SUMMARY

• Security and Network Design Engineer with extensive experience in leading engineering design efforts for firewall implementations.
• Extensive knowledge of test methodologies utilizing today’s complex testing solutions.
• Demonstrate expertise in security standards, policies, procedures, and reporting.
• Enjoy dynamic work environments and solving complex problems.
• Motivated in training and mentoring others.

TECHNICAL SKILLS

• Network Security
• Firewalls
• System Design
• Lab setup and testing
• Project Management
• Project Implementation
• Wireless Data
• Security Policies and Procedures
• Wireless LAN
• Hardware/Software Skills
• Juniper SRX Firewalls (5800 and 3600)
• Juniper SSG520M and SSG5
• Juniper STRM
• F5 BIG - IP Firewalls 5200 and Viprion 4800
• Juniper NSM
• Juniper ISG2000 Firewall
• Breaking Point test gear (storm, firestorm and perfect storm)
• Juniper MX 480 and 960 routers
• Ixia XT80
• Juniper EX switches
• Ixia XM12 and XM16
• Cisco routers and switches
• ESX and virtual servers
• Checkpoint v4.0, v 4.1, NG, and NGX R77.20
• Oracle and MySQL databases
• Nokia Appliances 3.x to 4.x
• Solaris 7, 8, 9 and 10
• SevOne
• SourceFire
• Nortel Networks VPN Gateway
• Microsoft Office: Word, Excel, PowerPoint, Access

PROFESSIONAL EXPERIENCE

Confidential, Morris Plains, NJ

Senior Network Engineer

Responsibilities:

• Utilized Palo Alto VM firewall in a Azure solution to protect our WVD farm, and server farm all in the cloud replacing 1 of our on prem datacenter.
• Replaced our Juniper site - to-site VPN with a GlobalProtect Large Scale VPN (LSVPN).
• Replaced user VPN with GlobalProtect Portal with LDAP and SAML authentication.
• Installed SIEM for SOC2 and DFS compliance utilizing the Rapid 7 insightIDR product.
• System monitors 8800 users, and 1200 endpoints utilizing 3 collectors with 44 event sources.
• Responsible for all security and remote access to our Azure environment.
• Installed and manages Aruba Clearpass to authenticate all users’ systems on the wired network.
• This ties into our cisco switch to give port level security.
• Responsible for all Cisco switching in both the core and satellite office. This included design, build and installation.
• Design and implemented a new core switching infrastructure using Nexus 9K switches replacing the 6509.
• Migrated the internet circuits off the Radware LP to cisco ASR1001 routers utilizing BGP.
• Installed and manage Cisco Prime to manage all the Weichert switches.
• Manage Radware LinkProof system for static NATs and DNS for internal and external websites.
• Installed and manage a wireless LAN solution for the headquarters buildings.
• Installed SevOne network monitoring solution to monitor all network equipment.
• Monitoring over 1000 devices including firewall, switches, windows servers and ISP links.
• Designing and lab testing replacement solution for our Checkpoint/Juniper firewall and VPN.
• Focus on KPIs as well as the ability to have AV and web filtering to protect satellite offices.
• Design and completed the migrating from Checkpoint and Juniper firewall solution to a Palo Alto solution.
• Monitor key KPI of all systems.
• Manage the budget for the network systems.

Confidential, Branchburg, NJ

Principle Member of Technical Staff - Network Security

Responsibilities:

• Design comprehensive test plan to push the system to its limit and find faults in new firewall hardware and software.
• Perform lab testing to establish requirements for the deployment, configuration, hardware, monitoring, logging, auditing, and management of carrier class firewalls.
• Lead projects to create and implement custom security designs for datacenter and distribution environments in the Confidential infrastructure.
• Analyze KPIs of firewalls from multiple vendors to provide Confidential insight on firewall selection, network vulnerabilities, and security design standards.
• Act as subject matter expert (SME) for the security infrastructure and point of escalation for operations teams during outages.
• Designed the security infrastructure protecting the critical nationwide IMS components of the " Confidential LTE network"
• Create design requirement documents for each new firewall solution using the Juniper ISG2000, Juniper SRX5800 and SRX3600, F5 Firewall.
• Create build procedures based upon network requirements and create hardware equipment specifications for those solutions.
• Create final documentation for solution implementation.
• Responsible for all Firewall management solutions. These include Juniper NSM and STRM and F5 BIG-IQ
• Subject matter expert for Breaking Point and Ixia test gear for all of NNO (Nationwide Network Operations)
• Integrate solution into corporate Network Management systems (HP Openview, SevOne, LogLogic)
• Tested Sourcefire solution to integrate into corporate MTSO for a multi system protection for all mobile users.
• Used Checkpoint Firewall-1 to protect wireless data and services to customers.
• Consulted regional personnel on security issues with Wireless Data and how to better control access to Confidential network devices.
• Performed self-audits of the Confidential Data Network to ensure proper security measures were in place utilizing such tools as NMAP, CyberCop and Nessus.
• Constantly ensured business objectives were aligned with Security Policy and Procedures.

Confidential, Branchburg, NJ

Member of Technical Staff - Information Technologies

Responsibilities:

• Designed and engineered SQL cluster system utilizing Windows 2000 advance server, SQL 2000 and Compaq SAN. The system was designed to have 99.99% availability.
• Served as Project Manager / Senior Technical Engineer for corporate proactive monitoring system, encompassing HP ManageX, Compaq Insight Manager, and HP Openview.
• Designed and programmed all policies needed to monitor all HQ locations.

Confidential, East Hanover, NJ

Advance Network Engineer

Responsibilities:

• Wrote monthly SupportLink documentation for each customer’s server including trend analysis and recommendations of each server.
• Built and test Seagate probes before installing on customers site and was accomplished by building a 3.x server and installing and configuring the Seagate product suite.
• Used NetFinity to monitor Notes servers, Novell servers, OS/2 boxes, and Windows 3.1x and 95 systems.
• Downloaded daily log files and graph data for each process monitored.

Confidential, Parsippany, NJ

System Administrator

Responsibilities:

• Performed system design, installation, procedure development and training for computer systems.
• Designed and implemented system for remote users to access the network e-mail system via a modem.