Network Security Architect

Network Security Architect — Summit Tech Enterprises

Dallas, TX | August 2023 – Present

• Architected a Zero Trust Network Access (ZTNA) framework for a corporate network of 4,500 remote users, reducing lateral network movement and unauthorized access attempts by 42% over a 12-month period.
• Configured and deployed 18 Palo Alto next-generation firewalls (NGFW) across 4 data centers, optimizing firewall rule bases to reduce network latency by 15% and administrative overhead by 22%.
• Re-engineered network segmentation using virtual local area networks (VLANs) and micro-segmentation policies, isolating critical payment card data and reducing compliance audit preparation time by 35%.
• Implemented automated threat detection workflows using Python and Splunk, reducing the mean time to detect (MTTD) internal security vulnerabilities from 14 days to less than 24 hours.

Network Security Engineer — Fortress Network Systems

Dallas, TX | June 2020 – July 2023

• Designed and maintained enterprise site-to-site IPsec VPN tunnels connecting 12 regional branch offices, improving secure network uptime to 99.99% while reducing latency by 18%.
• Monitored intrusion detection and prevention systems (IDS/IPS), identifying and mitigating an average of 150 potential brute-force and phishing network threats weekly.
• Managed regular network vulnerability assessments using Nessus, identifying and remediating over 450 critical vulnerabilities across 250 network servers and devices.
• Coordinated with a team of 5 infrastructure engineers to upgrade network switches and routers, boosting localized data throughput by 28% and eliminating single points of failure.

Network security architecture, Zero Trust Network Access (ZTNA), Next-Generation Firewalls (NGFW), Palo Alto Networks, Cisco ASA, Network segmentation, VPN (IPsec/SSL), Intrusion Detection and Prevention (IDS/IPS), Threat modeling, Vulnerability assessment, NIST Cybersecurity Framework, CIS Benchmarks, Splunk, Nessus, Wireshark, Python, Terraform, hybrid-cloud security, TCP/IP, network routing and switching

Enterprise Zero Trust Migration

Role: Lead Network Security Architect

Tools: Palo Alto ZTNA, Terraform, Python, Splunk

Designed and executed the transition of network architecture to ZTNA for 4,500 employees, reducing unauthorized network access incidents by 44% and remote access ticket volume by 28%.

Data Center Network Segmentation

Role: Security Architect

Tools: Cisco ASA, VLANs, Wireshark, Nessus

Segmented network environments hosting critical database assets, improving secure localized data transfer speeds by 22% and reducing compliance audit cycles by 3 weeks.

• Certified Information Systems Security Professional (CISSP) (2024)
• Palo Alto Networks Certified Network Security Engineer (PCNSE) (2023)
• AWS Certified Security - Specialty (2022)

• Languages: English (Native), Mandarin (Conversational)
• Volunteer Work: Cybersecurity mentor for local high school robotics program (2021-present)
• Availability: 2 weeks notice