Dario Morshedian

CCIE R&S, CISSP, and OSCP (soon)

ac00t4@r.postjobfree.com

908-***-****

HIGH LIGHTS

Masters of Science in Computer Science from the University of Pennsylvania with a GPA of 4.0/4.0, and Ivy League honors. Bachelor of Science in Computer Engineering from University of California, San Diego with a GPA of 3.83/4.0, Magna Cum Laude.

Extensive design, implementation and troubleshooting/debugging experience with:

oFirewalls and Proxy Servers: Checkpoint, Juniper, Fortinet, Cisco, and Bluecoat

oNetwork Switches/Routers: Cisco IOS and Nexus, Juniper JUNOS/ScreenOS and Arista EOS

oComplex scripting and programming in both networking and security in Unix/Linux and Windows environments

oVPN: SSL/IPSEC work with Juniper and Cisco

Expertise in Networking, encompassing MPLS, BGP, Multicast, QoS, Wireless, VoIP and Video. Cisco CCIE for 15 years, and recently CCIE Emeritus #5013, and giving security work priority relative to networking (CISSP, OSCP).

Expertise in Security: Firewalls (Juniper, Fortinet, Checkpoint), Proxy servers, Network Equipment Security, VPN, Wireless, and Vulnerability/Penetration testing.

Expertise in Scripting and Programming: Python, Perl, Linux/UNIX/Windows shell, C/C++

Additional specialization in low-latency environments, network audits, and M&A’s.

Have held full-time and consulting positions at organizations such as Citigroup, Merrill Lynch (now Bank of America), Dow Jones, ADP, FDNY, Deutsche Bank, Morgan Stanley, Pershing, Cisco Systems, FORE Systems and AT&T Bell Laboratories.

Highly regarded for dedication, work quality, responsiveness, follow-through, documentation, presentations and communication of complex solutions to team members, peers and upper management.

MISCELLANEOUS

U.S. Citizen

Excellent Recommendations

WORK EXPERIENCE

CCNET Engineering– (2/2017- Present)

Senior Network and Network Security Consultant

Independent consulting work with financial companies to automate aspects of firewall security policy management and deployment to reduce careless mistakes, increase work efficiency, and replacing unsafe general policies with specific rules based on session logs and custom scripting in Python and Linux shell scripts.

Providing “in the office” training in network and security technologies. This training has helped cut training costs as engineers are trained several hours a week over a period of several weeks rather than having to take exclusive 1-2 week long training away from work. Engineers also learn details of application security concepts (such as buffer overflows) that they only knew at a superficial level previously.

The main reason for this period has been so that I would have time to greatly advance my own security expertise (CISSP, Vulnerability Testing, and Kali Linux OSCP) to prepare for leading-edge network security positions in 2017.

Citigroup– (1/2013- 1/2017)

Senior Network and Network Security Engineer - Consultant

Troubleshooting complex connectivity and performance network and security problems in nearly the entire Citi network comprised of Cisco, Checkpoint, Juniper, Bluecoat products. Received high recognition for consistently solving tough network and network security problems.

Enhanced Citigroup’s low-latency infrastructure, and was instrumental in integrating it with the Citi parent network in order to realize cost-savings, without comprising performance. Work included network design and build, firewall infrastructure design and implementation, as well as extensive documentation and training for operational personnel.

Wrote various utilities in Python, Perl and shell scripts to automate firewall security policy management and implementation. This followed programming/scripting work in the network group that aided in network deployments as well as troubleshooting. Environment included Juniper JUNOS and ScreenOS firewalls and Cisco IOS and Nexus network equipment.

ADP– (12/2010- 12/2012)

Senior Network Engineer/Architect - Consultant

Led the engineering and design work for the most complex and visible M&A’s. Work essentially defined a blueprint architecture for future M&A’s. Designed solutions based on Cisco ASR routers for the WAN (MPLS), Arista 7124FX as core switches, Fortinet firewalls, and Cisco 4507 and 4948 as access switches. Produced a multi-phased plan and design, complete with hardware, configurations, and drawings. Worked with engineering members of the acquired companies, as well as implementation engineers at ADP, to deploy the new infrastructure and have it monitored by ADP’s NCC. The plans included a gradual migration of the acquired infrastructure toward full integration.

Led a team that audited nearly all of ADP’s U.S. sites, discovered and documented issues affecting network availability, such as redundancy, configuration, management and documentation. As a technical lead within ADP’s audit and remediation program, worked with a team of network engineers, project managers and operations leads on remediation. Network availability improved markedly as a result of this team work.

Dow Jones– (09/2008 – 12/2010)

Senior Network Engineer/Architect - Consultant

Worked on enhancing and expanding a low-latency network that required continual optimization to stay ahead of competition providing real-time Economic Indicator data from US and International government lockup sites.

oPerformance work included topology redesigns, traffic engineering with QoS, and extensive use of IP multicast. This work employed tools such as Spirent/Smartbits, Sniffers, Splunk, and digital oscilloscopes.

o Expansion work included re-architecting the customer-facing infrastructure using MPLS, BGP, OSPF, QoS, and multicast on Cisco and Juniper (JUNOS) equipment, and migration from Juniper/Netscreen firewalls to Fortinets.

oWork also included verification of designs in the lab, producing network design documentation including configurations, troubleshooting of complex performance and connectivity problems.

Merrill Lynch– (2007-2008)

Lead Market Data Network Engineer - Consultant

As a member of the distinguished “Global Design Authority” team, was lead engineer of complex projects involving Market Data and Trade execution. Furthermore, was principal contributor to substantial cost saving projects by way of proposing network efficiencies, obtaining management approvals and then implementing network redesigns. Produced own design and configurations, as well as reviewed those of team members. Worked closely with large exchanges such an NYSE and NASDAQ and learned the intricacies of interfacing with their networks and delivering their services within the Merrill Lynch network. Work involved not only presentations, but also extensive design and hands-on troubleshooting with IP multicast, QoS, BGP and MPLS.

Fire Department of New York – (2001-2007)

Lead Network Engineer - Consultant

Work included design, verification of design, configurations, review of design and configurations produced by other engineers, new product evaluation, as well as some project management. Also served as lead technical escalation point for implementation and operational issues.

Instrumental in engineering and implementation of VPN solutions (IPSEC and SSL) for both site-to-site and remote access which included a large OSPF network design, PIX firewalls, QoS, proxy authentication, URL filtering using Websense, Aprisma Spectrum for fault management, CiscoWorks for resource management, and Niksun for performance management and troubleshooting. Work also included business justification to obtain funding to migrate from previous remote access solutions, and ultimately resulted in substantial cost savings.

Introduced new network technologies in the Fire Department, such as IP multicasting for video distribution, 802.11 wireless, Host and Network IDS/IPS, VoIP, QoS, as well OSPF to replace EIGRP where appropriate.

Designed an elaborate firewall infrastructure with DMZ’s for VPN, Extranet (agency-to-agency), and server farm. This infrastructure drew from my network security experience at Deutsche Bank.

Thrupoint, Inc. - (1999 – 2001)

Senior Network Engineer

Assignments at Deutsche Bank and Morgan Stanley

Implemented a sophisticated E-commerce network infrastructure for Deutsche Bank utilizing Cisco equipment for routing (BGP and OSPF) and switching, Foundry load balancing equipment for firewalls and servers, and Checkpoint firewalls. The network included T3’s to multiple ISPs, with scalability up to 1 Gbps. Replaced previous T1 network.

Also at Deutsche Bank, designed and implemented Disaster-Recovery (DR) infrastructures for tens of branches and external service providers (e.g., market data feeds), such as Bloomberg, NASDAQ, Reuters, Lehman Brothers and Standard and Poors. Following 9/11, when the main data center in front of the World Trade Center was destroyed, received high recognition for this DR work completed in the past.

At Morgan Stanley, as lead ATM and routing WAN engineer, helped convert an international backbone network from TDM to ATM, resulting in large cost savings. Work at Morgan Stanley also included WAN optimization (e.g., performance analysis, policy-based routing, QoS) for international sites.

International Network Services (1997- 1999)

Senior Network Engineer

Assignments at Deutsche Bank and Pershing (DLJ Direct)

Helped engineer and implement expansion of Pershing’s online trading network (which was ultimately acquired by e-trade) as it grew from a small outfit to a large on-line trading network. Work also included network operations, including trouble-shooting of complex performance issues.

At Deutsche Bank, was lead engineer at the NOC for resolution of complex network issues. Additionally, guided other engineers and helped them make considerable use of network management systems such as CiscoWorks and HP Openview, as well as tools such as Smartbits (load generator), Netscout (WAN probe), Netmetrics (performance analysis) and sniffers (Network Associates/Network General).

Cisco Systems (1996 - 1997)

Systems Engineer

Helped companies (such as Prudential) upgrade their networks to the latest technologies. This included transition to LAN switching while still preserving the advantages offered by routers. Work also included designs based on a broad range of Cisco products including routers, switches, network management, and campus/WAN backbone designs using products such as CAT5500/5000, LS1010, and WAN ATM products. Work included both pre-sales support (e.g., presentations and network design) as well as a great deal of post-sales hands-on work.

FORE Systems (1995 - 1996)

Systems Engineer

Worked on ATM projects including engineering the migration of T1 TDM WAN backbones to ATM, design of Ethernet/ATM VLANs, and many product evaluations for new ATM clients, including adapters, LAN switches, ATM switches, and WAN multiplexers for integration of ATM, Frame Relay, and TDM (by way of circuit emulation). Work included both pre-sales support (e.g., presentations, network design) and after-sales (e.g., installation, trouble-shooting, upgrades and planning for growth).

AT&T Bell Laboratories and AT&T Network Systems (1986-1995)

Systems Engineer, Project Manager, Software Engineer

As a project manager, responded to RFPs and prepared winning proposals (with competitive analysis included) for both domestic and international prospects, including enterprises as well as service providers. Proposals included multiprotocol data networks as well as new multimedia applications such as distance learning systems and real-time medical applications. Gave a broad range of presentations to both clients and sales teams. Worked with customer support and product development to quickly resolve field problems. Also worked with sales, marketing, and product development to plan future products and features.

As a Systems Engineer, designed internetworks based on routers, packet switches, FRADs and PADs for multiprotocol networks (IP, IPX, SNA, asynchronous, etc.) for clients such as financial institutions, hospitals and car rental companies. Assignments included both network design and hands-on configurations. Work also included helping clients (such as a service provider in Japan) develop their own customized network software.

As a Software Engineer, designed and developed network protocol software and network applications (e.g., protocol converters and security servers), as well as portable development environments for clients to develop their own network applications. Promoted to team leader (System Architect) in 1988.

Contact this candidate