Mosaic451 is a Managed Security Service Provider (MSSP) that provides Network and Security Operations Center (NOC/SOC) design, implementation and operation services for enterprises. As the Architect lead engaged in the entire project cycle from requirements gathering, presentation, design, documentation, and implementation of all customer and Mosaic451 network security projects. Led an eight member geographically dispersed Network Engineering team providing technical mentorship, vision, and a strategic roadmap.Key Achievements:*Spearheaded development and deployment Mosaic451 MSSP data center deployment improving security posture and visibility for proper segregation between acquired customers, and introducing several key security technologies for operations. Increased network capacity by 800%, improved business continuity with fault tolerant designs, and increased network scalability that supports 20+ customers, 3 branch sites and 150+ users.*Created and positioned the automation of critical business processes using Gitlab, Ansible/Tower and Python, that streamlined MSSP customer onboarding and reduced deployment times from 3 days to 30 minutes.*Developed and deployed customer network architecture for the fifth largest school district in the US, Clark County, who supports more than 320,000 students. Redesigned perimeter and core networks improving performance, and increased network capacity by 50%. Improved peer relationship with District schools, while providing a fully redundant solution.*Performed network security assessments and directed the network segmentation project for Aaron’s network which supports all their stores nationwide and an employee headcount of 11,000. Worked with Aaron’s team to provide an implementation roadmap, findings, and fixes, incorporating processes for the daily maintenance and automation of operations.*Developed and deployed AWS cloud networks for disaster recovery for business continuity, and customer cloud projects.

The Office of Secure Transportation (OST) is responsible for the safe and secure transport of government-owned special nuclear materials in the contiguous United States. As the Senior Network Engineer, and technical lead architect supporting two geographically dispersed data centers, 4 command sites, multiple classified networks, 300+ users and a nationwide mobile network for convoys. Key Achievements:*Redesigned and deployed networks to geographic redundant and fault tolerant data centers to include a new VPN transport network for 4 remote sites, and connectivity for convoys nationwide.*Developed and designed an SD-WAN solution over cellular networks that removed manual provisions, automated redundancy, provided central management, and network visibility of the convoys nationwide.*Redesigned and deployed wireless networks at remote sites and branch offices addressing external brute force attacks, and Internet exposure. Increased network capacity by 50% and improved network performance by 25%.*Developed and deployed multifactor authentication solution, introduced the Linux platform, VMWare ESX virtualization, Cisco ACS, RSA, and SolarWinds NMS which met stringent federal mandated security requirements.

The Office of the Chief Information Officer (OCIO) leads the Department of Energy's IT reform initiatives. As the Senior Network Engineer, and Western technical team lead for Energy IT Services supporting multiple nationwide geographically dispersed data centers, 30+ nationwide remote locations and 4,000+ users.Key Achievements:*Led nationwide migration of 40 ASA to Palo Alto firewalls, introducing NGFW functionality, and improved customer edge security for all nationwide customers and data centers.*Developed and deployed a nationwide IPv4/IPv6 FlexVPN network using a full certificate authentication ecosystem, that included a Certificate Authority and IKEv2 for DOE National Laboratories.*Led design and deployment of Infoblox DHCP/DNS, NetMRI, F5 GTM/LTM, DNSSEC, and What’s Up Gold NMS.*Deployed and integrated data center standups for Albuquerque, and Denver as geographical redundant sites for Germantown, MD which supported 4,000+ users, and 30+ remote locations. Integrated data centers with DMVPN’s, BGP, EIGRP, Anycast, over nationwide private MPLS circuits.*Integrated IPv6 to the nationwide network using BGP and EIGRP with dual stack edge routers propagating it through the various data centers, DMVPN and FlexVPN transits.

• Supported 150+ users at main campus, in addition to 1 off-site locations• Setup/Administration Cisco ACS Radius/TACACS• Setup/Administration Kiwi syslog server• Setup/Administration RSA Server• Config hardening of switches and routers• Cisco router and switch management• Implemented and maintained cyber-security initiatives. Created process and procedures.• Cyber-incident response team• Administered Windows 2003 servers • COMSEC Officer & Taclane Operator• Setup/Administration CheckPoint Firewall• Setup/Administration Lancope IDS & SELM HDS• Support firewall VPN, logs, rules, updates• Setup/Administration of 802.1x• Provided Tier 3 support• Setup/Administration iPrism web filter• Administered Mail Gateway server• Performed vulnerability scans, audit scans• Designed and implemented IT-related SOP’s