Junbert Robles CCSM,CCSE,PCNSE7,BCCPP,ITIL,RCSP, CCNA

As a Senior Network Checkpoint Security Consultant, I support Data center task related projects (ICAM/IAM integration, OT/IT, Checkpoints firewalls (R81.X) and Citrix Load balancer). I attend design reviews related to network security projects and new technologies to be integrated into the VXLAN network. Other duties included: • Create Low level diagram (LLD) and review with the project team and security architect. Work on LLD for FERC-881 compliance (monitoring power utility transmission line current conditions). • Implement and update firewall policy (change ticket). Troubleshoot with the application SME during the smoke test. • Firewall design review with security architect. Firewall rule optimization and remediation • Schedule and perform firewall firmware and hotfix update in three data centers in multiple environments (DMZ, Core, QA, PROD) • Follow NERC-CIP standards. • Handle the implementation and coordination of Gigamon integration to the Checkpoint VSX/VSLS Firewalls. • Handle the implementation, configuration and coordination of the application integration to the Citrix load balancer and Checkpoint firewalls • Technical discussion (Design, failure scenario, network connections, VLAN, IP, etc.) with third party SME about the technologies to be integrated with firewall and load balancer. • Handle troubleshooting (firewall logs review, tcpdump, etc.) with Project team during the deployment and migration. • Technical research about the technologies and products for the project

As a Network Security Consultant, I support Celestica network security team to integrate TUFIN SecureTrack to their network. Assist TUFIN sales team in the product deliberation including how the SecureTrack will work well with Checkpoint firewalls network. Other duties included: • Work with Project manager in creating the TUFIN Project Plan/Schedule documentation • Prepare General report (e.g. Unused rules, wide open rules, risk rules, etc.) to present with the Network security team and manager to discuss the initial state of Checkpoint firewalls. • Work with Network security team about the strategy and approach the firewall rule optimization and remediation • Prepare weekly report using SecureTrack of firewall rules and policy for analysis and remediation with Network security team.

As an IT Security Architect, I support OT (Operational Technology) projects related to MTA environments, ranging from IT and OT network isolation, attend security design review for new technologies to be integrated in the network, attend project meetings, and coordinate the implementation with the support and the application team. Other duties included: • Technical research about the technologies and products for the project • Update network topologies and diagram (Visio)

As a Senior Network Security Consultant, I support Data center migration with Checkpoint VSX/VSLS firewalls. I am also involved in reviewing Network security designs and architecture and handling operations task (tickets and support calls). Sensitivity: Internal & Restricted Other duties included: • Manage and upgrade Checkpoint 15400 and 5600 in three Data center • Integration testing between Cisco Router/Switches VXLAN, Nokia Routers and Checkpoint R81.20 • Troubleshoot Video Multicast traffic issue (VXLAN BGP) with Network team • Managed Checkpoint R81.20 in VSX VSLS cluster setup • Handle Checkpoint R81.20 in VSX VSLS cluster setup • Review the BOM for new Checkpoint firewall with the team and the vendor before signing the final configuration. • Perform on-going firewall rules and policies optimization by reviewing the firewall logs and hits • Open proactive ticket support with Checkpoint support before the migration or any critical scheduled change on the network. • Perform in depth troubleshooting (e.g tcpdump, fw monitor, log review) with the network team to resolve any problem on the migration day or any major network security related issues during normal operation • Handle remote site/branch migration involving different secured applications and video surveillance

Responsibilities: As Network Security Analyst, I work on projects related to firewall upgrades in a remote site and handles operations task (tickets and support calls). I also involved in migration of network devices to Cisco ACI environment and update Checkpoint firewall security diagram and documentation. Other duties included: • Upgrade Checkpoint firewalls from R77.30 to R80.20 • Upgrade and deploy Forescout devices remotely • Support Bluecoat Proxy and Juniper remote access VPN • Involve in Cisco ACI migration • Familiar with Cisco ACI

As Security Architect, I am part of the team working on security remediation project in one of the biggest airport in Canada. I handle firewall rule remediation, load balancer and Checkpoint firewall refresh. Other duties included: • Architect and design Checkpoint and F5 (Cisco to F5) refresh project • Present and review the Checkpoint and F5 design to architectural review meeting for approval • Collaborate with the client and offshore team about the design of the project • Review the firewall rules and work on the remediation processes (baselines, procedures, and remediation plan) • Manage and monitor the actual migration and deployment process • SME for the migrated devices until the turn over completed with the Operations team

As Consultant I, I was involved in Managed services team (24x7 operation) facing client ranging from financial institution, enterprise retailer, to a top global food chain companies. I handle ticket escalation and issue that cannot resolve by Analyst I and II, and provide on-call assistance. Other duties included: • Mentor and support Analyst I and II • Palo Alto firewall configuration, installation and troubleshooting • Build Palo Alto firewall VPN between our client’s network • Handle Palo Alto firewall daily operations and BAU requests (e.g create new rules, change configuration using Panorama, etc.) • Handle weekly tuning call for Imperva SecureSphere WAF • Checkpoint firewall and Bluecoat proxy change request implementation • Checkpoint firewall and Bluecoat proxy troubleshooting (e.g. Site to site VPN, cluster, etc.) • Handle Bluecoat review and technical design • Handle and analyze Qradar offences and alerts • Facilitate webex session to do remote troubleshooting with the end user • Contact third party vendor (e.g Bluecoat, Checkpoint, etc) for any related software bug issue • Plan maintenance upgrade of security devices (e.g. Bluecoat, firewalls) with the end user.

As a Senior Security Engineer, I am assigned in Bank of America/Merrill Lynch Singapore project under Architecture and Engineering team that handles Data Center migration, BAU request, and Operation support. I design, engineer and review new firewall access that requires by the bank’s vendor, user and third party partner before assigning it to the implementation team. Discuss the technical aspect (e.g. network diagram, traffic flow, application involved, etc) of the project with the project managers and Business Units before the implementation. Other duties included: • Receive and review EConnect (Firewall rule) request and delegate to implementation • Support and attend troubleshooting call for Firewall and network access • Perform hands on troubleshooting for Firewall and network issue • Review the network/firewall diagram during Data Center migration

Responsibilities: As a Senior Security Engineer, my main responsibilities are to support Zimbani clients across Information Security Engineering and Networking requirements ranging from perimeter security (Firewall installation, configuration and maintenance) to internal infrastructure security (Bluecoat proxy installation and management), firewall management using Algosec, network security design and pre-sales/technical consulting. Other duties included: - Support Amazon web services (AWS), AWS administration (VPC, DNS, EC2 etc.) and Integration, installation and configuration of Checkpoint firewall to EC2 VPC. - Furthermore I am currently building POC environments that includes the design, installation and testing of Cisco Ironport and Forescout solutions within virtualised environments using vSphere Hypervisor.

- Manage and maintain network devices including Firewalls (Checkpoint, netscreen, mcafee), Bluecoat proxy, load balancer - Handle/resolve the network vulnerabilities reported by IS governance - Perform troubleshooting with the bank end user