Todor Vergov

• Design and delivered scalable, high-availability ingestion for key security sources (AWS, Azure, SCOM, VMware, Syslog-NG) while supporting integrations with ServiceNow. • Planning and lead the migration to Splunk Cloud, Microsoft Sentinel, Cribl, validating sources, ensuring secure data flows, and enforcing Zero Trust RBAC policies across Splunk environments. • Working directly with Application Managers and Security Leadership to align technical execution with business and compliance expectations. • Optimized Splunk architecture across on-prem, AWS, and cloud environments by expanding DMZ coverage, implementing scalable forwarding tiers (HF, IF, nested DSs), and ensuring efficient data ingestion pipelines. • Acted as Enterprise Security Architect, improving asset & identity configurations, reviewing SOC correlation searches, and driving CIM adoption to maximize detection and response capabilities. • Enhanced ITSI performance by re-sizing search head clusters and fine-tuning configurations, significantly improving platform stability and user experience. • Designed and executed storage and indexer cluster strategies, including capacity planning, performance tuning, and multi-site upgrade/downgrade procedures. • Developed data quality and onboarding standards, documentations, mentoring engineers through complex API integrations, CIM normalization, and peer reviews including but not limited to knowledge transfer sessions to the team. • Introduced dual/triple complex forwarding designs with Cribl, delivering fault-tolerant ingestion pathways and leading successful migration of data sources with zero downtime. • Served as L3 SME and primary escalation point during platform emergencies, outages, and architectural challenges, ensuring stability and resilience of the global Splunk ecosystem.

• Rescued and re-architected a misconfigured Enterprise Security deployment, aligning with company vision and converting it into a hybrid cluster spanning on-prem and AWS. • Collaborated with AWS architects to implement Kinesis Firehose across heavy forwarders, achieving scalable, high-availability ingestion pipelines. • Plan and execute infrastructure upgrades for Splunk Cloud, including renewal of expiring SSO certificates, IF/HF upgrades, and validation of uninterrupted data flows. • Size, define scope and align goals to implemented the AWS Splunk App and Add-on, enabling full visibility into cloud costs, architecture, and operational insights. • Point of contact for sizing activities across onboarding and implementation activities. • Designed and deployed a Windows Update compliance dashboard for the CISO, integrating WSUS and SCCM data into normalized Splunk models with advanced correlation searches. • Improved & Enhanced SOC effectiveness by improving data quality monitoring, license cost optimization, and MITRE ATT&CK framework coverage, including dashboards for data source mapping and success rate tracking. • Trained SOC analysts and administrators on effective use of Splunk ES, improving adoption and correlation rule efficiency. • Improve cost architecture by evaluate POC and Implemented SmartStore requiring designing index structures and cache management strategies to balance storage costs with query performance on S3. • Streamlined operations by packaging preconfigured Splunk apps and add-ons for consistent deployment across multiple OS platforms. • Handling comprehensive Splunk environment documentation, filling gaps in operational knowledge and supporting long-term maintainability. • Delivered professional services as part of the Splunk Competence Center Team for EMEA region supporting enterprise customers.

• Acted as a one-man IT department, designing, supporting, and enhancing infrastructure across multiple country regional offices. • Implemented a Zero Trust policy by building a high-availability domain controller structure from scratch and integrating all appliances, VOIP, VPN, and printer management into a secure framework. • Introduced Spiceworks asset inventory, delivering transparent device visibility and streamlined assignment tracking across the company. • Redesigned and optimized the network architecture, hardening security and improving throughput across managed switches and enterprise-grade Hyper-V servers. • Managed and improved video surveillance, access control, and G Suite administration, ensuring both security and usability for business operations. • Optimized site-to-site VPN performance, including VOIP prioritization and traffic shaping for better call quality and reliability.

• Supported enterprise clients across Silicon Valley as part of a managed services provider (MSP), delivering 24/7 system availability through remote design, deployment, and emergency support. • Administered and upgraded VMware vSphere multisite clusters, Hyper-V environments, and SAN/iSCSI storage, including zero-downtime upgrades and ESXi builds from scratch. • Configured and maintained Cisco ASA firewalls, switches, Active Directory domain controllers, and Citrix environments, ensuring secure and reliable client operations. • Designed and led improvements to the SolarWinds N-able RMM platform, enhancing monitoring coverage for HA appliances and multisite clusters across multiple clients. • Implemented Veeam backup solutions, DLP appliances, and Exchange migrations, including hybrid and cloudbased email services (Rackspace, G Suite). • Delivered VOIP administration (SIP trunk setup, hybrid/cloud PBX systems) while troubleshooting complex telephony issues across client environments. • Mentored and coordinated the NOC team, aligning with client managers and solution architects to create proactive service and monitoring strategies.

• Designed and deployed multisite Active Directory and LDAP integration, strengthening Zero Trust policies and ensuring scalable, high-availability access management across locations. • Improved infrastructure reliability by implementing IPSec VPNs, LACP, and traffic load balancing, replacing legacy tunnels and enabling secure, high-throughput site-to-site connectivity. • Introduced Jenkins CI/CD infrastructure, configuring build nodes across multiple OS platforms and aligning with development leads to streamline software delivery. • Automated onboarding and system setup using Windows GPO, reducing manual overhead for new hires and standardizing configurations. • Managed QA solutions, Git access, Squid proxy, and Mantis administration, supporting both internal projects and client-facing teams. • Oversaw building access control and video surveillance systems, ensuring both IT and physical security.

• Designed and implemented a multi-site Active Directory and domain controller infrastructure across Europe, applying Zero Trust principles to strengthen security. • Led the migration from analog to digital telephony by deploying a scalable VOIP system, automating rollout via DHCP templates and ensuring seamless adoption. • Planned and expanded IT architecture for a new corporate building, overseeing server room design, networking, and hardware deployment within budget and timelines. • Designed and Implemented iSCSI storage to support Hyper-V environments, improving virtualization scalability and reliability. • Collaborated with stakeholders and development teams on B2B system integrations (EDI-based freight forwarding with IKEA) and intermodal platform design, ensuring secure and efficient data exchange. • Developed ransomware resilience strategies, enhancing system and data protection across the organization. • Mentored junior administrators, promoting proactive systems maintenance and best practices.

• Performed authorized warranty & out-of-warranty repairs for Lexmark printers and Dell laptops, handling diagnostics and parts replacement. • Led hardware diagnostics, data recovery, and secure data migration for customer systems. • Built, repaired, and tuned desktop/laptop configurations to restore performance and reliability. • Configured SOHO routers/switches, troubleshot LAN issues, and stabilized small-office networks. • Maintained clear service documentation and checklists to speed bench workflows and handoffs.

• Started in client implementation & support; quickly advanced to ERP implementation specialist by aligning product configuration with each client’s business logic. • Led end-to-end ERP deployments — requirements, configuration, user training, and documentation — expanding solutions for existing customers as their needs grew. • Helped launch the QA function: authored test plans and scenarios, executed regression tests, and documented defects to clarify platform boundaries. • Evaluated and introduced automated testing tools, reducing manual QA effort and accelerating releases. • Provided remote post-go-live support and incremental enhancements, ensuring stability and adoption across client environments.