• Building Palo Alto Prisma Access SASE proof-of-concept in AWS then designing production pilot• Conducting WAF/WAAP analysis and evaluation for enterprise deployment• Managing migration of over 60 applications from Barracuda WAF to Akamai Kona Site Defender• Deploying Netskope proof-of-concept in AWS for SASE/CASB/Zero Trust implementation• Performing security audits of new applications and developing DevSecOps standards

• Performing internal penetration tests and security perimeter assessments• Auditing security configurations and firewall rule sets (Cisco & Palo Alto)• Serving as project manager and technical expert for a global, redundant, mesh network upgrade

• Managing enterprise conversion from legacy Cisco ACS to ISE 802.1x authentication• Designing nationwide Meraki VPN hub and spoke model upgrad• Leading Cisco network hardware refresh program to replace EOL devices• Facilitating legal entity consolidation and support model restructuring• Supporting BT Turret (phone) implementation for high frequency traders

• Rearchitecting the enterprise network into a resilient, highly available, and scalable design• Designing and implementing an enterprise multicast solution to deliver IPTV and private content• Developing and configuring a global out-of-band access solution to provide access in emergencies• Designing and implementing an enterprise AAA architecture leveraging Windows AD and RADIUS• Administering all Palo Alto firewalls with multiple ingress & egress points, DMZs, and Extranets• Managing on premise Palo Alto Panorama and Wildfire appliances• Developing enterprise network standards and generating a documentation library o Formalizing sitecodes and naming standards by location and device type o Re-IP’ing randomly allocated private addressing into a summarizable hierarchy o Standardizing VLAN numbering across all sites for identical functions o Contributing to early cloud pilot programs (AWS, Azure, Microsoft Online)• Administering Cisco Unified Communications system o Voice: Call Manager, Unity, Emergency Responder, Attendant Console o Video: Expressway Core, Expressway Edge, Meeting Server o Third party: IP Trade (now BT) turrets and backend infrastructure• Overseeing global DNS tables, both internal and external o Augmenting DNS security with SPF records and performance with geo-based records• Administering Solarwinds monitoring and alerting system

• Performing security audits of newly acquired companies in cooperation with Infosec• Designing custom networks based on proven standards and best practices• U.S. Patent pending for recent network design called C-Bridge• Leveraging C-Bridge design will save Cisco over $10m per year in productivity gains• Supervising junior team members, consultants, and partners • Delivering training sessions on new technologies and custom designs• Providing escalation support for network implementations• Administering DNS transitions for acquired entities and serving as a subject matter expert (SME)• Implementing legal and technical transfers• Managing complex DNS infrastructures (subdomains, DNSSEC, authorizations, etc.)• Mentoring and training new team members• Overseeing Cisco’s IPv4 & IPv6 address allocations• Establishing policies and designing hierarchical summarization• Instituting address remediation and reclamation programs as needed• Managing network integration of 21 Cisco acquisitions and 1 divestureTeam Lead (2009-2011)• Overseeing all network implementations spanning Cisco’s 380+ locations in 165+ countries• Co-managing Cisco’s outsourced implementation partners• Negotiating contract terms and pricing details• Supervising junior team members and overseeing team initiatives• Leading weekly meetings and training sessions for team membersTeam Lead (2003-2009)• Supporting 3300+ network devices at 110+ locations in the Americas• Defining global standards to increase productivity & consistency• Reviewing designs and proposals from other engineers• Leading global wireless team as a subject matter expert (SME)• Supporting 6 alpha programs developing cutting edge technologies• Managing network integration of 5 acquisitionsNetwork Engineer (2001-2003)• Supporting region of 70+ sites across Canada and eastern US• Providing 7x24 support for the entire region on a rotational basis• Performing network security audits (incl. wireless)

• Implementing customers’ network infrastructures and off-site server farms• Configuring front-end (Cisco) routers and switches• Developing (Cisco) PIX firewall security solutions• Creating secure remote access (VPN, SSH) and out-of-band (console) solutions• Building Solaris-, Linux-, and Windows NT-based servers• Installing and configuring corporate DNS systems• Troubleshooting “network down” emergencies• Performing network infrastructure security audits