University of Massachusetts, Amherst

Infrastructure and Endpoint Security Solutions Engineer

Mechanicsburg, Pennsylvania, United States

Independent Consultant

- Managed Security Services Engineer for Managed Endpoint Technologies and Managed Endpoint Threat and Response Detection (Symantec) including Architectural Documentation, Installation and Configuration Documentation, User Acceptance Testing, Managed Security Services Use Cases and Operational Runbook.
- Managed Security Services Engineer for HoneyPot as a Service including DNS Sinkhole architecture and engineering with full integration with current Security Information Event Management (SIEM) technologies leveraging TrapX DeceptionGrid including Architectural Documentation, Installation and Configuration Documentation, User Acceptance Testing, Managed Security Services Use Cases and Operational Runbook.
- Managed Security Services Security Engineer for File Integrity Monitoring as a Service (Tripwire and New Net Technologies including Architectural Documentation, Installation and Configuration Documentation, User Acceptance Testing, Managed Security Services Use Cases and Operational Runbook.
- Managed Security Services Security Engineer for Architecture, Design and Implementation of Risk Mitigation Management as a Service with full integration with current Security Information Event Management (SIEM) technologies including Architectural Documentation, Installation and Configuration Documentation, User Acceptance Testing, Managed Security Services Use Cases and Operational Runbook.
- Managed Security Services Security Engineer for Configuration, Assessment, Remediation, Monitoring and Alerting (CARMA) as a Service with full integration with current Security Information Event Management (SIEM) technologies including Architectural Documentation, Installation and Configuration Documentation, User Acceptance Testing, Managed Security Services Use Cases and Operational Runbook.

DXC Technology

Infrastructure and Endpoint Architect and Engineer

- Highest utilized security consultant within the AMS Region billing greater than 175%.
- Designed, Designed, and Implemented a Rapid Application Deployment strategy to mitigate SHA-1 to allow a simple SHA-2 migration path for over 187 critical applications within the second largest global consumer goods company.
- Platform Security Architect in conjunction with Security Operations Management and Client Security Officer to meet and exceed agreed upon Contractual Security Service deliverables for all security architectures, applications and high level security architectures for 860 sites, 81 countries.
- Security Technology Lead for new Service Introduction for new service offerings. Executed Proof of Concept (POC) technology reviews.
- Provided technical security architecture input on solutions in alignment that exceeded customer expectations from architecture, engineering and transition to operations accounting for all levels of resiliency, scale and capacity without compromising confidentiality, availability and integrity.
- Communicated daily with Senior Leadership including Client Security Officer, Chief Account Executives and Service Delivery Management teams.
- Implementation Engineer for the deployment of the leading software platform for real-time operational intelligence for behavioral analysis using HPE ArcSight® Enterprise for a large branding company (AIMIA) and one the largest global consumer goods company (Procter and Gamble).
- Delivered enhanced capability, security and branded authentication services framework.
- Provided technical high-level design, low-level design, permit to build, detailed design, implementation planning and transition to production documentation.
- Developed the technical business requirements to obtain Procter and Gamble Executive sponsorship for Web Application Firewall as a Service deployment acceleration.

Security Architect - Security Advisory Services

- Highest utilized security consultant within the AMS Region billing greater than 150%.
- Platform Security Architect in conjunction with Security Operations Management and Client Security Officer to meet and exceed agreed upon Contractual Security Service deliverables for all security architectures, applications and high level security architectures for 860 sites, 81 countries.
- Security Technology Lead for new Service Introduction for new service offerings. Executed Proof of Concept (POC) technology reviews.
- Provided technical security architecture input on solutions in alignment that exceeded customer expectations from architecture, engineering and transition to operations accounting for all levels of resiliency, scale and capacity without compromising confidentiality, availability and integrity.
- Communicated daily with Senior Leadership including Client Security Officer, Chief Account Executives and Service Delivery Management teams.
- Implementation Engineer for the deployment of the leading software platform for real-time operational intelligence for behavioral analysis using HPE ArcSight® Enterprise for a large branding company (AIMIA) and one the largest global consumer goods company (Procter and Gamble).
- Delivered enhanced capability, security and branded authentication services framework.
- Provided technical high-level design, low-level design, permit to build, detailed design, implementation planning and transition to production documentation.
- Developed the technical business requirements to obtain Procter and Gamble Executive sponsorship for Web Application Firewall as a Service deployment acceleration.

Hewlett Packard Enterprise

Security Architect - Security Strategy Risk & Management Consulting

- Subject Matter Expert, Lead Architect and Implementation Engineer for a Router and Switch Authentication Infrastructure transition in a compressed timeframe (less than 12 weeks).  Transitioning over 40,000 router and switches with a highly skilled and motivated technical team of 5 people. Simplification of router and switch authentication infrastructures, optimization of role based access control policies, inclusion of user attributes, batch credential creation. Automated router and switch network configuration with inline staging with extensive use of Hewlett Packard Network Automation (HPNA) minimizing manual configuration transition (less than 1% of routers and switches required manual configuration).

- Architect for the deployment of the leading software platform for real-time operational intelligence for behavioral analysis using Splunk® Enterprise for Authentication Services.

- Author of custom dashboards, search queries and code enhancements for event collection for
Cisco Secure Access Control System, Cisco Identity Services Engine, and Aruba Clear Pass Policy Manager transitioning machine data into viewable real-time monitoring dashboards, event management, capacity, performance, application and management into a centralized reporting framework allowing for increased performance and processing on the product centric technology platforms.

- Architect and Designer of Network Authentication Services Frameworks that are Modular, Adaptable, Scalable with real time visualization reporting, Zero Touch transition strategy minimizing network operational outages and maximizing network configuration management technologies.

- Subject Matter Expert for the deployment of Network Access Control (NAC) Technology 802.1x access control protocols to deny rogue network devices from access for over 1.8 million endpoint devices over a 3 year time period.

Bank of America

Vice President of Network Authentication Services

- Lead a virtual global team of Security Engineers working closely with Security Operations Management to meet and exceed agreed upon Contractual Service Level Agreements for 860 sites, 81 countries.

- Provided technical hands-on experience with global firewall management, external business partnership connectivity (IPSEC, Virtual Private Network MPLS, Intrusion Detection/Prevention Systems, Remote Access (VPN, SSL), Authentication methods (TACACS, RADIUS, Two-Factor authentication, LDAP, RSA), Proxy Services and Content Filtering, DNS/DHCP Services, Routing/Switching (BGP, OSPF, and MPLS.)

- Lead Subject Matter Expert on Enterprise Firewalls, Virtual Private Network External Business Partnership connectivity (IPSEC site to site and MPLS provisioning and integration).

- Primary Security Incident Management Lead and escalation point for all network security incidents and security faults.

- Senior Technical Lead for all Post Incident and Problem Management, including post mortem investigation and root cause analysis reporting to customer.

- Security Technology Lead for new Service Introduction and SOC Operational Readiness Testing (ORT) for new service offerings (RSA Transformation, Proxy Security Transformation, Security Architecture Transformation).

- Conducted review of proposed solutions against global standards, ensure that proposal is engineered to fit client needs, accounts for all levels of resiliency and allows for growth.

- Translated business requirements into tangible technical and functional deliverables to meet and exceed contractually obligated Service Level Agreements.

BT - Global Services

Senior Technical Team Lead

- Technical Scoping for Emerging technology customers from technical scoping, to resource costing worksheet, architecture, security product testing, security product evaluation(s), security certification(s) ongoing security testing and report production.

- Architect for Network Access Control (NAC) implementation and Managed Security Services leveraging Cisco based technologies.

- Co-Developer of Anti-Spam capture and replay mechanism based on tcpreplay, FWTK components, postfix, procmail, qmail, vmail, mail drop that included reverse engineering of open source Mail Transport Agents (MTAs) to capture received mail and filter them appropriately resulting in transport to transport objective and realistic SPAM effectiveness scoring.

- Developed, Defined and Launched ICSA Labs/Verizon Business Anti-Spam Product Developer’s Consortium growth from zero to $374,000 in 13 months.

ICSA Labs (an independent subsidiary of Verizon Business)

Senior Security Consultant

- Established strategic partnerships with SecureLogix, Network Associates, and RouteScience to enhance the delivery of product and services delivery of Avaya Enterprise Security Practice.

- Co-developed service delivery methodology for the Avaya Network Operations/Secure Operations Center for Avaya Global Service’s Managed SecureLogix ETM Managed Voice Service Offering.

- Lead Developer for the Telecommunications Adapter for the United States Army Net Crop Reporting System that allowed for United States Army CONUS operations and maintenance organizations submitting reports of major outages and service degradation to the CONUS Theater Network Operations and Security Center (C-TNOSC). This integration allowed for the United States Army NETCROP reporting to analyze aggregated telecommunications event notifications and send alerts/notifications to the United States Army Theaters Situational Awareness Network Operation Centers deployed globally in real-time.

Avaya

- Quality Assurance team lead to create a structured quality assurance environment that was a critical factor in helping the Sygate Technologies to release products on-time for shipping.

- First member of Sygate Professional Services team, assisted in development of service offering from Proof of Concept (POC), Statement of Work (SOW), Network Site Readiness Assessment (NSRA), Architecture, Deployment and Transition to Operations documentation.

- Co-Developer of Sygate EnforceU Educational Courseware for Sygate Technologies.

- Educational and Professional Services revenue growth from zero to $1,000,000 in less than a year.

Sygate Technologies acquired by Symantec

- Network Engineer, part of larger engineering effort to develop and produce an Intrusion Detection System for the consumer, enterprise and service provider markets.
- Maintainer of NetworkICE advICE customer support pages.

IBM -(NetworkICE acquired by ISS, ISS acquired by IBM)

Network Engineer

- Lead developer for implementation of open source SNMP network management systems designed to manage over 40,000 IP nodes, including customized components to manage 500,000 dial-up access ports.

- Network security audits for Fortune 500 customers.

- Review of business operations modeling in comparison to standard Internet and firewall methodologies for State of Massachusetts Information Technology Division, Enron Corporation, and Global Crossing, ICG Communications, Union Bank of California, Houghton-Mifflin Publishing, Putnam Investments, and UMC.

Predictive Systems

- Implementation Engineer for BBNPlanet Corporate Customer Advantage Team (Internet Managed Connectivity, Managed Internet Firewall (SITE PATROL) and Web Hosting).

- Security Engineer of Managed Internet Firewall (BBN Site Patrol) to optimize customer provisioning, delivery and implementation from 30 days to less than 7 days. Approximately over 200 Managed Internet Firewalls were provisioned and being monitored in less than a year.

- Network architecture documentation, email integration architecture, Cisco ACL configuration.

- Troubleshoot of InterNIC application issues, circuit provisioning and DSU/CSUs using protocols and telecommunications tools to resolve.

Bolt, Beranek and Newman Planet

Senior Implementation Engineer

- Provided multi-level technical support (5x12) for SunOS, Solaris, AIX, SCO Unix, BSD, Microsoft Windows utilizing Livingston Enterprises product lines (Portmaster, IRX, CHOICENET, and RADIUS).

- Troubleshooting and resolution of telecommunication protocols, modem interoperability, packet tracing analysis of modem communications (CSUs/DSUs, T1, SW56, Frac-T1, etc).

Livingston Enterprises

Support Engineer

- Provided multi-level technical support (5x12) for SunOS, Solaris, AIX, SCO Unix, BSD, and Microsoft Windows for Fidelity Investment System Management applications.

- Installation, maintenance and support of software tools in order to resolve application, network problems resulting from incorrect data flows, file servers utilizing PERL based scripts.

- Designed, programmed and implemented a suite of PERL based scripts to facilitate maintenance and updating of Domain Name System (DNS).

Fidelity Investments

Security Operations Engineer

- Digital Equipment Corporation United States Professional Services Networking Team for first commercial firewall using filters and application gateways (proxies) DEC Firewall for Dow Chemical later renamed DEC SEAL (Digital Equipment Corporation Secure External Access Link).

- Applications consultant for multi-year, multi-million dollar, multi-site implementations for various automotive, retail and manufacturing environments of Material Requirements (MRP/MRP II) management technology/service fulfillment solutions utilizing 4GL application frameworks.

- Developer of Real-time custom application modules for Accounts Payable, Material Control, Physical Inventory, Master Production Scheduling, Material Requirements Planning, Data Entry Automation, Supplier Electronic Data Interchange (EDI) for Automotive and WalMart EDI.

- Product Release Management Lead for Computer Aided Release Accounting System (CARAS) utilizing PRO-IV Xerox CHESS Rapid Application Development (RAD) toolset.

- Customers included: Chrysler/New Process Gear transmission division, Ford Motor Company, General Motors, Caterpillar, Honda Motor Company, Brooks Automation, Eaton Semiconductor, Walmart Distribution, Walmart Fulfillment Centers, Sam's Club, Parker Brothers, Inc.

- Purchase Order module customizations based on customer requirements to ensure timely placement and delivery of components in line with production planning requirements.

- Modified Expedited Order Module to allow for expedited/re-scheduling of open purchase orders to suit production planning requirements

- Produced historical data reports including sales trends, sales trend analysis tracking, demand driver, material on time delivery including commodity spends with dedicated production cells.

- Optimized forecast algorithms to improve programmatic modules utilized by production planners, sales, production supervisors and quality allowing modifications to improve forecast reporting.

Mark Teicher

Mark Teicher