Eric Obeng

• Lead design, deployment, and lifecycle management of enterprise Palo Alto NGFW platforms (App-ID, Content-ID, User-ID, Threat Prevention). • Administer both physical and virtual firewalls (Palo Alto, FortiGate), ensuring enterprise-grade security and compliance. • Configure Group Policy Objects (GPOs) to restrict end-user access to the Control Panel, ensuring adherence to security and compliance requirements. • Manage Windows/Linux server environments with integrated firewall configurations to ensure compliance with security policies. • Configure and manage SSL Decryption (SSL Forward Proxy / Deep Inspection), PKI with Microsoft AD CS, and Subordinate CA infrastructure for secure enterprise communications. • Administer enterprise-wide Root CA distribution via Group Policy, ensuring consistent trust hierarchy across all domain-joined systems. • Implement advanced firewall policies, URL Filtering, SSL Inspection, and Threat Prevention modules to secure sensitive enterprise and healthcare workloads. • Deploy and maintain site-to-site and remote-access VPNs, ensuring secure multi-site and remote workforce connectivity. • Enforce Zero Trust Security principles: network segmentation, MFA, least privilege, and identity-based policies. • Integrate Azure cloud security controls (IAM, MFA, AD, networking) with on-prem Palo Alto environments. • Conduct firewall audits and remediation aligned with CIS, NIST, and FedRAMP standards. • Provide 24x7 Tier 3 escalation support for complex network and security incidents. • Mentor junior engineers and lead DR/business continuity planning for enterprise firewall and network infrastructure. • Troubleshoot and optimize IP addressing and subnetting strategies, ensuring efficient network utilization and scalability. • Configure and maintain routing protocols and switching environments to ensure high availability and performance across multi-site networks. • Manage DNS and DHCP services

• Configured and supported enterprise networking solutions across multi-site hybrid environments. • Managed Palo Alto and FortiGate firewalls, deploying advanced security profiles (SSL Decryption, URL Filtering, Threat Prevention). • Deployed GlobalProtect VPNs with Active Directory integration, enhancing remote workforce security. • Conducted proactive threat hunting and log analysis in Splunk/SolarWinds, reducing security event dwell time. • Integrated DNS and DHCP services with Active Directory to streamline authentication, client provisioning, and centralized network control. • Collaborated with compliance teams on DoD 8570, NIST, and CIS benchmarks. • Supported VoIP, routing, and switching optimization to ensure high-performance enterprise communication. • Led projects to deploy and harden servers with firewalls (Windows Defender, iptables, Cisco ASA, Palo Alto) to safeguard business-critical applications. • Performed network performance analysis, monitoring, and issue resolution to minimize downtime and optimize throughput. • Applied TCP/IP, UDP, and ICMP protocol knowledge in diagnosing connectivity issues and strengthening network reliability. • Designed and implemented firewall rules and access control lists (ACLs) to regulate inbound/outbound traffic and minimize attack surfaces. • Documented and presented network topology diagrams and configurations to stakeholders for transparency and operational readiness.

• Conducted Tier 1/Tier 2 troubleshooting for network and firewall incidents, escalating complex cases as needed. • Administered and maintained LAN/WAN infrastructure, including routers, switches, firewalls, and wireless access points, ensuring high availability and performance. • Configured and supported routing protocols (OSPF, EIGRP, BGP) and switching technologies (VLANs, STP, trunking) to optimize enterprise network traffic. • Monitored and troubleshot LAN/WAN connectivity issues using tools such as Wireshark, traceroute, and ping to minimize downtime. • Implemented network security policies including ACLs, VPNs, IDS/IPS, and firewall rules to safeguard against internal and external threats. • Managed WAN links and coordinated with ISPs to ensure reliable connectivity and efficient bandwidth utilization. • Conducted network capacity planning, performance tuning, and optimization for growing business needs. • Assisted in Palo Alto firewall administration (policies, NAT, VPNs). • Administered DHCP and DNS servers for seamless network operations and efficient IP address management. • Maintained documentation of network diagrams, configurations, and change management processes for audits and troubleshooting. • Configured VLANs, routing, and DHCP for branch office connectivity and traffic optimization. • Implemented Syslog and network monitoring solutions to improve visibility and performance. • Supported VPN deployments for remote and branch users. • Trained IT staff on security best practices and patch management. • Contributed to infrastructure upgrades, Cisco switch deployments, and MFA adoption initiatives.