Security Engineer Information Technology

Sr. Network Security Engineer

Qualifications:

EDUCATION.

●University of East London, United Kingdom 15 February 2007 - 20 July 2008

Master of Science (MSc), Information Technology (Merit)

Dissertation: The Application and Implementation of Biometric Security in the Financial

Sector Using Keystroke Biometrics (University of East London).

●University of Benin. 15 September 1998 – 10 September 2005

BSc Statistics with Computer Science (Second Class Upper Division)

TECHNICAL SKILLS.

●Firewall security policy implementation and monitoring.

●Identify security issues and risks, and develop mitigation plans.

●Monitoring firewall logs using tcpdump and fw monitor for packet capture and packet analysis.

●Configured, administered, and documented firewall infrastructure.

●Checkpoint Management server HA for fail-over for network management reliability.

●Checkpoint cluster implementation and configuration including R77.30 clusterXL and previous version of checkpoint firewall OS.

●Managed firewall deployment, rules migrations, and firewall administration.

●IPSEC-VPN configuration for data encryption.

●Firewall Technologies- Checkpoint, Fortinet, CISCO ASA/CSM

●Load Balancer- F5 BIG-IP LTM, Microsoft TMG.

●F5 ASM, F5 GTM/DNS, iApps, iRules

●Tools- Service now, ITIL, TCPDUMP, SPLUNK

●Netskope, Carbon Black, Tenable, FireEye.

PROFESSIONAL EXPERIENCE

Orlando Utility Company (OUC) Orlando FL 01/22 – Till Date

Sr. Cyber Security Engineer.

Endpoint protection using Carbon Black and Netskope

Vulnerability Scanning of the OUC network using Tenable and providing mitigating solution to resolve the vulnerabilities discovered.

Use FireEye IPS to prevent malware and malicious internet traffic from penetrating the network

Work with the Windows/server teams by providing know malware patches for vulnerable endpoints in the organization

Participate in weekly Change Management boards reviews

Provide CISA activity threat alerts to the Network team to prevent against threats that may transpire in the electricity sector.

Deploy latest Carbon Black Sensor update on all windows endpoints in the organization.

The Walt Disney Company

Disney Parks, Experiences, and Products Technology (DPEP) Orlando FL 01/20 – 07/21

Sr. Cyber Security Engineer.

Manage a SWAT Task to discover, renew and install SSL CERT in Multiple platforms such as F5 Load Balancers, AWS, Akamai, Apache Servers, Linux Server, Windows Server to avoid service interruptions because SSL CERT expirations

Worked on PA-5000 Series (PA-5020, PA-5060, PA-5200, and PA-5260)

Implemented SSL Certificate Deployment for new applications on F5 devices and Amazon AWS Certificate Manager.

Implement SSL Encryption/Decryption using Public Key Infrastructure (PKI) for web application authentication with Entrust PKI, Disney PKI and AWS issued certificates.

Implementation, configuration & troubleshooting the issues related to Virtual Servers, pools, nodes & certificates on F5 Load Balancer.

Configure and administer security rules and policies to permit and/or deny user traffics based on company security policy.

Implementing Checkpoint firewall policies across firewalls throughout the network.

.

Change Healthcare/Wipro Nashville TN 01/19 – 12/19

Sr. Network Security Engineer.

Migrate from Checkpoint to Palo Alto using the PA migration tool.

Configure Site to Site VPN on PA-5000 Series

Using Panorama (Palo Alto Network) and Provider-1 (R65, R75, and R77) to maintain the company’s security systems and administers security policies to control access to systems and applications.

Implementation, configuration & troubleshooting the issues related to Virtual Servers, pools, nodes & certificates on F5 Load Balancer.

Firewall Rule implementation on Checkpoint version R80.10 for the McKesson to Change Healthcare Network Transition project

Firewall Rule implementation on Panorama for the McKesson to Change Healthcare Network Transition project.

Implementation of DNS entries, CNAMES, A- Records, and Reverse DNS look-up for application migration from McKesson to Change Healthcare environment

Implemented external DNS entries using F5 GTM.

Lend Lease (Contractor) Dunwoody GA 10/17 – 11/18

Sr. Network Security Engineer

Configure, administer and document firewall infrastructure, working with Checkpoint,

Firewall deployment, rules migration and firewall administration

Converting existing rule based onto new platforms.

Worked on Checkpoint Versions R70, R77 and R80 implementing new and additional rules on the existing firewalls for a server refresh project.

Worked on PA-5000 Series (PA-5020, PA-5060, PA-5200, and PA-5260)

Assisted in Data Center migration for Checkpoint and Palo Alto Firewall

Responsible for configuring site to site VPN with Checkpoint between Head Quarters and Branch locations.

Implementation, configuration & troubleshooting the issues related to Virtual Servers, pools, nodes & certificates on F5 Load Balancer.

Responsible for Microsoft TMG migration to F5 Load Balancer

Configured DNS for company public sites

Worked with Application Team to build new VS's for their apps

F5 BIG-IP APM, GTM, ASM Modules.

General Electric (Independent Contractor) Alpharetta GA 12/16 – 10/17

Sr. Network Security Engineer

Configured virtual servers, pool, pool members and load balancing method on the F5 LTM.

Configured SSL termination and persistence profiles on the BIG IP F5 LTM

Configured and monitored different monitor modules F5 BIG-IP LTM.

Configuring various advanced features (Profiles, monitors, iRules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIGIP appliances SSL termination and initiation, Persistence, Digital Certificates.

F5 certificate installation, renewals, cypher suit modifications.

Configure and administer security rules and policies to permit or deny traffic on Checkpoint, CISCO ASA, and Palo Alto

LTM & Firewall change management.

Perform System Upgrades on firewalls & Big-IP.

Work with the App team to best setup application delivery in a load balancing environment.

Administering security infrastructure by using multi-vendor (Cisco ASA, Palo Alto network firewall, and Checkpoint security devices) firewall platforms.

Using CSM, Panorama (Palo Alto Network) and Provider-1 (R65, R75, and R77) to maintain the company’s security systems and administers security policies to control access to systems and applications.

Executes security controls with Cisco CSM, and checkpoint Provider-1 (CMA’s, R65, R75, R77), to prevent hackers from infiltrating company information or jeopardizing programs.

Managed security policy changes across hybrid platforms using Tufin

Avanade Atlanta GA 03/12 - 11/16

Sr. Security Engineer

●Install, configure and maintain Check Point NGX 75.20 on SPLAT and GAIA 77.20

●Configure and administer security rules and policies to permit and/or deny user traffics based on company security policy.

●Implementing Checkpoint firewall policies across firewalls throughout the network.

●Network monitoring, packet captures and troubleshooting traffic passing through firewalls via logs.

●Optimizing existing policies to improve security and performance.

●Perform system upgrades, regular firewall patches and maintenances.

●Configure IP-SEC VPN for user traffics that needs to be encrypted using Checkpoint.

●Monitor Checkpoint VPN tunnel activities with smart view monitor and troubleshoot VPN issues with CLI.

●Deployed Antivirus and Host Intrusion Prevention System to over 5000 workstations.

●Created and maintained Antivirus and Firewall policies to meet special needs for field laptops, standard desktops, laptops and servers.

●Configure and manage LDAP User management with Checkpoint Smart Directory

●Integrates Microsoft active directory (LDAP) into checkpoint for identity awareness and user authentication.

●Back up, Restore and upgrade of Check Point firewall appliance.

●Configure and troubleshooting HA Cluster on Checkpoint Firewall.

●Analyze logs and make necessary network report using smart reporter console application.

●Configure checkpoint firewall to authenticate users based on user identity, user group, user sessions

●Monitor all users/Firewall traffics using smart view-tracker, and smart view-monitor smart consoles.

●Troubleshoot, Monitor and configure checkpoint firewall issues and other smart console applications using CLI.

●F5 certificate installation, renewals, cypher suit modifications

●BIG –IP LTM – Nodes, Pools, Virtual Servers

●Troubleshoot firewall issues through command-line using CLI commands and GUI interface using smart console.

University of East London. Docklands/Stratford (UK) 05/07– 12/11

IT Security Analyst

●Conducted performance monitoring of business-critical systems (servers, firewalls, switches).

●Developed and maintained information architectures (data, application, network).

●Configured routers between university campus sites, IP Sec LAN-to-LAN VPN tunnels.

●Performed installation and upgrading of new network and desktop application software.

●Performed troubleshooting and diagnosis to hardware/software network failures, and provided resolutions.

●Monitored network server, troubleshooting, configured, and deployed LAN/WAN solutions.

●Managed network account and emails along with ensuring updated virus protection.

●Network connectivity troubleshooting, ping, tracert and telnet.

●Maintained active directory database (backup, restore) and replication and certificate services.

●Installed and troubleshoot Fortinet firewalls.

●Hands on experience configuring firewall rules on Fortinet.

●Managing Fortinet Firewall and monitoring all incoming and outgoing internet traffic.

●Support diverse security infrastructure including implementations of firewalls, proxies, network devices, monitoring systems, provide tier-2/3 support for troubleshooting enterprise network

●Ensuring systems security by updating critical systems and anti-virus software patches.

Reference: Available upon request.

https://www.linkedin.com/in/osikhenaitabor/

Osikhena Itabor

Email: Osikhena ******@*****.***

Cell: 678-***-****

Contact this candidate