• Performed penetration testing for large scale clients, both application and system• Design and implement vulnerability discovery and management programs• Evaluate and redesign current security infrastructure for clients to meet multiple compliancy standards• Evaluate network infrastructure and plan for future state environments• Design, test, implement and redesign firewall and other security infrastructure to harden current security programs.• Pursue client leads and work with potential clients to sell professional services.• Consult on all levels of information security for large and small scale clients.

I was hired into the Cosmopolitan of Las Vegas to assist in re-architecting the entire infrastructure to bring the company current with PCI compliancy guide lines. I am finding and designed solutions that meet our needs while working closely with our Verizon QSA to ensure the proper measures are taken. • Find, design, and implement a 2 factor solution not only for VPN connectivity but also dual authentication to systems in our internal environment that are specific to our PCI environment.• Assist with network segmentation and simplification to help properly secure systems based on the zones, the devices should be in.• Find and implement methods for internal and external vulnerability management and asset management for compliancy standards. Implementation of Qualys provided us the solution that was required while saving the company additional expenses to hire a 3rd party to perform the scanning.• Firewall migrations from one vendor to another as part of the network segmentation• Develop a secure way for contractors and vendors to connect to the devices they needed, internally and remotely while ensuring identity and access management policies were met • Perform a full firewall rule audit on all firewalls to ensure the rules provided a proper level of security for day to day operation while not effecting traffic or creating outages• Find and implement WAF devices to secure our web applications• Implement and tune IDS / IPS Systems while maintain the highest level of availability• Work closely with staff and vendors to implement a SIEM that properly fit our needs while assuring a cost effective solution and ensuring all applications and appliances that need to be monitored are in order to safeguard our PCI and Nevada Gaming MICS standards are kept.• Ensure all security policies are followed while improving and creating existing and new policies and procedures.

After Caesars merged with Harrah’s I was contracted to Caesars Entertainment to satisfy a need they had for a Check Point engineer with experience in migrating Juniper and Cisco firewalls to the new platform. There was also a need to audit the firewall policies and redesign the rule structure to meet PCI and Nevada Gaming MICS compliance standards.• Design and implement a full firewall migration from one fire wall vendor to the new platform• Trouble shoot and diagnose communication issues that might be related to the firewall migration processo TCP Dumps, Firemon Reports, Tracker investigation.• Maintain on call availability to ensure if any issues or outages were caused during the efforts I had the ability to solve them in a timely matter with little or no downtime.• Gather data from various tools for firewall rule remediation.• Work with project groups to ensure working deployment of new environments, and proper integration with the existing infrastructure.• Ensure all security policies are followed while improving and creating existing and new policies and procedures.• Work with network and proxy engineers to ensure connectivity• Audit and re-mediate existing forward proxy devices to assure proper policy compliance and effective use of the devices

After Bank of America merged with Merrill Lynch I was contracted to provide firewall migrations and support for the new and changing infrastructure.• Provide top level Check Point support for our HP and Bank of America clients.• Trouble-shoot and diagnose communication issues that might be related to the firewallo TCP Dumps, Firemon Reports• Maintain on call availability• Gather data from various tools for firewall rule remediation.• Work with project groups to ensure working deployment of new environments.• Configure connections including rule base and routing and ARP entries.• Ensure policy, guidelines and SOP are followed to ensure deliverables are met in a timely fashion.• Work with network and proxy engineers to ensure connectivity• Install and configure new Checkpoint firewall clusters. Ensure proper function to hand off to dell secure works for management.• Engineer and implement firewall migrations from Juniper and Cisco firewalls to the new Check Point platform (Provider 1 on R70)• Maintain all proper documentation and cataloging of appliances, rules and users.• Audit firewall policy to ensure the current and future policy was maintained.

• Provide support and management and trouble shooting for Check Point firewalls. NGX R60-R65 and R70 – R75• Trouble shoot Juniper security appliances. SA devices SRX Netscreen• Trouble shoot and provide support for Blue Coat proxy appliances SG Reporter Manager• Configure and maintain Unix/Linux based appliances. Nokia IP appliances Cross Beam X40 and X80’s• Ensure customer satisfaction through exceptional customer service.• Use vendor support applications to properly diagnose bugs and other appliance and software issues.• Trouble shoots policy and connectivity for all devices and platforms above using a multitude of tools and troubleshooting resources.

1 Maintain the structure for threat and vulnerability management using the Qualys vulnerability management system.2 Ensure PCI / SOX compliance through vulnerability discovery and patch planning.3 Perform web application vulnerability analysis with web inspect and IBM rational software to ensure web applications and services meet PCI & SOX standards. 4 Manage the web threat management with ForeScout devices Active Scout to prevent un authorized behaviors.5 Use a combination of security devices to identify aggressive behavior on the network (MARS, Source Fire, Check Point)6 Gather monthly reports on currently vulnerable hosts on the network and suggest corrective actions.7 Work with block engineers to rapidly solve business critical problems.8 Developed on the fly applications and scripts in C# and VB.net.9 Design and maintain sql 2005 express database for use in various situations10 Maintain Proxy Devices.11 Update rule base in firewall according to business needs.12 Diagnose network connectivity.13 Create applications and automation tools for common tasks.14 Assist in management of our blue coat environment.15 Provide tier III support over our RSA VPN 2 factor authentication.16 System Performance monitoring using HPOV and Solar Winds17 Diagnose and repair IIS and .net related issues18 Configure and maintain Unix/Linux based appliances.