Cyber Security specialist - Cloud and on prem
Ibm - Canada
مجموع سنوات الخبرة :22 years, 0 أشهر
• Threat management solutions (XDR, NDR, SEIM, SOAR)
• Cloud Cybersecurity
• Attack surface management and vulnerability management.
• Work with CI/CD tools such as jenkins/puppet and ansible to streamline deployments. Knowledge of security concepts (encryption, SSL). Understanding of prioritization of problem management, change management, incidents/enhancements Experience in setting up the junctions and the token configurations to support Single Sign On.
• Engage in a highly collaborative team environment to suggest best options to lay foundations for cloud architecture, scaling, development opportunities, cost savings, and vulnerabilities.
• Design, develop and integrate highly complex DevOps pipelines, including build automation, CI/CD, Infrastructure-as-Code (IaC), security, monitoring, logging, and alerting
• Kickoff new client engagements
• Develop long range plans with customer to adopt cloud best practices
• Ensure high quality of project delivery
• modernize on-premise infrastructure with DevSecOps.
• Provide leadership in technical guidance and counsel to Development, Information Security, Engineering and Operation teams to ensure that their processes and deliverables align with the Architecture of the Enterprise
• Define the security controls for a variety of cloud and on-premise workloads, working closely with Information Security
• Securing Kubernetes Cluster by Implementing:
• Protecting the Cluster with Akamai services (DDoS, ADCs, SiteShield, GSLB)
• Service Mesh using Istio and consul
• Design and deploy Palo Alto Cortex
• IAM integration with Active directly and ADD
• Image security and Vulnerability scanning
• Admission Controllers using OPA Gatekeeper
• Network Security using Istio gateways and mTLS
• Kubernetes maintenance, patching and upgrade.
• Define, Secure, and implement Kubernetes infrastructure using Docker/Openshift/AKS/EKS/fargate.
• Deploy Apps using DevOps tools (Ansible, Terraform, Azure Devops, AWS Cloudformation, and Bamboo Jenkins)
• Support application based on RegEx, Phyton scripts
• Design and deploy HDInsight Kafka and AWS Kinesis.
• Design and deploy Apache Kafka for building real-time data pipelines and streaming apps.
• Architect, lead and design solutions for managing aspects of VDI for more than 6000 call centers at Rogers, Identity and Access Management; translating business requirements to functional technology requirements as needed, using Citirx Technology.
• Act as a Subject Matter Expert (SME) for Identity and Access Management, policies/practices and processes and how they are applied in daily function or during project lifecycle
• Contribute to the overall IAM and security technical strategy and roadmap including but not limited to: identity lifecycle management and governance, powerful privileged access, customer authentication, hybrid public/private cloud integration
• Produce technical solution documents, design/architecture diagrams, security design documentation
• Deliver technical presentations and knowledge walkthroughs of existing and proposed application systems to various audiences including project team members, peer technology teams and management
• Provide consultation, strategy and technical leadership towards the successful discovery, maturity assessment and ultimate integration of third party company’s IAM
Activities: Pitch, Plan, architect, and Deploy Cloud,
Server, desktop and application virtualization and security solutions. This
Incorporates technologies from Citrix, VMware, Microsoft-Azure, AWS, HP,
TrendMicro, Intel, as well as other virtualization products. Interact in a
professional manner with customers on a daily basis and execute projects on
budget and on time. Regularly interface with the Sales Team, providing presales
Support as needed. Provide technical leadership in creating new and
Improved solutions and services at Softchoice
o 10/2007 - 10/2012 Trend Micro: o 6/2010 - 10/2012 Sr. Technical Account Manager: o Major responsibility: As a "Trusted Advisor", a Technical Account Manager will foster strong relationships between Trend Micro and its customer and will be relied upon to provide advice and recommendations, based upon their own experience and expertise, for Trend Micro products across all levels of an organization. With a goal to support continued renewals and product purchases, they will think strategically and recognize opportunities for revenue generation and competitive displacement, and share that information with their Sales team
o 10/2007 - 6/2010 Sr. Sales Engineer: o Major Responsibility: Perform Proof of Concepts with prospective partners and customers, Share best practices with Sales Engineers to enhance the quality and efficiency of the other members., Maintain and expand working knowledge of current and beta (non-released) Trend Micro products., Provide software/network troubleshooting on minor technical issues., Prepare and deliver product training to both Sales and Trend Premium Resellers., Presentations - preparation, delivery and follow up on technical presentations., Product demos - preparation, delivery and follow on technical presentations., Provide technical back up to sales - attend trade shows, follow up after sales calls/visits etc., Day to day - deal with unscheduled items e.g. internal questions from sales, incoming presales calls etc.
o 6/2006 - 12/2007 HP Company: Security Analyst: o Major responsibility: Coordinates and supervises the day-to-day activities and operations of the Data Security and technical support services unit; provides technical consultation and coordination services; diagnoses and resolves highly technical security related system problems; formulates new procedures; coordinates network software and hardware installations; supervises network support activities; and performs all other related duties.
o 11/2002 - 6/2006: Fourth Dimension System (FDS): o Major responsibility: Pre-sale Eng & Security Consultant, and Network Trainer, my Major responsibility is to Design, support, install and Manage the Accounts, like, juniper, Sniffer, anti-virus system, IDS-IPs system, web filtering software, firewalls, strong authentication system Safe word Premier Access, Helpdesk Systems, Switches, Routers.
o 6/2001 - 11/2002: www.sheikhmohammed.co.ae: o Major responsibility: Network Engineer for IT Education project.
