John Kiehnle CCNP R&S W / CCSP / CCDPCISCO CERTIFIED NETWORK, DESIGN, WIRELESS, & SECURITY PROFESSIONAL

Duvall, WA - Email me on Indeed: indeed.com/r/e98f9756a77fcba0

WORK EXPERIENCE

Senior Network AnalystPUGET SOUND ENERGY - Bellevue, WA - 2009 to Present

Pacific Northwest Gas & Electric Utility CompanyPrincipal architect of both the Cisco Unified Wireless Mobility and the Cisco Trust and Identity ManagementSolution Architectures at PSEKey Highlights:• Initiated the integration of voice and data configuration on a single router at each remote location savingthe company hundreds of thousands of dollars as Cisco IP Telephony technologies are rolled out to remotesites in the region.• Introduced the Cisco IP Communicator (softphone) for use in the new multi-million dollar Bothell call centerwhich saved PSE well over four hundred thousand dollars. I received an award for my involvement in thisproject.• Cisco Wireless Mobility Architecture - Responsible for research & design as well as leading the enterprisewide implementation of Cisco's Unified Wireless Mobility Architecture according to Cisco validated designand best practice guidelines including; Unified Wireless Site Survey, Advanced Mobility Services, AdvancedWireless Security, Unified Wireless Voice, and a pseudo-OOB management network including Cisco PrimeNCS management software to support the new integrated mobile wireless infrastructure.• Cisco Trust and Identity Management Solution Architecture - Responsible for research & design as well asleading the enterprise wide implementation of the 802.1X framework according to Cisco validated design andbest practice guidelines including; Cisco Secure ACS 4.2 & 5.2 policy servers, AAA framework, Cisco WirelessLAN Controllers, Cisco NAC Profilers, Collectors, and the Cisco NAC Guest Server.• Cisco Security Control Framework - Ongoing process of continuous development to incrementally improve thesecurity posture of both the wired and wireless infrastructure architectures to address current key threats andto identify, track and defend against new and evolving threats. Responsible for proposing and implementingthe initiatives to improve total visibility and complete control including identify, monitor and correlate systemwide events, harden devices, strengthen the infrastructure and enforce security policies.

Voice / Data Senior Network EngineerTailored Technology Solutions - Puyallup, WA - 2008 to 2010

IT solutions provider and consultancy firmUncovered an additional revenue stream via the introduction of a new innovative business model using Cisconetworking technologies.Proposed and coordinated the project to implement remote access and site-to-site VPNs for the T2Sigmaprogram to support management of the geographically dispersed independent Allstate agent networks.Troubleshoot and resolve security and telephony related issues. Ensure the optimal performance and securityof the voice and data networks.Key Highlights:• Designed and implemented the company's voice and data infrastructure including Cisco WAN, VPN, andVoIP technologies.

• Upgraded Cisco routers with Advanced Integration Module (AIM-VPN/EPII-PLUS) for dedicated hardwarecryptographic acceleration. Module supports scaling up to 1000 site-to-site IPSec VPN tunnels to T2Sigmacustomers.• Upgraded Cisco routers to support Cisco Unified Communications Manager Express (CUCME)• Facilitated routing between the hub & spoke networks using Cisco routers at each customer location.• Completed Cisco remote access IPSec VPN including split tunnel and Xauth for administrative staff anddevelopers' access to the Tailored Solutions network from anywhere in the US or Russia.• Configured IPSec VPN network access control with PEAP protocols and CSACS 4.2.• Configured Cisco IOS Zone-based Policy Firewall (screened subnet) to support e-commerce webdevelopment projects.• Designed and implemented a multi-site distributed call-processing voice network from the ground up for thecustomer service call center and tech support engineers

Senior Network EngineerBuilding Knowledge Networks - Mukilteo, WA - 2007 to 2010

Providing innovative building systems management for the 21st CenturyHelped facilitate the creation of a brand new business entity from an innovative idea to proof of concept workingprototype, then helped BKN achieve 3 years of consecutive growth as well as position the company favorablyfor sale. BKN was acquired by Avista subsidiary, Advantage IQ in January 2011.Key Highlights:• Proposed, designed, and implemented both the remote access and site-to-site VPN network infrastructuresused by BKN engineers to access their proprietary building systems applications from around the country.• Configured Cisco AAA framework and policy based access control for all device and network access usingboth RADIUS and TACACS and the Cisco Secure ACS 4.2 access control server.• Configured Cisco IOS Zone-Based Policy Firewall (ZFW) to help protect customer web access and missioncritical infrastructure services in a screened subnet (DMZ).• Designed and configured redundant routed access infrastructure in the data center according to Cisco datacenter 2.0 validated design and best practice guidelines.• Delivered cost savings by using Linux, Apache, MySQL, & PHP (LAMP) open source technology solutionsto build the network monitoring / network management system.

Instructor / Network EngineerSTRATEGY COMPUTERS - Bellevue, WA - 2006 to 2010

The leading technical education and certification training company in the Puget SoundResponsible for teaching Microsoft MCSE series, Cisco associate and professional level certificationcurriculum including; CCNA, CCNA Voice, CCNA Security, CCNA Wireless, CCDA, CCNP, CCSP and theISC2 CISSP exam preparation series.Designed and configured Cisco policy based access control framework to control, monitor, and archive allstudent access to the school lab equipment.Key Highlights:• Played a pivotal role in helping boost revenues from Cisco certification training over 5000% by expandingthe company's popular Cisco exam preparation series.• Grew class sizes from 1 student in 6 months to approximately 12 students each month.• Implemented 802.1X network access control to the student lab by re-designing and re-configuring the existingnetwork infrastructure. Configured remote access control via RADIUS and device access control via TACACS+ using Cisco Secure ACS 4.2 and 5.0 servers.• Proposed and coordinated the purchase of new Cisco hardware to support the existing curriculum including(6) new L3 switches, (6) new L2 switches, (6) new Integrated Service Routers, (2) ASA 5510s (1) 2106 WirelessLAN Controller & Wireless Control System software and (2) Cisco Secure ACS 5.0 appliances.

• Designed and presented the solution to replace a single PIX firewall with redundant ASA 5510s configuredwith multiple virtual contexts to support Active/Active failover for the NOAA Fisheries Service's NWFSCMontlake Research Center.

Senior Network EngineerSATCOM SYSTEMS INC - Sandpoint, ID - 2002 to 2004

Key Highlights:Designed and deployed much of Satcom's wireless Internet service including 2.4 GHz client access, 5 GHzMotorola Canopy Backhaul, and public access wireless hotspots throughout the downtown Sandpoint area.Built and configured server farm using VMWare and Linux to host required network services including DNS,web, e-mail, and network monitoring and management services.Continued to contract with Satcom after moving to Seattle to help maintain their network for several years upthrough 2009 when the company was sold.Authored the original code that facilitated some of the earliest pre-paid and pay-as-you-go public wirelesshotspots providing a new unattended revenue center. (google john kiehnle & RADIUS)

Network EngineerAPPLIED RESEARCH, INC - Spokane, WA - 1993 to 2000

Conceived the vision, started the company and grew the business, positioning the company favorably for sale.Company was acquired in July 2000 by Wind Wireless, Eastern Washington's largest wireless Internet ServiceProvider.

EDUCATION

Bachelors in Business AdministrationGonzaga University - Spokane, WA

ADDITIONAL INFORMATION

Areas of expertise include:• Cisco Unified Wireless Mobility Architecture• Cisco Self-Defending Network Architecture - SecureX• Cisco Security Control Framework - Validated SAFE Design• Cisco Trust & Identity Management Solution Architecture - TrustSec