Davor Grce, (P.G) M.Sc. It Email and Phone Number

• Designing and implementing leaf and spine, and campus network environment on several sites over the world, Cisco 3650, Cisco Nexus NX 55xx/9300/9500, Brocade/Ruckus ICX-7150, ICX-8200, Ruckus virtual SZ environment, Ruckus AP• Conducting a complex administration of multiple dynamic protocol environments such as iBGP/ eBGP, OSPF, GRE tunnelling over GMVPN, MPLS, etc.• Designing, installing, and administering the Palo Alto cybersecurity enterprise environment through the Panorama cloud management tool.• Successfully deploying Palo Alto firewalls in 5 locations, including physical PA850 in data center and VNF PA VM50/100 installed in the VMware VeloCloud VCE appliances and devices.• Proficiency in managing enterprise Azure multi-tenant cloud hybrid environment.• Administering and configuring Azure IaaS network from the ground up.• Setting up and tracking a large amount of Azure metrics and activity logs of multiple resources such as performance and network security activity.• Collecting and analyzing logs and metrics across multiple resources using Log Analytics as a massive data warehouse getting a richer set of diagnostic information.• Conducting VeloCloud SD-WAN infrastructure in the hub-spoke environment• Proficiency in managing enterprise Azure multi-tenant cloud environment, and Microsoft 365 collaboration cloud services, in the hybrid environment.• Setting up and tracking a large amount of Azure metrics and activity logs of multiple resources such as performance and network activity.• Conducting network security architecture and administration in a critical environment that operates 24/7.• Managing security incidents.• Supporting administration with SCADA monitor tool.• Resolving technical issues and operating within the sensitive infrastructure data center environment• Engaging and liaising with business partners, end-users and vendors to ensure incident and problem-solving. ServiceNow ticketing system.

• IT Network infrastructure designing, configuring implementing and administering, FortiGate Next Generation Firewall, Aruba, HPE core switches and routers.• Successfully deploying and configuring FortiGate firewalls to enhance network security, ensuring optimal performance and protection against cyber threats.• Leveraging FortiManager for centralized management of multiple FortiGate devices, streamlining configuration processes and reducing administrative overhead by 25%.• Being part of a professional team in the successful migration of a company’s on-premises data center to a cloud-based network infrastructure, resulting in at least a 30% reduction in operation costs and improved scalability.• Managing a multi-site network architecture integrated with IDS/IPS Palo Alto for perimeter security and internal segmentation.• Utilizing Panorama single point of management to manage multiple Palo Alto devices from a single console, enabling streamlined policy management and device monitoring• Configuring security policies, NAT rules and VPN (P2P and S2P) settings tailored to organization needs, ensuring secure remote access for employees using Palo Alto Global Protect.• Maintaining up-to-date documentation of configurations, network diagrams, and policies for troubleshooting and audits, giving the best practices such as following Cisco wireless and wire guidelines for deployment, security, and monitoring to ensure a robust wireless network.• Monitoring Cisco-based and Ruckus-based wire and wireless connected end-users for troubleshooting and performance issues.• Following up with clients and technicians to ensure incident and problem resolution.• Experiencing ServiceNow ticketing system. • Maintaining up-to-date documentation of configurations.

• IT Network infrastructure designing, configuring implementing and administering, FortiGate Next Generation Firewall, Aruba, HPE core switches and routers.• Successfully deploying and configuring FortiGate firewalls to enhance network security, ensuring optimal performance and protection against cyber threats.• Leveraging FortiManager for centralized management of multiple FortiGate devices, streamlining configuration processes and reducing administrative overhead by 25%.• Being part of a professional team in the successful migration of a company’s on-premises data center to a cloud-based network infrastructure, resulting in at least a 30% reduction in operation costs and improved scalability.• Managing a multi-site network architecture integrated with IDS/IPS Palo Alto for perimeter security and internal segmentation.• Utilizing Panorama single point of management to manage multiple Palo Alto devices from a single console, enabling streamlined policy management and device monitoring• Configuring security policies, NAT rules and VPN (P2P and S2P) settings tailored to organization needs, ensuring secure remote access for employees using Palo Alto Global Protect.• Maintaining up-to-date documentation of configurations, network diagrams, and policies for troubleshooting and audits, giving the best practices such as following Cisco wireless and wire guidelines for deployment, security, and monitoring to ensure a robust wireless network.• Monitoring Cisco-based and Ruckus-based wire and wireless connected end-users for troubleshooting and performance issues.• Following up with clients and technicians to ensure incident and problem resolution.• Experiencing ServiceNow ticketing system. • Maintaining up-to-date documentation of configurations.

• Acting as project administer to plan, construct and maintain IT infrastructure as well as data centres• Carrying out quality assurance work already conducted in IT Infrastructure and data centres • Creating work plan and budget by which operations are conducted• Filing weekly and monthly status reports on projects as they unfold• Coordinating and assigning resources for project implementation according to project phase• Planning and scheduling project deadlines• Coordinating and managing engineering team (10 - 15 engineers and technicians)• Conducting quality assurance in accordance with the needs of the clients• Working on pre-sales preparation, delivering configurations and architectures for solutions applicable in IT infrastructure and data centres• Closely following IT trends connected to virtualization solutions and network infrastructure as to ensure most secure and modern equipment was used as well as to proactively fix any issues thereof

* Installed, administered, and troubleshoot network multi-layer based infrastructure, based on Cisco Routers (C1941, C2900, C3900) & Switches L2/L3 (Nexus 3172 Chasses, C3750E, WS-C2960) based equipment; * Installed, administered and troubleshoot Cisco Security Appliance, based on Cisco ASA 5510, 5516, setting up all remote IPSec VPNs and Site-to-Site VPNs;* Installed and engineered Checkpoint R80 distributed environment MGMT-Server/HO-Firewall/BR-Firewall;* Implemented and managed IBM XGS 4100 (Site-Protector server side) based IPS appliance;* Assisted in involving, maintained and improved GDPR regulations into the internal security policy;* In-depth crawl and analyzed, the highest detection rate of vulnerabilities with low false positives and integrated vulnerability management (Acunetix/ Odyssey);* Assisted in implementation Hybrid Cloud Management Suite (HCM), Cloud Computing Management Platforms and provisioning cloud services such as IaaS was a major project in our ICT department IaaS;* Designed and drove appropriate security procedures based on ISO/IEC 27001 and the internal security policy. Monitored Syslog and Netflow (Manage Engine EventLog/ NetFlow Analyzer, PRTG SNMP traps/syslog Network Monitor, NetWrix, Wireshark), and implementing of certain activities into preventive action, security analyzed performance and communication equipment, writing and enforcing security procedures and policy in the field of information security;* Managed Veeam Backup and Replication* Administered Disaster Recovery* Assisted in implementation and administered hardware infrastructure based on EMC, IBM, HP, Hitachi, Fujitsu, Alcatel;* Assisted in implementation and administered systems infrastructure based on VMWare 5.0/5.5/6.0/6.7 services and SAN;* Assisted in implementation and administered systems infrastructure based on Microsoft Servers 2008/2012/2016.

* Administered, troubleshoot and developed network infrastructure; * Identified and evaluated potential threats and vulnerabilities; * Designed training manuals to increase security awareness throughout the company; * Monitored live systems to discover real-time threats; * Demonstrated effectiveness of security controls.

* planning, installing and development of business solution within business on-premise application to an investment fund, private retirement funds, custody banking;* maintaining multilayer distributed applications;* following monitor system, unauthorized access to database and proposal new solution;* providing business and technical assistance to all business clients;* participating in designing the procedures, technical documentation and instruction manuals;* Providing a technical training and presentation to all clients..

* Developing, implementing, administering network infrastructure and communication services; * Provided security advice and guidance to systems engineers and management; * Participated actively in physical security projects and developed physical security and safety skill sets; * Collaborated on solutions to mitigate risks and enhance system security* Implemented cost-effective security controls to meet corporate security requirements.