David Maas Email & Phone Number

Oswego, IL, US

Baltimore, MD, US

• Serve as a technical Principal coordinator/project lead and contributor with cross-functional teams for the design, deployment, and support of the security infrastructure solutions, including Firewall, DLP, endpoint.
• Provide team leadership of a small team of engineers to ensure company goals are met in a timely manner.
• Deploy and support security applications, hardware, and infrastructure components to protect the security of CareFirst information, including PCI, HIPPA, and FedRamp compliance.
• Primary on the design, implementation, and maintain Palo Alto Networks Next-Generation firewall infrastructure along with administration of firewall environment to include app_id, user_id, Advanced Threat, URL.
• Architected and deployed the Palo Alto Prisma Access (panorama-managed) solution for remote access for both associates and Business to Business connectivity. Migrated and supported the transition of remote access to.
• Partnered with internal Cloud Teams for migration of applications to several cloud platforms ensuring that cloud security meets the corporate security posture within Azure, AWS, and O365 cloud environments.

Conway, Arkansas, US

• Participated with other Architects to finalize the design, implementation and operational support of new and existing firewall deployments and projects related to the modification of existing infrastructure and.
• Directed a team of 10 engineers as Team Lead with the migration of Checkpoint firewalls to Palo Alto and FortiGate Firewalls.
• Applied Next Generation technology to enhance protection and control of internal and external traffic using, Palo Alto and Fortinet firewalls, App_ID, Threat Security profiles, global protect, and URL filtering.
• Designed and performed Migration of Cisco Sourcefire IDS/IPS solution to FortiGate and Palo Alto solutions, saving over 750K of yearly costs.
• Acted as SME for day-to-day operational support of Checkpoint, Palo Alto, Juniper/Netscreen and FortiGate, firewalls using Panorama, FortiManager, FortiAnalyzer, and Smart Dashboard along with Cisco Meraki SDN Devices.
• Lead Architecture. and managed validation of firewall requests and implemented firewall policies using FireMon/Tufin/AlgoSec Security solutions to ensure proper security across policies.

Conway, Arkansas, US

Conway, Arkansas, US

Dodgeville, WI, US

• Responsible for architectural design, implementation, and operational support of Juniper SRX Firewalls, Palo Alto Firewalls, Cisco ASA Firewalls, Akamai WAF, Imperva WAF, Junos Space and Palo Alto Panorama Firewall.
• Provide management of SourceFire 3D Intrusion Prevention systems thru out the enterprise infrastructure.
• Part of Team that identified and remediated Bot detection, using existing resources such as Imperva and Akamai WAF for protection of the corporate web applications.
• Manage, deployed and provided operational support of Arbor Pravail DDoS appliances?
• Provide architectural design, implementation, and support of RSA Data Loss Prevention suite within the Enterprise.
• Maintain Enterprise log management using RSA Envision SIEM for detection of potential threats. Analyze events and make recommendations to management, and mitigate discovered threats.

Columbia, MD, US

• Responsible for architecting various security solutions, deployments, and operation support of Juniper Netscreen/SRX Firewalls, Netscreen Security Manager, Checkpoint NG/NGX and Palo Alto firewalls.
• Responsible for architecting solutions, implementation, and operational support of enterprise IPS/IDS systems including HP/TippingPoint IPS, Juniper IDP, Checkpoint IPS and Sourcefire 3D, and Palo Alto Threat.
• Provided Threat Management for the enterprise by developing and performing vulnerability plans, assessments, accessing risks, investigating incidents, and remediation from emerging security issues to ensure compliance.
• Implement and maintain various Juniper VPN solutions (IPSEC/SSL) for clients & associates.
• Implemented and maintain log management using ArcSight SIEM, Juniper STRM, Cisco MARS to detect threats and potential risks.
• Responsible for architectural design, deployment, and operations of Cisco, and Bradford Networks, Network Admission Control (NAC).

Baltimore, Maryland, US

• Responsible for architecting solutions, deployment, and day-to-day support of Network Security Infrastructure of multi-layered defense devices, to include Checkpoint//Nokia/Juniper SSG firewalls, Netscreen Security.
• Perform vulnerability assessments, access risks, investigated incidents, from emerging security issues providing mitigation and forensic analysis.
• Provides Security consulting services to various groups in order to review hardware/software architectures for potential risks, as well as develop solutions for new projects. Work with Business and IT groups to ensure.
• Provided test, development, deployment, and research in support of hardware/software of the security infrastructure.
• Perform troubleshooting of TCP/IP connectivity through security devices by performing network traces, tcdumps, snoop, analyzing data and implementing resolutions.
• Implemented and maintained log management using Arcsight SEM to detect threats or potential issues. Analyzed data from these events to make recommendation to all levels of management, and to mitigate discovered threats.

Washington, DC, US

Chicago, IL, US

Arlington, Virginia, US