Objective 1
1. Create a network infrastructure design communications document that includes identified hardware components, connections to outside world, identified physical layer connectivity (media) and addressing, including operational and security components in the design.
Project 1 - BusterBlock Inc. Network Consultant Project
Summary -
The BusterBlock Inc. Network Consultant Project aimed to enhance the physical security and network protection of a small call center that was experiencing security breaches and equipment theft. The project involved conducting a risk assessment and developing a risk matrix, which identified critical vulnerabilities, including a lack of surveillance, absence of access control, and unsecured network infrastructure.​
Why This Project Meets Objective 1 -
To address these risks, the project proposed a new layout for physical security that incorporates surveillance cameras (Genetec Omnicast), a badge-based access control system (Genetec Clear ID), and 24/7 on-site security provided by Securitas. Additionally, the project referenced NIST security guidelines to ensure compliance with industry standards.​ These elements align with Objective 1, as the project incorporates hardware identification, integrates physical security into the network infrastructure, and considers operational security to enhance overall system protection.
Project 2 - Server Infrastructure Plan - Mid Size Business
Summary -
In the Server Infrastructure Plan for a Mid-Sized Business, I designed a hybrid network architecture that combines both on-premises and cloud-based services to meet HealthCo's operational needs. This includes file storage, email, web hosting, and database management. The design features a Dell PowerEdge R6615 rack server configured to manage Active Directory services on-premises, in conjunction with various AWS services. These services include Amazon S3 for scalable file storage, Amazon SES for secure email communication, Amazon EC2 with Elastic Load Balancing for web hosting, and Amazon RDS for reliable database management. The infrastructure emphasizes scalability, redundancy, and security. It incorporates encryption, multi-factor authentication, role-based access controls, RAID configurations, and disaster recovery solutions.
Why This Project Meets Objective 1 -
This project aligns directly with Objective 1 by thoroughly documenting hardware specifications, network topology, connectivity (via AWS Direct Connect), redundancy strategies, and security mechanisms. Additionally, it provides a detailed infrastructure diagram that visually communicates the complete network design.
Project 3 - Network Design Evaluation - Final Project
Summary -
The Small Office Network Upgrade and AWS Integration Project built upon an existing office network to enhance scalability, security, and cloud integration. The project involved significant hardware upgrades, such as replacing the current switches with Cisco Catalyst 9400 series modular switches, which support 10Gbps uplinks for future expansion. ​​Security was improved through the implementation of a Zero Trust Architecture (ZTA). This included integrating AWS Identity and Access Management (IAM), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Endpoint Detection and Response (using CrowdStrike Falcon) to protect both on-premises and cloud resources. Redundancy was enhanced with dual ISP connections and automatic failover capabilities, ensuring 99.99% uptime. The project also introduced AWS Cloud WAN, Amazon EC2 for medical applications, and Amazon RDS for storing Electronic Health Records (EHR) while maintaining HIPAA compliance.
Why This Project Meets Objective 1 -
These upgrades align with Objective 1 by detailing the hardware specifications, external network connections, security measures, and operational resilience strategies required to create a robust and future-proof infrastructure. This project also applies scalability, security, and operational resilience while incorporating industry best practices for hybrid cloud and on-premises networking.