Manager Security

Top of Form

[pic]

Richard Bolyard

abm8wh@r.postjobfree.com

256-***-**** Home

256-***-**** Cell

*** ***** ***** *****

Madison, AL 35758

Education: High School, General, Grissom High School, Huntsville,

Alabama, 1990

Bachelor, Business Administration, Faulkner University,

Montgomery, Alabama, 2008

Training and Certifications

MCSE 4.0, 2000

CCNA

Network +

CISSP

Certified Ethical Hacker

Certified Penetration Tester

Experience:

Camber Corporation 2/2004 - 2/2010

6/2009-2/2010 Manager, Enterprise Security, Camber Corporation,

Huntsville, AL, United States

Working with executives, divisions, and employees to gain insight into

requirements for security concerns, technical requirements, and develop

new business plans to ensure IT growth matches those requirements.

Responsible for the IT security for the entire enterprise including

policies, standards, procedures, controls, compliance levels with ISO

9001, HIPPA, NIST and DCAA while implementing COBIT framework for better

adherence to compliance levels.

Developing new controls for IDS and IPS systems, audit controls, log

controls, risk management, business continuity along with assessing

current and future technology and security trends.

Setting up guidelines for new data classifications to ensure protection

for sensitive, private, or proprietary information.

Designing and implementing new security awareness training for employees.

Working with log retentions and analyze logs for possible issues and

infractions.

Working with administrators, information owners, and executives to ensure

understanding of security trends, issues, and mistakes to enhance

security measures.

Implemented new change control structures and process for approvals

before any production changes are implemented.

Working with vulnerability testing tools and manual processes within the

organization to find security issues.

Started basic penetration testing to find gaps in current security

configurations along with educating senior staff and employees on other

measures that may used to penetrate the current systems in place.

Working with tools such as Backtrack, Metasploit, Milw0rm, Nessus, Saint

and other penetration and vulnerability tools.

2/2004-5/2009 Manager, Enterprise Operations, Camber Corporation,

Huntsville, AL, United States

Responsible for all day to day operation of the Datacenter and network

infrastructure including overall design, policies, working with remote

contacts, building new requirements for business purposes, looking at new

technologies to secure data and networks supporting the local campus, 20+

remote sites and 1900+ users globally over the WAN.

Designed and implemented DR process using Legato Networker and VMware for

compliance with DCAA regulations including replication, onsite and

offsite storage requirements and procedures and policies.

Designed and implemented virtual datacenter converting 50+ physical

machines to a full Virtual Datacenter, including the use of EMC NS40

ISCSI redundant backend, multiple secure network trunk paths, boot from

SAN setup, data store configurations and design and multiple redundant

ESX servers.

Designed and implemented Cisco DMVPN network for remote offices with

multiple edge connections (T1 and DSL or CATV) with redundant VPN 2821

HUBS at the datacenter.

Designed and implemented redundant email systems using MXLOGIC spam/virus

protection gateway, load balanced Exchange 2003 front ends and multiple

backend servers.

Create secure separate DMZ based SMTP relay for DMZ email traffic.

Created multiple DMZ networks for hosting all remote site and corporate

public based and controlled based web servers.

Created secure HIPPA requirement driven network within the Hawaii based

office including using secure ssh based switches and ASA5505 firewalls

along with compliance requirements for data handling.

Deployed Barracuda web filtering to all office traffic to secure internet

usage along with Netflow analyzers to find misuse of bandwidth

allocations.

Redesigned network requirements for Virtual Datacenter to segment and

secure different systems with ACLs, VLANs, all driven by security

requirements.

Implemented environmental monitoring systems to work within datacenter

for intrusion, fire, water, and temperature with notifications.

Worked with the application group on SharePoint, accounting, and database

designs and implementations.

Reconfigured all remote offices to use Cisco networking equipment for

DHCP replacement due to issues with Microsoft DHCP un-authorizing itself.

Wrote policies and procedures in ISO 9001 system for disaster recover,

acceptable use, virus protection requirements, and Active Directory

security.

Designed and implanted upgrades from single PIX515E to redundant ASA5520

with failover capabilities.

Standardized the enterprise network to a more "cookie cutter" setup for

redundancy, design considerations, and ease of troubleshooting.

Designed and configured enterprise wireless using 802.11b/g/a Cisco

equipment with a radius authentication for internal users, and WPA2/AES

for guest access on separate VLANs.

Worked with IIS web sites controlled in the DMZ along with internal web

servers including the use of certificates (SSL) for encryption and

security, host headers, permissions, and user requirements for access.

Managed and controlled the internal and external DNS servers.

Redesigned and rebuilt Active Directory, Group Policies, and security

configurations.

Built the virtual datacenter up to 125 virtual machines running on 6 host

machines and one NS40 backend.

Redesigned the network and structure to take away distributed systems and

high level permissions to more centralized system with limited

permissions abroad in remote sites.

Documented network configurations with detailed and high level Visio

drawings.

Worked with multiple vendors including contract and pricing negotiations

along with SOWs.

Worked on yearly CIS budget for approval of ongoing requirements.

Set regular maintenance schedules for all systems for upgrades, updates,

and reconfigurations to ensure business requirements and security.

Setup and configured IPSWITCH Whatsup Gold, then implemented Solarwinds

Orion for detailed monitoring of network gear, servers, bandwidth, and so

forth.

3/2003-6/2003 Senior Network Consultant, Aspreon, Huntsville, AL, United

States

Worked with Aspreon in Huntsville location to try and start new Cisco

networking assignments along with new training systems for Cisco classes.

Senior technical Cisco instructor in the Huntsville location with a

secondary focus on new consulting business.

Taught Cisco CCNA and CCNP level classes. Consulted with companies on

possible engagements doing network design and implementations.

10/2002-3/2003 Technical Consultant, CompUSA, Huntsville, AL, United

States

Worked with CompUSA Huntsville to try and start new division of corporate

consulting.

Worked with networking and server issues from different companies around

Huntsville and Decatur to help troubleshoot issues ranging from server

configurations to network connectivity issues.

Assisted customers with network demands including Active Directory,

wireless, routing and switching requirements, hardware compatibility

needs, backup and restore including business continuity designs and

procedures and virus protection for the networks.

Successfully deployed wireless with PDA connections systems that helped

feed to new consulting work and referrals.

Taught MCSA, MCSE, A+ and Networking classes to corporate based

clientele.

Helped train local store staff on networking, wireless, server and

desktop systems.

3/2002-10/2002 Technical Manager, Executrain, Brentwood, TN, United

States

Technical Manager for Nashville, TN and Chicago, IL sites.

Created Terminal Server system with Windows 2000 and Exchange 5.5 for a

collaborative solution between the locations.

Led the testing and application of new technologies for use in the

training environments to organizations for complex internal and external

business processes.

Worked with BellSouth Network Reliability Council (NRC) Group on new

Cisco network to support voice mail platform.

Searched for and produced solutions for BellSouth platform, originally

created but not functioning properly, to achieve stability and ultimately

improving customer confidence. Responsible for mentoring over 25

technicians on the use of their solutions including Veritas Nerve Center,

Net Cool, HP Open View, and Cisco Works.

Trained the NRC Group on networking including Network+, Cisco CCNA and

CCNP classes.

Consulted with the IT department on their change over from UNIX to

Windows 2000 including teaching the MCSE classes and onsite consulting

for future needs.

Worked with several companies on network continuity designs including

BGP, redundant hardware, offsite storage solutions, and best practices.

5/2000-2/2002 Senior Network Consultant / Training Manager, Quilogy,

Franklin, TN, United States

Experience working with companies on the discovery, planning, and

deployment of Windows 2000 networks including Gaylord Entertainment,

Williamson County School System, Cumberland Swan.

Successfully managed technologies including TCP/IP, Domain Name Service

(DNS), Windows Internet Naming Service (WINS), Active Directory, Terminal

Server, RAS, Virtual Private Network (VPN), security policies, group

policies, Citrix terminal services, Cisco networks, VERITAS, ISA, virus

scanning, IIS, LAN/WAN design.

Led client teams with Microsoft on 2-day mentoring program of migrating

to Windows 2000 and XP with overall project success.

Primary consultant on changing Cumberland Swan from Novell to Windows

2000 with a Citrix server farm.

Selected by Microsoft to deliver speech and presentation on Group

Policies at the Nashville Windows 2000 Deployment Conference.

Developed, managed and wrote courseware for Cisco training program.

Train-the-Trainer adult education instructor for staff and senior

consultants.

Worked with Microsoft on new XP and Cisco consulting, training, and

client delivery. Professionally managed consultants in the Nashville

location and worked with 16 additional locations on trainer needs and

education.

Taught Microsoft and Cisco classes.

10/1999-5/2000 Technical Instructor / LAN Administrator, Executrain,

Huntsville, AL, United States

Local LAN administrator for Huntsville working with three classroom

setups and configurations.

Worked with Microsoft NT 4.0 Network, DNS, WINS, TCP/IP, (DHCP), VPN,

virus protection, backup, and restores.

Taught Windows NT4.0 MCSE classes including IIS and TCP/IP along with

Windows 2000 role out classes.

Liaison between development team and sales department on consulting with

companies in multiple industries for network and training needs.

5/1998-10/1999 LAN Administrator / Technical Services Manager, Direct

Connection, Decatur, AL, United States

Created, installed, and maintained local domain with Windows NT and 98

including DNS, Exchange 5.0, DHCP, and IP Subnet scheme.

Set up off-site storage warehouse with point-to-point T1 network.

Implemented ATT on router configuration and voice and data channels.

Implemented the MAS 90, File Maker Pro, Outlook, workstation, and laptop

configurations. Implemented the backup and restore system with offsite

storage included.

Technical Service Manager, created help support center for customer

difficulties on system issues.

Implemented the Hughes Technical Service center for the location.

Installed, designed, configured digital satellite systems for corporate

customers.

5/1988-5/1998 Self Employed CATV contractor

Created new CATV designs and implementations. Liaison between the CATV

companies and contractor companies, working with contractors and

technicians ultimately improving customer confidence. Responsible for

payroll, scheduling, deployment of work, quality assurance, and all

aspects of the company.

Installed and provided technical support for Primestar and DirectTV

satellite systems. Training of users and technicians on systems, support,

troubleshooting,

Created new training systems for new technicians and sales people to

increase revenue and footprint areas.

Supervisor roles for many different CATV contractor companies. Working

with installers, technicians, sales, payroll, surveys, audits and other

aspects of CATV requirements.

Skills

Network: TCP/IP, EIGRP, OSPF, ACLs, VPN, VLANs, ISCSI, FIBER, DMVPN,

Operating Systems: Windows 9x, NT, 2000, XP, 2000, 2003, Cisco IOS, VMware,

EMC, Linux, MAC

Applications: Active Directory, Backup Systems, Stoneware SSO portal,

Microsoft Exchange, Barracuda Networks, Trend Micro, Symantec, MS office,

IIS, DNS, Nmap, Backtrack, VMware ESX/Server/Workstation/Fusion, Virtual PC

Hardware:

Cisco: 2950, 2960, 3500, 3560, 3750 4500 switches including POE, 2600,

3600, 1700, 1800, 2800 routers, PIX 501, 515 and ASA 5505, 5520 firewalls,

3005 concentrator, ACS, 1130 Access Points

Dell: 2550, 2650, 2850, 2900, 1850, 1950 servers.

EMC: CX400 Fiber channel SAN and NS40 ISCSI NAS

Barracuda Networks: Web Filters

Security Clearance: Secret (S) current

Awards:

Charter Member MCSE 2000

One of the first two thousand people in the world certified in

Microsoft Windows 2000

Memberships:

ISSA

ISACA

Bottom of Form

Contact this candidate