Nathan D. Email & Phone Number

Executed an in-depth audit of Cisco firewall policies, objects, and configurations, ensuring a seamless migration to Palo Alto Networks firewalls. Transitioned from a monolithic firewall strategy to a tiered, micro-segmented architecture, optimizing firewall configurations for distinct operational layers (perimeter, departmental, application, data center, endpoint protection, etc.). This strategic shift fortified network security, mitigated attack surfaces, and improved resource allocation, resulting in enhanced operational efficiency and substantial cost reductions.Authored a detailed Standard Operating Procedure for Palo Alto firewall configurations, establishing a centralized, authoritative source of truth for network maintenance and compliance. This rigorous documentation framework streamlined audit readiness, ensured consistent compliance, and reduced operational and regulatory costs, driving a strong ROI through continuous operational improvement and risk mitigation.Systematically assessed and validated the effectiveness of Palo Alto firewall rules by analyzing traffic patterns, monitoring rule performance, and optimizing configurations to ensure robust security controls, enhanced threat detection, and compliance with industry standards.Spearheaded the design and deployment of a Zero Trust security model, integrating robust security controls across all layers of the network. This architecture included perimeter defenses, granular internal segmentation, and application-level safeguards, significantly reducing the attack surface and enhancing the organization's overall security posture.Developed and rigorously implemented micro-segmentation strategies to control access to resources, assets, and privileges, ensuring full compliance and securing all aspects of company information within the network.

Chicago, Illinois, Us

Managed end-to-end configuration, deployment, and ongoing maintenance of 600+ Avaya and Cisco networking devices; optimized routers, switches, and wireless controllers to ensure high-performing network connectivity, supporting 2,000 end users with uninterrupted service.Maintained a 95% SLA success rate for all incidents, tickets and network fixes demonstrating the adaptive customer-facing leadership engagement essential to collective organizational success.Overseer for the strategic deployment and continuous upkeep of diverse Fortinet security solutions, overseeing 20+ FortiGate firewalls and FortiAnalyzer; fine-tuned configurations for FortiGate models like 1500D and 100E to heighten network cybersecurity measures and enhance traffic filtering efficiency.Controlled the configuration and maintenance of Fortinet's comprehensive security ecosystem, leveraging FortiManager and FortiAnalyzer to orchestrate network-wide policies and conduct in-depth threat analysis.Deployed and fine-tuned APIC within Cisco's Application Centric Infrastructure, enhancing network efficiency and scalability to align with evolving business needs. Took charge of implementing the CISCO Secure Network Server 3600, fortifying access control measures and authentication protocols. Leveraged NetFlow to detect, monitor, and analyze network traffic across international SDWAN, WAN, LAN, and wireless environments, ensuring network stability and continuous connectivity. Utilized NetFlow data to generate detailed reports that identified traffic patterns, potential bottlenecks, and security anomalies. This proactive monitoring enabled the timely diversion of traffic to maintain uptime and prevent critical network issues. Utilized NetFlow’s granular visibility to troubleshoot and fine-tune network performance, resulting in optimized configurations that addressed identified vulnerabilities and improved overall network efficiency across global sites.

Zurich, Zurich, Ch

Led an engineering team to develop containerized micro-segmentation services for Whole Foods Market and AWS multi-tenant systems. Implemented real-time traffic visibility, optimizing allow-list rules, and reducing unauthorized connection attempts by 99%. Applied advanced threat modeling to design and deploy custom Zero Trust controls, curtailing unauthorized traffic by 77%.Completed the software development lifecycle from requirement clarification to deployment, achieving a 110% ROI, reducing the network blast radius by 66%, and decreasing downtime costs by $6.3 million within 8 months. Collaborated with Product Management and application owners to refine product goals, cutting integration timelines by 35%.Streamlined the deployment of Illumio’s Policy Core Engine (PCE), exceeding project deadlines by three months, leveraging telemetry insights to accelerate integration by six months and reducing expenses by 47%. Enhanced security by eliminating 90% of the attack surface for east-west traffic, improving application flexibility and security policy enforcement.Successfully integrated Kerberos service principal names into Illumio Core for over 2,000 workloads, enforcing segmentation rules to protect the system from threats. Led the integration of ServiceNow, managing 150 change management cycles and cataloging over 2,000 configuration items across environments, ensuring continuity and asset change management.Deployed Illumio micro-segmentation to secure Layer 7 network traffic for critical assets, including POS systems and HR services, under a Zero Trust framework. Integrated this solution into a hybrid environment with AWS EC2, ensuring fluid connectivity and robust protection across SDWAN, WAN, LAN, and wireless networks within a comprehensive security framework.

San Diego, Ca, Us

Served as the liaison for a 30-member elite engineering team and government stakeholders, overseeing C5ISR programs for critical U.S. military operations. Spearheaded initiatives that boosted mission success rates by 30%, reduced response times by 40%, and enhanced operational efficiency by 25%.Led cross-platform training as NetOps floor lead, fostering collaboration across 100+ sites on 6 continents. Directed the configuration, security, and monitoring of 400+ manned aircraft platform network kits, including HAIPE devices, Cisco routers, switches, and firewalls.Drove the development of 30+ novel network functionalities for airborne systems, optimizing UAV, AI, and GMTI capabilities. Ensured compliance with DISA STIG standards, enhancing network security posture and meeting evolving stakeholder requirements.Expanded the company’s enterprise footprint by 50% in four years, establishing 18 new international sites and integrating 2 other government agency capabilities. Utilized SolarWinds to manage 100+ devices across 20+ sites, leveraging its reporting tools to maintain network health and minimize downtime.Adopted an Out-of-Band Management (OOBM) solution, reducing personnel needs by 95% and cutting costs while improving network security and scalability. Activated 100+ MPLS Layer 3 VPN Cloud networks for multi-homed connectivity, and integrated 250+ Cisco, ViaSat, and L3 Harris nodes into SOCOM’s system enclaves.Demonstrated comprehensive proficiency in protocols like BGP, OSPF, MPLS, and technologies including Cisco ASR, ASA firewalls, NX-OS platforms, and ViaSat encryption devices. Engineered a high-availability network resilience framework, configuring stacked Firewalls, Cisco Routers, Switches, and VRF management to ensure continuity and failover for ISP circuits and tunnels.

San Jose, Ca, Us

VTIP is a pipeline for transitioning service members and veterans that provides the skills required for an entry-level Cisco Services engineer role. Completed a 20-week immersive developmental program focused on honing technical and consultative expertise through hands on training and skill development.

Arlington, Virginia, Us

Spearheaded the planning and execution of cryptographic Communication Security (COMSEC) Out-Of-Band-Key-Transfers, ensuring secure re-keying of crypto encryption devices across multiple networks. Maintained meticulous documentation and communication with the National Security Agency (NSA), significantly enhancing security posture and mitigating the risk of cyber attacks across all operational theaters.Led the comprehensive management of all COMSEC crypto materials, including the ordering, distribution, accounting, and destruction processes for VOIP, data, and video encryption. Provided secure communication support for over 100 deployed soldiers across South America, Asia, and Africa, ensuring continuous safeguarding of classified information in compliance.Secured and managed contracts totaling over $650,000 for critical communication infrastructure, including cable, cellular devices, and other communication terminals. Successfully navigated these contracts through their entire lifecycle, from initial creation and business requests to change management and complete lifecycle replacement, ensuring all contractual obligations were met efficiently and effectively.Established and maintained rigorous auditing platforms to ensure that all contracts and communication terminals adhered to Defense Information Systems Agency (DISA) policies, Department of Defense (DoD) protocols, United States Special Operations policies, and COBIT frameworks. This initiative ensured the highest levels of security, compliance, and operational efficiency across all contracts and communication terminals.Acted as the primary liaison between the 8th Psychological Operations Group and various stakeholders, including military leadership and government agencies. Facilitated clear communication and coordination in the implementation of cryptographic and communication security measures, ensuring that all operations were aligned with strategic objectives and security requirements.

Arlington, Virginia, Us

• 8th Psychological Operations Group (Airborne), 1st Special Forces Command (Airborne)• DoD 8570.1 Compliant IAT Level I, TS/SCI• Network manager responsible for all Active Directory network maintenance of over 500+ user profiles, share drives, government issued phones, in-processing, read-write privileges as well as authorization to view information based on clearance.• Designed, documented installed, tested and managed unconventional LAN/WAN network terminals for Special Operations elements. Implemented security practices into satellite and radio based local area and wide area networks (LAN/WAN) via the use of ACLs, encryption devices, VPNs and host based intrusion detection systems. Provided detailed documentation for all communication changes for knowledge management and team continuity. • S-6 networking subject matter responsible for ensuring consistent network communication for 30+ deployed teams consisting of 150+ personnel located in South America, Asia and the Middle East. Worked with teams to identify communication issues in the LAN/WAN, issues with Secret travel kits (VPN capability over public IP infrastructure), SAT phones, radios and radios. Evaluated cut sheets for deficiencies and worked through network issues for deployed personnel by evaluating layer 1 through 7 of the OSI model to ensure proper operational steps were taken to ensure connectivity. • Performed problem isolation, troubleshooting and resolution of network problems while devising and documenting effective solutions. Ensured that local and deployed personnel were provided the necessary networking assistance to maintain LAN connectivity and account compliance.

Arlington, Virginia, Us

• 1/10th Special Forces Group (Airborne), SOCEUR• DoD 8570.1 Compliant IAT Level I, Secret Clearance• Monitored and conducted troubleshooting techniques on various Cisco routers, switches and IP phones inside of Special Operations Command (SOCOM) Wide Area Network (WAN) in support of Operation Enduring Freedom (Afghanistan and Iraq) and Operation Atlantic Resolve (Europe).• Network administrator responsible for the in-processing of over 700+ unit personnel. Maintained all user accounts in Active Directory and was responsible for all access control mechanisms on a user’s profile based on section, clearance level and position.• Configured 200+ laptops 40+ Cisco routers and switches classified as Unclassified, Secret, Top Secret, and Centrix. Configured all routers and switches with VLAN configurations, VOIP, access control lists (ACLs), dynamic network address translation (NAT) configuration, firewalls, IPSec and VPN access. Served as subject matter expert communicator for 40+ Joint Combined Exchange Training (JCET) while deploying with SOF deployable node (satellite) and network equipment to provide networks to over 80+ people across multiple inter-agency organizations in each location across.• Led the migration of over 700+ personnel accounts from Microsoft 2010 to Microsoft 2013 in conjunction with the migration from Department of Defense Enterprise Email to a newly created Special Operations Command (SOCOM) domain without delay to daily operations.• Responsible for the training and deployment readiness of all Special Forces team’s communication personnel prior to deployment. Set up all Satellite nodes prior to deployment for testing, troubleshooting and network configuration to allow for a streamlined real time deployment when teams were in country.

Arlington, Virginia, Us

• IAT Level II. Network Engineer that managed over 200+ Active Directory user accounts across Un-classified, Secret and NATO WAN and LAN networks• Conducted systems maintenance and troubleshooting to various communication platforms to include base station configurations, computers, radios, satellite nodes, uninterruptible power supplies and Radio Frequency Identification (RFID) jammers.• Prevented the spillage of classified data by enforcing system security compliance and auditing to ensure information governance and systems security standards were met at all times. • Provided troubleshooting for software systems and system hardware on areas such as network configuration, Transmission Control Protocol (TCP) routing, IP routing, satellite signal acquisition, data path transmission and related system irregularities.• Installed Raytheon RFID jammers, installed satellite vehicle tracking systems and satellite communication devices; which combatted vehicle-borne improvised explosive devices

Houston, Texas, Us

• Implemented third party staffing and training short falls for massive recruiting needs that successfully aligned directly with client’s project plan to increase domestic and international delivery percentage from 91% to 99.7%.• Managed all scope management plans to continually move operation to a successful transition phase while also serving as the communication facilitator to customer and corporate office while phasing project to local manager.• Responsible for ensuring corporate and franchise offices were compliant with DOL, OSHA and Link hiring and training standards for all employees.• Established a scorecard model to further evaluate internal rate of return and increase companies scheduled performance index in an uncharted company establishment.• Evaluated project archives of previous projects to strategically plan roll out of vendor management systems for companies secured through RFP bids. • Initiated strategic planning development programs aimed at increasing the value of our service, our employees and our company brand name. Specialized in skilled talent and labor procurement for professional skill sets.

Houston, Texas, Us

• Project Manager for remote full-cycle recruiting and management of retail remodel projects throughout Texas and Oklahoma.• Led successful projects that allowed for further procurement processes of 20 remodel operations.• Evaluated benefit analysis through successful remote operations to further to secure national contract and expand nation-wide procurement opportunities with client for the next three years.• Operated in a strong matrix operation that maintained a 1.3 Scheduled Performance Index for project life. • Personally recruited, screened and hired over 900 staff for short and long term temporary projects.• Maintained congruent multi-city projects through effective communication skills and proactive planning to ensure all projects were finished within client and company budget and time allocations.• Utilized extensive community networking efforts for the purpose of quick deployment of staff on projects while maintaining an organized, functional and productive work atmosphere. • Utilized extensive community networking efforts for the purpose of quick deployment of staff on projects while maintaining an organized, functional and productive work atmosphere. • Process weekly payroll while maintaining all payroll and tax compliance.

English, English/Liberal Arts

Master Of Computer Applications (Mca), Cyber Security

Master Of Science - Ms, Cybersecurity