Justin Backman Email & Phone Number

Mountain View, Ca, Us

Working to define and refine Google’s access policies to address risks that result from how access is used by our business.

New York, Ny, Us

-Wrote and maintained Python applications for the automation of and data collection from network infrastructure- Drove the modernization of many legacy tools to a Django based application framework- Overhauled the CI/CD pipeline to improve developer experience as well as the quality of code delivered

New York, Ny, Us

Managed a team of 5 FTE and 3 onsite vendor representatives responsible for application delivery, network traffic visibility, DDoS protection, and firewalls (>800 devices)- Drove the improvement of self-service, alerting and monitoring, and operational hand-off- Developed services in Python and Go to support the above- Prototyped a managed software load balancer offering to support internal OpenStack, Kubernetes, and bare metal environments- Developed an employee to take on a team lead role in a supporting organization

New York, Ny, Us

- Managed a team responsible for firewalls, proxies, anti-malware, SSL interception, application delivery, and DDoS protection (>1000 devices)- Developed tools to ensure consistent configuration across vendor-provided platforms using Ansible and Python, reducing configuration errors by more than 30%- Managed a multi-million-dollar budget- Grew the team from 4 to 6 FTE and managed 4 onsite vendor representatives

New York, Ny, Us

- Built and managed the team responsible for firewall and proxy policies in a multi-vendor environment starting with 2 FTE and ending with 5.- Introduced new review processes and policies significantly reducing errors due to improper policy implementation- Drove the simplification of policy as well tools to improve consistency in policy implementation- Designed and implemented a dynamic proxy PAC solution replacing a manual file-based implementation

New York, Ny, Us

- Responsible for ensuring the stability of firewalls and proxies- Modernized the CheckPoint infrastructure- Designed a secure wireless environment for monitoring power consumption in core data centers

Rahway, New Jersey, Us

Network security and incident response team as part of the acquisition of Schering-Plough by Merck

Kenilworth, New Jersey, Us

- Served as a technical sounding board with respect to information security for all aspects of Global IT, including architecture, application security, perimeter modification requests, server hardening, secure configuration templates, and policy enforcement- Lead Information Security technical resource for 2 mergers- Created and implemented a threat and vulnerability management team, tracking system, and associated proceses- Designed, implemented, and operated the Network Behavior Analysis system for anomaly detection- Redesigned and implemented a hybrid Cisco and Sourcefire IDS system for enhanced IDS capabilities, as well as transitioned this system to a managed service provider for day to day operations and monitoring- Redesigned and implemented the WebSense web filtering system- Implemented the NetIQ Secure Configuration Manager system for detection of changes to SOX systems- Audited Firewalls, SSL and IPSec VPN Access, Routers, Switches, Windows Workstations (NT-XP) and Servers(NT-2008), Linux Servers, Unix (AIX, HP, Solaris) servers, and Wireless equipment

Bridgewater, New Jersey, Us

- Performed security (network, application, and policy) assessments and vulnerability testing for a number of banking institutions, enterprises, and service providers, both within and outside of the United States. Presented results to executive management- Technical lead evaluating Global Crossing domestic communication networksfor compliance with a security agreement with multiple government agencies.- Designed and implemented an MPLS core and DSL access network for a large European communications provider- Technical lead in the security evaluation of a major European Telecommunications Service Provider web site as well as their command and control and internal networks in 2003- Architected and implemented the network management systems for a school district with over 300 locations and thousands of managed nodes- Designed and implemented a high availability network security solution for a government agency using Checkpoint Firewall1 NG, Nortel Contivity switches, RSA Ace Servers, Radius servers, and Intrusion Detection Devices- Co-Authored the whitepaper “The Path to Packet – Evolution Issues for Multi-Service Networks” with Dr. Stephen Walters. Also reviewed papers for the World Telecommunications Congress 2002

Bridgewater, New Jersey, Us

- Assisted in the design of the network management systems and network security for the Network Operation Center for the NAP of the Americas- Designed an IP addressing and routing schemes for onboard aircraft networks and supporting ground stations and data centers. Managed additional resources for selection of an IP management tool and design of a domain and element-naming scheme- Developed a high capacity, scalable, and secure network architecture- Created naming schemes and IP addressing schemes for all IP equipment- Created a suite of programs that automates the ANX (Automobile Network Exchange) Certification process. Utilized Remedy/ARS (now Peregrine) to develop the problem management system and provided ongoing support- Evaluated, recommended, and implemented software for the acceptance testing of the web based interface of GTE’s Unified Messaging Platform

Master Of Science (Ms), Information Security

Bachelor Of Science - Bs, Electrical And Electronics Engineering