• Designed and implemented Privileged Access Management solutions enhancing security measures.• Developed Azure/AWS architecture and security protocols to ensure data protection and compliance.• Implemented Zero-trust architecture to strengthen network security and prevent unauthorized access.• Managed PKI, end-user device security, and asset management to safeguard sensitive information.Managed relationships with multiple vendors and held regular architecure design sessions to ensure integration with all systems in the design.Held regular peer reviews across teams to provide implementation guidance and to ensure DevSecOps flows

• Increased application security by implementing DevSecOps methods, including DAST/SAST analysis• Reduced the time and resources needed for repetitive tasks by automating security and network functions using Python, Ansible, and Terraform.• Closed security gaps by creating threat models and working cross-functionally to implement controls• Monitored security tools across the environment, conducting log review and analysis, and continuously tuning and enhancing security parameters.• Led incident response management, developing and enforcing strategies for incident communications, IR exercises, and drills.• Led collaboration with cross-functional teams and business units effectively to ensure alignment with security policies and procedures.• Improved cloud security by implementing AWS and Azure best-practices and leveraging security tools• Implemented and maintained enforceable Information Security policies aligned to industry best practices, NIST-CSF, and ISO 27001.• Leveraged Threat Vulnerability Management tools to conduct automated scheduled scans and reports, working with IT and Engineering on remediation actions.• Ensured full transparency and awareness by maintaining strict security baselines and change logs• Maintain and enhance GRC tools and processes within information security to enhance visibility and transparency.• Optimized firewall and IAM policies

• Improved application security by implementing zero trust architecture• Collaborated with cloud engineering teams to optimize security configurations and policies in AWS and Azure.• Conducted cloud security assessments and provided recommendations for improvement.• Conducted vulnerability assessments and penetration testing to identify and remediate security weaknesses and vulnerabilities.• Supported the maintenance and management of firewalls, intrusion detection, and prevention systems.• Utilized SIEM/SOAR systems to monitor security events and respond to potential threats.• Managed access control and identity management solutions to protect sensitive data and resources.• Assisted in the implementation of encryption technologies to secure data in transit and at rest.• Conducted security audits and compliance assessments to ensure adherence to regulatory requirements.• Led incident response activities for firewall-related security incidents, quickly resolving and mitigating threats to minimize potential impact.• Closed security gaps by optimizing security policies including firewalls and NAC

Network and Security Architect for the largest public health care system in the United States. During my tenure here I was the primary point of contact and SME for a wide array of both network and security technologies. Manage relationships with client technology & business managers and provide guidance where required within IT strategy, architecture & design.♦ Primary contact for Cisco Prime Infrastructure environment♦ RADIUS and TACACS migration from Cisco ACS to Cisco ISE.♦ Primary contact for operations and maintenance of Splunk environment.♦ Lead engineer for deploying and configuring Cisco ASA and Cisco FTD firewalls.♦ Design of deployment of F5 LTM/GTM environment, which led to successful migration to EPIC (electronic medical record system) and migration from Cisco GSS and Cisco ACE.♦ Primary contact for managing InfoBlox DNS and DHCP♦ Achieved kudos by discovering a fault in older access points causing 500+ to go down within a short frame, resulting in courtesy replacement of all defective APs by the vendor.♦ Successfully implemented greenfield deployment of Cisco Wireless to all hospitals and clinics, including 20,000+ access points.♦ Re-designed internet proxy policies for BlueCoat environment, resulting in a higher level of security for the organization.♦ Designed and implemented WAN architecture and data center technologies♦ Implement site-to-site VPN solutions for encrypted communication between customer and vendors.♦ Primary point of contact for Pulse Secure VPN environment.♦ Supported 1000+ router and switches.♦ Collaborated with Cisco to build SDA (Software Defined Access) pilot for a major hospital.♦ Provided both low level and high-level documentation of network infrastructure♦ Achieved successful consolidation of support hierarchy by offloading Tier 1 support from Central Engineering Team to Network Operations Center.♦ Provided troubleshooting support for complex issues requiring Tier 3 escalation.

♦ Helped drive businesses forward by uncovering business challenges & recommending solutions to solve those challenges.♦ Provide highest level of technical consultancy to ensure problem resolution is achieved in the shortest possible time-frame♦ Setup up networks for various small businesses, including hardware installation and configuration, documentation♦ Develop processes and procedures for use by the Network team and third parties in the management of network environments