, software applications, software architecture, Software engineering, development life cycle, software development, system requirements, patch management, Solarwinds, Solaris, sub-system, subsystem, Microsoft Operation, system software, system engineering, TCP/IP, Tcl/Tk, TACACS+, Terraform, TCP/IP protocol, UML, UNIX, Shell, user environment, VMWare ESXi, VMWare vSphere, vCenter, Virtual LAN, VPLS, VPN, Virtual Private Network, Microsoft Visual C++, VMWare, IP Telephony, VxWorks, WEB services, Whatsupgold, WiFi, LAN/WAN, wide-area network, Wireless LAN, wireless connection, Cisco Wireless
Project history
08/2004
-
04/2007
Assignment#1:
As a senior member of the architecture team at Army Architecture Integration Center (AAIC) of Army CIO/G6,
have led the effort to transition army-wide information system from IPv4 to IPv6. My responsibilities include
representing the Army at DoD level IPv6 Working Groups, developing Army's IPv6 transition & implementation
plans, testing and evaluating IPv6 transition techniques, assessing operational performance of IPv6 in Army's
network environment.
I have also developed Army's Enterprise Architecture framework based on Service Oriented Architecture (SOA).
Particularly, I have been developed the architecture framework that will integrate Army's Future Combat System
(FCS) which is based on System of System Common Operational Environment (SOSCOE), DoD's Net-centric
Enterprise Services (NCES) and Army's SOA architecture. My work is focused on two areas. The first area is the
publication, discovery, and consumption of WEB services across domain boundaries. The second area is identity
management, security policy and access control across domain boundaries.
Assignment#2:
As a senior member of the Northrop Grumman network architecture team, have supported PRDA Contract (No.
FA8808-04-C-0001). Represented Northrop Grumman at government sponsored engineering meetings for the
Transformational Satellite Communications System (TSAT) system. Interfaced with government officials, military
personnel, space contractors, terminal contractors, and other GIG contractors. Participated in the research,
development and trade studies of advanced network technologies that mature the TSAT network architecture and
engineering requirements. TSAT network is an IPv6 based network. As the leading author, provided leadership in
developing the TSAT Traffic Engineering (TE) program artifact and maturing the Traffic Engineering requirements
in the TSAT System TRD. As co-author, made significant contributions in developing other TSAT program
artifacts such as Transport Performance, Intermittent Connectivity, Terminal Mobility, Network Mobility and IPv6
Address Plan.
As a senior member of the architecture team at Army Architecture Integration Center (AAIC) of Army CIO/G6,
have led the effort to transition army-wide information system from IPv4 to IPv6. My responsibilities include
representing the Army at DoD level IPv6 Working Groups, developing Army's IPv6 transition & implementation
plans, testing and evaluating IPv6 transition techniques, assessing operational performance of IPv6 in Army's
network environment.
I have also developed Army's Enterprise Architecture framework based on Service Oriented Architecture (SOA).
Particularly, I have been developed the architecture framework that will integrate Army's Future Combat System
(FCS) which is based on System of System Common Operational Environment (SOSCOE), DoD's Net-centric
Enterprise Services (NCES) and Army's SOA architecture. My work is focused on two areas. The first area is the
publication, discovery, and consumption of WEB services across domain boundaries. The second area is identity
management, security policy and access control across domain boundaries.
Assignment#2:
As a senior member of the Northrop Grumman network architecture team, have supported PRDA Contract (No.
FA8808-04-C-0001). Represented Northrop Grumman at government sponsored engineering meetings for the
Transformational Satellite Communications System (TSAT) system. Interfaced with government officials, military
personnel, space contractors, terminal contractors, and other GIG contractors. Participated in the research,
development and trade studies of advanced network technologies that mature the TSAT network architecture and
engineering requirements. TSAT network is an IPv6 based network. As the leading author, provided leadership in
developing the TSAT Traffic Engineering (TE) program artifact and maturing the Traffic Engineering requirements
in the TSAT System TRD. As co-author, made significant contributions in developing other TSAT program
artifacts such as Transport Performance, Intermittent Connectivity, Terminal Mobility, Network Mobility and IPv6
Address Plan.
06/2003
-
08/2004
Networking Technology Instructor
InterCentury Technology
Teaching CCNA (Cisco Certified Network Associate) and CCNP (Cisco Certified Network Professional) courses
during weekends.
during weekends.
04/2003
-
08/2004
Network Manager
Ziff Brothers Investments LLC
Managed a team of engineers that supports the corporate wide LAN, WAN network infrastructures, and all server
systems in the corporate headquarter in New York City and branch offices in New Jersey, Connecticut, Colorado,
London, Spain, and Hong Kong. I was also in charge of MS Active Directory, Data Backup system, AntiVirus
systems, and database systems.
Majors Achievements:
* Built a strong team by improving team members' technical skills and teamwork sprit.
* Managed vendors' relationship with Cisco, HP-Compaq, IBM, and Professional Providers.
* Significantly improved network and server uptime and performance.
* Significantly improved network security by implementing VPN (site-to-site & remote access), firewalls,
intrusion detection system, and URL filtering system (WebWasher).
* Implemented automatic OS and application patch management system (Ecora Patch Manager).
* Evaluated, selected and implemented network and system management and monitoring systems: Cisco
Works, Whatsupgold, MRTG, Solarwinds Orin Network Performance Monitor, HP In-Site Manager,
Microsoft Operation Manager. With these management and monitoring systems, network and system
operational information was collected, analyzed, and compiled into variety of reports.
* Improved, tested and maintained disaster recovery and business continuity site.
* Developed, implemented and enforced "IT Usage Policy" and "Information Security Policy".
systems in the corporate headquarter in New York City and branch offices in New Jersey, Connecticut, Colorado,
London, Spain, and Hong Kong. I was also in charge of MS Active Directory, Data Backup system, AntiVirus
systems, and database systems.
Majors Achievements:
* Built a strong team by improving team members' technical skills and teamwork sprit.
* Managed vendors' relationship with Cisco, HP-Compaq, IBM, and Professional Providers.
* Significantly improved network and server uptime and performance.
* Significantly improved network security by implementing VPN (site-to-site & remote access), firewalls,
intrusion detection system, and URL filtering system (WebWasher).
* Implemented automatic OS and application patch management system (Ecora Patch Manager).
* Evaluated, selected and implemented network and system management and monitoring systems: Cisco
Works, Whatsupgold, MRTG, Solarwinds Orin Network Performance Monitor, HP In-Site Manager,
Microsoft Operation Manager. With these management and monitoring systems, network and system
operational information was collected, analyzed, and compiled into variety of reports.
* Improved, tested and maintained disaster recovery and business continuity site.
* Developed, implemented and enforced "IT Usage Policy" and "Information Security Policy".
09/2002
-
04/2003
IT Manager
AQR Capital Managements LLC
In charge of the IT department and whole information system of the company. It includes all network
infrastructures, servers, workstations, IP Telephony, help desk and all enterprise level applications such as MS
Exchange, SQL & Oracle database servers, data backup system (Legato Enterprise), AntiVirus system.
Majors Achievements:
* Significantly improved network stability and availability by eliminating weak links and adding
redundancy. Technologies employed include dual ISP with BGP routing, fail over firewalls, redundant
core switches, and dual-homing critical servers.
* Evaluated and implemented security measures on VPN access for remote and home users.
* Managed vendor's relationship with Cisco, HP-Compaq, Dell, and Sunguard.
* Evaluated, selected and implemented network and system management and monitoring systems such as
Cisco Works, HP Openview, CA Unicentor, and BMC Patrol.
* Developed and implemented disaster recovery and business continuity plan.
* Evaluated, selected and implemented Intrusion Detection systems such as ISS TrueSecure, Snort, and
Cisco Secure IDS.
* Managed corporate-wide help desk support operations.
infrastructures, servers, workstations, IP Telephony, help desk and all enterprise level applications such as MS
Exchange, SQL & Oracle database servers, data backup system (Legato Enterprise), AntiVirus system.
Majors Achievements:
* Significantly improved network stability and availability by eliminating weak links and adding
redundancy. Technologies employed include dual ISP with BGP routing, fail over firewalls, redundant
core switches, and dual-homing critical servers.
* Evaluated and implemented security measures on VPN access for remote and home users.
* Managed vendor's relationship with Cisco, HP-Compaq, Dell, and Sunguard.
* Evaluated, selected and implemented network and system management and monitoring systems such as
Cisco Works, HP Openview, CA Unicentor, and BMC Patrol.
* Developed and implemented disaster recovery and business continuity plan.
* Evaluated, selected and implemented Intrusion Detection systems such as ISS TrueSecure, Snort, and
Cisco Secure IDS.
* Managed corporate-wide help desk support operations.
05/2002
-
08/2002
TES Consultant
Memorial Solan-Kettering Cancer Center
Network and Computing Project:
Helped to design and setup the computer network and computing environment for the Functional Proteomics
Project (FPP) group. FPP group is renting office and lab space in the blood center that is a couple of blocks away
from MSKCC's buildings. High speed (100MB/s) wireless connection is used to connect FPP group's network to
MSKCC's campus network. Wireless LAN is used to connect end user's computer to the local area network.
Also helped to setup Voice and Data teleconferencing for FPP group and external collaborators.
Bioinformatics Project:
* Setup workstations (Windows 2000 & XP), servers (Windows 2000, Mac OS X) and the development
environment (PERL) for bioinformatics project.
* Developed a program to search and download gene description files from the Internet (www.celera.com and
www.ncbi.nlm.nih.gov) automatically.
* Developed a program to search the gene description files for the siRNA candidates and rank them according to
set criteria.
* Developed the program to compare the siRNA candidates from human genes and mouse genes and further
rank them according to set criteria.
Helped to design and setup the computer network and computing environment for the Functional Proteomics
Project (FPP) group. FPP group is renting office and lab space in the blood center that is a couple of blocks away
from MSKCC's buildings. High speed (100MB/s) wireless connection is used to connect FPP group's network to
MSKCC's campus network. Wireless LAN is used to connect end user's computer to the local area network.
Also helped to setup Voice and Data teleconferencing for FPP group and external collaborators.
Bioinformatics Project:
* Setup workstations (Windows 2000 & XP), servers (Windows 2000, Mac OS X) and the development
environment (PERL) for bioinformatics project.
* Developed a program to search and download gene description files from the Internet (www.celera.com and
www.ncbi.nlm.nih.gov) automatically.
* Developed a program to search the gene description files for the siRNA candidates and rank them according to
set criteria.
* Developed the program to compare the siRNA candidates from human genes and mouse genes and further
rank them according to set criteria.
05/1999
-
06/2002
Senior Network Architect
Compuware Corporation
Project 1: Worked as the project manager and technical lead for the project. Designed, installed, and supported an
electronic document management system for a large utility company. This project involved many technical areas
such as wide-area network, local-area network, Unix servers (Solaris), mainframe computers, and software
applications. It also involved coordinating with multiple internal and external organizations such as IT department,
accounting department, customer department and vendors.
Project 2: Assessed, documented, redesigned, and implemented an enterprise network for a big chemical company.
This project involved corporate headquarter and two branch offices. The client was merging the two branch
offices, and had no documentation at all about their network. As a consultant, I evaluated their networks at both
locations, documented their current network, redesigned a new network for the newly merged branch, provisioned,
ordered, installed and configured the new equipment. Technologies involved in this network include Frame Relay,
Cisco routers & switches, NT Domains, Microsoft Exchange Server, DHCP Server, DNS Server, NT Workstations
and servers, Windows 2000/NT/98/95 clients and network cabling. The project resulted in a more responsive,
reliable, and secure network with accurate documentation that meets the client's business requirements.
Project 3: Designed, installed, and provided troubleshooting for a complex enterprise network that included a
company headquarters, branch offices, and telecommuters. The networking devices used in this project included
Cisco routers Cisco Catalyst Switches and hubs. The networking technologies and protocols used in this project
included Frame Relay, Virtual Private Network, LAN Switching, Ethernet, Policy Routing, IPSec & IKE and
Virtual LAN.
Project 4: Designed and implemented software for laser focal microscope systems. Designed software by using
UML and Rational Rose 2000, implemented software by using Visual V++ 6.0 on Windows NT systems. The
software is used for grabbing, processing and displaying images. Also maintained legacy software for laser focal
microscope systems. It was developed by using C and Tcl/Tk on SGI Unix Workstations.
electronic document management system for a large utility company. This project involved many technical areas
such as wide-area network, local-area network, Unix servers (Solaris), mainframe computers, and software
applications. It also involved coordinating with multiple internal and external organizations such as IT department,
accounting department, customer department and vendors.
Project 2: Assessed, documented, redesigned, and implemented an enterprise network for a big chemical company.
This project involved corporate headquarter and two branch offices. The client was merging the two branch
offices, and had no documentation at all about their network. As a consultant, I evaluated their networks at both
locations, documented their current network, redesigned a new network for the newly merged branch, provisioned,
ordered, installed and configured the new equipment. Technologies involved in this network include Frame Relay,
Cisco routers & switches, NT Domains, Microsoft Exchange Server, DHCP Server, DNS Server, NT Workstations
and servers, Windows 2000/NT/98/95 clients and network cabling. The project resulted in a more responsive,
reliable, and secure network with accurate documentation that meets the client's business requirements.
Project 3: Designed, installed, and provided troubleshooting for a complex enterprise network that included a
company headquarters, branch offices, and telecommuters. The networking devices used in this project included
Cisco routers Cisco Catalyst Switches and hubs. The networking technologies and protocols used in this project
included Frame Relay, Virtual Private Network, LAN Switching, Ethernet, Policy Routing, IPSec & IKE and
Virtual LAN.
Project 4: Designed and implemented software for laser focal microscope systems. Designed software by using
UML and Rational Rose 2000, implemented software by using Visual V++ 6.0 on Windows NT systems. The
software is used for grabbing, processing and displaying images. Also maintained legacy software for laser focal
microscope systems. It was developed by using C and Tcl/Tk on SGI Unix Workstations.
06/1995
-
04/1999
Team Leader/Sr. SW Engineer
GE Medical Systems & GE-Lunar
Project 1: Lead a team of four developers and managed software development project for an X-ray imaging system.
Designed and implemented client/server software for an embedded system. The server was a real-time imaging
system running VxWorks. The client was an IBM PC-compatible running Windows 95. The server and client were
connected using Ethernet, with communication between server and client developed using TCP/IP protocol. Was
responsible for gathering requirements. Also designed, implemented, and tested the software. The system used
Watcom C/C++ on the server-side and Microsoft Visual C++ on the client-side.
Project 2: As a team leader, managed the software development for one sub-system and led a team of five
developers, did project planning and management. Developed large-scale real-time embedded system software for
medical imaging applications. The real-time control and processing subsystem software was developed by using C
and C++ in VxWorks environment. The data processing, display and user interface was developed on SGI UNIX
Workstation by using C and C++.
Project 3: Designed and prototyped software for the next generation of magnetic resonance imaging (MRI)
systems. As a member of the new software architecture team, gathered and documented system requirements from
many diverse sources, designed software architecture using OOA/OOD methodologies, and then prototyped the
new software architecture for proof of concept. Designed and implemented the software using Java. Among project
successes, achieved the goal of building in good portability and maintainability.
Designed and implemented client/server software for an embedded system. The server was a real-time imaging
system running VxWorks. The client was an IBM PC-compatible running Windows 95. The server and client were
connected using Ethernet, with communication between server and client developed using TCP/IP protocol. Was
responsible for gathering requirements. Also designed, implemented, and tested the software. The system used
Watcom C/C++ on the server-side and Microsoft Visual C++ on the client-side.
Project 2: As a team leader, managed the software development for one sub-system and led a team of five
developers, did project planning and management. Developed large-scale real-time embedded system software for
medical imaging applications. The real-time control and processing subsystem software was developed by using C
and C++ in VxWorks environment. The data processing, display and user interface was developed on SGI UNIX
Workstation by using C and C++.
Project 3: Designed and prototyped software for the next generation of magnetic resonance imaging (MRI)
systems. As a member of the new software architecture team, gathered and documented system requirements from
many diverse sources, designed software architecture using OOA/OOD methodologies, and then prototyped the
new software architecture for proof of concept. Designed and implemented the software using Java. Among project
successes, achieved the goal of building in good portability and maintainability.
07/1994
-
06/1995
Image Processing Engineer
Orbtek Inc.
Developed software for a corneal topographer system. The application was an embedded system under computer
control that acquired multiple images of cornea. Developed the algorithms and software to process the digital
images. Was also involved in the design, implementation, and testing of the entire system software. Developed
software using Microsoft Visual C++ in a Windows NT environment.
control that acquired multiple images of cornea. Developed the algorithms and software to process the digital
images. Was also involved in the design, implementation, and testing of the entire system software. Developed
software using Microsoft Visual C++ in a Windows NT environment.
Local Availability
Open to travel worldwide
