ILYA AKINFIEV, CISSP
****.********@*****.***
New York, NY
Summary
Extensive experience in the fields of cyber security and networking, in roles spanning pre-sales, consulting, support, training and IT for customers of all sizes. Involved in requirement gathering, proposal and architecture, proof of concept, deployment, tuning and support, working hands-on with multiple teams in SOC, networking, desktop, systems and applications. Datacenter, enterprise, mobile and cloud security experience.
Experience
05/2015-12/2015 Palo Alto Networks New York, NY
Systems Engineer
Drove technical aspects of sales and ensured customer satisfaction for all Palo Alto Networks products within the New York City Department of Information Technology and Telecommunications (DoITT).
Worked with multiple internal teams (Network, Cyber Security, SOC, Desktop) and consultants to secure complex critical infrastructure, plan implementation, define security policy, document architecture and operations and deploy the solution including HA, App ID, URL filter, Threat detection with WildFire for 300,000 employees.
2013-2015 HP Enterprise Security New York, NY
Senior Solutions Architect
Responsible for driving technical aspects of the sales process for ArcSight SIEM, TippingPoint Intrusion Prevention and Deep Discovery Advanced Threat Detection including requirements gathering, use case development, presentation and demo of the solution.
Supporting New York City agencies as well as major customers in financial, legal, healthcare, education and other verticals.
Assisted customers with design, architecture, Proof of Concept, deployment and tuning of the solutions, working with multiple teams.
Deployments included TippingPoint inline and passive, SSL decryption, third-party API integration. ArcSight ESM, Logger and Connectors, alerts, reporting, etc. with Cisco and Unix via syslog, CheckPoint OPSEC, Windows WMI, TippingPoint, many others.
2011-2012 Zscaler Sunnyvale, CA
Systems Engineer
Provide technical sales leadership representing Zscaler Web Security solutions in enterprise accounts ranging from medium size to international.
Deeply involved in multiple aspects of the product lifecycle – specification, design, planning and implementation efforts, as well as post-sales integration and operational issues. Integrated with Windows AD via LDAP and SAML, GRE and IPSEC from multiple device types for traffic redirection, PBR, DPD/health checks and failover.
Architected, built and documented training and lab environment based on VMWare ESX, vCenter, NAS storage, Win2k8 AD, Win7, Centos, GNS3 Cisco IOS for 20+ students
2007-2011 Cisco Systems San Jose, CA
Consulting Systems Engineer, Security; Global and Commercial Accounts
Drove sales of Cisco security technologies midmarket and in large multinational accounts. Cisco ASA/PIX/FWSM, FireWall, IPSEC / SSL VPN, IPS, NAC, MARS, CSA, IOS.
Worked with product marketing teams to develop customer requirements into product features.
Provided technical and market analysis in response to customer RFPs/RFIs.
2001-2007 SiegeWorks, LLC./FishNet Inc. Livermore, CA
Integration Practice Manager, Consultant, Systems Engineer
Instrumental in developing a nationwide network security consulting practice.
Designed, implemented and supported a variety of complex security solutions for customers ranging from fortune 5 to SMB. CheckPoint FW-1 and Provider-1, Nokia, BlueCoat, Juniper/Netscreen FW and SSL VPN.
Provided sales support, integration, consulting and training for dozens of security products and services.
1997-2000 OpenService (Open) Albany, NY
Developer / Systems Engineer
Provided pre-sales and post-sales support for the SystemWatch line of application and security management products.
Developed the first web-based UI for the SystemWatch product line using Java and C and Integrated SystemWatch with CheckPoint FireWall-1 via the OPSEC framework.
Technologies
Extensive design, implementation and troubleshooting experience in traditional, virtualized and cloud environments.
HP ArcSight SIEM
Web: PaloAlto, BlueCoat, Zscaler, IronPort, WebSense; apache; squid
FW: Palo Alto, Cisco; CheckPoint; Juniper/Netscreen; iptables, ipfw
IPS: Cisco IPS, SourceFire, HP/TrendMicro TippingPoint, snort
VPN: Cisco ASA, IOS; Juniper/Pulse SSL VPN and ScreenOS/JunOS/SRX; CheckPoint VPN; F5 FirePass
Management: Palo Alto Panorama, CiscoWorks and CSM; CheckPoint SmartCenter/Provider-1 and Eventia; Juniper NSM
AAA: Cisco ACS; RSA; MS AD, ADFS; RADIUS, TACACS+, LDAP, PKI, PAM, SAML
Email: Zscaler, IronPort ESA, CipherTrust IronMail; TrendMicro; sendmail
Cloud: Amazon, Google, Okta, Bitglass
Other: nmap, nessus, tcpdump, WireShark…
Network
Layers 1-7
ARP, 802.1Q, Bridging, STP, Span, 802.11, 802.1X
VRRP, HSRP, OSPF, GRE, PBR
HTTP, TLS, DNS, SMTP, DHCP,FTP, SSH
Cisco IOS, JunOS
Infrastructure
OS Installation, hardening, maintenance, Ops
VMWare ESX/NSX, Linux, Windows, OS X, Solaris, *nix
System administration, operations, migration, redundancy, virtualization
Apache, sendmail, BIND
MS IIS, AD
Nagios, BigBrother, MRTG, Cricket, Intermapper
Certifications
CISSP
Cisco CCSP, CCNA, CheckPoint CCSE+, Provider-1, CCSI, Juniper JNCIA-J, SSL, BlueCoat, WebSense, TripWire, CipherTrust, Linux+
Education
1994–1998 Rochester Institute of Technology Rochester, NY
BFA cum laude.
Languages: Russian, some French and Spanish