Norm W. Email & Phone Number

Meridian, Idaho, Us

Scottsdale, Az, Us

Wawa, Pa, Us

• Design and document datacenter and store network connectivity for a 900+ retail store environment including cloud service connectivity to AWS.• Redesign datacenter Palo Alto firewall zoning to accommodate increased segmentation for the enterprise network while implementing firewall policy standards to keep configuration organized for ease of review.• Build out new private vlan infrastructure for a cost effective micro-segmentation solution within the new datacenter environment.• Implement and document a new global private IP address strategy accounting for 4+ Data centers, multiple corporate locations and 900+ stores ensuring sufficient IP space for future growth and to avoid network address translation where possible in its deployment. • Test and implement new SDWAN technologies in the corporate side of the enterprise network such as Velo Cloud and Meraki software defined networking for all corporate and branch office connectivity. • Design a new remote access solution to include advanced network admission control measures and pair them with 802.1x controls for company laptops as well as 3rd party vendor access.• Mentor Jr. and mid-level engineers on the team helping to guide best practices and familiarize team members with written standards.• Provide level 3-4 support as part of a on call rotation for the retail and enterprise campus networks throughout the organization.

Princeton, New Jersey, Us

• Maintain and operate 20 different business units within the company’s network Infrastructure. Solve daily trouble tickets involving issues with routing, IPSEC tunnels, and layer 2 related issues.• Research and configure new SDWAN WAN solution utilizing the Talari product. Configure the NCN appliances along with design a change plan for core routing implementation.• Assist in the west coast data center migration helping to create the cabling plan along with internet public address migration to the new ISP. • Migrated the Princeton firewall from Cisco ASA to Palo Alto working with the security engineers to create new internet edge polices for IPS, URL filtering, and other network security measures.

Philadelphia, Pa, Us

• Redesign and implement the retail chain network DMVPN with 500+ spokes routers to use certificate based authentication on new Cisco ASR headend platform.• Implement and configure new certificate authority architecture to utilize SCEP for spoke router enrollment in the field for rapid deployment as well as Cisco Anyconnect client VPN authentication. • Design a new firewall and IPS strategy for the core network utilizing Palo Alto firewalls at two different datacenter cites across a VPLS backbone running OSPF.• Reconfigure Nexus 5000 core switching environment to accommodate new VRF strategy for increased security across multiple zones for IPS inspection.

Us

*Develop and align Information Assurance and Information Security platforms and services to comply with corporate policies for data access and management.*Ensure that all technology resources are integrated and operating according to Information Security and Assurance standards.*Identify and implement courses of action that mitigate risks to an acceptable level; design and implement policy enforcement, physical security, and increase awareness of security threats.*Direct risk and vulnerability assessments of applications, user access, and operating systems; recommend corrective actions based on Information Security best practices.*Implement and configure Baracuda Webapp firewall for Layer 7 protection of company web applications.*Install Cisco Intrusion Prevention Systems (IPS) to alert support teams in the event of suspicious activity, enabling engineers and administrators to detect and block high-risk attacks.*Manage multiple projects to improve technology security and performance, including installing Barracuda Spam firewall and tuned the device to filter out incoming spam to the Exchange server.*Upgrade systems to align technology with business requirements, including migrating existing Microsoft Window 2008 domains to Windows 2008R2, and moving Exchange Server 2007 to Exchange Server 2010.

Singapore, Sg

*Implemented device and operating system hardening according to government (STIG) processes for government security clearance requirements.*Installed new Checkpoint Firewall implementations for isolated environment while also maintaining existing checkpoint R70.*Established a new, improved VPN policy on Checkpoint firewalls using the Windows-based RSA Secure ID server, and managed issues with the Citrix Xen Server and WYSE terminal connectivity.

Roseland, New Jersey, Us

*Configured and administered large ASA firewall configurations and VPN client as well as site-to-site connectivity to production environments.*Configure Layer 3 switching and VLANs on IP subnets and design a new dynamic routing plan using EIGRP; ensured that all devices were fully redundant utilizing HSRP.*Managed a server environment consisting of more than 180 Windows 2003, UNIX mix with large-scale Cisco network equipment, ensuring 99.99% percent uptime for all production environments.*Assisted in the installation of VMware Server and VMware ESXi for production and training environments.*Administered a large Active Directory environment consisting of over 120 servers, and maintained and implemented Microsoft Exchange Server 2003 for outgoing customer mail.*Installed, configured, and supported firewall configuration and maintenance for multi zoned web and application server farms.

Contern, Luxembourg, Lu

*Maintained and supported the process control network for production paper machine equipment; managed Active Directory domains for the ABB DCS network, *Administered routers and switches for all process subnet related network connectivity, and assisted the helpdesk in installation and maintenance of WYSE terminal systems for Citrix Server.

Cherry Hill, Nj, Us

*Established, implemented, and maintained best practices and operational procedures governing the use and administration of IT resources; ensured the availability of business networks by leading effective problem resolutions and administration efforts.*Managed technical personnel staffing, recruitment, supervision, scheduling, development, evaluation, and disciplinary actions for all technical staff members.*Developed and implemented new platforms for major clients; designed and serviced systems used to streamline business operations and increase IT system performance. *Collaborated with management teams to identify business requirements and aligned IT initiatives and strategies to the defined needs of internal and external customers.*Defined and applied infrastructure strategies to ensure infrastructure improvements, including enterprise capacity planning to meet current and future growth requirements.