Eric Nelson Email & Phone Number

Downers Grove, Il, Us

I function as a pre-sales Principal Solutions Architect with a focus on security solutions. Everything from Cisco ISE and assorted identity solutions to Cisco XDR and other response platforms and everything that could use some securing. I work closely with vendor partners such as Cisco, Zscaler, Darktrace, Fortinet, Palo Alto and several others to provide clients with best fit solutions to secure their enterprise or OT networks. - OT Security Practice Leader• Assist in the development of the Sentinel portfolio expansion into OT security• Responsible for OT Security workshop development• Education of OT security products and development of sales strategies - Vertical Market Development – Manufacturing, Operational Technology• Market research and business development into emerging technical markets• Communicate with key vendor partners to establish new client relationships- Provided large scale security solutions and communicated security risks to client leadership• Worked with multiple business verticals such as medical, entertainment and manufacturing• Provided solutions that reduce business liabilities and secure critical data• Demonstrated financial metrics to prove value of investment in IT security technologies

Maryland Heights, Missouri, Us

Functioned as partner architect for Palo Alto NextGen Solution group within WWT. Worked closely with delivery and presales to provide migration design for clients moving to the Palo Alto solutions.During my time within the NextGen Solutions group I migrated several legacy network firewalls to Palo Alto with minimum downtime and streamlined legacy configurations into the Palo Alto next generation firewall solution. Simplified and expanded clients' ability to view and understand their traffic across their environment and integrated with their current IAM solutions to provided micro-segmentation where required.

Maryland Heights, Missouri, Us

• Security program lead for State, Local, Education (SLED) organizations. Common tasks have included risk assessment and analysis, validate compliancy for CJIS, HIPAA, PCI DSS, SSA Pub 1075, NIST CSF frameworks, and network and cloud infrastructure hardening. • Worked directly with client executive leadership through workshops, design meetings and proof of concept exercises, including spearheading cloud projects and pilot programs.• Created extensive documentation for clients such as Low-Level Designs, Accepted Testing Procedures, As-Built Documentation, Statement of Works, and governance policies. • Served as principal architect on several security projects ranging from identity access management, infrastructure assessment and hardening, and cloud security assessments.• Assisted the US Corp of Engineers with an Always-On VPN deployment. Provided support with design and recommendations to RBAC and IAM best practices. • Provided vulnerability mitigation assistance and understanding of evolving threats through use of real-world examples, preventing on going security breaches for clients

Chandler, Arizona, Us

While at my time at Insight as a Network Security Specialist, I worked with several commercial clients across the world. I was asked to manage client information security systems and to perform audit tasks and remediation. These tasks would include providing reports to senior technology leadership and provide guidance when required. I was also quite often supporting pre-sale teams in securing project wins as a technical advisor to showcase the depth of support a client would expect from the company. During my employment at Insight, I mentored junior engineers and guided their career path when they expressed desire to get into the information security field. The depth of experience that Insight provided for me can never be understated enough.The following technologies where I was the subject matter expert:F5 LTM, ASM, GTM, BIG IP DNS - Administration - iRule management and creation - Redirection, SSL renegotiation per URI, vanity URL - WideIP and ZoneRunner - DNS records, topology based DNS load balancing - ASM Security policy management - Web application firewall tuningPalo Alto Firewalls - Panorama management - Template creation, firewall additions - SD-WAN deployment - Best Practice Assessments - Identity integration - Global Protect Cisco FirePOWER - Threat Defense (FTD), ASA with FirePOWER Services, FMC, FirePOWER Chassis (9k,4k) - Deployment of FMC and new devices - Management and new services - Policies, upgrades, malware investigation, S2S VPN, routing, NAT, automated backups, dynamic routingSolarwinds suite - NCM, Kiwi Syslog, General ManagementIdentity Access Management - DUO, OKTA, RSAZScaler - ZIA, ZPA

Scottsdale, Arizona, Us

I was hired at Innovation Care Partners (Medical ACO) to be their Network and Security Administrator. One of the main duties in this role included scoping of security technologies, performing proof of concepts and purchasing. I performed these tasks to evaluate information security tools such as EDRs, XDRs, vulnerability assessment tools and perimeter firewall solutions. I would perform tasks such as security compliance reports, HIPAA audit and audit preparation, threat response and evaluation and maintain business partner agreements. Projects completed during my time with ICP:-Ensured proper HIPAA compliancy of information within the network and with business partners and medical practices-Implemented Cisco FirePower across multiple data centers in active/active states.-Creating high availability network infrastructure mitigating possible downtime.-Redesigning of corporate office network to maximize network functions and security stance. This included testing, purchasing and implementation of an EDR solution.-Implement Qualys security scanning procedures and manage monthly security scans and remediation.-Deploy DLP solution to prevent PHI and PII from being exfiltrated from the network.-Implement identity access management for remote user VPN use with OKTA.

Phoenix, Arizona, Us

During my time with Apriva, a payment processor, I was responsible for many aspects of the network. I worked very closely with the Director of Information Security and his team to ensure that the network is secure. This included monthly security reviews of the network devices, yearly PCI-DSS audits, and network security roadmaps such as pilot programs to deploy 802.1x across the enterprise. I managed two datacenters and facilitated a move of one of the datacenters to another region. One of the leadership's main push while I was with Apriva was the migration to the Azure cloud, which I assisted in with the pilot program. There was a significant amount of technical debt that was mitigated over the course of my time at Apriva, of which I am very proud.Successes while at Apriva:-Managed multiple datacenters processing millions of dollars of credit card transactions yearly with a 98% uptime.-Managed multiple device types across multiple vendors including F5 Load Balancers, Cisco 6500 Chassis switches, Juniper VPN devices, Cisco Wireless Controllers, and HP Brocade switches.-Completed a network redesign and refresh converting a static routed network into a dynamic routing network using OSPF with no downtime.-Successfully completed multiple PCI DSS security audits and maintained a strong security posture across the network.-Maintained baselines and network diagrams for all network devices including hardening of known security flaws on assorted vendor equipment.-Designed Azure Cloud network connectivity using MPLS and VPN connections to maximize uptime. -Multiple VPN implementations to several clients and maintained the vendor relationships that were required.

Troy, Michigan, Us

I worked at Logicalis as a network engineer in a team designed to work with public schools across Arizona. This took me to several under funded and remote rural schools that were taking advantage of the public E-Rate fund to prepare schools for the Common Core refresh of the education systems. This position was an adventure where I would revamp school networks to allow the children to get a more advanced education with the use of technology. I learned much in this position and left the company enriched. Directing team members to get projects completed ahead of schedule and under budget was an amazing feeling coupled with the satisfaction of knowing I'm providing a more robust learning experience to children that attend these schools.Successes and learned items:-Lead engineer for E-Rate projects for school districts across the state of Arizona to refresh network technologies in preparation of common core. -Installed several Cisco CUCM systems as well as other VOIP technologies such as Shoretel, Avaya, Polycom as well as Adtran SIP trunking systems.-Learned several Cisco products such as Cisco Chassis Core switches, Routers, ASA Firewalls, Wireless Controllers.-Managed teams of support engineers in the completion of jobs, several times under budget and projected times.-Multiple security audits across private and public sectors hardening technical personnel policies in regards to information security.

Phoenix, Az, Us

• Senior Network Administrator that oversaw the implementation of several different network projects.• Assisted with virtualizing different Microsoft products such as Exchange, Lync, Forefront, Domain Controllers and backup servers.• Trouble shot networks across Arizona to include Cisco routers, switches, ASA firewalls, PIX firewalls, wireless access points, HP Procurve switches, Sonicwalls, VLANs, and Juniper networks

• Managed wide area networks (WAN) for United States Army Conus Theatre Network Operations Security Center. Managed all continental United States Army military base WAN connections.• Maintained CONUS WAN security stance against external threats from multiple threat vectors.• Worked in NOC environment as a break fix technician to ensure constant uptime for all continental US Army bases.• Worked with Cisco 6500, 7200 level 3 switches as well as Juniper firewalls.

Arlington, Virginia, Us

Network Enterprise Center Help Desk Clerk February 2008 to July 2011United States Army, Ft. Huachuca, Arizona• Maintain continuity of service for over 1,000 workstation spanning multiple networks on FT Huachuca.• Able to solve more Remedy Trouble Tickets than predecessor and stream line process of resolving issues.• Setup and configured over $50,000 worth of personal data assistants and smart phones for use by senior officials.• Used remote software to access workstations and resolve issues quickly and efficiently. • Trouble shot Cisco routers and switches as well as Juniper Firewalls.• VLAN support for different networks including VOIP, Medical, storage.Network Manager/Administrator July 2007 to February 2008United States Army, Camp Taji, Iraq/ Vilseck, DE • Installed and maintained information systems for 800 users in a combat environment and extreme conditions.• Installed $2,500,000 worth of information systems to include Cisco routers and switches, satellite systems, video teleconference, Cisco Voice Over-IP phones.• Built networks consisting of 12 Cisco switches and two routers encompassing classified information, un-classified information as well as VLAN support for Voice Over-IP phones and FTP.• Managed network with use of Solar Winds network management software with 98% uptime.• CAT OS work with Catalyst Cisco 6500 and 7200 switches.Automations Help Desk May 2006 to July 2007United States Army FT Lewis, WA/ Vilseck, DE• Worked as entry level help desk clerk installing software, printers and processing paperwork for user accounts.• Handled the transition of workstations from FT Lewis, Washington to Vilseck Germany.• Prepared hardware and paperwork for legacy computers designated for turn in.• Prepared 300 workstations for use ahead projected time estimate through the use of teamwork.