Experience

• 

  3dB Labs, Inc.

  • West Chester, Ohio, United States

  • Information Technology Manager

    • Jun 2021 - Present
    • West Chester, Ohio, United States

    From design and build out, to maintenance and support.

• 

  CounterFlow AI, Inc.

  • Principal Engineer

    • Jun 2018 - Aug 2020

    • Architect and provide the critical infrastructure required to boot-strap all CounterFlow efforts both commercial and open source. • Produced a “single pane of glass” monitoring and alerting system in the CouterFlow ecosystem that is currently four geographically separated spaces, each with three separate security, bring then all together using sdWAN technologies. • Provide infrastructure as code in an effort to minimize down-time and free man-hours for other efforts. • Design/implementation of a verifiable 40Gb/sec packet replay using commodity equipment. • Lead custom software-defined traffic for special purpose testing and evaluation in both state-full and stateless variations. • Architect and provide the critical infrastructure required to boot-strap all CounterFlow efforts both commercial and open source. • Produced a “single pane of glass” monitoring and alerting system in the CouterFlow ecosystem that is currently four geographically separated spaces, each with three separate security, bring then all together using sdWAN technologies. • Provide infrastructure as code in an effort to minimize down-time and free man-hours for other efforts. • Design/implementation of a verifiable 40Gb/sec packet replay using commodity equipment. • Lead custom software-defined traffic for special purpose testing and evaluation in both state-full and stateless variations. • Transformed a hardware product to an AWS deployed software product making use of CloudFormation.Collateral Duties: Security Officer - security assessment , mitigation, and monitoring. Performance Engineer - testing methodology, design, and reporting

• 

  FireEye, Inc.

  • Crozet VA

  • Sr. Linux Engineer, Research and Devolopment Network Forensic Group

    • Oct 2015 - Jun 2018
    • Crozet VA

    • Engineered the design and configuration needed to improve the PX’s write to disk capability: from 8GB/sec write to just over 13GB/sec write while still doing line-rate packet capture. Final tuning results were 19.3GB/sec write capability. • Produced key parts of the CLI for the PX and IA product platforms; providing integration with other platforms in the FireEye product line. • Introduced new capabilities making the software aware of a multitude of varying hardware to which it was deployed. • Instrumental in the design, configuration, and build-out of new global R&D network using SDN switching, and leveraging sdWAN implementations allowing for seamless distributed integration. • Deployed and maintained a 2.3PB CEPH cluster for all R&d workspaces, thus increasing capabilities while decreasing time to deploy. • Provided a visualized system to generate, on the scale, real-world network architectures, and the accompanying traffic, this leads to an increased testing posture of products, leading the discovering multi-vendor hardware and software bugs. Produced a “zero-touch” deployment architecture for Debian, RedHat, and CentOS. Provided custom software need for the migration of a proprietary DHCP/DNS system to a new CI/CD R&D infrastructure.Collateral Duties: Security risk assessment Officer - security assessment and mitigation for the PX and IA platforms. Performance assessment Scientist - testing tools, metric provided, with explanation of "where do we go next"

• 

  CACI International Inc

  • Arlington VA

  • Sr. Principal Engineer / Architect

    • Sep 2008 - Sep 2015
    • Arlington VA

    • Architected a solution for over 150 remote offices moving connectivity from Leased Line to SD-WAN. This provided a 10x bandwidth increase with multi-provider failover capability resulting in a $12 million dollar a quarter cost savings. • Daily responsibilities include, but not limited to, all aspects of planning, design, architecture, deployment, maintenance, monitoring, automation, standardization, and troubleshooting of the transient network, data centers, and branch offices. • Additional activities include the production of an alternative solution for connectivity to the transient network using Cisco DMVPN migrated from MPLS. Results included long overdue redundancy as well as a ten times increase in available bandwidth. • Built automation for monitoring, alerting, and logging using custom scripting reducing the time to resolution and providing a look-ahead capability. • Implemented automation standardizations platform to provide uniformity to operation configuration as well as set the standards for these configurations by providing the templates for implementation. • Mentored all levels of network engineers by helping to provide a secure environment that enabled engineers to grow and learn.

• 

  nPulse Technologies, Inc

  • Crozet VA

  • Principal Engineer

    • Jun 2007 - Sep 2008
    • Crozet VA

    • Lead all aspects of engineering, hardware design, software design, research and development, quality assurance, product creation, maintenance, customer support, professional services, and internal infrastructure. • Focused on high-speed computing in relation to networking, including high-speed disk capture, high-speed packet capture, and analysis. • Designed and built three product lines supported on a custom rolled OS designed by me. • Product lines included deep packet inspection, network flow statistic sensors and collectors, and network recording with playback. • All products have a minimum requirement of zero packet loss at the line rate. Rates range from multi-gigabit ethernet to 10Gb with multiple interfaces.

• 

  August Schell

  • Rockville MD

  • Senior Network and Security Engineer

    • Nov 2006 - Jun 2007
    • Rockville MD

    • Architected, certified, and implement the global load-balancing implementation currently used at DISA for PKI/PKE (CAC Card) in both SIPR and NIPR net. • Chartered to provide kernel-level performance tuning in support of the U.S. Department of Defense PKI/PKE infrastructure. • Certification included working directly with DISA and JITIC personnel.

• 

  Endace

  • Reston Va

  • Network Security Engineer

    • Dec 2004 - May 2006
    • Reston Va

    • Redefined Endace’s business model from a test and measures component sales, to a cybersecurity solution with 2 award-winning ultra-high-performance IDS/IPS platforms. • Designed and implemented a high-speed security platform for networking needs, ranging from Gig copper up to and including OC-192 with no packet loss while writing data to disk. • Research on the latest kernel capabilities of CPU by the manufacturer to evaluate branch prediction accuracy, translation look-aside buffer efficiency, virtual and shared memory efficiency, SMP affinity, spin/sleep locks, NUMA vs. UMA, and overall cache efficiency to determine the best system configuration by CPU architecture. • Built the award-winning general availability (GA) product known as Ninjabox.

• 

  Navisite Inc.

  • Vienna VA

  • Sr. Network Security Engineer

    • May 2004 - Dec 2004
    • Vienna VA

    • Architected and designed their global service provider backbone. • Lead Navisite security and process automation, to include re-design, design, implementation, and maintenance. • Developed Navisite IDS product form sensors to the monitoring infrastructure. • Produced an automated firewall configuration program reducing customer deployments from 45 minutes to 10 minutes per customer. • Reconfigured and upgraded all firewalls to provide detailed reporting of traffic and anomalies. • Implemented customer networks to provide RFC compliance at the IP level eliminating erroneous flags from getting through the network.

• 

  America Online

  • Reston VA

  • Network Security Engineer

    • 2002 - 2004
    • Reston VA

    • Developed the first 10Gb IDS/IPS in the world. • Responsible for all aspects of AOL production security to include Time Warner assets as well as Netscape, Road Runner, and Compuserve to include design, implementation, maintenance, automation, and support. • Accountable for setting up the entire security offering for AOL managed customer business unit, this includes levels of service, SLA, information on portals and best practices. • Provided guidance to other engineers for the design and implementation of network security, this includes VPN configurations, firewall policy design, routing, IDS configuration, HA design, VIP configuration, and other complex solutions. Responsible for helping to provide automated tools to aid in the management and maintenance of the AOL production security infrastructure.

• 

  Conxion

  • Herndon VA

  • Sr. Network Security Project Lead

    • 2001 - 2002
    • Herndon VA

    Responsible for all aspects of customer and corporate network security including design,implementation, maintenance, and support in a fully redundant, global (Santa Clara, Chicago, Herndon, London, Hong Kong) environment. Performed scheduled and unscheduled security audits on customer and corporate networks/systems. Used IDS (GNU and commercial) as an early warning system for network reconnaissance. Implemented IDS with database integration for long-term tracking of stealth and paranoid network attack/reconnaissance. Provided secure remote access and authentication for server management. Guided network engineers in designing secure, flexible, and optimized fully redundant backbone and customer networks. Implementedcomplex meshed VPNs, allowing seamless global integration of content and services for corporate and customer networks. Reviewed, tested, documented, implemented, and supported new technologies in networking, security, and operating systems. Developed and implemented a secure, fully redundant solution for remote server management for the corporate infrastructure. Guided internal departments in secure network integration. Performed forensic investigations for both customer and corporate servers. Provided guidance and direction to network engineers regarding corporate implementation of VoIP. Implemented security changes to UNIX/Linux OS baselines. Provided a means of 24x7 monitoring of all VPNs in the global network environment.

• 

  UUNET

  • McLean VA

  • Network Security Engineer

    • 1999 - 2001
    • McLean VA

    Performed penetration testing for clients using conventional (ISS) and non-conventional (GNU/GPL) tools, including tradecraft, social engineering, and war dialing. Performed physical security analysis through dumpster diving, social engineering, gaining access to unauthorized spaces, and collecting data from these spaces. Generated detailed client reports detailing mail, web, file server, firewall, router, logging, clear text remote control, and network design security exposures. Implemented, automated, and helped support IDS systems such as SNORT providing clients with near real-time malicious activity information and detailed logging. Tailored IDS systems to client networks to provide the highest level of detection with the least amount of false positives. Reviewed, recommended, and helped implement corporate security policy and network topology for clients. Analyzed firewall rule bases and router ACLs to provide up-to-date, layered security for client networks in addition to configuring and armoring servers. Educated clients on good security practices, risk vs. operational risk, layered security, armoring operating systems, and attacksignatures. Provided detailed reporting and documentation on all tasks performed.

• 

  CACI

  • Arlington VA

  • Network Security Engineer

    • 1997 - 1999
    • Arlington VA

    Assisted Network Security group in all aspects of the corporate communications backbone including design, planning, maintenance, and repair. Managed the administration of LAN/WAN and related equipment, including firewalls, routers, bridges, dial-up and dedicated lines (T1s and Frame Relay), hubs, switches, servers, and workstations. Supported, monitored, and coordinated all internal Internet-related activities including DNS, HTTP, and Sendmail. Assisted internal and remote administrators in the management and evaluation of corporate applications and audits of orporate-wide computer network security including the corporate website and all servers operating outside the corporate firewall. Provided consultation to remote CACI offices on connectivity issues and network optimization.

• 

  US Navy

  • Andrews AFB

  • Electronic Engineer / Microwave / Calibration

    • Jan 1991 - Jul 1998
    • Andrews AFB

    Electronics engineer responsible specializing in Weapons Control, Doppler radar, and advance counter electronic warfare. Collateral duties also consisted of Security Officer: Maintained the Automated Information System Local Area Network, platforms included UNIX, Windows 3.x, NT,and Groupwise run on a segmented network of fiber optic, coaxial, and twisted pair cabling. Provided updates and recommendations as required. Wrote and installed batch files to collect systems information from these platforms. Maintained a systems integration management database, instrumental in the planning and programming of network operations. Conducted network management and troubleshooting.