Successor to the CISO chair, and as Head of Cybersecurity, I serve as key role in IT leadership; providing the vision, strategy, broad-based planning, and hands-on responsibility for the Information Security program. Working closely with senior leadership, application engineering leaders, and the enterprise. Advocating for the company’s information security needs, I am charged with developing and delivering a comprehensive information security strategy to optimize the security posture for IDB. My accomplishment at IDB was to establish a sound security program to meet SEC and FFIEC regulatory compliance by establishing, building and managing a team of security professionals in the areas of the Network Security Program, Identity Access Management, Vulnerability Management, Privileged access Management, Incident/Response Program and Security Operations Center. Accomplishments include building automation, processes and procedures using ServiceNow to streamline all requests/changes across all technologies as well as using the SecOps module for Incidence/Response and Vulnerability management.The Cybersecurity team provides security review of all applications which identifies, prioritizes and resolves the most critical security vulnerabilities which can possibly threaten the organizations’ security risk posture across all servers or platforms.Technologies architected and designed includes Splunk Logging infrastructure using search heads/indexers/forwarders, Phantom for SOAR, IXIA Matrix switch for data aggregation, CrowdStrike EDR, SafeBreach BAS for attack simulation, Privileged Access Management using CyberArk PAS, PVWA, PSMs, ALERO, AD Bridging and EPM. Varonis DatAdvantage/DatAlert and Data Classification, F5’s GTM/LTM/ASM/AFM, BackBox for device/configuration management, Cymulate, established Blue/Red team Pen Testing teams using Pentera Pcysys., Multifactor authentication using OKTA and Gemalto Cloud solutions. Imperva WAF/DDOS for all external Web facing apps.

Working as a Senior Engineer Designing, implementing and maintaining Core infrastructure as well as Extranets, Intranets, Internet and all remote sites. Responsibilities include research and evaluation of new emerging products/services to either enhance or optimize current infrastructure. Position also consist of implementing security throughout the network from wireless to switch ports utilizing PEAP for Wireless and NAC products. Recent project was converting all Cisco 1231 APs from FAT to LWAAP using Cisco WLC 4402 .Experience includes:Local and Geographical Load balancing between 3 sites utilizing F5 and Citrix NetscalersDesigned and implemented 2 Tier Internet infrastructure utilizing Cisco ASA 5580's and Juniper Firewalls with dual internet links in 5 locations around the globe running BGP for link redundancy.Redesigned core infrastructure from a collapsed environment to a Distributed Architecture using 6500's as campus cores, distribution and edge devices with 80g etherchannel links between campus and distribution switches and varied bandwidths between distribution and edge devices.Implemented TACACs authentication with several access levels for all network device administration using Cisco ACS servers Worked on Cisco WAAS Optimization devices to provide increase performance on WAN CircuitsWorking on building Vendor Network with Palo Alto application firewall