Jason Hernandez
Principal Architect, Network & Security at Shape Therapeutics Inc.- Claim this Profile
Click to upgrade to our gold package
for the full feature experience.
Topline Score
Bio
Brad Bonham
It is not often that I get to write two recommendations for the same person. I have had the privilege of working with Jason, once again, for the last 6 years. Due to Jason's adherence to creating and building standards, he enabled a very small team to manage the explosive growth of Tableau Software. In an environment where you have 100% growth year over year, achieving the highest levels of uptime and reliability is very difficult, and with Jason's leadership, we achieved it. A trait found in few in our industry, Jason sets the bar and example for what network documentation should look like. When it comes to network security, there is no one better in the industry. Jason has the knowledge and background to understand the "Big Picture" and knows how to secure it. Jason also understands the necessity of balancing business needs with security needs, and we have always been able to come away with solutions that allow the business to move forward. I have been honored to work with, learn from, and grow with Jason over the years. If you are considering Jason for a position, especially in network security, you should hire him. Brad Bonham
Carey Fujii
A "teammate" in every sense, Jason was instrumental in growing our network infrastructure required to support a global multi-national company. His exhaustive thoroughness in architecting solutions were always well-received as was his openness to discussing the basis of his recommendations and/or alternatives. Jason is as strong a "company builder" as I have ever worked with.
Brad Bonham
It is not often that I get to write two recommendations for the same person. I have had the privilege of working with Jason, once again, for the last 6 years. Due to Jason's adherence to creating and building standards, he enabled a very small team to manage the explosive growth of Tableau Software. In an environment where you have 100% growth year over year, achieving the highest levels of uptime and reliability is very difficult, and with Jason's leadership, we achieved it. A trait found in few in our industry, Jason sets the bar and example for what network documentation should look like. When it comes to network security, there is no one better in the industry. Jason has the knowledge and background to understand the "Big Picture" and knows how to secure it. Jason also understands the necessity of balancing business needs with security needs, and we have always been able to come away with solutions that allow the business to move forward. I have been honored to work with, learn from, and grow with Jason over the years. If you are considering Jason for a position, especially in network security, you should hire him. Brad Bonham
Carey Fujii
A "teammate" in every sense, Jason was instrumental in growing our network infrastructure required to support a global multi-national company. His exhaustive thoroughness in architecting solutions were always well-received as was his openness to discussing the basis of his recommendations and/or alternatives. Jason is as strong a "company builder" as I have ever worked with.
Brad Bonham
It is not often that I get to write two recommendations for the same person. I have had the privilege of working with Jason, once again, for the last 6 years. Due to Jason's adherence to creating and building standards, he enabled a very small team to manage the explosive growth of Tableau Software. In an environment where you have 100% growth year over year, achieving the highest levels of uptime and reliability is very difficult, and with Jason's leadership, we achieved it. A trait found in few in our industry, Jason sets the bar and example for what network documentation should look like. When it comes to network security, there is no one better in the industry. Jason has the knowledge and background to understand the "Big Picture" and knows how to secure it. Jason also understands the necessity of balancing business needs with security needs, and we have always been able to come away with solutions that allow the business to move forward. I have been honored to work with, learn from, and grow with Jason over the years. If you are considering Jason for a position, especially in network security, you should hire him. Brad Bonham
Carey Fujii
A "teammate" in every sense, Jason was instrumental in growing our network infrastructure required to support a global multi-national company. His exhaustive thoroughness in architecting solutions were always well-received as was his openness to discussing the basis of his recommendations and/or alternatives. Jason is as strong a "company builder" as I have ever worked with.
Brad Bonham
It is not often that I get to write two recommendations for the same person. I have had the privilege of working with Jason, once again, for the last 6 years. Due to Jason's adherence to creating and building standards, he enabled a very small team to manage the explosive growth of Tableau Software. In an environment where you have 100% growth year over year, achieving the highest levels of uptime and reliability is very difficult, and with Jason's leadership, we achieved it. A trait found in few in our industry, Jason sets the bar and example for what network documentation should look like. When it comes to network security, there is no one better in the industry. Jason has the knowledge and background to understand the "Big Picture" and knows how to secure it. Jason also understands the necessity of balancing business needs with security needs, and we have always been able to come away with solutions that allow the business to move forward. I have been honored to work with, learn from, and grow with Jason over the years. If you are considering Jason for a position, especially in network security, you should hire him. Brad Bonham
Carey Fujii
A "teammate" in every sense, Jason was instrumental in growing our network infrastructure required to support a global multi-national company. His exhaustive thoroughness in architecting solutions were always well-received as was his openness to discussing the basis of his recommendations and/or alternatives. Jason is as strong a "company builder" as I have ever worked with.
Credentials
-
Certified Information Systems Security Professional (CISSP)
(ISC)²Apr, 2002- Nov, 2024 -
Information Systems Security Architecture Professional (CISSP-ISSAP)
(ISC)²Mar, 2004- Nov, 2024 -
Information Systems Security Management Professional (CISSP-ISSMP)
(ISC)²Mar, 2004- Nov, 2024 -
Palo Alto Networks Certified Network Security Engineer (PCNSE)
Palo Alto NetworksMay, 2018- Nov, 2024
Experience
-
Shape Therapeutics Inc.
-
United States
-
Biotechnology Research
-
1 - 100 Employee
-
Principal Architect, Network & Security
-
Sep 2021 - Present
July 2023: Manager of the IT Infrastructure team in addition to the duties of Principal Architect, Network and Security. Sept 2021: Architecture and design of Shape Therapeutics’ network and IT cybersecurity. Initial focus was to stabilize the existing IT infrastructure and services in the main location. Once that was completed, focus shifted to the new headquarters and east coast satellite site. A new IT infrastructure (network, systems, security) was defined to meet business needs. Both sites have been deployed. Work continues to improve capabilities and further enhance information security. Accomplishments: 1. Stabilized the existing network in the original company location. Collaborated with the IT Support Manager to deploy key services such as Active Directory, DNS, and DHCP. 2. Created the overall architecture and design for the corporate network infrastructure and the security of the network, servers, clients, and other IT resources. - Physical security elements such as IP cameras and door sensors included in scope. - High availability selectively implemented to ensure overall availability meets the business’ service level objectives. - Connectivity to AWS via secure VPN tunnels. 3. Managed multiple vendors during the implementation of the the network and supporting IT infrastructure in the original corporate headquarters, the new corporate headquarters, and the east coast satellite site. (Approx. $2.5M across all sites.) 4. Executed on all the above during the middle of the Covid 19 pandemic when supply chains were shattered and product availability / lead times were very challenging. 5. Recommended, and assisted in the deployment of, the corporate endpoint security tools for clients, servers, and other IT-related resources. 6. Recommended, and currently deploying, cloud services to provide a combination of remote access VPN and always-on cloud-based firewall protection for corporate laptops. Show less
-
-
-
Salesforce
-
United States
-
Software Development
-
700 & Above Employee
-
Network Architect
-
Apr 2020 - Sep 2021
Global network architecture and design, with a focus on cybersecurity. Responsibilities and projects are now focused on the integration of the Tableau, and other acquired companies, into Salesforce. Tableau Software was acquired by Salesforce in August 2019. Tableau's IT was integrated into the Salesforce Business Technology organization in April 2020. Accomplishments: 1. Creation of standards and processes for Palo Alto Networks firewall hardening and firewall system integrity validation. 2. Architecture and engineering for a Zscaler Private Access (ZPA) and Zscaler Digital Experience (ZDX) deployment. Initial deployment is into Tableau (6,000 seats). The second phase adds Zscaler Internet Access (ZIA) and will be deployed to Salesforce globally (60,000+ seats). Show less
-
-
-
Tableau
-
United States
-
Software Development
-
700 & Above Employee
-
Network Architect
-
May 2011 - Apr 2020
Responsible for the global corporate network architecture and design. Owned the network deployment and operations for the first several years of my tenure. I joined Tableau in 2011 as the first network person in IT. Several back-to-back years of explosive growth took the company international. Additional responsibilities include; Technology selection, product selection, network security, network support, budget input, project planning & execution, documentation, mentoring of less experienced personnel, etc. Accomplishments: 1. Designed and deployed networks to match the rapid national and international corporate growth: - 2Q/2011: Approximately 250 employees, offices in Washington and California. Annual revenue of $62.4M. - 3Q2019: Salesforce acquired Tableau Software for $15.3B. - YE2019: Approximately 4500 employees, 20 offices, and 4 datacenters, globally. Annual revenue well over $1B. - 580+ network devices (including 50+ Palo Alto Network firewalls) and 31,000+ network ports. 2. Scalable global network: - Balanced, cost-effective, and secure, LAN and WAN designs resulting in a performant and highly available network. - Repeatable "cookie cutter" approach for faster deployments, simpler ongoing "care and feeding", and enabling easy reuse/redeployment of equipment. All of which directly translate to cost savings. - Network supports converged services including as IP Telephony (VoIP), IP Videoconferencing, building controls, and building security. 3. Speaker @ Tableau Conference 2016: "Data-Driven Security at Tableau". 4. Emphasis on network security - Tempered by usability and employee productivity: - Palo Alto Networks (PAN) firewalls deployed globally. - Global remote access VPN with PAN GlobalProtect including Geographic DNS (GeoDNS). 5. Strong cooperative relationship with the Information Security Team. Security is "baked-in" - not an afterthought. 6. Advisory for cloud network design and connectivity. (Amazon AWS, Microsoft Azure, etc.) Show less
-
-
-
Intellectual Ventures
-
United States
-
Venture Capital and Private Equity Principals
-
100 - 200 Employee
-
Network Architect
-
Sep 2006 - May 2011
Responsible for the network architecture, design, and up till mid-2010, day-to-day operations of the international corporate network spanning the US, Canada, Ireland, Australia, China, India, Japan, Singapore, and South Korea. I was the first hire in the Systems and Technology Group to address some pain points around network connectivity and reliability and to help IT with the company’s expansion. Intellectual Ventures was one building and ~140 people in Bellevue WA when I came on board. I led the effort to grow the network to support ~800 people around the globe. Additional responsibilities include; Technology selection, product selection, network security, Tier 4 support, budget input, project planning & execution, documentation, mentoring of less experienced personnel, etc. Accomplishments: 1. Delivering, evolving, and maintaining an international network spanning the globe and maintaining the service levels that the business demands. 2. Heavily involved (architecture, design, implementation) with building out three corporate datacenters in collocation facilities in the US and Singapore. 3. Using a range of technologies from high-speed point-to-point wireless to Metro Area Ethernet to MPLS to interconnect all the offices. 4. Maintaining network security even while growing the network globally. This includes network architecture with provisions for network segmentation, Intrusion Prevention Systems (Tipping Point), and Next Generation Firewalls (Palo Alto Networks). 5. Significant individual contributor into other areas of expertise including IT Security and Systems Architecture. 6. Designed network-based Quality of Service (QoS) to support global Cisco Voice over IP telephony and Tandberg/Cisco Videoconferencing systems. 7. Mentoring of other less-senior members of the team; This “spreads the knowledge” as well as helping the whole team perform at a higher level. Show less
-
-
-
SunGard - now part of FIS
-
United States
-
Information Technology & Services
-
700 & Above Employee
-
Director of Network Services / Senior Network Infrastructure Architect
-
May 2003 - Sep 2006
Managed the Office of Information Technology team responsible the architecture, operations, and security of the Seattle University campus wired and wireless networks, Internet and site-to-site connectivity, IP security virtual private networks (IPSEC VPNs), approximately 80 core servers (Windows, Solaris, Linux, AIX), and the application services on those servers (email, file & print, administrative computing, etc.). Direct hands-on with network and firewall deployment, IT security, and daily operations. Additional responsibilities include schedules, budgets, project plans, documentation, etc. Accomplishments: 1. Stabilization, improvement, and upgrade of key services including campus network and server infrastructure. 2. Architected and executed on the campus wide strategy for replacing obsolete network equipment and obsolete servers. Total project cost is ~$1,500,000. 3. Researched and recommended a SAN. Team implemented a 13 terabyte 3PARdata S400 / Cisco MDS 9140 Storage Area Network. 4. Multiple new buildings added to network - including one with a 700-meter 60Ghz RF wireless connection transporting Gigabit Ethernet. 5. Created the network architecture for SunGard Higher Education Managed Services’ largest site as well as creating and executing on a network architecture at another smaller site. 6. Team reduced the number of separate email systems down to one. Added the anti-SPAM and Anti-virus gateways to the email system. 7. Completed rollout of both centralized desktop update/patch management and centralized antivirus management. 8. Team deployed Cisco Clean Access (CCA) in order to require Microsoft Windows computers in the Residence Halls to be fully patched and have a current antivirus program running prior to enabling full network access. This solution “helps the users to help themselves” in bringing their machines up to date. Show less
-
-
-
Returns Online Inc.
-
Greater Seattle Area
-
Director, Network Operations.
-
Oct 2001 - Nov 2002
Managed the team responsible the operations and security of the Returns Online IT systems and networks. Scope included test & production Windows 2000 servers, the services that execute on those servers, most corporate IT projects, security, schedules, budgets, and so on. Directly owned the architecture and operational responsibility for the corporate and production networks including Internet connectivity, IPSEC VPNs, and private networks (Frame Relay). Additional responsibilities included IP address administration and creation of processes required for ongoing operations. Accomplishments: 1. Successfully managed employees in two states separated by three time zones. 2. Created the Corporate Security Policy that was adopted as a corporate ISO standard document. 3. Formalized and enhanced IT security including the definition of the network security policy and the multi-site deployment of tools such as hardware-based firewalls and logging servers to support the security policy. Show less
-
-
-
Terabeam
-
Telecommunications
-
1 - 100 Employee
-
Senior IP Network Architect.
-
Mar 2000 - Sep 2001
Creation and development of templated network designs for multi-market deployment. Included all phases of design starting with evaluating different concepts, architectural documentation, test plans, testing, and initial deployment. The development process required project management, cost/benefit modeling, technical documentation, technical presentations, vendor issue resolution, creation and execution of test plans, etc. Accomplishments: 1. Multi-point Transparent LAN Service (TLS) architecture, design, and testing. 2. System architecture & design of the Multi-Tenant Building (MTB / MTU) site requirements and customer premises equipment. 3. Created and managed the Seattle metropolitan area network (MAN) bill of materials (BOMs). Total value was in excess of $7,000,000. 4. Drove the initial technology assessment and justification for the use of Dark Fiber as a backbone transport. 5. Customer Premises Equipment cost reductions projected to save >$1,500,000 in the next year. Show less
-
-
-
Advanced Radio Telecom (ART)
-
Greater Seattle Area
-
Senior Network Architect.
-
May 1999 - Mar 2000
Creation, development, and prototype construction of fixed wireless RF-based metropolitan area network designs for deployment in multiple markets. Projects included concept, architecture, lab prototyping, and initial field deployment and testing. Skills utilized in these projects included project management, budget creation and execution, creation of Bills Of Materials, technical documentation, input into network fault and performance measurement, Tier 4 support, etc. ART was a Cisco Powered Network. Accomplishments: 1. Successfully took the overall network architecture and design from concepts on a whiteboard through a successful implementation in San Jose. 2. A team consisting of a Cisco consulting engineer and myself constructed a complete metropolitan area network (MAN) in the lab for proof-of-concept, functionality testing, stress testing, and replicating field problems. The final configuration was the template for the field deployments. Show less
-
-
-
IBM
-
United States
-
IT Services and IT Consulting
-
700 & Above Employee
-
Lead Network Architect & Engineer.
-
Aug 1990 - May 1999
Network Architect: 1/1999 – 5/1999 Member of the IBM Corporate Technology Deployment LAN Campus Group. The group’s responsibilities included setting the LAN standards for the IBM Corporation. Led and/or participated in strategic projects that resulted in architectural standards and directions for IBM corporate networks. Lead Network Architect & Engineer: 10/1993 – 12/1998 Lead architect on the team that redesigned, rebuilt, and then continually improved the network for the IBM Austin site. The team created effective IT solutions for diverse customers including chip design, systems manufacturing, software development, and technical support call centers. The team was responsible for the entire life-cycle from concept to deployment including requirements gathering, requirements negotiation, technical documentation, technical presentations, cost justifications, budgets, ordering, project management, and as maintaining a lab with a useful subset of the site network for network testing and replication of customer issues. Show less
-
-
Education
-
1985 - 1989
University of Colorado at Boulder
BS, Electrical and Computer Engineering
Community
