Mateo Velez Senior Network Administrator
McLean, VA • mateo.velez@gmail.com • +1 703-555-0148
Profile Summary
- Senior Network Administrator with 11 years of experience running multi-site corporate networks for a global hotel company and a casino resort operator, focused on switching, Wi-Fi and firewalls.
- Hands-on with switching and routing (Cisco Catalyst, OSPF), Wi-Fi (Cisco Meraki), firewalls and access control (Palo Alto Networks, Cisco ISE), WAN (Cisco Catalyst SD-WAN), DNS and DHCP (Infoblox), monitoring (SolarWinds NPM, Wireshark) and scripting (Python, Ansible), and holds the CCNP Enterprise certification.
- Deep experience in SD-WAN migrations, 802.1X rollouts, firewall rule cleanups and Wi-Fi refreshes, working through a weekly change window with nightly config backups to keep 9,000 corporate users online through peak travel season.
- Partners every week with the security team, server admins, the service desk and hotel IT leads through a change advisory board and a shared on-call rotation, from timing cutovers around hotel peak dates to explaining an outage to managers outside IT.
- Coaches junior admins on layer-by-layer troubleshooting and reading packet captures, runs the monthly firmware review, and owns the diagram and runbook set that new hires learn the network from.
Technical Skills
- Switching & Routing:
- Cisco Catalyst, Cisco Nexus, VLANs, 802.1Q trunking, Spanning Tree (RSTP), LACP, OSPF, BGP, HSRP
- Wireless:
- Cisco Meraki, Ekahau AI Pro, WPA3-Enterprise, Wi-Fi 6E, RF site surveys
- Security & Remote Access:
- Palo Alto Networks, Panorama, GlobalProtect, Cisco ISE, 802.1X, RADIUS, IPsec VPN
- WAN & SD-WAN:
- Cisco Catalyst SD-WAN, MPLS, Dedicated internet access, LTE failover, QoS
- Network Services:
- Infoblox, DNS, DHCP, IPAM, Microsoft DNS, NTP
- Monitoring & Troubleshooting:
- SolarWinds NPM, Wireshark, NetFlow, SNMPv3, Syslog, ServiceNow
- Automation & Documentation:
- Python, Ansible, Netmiko, Oxidized, Git, NetBox, Visio
Education
Work Experience
- Replaced 214 end-of-life Catalyst 3850 access switches with Catalyst 9300 stacks across 6 corporate offices, using one VLAN and trunk template with BPDU Guard and storm control on every edge port, with 0 spanning tree loops since cutover.
- Moved 38 sales and operations offices from MPLS to Cisco Catalyst SD-WAN over dual broadband with LTE backup, and cleaned up OSPF areas at the core and BGP sessions with 2 internet providers, cutting circuit spend by $410,000 a year.
- Ran 1,150 Cisco Meraki MR access points across corporate campuses, re-planned channels after Ekahau surveys and moved the staff SSID to WPA3-Enterprise on 6 GHz, raising first-try client connections from 91% to 98.6%.
- Cut the Palo Alto Networks rulebase in Panorama from 2,300 rules to 1,150 using hit counts and owner sign-off, and moved 9,000 remote users to GlobalProtect with MFA, closing every remote access finding from the last audit.
- Rolled out 802.1X with Cisco ISE on 14,000 wired and wireless ports, profiling printers, phones and badge readers into their own VLANs with MAB fallback, which brought unknown devices on the corporate network from 1,900 to 40.
- Moved DNS, DHCP and IPAM for 640 subnets off Windows servers onto an Infoblox grid with DHCP failover, reclaiming 18,000 stale addresses and cutting IP conflict tickets from 60 a month to 4.
- Rebuilt SolarWinds NPM alerting for 1,400 devices around interface errors, circuit loss and CPU, added NetFlow for traffic deep dives and ran the bridge on every P1, cutting average time to restore from 2 hours 40 minutes to 48 minutes.
- Set up nightly config backups for every switch, router and firewall with Oxidized and Git, moved site records and port maps into NetBox, and added a rollback step to each change request, raising changes closed without rollback from 88% to 99%.
- Split slot floor, point-of-sale and guest Wi-Fi traffic into separate VLANs and Palo Alto Networks security zones for PCI DSS, shrinking the number of switches in PCI scope from 410 to 96.
- Upgraded firmware on 380 Catalyst switches across the Las Vegas properties in overnight change windows with a tested rollback image, cutting the average window from 6 hours to 90 minutes.
- Mapped every IDF closet and patch panel at 11 properties in Visio, which cut the time on-call admins spent tracing a port from 40 minutes to 10 minutes.