• Led design and implementation of core network solutions using Cisco switches and advanced VLAN configurations.• Spearheaded initiatives for ransomware prevention, certificate management, vulnerability management, and data loss prevention.• Deployed and secured solutions with AWS, Azure, and GCP to ensure comprehensive protection of organizational assets.

Lead the design and implementation of core network solutions utilizing Cisco switches and advanced VLAN configurations. Scope further encompasses defining robust security standards, procedures, and strategic plans grounded in enterprise architecture principles. Spearhead initiatives and design solutions for ransomware prevention, certificate management, vulnerability management, multi-factor authentication, and data loss prevention. Leverage Fortinet Appliances for securing SDWAN connections across office locations and harness Microsoft Defender for endpoint security, ensuring comprehensive protection of organizational assets and data integrity.► Saved $1M by replacing legacy Ransomware solution with Rubric, which offered an intuitive user interface and strong security features. Implemented Rubric in the corporate data center and on web-based client-facing applications.► Evolved the certificate management system from manual to automated, streamlining the process for ~30 web Verisign-certified sites annually, ensuring seamless site security and uninterrupted uptime.► Upgraded the QRadar SIEM (Securing Information Event Management) to from on-site to on the cloud, rendering the solution scalable and centralizing solution management, tracking, and correlation of security events.

Directed development of security strategy, standards, and roadmaps grounded in sound enterprise architecture. Performed security assessments, conducted gap analyses, and offered recommendationsbased on findings, in order to bolster organizational security posture. ► Slashed SIM power hacking attacks by 80% by designing and deploying a multi-factor authentication (MFA) solution in the Microsoft domain and Citrix environment.► Implemented Digital Guardian data loss prevention (DLP) solution to track user sharing of sensitive personal data, notified users, and ensured they understood to only share with users on a need-to-know basis.► Updated legacy Cisco firewalls with next-generation Palo Alto firewalls, which controlled data between secure systems and public Internet, and replaced IP addresses with fully-qualified domain names.

Collaborated with clients at their locations to assist with the network and security components of the Experion Automation and Control system, predominantly participating in short-term security evaluation and remediation engagements. Conducted threat and vulnerability assessments for clients using Tenable Nessus and an in-house application based on Microsoft tools. Utilized Microsoft Defender to institute more secure endpoints and limit the use of USB devices. Implemented Cisco, Fortinet, and Palo Alto firewalls between the Internet and the DMZ (demilitarized zone) of the internal network, usually in a redundant pair with failover capabilities. Established Solarwinds or What’s Up Gold for network management, configuring notifications through email and Remedy.► Designed and engineered network security for a new construction refinery project in Qatar. Procured the equipment, and executed lab testing, configuration, and international shipping.► Implemented and configured network security on-site of a newly constructed natural gas plant, ensuring security of the industrial control system network, IT network, and the Internet.

Offered strategic recommendations and engineering expertise to clients within the security and network domain. Engagements included conducting threat and vulnerability assessments utilizing Tenable Nessus; establishing and enhancing Solarwinds network monitoring capabilities; and configuring endpoint protection using Microsoft Defender.. Achieved certification as a Fortinet Certified Network Security Professional and established multi-tenant Internet access with Fortinet and Fortigate appliances.

Directed the comprehensive planning and synchronization of the security infrastructure, while developing and upholding protocols and benchmarks, and delivering policy documentation.► Consolidated firewall and VPN connections, optimized VPM connection process, and eliminated unnecessary access. Enhanced monitoring capabilities by upgrading Solarwinds and integrating with Remedy.► Installed Palo Alto next gen firewall in collaboration with network engineers, enhancing internet traffic filtering and bandwidth management.► Deployed dark fiber, boosting network speeds from 1G to 10G at port locations for the Harris County Toll Road Authority.

Provided technical expertise on a series of assignments. Delivered crucial engineering design services for a large refinery project aimed at expanding the network and enhancing redundancy and resilience for both business and process control networks. Steered Shell Oil’s technology relocation from a refinery interior in Washington State. Additionally, provided NERC CIP audit remediation services for NRG Energy.

Spearheaded the full life cycle project to roll out a 3rd-party ERP application to corporate offices and 1,700+ locations, capturing a $50M savings. Directed a team designing and configuring network and systems to deploy a new enterprise application as an ASP, integrating load balancers and firewall configurations with web security.