--- Protection Security Services ---• Updated GoC firewalls (Cisco ASA, Checkpoint) and content filters (Websense, Bluecoat).• Applied IT security policies ITSG-22 and ITSG-38 (zone and zone-interface-point controls) in firewall rule updating, and ITSG-33 (risk management via security controls) in change management.• Developed documentation including network diagrams, tracking spreadsheets, and wiki pages. Consolidated Cisco device data for inventory tracking.--- Data Network Engineering ---• Updated GoC data network, developed LAN/WAN switching/routing for multiple departments, and planned and implemented updates to the network's IT security integration architecture, using MPLS VPNs, BGP, route-maps, ACLs, firewall rules, etc.• Scanned networks, verifying device configurations and standards conformance.• Created tools for automated information gathering over encrypted SSH connections.• Created and updated device configurations, following standard GoC IT security policies.• Repaired Syslog network management, improving security and support responsiveness.• Performed system troubleshooting based on IR (incident request/report) entries.• Updated system documentation in support of planned RFC (request for change) activity.

• Developed and supported university data centre and campus network with 4000+ users. • Prepared controlled-access WiFi network with RADIUS centralized authentication.• Created PKI keys/certificates to enable inter-device trust relationships.• Setup Linux and Windows virtual machines on VMware servers.• Configured Firewall rules, content filtering and AV-AS, for network protection.• Increased WLAN security and broadcast segmentation through geographically-based VLANs.• Upgraded remote connectivity via SSL VPN tunnels to dual VPN concentrator appliances.• Supported security systems, routers, switches, etc. Installed and configured as needed. • Improved network scalability, reliability, and security, via enhancements such as a multi-VLAN architecture, wireless network expansion, streamlined firewall configurations. • Supported Linux systems running RedHat, openSUSE, and Ubuntu.• Maximized uptimes via customized monitoring of servers, email paths, internet links, etc.• Improved troubleshooting speed by adding automated network discovery and mapping.• Provided project management of ongoing IT projects, to ensure timely completion.

• Developed secure WAN network connectivity for GoC departments. These networks carried data for 100,000+ government employees, and included multi-media QOS, secure IPSec tunnels, and high-availability load-sharing data centres.• Planned and implemented updates to GoC MPLS SCNet and RCMP WAN networks, using separated network zones per standard GoC ITSG security policies.• Led teams in customizing services for $200M GoC connectivity RFP win; this included requirements--options analysis, cost--risk evaluations, and writing technical documentation. • Expanded encrypted network using Contivity VPN gateways, PKI and IPSec VPN tunnels.• Developed Cisco configurations for features such as BGP attributes, VRFs, ACLs, etc. • Wrote scripts to verify Cisco router configurations, improving service consistency.• Saved 200 person-hours, improved decision-making on $100M inventory, and averted several outages, by designing systems for automated data extraction and analysis.• Recovered $10M/year project timeline, by quickly developing test networks and firewall policies for distributed system with tiered security zones (web, application, and database).

• Designed and supported networks for 15000+ users and servers spread over 10 sites. • Saved $500,000 by negotiating new network design for leading internal customer.• Supported secure Wireless LANs; monitored and resolved security exposures.• Protected host traffic with PKI-enabled IPSec tunnels to VPN concentrator/gateway.• Repaired 5000-user slowdown due to round-robin data distribution across failed hardware.• Created Network Disaster Recovery Plans for data centres and employee work sites.• Rescued financial reporting by corporate year-end, using Cisco traffic queuing/shaping.• Recovered 200 staff hours yearly by automating purchase documentation process.• Coordinated NOC and engineering personnel in migrating network cores for 8000 users following company merger. Provided 80% cost reduction and 100 times increased bandwidth, with zero added downtime. Received Award for Dedication and Innovation.• Led multi-site team in research and design of resilient network architecture, permitting 100% network availability for large servers and showcasing company’s proprietary trunking technology for marketing teams.

• Represented Paris design and IT groups in discussions with central support teams. Provided computing and network expertise to local IT group, upgraded obsolete tools, trained users.• Negotiated full support commitments from corporate service teams in 3 countries.• Strengthened user confidence in local IT service by initiating weekly local news updates.

• Doubled staff productivity through development of custom utilities.• Automated test processes, giving: capacity up 4x, reliability up 10x, overtime down 50%. Received Award for Innovation• Created zero-cost SQL database, developed access tools, automated reports.• Installed and supported 100-user network of UNIX and Windows systems; trained and supported users.