Founder & CEO – Cyber, Cloud & OT Security Consulting AdvisorClients' Projects: MorganFranklin Consulting | Grant Thornton | Sephora | New York University Medical Center | Externetworks | Princeton ITSSubject matter expert (SME) for Cyber, Cloud & OT Security architecture, design and deployment. Performing advisory role helping organizations to build secure, scalable, and robust public cloud environments. Background includes advisory, overseeing and performing technical reviews and providing strategic guidance for designing and deploying technologies across varying cloud service provider platforms. Team builder and effective communicator leading cloud and datacenter security designs, automation plans for IaC, and configuration standards for operationalization methodologies and technical support. Served as a Product Owner and lead architect for cloud & network security services. Leading a team of certified network security engineers. • Azure cloud services' designing, deployment, and configuration automation using Terraform• Cloud native and non-native security technologies deployment designing and integration • Azure Sentinel & Defender, Arc for OT security, Log Analytics Workspace, Monitor • AWS Audit Manager, Security Hub, Config, CloudWatch, CloudTrail, CloudGuard and Macie • Cribl for observability data collection and analysis before sending to a destination platform • Tenable for vulnerabilities assessment and threat mitigation• AWS cloud services’ deployment/design & configuration using Terraform and Ansible• Palo Alto virtual firewalls and other security technologies deployment in AWS Cloud• Palo Alto hardware firewalls and security technologies deployment designs & integration• Palo Alto Prisma Cloud and CrowdStrike (CNAPP, CSPM & CWPP) deployment designing & integration• Palo Alto Prisma Access and GlobalProtect for remote user access solution

iNET SYSTEMS INC. is pleased to start as a consulting advisor for MorganFranklin Consulting providing Cyber, Cloud, and OT Security solutions. Deployment designing of Azure Sentinel & Defender, Tenable, and Cribl for log collection and data analysis for vulnerabilities and threat mitigation.

Providing network security services - designing and deployment of Palo Alto security technologies in AWS cloud and data centers. Designing and deployment of SD WAN technologies, routing and switching and ACI planning for Palo Alto firewalls' integration.

SYNCHRONY FINANCIAL BANK (Formerly GENERAL ELECTRIC)Product owner and lead architect of Network Security Services. Manage a team of 6 engineers for firewalls’ deployment strategic plans and designs. Migrated from Cisco firewalls to fewer Palo Alto firewalls revitalizing network security. Developed technical strategy to deploy multi-million-dollar firewalls in the datacenter and cloud. Started with GE as a consultant in 2011 and transitioned to permanent employee in 2012.• Redesign and enhance network security using Palo Alto firewalls• Design and deploy PA-Series firewalls with cyber security suites• Design and deploy PA-VM firewalls in AWS virtual private clouds• Streamline and restructure NAT, Security and WildFire policies • Mentor support engineers on new technologies • Plan, design, and deploy Cisco security technologies• Design Cisco ISE, ACS and CSM deployment solutions• Revitalize firewall configuration standards and data flows• Manage projects and plan work for JIRA Agile sprints • Enhance processes to save operating cost

Designed IT Architecture & Engineering standards and approved pre-deployment technology testing plans. Evaluated and selected Cisco technologies and completed cost analysis and lab testing. Introduced new technologies and lab tested production use cases. • Developed standards for IPSec VPN technology for B2B links• Designed and deployed networks for regional and branch offices • Evaluated pre-deployment configurations and designs • Designed and configured BIG-IP F5s for deployment • Developed network configuration standards• Designed post-merger datacenters’ consolidation plans

Designed e-Government IT Architecture & Standards for deployment of government datacenter. Developed security policies for e-Government application data flows. Managed IT resources ensuring on-time deliverables.• Managed the program and network budget• Ensured network standards & policies enforcement on entities• Reviewed, refined and approved vendor contracts • Designed and deployed government MPLS network • Created end-to-end application flow security policies • Designed datacenters and perimeter security• Developed network security configuration standards• Completed CISCO ASA 5500s, IPS deployment designs• Completed CISCO NAC and ACS deployment designs• Established security monitoring & response center

Conducted comprehensive IT due diligence for network integration for the merger of JPMorgan Chase & Co. and Bank One Corporation. Performed feasibility analysis of network remediation plans. Influenced operational procedures for network infrastructure support. Developed strategic network designs and completed post-merger consolidation and decommission of duplicate technologies and datacenters. Presented network design decisions and the rationale to senior leadership in multiple lines of business.• Ensured project deliverables within budget and met due dates for complete client satisfaction• Mentored and trained operations teams for day-to-day network support• Planned, designed, deployed and accomplished the following network projects: o Dynamic failover between e-Commerce datacenters o Datacenter redundancy for high availability o ACLs for secure Inbound INTERNET traffic o ACLs to protect network from DoS attacks o DMZs for Business Partners’ VPN connectivity o DMZs for www.chase.com webhosting servers o DMZs for Proxy servers o GLB solution for web services o SSL Offload for https connection o Standardized NAT policies for Internet facing DMZs o Lab tested MPLS network o Route exchange policies for ISPs and client/vendors o BGP peering between the bank and ISPs o Network IP address scheme for pre/post mergers o WAN, LAN and Wireless Access Points o Policies to ensure device’s access security o TACACS and RADIUS for controlled access o DMZs for secure e-Mail servers o DMZs for business partners FTP connectivity o Remote User Access VPN DMZs o IPSec VPNs for branches and partners o Standardized e-Commerce routing policies

Professional Achievements: Technologies – CISCO Catalyst 6500 series L2/L3 switches, CISCO Catalyst switches (3500, 3700, 4500 series), CISCO Routers (7306s, 3700), PIX 525, VPN Concentrator 3000 series. BIG-IP F5s.• Deployed 5 pairs of BIP-IP F5s • Configured L2 Port Channel to F5s• Deployed 30 web services on F5s for load balancing• BGP, EIGRP and Multicast configuration • IBM/HP Blade server L2 configuration• PIX firewalls configuration for rules and NATs• Provided 4th Level support for global enterprise• Prepared drawings and documentation