Jeff W.

Palo Alto SME for a premier GSI. Technical Advisor for global managed services clients. Mentor and level-5 escalation for global NOC. Presales and post-sales engineering. PANW Partner liaison for Fortune 100 Managed Services client. Coordinate training for NOC engineers. Assist with SASE architecture design for Managed Services clients. Assist with quotes, BOMs, SOWs, complex licensing issues. Assist with creation/design/structure of Managed SASE offering. PANW evangelist internally and client-facing.

Palo Alto SME for a premier GSI. Technical Advisor for global managed services clients. Level-5 escalation and mentor for global NOC. Presales and post-sales engineering. Assist with Prisma SASE quotes, BOMs, SOWs. Assist with Prisma SDWAN deployment and rollout (ION cutovers) for global managed services client. Deliver monthly/quarterly Prisma Access/SDWAN reports. PANW evangelist internally and client-facing.

Design, Deployments, Migrations, Transformation Level Services, Assessments, and Troubleshooting- primarily Network/Cloud Security. Presales and post-sales engineering. Strong focus on Palo Alto Networks security platforms - Strata and Prisma. NGFW (physical and VM-series firewalls), Panorama, GlobalProtect, Prisma Access, Prisma Cloud, Expedition, IronSkillet, BPA. Enterprise, Commercial, and SMB. Verticals served: Healthcare, Financial, Insurance, Utility, Manufacturing, Software.

Responsible for architecting, deploying and managing enterprise security solutions. Presales and post-sales engineering. Heavy focus on Palo Alto Networks and other cutting edge technologies.

Senior member of network risk operations / enterprise security team responsible for management of 1,000 firewalls spanning 18 North America states – platforms include Palo Alto, Juniper, and Fortinet. Primary team member responsible for maintaining and implementing Internet content filtering policy on Palo Alto firewalls (URL and application), with access controlled in part by Palo Alto User-ID, in partnership with IT Risk Management. Primary team member responsible for supporting SSL-VPN appliances, including Juniper SA’s, Pulse Secure MAG’s, and Citrix Netscalers / Access Gateways, for employee and vendor/partner remote access controlled via RADIUS and SecurID; primary vendor interface. Primary team member responsible for day-to-day support of Palo Alto firewalls for Credit Union. Perform firmware upgrades, updates and patching on firewalls and SSL-VPN appliances, following ITIL-based change control process. Review and implement firewall rule requests for both internal and external traffic, as well as VPN / remote access requests, in accordance with documented policies and procedures. Install / proactively renew SSL certificates on security hardware. Work with IT Risk Management on external security audits, remediating any issues discovered. Provide Internet usage reports and SSL-VPN remote access reports as requested for IT Litigation. Provide application layer bandwidth reports (Palo Alto) as requested by management. Achieved special clearance for sensitive / compliance environments. Share in day shift and after-hours on-call responsibilities for firewalls and VPN appliances. Time split between operational support and project work.

Provided Network/Security consulting and support for various businesses and healthcare organizations. Sold, deployed and supported Next-Generation firewalls. Created NextGen firewall administration instructional videos for Firewalls.com. Assessed PCI compliance, implemented appropriate security solutions to achieve compliance and proactive systems monitoring/management with routine penetration testing to maintain continued compliance. Architected and implemented multi-site network environments and secure remote access solutions utilizing VPN technologies. Provided IT consulting, systems administration, network engineering and support for various organizations. Took responsibility for ongoing IT management and support of clients’ network infrastructure and users. Provided Virtual CIO services and technology solution proposals as new needs were identified. Supported multi-server environments. Proactively managed, monitored, and maintained servers, network equipment, Internet security appliances, and other hosted systems utilizing automated tools and routine inspections. Performed upgrades, rebuilds and repairs to servers and workstations. Maintained operating system updates, security patching, performance, uptime, virus protection and local/offsite backups. Worked with clients’ Line-of-Business software companies to design, implement and maintain appropriate hardware, network, and custom software configurations for clients’ production environments. Light website programming using HTML and CSS.

Responsible for management of global networks and perimeter security for 33 sites worldwide; network consisted primarily of MPLS WAN provided by 3rd-party service provider in Germany, wide variety of local Internet breakouts, 21 Palo Alto firewalls centrally managed via Panorama, Cisco ASA firewalls, 300+ Cisco routers, switches and wireless access points managed via Cisco Prime Infrastructure, Juniper/Pulse Secure remote access VPN (3 regional MAG appliances), MobileIron mobile device management, and SolarWinds network monitoring. Majority of technical hands-on time was spent working with firewalls and VPN appliances. Handled firewall, VPN, network and Internet access related tickets escalated from global IT service desk. Followed ITIL-based change management procedures. Primary vendor interface for global MPLS WAN provider, for Palo Alto Networks, Cisco and SolarWinds. Project Manager / Team Lead for 2-3 projects at any given time (using PMBOK and Lean Six Sigma methodologies): - Global Firewall Replacement project (replacement of Cisco ASA and WatchGuard with Palo Alto firewalls worldwide). - Global Wireless Upgrade project (replacement of disparate legacy wireless technologies with centrally managed Cisco wireless infrastructure worldwide). - Global WAN Enhancement project (upgrading circuits / adding backup circuits worldwide; in some cases implementing site-to-site VPNs as failover path – Palo Alto-Palo Alto or PA-Cisco). - Network Monitoring Software project (SolarWinds implementation for global network). - Aging Switch Replacement project (replacing legacy Cisco, Enterasys/Extreme, HP/3Com switches globally with newer model Cisco switches and replacing LAN routers with Layer-3 Core switches). - Global re-IP / new VLAN structure project in conjunction with Firewall replacement and Wireless upgrade projects. - Other projects included replacing Cisco ASA remote access VPN with Juniper/Pulse Secure, ISAE 3402 Audit (Network Security) and preparation for IPO.

Managed/facilitated system upgrades and domain migration projects during Sentara’s acquisition of RMH Medical Center. Provided level 3 support for wide variety of Clinical and Financial systems. Responded to warnings/alerts from systems management software.