CLEVELAND HOWARD

**** *** ***** ****

Salisbury, NC

919-***-****

acxxos@r.postjobfree.com

Objective

Career-oriented Sr. Security Engineer/ Sr. Network Engineer/Information Security Engineer with over twenty years of experience across the private and public sector.

Experience

Sr Security Engineer, Blue Cross Blue Shield March 2016 – Present

Provide security architecture design and consulting for pre and post sales support of customer environments.

Lead implementation projects to ensure successful delivery of security services.

Conduct on-site technical implementations or attend on-site customer meetings, as required.

Manage and maintain IPS Signatures to ensure that all vulnerability were up to date

Managed and installed FireMon Appliance.

Manage and upgraded IronPort code and proxy connection.

Develop processes for manage and upgraded Checkpoint Firewalls codes.

Daily reviews of all traffic that enter and exit the network for all threats to the environment.

Provide Level 2 - 3 support to existing customers.

Research, design, and oversee implementation of information technology, systems, and policies for information security in support of business needs.

Perform resolutions to security related Work Orders, Change Requests and Incidents

Provide 7x24 response to P-1 and P-2 level incidents

Extensive hands-on experience designing, implementing and troubleshooting the following technologies: Check Point, Cisco, VPN, VMware and Microsoft enterprise applications.

Develop and maintain security SOP to help manage daily security operation.

Experience working in an ITIL-modeled IT environment

Lead Security Engineer, Capgemini August 2013 – March 2016

Supported Imperva Web Application or Database firewall experience, rudimentary Understanding of SQL/DB2/Oracle databases and database architecture

Arcsight Logger, Connector Appliance, ESM or experience with a comparable SEIM. Manage and supported data collection from a large, complex server/network infrastructure and user base systems.

Bluecoat proxy experience

Ensure that SQL Data base security requirements met PCI standard.

Qualys Guard and TripWire Vulnerability management tools

Conducted network vulnerability scans and risk assessment of all network changes.

Manage Arcsight logs

Crossbeam Hardware experience

Site to Site/Juniper SSL VPN design experience

Firewall Administration and support for Checkpoint/ CISCO ASA

Provided Network security support requirement for project application.

Manage trouble calls and IT outage using Remedy ticket management system.

Strong ability to produce technical documentation

Experience in solving regulatory compliance issues through security architecture for PCI, FISMA, etc.

Performed Security Scans and ensured that IT systems were PCI 3.0 compliance.

Provided input on F5 server configuration.

Used Remedy ticketing system

Managed and maintain Network Security diagrams.

Team Security lead for over 50 projects for different Business Units

Managed Tripwire console to scan device for security checks.

Senior System Design Engineer, IBM April 2013 - August 2013

Managed F5 GTM’s and LTM configuration and user access

Experience with the configuration of IBM WebSphere and Directory Servers.

Managed IBM Tivoli Identity manager

Wrote script to add new servers into F5 database.

Lead for converting Alteon Load Balancer files to F5 rules.

Add web server rules in the BlueCoat proxy

Upgraded F5 base code to 11.4

Develop plans adding checkpoint firewall rules for access of F5.

Performed security scans on new network devices that were being installed.

Managed user access of Tivoli Access Manager.

Checked firewall rules to ensure that access were permitted for new devices being add into the Network.

Configure GTM/LTM for network access.

Managed project budget and personnel.

Senior Network/Security Engineer, Market America October 2012 - April 2013

Designs, configures, installs and maintains local area and wide area network hardware.

Responsible for all Network support issues and new equipment installation/configuration.

Performs administration, monitoring and troubleshooting of LAN and WAN system performance.

Coordinates with internal and external resources for installation/upgrade of all network equipment.

Researches and obtains quotes for all network hardware, network security software, monitoring software and bandwidth performance tools.

Responsible for negotiating new pricing proposals for network hardware and support.

Researches and implements alterations/enhancements to improve network availability and efficiency.

Reviews all network support related requests, including requests for new/additional hardware.

Participates in project planning required to initiate new projects; interfaces with other departments, vendors or consultants to resolve the majority of user and systems problems, and to report and resolve software, hardware, and operations problems.

Maintains, initiates or edits network documentation pertaining to infrastructure.

Responds to the needs and questions of network users concerning their access to resources or performance on the network.

Develops and communicates standards for use, operations, and security of network.

Provides documentation/project tracking and management reporting.

Responsible for network infrastructure change management.

Responsible for compilation and updates of Network drawings.

Assists in the creation of processes and procedures for IT operations.

Expertise designing and administrating Cisco LAN switches and routers, VPN concentrators, Netscaler Load Balancers, wireless devices, IPS and IDS technologies.

Ability to configure and troubleshoot Check Point or Cisco firewalls products.

Experience working with Cisco CSS or related content switches.

Network Security Engineer, Verizon Business May 2006 - October 2012

Hands-on technical knowledge of the CISCO ASA, PIX, and FWSM

Managed IPS and IDS configuration

Managed the installation and user access of Radius and TACACS severs.

Configure VPN Tunneling on CISCO VPN Client

Perform problem analysis and resolution, altering routing metrics and configurations, and recommend WAN configuration changes.

Experience in using network diagnostic tool and data capture tools - wireshark, sniffer, and groundworks.

Trained personal to installed, troubleshoot and configure all vendor provided network tools and Log Logic logging system.

Extensive understanding of Firewalls Network based Proxy and Caching Local and Global Load balancing

Extensive and hands on experience with both physical and network/host level security.

Setup and Manage F5 load balancer to manage traffic flow throughout the network.

Manage Nokia and checkpoint firewalls, Cisco Pix firewall security rule. Analyzed firewall rules that had packet drops during network connection.

Managed HTTP traffic by using Bluecoat Proxies to control network traffic.

Managed Juniper DX’s system during the installation of web sites URL’s.

Managed Provider-1 Checkpoint firewall rules

Prepared traffic studies for server business unit that were experiencing network slowness

Used Infovista and Groundworks to develop case studies for network traffic

Managed Cisco, Juniper, Fortinet firewalls and Sonic Wall VPN’s

Performed duties as Team Lead for Verizon Security Operation Center

Managed and performed enterprise network monitoring using Ground Work monitoring tool.

Performed Network analysis and resolution using Nagios network monitoring tool.

Managed iRules and VIP setup on F5’s and juniper load balance.

Managed F5 BigIP version 4, version 9, and version 10 code.

Daily troubleshoot of BigIP VIP’s, Pool members, and health monitoring problems.

Managed F5 GTM’s and LTM configuration and user access.

Interact and negotiate with equipment vendors to manage problems and secure network products.

Conduct research on network products, and standard to remain abreast of networking industry

Managed firewall rules using Check-Point Provider-1 and Juniper NSM

Develop and maintain IT security programs and policies for ISO 27001, ISO 17799, and ISO 9000

Managed security architecture for customer hardware components and definition of the network perimeter

Managed and monitor intrusion detection devices, firewall logs to help prevent computer hacking and other unauthorized activity.

Reviewed and participated in testing and revision of customer continuity and disaster recovery plans.

Implemented training standards for security policies and changes for equipment and company area.

Provided information of network performance during customer DR test drills.

Performed backup of network security devices.

Sr. Network Engineer, Multimax Inc. March 2005 - March 2006

Managed network connection and updated IOS’s on Cisco routers 6500’s, 3825’s, 3745’s, 3600’s, 2600’s routers

Manage the installation and configuration of Cisco wireless access points.

Performed wireless network penetration testing on all wireless devices.

Perform problem analysis and resolution, altering routing metrics and configurations, and recommend WAN configuration changes.

Conducted network port scan to detect open ports on the network.

Conducted network infrastructure vulnerability assessment

Implemented MPLS routing for ATM and T1 networking

Managed QoS for real time streaming multimedia data packets to increase up time for video conferences.

Manage all aspects of IP address assignments. Maintain the IP address assignment database and assignment of addresses for DeCA sites. Use Access Control Lists (ACL) or the current control mechanism to control assignments. Maintain the ACL’s.

Update router and switch IOS, coordinating the configuration and replacement of network components, including shipping and receiving. Using Cisco Works RME to manage Cisco router and switch configurations and IOS changes. Enforce/maintain standard configurations on all related equipment

Provide dial backup (DB) support and resolve dial backup problems. Identify phone line requirements and assure correct phone lines are acquired. Configure, test, ship, and deploy routers and modems at required locations. Implement, deploy, and test DB configurations

Perform problem analysis and resolution, altering routing metrics and configurations, and recommend WAN configuration changes.

Manage all aspects of Internet Accounts and Network Access Server Accounts to include creation, changes and deletions, and to resolve user problems.

Manage trouble tickets using Remedy trouble ticket management application.

Provided technical expertise on the installation and troubleshooting of SIPRNET, NIPRNET, and VPN.

Setup and installed network management tool MRTG, Cisco works, CIC WebTop.

Network Analyst, Dominion Resource Service August 1998 - December 2004

Begin employment as a Mobile Data/Satellite/ Wireless/Telecommunications Technician. Advanced to most recent position as a Network Analyst.

Managed the configuration of Cisco 3000 Series VPN Concentrators.

Managed network connection and updated IOS on Cisco routers 7500’s, 7200’s, 3600’s 2600’s, and 6500’s, 4006’s, 3548’s, 2950’s, 1900’s, switches, and access points

Maintained Cisco management tool Cisco Works throughout the company 20 state regions and Canada.

Coordinate and manage circuits installs, disconnects, and bandwidth upgrades for location moves, additions, and closures.

Gather network requirement from new sites purchase for implementation and network design. Conducted formal testing of new system for validation, before connected devices onto the network.

Troubleshoot and isolate network failures and performance issues on a TCP/IP network; worked closely with service providers and equipment vendors for resolution.

Added QoS into existing network circuits that provided Voice, Data, and Video.

Maintained and updated HP Open View Network Map.

Diagnostic technician for WAN/LAN connective problems utilizing Sniffer Profession.

Tested and troubleshoot bandwidth usage during testing of new application over DS3, Frame Relay, ISDN, VPN, DSL and T1 Circuits

Planned and implement upgrades of LAN/WAN circuits for Ethernet and Gig/E connection.

A Team Lead for Developing Plans to integrate new sites purchase into current company WAN

Tested and developed plans to intergrade Foundry switches with Cisco switches.

Installed, tested, and troubleshot Videoconferencing on an IP network.

for WAN/LAN.

Tested and configure Windows 98/2000/XP for connection into the WAN through new Foundry Switches.

Provided operational technical support for clients in the installation of Lotus Notes and Microsoft Outlook

Maintained Cisco management tool Cisco Works throughout the company 20 state regions and Canada.

Develop network plans and tested connected for 3500 Cisco routers and switches.

As a member of the developmental team to migrate Nortel PBX switch to Cisco VOIP

Setup and maintain Marconi ATM switch network connection into the WAN

Tested and installed VPN/ broadband Cisco routers 831, 1711, and 1721.

Managed AHD help desk trouble tickets that were submitted by clients and handle user question related to PC/LAN/WAN.

Managed the following router protocols EIGRP, RIP, BGP, OSPF, and Static IP addresses.

Managed IP address for all LAN/WAN system on the network.

Developed and maintained Microsoft Visio Network drawing for the entire company.

Tested and implemented wireless/mobile/ satellite communication for hand held computers.

Configured and managed TACACS and RADIUS servers for secure log-in of wireless devices.

Trained and managed the installation and setup of Novell Netware 4.11/5.1/6.0

Tested and installed media news devices that provided instant news throughout the company.

Maintain and upgraded local and remote routers and switches using Cisco Works and FTP server

Knowledge of Sarbanes Oxley compliance for corporate security and network policies and procedures.

.

United States Army February 1977 - August 1998

Twenty-two years of service, I worked in various technical and leadership positions. I began my military career as a Communications Technician where I installed and repaired telephone, radio systems, and computer systems. I was also responsible for the training and supervision lower ranking of personnel.

Communications Manager July 1996 - August 1998

Supervised 30 employees to perform support maintenance on computers and other communications equipment.

Installed music system for voice mail on a Nortel PBX.

Managed various RF radio systems.

Performed networking monitoring using an Spectrum analysis system for RF Data.

Examined hardware and operating system settings to ensure that computer systems were configured for optimal performance.

Maintained WAN/LAN for over 350 computers for a large organization.

Conducted network troubleshooting for switches and routers WAN circuit connection.

Installed and configured network adapter cards, IPX, TCP/IP PCTCP, NETBIOS, NetBIOS protocol and software to interface with LAN systems.

Installed and configured CD-ROM's, scanners, hard drives, IO cards, modems, and other related hardware.

Worked extensively with MS DOS, Windows 95/ NT Workstation, and UNIX operating systems.

Solved dial-up related problems for remote users on various IBM clone PC's.

Troubleshot and installed MS-Office, Internet Browsers, Microsoft Mail, Microsoft Exchange and other related software.

Managed computer budgets to ensure that system hardware and software were up dated.

Provided technical assists on mini and microcomputer based hardware and software systems.

Trained employees on configuration of new and existing 3 COM, SMC, and other PnP network cards, improve PC hardware and software efficiency.

Assisted in the development of web page, using MS IIS 3.0 and MS FrontPage 97/98, Adobe PhotoShop, and various web publishing tools.

System Analyst July 1990 - July 1996

During a three year period, trained over 300 employees on computer systems, radio systems, and various communication equipment and the maintenance requirements of related communications equipment.

Responsible for the testing and procurement of hardware and software.

Established security and virus protection procedures, and published information's system operating procedures.

Installed, troubleshot and supervised the maintenance of user workstations on a LAN connected by cable, wireless, and remote access. Configured system-using protocols such as TCP/IP, and X.25.

Used digital multimeters and other tests equipment to diagnose and solve computer and communication equipment problems.

Troubleshot, repaired, and made coaxial and twisted pair cables for installation of LAN, WAN computer system.

Built computer systems at component level. Combined various components into complete open-architecture computer systems.

Setup and Installed HP, Canon, Epson, Brother Printers, and other Ink Jet, and Laser printers on local and network computers.

Education

Bachelor of Science, Information System, Networking Technology, Capella University

Associate Degree in General Studies, Central Texas College

Certification

CCSA

ITIL V3

Juniper Firewall

Bluecoat

F5 Load Balance

CISSIP

Courses Completed

Visual Basic 4.0/5.0/6.0

Windows NT Workstation 4.0

PC Upgrade, and Troubleshooting

Microsoft Office 2000/2003

Microcomputer Application in Acct. and Finance

Database Application Using Access 2000

Database Design and Management

Cisco CCNA course

Database Administration SQL

Web Site Design

Microsoft Active Directory

Installation of Novell 4.11/5.1

Nortel DNS Server

Dream weaver Web Developer

HTML & XHTML

Software Engineering

E-Commerce

Project Manage 2003

CISA

CHITP

U.S. Army Computer Operations Courses

Certificate, UNIX Solaris 2.x System Administration

Certificate, UNIX Operating System

Certificate, Information Systems Management Course

Certificate, Network Operation and Configuration

Certificate, Communication Officers Course

Certificate, Windows NT Systems Administration

Certificate, F5 Load Balancer

Contact this candidate