Network Security Engineer

Network Security Engineer II — Sentinel Defense Technologies

Dallas, TX | September 2022 – Present

• Designed and configured 12 next-generation firewalls using Palo Alto PAN-OS across 3 corporate offices, reducing security perimeter vulnerability detection times by 32%.
• Administered and optimized secure site-to-site IPsec VPN tunnels for 400+ remote employees, improving network availability to 99.99% and reducing latency by 18%.
• Automated routine network vulnerability scans by developing custom Python scripts, cutting weekly configuration audit times from 10 hours down to 45 minutes.
• Mitigated an average of 180 network security alerts per day via Splunk SIEM, resulting in a 24% reduction in the mean time to respond to malicious activities.

Network Security Specialist — Ironclad Network Solutions

Dallas, TX | June 2020 – August 2022

• Managed Cisco ASA firewall rule bases across 5 enterprise segments, reclaiming unused rules to boost network security throughput by 22% and lower latency.
• Conducted monthly vulnerability assessments on 250+ network servers using Nessus, identifying and remediating 48 critical patches with zero network downtime.
• Deployed a network admission control solution for 1,200 endpoint devices, increasing internal security compliance ratings from 82% to 98% in 6 months.
• Participated in 8 network incident response drills and updated response playbooks, lowering the average recovery time from network disruptions by 35% overall.

Network security, Firewalls, Palo Alto PAN-OS, Cisco ASA, VPN, IPSec, SSL, IDS/IPS, Nessus, Wireshark, Splunk, Python, Bash, TCP/IP, Routing & Switching, NIST Framework, SOC 2, Linux administration, Network Access Control

Zero Trust Network Migration

Role: Lead Network Security Engineer

Tools: Palo Alto ZTNA, Terraform, Python, Splunk

Architected and executed transition to Zero Trust model for 400+ remote workers, reducing unauthorized network access attempts by 36%.

Data Center Firewall Upgrade

Role: Network Security Specialist

Tools: Cisco ASA, Wireshark, Nessus

Configured and migrated rule sets for 12 next-generation firewalls, increasing network capacity by 25% and reducing access latency by 15%.

• Certified Information Systems Security Professional (CISSP) (2024)
• Palo Alto Networks Certified Network Security Engineer (PCNSE) (2022)

• Languages: English (Native), Spanish (Conversational)
• Volunteer Work: Security advisor for local non-profit youth organization (2022-present)
• Availability: 2 weeks notice