Engineer Security

E ric Heinis

** ****** *****, **********, *****, CM2 8AE, UK

Telephone: (01245) 356244 ~ Mobile: 077**-****** ~ Email: ********@*******.***

Cisco, Juniper and ITILv3 certified IT professional with 6 years’ experience within multidimensional

situations. Demonstrating an impressive technical skill set, underpinned by the implementation /

support of network and security technologies. Widespread experience of interacting with users of varying

technical levels and a strong team builder. Utilises exceptional interpersonal skills and communicative

abilities to build positive and lasting internal / external business relationships. Exhibits in-depth

analytical and strategic ability to facilitate operational and procedural planning and adopts a holistic

approach to problem solving.

PROFESSIONAL COMPETENC IES

Team collaboration Project management Relationship

building

Systems migration / Staff leadership / Information

configuration development gathering

Incident / problem management ITIL framework Change management

PROJECT H IG H L IG H TS

DC MPLS implementation

• Successfully led the design, implementation and continued management of new MPLS connectivity

to core data centre allowing additional resiliency to the organizations critical systems. (Saved

approximately £200,000 since deployment)

P2P connectivity between core business sites

• Successfully designed, implemented and maintained P2P diverse circuits between HQ and core

u nderwriting site, resulting in additional resiliency to MPLS WAN setup. Improved performance for

t he company core business function. (Saved approximately £100,000 since placement)

LAN /WAN design for new HQ and DC

• Design of new HQ WAN / LAN networks, creating highly resilient, robust designs to match the

current business requirements and allow for future expansion.

Replace legacy Cisco VPN Client with AnyConnect VPN solution

• Designed and executed the replacement of legacy Cisco VPN solution to the latest Cisco AnyConnect

VPN solution to support remote workers as part of migration to new Windows 7 platform. (Removed

a dditional support costs of a unsupported product, and providing an improved remote access

solution)

WAN migration

• Part of a migration team moving from a legacy BT Metro VPN solution to a new multi-VRF MPLS

WAN solution across Essex County Council (300+ sites). This includes the introduction of

connectivity to a trusted extranet partner using the Government Secure Networks (GCSX).

LAN refresh

• Part of a LAN refresh programme which includes the upgrading of Essex County Council LAN

i nfrastructure which included 2960, 3750, 4500 & 6500 Catalyst series switches.

W ireless implementation

• Part of the team who integrated and rolled out a secure wireless solution across HQ’s, large scale

remote corporate sites, guest access and public services such as l ibraries.

F irewall upgrade

• Assisting migration of Nokia Checkpoint Firewall IP 370, 530 firewall gateways to Checkpoint VSX

R67 multi-tenant environment.

Implementation of UAG SSL VPN solution

• Execution and support of remote SSL VPN solution, providing services for the business, key extranet

partners and support associates.

Obj100

E ric Heinis

19 Linnet Drive, Chelmsford, Essex, CM2 8AE, UK

Telephone: (01245) 356244 ~ Mobile: 077**-****** ~ Email: ********@*******.***

CA R E E R SU M M A R Y

I nfrastructure Engineer

Amlin UK

2012 - Present

Managing all network operations within the Amlin UK network across numerous remote sites located

across the UK including sites such as Lloyds Insurance building, Glasgow, Manchester, Nottingham,

Basingstoke HQ etc.

• Day to Day BAU operations, change assessment, design, implementation and upgrades.

• Mentoring new starters and assisting in ticket resolutions

• Escalation of incidents to, and in driving incident resolution with, technology vendors such as BT,

V irgin Media, Dell, Citrix, Computacenter and more.

• Producing detailed design documents to present solutions to the business

• Cisco infrastructure: 3750/3750-X stack environment, 6509 core switches, 2800, 2900, 3800 routers,

B rocade VDX 6720, 5000/5100 SAN switches, Dell PowerConnect, M1000e switches.

• Cisco ASA’s / IPS security solutions

• Load balancing including Global Server Load Balancing – Citrix NetScaler MPX 5500 redundant

pairs

• Web proxy/filtering solutions: Microsoft TMG 2010 & Websense

• VPN Solutions – Cisco VPN Client & AnyConnect, DMVPN, IPsec remote site deployments, UAG

SSL VPN, Citrix Access Gateway via NetScaler.

• Troubleshooting LAN/WAN issues with an in depth knowledge of OSPF, MPLS, Layer 2 t runking and

VPN technology background.

Key achievements:

• Design, implementation and maintenance of new MPLS connectivity to core data centre saving

approximately £200,000 in reduced downtime due to resiliency built into the design.

• Replace legacy Cisco VPN Client IPsec remote deployment with Cisco AnyConnect VPN,

removing a l iability in running unsupported deployment, improving on existing security design

a nd allowing for future expansion using products such as Cisco Jabber on IOS platforms.

• P2P deployment between HQ and major secondary office which saved approximately £100,000

a fter revised design to meet necessary business requirements and improve MPLS flexibility for

s ite.

• Design WAN / LAN proposal for new HQ site and data centre.

Network Engineer

Essex County Council 2009 -

2012

Support for all related network issues in the organisation containing over 10,000 users and supporting

over 300 corporate sites with dedicated MPLS WAN connectivity.

Administration of critical CheckPoint / ASA firewall infrastructure, part of team deploying Cisco Wireless

for corporate, guest and public access across the organisation, WAN migration and LAN refresh projects

between 2009 and 2011 at Essex County Council.

Operating proxy solutions: M icrosoft ISA 2004 /2006 and M icrosoft TMG 2010

Obj100

E ric Heinis

19 Linnet Drive, Chelmsford, Essex, CM2 8AE, UK

Telephone: (01245) 356244 ~ Mobile: 077**-****** ~ Email: ********@*******.***

Managing complex service requests for new networking solutions; l iaising at all levels with the

customer.

Coordinating LAN / WAN design and implementation utilising Cisco infrastructure

Administering a multi-tier CheckPoint VSX firewall containing multiple contexts for different

aspects of the organisation, in addition Cisco ASA firewall architecture in core DC’s.

Managing a multi –VRF L3 MPLS VPN routing instances across 300+ remote sites.

Providing advice and guidance to CAB on the impact of proposed changes.

Mentoring new staff and assisting in incident resolutions

Collaborating with Voice and Server team to provide permanent solutions for the customer and

p rovide technical experience to incident team members

Key achievements:

Part of migration team working towards replacing legacy BT Metro VPN solution to a new multi-

VRF MPLS WAN solution which included over 300+ sites.

Integral member of the LAN upgrade team implementing a new LAN infrastructure for HQ and

remote sites meeting new business requirements.

Member of the wireless implementation team providing corporate /guest /public Wifi services for

d ifferent sectors of the organisations.

Assisting in firewall upgrade from previous CheckPoint Nokia IPSO solution to CheckPoint VSX

Implementation of UAG SSL VPN solution for remote access which included corporate users,

extranet partners and technology associates.

Consistently recognised as a strong team builder, committed towards the delivery of service

excellence.

Cultivated and nurtured internal / external relationships, conducive to business development.

1st/2nd /3rd Support Analyst

Manpower (contracted out to British Telecom) 2008

- 2009

Gained irreplaceable experience during my initial role as a 1st l ine support and then 2nd l ine functions

w ithin the company. Finishing as a 3rd l ine network engineer during last months of employment before

being tuped to Essex County Council.

P roviding full I.T support for more than 10,000 users across 300 remote sites in Essex, this includes a

n umber of services such as libraries, record offices, social services, child and mental health and schools.

Duties included hardware/software issues specifically with remote access (VPN IPsec/SSL & RAS)

connections, user account details (AD), MS Office, Microsoft Exchange 2003, Citrix, Checkpoint Endpoint

encryption and printers. Using the Assyst management system to operate and deal with incidents.

T ECHN ICAL AREAS OF EXPERT ISE

Network Management SolarWinds Network Performance Monitor (NPM), CiscoWorks LAN

M anagement Solution, HP Openview / NNMi, Cisco WCS, IP Address

management, NetFlow, sFlow

N etwork Security Administration of Cisco Secure, RSA SecurID, ActivIdentity, Swivel PINsafe and

Vasco authentication servers for securing IP sec VPN, SSL VPN and RAS networks.

Administration and implementation of complex CheckPoint firewalls IPSO/VSX,

CheckPoint Secure Remote Client R56/60, Check Point SmartConsole R62, R65,

R70, R71,Cisco Secure ACS 3.3/4.1, Cisco ASA 5510/5520, Cisco VPN

Client/AnyConnect, Cisco IPS solutions: AIP-SSM-10, IPS-AIM & IPS-NME,

Obj100

E ric Heinis

19 Linnet Drive, Chelmsford, Essex, CM2 8AE, UK

Telephone: (01245) 356244 ~ Mobile: 077**-****** ~ Email: ********@*******.***

Windows Proxy: TMG 2010 and ISA 2004/2006, Citrix Access Gateway, Microsoft

UAG SSL VPN

T roubleshooting Complex L2/L3 issues with numerous tools such as Network Protocol Sniffers

(Sniffer Pro, Wire Shark & Microsoft Network Monitor), Solar Winds Engineers

Toolkit, SolarWinds Network Performance Monitor (NPM), NetFlow/sFlow,

WhatsUp Gold, Cisco WCS

N etworking Hardware I ncludes: Cisco: 2950/60, 3550/60, 3750/3750-X, 4500-E, and 6500 Catalyst

series switches, 1800, 1900, 2600, 2800, 2900, 3600, 3800, 7200 series routers,

ASA 5510/5520, Cisco IPS: AIP-SSM-10, IPS-AIM & IPS-NME, Citrix

NetScaler 5500 MPX, Brocade VDX 6720, 5000/5100 Fibre Channel Switches,

Dell PowerConnect FCX series switches, Blade Chassis M1000e switches,

W ireless – WISM, WLC 5508 anchor points for guest access.

Network/Security Protocols Static routing, EIGRP, OSPF, BGP, MPLS VRF-lite, MPLS L3 VPN’s,

Route control via route-maps/prefix-lists, PBR, PfR/OER, Route

Summarisation, Switching – STP, VLAN’s, VTP, Trunking,

HSRP/VRRP/GLBP, LWAPP, TACACS+, RADIUS, DMVPN, IPsec & SSL.

Additional Services VMware ESX, Microsoft Hyper-V, Linux DNS BIND/Microsoft DNS, Microsoft

D HCP, Active Directory, Websense

CO N T I N U E D P RO F ESS I O NA L D E V E L O P M E N T

Cisco Certified I nternetwork Expert Routing & Switching (CCIE R&S)

P R E V I O US T RA I N I N G

Cisco Certified Network Associate (CCNA)

Cisco Certified Network Associate Security (CCNA Security)

Cisco Certified Network Professional (CCNP)

Cisco Certified Security Professional (CCSP / CCNP Security)

Cisco Certified Design Associate (CCDA)

Cisco IOS Security Specialist

C isco ASA/Firewall Security Specialist

Cisco VPN Security Specialist

Cisco I PS Specialist

JNC IA-Junos

I T I Lv3 Foundation

E D UCA T I O N

MSc Network Security with a Distinction grade

Anglia Ruskin University 2006 - 2007

BSc Hons Computer Software Development with a 2:1 grade

Anglia Ruskin University 2003 - 2006

3 A-Levels in I.T, Business Studies & General Studies

8 GCSE’s including an A in I.T and F rench

Great Baddow High School 1996

- 2003

R E F E R E N C E S AVA I L A B L E U P O N R E Q U E S T

Obj100

E ric Heinis

19 Linnet Drive, Chelmsford, Essex, CM2 8AE, UK

Telephone: (01245) 356244 ~ Mobile: 077**-****** ~ Email: ********@*******.***

Obj100

Contact this candidate