John Percy Email & Phone Number

Cyber Security Operations

Muscatine, Iowa, United States

Currently serve as the security and network resource on a newly created team, where the focus is migrating resources to the cloud. The knowledge I’ve gained so far has allowed me to design and implement a more efficient network architecture using Azure virtual WAN and virtual hubs with express routes to our different data centers. I have also configured VPN and direct route connectivity to a new AWS tenant and implemented a virtual network structure. This design includes the use of Equinix’s virtual edge and fabric and SilverPeak SD-WAN to provide on ramps to Azure, AWS, and OCI in different regions of the US. I am currently creating DMZs using Azure firewall to migrate on-premise DMZ servers to the cloud and using NSGs to implement zero trust.Current responsibilities include architecting secure cloud environments and solutions with efficient and redundant connectivity, integrating new acquisitions, implementing monitoring solutions, testing and implementing new SD-WAN solutions. In this process, I am working with and advising project managers and other IT teams migrating applications to the cloud. In addition to the new role, I continue to be a resource to the security team and am also serving as resource to the network team due to recent departures there. While working remotely, I continue to demonstrate that I’m able to adapt to new positions, challenges, and perform my responsibilities to a high level without supervision.The list of skills below is on top of the list provided under my senior network security administrator sectionAzure Firewall, vWAN, vHub, Express Route, vNets, NSGs, security partners integration and App registrations. SCIMOracle Cloud Infrastructure (OCI) Security Lists, NSGs Virtual Cloud Networks and Load BalancersAWS Direct Route, VPN, VPCs, Network ACLs and Security GroupsSilverPeak SD-WANEquinix Virtual Edge, SD-WAN deployment and virtual connectionsGRE and IPSec tunnels using BGP and EIGRP routing

Muscatine, Iowa, United States

Remotely provided support in all areas of IT infrastructure security to over 80 sites throughout the US, including 3 data centers and several sites in Asia. Sites ranged from small showrooms to large manufacturing plants and included on-premise and co-location data centers. Security extended to wired and wireless connectivity, on-premise and cloud servers and websites, as well as email security, remote access, and internet security.Day-to-day duties included investigating and resolving security related issues, testing, architecting and implementing new security solutions, after hours support and providing security related solutions and advice to project managers and other IT teams.While working remotely, I took a leading role in the team, implementing more solutions and upgrades and solving more issues than my colleagues. As the team grew, I assumed the responsibility of on-boarding new members and serving as a mentor for junior admins. Working in a lead position, along with my previous experience in the company, made me a go to person for assistance in planning and implementing IT projects and troubleshooting issues.System upgrades, deployments, and administration include:Cisco ASA firewall, AnyConnect VPN, NATCisco Sourcefire IPS/IDSCisco ISE NAC and TACACsMicrosoft NPS RADIUSImperva database firewall and Cloud WAF (Incapsula)Public DNS using Bind on LinuxMicrosoft PKI root and issuing CAOpenSSL PKI root and issuing CA on LinuxCyberark Password Vault including Central Credentials Provider and IAMCyberark EPM including Loosely connected integration with Password vaultSecureAuth SAML and RADIUS with MFASymantec Endpoint ProtectionZscaler Internet Access proxyProofpoint SEG with DLPNexpose vulnerability scannerLogRhythm SIEMLogRhythm NetmonGigamonTufin SecureTrack and SecureChangeMicrosoft GPOsPowershell, Bash and Perl scriptingDigiCert and LetsEncrypt certificatesDomain name transfers and registrationsOCI and Azure NSGsIPSec VPN

Muscatine, Iowa, United States

Remotely provided support in all areas of IT infrastructure security to over 80 sites throughout the US, including 3 data centers and several sites in Asia. Sites ranged from small showrooms to large manufacturing plants and included on-premise and co-location data centers. Security extended to wired and wireless connectivity, on-premise and cloud servers and websites, as well as email security, remote access, and internet security.Day-to-day duties included investigating and resolving security related issues, testing, architecting and implementing new security solutions, after hours support and providing security related solutions and advice to project managers and other IT teams.While working remotely, I took a leading role in the team, implementing more solutions and upgrades and solving more issues than my colleagues. As the team grew, I assumed the responsibility of on-boarding new members and serving as a mentor for junior admins. Working in a lead position, along with my previous experience in the company, made me a go to person for assistance in planning and implementing IT projects and troubleshooting issues.System upgrades, deployments, and administration include:Cisco ASA firewall, AnyConnect VPN, NATCisco Sourcefire IPS/IDSCisco ISE NAC and TACACsMicrosoft NPS RADIUSImperva database firewall and Cloud WAF (Incapsula)Public DNS using Bind on LinuxMicrosoft PKI root and issuing CAOpenSSL PKI root and issuing CA on LinuxCyberark Password Vault including Central Credentials Provider and IAMCyberark EPM including Loosely connected integration with Password vaultSecureAuth SAML and RADIUS with MFASymantec Endpoint ProtectionZscaler Internet Access proxyProofpoint SEG with DLPNexpose vulnerability scannerLogRhythm SIEMLogRhythm NetmonGigamonTufin SecureTrack and SecureChangeMicrosoft GPOsPowershell, Bash and Perl scriptingDigiCert and LetsEncrypt certificatesDomain name transfers and registrationsOCI and Azure NSGsIPSec VPN

Muscatine, Iowa, Usa

Remotely provided support for WAN and LAN connectivity to over 80 sites throughout the US and Asia. These ranged from small showrooms to large manufacturing plants. Implemented and maintained wired and wireless connectivity to endpoints and essential sites with full redundancy.Day-to-day responsibilities included resolving calls escalated to the network team, equipment failure, endpoint connectivity/authentication issues, WAN connectivity issues, maintaining and upgrading hardware and related software, configuring network load balancers, and creating documentation and network diagrams. As part of my role, I aided in the design and implementation of the network.While working remotely, I played a leading role in the team and in many projects, overseeing day-to-day operations which included but was not limited to on-call scheduling, managing weekly meetings, and providing reports to management. In this lead role, I was the point of contact for other teams. Additionally, I also worked as the temporary interim supervisor for the team during a period of change when a supervisor was absent. System upgrades, deployments, and administration include: Cisco IOS and IOS-XE switches and routersEIGRP and BGP including VRFsIOS Zone Based FirewallSite to site DMVPN and GRE tunnelsMPLS networksQOS and traffic shapingCisco Nexus 1kv, 5k and 9kCisco IOS-NX fiber channelCisco WAAS and WAVECisco AirOS wireless controller with lightweight APsCisco ACE load balancersF5 Big IP load balancersCitrix NetScaler load balancersCisco ISE policy configuration, device profiling and EAT-TLS authentication Cisco Prime monitoring, reporting and bulk changesSolarwinds monitoring, reporting and bulk changes LiveAction and Netflow analysisWireShark and packet capture analysisLinux DHCPWindows DNSOpengear console serverTalari deployment for Software Defined WANMen & Mice IP ManagementCisco SmartNet Total Care collector serverBash and perl scriptsMicrosoft IAS/NPS and LDAP

London, United Kingdom

Senior Infrastructure Engineer provided network and server support to over 40 clients ranging from 5 to 500 users, a number with satellite offices in and outside the UK. The majority of clients, as hedge funds and related industries, had short SLA times and required fully redundant systems including HA firewall pairs, backup internet lines and disaster recovery solutions.Day to day duties included resolving calls escalated from 2nd line engineers for server or network related faults, monitoring and maintaining configuration and replication of disaster recovery servers, Exchange and VMware maintenance and configuration, installs and upgrades to infrastructure software and hardware, creating documentation for new systems and creating and updating detailed LAN and WAN network diagrams. I was also very proactive in implementing new systems to monitor and manage client’s infrastructure such as HP SIM and other 3rd party applications. Upgrades carried out include: • vCenter and ESX version 4 to 5• SQL 2005 to 2008• Exchange 2003 to 2007 or 2012• Server 2003 Domain Controllers to 2008• SonicWALL TZ or Pro series firewalls to NSA series including L2L and RA VPNs• Cisco PIX firewalls to ASA or SonicWALL NSA series including L2L and RA VPNs• Blackberry Enterprise 4 to Blackberry Express 5• Disk upgrades in HP servers and SANs Installs carried out include: • HP StorageWorks P2000 SANs• HP c7000 Blade Enclosures with BL460c G7 servers• HP DL380 G6 and G7 servers as ESXi hosts• SonicWALL WXA WAN Accelerators• SonicWALL SSL-VPN 2000 devices• Aventail SRA EX6000 SSL-VPN devices• SonicWALL firewalls including L2L and RA VPNs• Cisco Catalyst and HP ProCurve switches including stacks• Citrix XenApp 5 server• Windows Terminal Servers Other projects included implementing HP System Insight Manager for hardware monitoring, virtualizing client servers, migrating client servers to hosted server solutions and implementing and testing disaster recovery servers.

London, United Kingdom

Provided 2nd and some 3rd line support for over 2000 users in a large international sports, media, and management group throughout offices in its EMEA region. Organised and actively supported the IT needs for many of the major sporting events and fashion shows IMG is responsible for throughout Europe each year, including support for many of its high profile clients and executives.Day to day duties included resolving all calls escalated from service desk and 2nd line staff, escalating again to senior 3rd line when necessary.• Support for all print servers including DHCP scopes for all printer VLANs• Gene6FTP server administration• Administration of all DFS and NameSpaces• Active Directory administration and maintenance• Exchange 2007 database storage group and mailbox administration• VMware administration using vSphere 4.1 in a vCenter environment• Support for Blackberry users through device and BES 5.0 including configuration of policies• Administering all aspects of LANDesk Core server for imaging and software, patch/updates deployment• Administration of Avaya phone system and Audix voicemail• Configuring Juniper NetScreen devices for remote event offices• Client side support for Juniper Network Connect SSL-VPN connections• Authoring and updating SharePoint documentation for IT administration and procedures• Scripting of IT administrative tasks using VBScript, WMI, HTA’s and PowerShell• Supporting remote sites using MS Remote Desktop / LANDesk Remote Control and HP iLO• Administering Websense exception groups and site exceptions• Implementing and testing new infrastructure for Windows 7 rollout including WDS• Implementing Citrix XenApp 6• Print server migrations from 2003 to 2008• LANDesk Core server upgrade from 8 to 9• Managing two Ricoh MFD rollouts throughout region liaising with 3rd party vendors.

Associate Diploma, Electronic Engineering And Computing

Certificate Of Basic Electronics, Electronics