Paul Simons

Implimentation of the Illumio Zero Trust Segmentation Platform in the banking sector.

Main tasks included. - Ensuring good functionality, maintenance and support to the bank's network and telecommunications systems - Support, maintain and monitor the firewalls and security infrastructure. - Handle daily events and problems which occur the network telecoms and security by providing first and second level support - Network switch configuration, Netflow configuration, cleanup and upgrades - Check Point firewall upgrades and policy optimization (IP ranges, services, unused rules.) - Knowledge transfer to new starter in network team

Skills: Syslog · Cyber Defense · Fortinet · Checkpoint · Root Cause Problem Solving · Backup & Recovery Systems · Nexus · Security Consulting · VMware Infrastructure · Network Forensics · Security Engineering · Domain Name System (DNS) · Cybersecurity · Firewall Management · Algosec · Transport Layer Security (TLS)

Contract (renewed); Recertification project of a large volume of Check Point firewall rules, to which comply with new BNP Paribas enterprise security policy regulatory requirements. Responsible for the system management of the banks Tufin Aurora TOS applications (Track/Change/App). Network diagram design, updates and issues. Presentation of management summaries. Daily threat management and maintenance of: Cisco FirePOWER IDS modules, Check Point IPS blades, McAfee Web Gateway proxies and F5 BIG-IP load balancers. POC project using Illumio Core.

All aspects of banking IT infrastructure (and DR) in Geneva, Dubai and Luxemburg branches. - Fortigate and Check Point firewall configuration and management. - Biometric identity management integrated with Microsoft Active Directory. - Banking PC/device/user policy enforcement. - Cisco Wi-Fi heatmap and coverage profiling. - Forcepoint (Websense) proxy and web security. - Verctra AI cyberattack detection. - Cisco VoIP phone management with CUCM. - Solarwinds network infrastructure management.

Consultant: Computer and Network Security Short term contracts/assignments including; - Fortinet Security Fabric (FortiGate Firewall), - Ubiquiti WAP installation, - WEB site (Wordpress) design and maintenance. - 3D Printer (CR-10) commissioning with Autodesk Fusion 360. - Technical Author – PowerPoint presentations; ‘Corporate Security Expectations’.

Maintained and developed the SITA OnAir network/avionics CentOS/RHEL infrastructure which delivered the ‘OnAir Internet’ and ‘Mobile OnAir’ (GSM) products to commercial/private aircraft via air-to-ground satellite connectivity. Responsible for data-centre network, firewalls, VPNs and virtual systems management, security, capacity planning and performance tuning. Supplier invoice approval authority. Asterisk open source VoIP system management.

Manage all facets of security and network for real-time Banking web distribution system. Cisco switch/routers and production Check Point firewalls. Configured and maintained security measures to achieve high availability for live-live and live-standby 24x7 access. Monitored security systems for detecting infrastructure problems and possible internal or DMZ intrusion. Provide expert-level technical support for firewall security and application penetration testing.

Led a team of seven technology professionals comprising systems and network engineers, Webmaster, Level 3 Help-desk support, Access Administrator and Applications Trainer to manage and maintain computing systems, corporate network, telecommunications, and system security. Evaluated systems and processes to devise improvement strategies, planned and coordinated projects, and directed implementation teams. Annual budget of CHF 4 million. Transferred to Denver CO as ‘Corporate Security Architect’ to manage the WAN network integration and transfer of technologies to the new corporate headquarters Redesigned, deployed, and managed network security solutions for global operations. Directed all aspects of enterprise network security (Check Point) including intrusion detection (NID), central user accounts administration (LDAP), Web usage, and anti-virus protection.