Samuel Michalovich

Network Security Engineer

Phone: 416-***-****

** **** ****** **. ******* ON M2P 1K3 E-mail: adh1ah@r.postjobfree.com

Highlights of Qualifications

Distinguished career combining outstanding success in network engineering with proven experience include:

Four years of University Degree in Computers Science and more than five years’ experience in a Canadian Federal environment Ministry.

Security Experience and Knowledge over 5 Years of Security, Firewall with Checkpoint, Juniper, and Palo Alto and Fortigate 300C IDS/IPS

Experience working with security products such as firewalls, IDS devices and VPNs

Experience working directly with the customer in handling incidents, and alerts generated by customers and customer support center.

Knowledge of ITIL best practices and process improvements.

Engaging with senior level technology decision makers in discussions related to business value and solutions of network design and implementation for external customers.

Providing pre-sales assistance and helping sales managers with their presentations and Client meetings.

Designing Data Center configuration and implementing complex network configurations on Enterasys and Cisco switches and Routers, Stacked and Racked, routing, RIP, EIGRP, OSPF, BGP, MPLS, HSRP, VRRP, multicast, SIP, SBC, QSIG, VoIP, CUCM and Unity, QOS, L2, L3, VLANs 802.1q, VPN, Switching, Trunking, NAT, PAT, ACL, SNMP, Spanning-Tree, switching, routing and subnetting. Cloud Environment and Remote Data Centers.

Managing the 802.11N/AC Wireless Network with Air Magnet and Fluke wireless tools.

Proficiency with Microsoft Windows XP/7, 2000/2003/2008/2012 Servers, DNS, DHP, Exchange 2003/ 2007, Configuring Domain Controllers, and Active Directories, File Servers, Check Point and Juniper Firewalls, Print Servers, DB SQL Servers and Printers.

Excellent written and oral communication skills.

Self-motivated, hardworking, flexible and able to work independently as well as part of a dedicated team in a demanding environment.

EDUCATION and PROFESSIONAL DEVELOPMENT

MCP- Microsoft Certified Professional Supporting MS Windows NT 4.0 Core

MCSA-(final exam completing soon) Administrating Microsoft NT 4.0 server

CCNA-Cisco Certified Network Associate

ACRC – Cisco Routers Configuration

ComPtia A+ Certificate

Bachelor Degree, Electronics Engineer,

Tel Aviv University, College of Electronics and Computer Sciences, Tel Aviv, Israel

PROFESSIONAL EXPERIENCE

Firewall Engineer

IBM Contingent Worker for RBC May 2019 to Mars 2020

Working on Firewalls to clean rules that are duplicated or unused working

Cleaned 16000 rules that were implemented on wrong firewalls or wrong policies

Working with Applications as Service Now AlgoSec, MyOps, Archer That helps to Clean the firewalls

as Checkpoint and Palo Alto

Technical Engineer

Firewall Engineer

TECHNICAL PROFESSIONAL DATA SECURITY Mar 2017 to April 2019

TekSystems - Contingent worker for HP Enterprise Mississauga Ontario

Supporting CIBC Firewalls

Rule Designer, Managing the Firewalls for a big Financial Institute in cloud Data Centers

Service Now

Managing Firewalls security solutions, proxies, VPNs, IDS/IPS with Checkpoint R77.30, Cisco ASA, and Juniper,

Access-Lists, WIFI, IPSEC VPNs’, DHCP, HTTPS/TLS, SSH, Key Management

Working on projects of designing Firewall rules according to requirements of departments of the Financial Organization adding/deleting, modifying rules, policies NAT and routing Networks in a Private cloud environment in Data Centers around the world.

Demonstrating Good and long with SIEM experience supporting a production network environment able to document problems. Processing and communicating to Production Team and management in a concise manner.

Telecom Network Engineer Mar 2013 to Nov 2016

Environment Canada, Downsview, Ontario

Oversaw large enterprise Network Projects for 1700 users 500 Servers upgrading Cisco Pix to Cisco ASA, to improve security.

Responsible for maintenance and design of global network infrastructure

Worked with technical teams to ensure needs are met & infrastructures are built to spec

Designed and upgraded the network to accept a Bell IDS/IPS Fortigate 300c and Palo Alto for Security in a DMZ Web Servers’ VLAN

Engaging with senior level technology decision makers in discussions related to business value and solutions for Network design and upgrades.

Carried out Network Projects in the corporate Data Center Based on Cisco Nexus 5K, 6509 and Enterasys WAN protocols MPLS and BGP and Cisco LAN based EIGRP, OSPF and VRRP, HSRP, and VPLS.

Arranged services installed Cisco devices & internal cable extensions throughout the Data Center and physically built networks with configuration of devices & allocation of VLANS and addressing.

Managed Data Center infrastructure, Implementation of Cisco Switch architecture and protocols (VLANs, VTP, and 802.1Q tagging in Trunking, Port-channeling, Spanning Tree), Firewalls, Checkpoint, Juniper, Cisco ASA 5560 v8.3.

Managed and supervised the Project upgrading of the user cabling Infrastructure Closets at the different floors with new Cisco 3750 stacked and racked switches connected with WDM/OTN fiber optic connections to the Core Enterasys N7 Routers in the Data Center in the fourth floor. The users network Jacks were connected on a copper Ethernet 5E connections to the Cisco 3750 switches.

Monitored the network using tools as Riverbed, Netscout, CACTI and Plixer Scrutinizer to troubleshoot usage, load balancing and Protocol information on the links. Used network monitors (sniffers) Wireshark and Fluke network tools and protocol analyzers.

Involved on a new Aruba WIFI wireless Controller with Cisco and Enterasys access points on the LAN, using Air Magnet and Fluke wireless analyzer to monitor the Wireless Network.

Troubleshooting Network tickets opened on Assyst Ticketing tool and fixing Network and Infrastructure problems.

Providing pre-sales support for new clients, and subject matter expertise for deploying new network projects.

Cisco Network Consultant Jan 2012 to Jan 2013

eHealth Ontario Toronto Canada

The eHealth Large Enterprise data center network (DCN) physical server and storage infrastructure and Virtualization infrastructure Hyper-V consists of more than 500 Cisco LAN and Cisco WAN network devices and multiple firewall and intrusion detection systems in a multi-tier design to provide advance redundancy and network agility to allow for “always on” network infrastructure for eHealth clients.

Worked as a Sr. Network Consultant on client’s Cloud Data Center assessment project.

Advanced projects of Network Security (PIX/IDS/IPS/Cisco ASA) concept and implementation

Experience with firewall and security configuration/implementation (ACE/F5).

Responsible to provide Method of Procedures, Visio to the operation team includes configuration on devices(C6509 VSS, Nexus, Cisco ASA, Cisco GSS, FWSM, Juniper firewall 3400, Checkpoint, Cisco Works, and Cisco ACE/GSS).

Managing and supporting Cisco Unified Communications CUCM Call manager 8.0 and 9.0 Call manager, Cisco IP Phone 7861 Standard, Cisco IP Phone 7841

Provided best practice solution & recommendation to client's both Data Centers.

Including Cisco 6509, Nexus 7K, Catalyst switches, 2900, 3750, and 4500. Routers 3800 and 7200, Firewalls, Check Point R75.20 and Juniper Netscreen-2000 6.1.

Worked to provide network solution on the network transition project which is in the process of transferring applications from the legacy network to the new data centers.

Responsible to provide migration solution, Data Center network design architecture, a thorough analysis of the routing OSPF, BGP design and architecture, network segmentation and zoning, network failover, Cisco Ace/GSS Load balancer, LAN design and Monitor architecture.

Telecom Network Engineer Mar 2009 to Dec 2011

Environment Canada, Downsview, Ontario

Configured and troubleshot Cisco 26XX and 65XXrouters with MPLS, BGP, EIGRP, OSPF protocols Layers 2, 3, 4 Cisco 2950, 3750, 4000, 6500, ASA and Enterasys E7, B2, N7 switches. Switching, Routing, and subnetting.

Participated as a technical advisor for a variety of IT projects that are driven by business and technological developments.

Implementation of three tier web based network architecture Multi-vendor support for installation and monitoring of IDS (host based and network based).

Configured and installed VMware and Hyper-V surroundings in the server room.

Installed and configured network and non-network printers.

Installed and configured modems and Cisco routers for Virtual Private Network Access (VPN).

Created/deleted/updated of VPN clients’ accounts.

Upgraded the Network from static addressing to DHCP 2007 taking in consideration all reservations and exclusions.

Coordinated with internal and external departments to ensure an optimum customer experience.

Performed impact assessment on change management events, and communicated to internal stakeholders In case of scheduling Network changes and upgrades. Performed a major change replacing the main Enterasys

routers to 2 new Enterasys N7 routers with WDM/ OTN Fiber and VRRP, HSRP protocols. The Router contained 30 VLANS connected on a Fiber plant the operation took 25% of the schedule down time and enabled monitoring and verifying that everything is functioning well.

Monitored the network using tools as CACTI and Plixer Scrutinizer. Used network monitors (sniffers) Wireshark and Fluke network tools and protocol analyzers.

Installed and maintained 802.11N Wireless Access points Cisco and Enterasys with Security, encryption and active directory embedded Controller, based Cisco and Enterasys Access points.

Customer requests for incident creation and updates are reported and dealt with Remedy Ticketing tools.

Documented processes and procedures in compliance with ISO and ITIL specifications using Power Point and Visio presentations and filed on SharePoint.

Network Administrator, Conferencing Division Jul 2006 to Mar 2009

Bell Canada, Etobicoke, Ontario

Managed and supported the Large enterprise company's network.

Maintaining and monitoring the Voice conferencing Bridges spread in the different locations in the Toronto GTA area, troubleshooting failing calls on the conferencing bridges.

Engaging in making decisions in discussions related to business value solutions facing external organizations and customers using our conferencing Bridges and providing our Customer Service teams with detail information on the solution.

Supporting pre-sales assistance to our sales managers in their presentations and attending their client meetings.

Configuring Cisco 3610 router to BGP routing to Bell Corporate Network.

Tracked Software replacement upgraded and Code deployment following repairs to computer component.

Acted as a resource to staff and clients in the use of computers, peripherals, and applicable software as financial applications and customer support teams as OSS and RLS, Microsoft Dynamics, Great Plains and other software programs.

Monitored the network using tools as network monitors (sniffers) Wireshark and Fluke network tools and protocol analyzers.

Liaised with Project leaders and administrative staff to facilitate use of computer equipment

Installed 802.11N/AC Wireless Access points with Security, encryption and active directory embedded Controller Based Cisco and Nortel Access points.

Troubleshot and investigated Checkpoint firewall 1R75.20 security issues in the network

Managed the MacAfee Antivirus, anti-spam, and anti-spyware Server.

Monitored and oversaw the company's conference bridges, Voice using Avaya, Voyant (Polycom) and Web Conferencing using Cisco WEBEX and Microsoft Live Meeting.

Maintained the Meridian PABX and Meridian Voicemail.

Set up and upgraded computers and laptops with Windows XP/7, Microsoft Office and applications for new and moving users.

Contact this candidate