Frank B. Scalzo 815 Branch Dr Unit 401 Herndon, VA 20170 (703) 793-9181 fscalzo@catenet.net Objective A position in a dynamic networking environment, which requires both technical and leadership skills Work Experience January 2005 to Present VeriSign, Inc. Dulles, VA Senior Network Architect + One of a small group of engineers selected to form a dedicated architecture and engineering team, seperating engineering and operations + Responsibilities included writing architecture and engineering documents for all designs, certification testing of all hardware, software, and architectures + Improved network resiliience within all VeriSign production data centers by designing and implementing a standard routing architecture using BGP and OSPF + Developed, and implemented VeriSign's global peering strategy: - Worked with senior management and internal teams to demonstrate the value of peering, select exchange points, and periodically brief executive management - Developed, and tested all peering configurations and standards - Built global peering relationships with hundreds of networks - Developed custom peering reporting tools to track critical peering data in real time and for long term trending - Awarded 2007 CTO Technical Excellence Award in recognition of peering accomplishments + Designed a global 10G MPLS/IP Network: - Recommended 10G wavelengths for transport after working with various vendors to evaluate cost per bit mile of various circuit technologies - Negotiated pricing with vendors on 10G wavelengths - Provided executive management financial overview for building a global network including: capital budget for equipment, expense budget for circuit costs, as well as cost offsets, and budgeted transition cost models by working closely with finance - Designed all routing and traffic engineering aspects of the network using: IS-IS, MPLS TE using RSVP LSPs, and BGP - Worked with Juniper and Cisco on various feature requests - Built a lab environment then developed and tested all proposed configurations + Co-authored a paper with VeriSign's CSO analyzing a series of denial of service attacks targeted at Internet critical DNS infrastructure - Presented the paper at various forums including Nanog 37 + Designed fail-over mechanisms using GSLB for rapid fail-over from production data center to independent disaster recovery data center, with the ability to run both facilities active-active + Designed small footprint, low cost fully redundant anycast GTLD servers + Designed IPv6 network infrastructure to support GTLD and Root Servers operated by VeriSign + Designed infrastructure cable plant for new datacenter build out May 2003 to January 2005 VeriSign, Inc. Dulles, VA Network Engineer + Responsible for all network operations, architecture, and engineering work for a 2500 device network that supported all VeriSign critical infrastructure services including: - 2 of the internet root name servers - All 13 .com/.net GTLD name servers - The .com/.net registry which processes every add change or delete to the .com/.net TLDs - VeriSign payment platforms which processed 35% of all North American E-Commerce - PKI/SSL certificates which secure over 500,000 SSL web sites on the internet - VeriSign managed security services - VeriSign telecommunications products including prepaid and post paid billing platforms, various messaging platforms, as well as content delivery platforms + Provided highest level of escalation support to operations teams responding to various network events including: dDos attacks, security vulnerabilities, catastrophic outages, and critical maintenances + Designed, wrote, and deployed a network management system to fetch, archive, and provide revision control on all network device configurations June 2002 to May 2003 American Internet Exchange Dulles, VA Senior Network Engineer + Managed network operations team of 3 engineers responsible for all technical operations of a multi-homed ISP + Reduced SLA costs and increased redundancy, without any additional infrastructure investment, by completely redesigning existing layer 2 and 3 architectures + Increased return on provider bandwidth investments, by intelligently managing traffic with BGP + Identified key providers to seek relationships with, by studying number of prefixes contributed to the global routing table + Reduced overhead by developing policies and procedures for all aspects of network operations. Including deployment and management of request ticketing/tracking system July 2000 to May 2002 UUNET, A WorldCom Company Ashburn, VA Senior Network Engineer, Tactical Engineering + Saved the company tens of millions of dollars in reduced SLA costs by: shortening outages, and preventing events on a customer base of 70,000 - Provided third and last level of escalation support to the NOC in resolving real-time outages on the UUNET IP (OC-192 MPLS and OC-48 ATM) backbone. Performed as a key member of teams responding to, identifying and protecting from catastrophic outages - Developed designs, with network engineering and vendors, to address long-range network problems, such as re-evaluating network wide BGP architecture, and route aggregation to address growth concerns + Met target dates for infrastructure deployment insuring smooth deployment of tomorrow's products. Worked on multiple tiger teams to address major network wide scalability, and operational issues, such as evaluating transition plans to a hierarchical IGP + Redefined the way WorldCom profiles, and manages their network, saving thousands of operational man-hours, by developing several tools to achieve goals such as, outage impact assessment, intelligent automated updates of over 1,000 routers, and profiling network status, performance, and scalability + Reduced SLA costs, and improving MTTR to the customer by providing UUNET network and equipment specific training and mentoring to network engineers and technicians. Insuring that everyone in the operations organization had the tools necessary to resolve outages quickly, and correctly + Reduced operational overhead by collaborating with fellow engineers to develop standard operating and troubleshooting procedures + Insured that products met customer needs by closely interfacing with vendors on several fronts including bug identification and resolution, as well as testing and deployment of new technologies 1998 to 2000 E-Znet, Inc. Rochester, NY Senior System Operations Engineer + Served as Senior Network Engineer for a regional ISP covering much of western New York State; responsible for design, implementation, maintenance, and troubleshooting for all network services + Performed all network engineering and operations responsibilities + Responsible for deploying Residential and Commercial SDSL and ADSL product offerings in multiple markets in partnership with multiple carriers + Responsible for deploying, configuring, and debugging various pieces of network equipment including routers, terminal servers, switches, and CSU/DSUs + Responsible for administration of Lan/Wan network of a multi-homed non-transit autonomous system with over 10 POPs and over 50 wan connections varying from 56Kbps through multiple T1 solutions + Responsible for administration of various servers including: mail, DNS, FTP, web, authentication, and shell + Played a major role in readdressing entire network in order to gain a larger CIDR allocation from ARIN 1998 Dun & Bradstreet Dickson City, PA Systems Administrator Internship + Served as a member of the Technical Operations Team responsible for managing three predictive dialers with 216 dynamically allocated phone lines and approximately 180 associates + Managed all aspects of calling campaign administration including: exporting records to the dialer, importing results, exporting statistical and sales information as well as processing statistical and sales reports for management Technical Skills Professional Conferences/Training/Certifications Presented at Nanog 37, Attended Ripe 55, Frequent Global Peering Forum attendee, Frequent Nanog Attendee, Juniper Internet Engineer training, Juniper Advanced Policy, Juniper Advanced MPLS, CCNA Protocols 56k-OC192 circuits, 802.3 (Ethernet), 802.11b (Wireless Ethernet), 802.1Q, ISL, MPLS, RSVP, ATM, POS, Frame Relay, PPP, HDLC, Sonet, L2TP, GRE, IP, TCP, UDP, ARP, RARP, RIP, OSPF, EIGRP, IS-IS, SNMP, HSRP, VRRP, BGP 4(EBGP/IBGP/Confederated/Route Reflectors) Network Hardware Alteon load balancers, Arbor Peakflow CP, Cascade BSTDX-9000 Frame-Relay switches, Cisco ACE load balancers, Cisco routers from the 800 series to the GSR series, Cisco Catalyst switches from the 2900 to 6500 series, Foundry Server Iron load balancers, Juniper Routers including entire M series, J series, and MX series, Lucent CBX-500 ATM switches, Marconi/Fore ASX-200, ASX-1000, ASX-4000 ATM switches, NetScaler load balancers, Netscreen firewalls, Packeteer PacketShapers Languages C, Expect, HTML, Java, Perl, PHP, SQL, Unix Shell Scripting Operating Systems Linux, Windows, Solaris, BSD, AIX Education 1997-2000 Rochester Institute of Technology Rochester, NY Pursued B.S. in Computer Science with concentrations in Data Communications and Telecommunications 1993-1997 Scranton Preparatory School Scranton, PA