Nirav Thaker Email & Phone Number

• Responsible for all aspects of companywide IT operations - supporting 90 users. Responsibility included IT operations and maintenance of infrastructure such as wired and wireless networks, back-office infrastructure and operations, end user computer configurations and deployment, and end user technical support. Responsible for recruiting IT professional and technical staff. • Use Ubiquiti cloud solution to manage network and wireless infrastructure to make changes and monitor performance. Set up notifications for when devices stop reporting in to notify of any outages• Worked with all departments to assess their current requirements are met and identify their future requirements to help them achieve their future goals/requirements• Analyzed existing IT infrastructure, documented current and future IT infrastructure and user support needs and made recommendations for changes in wireless network infrastructure, segmentation of network for improved security and performance, etc. • Recommended building comprehensive IT policies to help the company comply with current and future IT laws and requirements example included building fair use policy, security training policy, infrastructure• Collaborated AV experts in designing new AV solutions to replace old outdates systems• Developed a new system to assist IT staff remotely manage all end user devices for security and application updates and remote end user support.• Established ticketing system to better manage and prioritize support for all IT requests and allocate resources more efficiently.

• Lead team of engineers to provide optimal IT solutions in support of company’s clients for managed network services. Analyzed customer requirements and proposed optimal WAN and LAN solutions. Deployed and managed IT solutions at customer locations to meet and improve their network services. This included procurement, deployment, and operations of network, server and end user computers. • Developed procedures to make IT support team more productive and efficient deploying new IT service escalation criteria and procedures, getting customer satisfaction reports, etc. • Provided CEO with reports and updates on ongoing task/projects and suggested solutions for any issue points and deficiencies for the customers. Provided customers with reports and met with clients to document how the project requirements are met and set new expectations• Monitored customers edge and/or internal networks using Auvik and PRTG for downtime and performance.• Provided training to junior team members to grow skills and help develop their IT career

• Evaluated Sony Corporation security architecture for compliance with Sony IT security standards and identified deficiencies for all Sony subsidiaries. Managed an engineering team to accomplish deployment of improved network security solutions to all subsidiaries of Sony corporation worldwide that had identified deficiencies. Deployed 65 IDS/IPS devices, deployed security policies to Palo Alto Firewall and monitored the firewalls using Panorama in transition from Tipping point security solutions, deployed and configures over 300 in house build packet capture devices.• Deployed automated processes to build and configure network security solutions. This resulted in the build processes time from 4 hours per security device to 40 minutes. Developed a testing lab for security engineering team to test new security tools.• Developed training plans for engineers on my team to enhance technical skills. Implemented cross training program to provide support coverage during short staffing situations.• Created weekly and monthly reports for CISO and Senior Directors showing project progresses and security risk mitigations• Worked with network an IT security vendor to design security solutions to meet Sony security requirements when current Sony tools are not suitable• Worked with Sony Corporation worldwide subsidiary IT teams to ensure Sony security standards are met and monitored. • Created process for life cycle replacements of devices to prevent obsolesces and security lapses

As a Senior Security Specialist for this prestigious law firm, I was responsible for all aspects of IT security. • Reviewed security audits, analyzed existing issues and developed a plan to implement appropriate mitigations. Provided guidance on how to evolve the security posture of the organization to comply with best practices and industry standards• Managed Security for all end points and network infrastructure using various tools such Cylance and Redcloak. Used SEIM tool to alert on anomalous activities, conducted incident response activities when an incident is detected and provided analysis to prevent further such incidents. Performed forensic investigations on potentially compromised hosts.• Used SCCM to ensure all endpoint devices are patched with the latest updates to reduce vulnerabilities and push any need software to endpoints as needed.• Conducted Phishing tests using PhishMe as a part of security scan of network and endpoints and used penetration tests to identify security vulnerability and deployed mitigations. Provided IT security training to all employees to improve awareness and improve compliance with regulatory IT security requirements such as FISMA and other laws• Maintained firewalls and network infrastructure. Deployed IT security patches to all servers and end user computers using SEIM tools. This resulted in reduction of security incidents.

Provide technical expertise and architectural guidance for network and cloud architectures. Work with other security engineers to develop and implement IT security infrastructure, policies and procedures that can assist Georgetown University with variety of emerging IT security threats and make university IT infrastructure compliant with NIST and other federal IT security regulations, guideline, and industry best practices.Manage and analyze IT security incidents including: network security, intrusion detection, incident handling, system administration and vulnerability management.Manage Campus wide Palo Alto/Cisco firewalls for all departments, data centers and border boundaries. Develop procedures for dealing with DDoS attacks and work with Network and System administrators to implement and validate DDoS procedures. Develop SOPs for DDoS incident management.Create custom SPLUNK dashboards and searches for network traffic analysis that helps detect and assists in resolving security indents and identifies vulnerabilities. Modernize value of security tools and automate routine tasks through implementing custom scripting using various languages and API’s of security tools and software vendors.Assist organization goal to move to the cloud (AWS) by creating security guidelines, policies, and procedures that will make university’s cloud IT infrastructure compliant to applicable IT security regulations, policies and universities security preferences. Identify, assess and recommend appropriate security tools and software to implement and enforce security for cloud based IT infrastructure. Conduct Vulnerability scanning using Nessus and Qualys.Monitor network devices using Nagios, Solarwinds and Thousandeys. Also use Flowtraq to capture netwflow.

Silver Spring, Md

Function as the Senior Network Engineer for the U.S. Army Walter Reed Army Institute of Research, Silver Spring, MD. Responsible all network architecture design and implementation for the Medical Research laboratory and supporting WAN connections to U.S. Army Research labs worldwide. Design and Implement a DMZ for public servers and an enclave for medical Devices according to DISA STIG’sRedesigned and implemented a new campus wide network that moved from a flat layer 2 to a layer 3 network that utilizes efficient switching and routing layers.Design wireless network and deploy WLAN in 3 phasesDeploy new Cisco VPN using ASA firewall Implemented Cisco SSL VPN and integrated it with Active Directory authentication. Provided customer support in resolving technical problems and assisted in implementation of new technologies.Plan and design Guest Wireless networkPlan and deploy refresh of datacenter using Brocade VDX switches, migrate from VBLOCK to new Flexpod virtual environment, re-cabling of racks. The refresh also included complete redesign of Vlan structure and IP scheme and implementation of new Fortinet Firewall. Help troubleshoot and maintain CONUS and OCONUS networks.Work with clients to gather requirements for new deployments.

Reston, Va

Design, Implement, and maintain Wireless IDS/IPS system to monitor and secure U.S. Food and Drug Administration (FDA) Wireless LAN using AirTight Networks WLAN IDS/IPS system. Designed and engineered the SpectraGuard IDS/IPS monitoring server infrastructure as a high availability environment, prepared bill of materials (BOM) for procurement and integrated AirTight IDS/IPS sensors in FDA HQ buildings in FDA Washington metropolitan area facilities. Performed server upgrades, patches, backups and other routine operations and maintenance activities. Implement Cisco Systems based WLAN infrastructure in many new FDA buildings. Use network monitoring tools to measure performance and use packet capture tools to capture network traffic and Designed and implemented SolarWinds Orion Network monitoring application for Center of Medicare/Medicaid Services (CMS) in support of the Affordable Healthcare Act (aka “Obamacare”) network infrastructure. The application provides real-time monitoring of connectivity and data throughput and reporting of the Wide Area Network status to other federal contractors and Federal managers. Assisted CMS personal in determining network outages and reporting procedures. Provided guidance in optimization of network performance. Implanted Lancope Network monitoring, analysis and SIEM appliance for the CMS network infrastructure. Lancope monitors Cisco Netflow data traffic to protect and monitor internal networks.Implemented VMware ESXi based virtualization environment for running Microsoft and Linux servers, implemented Network Attached Storage (NAS) solution, and Microsoft Active Directory environment for Singhal and Company internal network.Implemented Cisco SSL VPN and integrated it with Active Directory authentication. Provided customer support in resolving technical problems and assisted in implementation of new technologies.

Provided Support to the Northern Regional Medical Command HQ and all its medical clinics including Walter Reed HospitalPlan and implement WAN routing changes.Implemented VPN tunnels using Juniper devices.Managed and implemented Cisco ASA and PIX firewalls, Cisco Ironport, and cisco 6506 router.Implement a load balanced/redundant network using the latest Brocade technology.Configure IAS/NPS radius server, logging servers, and network management servers and software.Write documentation on network implemented and work with government leads to write policies.Planning, coordinating and execute transitions of WAN circuits with multiple agencies of DoD.Working at Walter Reed Army Medical Center providing technical support for the planning, implementation, monitoring and maintenance of Walter Reeds network infrastructure including: LAN, WAN, Unified Communications VOIP, UPS, and new network technology as they evolve and perform duties as required.Troubleshooting LAN/WAN network components and connections.Perform configurations and routine/Ad hoc maintenance for LAN/WAN/CSU/DSU's, switches, routers, wireless network controllers, and other related networking equipment.Prepare bill of materials for network maintenance and future deployments.Perform organizational inspection programs (OIP) across Army bases.

Working at FDA Washington metropolitan area facilities.Perform Upgrade of Core/Distribution Routers.Provide trouble shooting for VOIP and LAN/WAN networks for different remote sites.Configure UPS units with IP addresses so they can be monitored online.On a test Cisco 4506 switch configured DHCP server, VLANs, Single area OSPF routing, loaded and backed up configurations, create an SVI.Updated IOS software.Configure VOIP system for auto answer and extension forwarding.Install new 4500, and 6500 series switches onto racks in IT closets, install Cisco line cards into switches, and install SFPs and GBICs modules.Install patch cables in IT closets between patch panels and Cisco switches with labels and record port mapping information in to Excel spreadsheet for import in to databases and WireCAD diagramsDeploy Cisco 7937, 7942 and 7962 Voice over IP (VOIP) phones and configure the phones. Install cisco web cameras onto end user desktop computersTrack deployed VOIP phones and webcams using an online database.Coordinate the configuration of VOIP phones for user moves.

Working at FDA Washington metropolitan area facilities.Read and follow network diagrams to trouble shoot network issues.Install new 4500, and 6500 series switches onto racks in IT closets and install Cisco line cards into switches, install SFPs and GBICs modules.Install patch cables in IT closets between patch panels and Cisco switches with labels and record port mapping information in to Excel spreadsheet for import in to databases and WireCAD diagramsDeploy Cisco 7937, 7942 and 7962 Voice over IP (VOIP) phones and configure the phones. Install cisco web cameras onto end user desktop computers.Provide support to end users if they experience difficulties with VOIP phones, Data network or webcams.