Network Security Engineer

Maurice Edouard Ndiaye

*** ******* ****** **

Smyrna, GA 30082

404-***-****

******@*****.***

OBJECTIVE

I am seeking a position as a Security Engineer which will permit me to continue practicing and expanding my skill set and knowledge base.

SUMMARY

12+ hands-on network/applications support and analysis – assisting end-users and improving networks

Experience in design, installation, configuration, administration and troubleshooting of Cisco LAN/WAN infrastructure

Multitasking ability – able to balance priorities and maintain customer confidence.

Detailed knowledge and understanding of Network Security aspects and Intrusion events and auditing

Excellent customer interface skills – able to make technical details understandable to non-technical users.

Detailed knowledge of Cisco ASA, Routers, Switches and Intrusion Detection System; Juniper; Palo Alto Next-Gen Firewall

Capable/experienced in full scope of duties Wan, LAN, Network Intrusion Detection

Proficient in Office 365; Microsoft Outlook, Word, Excel, PowerPoint

Fluently speak write and troubleshoot in English, Spanish, and French.

EDUCATION

Mercer University (2003)

Bachelor's degree in Computer Information Systems

RELATED SKILLS

• Cloud Infrastructures Amazon Web Services

• Cloud Infrastructure Google Cloud Platform

• Cloud Infrastructure Microsoft Azure

• Build and Deploy virtual ASAv5 ASAv10 ASAv30, Firepower

• Build and Deploy Virtual Palo Alto VM-50 VM-100

• Hands-on configuration and operational knowledge of Cisco routers switches and Firewalls

• Hands-on understanding and knowledge of Data Center support and operation

• Building of Cisco Remote Access technologies using Cisco AnyConnect Client, Site to Site VPN

• IP, OSPF, BGP, MPLS, VTP, VLAN, NAT, ACL HSRP, Cisco ACS

• Intrusion prevention systems (IPS) to include installation and configuration

• Cisco Firepower Management Center

• VPNs troubleshooting and the associated tunneling technologies using ikev1, ikev2, SSL certificates

• Remote Access Administration via CISCO ACS, ISE

• Hands-on understanding and knowledge of Netflow

• Orion Solarwinds, Infoblox, Manage Engine Firewall Analyzer, Ethereal, Tenable Nessus; Qualys; Incapsula Cloud

• Network Vulnerability assessment, scanning

• PCI implementation as it relates to network environment and Data center

• PCI Remediations involving the upgrade to stronger ciphers and TLS versions 1.2 RELEVANT TRAINING:

Sourcefire Certified Professional, Cisco Firepower; Juniper SRX, Palo Alto Next-GEN Firewall, Symantec Bluecoat Web proxy, Bluecat IPAM, F5 Load Balancer, Incapsula Cloud, Wireshark, CEH, CISA, Kali Linux

Certificates: Fortinet Network Security Experts NSE1, NSE2, NSE3 Certification validation number:

August 2, 2023 August 2, 2025 0199563446MN

PROFESSIONAL EXPERIENCE:

07/2020 to 05/2023 – Macstadium Atlanta, GA

Senior Network Security Engineer

• Build and Troubleshoot IPSEC tunnel between AWS, GPC, Azure to Cisco ASA

• Build and Troubleshoot IPSEC tunnel between AWS, GPC, Azure to Palo Alto

• Monitoring of IT security devices to include firewalls, intrusion detection / prevention

(IDS/IPS), data loss prevention (DLP), network access control (NAC), etc.

• Planning, deploying, and supporting network security devices.

• Create detailed reports on firewall block lists, device status, change management, hardware/software upgrades.

• Assist in the analytics and evaluation of network and systems activity.

• Assist in troubleshooting and problem solving a wide variety of client issues.

• Consult with internal and external partners on execution of firewall and security best practices.

• Recommend and implement improvements for preventive maintenance.

• Maintain and update relevant system and process documentation and develop ad-hoc reporting.

• Enforce and follow firewall standards and policies.

• Configure, deploy, and maintain firewall infrastructure ASA, Palo Alto 10/2013 to 07/2020 – Interactive Communications - Atlanta, GA Global Payment Technology Solutions

Senior Network Security Engineer

• Review existing network architecture and help identify areas for improvement.

• Work with ticketing systems, change control processes, and execute changes.

• Help troubleshoot and fix network Security related issues in the Data Center and remote Corporate Offices

• Work with third-party vendors in support of the network.

• Provide support and mentorship to junior engineers.

• Lead after-hours maintenance and troubleshooting activities as part of an on-call rotation.

• Assess gaps in security and identify solutions to mitigate risk, including business processes, technical controls, and policy improvements.

• Helps gather testing evidence for external and internal audits. This includes preparing for SOC and other compliance audits.

• Attend weekly security meetings to discuss/review vulnerability assessment reports and provide guidance to senior management and the PCI compliance Team.

• Assist in the development of security policies, plans, and procedures to meet government regulations and industry best practices.

• Assist with the enforcement of policy guidelines.

• Acts as primary technical subject matter expert for security scanning.

• Accountable for the overall scanning infrastructure, scanning execution, quality of work and deliverables.

• Executes security assessments to highlight and clearly articulate risks to the business.

• Participates in the scope definition of security scanning and VA scanners management.

• Proactively discovers vulnerabilities in our enterprise PCI, HIPPA, Corporate, and Production environments and ensures mitigation actions are implemented.

• Performs vulnerability research to identify new, previously unknown and unpublished vulnerabilities.

• Conduct audits of Data Center Platforms: Cisco ASA, Juniper, Palo Alto Firewalls, Cisco Nexus Switches, F5 Load Balancers and assets behind the Imperva cloud

• Generate/renew CA signed certificates for Interactive communications.

• Manage Interactive Communications certificates using Venafi. 03/2008 to 10/2013 – BCD Travel - Atlanta, GA

Network Security Engineer II

• Handle and Resolve Network issue cases via Support PeopleSoft System

• Replicate issues and test customer configurations in a lab environment,

• Interfacing with other technical support personnel, engineering and product management to escalate and resolve issues.

• Performing, as required, remote or on-site Network upgrade activities.

• Analyze and review escalated cases until closure; this includes investigating and recommending appropriate corrective actions for data security incidents;

• Perform analysis on logs, traffic flows, and other activities to identify malicious activity

• Design, deploy and troubleshooting routed networks using Cisco Routers as well as layer-2 and layer-3 switching products.

• Support and troubleshoot Cisco VPN, Extranet and public Internet connections delivered via a variety of carrier facilities (Sprint, ATT, Level3)

• Built and configure BCD Travel PCI environment, policies and documentation for Cisco ASA Firewalls, Routers, Switches

• Built and implemented BCD Travel Intrusion Detection System using Sourcefire IPS

• Analyze and investigate all BCD Travel Intrusion events on a daily basis

• Work daily with Symantec Security Operation Center (SOC) to correlate intrusion events

• Review all BCD Travel Core Firewalls and PCI Firewalls security events log information using Manage Engine Firewall Analyzer.

• Translate impact analyses to be presented to senior management during our weekly Security Meeting

• Providing security analysis and solutions in BCD WAN/LAN environment. 05/2006 to 03/2008 – Bellsouth- Atlanta, GA

Test coordinator – Bellsouth

• Working with project teams to understand system requirements and specifications;

• Ensuring testing requirements are documented and understood for the project;

• Capturing the design of test cases and test procedures in Mercury Test Director;

• Building test cases/scripts using Mercury Interactive test automation tools;

• Writes detailed test cases to exercise product functionality;

• Executes manual functional testing based on analysis and understanding of the requirements;

• Verifies test results in all forms including graphical user interfaces, databases, printed output, and data transmissions;

• Executes automated test scripts utilizing Mercury automation tools;

• Ensuring all Quality Assurance and testing activities are conducted throughout the life cycle and that the results from these activities are verified;

• Facilitating defects tracking and problem determination throughout the life cycle; Network Manager

06/2004 to 05/2006 Tier3/Team Lead– Bellsouth, Atlanta GA

• Handle Bellsouth escalations regarding network, security issues;

• Participate as a member of the Bellsouth Internet security suite Beta testing Team;

• Conduct Technical review for the Bellsouth Internet security suite;

• Handle escalations of the Bellsouth Internet Security activation and installation issues;

• Work closely with Bellsouth Abuse department;

• Familiar with SQL scripts;

• Generate reports using SQL script From the ASG Database;

• Experience in vulnerability assessment tools, methodologies, generating reports and metrics;

• Experience in anti-virus detection and removal, host and network-based Intrusion Detection Systems;

• Configure and install network firewalls for Bellsouth Business customers with single or multiple Static IP addresses;

• Troubleshoot network issues using Ethereal Packet capture, Solarwinds;

• Responsibilities include installation and Troubleshooting of customer WANS, LAN;

• Familiar protocols are: OSPF, TCP/IP, BGP;

• Resolve calls and technical issues that are beyond Tier2 and Bellsouth Technician expertise;

• Resolve Bellsouth Presidential escalations;

• Troubleshoot network hardware systems including switches, routers, bridges, Wireless access points, RAS;

• Troubleshoot VPN, DNS, WINS, Terminal Services, Email services; Wireless security and connectivity issues;

• Troubleshoot and configure Microsoft windows 98, ME, 2000, XP, 2003 issues;

• Troubleshoot and configure Macintosh OS 9.x, 10.x and airport issues;

• Troubleshoot and resolve Bellsouth Network issues; MTU, Packet loss, Routing issue; Mail filter issues;

• Documents calls Using CRM, ASG database, Siebel;

• Implement, install, and test data and voice network;

• Work Closely with BroadVoice to support and resolve VOIP issues for Bellsouth Trial Customers;

• Troubleshoot Session Initiation Protocol (SIP) issue;

• Create and coordinate supports Tools for Bellsouth Tier1 and Tier2 agents;

• Coach new hired Tier3 agents;

08/2003 to 06/2004 Sapphire Technologies/ (Contract) Bellsouth Atlanta, GA DSL specialist / Trial Customer Support Group

• Make outbound Courteous calls to Bellsouth FastAccess DSL Business/ Residential;

• Customers and assist them with any of their questions and concerns;

• Provide phone, email and web support for DSL modems installation issues and networking related issues;

• Help Bellsouth customers install and configure Westell wirespeed modems, Netopia router;

• Troubleshoot Bellsouth customers own premises, compatible DSL router: Linksys, DLink, Netgear, including wireless premises;

• Responsible for opening and documenting all calls using CRM help desk software;

• Support Windows XP, Windows 2000, Windows 98/ME, Windows NT and Mac OS Support;

• Resolve various LAN/WAN, VPN connection problems, popup issues, spam issues, speed issues;

• Help Customer to configure and troubleshoot TCP/IP with Static and Dynamic IP addressing;

• Provide Mail client support for MS outlook, Outlook Express, Eudora, Netscape Mail; 12/2002 to 10/2003 -VERSO TECHNOLOGY Atlanta, GA

Help desk/Support Analyst

• Provide phone, email and web support for escalated issues relating network connectivity problem;

• Responsible for opening and documenting all calls using Vantive help desk software;

• Windows 2000, Windows XP, Windows 95/98, Windows NT and Mac OS Support;

• Resolve various LAN/WAN, VPN connection problem;

• Help Customer to configure and troubleshoot TCP/IP with Static and Dynamic IP addressing;

• Resolve DHCP and DNS issues;

• Mail client support for MS outlook, Outlook Express Eudora, Netscape Mail;

• Wireless LAN connections;

• Installing, configuring and troubleshooting PC, Laptops, on AD Hoc or Infrastructure mode;

• Resolve Hotels wireless connectivity issues, featuring in-room Wi-Fi;

• Enable roaming users to communicate and access the network and Internet;

• Resolving ISPs DSL, Cable modem connectivity issues; 05/1999 to 12/2002; Hewlett Packard/Compaq Computer Corp., Alpharetta, GA DSL Specialist (NOC)

• Senior Technical for Corporate Tier 2 Level for software and Network problems;

• Resolve circuit/network/server related problems for Contract Corporations;

• Resolve open trouble tickets;

• Troubleshoot digital connections with Alcatel modems 3060, 4060, 1000 and Speedtouch Home;

• Support ADSL technology Bridge, PPPOE, PPPOA, and IFITL (fiber-optic);

• Troubleshoot and configuration of small business customers;

• Troubleshoot and configuration of Cayman router 3220, Westell 2100, Linksys Router;

• Comprehensive understanding of inside wiring;

• Working knowledge of DSLAM, Central Office;

• Working knowledge of Frame relay, ATM Switching, TCP/IP and binary IP addressing;

• Responsible for technician’s schedules for repair on customer’s site; Compaq, Alpharetta, GA

Personal Computer /Call Specialist

• Responsible for integration, configuration and troubleshooting of bellsouth.net software;

• Configured Internet Explorer, Outlook Express, and Netscape on win 2000/NT/98/95 and Mac;

• Resolving various software installation installation problems;

• Resolving dial up networking issues, providing solutions to modem problems;

• Support personal web pages FTP FrontPage;

• Customer care support;

1997 to 1999 Georgia Perimeter College/Mercer University, Atlanta, GA Installer/ Lab Assistant

• Computer Lab assistant;

• Install and maintain LAN cabling connectivity for computer Lab;

• Install and maintain LAN cabling connectivity for several office; PROFESSIONAL TRAINING

Bellsouth/AT&T

• Business Object

• Siebel Analytics

• Mercury Test Director

Pluralsight/Global Knowledge

• Security +

• CCNA, CCNP Security

• CEH

• CISA

• Wireshark

• Linux

Verso Technology

• Wireless LAN 802.11 installation and troubleshooting;

• Citrix Server;

• Cisco Aironet Wireless;

• Virtual Private Network;

Compaq/Hewlett Packard

• Router technology ( Netopia Cayman DSL router);

• DSL Technology;

• Bellsouth ADSL Digital modems installation and troubleshooting;

• Connection Manager Software;

References upon request

Contact this candidate