Senior Consultant responsible for SOC development, security architecture and engineering, SIEM integration, event log management, network security, web proxy, threat intelligence fed vulnerability management.

Enterprise Security Design and Consulting (ESD&C). • Technical lead for Secure Enterprise Firewall Project.• Migrated Cisco ASA to Paloalto Networks firewalls using PAN Migration Tool and Expedition.• Identified and remediated permissive firewall policies on hundreds of firewalls.• Analyzed traffic logs using Splunk and created dashboards for engineers.• Converted layer four rules to layer seven.• Documented network security infrastructure.• Performed network security assessments with business units in many countries.

Led a team of five working on a firewall migration and remediation project that served as a one year pilot for the larger global Secure Enterprise Firewall project that would follow.

Perimeter Security Team - Service owner for remote access, support of Paloalto Networks firewalls and Pulse Connect Secure Gateways spanning eighty-nine countries. Managed and completed a large scale board level initiative and project to mitigate significant security risks on time and within budget. Implemented two factor authentication, upgraded gateways in North America, Europe and Far East and led the conversion from SHA-1 to SHA-2 user and machine certificates. Completely transformed remote access globally. Fully documented access methods, configurations, processes, decision trees, workflows and trained the trainer. Also created Pulse Champions group which resulted in reducing the number of tickets escalated to less than .5% of total incidents after the conversion including the addition of a new SSLVPN client with two factor authentication servicing over 120,000 employees and contractors.Supported over 500 PaloAlto Networks firewalls using Panorama appliances. Utilized Splunk to visualize client connection methods, locations and other information involving the access of over 3000 different internal applications and services within the global enterprise network. Supported Entrust IdentityGuard IAM and used Splunk with Qualys Vulnerability Management to mitigate risks and solve critical network security issues.

Responsible for Information Security at WG Mustang Engineering.Migrated from F5 to Citrix Netscaler SDX/VPX Xen Server hypervisor/virtual appliances.Evaluated 2nd Generation firewall technologies. Selected and deployed PaloAlto Networks firewalls.Deployed FireEye Web management protection system in the U.S. and UK. Upgraded Bluecoat proxy and AV at all locations world wide.Implemented Netscaler Content Switching and Global Site Load Balancing (GSLB).Managed a large scale security and vulnerability assessment throughout WG Mustang Engineering.

Responsible for perimeter security, firewalls, load balancers, proxy and packet shaping.Replaced centralized Internet infrastructure including ISP’s, routers, switches, firewalls, F5 LTM’s, and reverse proxy appliances. Lead engineer responsible for the design and implementation of the Proxy, Shaping and WAN Optimization project using Blue Coat ProxySG and Packet Shaper appliances. Improved application performance by 30 %, and prevented the need to upgrade WAN links across the enterprise for the implementation of SAP. WAN Optimization will save the company an estimated $500,000 in recurring circuit costs per year. Integrated Infoblox DNS/DHCP/IPAM appliances with MS Active Directory and replaced BIND DNS.Identified and integrated a project to provide Application Performance Management and utilized Compuware Transaction Trace Analysis and Compuware Gomez (Vantage AMD/VAS) and instrumented tiers within the SAP environment.Implemented Solar Winds Orion Network Management System to monitor network infrastructure.Simulated WAN behavior using the Shunra Storm appliance to access new applications. This allowed developers and other teams to experience how applications will run for individuals located at remote sites.

Recognized as Top Performer in Enterprise Communication Services group.Designed, presented and led a project to convert the AG routed network from Bay Networks to Cisco SystemsConverted the WAN from RIP2 to EIGRP.Implemented CA Unicenter TNG network management system, with email and page alerts to the appropriate groups throughout the IT department.Deployed Shiva Access Switches to respond to an audit finding and improve perimeter security. Used a war dialer to locate rouge modems throughout the AG dial plan. Provided enterprise dial up remote access and outbound dial out over PRI circuits using Shiva and Digital Pathways Defender two factor authentication.