SUMMARY:

A top - performing engineer with extensive experience. The ability to address security vulnerabilities working with both technical and functional teams when building a resilient security solution. Provides both hardware and software solutions to insure network confidentiality, integrity, and availability. Capable of working within a budget and identifying areas to increase profits while reducing overhead. Possess the ability to create and implement policies and procedure utilizing The Center for Internet Security Critical Security Controls to build a defense-in-layer security infrastructure. Ability to work well with all levels of management while managing multiple high visibility projects.

AREAS OF EXPERTISE:

• Cisco Nexus Routers Network Support Procedures
• Cybersecurity Project Management
• Datacenter Management Troubleshooting
• Enterprise IPTV VPN/MPLS/IPsec
• Infrastructure Vulnerability Assessment/Pen Testing WAN / LAN Services
• Network Architecture

TECHNICAL SKILLS:

• Cisco Advanced Malware Protection F5 LTM
• Cisco Concept Draw/ IPsec/GRE/MPLS
• Cisco Catalyst/NEXUS/ASA Juniper NSM
• Barracuda Analyzers Juniper SRX
• Office 365 FortiGate: 1000D
• Cisco Prime Infrastructure Rapid7 IVM/IDR Forensic
• SIEM Dark Trace

PROFESSIONAL EXPERIENCE:

Confidential, Atlanta, GA

SENIOR SECURITY ENGINEER

Responsibilities:

• Manage multiple FortiGate - 1000D active/passive firewall. O/S Fortigate 6.0 Patch7. Device type AV, Malware, IDS/IPS
• Implement and support Cisco Advanced Malware Protection for endpoint security utilizing event trajectories to pin point malware throughout infrastructure
• Responsible for the design, testing, evaluation, implementation, support, management, and deployment of security systems/devices used to safeguard the organizations information assets .
• Develop Executive Audit Reports weekly - tracking critical vulnerabilities and high-risk assets.
• Establish reports for each sector of support including infrastructure vulnerabilities, security anomalies and remediation time and effort
• Perform vulnerability penetration testing, risk analyses, and security assessments .
• Facilitate mandatory annual cybersecurity to all faculty and staff
• Establish system controls by developing framework for controls and levels of access; recommending improvements

Confidential, Alpharetta, GA

SENIOR REMOTE SECURITY ENGINEER

Responsibilities:

• Configured and installed firewalls and intrusion detection systems (FireEye)(Fortigate)
• Determines the sensitivity of the data in order to recommend the appropriate security needs
• Supervised and approved changes in conducting weekly change control meetings
• Developed security awareness by providing orientation, al programs, and on-going communication
• Attended change management meetings to access impact of all changes
• Worked remotely with team members utilizing Skype for business for remote meetings and/or troubleshooting sessions

Confidential, Atlanta, GA

TEST LAB ENGINEER

Responsibilities:

• Implemented and supported WAN/LAN services including IPsec VPN /SSL VPN hub & spoke topology additionally supporting OC12 circuits. Setup test beds for application testing and ad insertions
• Maintained firewall support using Juniper NSM to manage multiple SSG5s, and Juniper SRX 110
• Configured VPLS, IES, VRRP, port mirrors on Alcatel 7450/7750 routers
• Utilized troubleshooting and testing tools to monitor, evaluate and optimize network performance. These tools include Interface Ports Mirrors, RSPAN, IXIA ANUE NTO's, Wireshark, Gig Astor, and INEOQUEST packet analyzers
• Supported OC12 circuits coming into the building extending to sites in Texas and New Jersey
• Maintained extensive Visio 2012 documentation that supports network operation including network diagrams, IP addressing schematics, vendor agreements, network device and hardware backup configuration

Confidential, Atlanta, GA

SENIOR INFRASTRUCTURE ENGINEER

Responsibilities:

• Defined processes for Junior level engineers to provide routine maintenance, monitor network activities, optimize network performance and tuning
• Managed multiple data centers both remotely and locally; implement site-to-site VPNs to data centers
• Provisioned and implemented SQL, Exchange Linux servers
• Interconnected Barracuda Filters and backup servers alongside SonicWALL and ASA firewalls in a fully redundant configuration eliminating single points of failures
• Configured EqualLogic SANs in full replication mode attaching to multiple HP G8 host in a VMware clustered environment.
• Performing V2V and P2V's into the newly created cluster, relocating host as a mirror to company disaster recovery location
• Managed multiple clients, building strong relationships with IT Directors and CIO's
• Local travel to customer locations to update and or recommend changes to their environment

Confidential, Lagrange, GA

NETWORK ENGINEER

Responsibilities:

• Managed MPLS circuits to company datacenter and internal resources
• Worked in a clustered ESXi vSphere 5.0 environment provisioning VM's with Server 2008 R2 attaching to Symantec Net backup resources.
• Managed multiple Cisco 3750 V2, 3548xl, 2950xl, 2948xl series switches
• Thorough understanding of LAN/WAN topologies in cloud-based environments designing and implementing new segments, utilizing Visio 2010 to create detailed topology diagrams
• Maintained BGP peer routers across multiple autonomous systems embodying both EIGRP, and OSPF networks, troubleshooting flapping and failed routes
• Supported AVAY VOIP phone system
• Set up VPN clients on all workstations using Secure ID token for VPN access

Confidential, Atlanta, GA

REMOTE NETWORK ADMINISTRATOR

Responsibilities:

• Provisioned VRE Backup servers, and Virtual Servers (VM Ware vSphere ESXi 4.0) running on Linux based servers
• Migrated legacy Windows 2000/2003 servers to virtual servers using VMware V-Center
• Built server environments within VMware managing servers virtually
• Managed devices in a partial MESH environment
• Managed Cisco 2811 routers and 3500 switches, 3COM switches, DHCP Configure DHCP pool on severs and routers to accommodate subnet IP addressing scheme for each branch
• Assisted management in defining processes that reduce time needed to complete server builds, which saved over $50k in labor cost.