IT Security Professional

Duane L. Harrington CISSP ****************@*****.***

***** ****** ****** *****, **********, MN 55337 612-***-****

SUMMARY

Passionate IT Security Professional. Network, Security and Data Center experience with skills, knowledge and extensive background in technology. Long term commitment to Information Security. Willing to Mentor and share knowledge with all disciplines. Highly regarded Instructor. Constantly seeking new learning opportunities and improvement. Highly adaptable to a rapidly changing environment.

SUMMARY OF QUALIFICATIONS

Security and Network Issue identification and Mitigation - Proactively engages and communicates with all resources.

Well versed in all facets of security and infrastructure projects including; network security, identity authentication and management, Data Center and server infrastructure technologies.

Experienced with Governance, Risk and Compliance. (GRC)

Instructor for the Local Chapter of International Information System Security Certification Consortium (ISC2), the Network Security and Business Continuity Planning modules. Also an active member of the MN Chapter.

Experienced with Disaster Recovery and Business Continuity Planning. (DR/BCP)

Skilled at requirements gathering and implementing to standards.

Experienced with mergers and acquisitions as an IT resource. Security Federation and Network connectivity assimilation experience.

Multi-site coordination and resource management for various IT infrastructure planning and implementations.

Trusted and certified technical resource valued for successfully enhancing and optimizing security, network hardware, software, and critical infrastructure.

PROFESSIONAL EXPERIENCE

Hennepin County, Minneapolis, MN Nov. 2014- April 2017

Network Security Team, Principal

I led a Ransomware remediation successfully, Hennepin County did not pay the ransom.

Infoblox: DDNS (Dynamic DNS) Grid Installed 13 member devices. Implemented Microsoft AD sync. Implemented IP Address Management (IPAM) the 1st time. 1 IPv4 Class A and 4 registered Class B address spaces. Daily Operations and administration. Move's, Adds and Changes. (MAC's) This technology took over all Name Serving and Addressing for the enterprise.

Cisco ASA, with Multi-Context: Implemented SourceFire IPS into the 5585 Platforms. Internal, External and Azure Interfaces. Operations and performed daily rule adds and changes for 20 ASA platforms. Interfaced with Security Operations for IPS Findings.

Pulse Secure SSLVPN: Daily operations, backup administrator. 400 concurrent users daily.

SOHO and NetMotion: Back up administrator. 2000 users daily

F5: Basic operations, Backup, restore, version upgrades. 16 Devices.

Splunk: Indices for Infoblox and ASA.

Buffalo Wild Wings, Minneapolis, MN July - Oct. 2014

Project Coordinator

500 Corporate Restaurant network roll-out. 500 stores Memorial Day to Labor Day very aggressive schedule. Employed Cisco ASA DMVPN and Comply with PCI standards. Installed all new hardware in all stores, Cabinet, 24 or 48 port Router/Switch Cellular PIM. Many stores required new faster ISP connections. PCI compliance was important.

Thrivent Financial Oct .– Dec. 2013

Business Continuity Planner

Built the Business Continuity plan for the Mutual Fund Business.

SunGard Living Disaster Recovery Planning System (LDRPS) Business continuity plan for 35 applications in the Mutual fund business. Pre-reqs, co-reqs, Identify and locate version, Name the admins and backups. Identify all the dependencies or special needs, document everything in LDRPS.

Security Consultant, Mayo Clinic Oct. 2012 – Sept. 2013

Windows Server Security Audit Lead. There were several known vulnerabilities, the goal was to remediate these vulnerabilities. The vulnerabilities included Privilege Elevation and admin groups. Also everything from abandoned servers to Least privilege violations. Established management data sources, built the Audit process for the findings and requirements, while prioritizing vulnerabilities and remediation's.

Remediated 5600 Windows Servers over 8 months.

Implemented Lieberman Enterprise Random Password Management (ERPM) Password Vault.

Infoblox IPAM Operations, MACs

D2 Enterprises LLC Jan. 2002 – Dec. 2010

Owner

Acted as an E-Mail Surveillance Project Manager who effectively designed and optimally implemented an updated e-mail surveillance infrastructure.

Enhanced components included E-mail, Exchange and various PDA’s, for this financial services company.

Entrepreneurial resource who successfully ran a real estate remodeling franchise. Drove revenues, and led the successful project management of more than 3000 kitchen remodeling initiatives.

Pareo Corporation, Minneapolis, MN Oct. 1998 – Mar. 2001

Network Architecture and Security Project Manager

Highly respected Project Manager who successfully led multiple large enterprise vulnerability remediation initiatives.

Provided a thorough and comprehensive IT infrastructure assessment for multiple medium sized organizations.

Effectively oversaw the timely resolution of multiple vulnerabilities discovered by a previous global security assessment project for a financial services firm. American Express

Acted as a Data Center Build-Out and move-in, Project Manager. Generated the environmental, infrastructure and required floor space planning as well as managed the actual physical equipment move and startup. Best Buy

Deluxe Corporation, Shoreview, MN April 1994 – Sept. 1998

Corporate Network Architect

Client-facing asset who led strategic and operational network consulting sessions to help generate and implement requested functionality into timely and cost conscious infrastructure solutions.

Initiated, implemented, and updated scalable network technology systems to help meet future goals.

Successfully enhanced efforts in identity and access management, security service development, application integrity, and business continuity management.

Concurrently engaged in privacy and data protection, and vulnerability and risk management.

Network Consultant

Principal Point of Contact for all network projects across multiple subsidiaries and locations.

Acted as the “Face” of IT for multiple critical security and connectivity initiatives, as well as Project Manager for several simultaneous infrastructure projects.

“Go-to” resource, innovator, and leader for all key IT engagements.

Valued teacher who led classes on Internet and IP functionality.

Mergers and Acquisitions Technical Lead.

Senior Telecommunications Engineer

Key technical employee who implemented internet functionality into the Enterprise.

Successfully acquired a new Class B address, and simultaneously led the development of the architecture for the corporate intranet.

Concurrently established and rolled out relevant design and equipment standards for the enterprise.

Accurately provided professional Cisco implementations, and developed a Class B VLSM address for the enterprise.

Led the development and timely rollout of multiple call centers infrastructures.

Optimally deployed multiple new sites and migrated new equipment and a standard infrastructure to the Deluxe Enterprise Network.

Properly drove the coordination of 3rd Party Vendors efforts, remote user communities, and ISP personnel during network cutovers and turn-ups.

EDUCATION / CERTIFICATIONS

Certified Information Systems Security Professional (CISSP) - valid until April 2018

Cisco Advanced Router Configuration Class ICND2

Cisco Introducing Data Center Technologies, DCICT.

Implementing and Managing Microsoft Windows 2000 including Active Directory

EC- Council-Certified Ethical Hacking

Microsoft Office Suite, Including Project and Visio

Cisco Certified Network Associate (CCNA)

TECHNICAL

Core Competencies: Security, Networking, Design, Installation, Troubleshooting, Telecommunications, Configuration, Configuration Audit and Remediation. Project Management, Disaster Recovery and Business Continuity Planning, Hardware, Software Applications, Troubleshooting, Identity and Access Management, Requirements Gathering, Upgrades, Process Definition, Problem Resolution, Documentation, Data Center build out and re-modeling.

Networks: LAN, MAN, and WAN, Active Directory and Server 2000-2012 network administration, Azure

Infrastructure: ASA Firewalls and SourceFire Intrusion Prevention. Palo Alto, SSLVPN, Infoblox DDNS, NetMotion. SolarWinds, Splunk, SIEM

Layer 2 Switching: VLANs, Core/Distribution and Access layer

O/S: Windows workstations and servers, Unix, others.

MILITARY Veteran U.S. NAVY - Honorable Discharge as a Data Systems Technician 2nd Class. TS Clearance

Contact this candidate