Sr. Network Consultant

To align with governmental regulations and adhere to best practices recommended by Gartner's Zero Trust Network Segmentation, HHR's data center was segmented to enhance security and mitigate risks.

Zero Trust principles emphasize that no user or system, whether inside or outside the network, should be automatically trusted.

By segmenting the data center, HHR limited access to critical applications and prevented lateral movement of potential threats across the network.

This approach reduced the attack surface, isolated sensitive systems, and ensured stricter access controls, reinforcing the overall security posture of the organization.

HLD network segmentation

Implemented Nutanix Flow FW segmentation (IT)

Implemented Intune FW segmentation (OT)

Both IT and OT environments were secured by implementing network macro/micro-segmentation.

Used Fortigate, Aruba Pensando, Intune, Nutanix Flow Security.

PowerShell scripting was used for VM tagging; Postman was used for configuring policies on Pensando; Terraform for Nutanix Flow.

Resulted in secure datacenter network communication which lowered the possibility of cyber-attack events.

Developed and implemented network architecture and guidelines for the company's network infrastructure.

Conducted extensive research to expand and refine the definition of network services, incorporating new trends and technologies.

Collaborated closely with cloud and domain architects to enhance the overall architecture.

Acted as a central knowledge hub, providing guidance and support on network technologies to architect colleagues.

Authored a solution architect document detailing the implementation of SD-WAN technology to interconnect data centers and office locations.

Successfully delivered a detailed and robust network architecture and guidelines document adopted company-wide.

Produced a high-quality solution architect document that effectively outlined the SD-WAN interconnection strategy, resulting in a seamless integration of data centers and office locations.

Used Cisco DC R&S, SDWAN, ACI, TOGAF 9.2, Zero Trust, micro-segmentation.

Financial impact: Reduced MPLS bandwidth usage (lower OPEX), improved SaaS performance due to local internet lines (higher client satisfaction), and well-defined network service architecture.

Coordinated network migration implementation among Cisco Advanced Services and Accenture.

Created detailed micro designs for different system migrations within the data center to ensure consistency across network zones.

Oversaw implementation process, monitored progress, troubleshooted issues, and provided regular updates to stakeholders.

Provided network consultancy services as SME for Allianz Technology clients and business units.

Implemented migration projects from FabricPath into ACI and solved issues on external connections (BGP/OSPF).

Provided migration plan for Citrix SDX load balancers and assisted management in migration decisions.

Migrated OOB network from Cisco 2901 to Perle terminal servers, redesigning for high redundancy and better security.

Worked with ISP on implementing changes.

Resulted in better application experience and higher user satisfaction rate.

Used Cisco DC R&S, Citrix load balancers, IPv6, Python, ACI, micro-segmentation.

Python scripts were used to gather inventory from network devices.

Financial impact: ACI enabled micro-segmentation of business unit applications, providing higher security and faster time to market; automation tools reduced change lifecycle time.

Designed and implemented LAN and Wi-Fi networks for remote offices across Europe and APAC for ABN AMRO Clearing Bank.

Worked with ISPs to implement changes.

Delivered secure mobility for guest users and reliable data communication for end users.

Simplified network landscape.

Used Cisco Unified CM, VRFs, MPLS, OSPF, WLC 5508, WLC 3504, AP SSO HA.

Financial impact: Easier management and secure network enabled higher business continuity and agile application deployment.

Designed and implemented secure network solutions for industrial control systems (ICS) at upstream gas locations of NAM (Nederlandse Aardolie Maatschappij).

Supported incident response activities and coordinated centrally with IT and IRM stakeholders.

Managed and maintained secure ICS in operational facilities, ensuring compliance with Shell DEP and ISA99.

Delivered solutions to meet cyber risk management activities and reported status to global leadership teams.

Contributed to strategic direction and communicated expectations regionally.

Collected technical solutions from regional stakeholders and communicated to the central team.

Provided technical leadership and consulting for improvement and remediation projects.

Designed, developed, and deployed resilient ICS architectures and configurations during innovation and capital projects.

Interfaced with operations when planned activities impacted site operations.

Integrated system security requirements into procurement specifications and contracts.

Performed real-time network and traffic auditing using monitoring and event logging tools.

Ensured system availability and integrity while delivering project documentation.

Integrated new ICS subsystems (Yokogawa, Schneider Electric, Honeywell, Siemens) into existing infrastructure without interruption.

No security incidents recorded during the period.

Used PCAD portal, WhatsUp Gold, Infoblox IPAM, WSUS, ePO, Symantec, Cisco, Fortigate, FortiAnalyzer, FortiManager, Check Point, KiWi.

Designed and implemented the layer 2 backbone network for the Coentunnel and Westrandweg highway to support traffic management systems.

Translated HLD into LLD and implemented the new infrastructure.

Coordinated with system custodians to gather requirements and decommissioned the old ring.

Delivered a redundant, low-latency network that met all functional requirements.

Used Cisco L2 switching, AutoCAD, Visio, WhatsUp Gold, fiber optic batching design, Wireshark, Cisco Catalyst IE300, Cisco 3750, C50 encoder.

Tested and implemented AVAYA unified communication network across multiple remote ING Bank locations.

Configured servers and gateways, performed FAT and SAT to ensure correct functionality and business requirements.

Staged systems and delivered to the maintenance department after testing.

Added new telephony functionalities to allow more collaboration among workers and increased system capacity.

Used AVAYA Aura Communication Manager 6.1, AVAYA Aura Session Manager, AVAYA Aura System Manager, G series media gateways.