Produced and delivered monthly and quarterly reporting to enterprise managed security service clients. Provided recommendations and analysis to prevent service outages. Remediated chronic issues. Enabled paths toward service improvement and automation. Performed data collection, analysis, and recommendations of all managed security devices. Reviewed client assets for: hardware lifecycle, software release (version/patching), operations (verification of backups, license/certificate expiry), availability, performance, utilization, compliance management (risk analysis), event/incident review and trend analysis. Engaged and coordinated with cross-functional teams (transitions, project management, deployments, platforms, client management, client success, network/security engineering, consulting, service management, event monitoring, logging, threat monitoring, cybersecurity, service architects, professional services, and sales). Worked with teams to resolve back-end issues to provide consistent reporting. Evolved and improved reporting to suite ongoing client needs.

• IT Security professional on IP core engineering team responsible for improving overall security posture. Additionally provided support to the LAN/WAN team• Performed security assessments and set forth recommendations to enhance security posture• Design, plan, implement and support network security infrastructure on vessel deployments• Migrated Juniper SSG20 to Cisco ASA 5512x 9.5.• Planned firewall refresh for Cisco ASA with FirePower Services (5.4 SourceFire)• Configured ESXi on Dell PowerEdge and SuperMicro • Administered Cisco Defense Center (FireSight) application on VM in ESXi

Contract

• Performed security enforcement on the network infrastructure, by ensuring security compliance according to the Information Security Policy and Procedures of the business, as well as PCI, SOX, and industry security best practices as determined by SANS, Gartner, NIST/NSA, DISA, and CIS• Evaluated all firewall access, as well as B2B VPN from partners and 3rd party vendors for the business. Perform bi-annual firewall rule assessment, report and remediate findings.• Enforce and validate security hardening of configurations and OS on Juniper Netscreen ISG2000 firewalls, PA-3020, Cisco devices, ASA, Nexus 7k , 6500/4500 switches, 7200,3600 routers. • Troubleshoot potential access issues with Junipers, used NSM to analyze firewall logs.• Manage several autonomous Wifi systems for lab testing. • Validate file system integrity for network devices (FW/RTR/Swch, Nexus, ACE, ASA, Datapower, Netscaler) via Tripwire, and reconcile any changes with the change management system.• Monitor network systems for security events/alerts via RSA Envision. • Manage and support various security monitoring tools for alerts, reports, notifications, event logging; netflow traffic analysis via Arbor Peakflow-X, firewall rule analysis with FireMon Security Manager and Risk Analyzer, in addtion import vulnerability assessment from Rapid7 Nexpose. • Monitor and remediation of incidents via HP Tipping Point IPS event monitor• Created automation process in FireMon Security Manager to check network devices and firewalls for compliance security hardening standards.• Project technical lead for Cisco NAC / ISE deployment services, responsible for maintaining project delivery and timeline. Produced business requirements document an return on investment documentation. Coordinated as liaison between the project stakeholders the contracted Cisco Advanced Service team to provide the business requirements and resulting high level design.

EDS - Bank of America - Network Refresh Project

This role was client facing and had high visibility and impact to production environments. There was direct exposure to global enterprise clients and systems. As a leveraged firewall engineer on the network security team I performed the following functions:• Designed and planned migrations for global clients in the EDS Global Services Network via the EDS Network Interconnect, a virtual environment for logically separating client traffic thereby providing segmentation, secure communication and end to end service assurance.• Acted as the firewall technical lead engineer on assigned projects and served as mentor to newer team members. • Performed risk analysis on any new external interfaces and provided report to clients and EDS for critical and high risk findings that required written acknowledgement and remediation• Scoped and recommended firewalls to clients based on their requirements and the result of information gathering in the planning phase of the engagement • Created build documents that included the install of new firewalls with network connectivity, console or out of band management access, high availability pairing, logging and tools access requirements information for firewalls at located at data centers across the country. • Built Cisco ASA and Checkpoint firewall configurations for implementation at the time of client migrations in the EDS production network environment with the goal to create new access through secured connections into the new EDS network infrastructure.Performed migrations during client maintenance windows and followed up on any post migration tasks.

WAN/LAN/field support engineer served the following functions:• Supported network systems for bank operations center and branches, a WAN consisting of 80 routers statewide utilizing Frame Relay, ISDN, Metro Ethernet and MPLS • Provided network support for other teams: Facilities. Information Security, Asset Management, Desktop Support, Telecommunications and Vendors• Performed WAN/LAN network operations, issue resolution, maintenance including remote installs/ upgrades, HW replacement and inventory control, vendor support contracts, monitored and managed utilizing tools such as: CiscoWorks, SolarWinds, WhatsUpGold

• Supported WAN network services and HW for 24x7 production environment for operations center with 725+ remote offices (POS store fronts and distribution centers) nationwide utilizing frame-relay, EIGRP, ISDN DDR, QOS, VPN, MPLS, Cisco routers and switches• Redesigned LAN core and WAN edge devices for improved uptime, incorporated best practices model, integrated solutions to existing topology, inventoried old equipment for trade-in to Cisco.• Initiated support contracts for all critical network hardware, established security standards, documented disaster recovery procedures and network topology, monitored logged events, demonstrated and trained data capture for troubleshooting LAN/WAN issues

• Supported network services for (national/state/city/several multi-building campus facilities) WAN/MAN/LAN enterprise on WAN/Firewall team for Internetworking systems core: router, switch, firewall, CSS, VPN, AAA/TACACS devices HW/SW and network management systems. • Provided network support for prod/stage/dev environments multiple network services teams• Resolved 3rd Level support/Service Center help tickets for WAN/Firewall team in addition to On-Call resource for NOC/WAN/MAN enterprise systems support, utilized: NetForensics, SolarWinds, Ciscoworks, Sniffer and Visionael (including topology update discoveries)• Implemented emergency and out-of-rotation changes which involved immediate troubleshooting for system anomalies, router and switch hardware issues such as PoE failure, NAS device to ACS server connectivity and latency, PIX firewall rule change/ add/ delete and/or revisions to Checkpoint firewall group/network/host objects to resolve access issues• Created Business to Business 3DES IP-Sec LAN to LAN VPN tunnels, Resolved remote office access issues such as RAS and dial-up, Deployed auto-dial analog to VoIP solution, Implemented security vulnerability patches, Configured multilink T1s• Updated Sniffer NPO manger, Maintained user licenses, Discovered and Added network resources, Utilized discovery to identify and replaced faulty network hardware• Upgraded IOS code, configured and Implemented production routers, Configured devices to handle L2/ L3 Jumbo Frames, Created procedure documentation• Represented data networks group in multi-team projects such as network facilities support, change control board and vendor presentations

• Supported production and campus network services on internetwork equipment such as Checkpoint FW-1 and PIX firewalls, ACLs, Routers, Switches, VPN Concentrators, Authentication Servers, Content Switching Services, IDS, remote office support, video conferencing, security, DS3, Frame Relay, ISDN, DSL and Dial-up and provisioning data circuits• Managed weekly changes in change management process and specific projects in Monthly change management window for Checkpoint-FW1, PIX, ACLs, DNS, 6513 change/add/delete, multicast routing• Served as Technical Lead for 3rd level troubleshooting and resolution of corporate customer Internet/B-to-B connectivity problems, Help Desk, Customer Services and all escalations • Disaster Recovery 100% successful for local, and remote networks at DR test facility (2 consecutive years)• Successfully completed planning and implementation of projects in conjunction with major core network infrastructure upgrade also upgraded Cisco devices and monitoring systems as needed• Documented changes/ additions to network infrastructure in MS Visio as well as providing cross training for others in team from individualized projects• Implemented network management tools: Ciscoworks2000 LMS v2.2, Network Analysis Module in Catalyst 6513 switches, MRTG W2K platform with Top10 Talkers per port, used for network and bandwidth monitoring tool for all core network devices, designed with intuitive front end web interface

•Supported WAN/LAN/ security, network operations, troubleshooting, load balancing, routing, ACL, firewalls, VLANS, EIGRP, BGP, static route statements, trend reporting data, logging, intrusion detection, VPN, remote access, DNS, packet analysis, data throughput analysis, PTP Frame circuits, L2 switch port error reduction measures (Cisco 4600 routers and 4300 switches)• Evaluated, purchased and integrated redundant, reliable and scalable hardware/ software solutions for production environment and campus network management systems• Managed redesign and implementation of the data center network architecture • Coordinated with technology partners, vendors and major clients and reported monthly network operations health to management

• Implemented/ supported Network Operations Center for Broward County Schools, the 5th Largest School District in the United States comprised of 100,000 nodes countywide. Managed support included PIX FW, MS DNS, multiple mail apps, all Cisco routers/ switches• Integrated core network redesign for School Board of Broward County Technology Services Center building and the KC Wright building (replaced 15+zone AppleTalk network), utilized OSPF, AppleTalk, EIGRP and RIP, migrated to IP network onto Cisco L3 switches• Integrated 26 NT4.0 servers countywide running JDL’s K-12World Cyberlibrary (Internet proxy server by CSM) with Smartfilter update support and managed AbirNet SessionWall-3 for centralized traffic monitor/blocking, provided documentation and training for operations personal • Supported Bay BCN, BLN, ARN Routers using Site Manager until replaced with Cisco HW • Operated network management and trend analysis tools: SNMPc, CiscoWorks 2000 CWSI, HP Openview NNM, Opticom, Site Manager and AsanteView in NOC • Implemented Campus LAN/ WAN (5 remote offices via Frame Relay) with firewall, Internet, mail, and Internet mail gateway exchange services for the Workforce Development Board of the Treasure Coast (Port St. Lucie, FL), provided documentation and training to IT staff• Integrated and supported statewide Public Broadcast System/CPB data consolidation project for Infinite Outsource (Tampa, FL) , implemented HW point to point 3DES VPN solution via the Internet to allow secure data transfer, upgraded firewall and LAN HW, provided documentation and turnover• Supported wireless bridge/router WAN. Integrated data network with local and Internet access and satellite downlink, also configured remote LAN/WAN access via dial-up/Livingston Portmaster & NT4.0 Radius Server for Department of Education (St.Thomas, St.Croix, St.John) & Department of Finance (St.Thomas) in US Virgin Islands. Provided documentation and training to client’s Admin