SUMMARY:

• Highly creative and client focused Information Technology Professional with over 15 years of industry experience spanning every aspect of the design, implantation, configuration, management and support of complex, mission - critical LAN/WAN network security solutions for a virtual who’s who of Fortune 100 companies across the United States.
• Capabilities include an extremely broad knowledge base and familiarity with the latest cutting-edge technologies, including firewalls, VPN, IDS, and IPS. In-depth knowledge of TCP/IP, high availability, load balancing, and remote management complements outstanding relationship management, analysis, and problem resolution skills as well as outstanding organizational, multitasking, and team building skills at all levels. Proven ability as a resourceful coordinator, quick to learn new skills in fast-paced IT environments.

TECHNICAL SKILLS:

Firewalls: Checkpoint, Juniper SRX, JUNOS, Palo Alto, Cisco Firewall Service Module, Cisco PIX, Cisco ASA, Netscreen

Intrusion Detection & Prevention:: Enterasys Dragon NIDS, Snort, Cisco Secure NIDS, ISS Proventia Series, McAfee IntruShield, Tipping Point, Juniper IDP

Migration Tools: SCCM, Salesforce, SMAT, Metalogix, Windows Assessment & Deployment Kit

Network Security Tools: Nmap, Nessus, ISS Internet Scanner

Security Management & Log Retention Management:: Netscreen Security Manager, Enterasys Dragon Manager, Site Protector, ISS Internet Scanner Console, Cisco Works, Cisco Security Manager, IntruShield Manager, Cisco MARS, LogLogic, SkyBox

Platforms: Microsoft Windows 2007+, Red Hat Linux, Sun Solaris UNIX, FreeBSD, & Nokia IPSO

Software Skill Set: Blackberry (BES - BAS, desktop manager), IPhone, IPad, Android Phones / Common store / Amazon Web Services (AWS) / DTOC / Excel / Intelliwatch / iSeries / Lotus Notes / Net Backup / Norton / McAfee / Oracle / Citrix / Microsoft SQL / Alerater HDD Duplicator / Outlook / RSA Security Console / Office 365 / BMC Remedy /IBM.MAXIMO 7.5 / Sharepoint / Triactive/ Dynamics CRM / Sametime / Server Admin Plus / MAC Xserve / Service Center / Symantec / Symantec Ghost imaging / LanDesk / JAMF Casper Suite / HTML/XHTML, CSS and JavaScript / UNIX / SCCM/ TechUtil ver. 9 / Windows 7/8/10 / Windows Server 2003/2008/2012 / Exchange Server 2007/2010 / SharePoint 2007/2010 / AV Setups - AMX & Creston control systems, Polycom & Tandberg video conferencing systems / Avid-iNEWS 3.2 / Adobe Photoshop /Cisco VOIP (configuring & troubleshooting) / Ruby Software / Citrix XENApp / VMware: Microsoft Hyper-V / Active Directory including Group Policy / Firewall Administration (Juniper, Palo Alto, ASA, Checkpoint) / Managing load balancer (F5, Citrix Netscaler, Apache) / Solarwinds / Cisco routing and switching (Arista)

PROFESSIONAL EXPERIENCE:

Executive Deskside Support Analyst

Confidential

Responsibilities:

• Provide 3rd level troubleshooting support for VIP (approx. 200), user related issues on Windows 7/10 with Active Directory, group policies, print management and thick client applications.
• Manage and troubleshoot print management on Windows 2008 servers.
• Troubleshoot and determine the root cause of applications failing.
• Determine IE settings for applications to work in Windows 7 and Citrix environment.
• Use Service Now web based application to support and manage incidents and issues reported by the VIP users.
• Make recommendations on planning and engineering tasks for migration of numerous applications (AirWatch)
• Coordinate with test team to perform test of various fund applications
• Responsible for the definition, design, including interfaces with other applications and systems.
• Assures that application designs are consistent with industry best practices application attributes (including scalability, availability, maintainability and flexibility).
• Hardware and software includes: Windows 7/10, PC compatible computers, Windows OS, MS Office Suite, and Developmental to include an array of other software packages.
• Perform capacity planning for hardware and software ranging from servers to workstations and laptops, datacenters, etc., propose hardware/software upgrades wherever necessary and required as per project requirements.

Sr. Network Security Engineer

Confidential - Sandy Springs, GA

Responsibilities:

• Provide 24/7 technical support for managed security services, security engineering, infrastructure and management. Manage and monitor client security devices.
• Administered various security tools such as; McAfee Antivirus and McAfee Solidcore to secure the Windows environment
• Managed McAfee EPO server and McAfee products. Also performed patch management for entire organization. Websense Administration. SonicWall VPN management for customer connections.
• Perform installs, configure and troubleshooting on stateful inspection firewalls and inline/passive IPS/IDS sensors.
• Perform firewall migration project between different technologies.
• Serve as lead on configuration and troubleshooting VPN’s on all vendor firewall devices
• Serve as Subject Matter Expert on global operation projects and architect network security solutions for customers utilizing a variety of cutting edge technologies.
• Daily analyzed network traffic looking for trends and or malicious activities, created vulnerability report with action plans.
• Configure, administer, and document firewall infrastructure, working with Checkpoint/Juniper/Palo Alto
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall
• Manage firewall deployment, rules migrations, and firewall administration
• Responsible for converting existing rule base onto new platforms
• Responsible for Rules and Policy Pushes
• Assisted in IT security audits for Confidential

Sr. Firewall Engineer

Confidential, Washington, DC

Responsibilities:

• Responsible for rule usage reporting and rule analysis pertaining to least access
• Identify unused rules and submitted to line of business for approval to keep or disable
• Experience with FireMon rule analysis and reporting tools
• Experience with Checkpoint smart domain manager
• Responsible for Firewall rule remediation including Checkpoint and Juniper rules
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall
• Manage firewall deployment, rules migration, and firewall administration

Sr. Network Engineer

Confidential, Baltimore, MD

Responsibilities:

• Lifecycle: analysis, design, testing, deployment serves various industries: financial, brokerage, banking, insurance, health care, manufacturing, pharmaceutical, and many others.
• Responsible for consulting and technical support Microsoft Windows 7, Microsoft Windows Server 2003/2008 and 2008 R2, Active Directory Domain Controller, Microsoft Exchange 2003/2008/2010, SharePoint, Linux, Unix, SQL database and other systems, networking, wireless.
• Network installation’s and administration: Cisco IOS, Nexus OS 2000, 5000, Catalyst switches, Firewalls administration, ISDN line, Checkpoint upgrade to R80, firewall rule base revalidations and migrations, support, Cisco catalyst 6500, 7600 Series Wireless Services Module (WiSM), Cisco Wireless LAN Controller 4402 Cisco Wireless LAN Controller Modules NME-AIR-WLC8-K9 with 3845 Services Router, Cisco Catalyst 3750G Integrated Wireless LAN Controllers, Cisco Unified Communications Manager, ASA 5500 & NetScale applications firewalls configuration’s, monitoring, troubleshooting.
• Assisting all technical environment with effective monitoring solution, Integrations of Google applications: Control the access to content by managing group membership. Wirelesses network troubleshoot and support based on CISCO Aironet 1100,1200, Cisco 1520/1522 Mesh Access Points.
• Maintain security and privacy with sharing permission. Installing Digital Certificates.
• Manage the file sharing permissions system-wide. Managing Gmail business filtering spam protection and many more.
• Assisting all Systems Development Life Cycle (SDLC) and supporting Web environments: site, mail, web hosting.

System Administrator/Engineer

Confidential - Washington, DC

Responsibilities:

• Responsible for migration all CISCO testing laboratory running multipurpose Voice VoIP, Video Conferencing for running effective tests solutions for various Cisco devices and software equipment which is over 360 on 26 racks networking & systems containing Cisco 6500 Switches, Linux Based high-end Servers, Storage SAN, NAS. Cisco 3700/3800 routers, 2800/2600 Router, Cisco 2950 switches, 7200 Routers and 4500 Switches, Multi service Modular MDS 9222i, Cisco Voice Gateways VG224/248.
• Configured and troubleshot; VLAN’s, STP, VTP, Tranking, DNS, DHCP Ether Channels, Access Lists, EIGRP, OSPF, NAT, MPLS and static routing.
• VSXi installation on Cisco Server Chassis UCS-5108, UCS 6120xp for new product testing and development, in both a test and production environment.
• Configure and maintain a variety of modules for the 6500 Switch including; AON, NAM, Sup2, Sup720, and Switch modules for both copper and fiber.
• Coordinate lab move, planned bldg power shutdown, bldg power outage issues and lab bring up.
• Performed security research, analysis and design for all client-computing systems and the network infrastructure. (SOC)
• Developed, implemented, and documented formal security programs and policies.
• Monitored events responded to incidents and reported findings.
• Utilized Security Information and Event Management (SIEM), Intrusion Detection & Prevention (IDS / IPS), Data Leakage Prevention (DLP), forensics, sniffers and malware analysis tools.
• Administered McAfee Antivirus Enterprise Policy Orchestrator (ePo 3.5 and 3.6), Image and deploy new laptops and desktop computers using Symantec Ghost
• Install and administer numerous Linux solutions including; DNS, DHCP, NFS, Apache, MySQL, and a variety of Java based Cisco apps, and tools.
• Manage firewall deployment, rules migration, and firewall administration
• Enabled customization of application load balancing solutions through the control and direct manipulation of the application traffic (F5’s TCL scripting language)
• Administration of F5 configuration CLI including both BigPipe and Traffic Management Shell (TMSH)