Keith Crouch Email & Phone Number

London, Greater London, Gb

Technical management and ownership of Network Security infrastructure. Including ForeScout, Palo Alto and NetScaler. Development of standards, documentation and procedures. Technical SME on ForeScout NAC services.Produced architectural and standards documentation for existing ForeScout NAC estate.Performed full review of existing ForeScout NAC identifying areas for improvement specifically to address recent Infosec audit findings. Ongoing remediation of ForeScout NAC to remedy audit findings for October 2020 deadline.Development of Network Security roadmap together with Network Security peers with a view to the next 12-24 months, including review of existing services and examining potential gaps between Network Security and Infosec.

London, London, Gb

Led, designed and directed deployment team of new UK Canary Wharf Head Office and Security Operations Centre. Covering resilient WAN, LAN and Internet facing firewall infrastructure. Based on Cisco 9K switches, Palo Alto and Firepower firewalls/IPS. Built to hardened CIS standards with integrated EDR, SIEM, behavioural analytics and ForeScout NAC. Meraki WiFi, SIP telephony and localised compute and storage. Migration of European ForeScout NAC solution from v7.0.0 to v8.1.1 for international Japanese investment bank. Including deployment of new HA and clustered appliances, migration from PALM to FLEXX licensing model and development of enhanced MAC spoof detection polices.Introduced vulnerability and patch management program and policy to achieve Cyber Essentials Plus certification for the SOC.ForeScout NAC policy development and deployment for UK live TV and on demand streaming provider.Created product lifecycle Management policies. Restructure of corporate SharePoint with provisions for data governance. Development of company-wide BYOD policy.

London, London, Gb

Led Technical Architecture Board authority function. Introduced and developed Platform Engineering network and security standards. Redesigned internal UK datacentre for fully automatic network failover of customer VPN access to company services. Led restructure of data centre and 3rd party B2B network infrastructure for dynamic automated failover. Comprising of Cisco stackable switches, Firepower firewalls and Cisco ISR routers.Design and deployment of new Frankfurt campus LAN for international Japanese investment bank. Based on Cisco Catalyst VSS with high speed 10GB resilient WAN to European data centres.Physical data centre network relocation and restructuring to new location. Development and deployment of IPAM system. Deployment of endpoint EDR to replace legacy Antivirus. Introduced enhanced Capacity Planning and Management.Established Virtual Machine portability between corporate co-lo data centres including storage replication.

London, London, Gb

Design and deployment of data centre relocation project for Tier1 global investment bank customer. Based on Cisco Nexus 7K and 5K core and distribution layers. Use of NX-OS VDC, vPC, FEX and OTV. Extranet PODs based on Cisco Firepower, Palo Alto and F5 LTM. Internet facing PODs using dual resilient Tier-1 ISPs with BGP routing. Design and deployment of global 300+ site WAN network for international tobacco company. Based on hybrid of MPLS and Internet VPN. With centralised IPS and local Internet breakout including use of Zscaler web proxy.Deployment of multiple customer ForeScout NAC solutions including 100,000 IP endpoint solution for global commercial real estate and investment company.

New York, New York, Us

Accountable for architecture design, products and standards of multiple technologies and solutions. Strategic road maps, lifecycle management, automation and oversight of high profile projects. Collaboration with network operations for stability and control, incident management, capacity planning, configuration management, version control and vulnerability management.

New York, New York, Us

Global Manager of strategic data centre projects. Large inter-regional data centre migrations, expansions and data centre closures.

New York, New York, Us

Executed network separation and transitioning. From initial assessment, planning and preparation through to execution. Managed a team of 10 engineers through 25 divestiture projects to deliver within 18 months. With each project entering legal day 1 and passing through TSA period without issue.

New York, New York, Us

Produced automated inventory system to enable full global view of deployed network. Reduced design errors through development of fixed configuration templates and standards documents. Reduced product TTM through new concept of automated testing and certification of products.

New York, New York, Us

Produced many designs throughout five year period. Covering Campus LANs, Regional WANs, Firewall environments and Data Centres. Implementation and project management.

Zurich, Ch

Moved to CSFB Japan to take on duties of the Global Process department for Asia Pacific region. Global process responsibilities for capacity planning and vendor and service management. Creation and ownership of incident management process. Defined and agreed service level agreements.Responsible for the administration and upkeep of the global network monitoring tools set within the Asia Pacific region. Worked with Europe and Americas regions to develop and maintain the global process standards and procedures.

Zurich, Ch

Joined CSFB as a Network Control Centre(NCC) technician. This was a 2nd line support role for IT service operations and was my introduction to working in a financial institution. I was accountable for monitoring the EMEA network on a day to day basis, administrative control of network components, diagnose and troubleshoot technical problems, incident management and escalation processes.In March 1998 I was promoted to AVP level and assumed Network Operations Manager duties. Responsibility for maintaining functionality of the European network managing a team of network operators. I administered the network change control process and worked with engineering to ensure all changes to configuration and hardware did not impact the live network. Maintained the disaster recovery locations for London and countries throughout EMEA. Planning and participating in regular disaster recovery rehearsals.

Munich, De

SNI had a three-year contract to design and implement LAN/WAN solutions for the British Ministry of Defense. My role was team and project management and on site installations of a pre designed network based on Cisco 7500 series routers and 3COM LANplex switches. Cleared to SC level.

Dallas, Tx, Us

Provided 2nd line support for AT&T Unix and network user faults.