David Liu
917-***-**** (Mobile)
admvam@r.postjobfree.com
PROFILE
o Sr. Security Engineer
o I/T and Network Administration
o ITIL v3 certified
o CISSP (#69063)
o 13+ years of Information Technology, Networking and Security experience o RSA 2-factor authentication
o F5 FirePass SSLVPN design and implementation
o RSA KEON Digital Certificates
o RSA Federation
o RSA Data Leakage Prevention
o User Provisioning and Decommissioning design and implementation o Cisco Internetworking design, implementation, configuration and deployment o Best practices security management
o Managing, monitoring/auditing and reporting using Ciscoworks 2000, CiscoSecure ACS, Envision/ Private-I, CiscoPDM, VMS, Netscout/NetGenius, NetCool/SNMP, Visionaire and Remedy o RSA implementation and management
o Cisco WAN/MAN Router and Catalyst LAN Switching Technologies o Cisco Wireless LAN implementation
o TCP/IP and routing protocols (EIGRP, BGP, RIP)
o Unix, Solaris, Linux, Perl, Shell Scripting
o Business Continuity and Disaster Recovery
o Window XP/2000/NT/98/95, Active Directory, Exchange 2000 Server o Network Management
o Network Security
EXPERIENCE
1/07-5/21 Sr. Security Engineer
SunGard / Philadelphia, PA
• Cloud Security audit
• SunGard Central Security – Security Policy and Compliance, ITIL (GRC application, ex. Archer Tech)
• Identity & Access Management projects and management (RSA 2-factor, LDAP, TACACS, Active Dir)
• Cisco ACS management including TACACS, RADIUS authentication
• RSA Digital Certificates design, implementation and management (RSA KEON)
• Federation design and implementation (RSA)
• SSLVPN architecture, implementation and management (F5 FirePass)
• RSA and 2-factor authentication
• Data Leakage Prevention design and implementation
• User Provisioning and Decommissioning project and design
• Data Classification project and planning
• Firewall (Cisco PIX, ASA), routers and switches configuration, management and deployment. 1/04-1/07 Senior Security Analyst
Philadelphia Gas Works / Philadelphia, PA
• Network security management using tools as Envision/Private-I, Ciscoworks suite, IDS, VMS, Bindview, IBM Director, etc.
• Company-wide information security audit response to mitigate security vulnerabilites
• Firewalls and other internetworking devices policy, rule creation and enforcement
• Conduct Disaster Recovery tests at SunGard
• Conduct risk analysis and assessment
• User audit, intrusion investigation, patch management.
• RSA token management and deployment
• Managing and monitoring citywide networks (including deployment Frame Relay link encryption)
• Standard configuration deployment with Ciscoworks
• WAN links including T1, Frame Relay, and ISDN backups
• Content Switching and Load-Balancing
• Infrastructure documentation with Visio, and Change Management procedures 1 of 4
10/03-3/0 Network Operations Center (NOC) Engineer Verizon / Frazer, PA
• Managing enterprise Cisco and Nortel (Passport) networks using NetCool/SNMP monitoring tools
• Managing and troubleshooting WAN links including T1, Frame Relay, ISDN and X25
• Review customer router configurations based on best security practices
• Monitoring networks with Ciscoworks, NetCool and Visionaire enterprise tools
• Reporting trouble tickets using Remedy software
5/98-6/03 IBM GLOBAL SERVICES / INTEGRATED TECHNOLOGY SERVICES 4/03-6/03
Infrastructure and Network Specialist
IBM / NYC Department of Education
• Firewall configuration and deployment
• Cisco switches and routers (Cat 6509/5000/3550) configuration, deployment and support
• Coordinate rollout of switches to various school locations
• Manage port security of connecting users/devices (User Access/Management)
• Documentation and asset management
• Windows NT / 2000 server and Exchange 2000 administration 1/03-3/03
Infrastructure Implementator / Network Administrator IBM / Borgata
• PIX Firewall configurations (PIX515, PIX525)
• Configuring Cisco Cat 6509, 3550, and 4006 switches
• Configuring and deploying Cisco Aironet Wireless 1200 series with encryption
• Performed network connectivity performance tests
• Windows NT / 2000 server and Exchange 2000 / 5.5 administration ensuring proper user access control 3/02-1/03
Internetworking implementator and business continuity for the 9/11 disaster recovery program IBM / American Express
• Post 9/11 Disaster recovery implementing a structured LAN design build out
• Performed network relocation from disaster main site to outlying offices
• Cisco Cat 6000, 5000, 4000 and 3000 series switches (6513, 6509, 5500, 4006, 3550) configuration and deployment
• Wireless LAN survey and implementation with Cisco Aironet 1200 series access points
• Coordinate and work with the customer and various contractors in the relocation project
• Network Recovery support
• Windows NT / 2000 server and Exchange 2000 / 5.5 administration 4/01-3/02
Network Administrator
IBM / Hapag Lloyd
• Coordinated activities between Line of Business and LAN operations
• Determined network performance, bandwidth and server requirements in terms of access control and security
• Second-level network support, including NT Server and Exchange 2000 / 5.5 support
• Remote connectivity support
• Platform and application packet deployment, including enterprise-wide end-user firewall deployment
• Integration of new hardware and software into the corporate standards
• Network maintenance
1/00-2/01
Network Administrator
IBM / PepsiCo
• Mixed environment NT and Novell support
• LAN resources allocation and management
• Building and testing PC platforms for standard Ghost images
• Microsoft Exchange Server 5.5 and Outlook, configuration and troubleshooting
• Desktop applications installation and support
• End-user firewall deployment
• LAN devices support and troubleshooting
• Network connectivity troubleshooting
2 of 4
9/99-1/00
LAN Administrator
IBM / IBM Global Services Institute
• NT Server and Workstation administration including remote management, user administration, resource allocation, LAN/WAN troubleshooting, backup maintenance, and end-users support
• Lotus Notes administration and support
• Executive and trainer support
• Building and testing standard PC platforms for Ghost images
• Cable Management
4/99-8/99
Team Leader - Technical Installer
IBM / CBS, Starwood, Infiniti
• Building NT servers including domain controllers and stand-alone’s
• Configuring NT workstations and ensuring server-client connectivity
• Installing Microsoft Exchange Server and Outlook Clients
• Establishing network connectivity parameters including DNS, DHCP and TCP/IP
• Installing backup systems such as RAID’s, external drives and UPS’s
• Data Migration
• Establishing connectivity of networking and internetworking devices such as Routers, CSU/DSU’s Switches, Hubs and associated cables
3/99-4/99
Network post-rollout desktop support
IBM / ICI
• Network connectivity issues, including TCP/IP, DNS and DHCP configurations as well as installing and troubleshooting LAN peripheral devices
• Office applications support and Internet access
• Driver and hardware upgrades
• Researching and resolving known or outstanding network/user issues 6/98-5/99
Team Leader - Technical Liaison and Engagement Specialist IBM / Painewebber
• Planning and coordinating network rollouts of AIX RISC-6000 Servers, NT Workstations and broker plat- form
• Coordinating with the technical team throughout the rollout process
• Conducting QA/QC for the new system
• Training branch I/T managers in administrating the new system via a web-based LAN admin tool
• Providing technical support for user transition to the new environment 5/98-6/98
Network Specialist and support
IBM / Advo, Superior Bank, Simon Group, Amtrak, International Flavors and Fragrances
• Novell GroupWise rollout/upgrade and client profile configuration
• Rollout and configuration of Netscape and proprietary software
• Troubleshooting Windows NT/95 PCs and desktop applications
• Moves, Adds & Changes of PCs and LAN devices
3 of 4
EDUCATION
7/28-31/09 SunGard sponsored ITIL v3 Foundation – ITIL certified 5/18-22/05 ISC2 sponsored official training for CISSP 6/03-12/03 New Age Training Center
Unix, Linux, Solaris, Perl, PL/SQL, DBI, Checkpoint Firewall 7/98-8/98 New Horizons Computer Training Center
SMS and Lotus Notes Training
1/98-5/98 Xincon Technology School
MCSE/Microsoft Technology and administration Training Fall 97 Hunter College
Major: Environmental & Occupational Health Science Fall 91-Spring 93 York College
Major: Environmental Health Science
Degree: Bachelor of Science
GPA: 3.65 out of 4.00 (Dean’s List)
PROFESSIONAL
TRAINING
• IBM Professional Consulting Workshop
• Client Consulting for IT Architects
COMPUTER
TRAINING
• ISC2 CISSP Bootcamp (CISSP)
• Cisco Internetworking (CCNA, CCDA, CCNP, CCDP, CCSP, CQS-Firewall, CQS-VPN, CQS-IDS)
• MCSE including Exchange Server, SMS, IIS and TCP/IP
• UNIX, Perl, Solaris, Linux, PL/SQL, DBI
• Network Management tools including Sniffer and ANSA
• Lotus Notes Administration
LANGUAGES Chinese and Spanish
INTERESTS Real Estate Investments, Crypto Currency ACTIVITIES Vice-President of the Environmental Health Science Club at York College Production Assistant in the movie, “There’s Nothing Out There” CITIZENSHIP U.S.
4 of 4