David Maas Email & Phone Number

Oswego, Il, Us

Baltimore, Md, Us

• Serve as a technical Principal coordinator/project lead and contributor with cross-functional teams for the design, deployment, and support of the security infrastructure solutions, including Firewall, DLP, endpoint security, and email.• Provide team leadership of a small team of engineers to ensure company goals are met in a timely manner.• Deploy and support security applications, hardware, and infrastructure components to protect the security of CareFirst information, including PCI, HIPPA, and FedRamp compliance.• Primary on the design, implementation, and maintain Palo Alto Networks Next-Generation firewall infrastructure along with administration of firewall environment to include app_id, user_id, Advanced Threat, URL filtering, SSL decryption, Global Protect, and VPN Gateways throughout the enterprise to include various cloud platforms, Azure, and AWS.• Architected and deployed the Palo Alto Prisma Access (panorama-managed) solution for remote access for both associates and Business to Business connectivity. Migrated and supported the transition of remote access to Palo Alto Prisma Access, for all remote associates and remote clients and partner connectivity.• Partnered with internal Cloud Teams for migration of applications to several cloud platforms ensuring that cloud security meets the corporate security posture within Azure, AWS, and O365 cloud environments.• Provided support of Palo Alto infrastructure with configuring, designing, and troubleshooting security policies, NAT policies, routing, and failover mechanisms on with panorama and various models of firewalls from PA-820-PA-5400 series.• Perform periodic compliance reviews of firewall configurations and various security tools.• Work with the network team to provide security support with VeloCloud SD-WAN deployment to ensure the proper security controls are in line with the VeloCloud environment.

Conway, Arkansas, Us

• Participated with other Architects to finalize the design, implementation and operational support of new and existing firewall deployments and projects related to the modification of existing infrastructure and migrations.• Directed a team of 10 engineers as Team Lead with the migration of Checkpoint firewalls to Palo Alto and FortiGate Firewalls.• Applied Next Generation technology to enhance protection and control of internal and external traffic using, Palo Alto and Fortinet firewalls, App_ID, Threat Security profiles, global protect, and URL filtering, leveraging new NGN environment.• Designed and performed Migration of Cisco Sourcefire IDS/IPS solution to FortiGate and Palo Alto solutions, saving over 750K of yearly costs.• Acted as SME for day-to-day operational support of Checkpoint, Palo Alto, Juniper/Netscreen and FortiGate, firewalls using Panorama, FortiManager, FortiAnalyzer, and Smart Dashboard along with Cisco Meraki SDN Devices.• Lead Architecture. and managed validation of firewall requests and implemented firewall policies using FireMon/Tufin/AlgoSec Security solutions to ensure proper security across policies.• Implemented integration between Service-Now ticketing system with Algsoec Firewall Analysis solution, Incorporating automation for firewall rule assessment and implementation for Palo Alto and FortiGate Firewalls.• Provided design, architecture, evaluation, and implementation of security products related to the firewall, proxy, IDS/IPS, and other related security infrastructure.• Assisted with implementation of Meraki Devices between remote offices and headquarters using SD-WAN replacing MPLS, saving yearly costs.• Designed, begun to implement a Zero-trust architecture for internal network separation using Illumio solution for lateral movement.

Conway, Arkansas, Us

Conway, Arkansas, Us

Dodgeville, Wi, Us

• Responsible for architectural design, implementation, and operational support of Juniper SRX Firewalls, Palo Alto Firewalls, Cisco ASA Firewalls, Akamai WAF, Imperva WAF, Junos Space and Palo Alto Panorama Firewall Management.• Provide management of SourceFire 3D Intrusion Prevention systems thru out the enterprise infrastructure.• Part of Team that identified and remediated Bot detection, using existing resources such as Imperva and Akamai WAF for protection of the corporate web applications.• Manage, deployed and provided operational support of Arbor Pravail DDoS appliances?• Provide architectural design, implementation, and support of RSA Data Loss Prevention suite within the Enterprise.• Maintain Enterprise log management using RSA Envision SIEM for detection of potential threats. Analyze events and make recommendations to management, and mitigate discovered threats.• Assist Threat Management for the enterprise by performing vulnerability assessments, accessing risks, investigated incidents, from emerging security issues providing mitigation and forensic analysis, with tools such as Nessus.• As part of a team performed quarterly firewall policy audits using available tools, and manually to meet companies audit compliance requirements.• Part of a team that provides development of security strategies, roadmaps, and architecture standards and operation procedures.

Columbia, Md, Us

• Responsible for architecting various security solutions, deployments, and operation support of Juniper Netscreen/SRX Firewalls, Netscreen Security Manager, Checkpoint NG/NGX and Palo Alto firewalls.• Responsible for architecting solutions, implementation, and operational support of enterprise IPS/IDS systems including HP/TippingPoint IPS, Juniper IDP, Checkpoint IPS and Sourcefire 3D, and Palo Alto Threat. • Provided Threat Management for the enterprise by developing and performing vulnerability plans, assessments, accessing risks, investigating incidents, and remediation from emerging security issues to ensure compliance during auditing periods, with tools such as Nessus, Beyond Security, Nexpose, and Metasploit• Implement and maintain various Juniper VPN solutions (IPSEC/SSL) for clients & associates.• Implemented and maintain log management using ArcSight SIEM, Juniper STRM, Cisco MARS to detect threats and potential risks.• Responsible for architectural design, deployment, and operations of Cisco, and Bradford Networks, Network Admission Control (NAC).• Implemented, and administer Bluecoat Web Content filtering Proxy for all locations.• Designed and implemented various end-point security solutions such as Tripwire, Pointsec encryption, and application whitelisting from Bit9.• Designed, implemented and provide operational support of Symantec/Vontu Enterprise Data Loss Prevention solution to protect corporate confidential data.• Lead the development of security strategies, security roadmaps, architecture standards and operational procedures.• Performed evaluation, prioritizing, recommended various security technology for management to assist with budgeting, purchasing thought the year.• Performed quarterly firewall policy audits using available tools, and manually to meet companies audit compliance requirements.• Developed various SOP’s, training, guides to help with mentoring of junior staff for day-to-day security operation tasks.

Baltimore, Maryland, Us

• Responsible for architecting solutions, deployment, and day-to-day support of Network Security Infrastructure of multi-layered defense devices, to include Checkpoint//Nokia/Juniper SSG firewalls, Netscreen Security Manager, Tipping Point IPS, Bluecoat proxies, email encryption, VPN, SSL VPN, vulnerability systems, SEM, anti-virus, and SNMP monitoring.• Perform vulnerability assessments, access risks, investigated incidents, from emerging security issues providing mitigation and forensic analysis.• Provides Security consulting services to various groups in order to review hardware/software architectures for potential risks, as well as develop solutions for new projects. Work with Business and IT groups to ensure project goals and deadlines are met without introducing risk into the environment.• Provided test, development, deployment, and research in support of hardware/software of the security infrastructure.• Perform troubleshooting of TCP/IP connectivity through security devices by performing network traces, tcdumps, snoop, analyzing data and implementing resolutions.• Implemented and maintained log management using Arcsight SEM to detect threats or potential issues. Analyzed data from these events to make recommendation to all levels of management, and to mitigate discovered threats.• Implement and maintain various VPN solutions for vendors, clients & associates.• Assisted in the design, implementation, and maintenance of controls, procedures, and policies to ensure confidentiality of electronic systems.• Responsible for design and migration to Juniper Netscreen SSG500 series firewalls from Nokia/Checkpoint.• Deployed NSM (Network Security Manager) for management of Netscreen firewalls.• Responsible for deployment and management of approx. 35 NS-5GT firewalls for remote telecommuters

Washington, Dc, Us

Chicago, Il, Us

Arlington, Virginia, Us