Andrew Harris is an experienced hands-on technologist with over 8 years IT experience predominantly within the financial services sector. He has a depth of expertise within the networking sector and has a breadth of knowledge across all aspects of IT infrastructure. Andrew currently works in the Network Engineering team of a leading low latency financial service provider,
Andrew Harris is an experienced hands-on technologist with over 8 years IT experience predominantly within the financial services sector. He has a depth of expertise within the networking sector and has a breadth of knowledge across all aspects of IT infrastructure. Andrew currently works in the Network Engineering team of a leading low latency financial service provider, prior to this he headed up an IT team within a proprietary trading company with responsibility for all aspects of the infrastructure and reported directly into the CEO.
I have commercial design and operational experience with the following platforms and technology:
Cisco Nexus: 2xxx, 3064, 3548, 55xx, 7xxx
Cisco Data Centre: 4948, 4900m, 6500, ACE module
Cisco Campus: 2960, 3560, 3750, 3750x, 4500
Cisco Security: PIX, ASA, FWSM, NAM, ACS 5.x
Cisco Routers: 28xx, 29xx, 38xx, 39xx, ASR 1k, ASR 9k
Cisco Wireless: 1242APs, Wireless LAN Controllers
Arista: 712x, 7500
Juniper: MAG 2500, SSG firewall
F5: BIG IP
HP: DL320, DL380 G5-G7
Cisco UCS: C Series servers
VMWare: ESX 4, 5.1
Various CentOS and RedHat Linux flavours
Windows Server 2003,2008,2012
C, Java, Perl, BASH, Python, T-SQL programming and scripting
MS SQL, MySQL
Splunk, Nagios, rsyslog, Torrus, Netdisco
Network Engineer @ Fixnetix provides outsourced services for ultra-low latency trading, market data, hosting and infrastructure connectivity as well as risk management solutions to leading global banks, hedge funds and proprietary trading groups.
I am a member of the Network Engineering team who are responsible for the definition and maintenance of standards, evaluation of new systems and technologies and the implementation of large scale projects for global clients.
I have been involved in a number of projects including; the wholesale upgrade of the WAN network to support MPLS for better network segregation, evaluation of next generation firewall platforms for low latency applications and general threat prevention and the evaluation of NAC in the access layer to fully comply with the internal information security policy. From July 2014 to Present (1 year 6 months) Director of IT @ Goldenberg Hehmeyer LLP is a proprietary trading company based in Canary Wharf, London, They have approximately 25 staff with 12 traders. I was a hands-on technologist leading a team of three engineers who provide IT support to the whole business.
I was responsible for all aspects of the infrastructure including; the network (Cisco, Arista), servers (HP), storage (Nimble), security (Fortinet, Qualys), virtualisation (VMWare), Windows (Server 2008, Server 2012, Windows 7), Linux (Red Hat 6, CentOS 6), monitoring (Nagios, Splunk, Torrus) and the trading systems (Orc, TT, Bloomberg, Reuters, CQG). I also worked closely with developers producing code in several programming languages (Java, T-SQL, VBA, Perl, Bash).
During my tenure as Director of IT I worked on two large projects within the business; an infrastructure transformation and a complete office relocation.
The transformation project culminated in the refresh of the entire ageing and inefficient infrastructure. The project involved extensive vendor, stakeholder and budgetary management whilst under extremely tight timelines. I acted as the architectural lead for most aspects of the project, and provided oversight for areas that other team members were leading on.
This has left a fully supported, modern and high performance infrastructure, which will support the business for many years to come.
As well as working on the infrastructure renewal and office relocation projects I have been involved in several other initiatives such as; selection of ultra-low latency switches for HFT, realigning the support team to be more development focused, insourcing our accountancy software, a comprehensive overhaul of management and alerting systems and investigating possible Big Data solutions such as Hadoop. From March 2012 to July 2014 (2 years 5 months) London, United KingdomNetwork Architect @ This role was a Network Architect for EF Education First, the world leader in international education. I was responsible for all network strategy and engineering for all of EF’s business units including International Language Schools, Hult Business School and regional offices as well as the data centres which support them.
My initial project at EF was to roll out 10 gigabit unified Ethernet and Fibre Channel in their main data centre to support the rapid growth in servers. I have also been working on projects to improve the performance of the wireless in schools, migrate away from point-to-point IPSec VPNs and ratification of new router standards.
As well as my main projects I have been mentoring the network support team to ensure they are providing the service that is required of them, and they have the resources to do their job properly. This includes visiting the NOC in India and looking into improved network monitoring tools.
I have also been working closely with suppliers to ensure we build up a strategic relationship to ensure the best technology is chosen to meet our needs. This includes incumbent providers and new niche providers. From July 2011 to April 2012 (10 months) London, United KingdomNetwork Engineer @ In this role I was working in the Network Projects team within Barclays Capital. I had been working on a number of projects all of which have involved the full project lifecycle such as gathering requirements, engineering solutions, liaising with suppliers and managing multiple commitments at once. I was responsible for the deployment of new infrastructure in three offices in the UK and one in Abu Dhabi. I was also responsible for the migration of e-commerce switches to a new platform and migrating market data feeds onto new infrastructure. From January 2011 to July 2011 (7 months) Network Engineer @ My first role at BSkyB was to act as a technical authority for all aspects of the network in relation to an upcoming PCI audit. This involved analysing all network devices that would be considered ‘in-scope’ and ensuring they are ready to be compliant. This involved locking down systems, installing and configuring firewalls and designing a new IDS solution. I also had to produce extensive documentation of all PCI compliant parts of the network so the audit can be completed successfully.
My second role at BSkyB was to design and implement a solution to provide F5 load balancing to the Sky Player product. This included physical patching and installation, configuration of switches, firewalls and load balancers and finally detailed testing with the Sky Player team to ensure the system is fully functioning. From August 2010 to February 2011 (7 months) Network Architect @ This project was to design and implement and Internet based SSL VPN solution to allow offshore development engineers access to virtual desktops within the esure infrastructure. The chosen SSL VPN platform was a Juniper appliance and security was provided by RSA SecurID two-factor authentication. I worked very closely with a Citrix expert to ensure that the solution was as secure, performed as well and was as easy to use as the current MPLS based solution. I provided extensive documentation and training to the offshore engineers and esure staff. From May 2010 to September 2010 (5 months) Network Engineer @ As part of an engagement directly with Cisco I was involved in a team testing Tesco Bank’s new data centre network centred on the Nexus 7000 switches. Initially I was going to be in a test support role, but the test lead was unable to travel so I assumed the role of test lead. The testing was designated Network Ready For Use (NRFU) and ranged from basic functional checks such as correct OS versions to routing verification and more advanced features such as vPC. During testing I was able to identify some minor and one major issue that was rectified to the client’s satisfaction. From April 2010 to June 2010 (3 months) Network Engineer @ In this project I was responsible for the deployment of a new Internet POP for Man Investments. Initially this involved analysing the current POP and replicating it for a new data centre, whilst ensuring that all the relevant IP addresses, names and configurations were changed accordingly. The next phase was to supervise the deployment of equipment and cabling within the data centre. The final phase was the configuration and integration of the new POP into the current network, ensuring all change management and testing procedures were followed. From February 2010 to April 2010 (3 months) Network Engineer @ In this short project I was responsible for the high and detailed level design for connecting two polyclinics together over a VPLS Metro Ethernet network. There was also a requirement to add 400 additional network points at each site, so I was required to make decisions on choice of equipment and quantity. The network included some basic OSPF routing, firewalling and connections into the NHS N3 network for backwards compatibility. From January 2010 to February 2010 (2 months) Network Engineer @ In this role I was solely responsible for the full design, implementation and testing of a new VTB Capital office in Singapore. This included a range of areas such as BGP, MPLS, core routing, security, remote access and market data feeds. The design stage required full analysis of all the requirements such as number of users, services required and interaction with the corporate network. This was then transposed into low-level designs and documentation.
The implementation stage required close contact with the 3rd party vendors in Singapore and London. I spent 10 days onsite configuring all the relevant equipment such that it could be administered remotely. Complete network testing was carried out to ensure that the network is fully resilient and behaves in the expected manor. Test cases included redundant link failures, device failures, verifying BGP routing, market data feed testing and network performance testing. From November 2009 to January 2010 (3 months) Network Engineer @ In this role I was a Senior Network Support Engineer based at BSkyB in West London. My team was responsible for all aspects of network support within the Sky corporate network. This includes the campus network, security devices such as VPNs and firewalls, website load balancers and the WAN to other offices.
In addition to my regular duties, as a senior engineer I was responsible for providing escalation support to the other engineers both during the day and in an on-call scenario. I also spent a portion of my time working on proactive support issues such as ensuring all configurations meet current security standards, verifying future software upgrade paths and working with design and implementation teams on major network upgrades. From November 2008 to December 2009 (1 year 2 months) Network Engineer @ In my previous role I was working on Cisco TrustSec (CTS) technologies. I was responsible for system testing this new suite of security enhancements on the Catalyst 6500 and Nexus 7000 switches. This role included test plan preparation and validation, lab design and build, test execution and working with development engineers to identify and resolves bugs. As well as being exposed to TrustSec I built up a good knowledge of the underlying AAA security architecture, including protocols such as EAP-FAST and RADIUS.
As part of this project I spent 4 months working in San Jose, California with CTS development engineers, to assist in initial testing and gather knowledge to pass onto my team in the UK.
Prior to this I was working on the Data Centre Assurance Program with the Network System Integration and Test Engineering group at Cisco. The DCAP program involves the system testing of large scale Data Centre networks. These networks are based around the Catalyst 6500 switches as well as their associated network modules. From June 2007 to November 2008 (1 year 6 months) Intern @ As part of my undergraduate degree I was able to complete a year long placement scheme at Cisco Systems in Reading, working in the Networked Solutions Integration and Test Engineering department.
My main role was verification and interoperability testing of 3rd Party applications with Cisco Unified CallManager. This included verifying the product’ s suitability for testing by ensuring the correct documentation had been provided, writing a test plan, conducting testing and writing an end of test report. I also spent a significant amount of time working on a separate project involving Mobile IP. From July 2005 to September 2006 (1 year 3 months)
BEng, Network Engineering @ University of Portsmouth From 2003 to 2007 Cisco Training Andrew Harris is skilled in: Cisco Technologies, Networking, Firewalls, Routing, Switches, BGP, VPN, Security, MPLS, Infrastructure, CCNP, Juniper
Looking for a different
Get an email address for anyone on LinkedIn with the ContactOut Chrome extension