SUMMARY

• I have compiled over 23 years of progressively responsible experience in Information Technology, with the latest 14+ years focused on Security. Hands - on network security systems integration, enterprise server HW and virtualization, administration and monitoring. Management of market-level support team and Data Center operations. Technical Project management and Technical Lead for various projects from concept to completion. Charter member of market-level committee for corporate process improvement.
• Security Incident Response initial responder for virus attacks, network infiltration attacks, DDoS, malware, ransomware and various forms of malicious SPAM (including death threats). Forensic evidence and legal-hold data gathering with proper chain of custody and storage of evidence.
• 7 years experience
• Security Audits - conducted for internal audits (AD, PII/PHI/SOX), supported external audits (SOC II, Financial institutions, customers). Provide audit documentation and general technical expertise.
• 7 years experience
• Firewall - appliance and policy management (Palo Alto/Check Point/Cisco/Enterasys) on various platforms. DMZ architecting and implementation using standard security zones methodology.
• 10+ years experience
• Network Security - administration of policy-based firewalls and integrated IDS/IPS management using Palo Alto High Availability configuration, Check Point integrated IDS, NAC Network Access Control using Forescout CounterAct platform, Nessus vulnerability scanning and SEIM log aggregation and monitoring, Multi-factor authentication using RSA soft-tokens, Barracuda Email Gateway and Web Application Firewall, Websense and McAfee web security appliances. Email encryption systems as Trend Micro Messaging Security Suite, Authentica SecureMail, and Ironport. Also configuration of various firewalls (Enterasys, Cisco ASA/Pix, Instagate, 3com, Netscreen, Linksys). Network monitoring with Solarwinds Orion, Nagios and Splunk logging, and Wireshark packet capture.
• 12+ years experience
• Virtualization implementation and deployment on VMWare V-Center environment. Integration with Fiber-channel SAN and 10G network. P2V migrations and resource monitoring and balancing.
• 6+ years experience
• Network Infrastructure - design, procurement, deployment, configuration, troubleshooting, mapping and documentation for various network architectures. Experience with enterprise-class routers and switches, NAC integration, VLAN, WLAN, WAN (SD-WAN, MPLS, IKE/IPSec site-to-site and B2B tunnels), PRI s, and legacy FR/T1 circuits.
• 14+ years experience
• Windows Servers 2016 (and earlier) with Active Directory domain/forest network design, installation, migration, multi-domain trusts, group policy management and cleanup scripts/BAT s.
• 16+ years experience
• Email SMTP transport configuration utilizing various systems (Barracuda, Authentica, Ironport, Exchange, firewalls). DLP-ACL rules configuration. SPAM and Malware threat protection.
• 16+ years experience
• Thin Clients - Citrix MetaFrame XP, Windows Terminal Server implementation, administration, license management, application configuration and server farm load-balancing.
• 5+ years experience
• SAN IBM-HP-Dell-Exagrid SAN integration and IBM Blade Center solution procurement, installation and administration. Configuration of Fiber Channel backbone to SAN switches and backup drives.
• 14+ years experience
• Database - MS SQL Server 2005/2000, MySQL Server database administration and ODBC connectivity. Light experience with Oracle 9i and clients, PL-SQL, and MySQL.
• 5+ years experience
• Telecom - PBX integration with VoIP and custom IVR solutions. ShoreTel, Lucent-Avaya, Nortel, Cisco and Inter-Tel PBX switch administration, ACD/IVR programming, and voice-mail systems.
• 16+ years experience
• Data Center - complete build-out and facility management including HVAC hot/cold isle, tandem UPS (periodic testing), HV cabling, backup diesel generator (periodic testing), equipment rack/cable management, Novec 1230 fire suppression system, demarc placement and monitoring of data/PRI circuits, physical security access system, raised flooring and environmental monitoring.
• 16+ years experience, 2 years experience Facility build-out
• Unix-Linux - server installation and support (AIX, Red Hat, SUSE, Ubuntu, CentOS, Sun-Solaris).
• 8+ years experience
• Security+ CompTIA Security vendor-neutral certification -obtained 2018
• Linux+ CompTIA I nstalling Operating and Maintaining Linux OS -obtained 2003
• Formerly held certifications (not current/active):
• MCSE Microsoft Certified Systems Engineer (NT4) -obtained 2001
• MCP+I Microsoft Certified Professional + Internet (NT4) obtained 2000
• CCNA Cisco Certified Network Associate Routing & Switching (not current/active, held twice) -last obtained 2013
• CCA Citrix Certified Administrator MF-XP (not current/active, held twice) -last obtained 2005

PROFESSIONAL EXPERIENCE

Confidential, Birmingham, AL

Network Engineer

Responsibilities:

• Security focused infrastructure engineering and support to include firewall policy configuration, RSA 2FA Secure-token system management, network IDS/IPS, network infrastructure with Forescout CounterAct NAC integration, federated SSO, and non-transparent web proxy.
• Security incident response and evidence collection. Palo Alto firewall implementation in High Availability configuration. Support internal/external security audits and documentation. Administration of Barracuda SMTP-SPAM-DLP Gateway and WAF Web Application Firewall ACL’s/rules.
• Virtualization environment administration utilizing VMWare V-Center, balancing VM resources for optimization. SAN (IBM-Dell-HP-Exagrid) integration utilizing Fiber-channel and iSCSI protocols, and IBM Blade Center server administration and maintenance.
• ShoreTel Telecom VoIP systems administration and maintenance.

Confidential, Birmingham, AL

Owner/Operator

Responsibilities:

• Sales and installation of home automation systems and peripherals. Support product issues, work with vendors for issue resolution, attend trade shows, interface with the public and product demonstrations.

Confidential , Birmingham, AL

Network Support Specialist

Responsibilities:

• Support of network issues for users including data, VoIP, remote access VPN, security issues, email, soft fax, and applications. Performed monthly testing of UPS and diesel generator failover, and HVAC maintenance for Data Center.

Confidential

IT Manager

Responsibilities:

• In addition to system administration functions, managed operations support staff (1.5 years). Interview and hire additional staff, performed bi-annual staff review process, project management and technical lead. Technical coordination of home office move (200+ users) and two remote office moves (approx 20-25 users each) in market region.
• Co-author of Disaster Recovery Plan for Alabama market as part of overall enterprise plan. Charter member of market-level committee for corporate process improvement.

Confidential

Systems Administrator

• Systems and network administration for Alabama market. Administration of Windows Server 2008, Check Point NGX Firewall-1, Websense, McAfee Security Appliance, Trend Micro Messaging Security Suite, Authentica SecureMail, Biscom Faxcom, Exchange 2007, IBM SAN
• Blade Center (with Fiber Channel), SQL Server, SCCM, Nortel PBX and voice mail, Cisco WAN routers, Cisco VoIP client support, ProCurve and Foundry Super-X enterprise class switches, Linux, Veritas Backup Exec, Citrix thin-client support, familiar with VMWare admin.
• Data Center build-out and management of $1M Disaster Recovery DC for the enterprise including HVAC’s, UPS’s, backup diesel generator, fiber infrastructure to data closets, 2-4 post server racks, ceiling wiring ladder racks, Novec 1230 fire suppression system and raised flooring.

Confidential, Birmingham, AL

Data Technician/Engineer

Responsibilities:

• Installed, supported and designed WAN, LAN and Server systems for small to medium sized clients.
• Cisco and Enterasys router and firewall configuration, WAN PPP and Frame Relay multi-point connections utilizing CSU/DSU's.
• Citrix MetaFrame systems admin and support. VoIP installation and support (Intertel).
• Programming of IVR utilizing MySQL and Intertel UI-IVR interface module.

Confidential, Huntsville, AL

Systems Administrator

Responsibilities:

• Project and Technical Lead for NAC implementation utilizing Forescout Counter Act platform. Integrated Network Access Control into network switches, wireless AP’s, and firewall. Created special VLAN’s for isolation of vulnerable (un-patched) and unknown guest devices.
• Project and Technical Lead for RSA Authentication Manager distributed VM deployment model with soft-tokens and VM appliance OS/patch maintenance for multiple sites.
• Technical Lead for Palo Alto Firewall installation and management for remote manufacturing facility/office site. Deployment of HA pair, policy rules and tunnel management, and IOS/patch upgrades. Completed 3-day administration training course.
• Project and Technical Lead for Check Point NGX Firewall installation and policy migration on Secure-PLAT (Linux). Distributed deployment design with access VPN integration and site-to-site tunnels configuration. Completed official 5-day training course for Check Point NGX Administration.
• Project Coordinator and Technical Lead for build-out of $1M Data Center MDF and enterprise DR site to include tandem UPS’s, HVAC’s, NOVEC 1230 Fire Suppression, structured rack & ladder wiring trays, fiber infrastructure, IDF closets, raised flooring and environmental monitoring.
• Project and Technical Lead for implementing an IBM SAN/Blade Center server solution with a Fiber Channel backbone and FC backup drives.
• Project and Technical Lead for network infrastructure upgrades to include core switch HW upgrades, L3 routing, circuit upgrades/cutovers to MPLS SD-WAN DS3 P2P and B2B tunnels.
• Project and Technical Lead for desktop faxing solution integrated with Exchange, PBX and AD.
• Database server installation and configuration of MS SQL 2005/MySQL for CRM and IVR objectives.
• Installation and configuration of Citrix MeteFrame XPa Server farm for CRM project.
• Telecomm programming of PBX (ShoreTel, Lucent-Avaya, Nortel, Inter-Tel) for ACD operations. IVR programming for call-out appointment notification system.