Manage the Security Enforcement and Logistics (SEAL) team focused on driving a strategy to improve the security posture of the perimeter and internal network.• Develop and report on functional roadmaps (Internet DMZ, Web Proxy, eMail, etc.)• Develop tools to track and help automate security roadmaps• Prioritize and escalate functional security roadmap gaps• Create KPIs and/or KRIs and dashboards to provide executive level insight into security posture• Increase policy review board scope to review other high risk policies in addition to firewall rules

• Develop specifications, designs, and network security solutions to protect the company's networks, application systems, key public infrastructures, and confidential data• Identify emerging threats and vulnerabilities to assess corresponding available security technologies to mitigate identified risks• Assess industry products and develop network security product roadmaps and strategies• Serve as the highest level of network security consultant to internal lines of business and technical management• Partner across multiple functional and departmental teams to design and architect the perimeter network and supporting DMZs

• Architect and design network security systems in accordance with Enterprise Architectures and Information Security Policies to ensure the integrity and security of the network• Review, test, and certify new security solutions• Consult for project planning and coordination for network security engagements• Design and deploy the next generation DMZ for support of Corporate Investment Banking• Architecting and implementing day 1 connectivity strategies for merger initiatives• Define corporate firewall product strategies.

• Analyze, design, and deploy network connectivity for off-shored initiatives as part of the ITGS (IT Global Sourcing) effort• Analyze, design, and deploy network infrastructure to extend core, distribution, and access network connectivity internationally (iWIN)• Consult and advise on the design and architecture of the network connectivity to enable Internet applications such as Online-Banking and eBrokerage• Consult and advise on the design and architectures of the ESN channels providing dedicated network connectivity to external customers and business partners• Consult and advise on the design and architecture of the Secure Application Zone providing for secure environments for application deployments that requires a higher level of network connectivity• Partner with Cisco in identifying appropriate component selection for routers performing IPSec encryption• Participate in design, testing, and product selection with Cisco and Foundry on various load balancing solutions

• Led the DMZ/eChannels team in design, engineering, and implementation of network solutions to solve business unit requirements• Evaluate technical specifications and emerging technologies to define architecture and standards for consistent team designs and implementations• Mentor staff on routing, switching, and encryption technologies to develop team knowledge• Manage 9 full time network engineers and 5 contractors• Develop engineering workflow and team policy/guidelines to ensure consistent and timely implementations• Develop yearly project plan for the DMZ/eChannels tam to determine required resources• Manage change control within the DMZ to minimize risk and ensure maximum up time• Coordinate project plan and implementation activities with other supporting teams such as CIS, DNS, and BAS to ensure the full application operability

• Develop, document, and deliver technical solutions to solve business requirements• Perform quality assurance by peer reviewing engineering designs and plans to ensure customer requirements are met• Perform quality control by reviewing implementations to ensure accuracy and standards compliance• Evaluate technical specifications and emerging technologies to define standards for consistent team designs and implementations• Maintain Secure Networks standards documentations• Design, implement, and support remote access services, extranet services, and internet services• Install and configure Checkpoint firewalls to enforce corporate security policy• Install and configure Sun Solaris Unix to run network applications• Install, configure, and troubleshoot Nokia firewall appliances• Install, configure, and troubleshoot Cisco and Foundry routers and switches

• Design site-to-site VPN solution to replace frame-relay WAN infrastructure to reduce network costs and improve network security• Design and implement client-to-site VPNs to replace traditional dial-up RAS• Troubleshoot communication/protocol issues to resolve network problems• Configure Cisco switches and routers to enable communication for new networks• Configure NAT to allow private networks internet access and to implement overlapping networks• Implement access-list to control network usage• Control route propagation through the use of distribution-lists• Research and design a strong authentication (token) security solution to comply with corporate IT security standards• Install and configure Unix, Windows NT, and Netware 5 to run network applications• Install, configure, and administer Check Point Firewalls to secure internet gateways• Migrate Check Point Firewalls to Provider-1 to consolidate management modules

• Design and implement a multi-domain Windows infrastructure to allow easier account management under one domain• Design and maintain NDS user directory and file directory to allow effective assignment of user rights and permissions• Install and configure Netware 4.11 to provide file and print services• Install and performance tune Windows NT for applications• Implement Microsoft Message Queue Service (MSMQ) to share data across applications hosted in a web farm• Install and manage SQL server to store data for network applications• Research, develop, and monitor backup solutions to comply with disaster recovery standards• Create server documentation to familiarize other on-call staff with supported systems• Build computer racks and configure server hardware to host network services• Troubleshoot hardware and driver issues to prevent downtime• Monitor performance and health of servers to identify server resource issues

• Perform all HR functions related to maintaining a staff of more than 35 employees including recruitment, hiring, training, termination, and annual reviews• Motivate employees by implementing various incentives such as an Employee of the Month program and a Concession Commission program• Develop new inventory process that minimized losses and increased the effectiveness of the ordering process• Set performance goals related to concession sales and ticket sales• Led concession and box office teams in executing various marketing promotions• Develop various Excel spreadsheets for inventory and expense reporting• Deposit and reconcile all income, process invoices and routine reports• Maintain and support LAN and computing equipment