Solomon Ankrah
Chicago
Summary
Results-driven Network Engineer (CCNP, NSE 4, Security+) with over 8 years of experience designing, implementing, and managing secure enterprise and data-center networks. Adept at integrating Cisco, Fortinet, and Palo Alto technologies to deliver resilient, scalable, and high-performance infrastructure. Skilled in routing and switching, firewall configuration, hybrid cloud connectivity (AWS & Azure), VPN design, and network monitoring. Proven record of optimizing network performance, reducing incidents, and leading projects that enhance reliability and security across multi-tenant environments.
Overview
9
9
years of professional experience
1
1
Certification
Work History
Network Engineer
Minsait ACS
Atlanta
09.2024 - Current
- Designed and implemented secure, scalable network architectures supporting 250+ SCADA utility clients and 300+ VMs across 90+ VLANs in a multi-tenant data-center environment.
- Engineered the core infrastructure using Cisco Nexus 93180YC-FX3, Dell PowerEdge R660, and HP ProLiant DL380 servers running VMware ESXi, ensuring high availability, redundancy, and performance.
- Established hybrid interconnectivity between the new head office and data center via a site-to-site IPsec VPN between Palo Alto PA-450R and FortiGate 100F HA clusters: project completed successfully.
- Deployed SSL VPN on Palo Alto PA-450R integrated with a Cisco Catalyst 9200 stack, providing VLAN-based segmentation and role-driven secure access for engineering teams.
- Currently managing the primary FortiGate 100F SSL VPN supporting 300+ employees, segmented into LDAP-based user groups with certificate-based authentication.
- Built a secure Out-of-Band (OOB) management network using FortiGate 85F and FortiSwitch 124E, providing isolated VPN access for maintenance and DR operations.
- Integrated AWS Site-to-Site VPN and Direct Connect with on-prem FortiGate infrastructure for secure hybrid workflows, monitoring, and replication.
- Implemented SolarWinds for proactive performance monitoring and anomaly detection, reducing incident response time by 30%.
- Directed a successful bandwidth upgrade from 500 Mbps to 1 Gbps with zero downtime through ISP coordination and routing optimization.
- Standardized Aruba 2930F network refresh projects across SCADA environments, aligning with FortiGate HA clusters for consistent policy enforcement and high availability.
- Led the Cisco ASA — FortiGate migration, redesigning NAT and security frameworks aligned with enterprise compliance.
- Provide Tier-2/3 network support within the Network Operations Center, monitoring, investigating, and resolving incidents across multiple customer environments.
- Document all troubleshooting activities and configuration changes in Jira, ensuring SLA compliance and transparent root-cause tracking.
Network Engineer
Keurig Dr Pepper, Inc.
Atlanta
06.2021 - 08.2024
- Configured and troubleshot dynamic routing protocols including BGP, OSPF, and static routes to ensure optimal path selection and redundancy across corporate and branch networks.
- Designed, implemented, and maintained enterprise-level LAN/WAN and data-center architectures, performing VLAN segmentation, trunking, and QoS policy optimization.
- Configured and maintained Cisco routers, Catalyst switches, and FortiGate firewalls, deploying IPsec/SSL VPNs, IPS/IDS, and URL filtering to strengthen perimeter security.
- Deployed and managed FortiGate SD-WAN, improving WAN link utilization and application performance across multiple remote sites.
- Implemented Azure Site-to-Site VPNs to establish secure, reliable hybrid connectivity between on-prem infrastructure and Azure cloud services.
- Administered Aruba wireless controllers and access points, enabling 802.1x authentication, VLAN mapping, and secure SSID configurations for seamless mobility.
- Monitored Layer-2 and Layer-3 network health using SolarWinds, CLI diagnostics, and packet-level analysis to identify and resolve performance bottlenecks.
- Performed regular VLAN and ACL audits to ensure compliance with internal security policies and maintained detailed network topology documentation.
- Implemented access controls to prevent unauthorized system access and ensured systems operated in accordance with corporate security and compliance programs.
- Monitored data-center environments to ensure peak network performance and collaborated with vendors and service providers during critical outages and hardware escalations.
- Collaborated with cross-functional teams to develop and execute network strategies aligned with business objectives and industry best practices, ensuring high availability and scalability.
- Participated in change control windows and ITIL-based maintenance cycles, minimizing downtime and maintaining service continuity.
- Reduced incident frequency through proactive monitoring, preventive maintenance, and rapid troubleshooting procedures.
Network Engineer
Love World USA
Texas
03.2017 - 06.2021
- Installed, configured, and maintained client network infrastructure across multiple sites.
- Implemented and troubleshot firewall clusters and IPsec VPNs, ensuring secure and reliable communications.
- Supported and resolved VOIP and Layer-3 routing issues to maintain stable communication systems.
- Monitored performance and availability using SolarWinds, analyzing trends for preventive maintenance.
- Provided Tier-2 network support to end users, maintaining SLA adherence and detailed documentation.
- Maintained IP address databases and network diagrams for audit and capacity planning purposes.
Education
Bachelor of Arts -
University of Ghana
Accra, GH07.2007
Skills
- Routing & Switching: BGP, OSPF, EIGRP, STP, EtherChannel, HSRP, VRRP, VLANs, VTP, DHCP, DNS
- Firewalls & Security: FortiGate, Palo Alto, SSL/IPsec VPNs, SD-WAN, IDS/IPS, NAT, Access Policies
- Routers: Cisco 800,2800,2900,4300,4400, ISR1000, ASR 1001
- Switches: Cisco catalyst 9300, 9200, 6800,6500,4500,3850,3750,3560,3550, (9k,7k,3k nexus switches), Aruba 2930F
- Cloud & Virtualization: VMware ESXi, vCenter, AWS VPN/Direct Connect, Azure Site-to-Site VPN
- Monitoring & Management: SolarWinds, ServiceNow, Jira, ITIL Incident/Change Management
- Wireless & Access: WLC 9800, 8500, APs-3800, 3700, 3600, 3500, 8021x, Aruba MM, Controllers, Clear Pass, Radius Authentication, WLAN Design
- Soft Skills: Analytical Thinking, Team Leadership & Mentorship, Cross-Functional Collaboration, Technical Documentation
Certification
- CCNP-Cisco Certified Network Professsional
- CCNA-Cisco Certified Network Associate
- FORTINET NSE 1-4
- CompTIA Security+
- MICROSOFT IT CERTIFIED TROUBLESHOOTING
- NETSEC CERTIFIED IT PROFESSIONAL
Timeline
Network Engineer
Minsait ACS
09.2024 - Current
Network Engineer
Keurig Dr Pepper, Inc.
06.2021 - 08.2024
Network Engineer
Love World USA
03.2017 - 06.2021
Bachelor of Arts -
University of Ghana