Install, configure and maintain Palo Alto IPS devices and Palo Alto Panorama Appliances. Rebuilt IPS infrastructure from alert only on small Palo Alto devices to Palo Alto 5060s, with blocking rules for vulnerabilities, malware, wildfire, etc. Monitor Palo Alto IPS and ASA firewall logs for potential security events. Implemented Layer 7 DDoS and WAF protection for the most sensitive and important web facing applications, including maintaining the SSL certificates for the sites. Fully migrated Web filtering from Websense infrastructure to Palo Alto PAN-DB filtering using Palo Alto IPSes Fully implemented outbound SSL-decryption using Palo Alto IPSes Assist Incident Response team in research, discovery and documentation of security incidents, using firewall, IPS and email logs and systems. Implement all new firewall, IPS and email security rules and protections. Migrated external email infrastructure from Websense to Proofpoint Cloud and on-prem. Including Proofpoint secure email configuration. Integrate Proofpoint infrastructure with Palo Alto Wildfire to further protect systems from email based attacks. Assist PCI team with creation and verification the Network Device Hardening policies. Maintain firewall ruleset controlling access to and from PCI in scope devices, as well as router ACLs used to protect remote site payment card systems. Install, configure and maintain all Cisco ASA Firewalls for company, including ASAV, Multiple context ASAs, and individual HA groups. Configure and maintain all Site-to-Site VPN configurations on Cisco ASA Appliances. Including peering with Amazon AWS tenants. Migrated Remote Access and Site-to-Site VPN ASA firewalls from single devices to full HA, with no impact to users. Install, configure and maintain new Cisco ISE infrastructure for TACACS+ and RADIUS authentication, authorization and accounting.

Install, configure and maintain Nexus 1000v virtual switch in new VMWare environment. Configure Nexus 1000v to work with vCloud Director Network Isolation backed networks. Manage Routing, Switching and Wireless operations. Implement QoS strategy for all county T1 connections to prioritize business class traffic. Review current firewall configurations and adjust so that HA would function as intended. Review and adjust current firewall rules to increase the effectiveness of the security policy. Evaluate market leaders in IPS, Network load balancing, Web application firewalls and WAN optimization products and assist in making recommendations to Management on the right products needed to increase the security and functionality of the network.

Install and configure new and separate backbone for wireless network. Install and configure Wireless LAN Controllers, WCS and access points. Design and convert WAN from ATM to AVPN over MPLS Design and configure two separate LANs for company Video Conferencing implementation. Install and configure redundant Nexus 5000 and Nexus 2000 fabric extenders in data center. Manage all routing for LAN and WAN Manage all switch operations Manage corporate client access VPN and site-to-site VPN tunnels between protected sites. Implement and tune all firewall ACLs, NATs and WCCP configurations Manage and monitor corporate wide wireless networks, including two point to point wireless networks to remote offices. Manage RSA SecurID two-faction authentication for all remote users Manage ACS for TACACS+ Manage Solarwinds NCM to backup and store all network device configuration files. Install, manage and scan for network vulnerabilities using Tenable Nessus Security Center.