Infrastructure & Cloud Security Engineering Leader

DukJin Lee (DJ Lee)

Infrastructure & Security Engineering Cloud & Network Security IT/OT Cybersecurity 617-***-**** ********@*****.***

PROFESSIONAL SUMMARY

Infrastructure and cybersecurity professional with 15+ years of experience designing, securing, and managing enterprise network, cloud, datacenter, and cybersecurity environments. Hands-on experience with enterprise firewalls, network security, Microsoft 365, Hybrid Azure AD / Microsoft Entra ID, Azure security controls, DLP, endpoint security, vulnerability management, and secure remote access. Experienced in both strategic planning and hands-on technical execution, with a background leading infrastructure and cybersecurity programs across global and regulated environments. Strong knowledge of TCP/IP, network segmentation, routing, VPN, firewall administration, IAM, cloud security, and security risk management. Proven ability to collaborate with business stakeholders, external service providers, and cross-functional teams to improve security posture and operational reliability. CORE COMPETENCIES

Infrastructure & Network Security

• Enterprise Firewall Administration: FortiGate, Palo Alto, Cisco ASA

• TCP/IP, Routing, Network Segmentation, VLANs, VPN

• IPSec VPN and Secure Remote Access

• Network Security Architecture and Firewall Rule Management

• Cisco, Meraki, Enterprise Network Infrastructure

• F5 and Cisco L4 Load Balancers

Microsoft & Cloud Security

• Microsoft 365 Administration

• Hybrid Azure AD / Microsoft Entra ID

• Azure Security Architecture

• Identity and Access Management (IAM)

• Azure VNet Design and Network Security

• Encryption and Secure Cloud Migration

Security Operations

• Endpoint Detection & Response (EDR)

• Data Loss Prevention (DLP)

• Email Security

• NAC

• Vulnerability Management

• Security Monitoring and Threat Detection

• Security Risk Assessment and Reporting

Security Governance & Program Management

• Security Strategy and IT Roadmap Development

• Third-Party and Vendor Coordination

• Security Risk Management

• Security Awareness Training

• Change Management and Audit Readiness

• NIST Framework

• IEC 62443

Additional Technologies

• Claroty CTD / SRA

• Qualys

• Orca Security

• Netskope / NPA

• RSA Authentication

• CyberArk

• Linux, Windows Server, Unix

• LDAP, SAML, RADIUS

PROFESSIONAL EXPERIENCE

Kolon TissueGene Rockville, MD

IT & Security Manager Dec. 2025 – Present

• Lead IT infrastructure and cybersecurity operations for the U.S. organization, working closely with internal stakeholders, external IT service providers, and the Korea-based parent company.

• Manage external IT service desk operations and ensure reliable delivery of infrastructure and end-user IT services.

• Provide both strategic direction and hands-on technical leadership for IT infrastructure, cybersecurity, and business technology initiatives.

• Administer and support Microsoft 365 and Hybrid Azure AD / Microsoft Entra ID environments.

• Manage security technologies including firewalls, Data Loss Prevention (DLP), email security, and Network Access Control (NAC).

• Apply system updates, manage firewall security controls, monitor security threats, and conduct risk assessments and security reporting.

• Develop and execute IT infrastructure and security roadmaps aligned with business expansion and operational requirements.

• Coordinate with external vendors and service providers to evaluate technical risks, manage service delivery, and address security and operational issues.

• Support IT systems and infrastructure in GMP-regulated environments, ensuring alignment with data integrity, system validation, change control, documentation, and audit readiness requirements.

• Partner with Quality, Regulatory, Medical, and business teams to assess IT risks, support audits and inspections, and manage changes to regulated systems.

• Support the availability, security, and reliability of business-critical applications, systems, and data.

Anheuser-Busch InBev Global

IT/OT Cybersecurity Engineer Dec. 2015 – Nov. 2025 Infrastructure & Security Engineering

• Led enterprise infrastructure and cybersecurity initiatives across network, cloud, and operational technology environments.

• Designed and implemented network segmentation and firewall security architectures using VLAN isolation, firewall policies, and Purdue Model principles.

• Configured and managed secure remote access technologies, including Claroty SRA and IPSec VPN.

• Led implementation of Endpoint Detection & Response (EDR), continuous threat detection, vulnerability management, and security monitoring solutions.

• Managed vulnerability identification and remediation activities using platforms including Claroty CTD, Qualys, and Orca Security.

• Implemented cloud security controls during Microsoft Azure migration, including Identity and Access Management (IAM), encryption, and secure Azure VNet architecture.

• Managed datacenter, Azure cloud, and SD-WAN infrastructure deployments.

• Delivered an SD-WAN transformation initiative that reduced annual WAN costs by approximately 75%.

• Configured and supported F5 and Cisco Layer 4 load balancers.

• Implemented network and web security technologies including Netskope and Netskope Private Access (NPA).

• Worked with internal engineering teams, external vendors, and global stakeholders to coordinate security requirements, technical implementation, and operational risk mitigation.

• Conducted security awareness training for engineers and operational teams. OT Cybersecurity Program Delivery

• Led the implementation of major cybersecurity programs, including Industrial DMZ

(iDMZ), Secure Remote Access (SRA), Continuous Threat Detection (CTD), and Endpoint Detection & Response (EDR).

• Developed and managed OT network segmentation strategies to reduce lateral movement and improve visibility across industrial environments.

• Supported security monitoring and vulnerability management for SCADA and Industrial Control System environments.

• Performed security risk assessments and collaborated with technical and business stakeholders to prioritize remediation activities. Tesco Korea (Homeplus Inc.) Korea

Senior Network & Datacenter Manager Mar. 2009 – May 2015

• Designed, operated, and secured enterprise network infrastructure supporting more than 500 retail locations, 8 distribution centers, and 3 datacenters.

• Configured and maintained enterprise firewalls, routers, switches, and wireless infrastructure using Cisco and Meraki technologies.

• Managed core network services and enterprise connectivity across geographically distributed locations.

• Supported network routing, TCP/IP connectivity, VPN, firewall security policies, and remote access infrastructure.

• Oversaw RSA OTP authentication and enterprise-wide secure remote access services.

• Led datacenter infrastructure operations, including capacity planning, rack management, cooling, and power infrastructure.

• Led infrastructure projects to improve redundancy and resiliency for mission-critical systems, including server migration related to UPS and power redundancy issues.

• Coordinated infrastructure operations and technical projects with internal teams and external technology vendors.

Windysoft Inc. Korea

Security Engineer & System Administrator Jun. 2007 – Feb. 2009

• Managed Linux and Unix-based server infrastructure supporting online services.

• Developed and delivered enterprise-wide security awareness programs.

• Managed network security policies and supported security operations.

• Conducted vulnerability assessments and identified security gaps within online services.

• Worked with technical teams to implement remediation measures and improve overall security posture.

TECHNICAL SKILLS

Network & Infrastructure:

TCP/IP, Routing, VLAN, VPN, Firewall Administration, Network Segmentation, Cisco, Meraki, F5, Cisco L4

Firewall & Security:

FortiGate, Palo Alto, Cisco ASA, IPSec VPN, Netskope, NPA, RSA Authentication, CyberArk Microsoft & Cloud:

Microsoft 365, Hybrid Azure AD, Microsoft Entra ID, Microsoft Azure, Azure VNet, IAM, Encryption

Security Operations:

DLP, EDR, Threat Detection, Vulnerability Management, Security Monitoring, NAC, Email Security

Security Platforms:

Claroty CTD/SRA, Qualys, Orca Security

Systems:

Windows Server, Linux (RHEL), AIX, Unix

Identity & Authentication:

LDAP, SAML, RADIUS, RSA OTP

Frameworks & Compliance:

NIST Cybersecurity Framework, IEC 62443, Security Risk Management, Change Control, Audit Readiness

EDUCATION

M.S. in Engineering – Information Security

Korea University, Korea 2007

GPA in Major: 3.75 / 4.5

B.A. in Physics

Korea University, Korea 2003

GPA in Major: 3.64 / 4.5

CERTIFICATIONS & PROFESSIONAL TRAINING

• CISSP – (ISC), 2008

• Cisco ICND Course Completion, 2009

• PMP Course Completion – Samsung Multi Campus, 2012

• Google Cloud Platform Fundamentals: Core Infrastructure, 2020

Contact this candidate