An Expert in Digital Transformation Projects.

Implementing Highly Available & Redundant Infrastructure: Firewall-Email-Endpoint Security, routers, switches, network storage arrays, HA physical server clustering, Virtualization-hypervisors, VM's, wlan, global vpn, ospf, mpls. 2FA-MFA, Cloud Computing Building & Maintaining Infrastructure On-Premise-Hybrid-Cloud.

Security Policies & Controls: PAM-IAM-MFA-SSO-DLP-AV-CASB-Zero Trust Exchange-Vulnerability & Cyber Risk Management.

======================================

Latest Project Aug 24 to date.

Last Major Project April 2022- Completion in 15 of 36 Months. Implement latest technologies to migrate/build infrastructures – greenfield sites & keep risk to Production DC at minimum.

Mimecast Web-Email-App Security.
Specops, Falcon-Crowdstrike, Rapid7, Duo MFA, Cyberark-PIM/PAM/Safes, Cloudfare-ddos & WAF, Fortigate-FW/WAF, Helpsystems-Intermapper/Event Manager (SIEM).

Azure DC & Private DC Builds.
Design vlan network for greenfield sites, Routing-Switching, hyperv cluster builds, DC migration, Express Route & Custom DNS.
Build infrastructure with Public-Internal Load Balancers, HA-Fortigate FWs, HA WAFs.
GoAnywhere SFTP Build

2x Dell Powerstore Config with DR Storage Replication, 2x QNAP Storage configuration.
2x Hypervisor Implementation & Clustered Hosts.

Windows Servers & Linux/Suse flavour builds. AD, DHCP, Split DNS, Group Policy, IIS, CA Management-PKI, SCCM/SCCM Cloud gateway builds, Duo-MFA server builds, CyberArk server builds, VM conversions 'vmware 2 hyper-v' (Suse Linux).

SECURING:
Windows End User Logon – Duo MFA
Windows Servers Logon – Duo MFA
Linux Server Logon – Duo MFA
SSL-VPNs – Duo MFA
Office365 Logon- Duo MFA
CyberArk Portal Logon – Duo MFA
Mimecast Portal – Duo MFA
IT Admin & Service Accounts – CyberArk
Azure/Duo Portal – CyberArk
Privileged Access Management – CyberArk
RBAC – Role Based Access

Domain Services Migration:
FSMO Roles, AAD Connect, ADFS-Farm-SSO to Azure-SSO, Securelink.

Encrypted Backup -OnSite -Cloud
SDWAN Migration Project.

FAILOVER of:
DR – Colocation
MPLS
Routers
Firewall HA
Datacentre Switches
Internet Breakout
Storage Node Volumes
Hypervisor Failover – VMs
S2S-VPN
SSL-VPN

Failover back to Production DC, test Replication back to Primary Storage Node & all DR above.

Azure DC – ASR Region FO

BAU -MS365 -Miraki -Azure DCs -DC Domain Services
======================================

30 years+ experience

Identify single point of failure
DR Site Testing
BCP Solutions

Interests: SDWAN, Network Automation, Cybersecurity.
Defensive/Offensive: Blue/Red Teaming.