Security Engineer
Resume:
Raymond Yagami
Email: abpo7l@r.postjobfree.com
Address: ***** ******* ***
City: Torrance
State: CA
Zip: 90503
Country: USA
Phone: 310-***-****
Skill Level: Experienced
Salary Range: $100,000
Willing to Relocate
Primary Skills/Experience:
See Resume
Educational Background:
See Resume
Job History / Details:
Resume of Raymond Y. Yagami
Stateside phone 310-***-****
19603 Redbeam Ave
Torrance, CA 90503
abpo7l@r.postjobfree.com
email is preferred contact method
Degree/Certifications:MSEE, CISSP, CISA, CCNP, Security+, CCNA -Security, Sniffer Certified Professional, Registered Electrical Engineer State of California
Secret Clearance - Active
Experience Summary:
Extensive experience in network security systems, architecture and design including analysis, design and setup and maintenance of LAN, WAN and security systems. Hands-on experience with routers, firewalls, switches, load levelers, and content distribution equipment and security software including malware detection, intrusion detection and prevention. Experience with Cisco, Microsoft, Sun Microsystems and HP servers and equipment.
IT security experience including defining and writing company security policies and designing, setting up and testing of security systems. Expert understanding of major protocols (TCP/IP, RIP, EIGRP, OSPF, BGP, etc). Setup and maintained network infrastructure at multiple sites, including intersite and remote access VPNs. Setup and maintained NT Web servers with Web Master experience at Creative Computers for 400 sales and tech support personnel. Led Exchange client rollout at major studio with 4300 desktops. Also extensive aerospace design engineering and management experience.
Experience teaching a wide variety of computer, networking and security courses for the University of Maryland Asian Division.
Systems/Management/Design Experience:
Several years of successful aerospace engineering including system management and development of large and complex electro-optical surveillance systems. Also experience in designing networks, including security provisions.
Job History:
May 2011 to Present
ITT Exelis
Senior Network Administrator
Worked at Camp Stone Forward Operating Base (FOB) in Afghanistan and at Bagram Air Force base on three independent networks, including high security and classified military networks in conformance with military STIGs (Security Technical Implementation Guides) per DIACAP (Defense Information Assurance Certification and Accreditation Process). The Bagram networks consisted of up to 500 devices on each network; mostly distribution and access switches. Work included monitoring, maintenance, configuration and troubleshooting of switches, routers and firewalls. Security configurations span all 7 OSI levels and include layer 2 and layer 3 Access Control Lists (ACLs) for routers and switches and stateful and application firewalls. Security configurations include secure tunnels, VPNs and secure voice (VoSIP) communications. Secrecy provisions prevent providing specific work details.
Specific job functions include:
Access Control - Maintenance of ACLs at level 2 (MAC security) and level 3 ACLs
Application Security Maintenance and upkeep of network system availability
Information Security and Risk Management maintenance of risk mitigation systems.
Operations Security maintenance and upkeep of security controls
Telecommunications and Network Security - maintenance of secure VPN systems.
Developed my own JAVA network monitoring tools to supplement the Spectrum network monitoring tool
Maintained network documentation including IP and MAC address lists of all network devices, configured and installed network devices
Performed configuration backups of all network switches.
Supervisor: Terry Bryant, East Afghanistan Area Manager
Contact: abpo7l@r.postjobfree.com
Corporate info:
655 Space Center Drive
Colorado Springs, CO 80915
Telephone: 719-***-****
Fax: 866-***-****
Jan 2004 to Jan 2011
University of Maryland Asia Division,
Instructor
University of Maryland provides university level courses for Defense Department personnel on overseas military bases. I taught at Air Force, Navy, Marine and Army bases on Okinawa, Japan, as well as online classes.
I taught a wide variety of IT networking, security and computer related courses including,
1. CMIT 265 Network Essentials
2. CMIT 320 Network Security (Security+ certification)
3. CMIT 350 Interconnecting Cisco Devices (CCNA certification)
4. CMIT 450 Designing Cisco Networks (CCDA certification)
5. CMIT 499E Building Scalable Cisco Networks
6. CMIT 499F Building Cisco Switched Networks (CCNP certification)
7. IFSM 310 Software and Hardware Concepts
8. IFSM 430 Information Systems and Security
9. IFSM 450 Telecommunication Systems in Management
10. CMIS 370 Data Communications
11. CMIS 435 Computer Networking
Also, I worked as a Network Administrator in the University IT department in the University Okinawa office and setup a Cisco VoIP system in the Okinawa office using Call Manager Express.
Specific security duties included:
Access Control - Instruction in design of ACLs at level 2 (MAC security), level 3 (ACLs) and application level
Application Security Instruction in design of network system availability
Business Continuity and Disaster Recovery Planning Instruction in design of redundant hardware and software for enhanced availability
Cryptography Instruction in design maintenance of IPSec and PKI systems
Information Security and Risk Management Instruction in security risks to systems, implement and maintenance methods of mitigation systems.
Legal, Regulations, Compliance and Investigations Instruction in legal regulations and design and implementation of mitigation techniques.
Operations Security Instruction in design of security controls
Physical (Environmental) Security - Instruction in design of physical security systems
Security Architecture and Design Instruction in design of security systems to mitigate security risks, implementation, test and maintenance of security systems.
Telecommunications and Network Security - Instruction in design of secure VPN systems.
Supervisor: Dr. Douglas Franklin, Interim Deputy Director, Asian Division
Contact: abpo7l@r.postjobfree.com
University info:
University of Maryland University College Asia
Unit 5060, Box 100
APO AP 96328-0100
Phone: 011-81-42-552-2511, ext. 5-3680
Jan 2002 to Sept 2003
Linkpoint International, Moorpark CA (Now First Data Global Gateway Terminal, part of First Data Corp)
Network and Security Administrator
Linkpoint International provides financial services for Internet merchants, including authentication of customer credit card information, providing transaction reports, performing fraud detection, and merchant funds transfers. The company security requirements must comply with numerous Government financial security and privacy legislation as well as commercial security requirements imposed by the credit card industry (PCI-DSS).
Production web sites were located in Burbank, CA, New Jersey and Austin, TX. The corporate site was located in Moorpark, CA. Burbank and Austin were the principal web sites and served as active/backup hot sites for each other. All key elements were dual redundant. Security was a major concern for all sites. Specific activities included:
Wrote the Linkpoint company Security Policy document (based on ISO27000 Toolkit)
Designed and built high availability and the secure networks for Moorpark and Burbank site
Configured network security including perimeter routers, Firewalls and switches, VPN appliances
Installed and configured PIX firewalls, Cisco routers, Catalyst switches, VPN concentrators and appliances, BigIP load balancers, BigIP 3DNS servers. Routing protocol used was EIGRP.
Conducted Interface engineering with Qwest co-location facility engineering personnel
Reconfigured IP addressing architecture due to change in ISPs at Moorpark
Setup and maintained intersite and remote access VPNs.
Specific security duties included:
Access Control - Design, implementation and maintenance of ACLs at level 2 (MAC security) and level 3 ACLs
Application Security Design, implementation and maintenance of network system availability
Business Continuity and Disaster Recovery Planning design of redundant hardware and software for enhanced availability
Cryptography design and implementation and maintenance of IPSec and PKI systems
Information Security and Risk Management Identified risks to systems, implement and maintenance of mitigation systems.
Legal, Regulations, Compliance and Investigations Review of legal regulations and design and implementation of mitigation techniques.
Operations Security design, maintenance and upkeep of security controls
Security Architecture and Design architecture design and design of security systems to mitigate security risks, implementation, test and maintenance of security systems.
Telecommunications and Network Security - design, implementation and maintenance of secure VPN systems.
Supervisor: Ken Garcia, IT Manager (no longer working for Linkpoint)
Contact: abpo7l@r.postjobfree.com (last known contact information)
Corporate info:
First Data Global Gateway
6101 Condor Drive
Moorpark, CA 93021
Phone: 888-***-****
April 2000 to Aug 2001
Acclaim Technology, Irvine, CA
Consulting Engineer
Acclaim Technology is a system integration and professional services company. I did Systems/Network design including network security for LAN/WAN systems. The components included routers, switches, firewalls, load levelers, content distribution as well as wireless hardware. Examples of work included:
Design of facility upgrade for an ISP including extensive use of reliability redundancy and security (parallel Cisco 7206 perimeter security routers, PIX 525 firewalls, CSS 11152 content distribution switches, Catalyst 6509 backbone switches and AS5800 access servers and 2621 distribution routers and Catalyst 2948G switches).
Design of secure wireless Internet system for Shopping Mall
Sales technical support for numerous products, primarily Cisco hardware.
Specific security duties included:
Access Control - Design of ACLs at level 2 (MAC security) and level 3 ACLs
Application Security Design for network system availability
Business Continuity and Disaster Recovery Planning design of redundant hardware and software for enhanced availability
Cryptography design of IPSec and PKI systems
Information Security and Risk Management Identified risks to systems and design of mitigation systems.
Legal, Regulations, Compliance and Investigations Review of legal regulations and design of mitigation techniques.
Operations Security design of security controls
Security Architecture and Design architecture and design of security systems to mitigate security risks
Telecommunications and Network Security - design of secure VPN systems.
Supervisor: Edward Mikhael, Site Manager (no longer working for Acclaim)
Contact: 949-***-**** (last known contact numbers)
Corporate info:
Acclaim Technology 55 S Market StSan Jose, CA 95113Phone: 888-***-****
Sept 1999 to April 2000
OnLine Connecting Point, Irvine, CA
Advanced Systems Engineer
OnLine Connecting Point is a systems integration and professional services company. I performed network analyses, designed, installed and serviced LAN/WAN systems, particularly Cisco equipment including routers, firewalls, load levelers and switches. Network security was a major concern for all systems. Example work assignments included:
Network support for Shopping.com. Cisco hardware included parallel 7200 routers (with BGP) multihomed to 2 ISPs for redundancy as well as redundant Checkpoint firewalls, Cisco load balancers, switches and multiple servers.
Network and security design and support for several other mid sized client networks.
Specific security duties included:
Access Control - Maintenance of ACLs at level 2 (MAC security) and level 3 ACLs
Application Security Maintenance and upkeep of network system availability
Business Continuity and Disaster Recovery Planning design of redundant hardware and software for enhanced availability
Cryptography maintenance of IPSec and PKI systems
Information Security and Risk Management maintenance of mitigation systems.
Security Architecture and Design test and maintenance of security systems.
Telecommunications and Network Security - maintenance of secure VPN systems.
Supervisor believed retired: Information unavailable
Corporate info:
OnLine Connecting Point
8 Autry
Irvine, CA 92618
Phone: 949-***-****
Nov 1997 to Sept 1999
Creative Computers, Torrance, CA
Network Engineer
Creative Computers is the parent of PC Mall and MAC Mall and UBID. I performed network technical support for the sales and technical staff on a wide range of network and PC components and systems including routers, switches, firewalls, servers, hubs, and other associated components. Specific work included:
Setup and maintainance of an internal intranet NT Web Server (IIS) to provide the technical and sales support staff with product information.
Design of numerous network proposals for support sales staff including designs of ISP provider networks, wireless networks and other network and security equipment.
Specific security duties included:
Access Control - Maintenance of ACLs at level 2 (MAC security) and level 3 ACLs
Application Security Maintenance and upkeep of network system availability
Business Continuity and Disaster Recovery Planning design of redundant hardware and software for enhanced availability
Cryptography design and implementation and maintenance of IPSec and PKI systems
Information Security and Risk Management Identified risks to systems and design of mitigation systems.
Operations Security design of security controls
Security Architecture and Design design of security systems to mitigate security risks
Telecommunications and Network Security - design of secure VPN systems.
Supervisor no longer with company: Information unavailable
Corporate info: Creative Computers, PC Mall, Inc
1505 Wilshire Boulevard
Santa Monica, CA90403-5505
Website: www.pcmall.com
Phone: 310-***-****
Aug 1996 to Sept 1997
Nadek Computer Systems, Irvine, CA (sold to SAIC in San Diego in 1999)
Network Engineer
I provided network support to a wide range of customers for desktops and servers.
Lead engineer for a large desktop rollout of Microsoft Exchange at a Universal Studios in Hollywood with 4300 desktops.
Network support for numerous small to medium sized client networks
Specific security duties included:
Access Control - Maintenance of ACLs at level 2 (MAC security) and level 3 ACLs
Application Security Maintenance and upkeep of network system availability
Business Continuity and Disaster Recovery Planning design of redundant hardware and software for enhanced availability
Cryptography maintenance of IPSec and PKI systems
Information Security and Risk Management maintenance of mitigation systems.
Operations Security maintenance and upkeep of security controls
Security Architecture and Design maintenance of security systems.
Telecommunications and Network Security - maintenance of secure VPN systems.
Supervisor no longer with company: Information unavailable
Corporate info:
SAIC, Inc,1710 SAIC DriveMcLean, VA 22102703-***-****
June 1995 to Aug 1996
Lanrex Computer Co. Anaheim, CA
Network System Engineer
Installed and maintained computer networks. Setup a Win NT Web Server (IIS) including Microsoft SQL server and a DNS server.
Specific security duties included:
Access Control - Maintenance of ACLs at level 2 (MAC security) and level 3 ACLs
Application Security Maintenance and upkeep of network system availability
Business Continuity and Disaster Recovery Planning design of redundant hardware and software for enhanced availability
Cryptography maintenance of IPSec and PKI systems
Information Security and Risk Management maintenance of mitigation systems.
Operations Security maintenance and upkeep of security controls
Security Architecture and Design maintenance of security systems.
Telecommunications and Network Security - maintenance of secure VPN systems.
Company info: Unable to find current info. Company moved or is no longer in business
Aug 1983 to Mar 1995
TRW, Redondo Beach, CA (acquired by Northrop Grumman in 2002)
Chief Payload Engineer, Senior Scientist
Technical monitoring and development of classified Electro-Optical Surveillance Space Sensors. Work involved hands-on technical development as well as management of several classified programs. Secrecy provisions prevent providing work details.
Supervisor retired: Information unavailable
Corporate info: TRW now a part of Northrop GrummanAerospace SystemsOne Space ParkRedondo Beach, CA 90278
Education:
USC, Los Angeles, CA MSEE Electronics and Servomechanisms
UCLA, Los Angeles, CA BSEE Electonics
Certifications:
Current Certifications
CISSP 4093GG
CISA 1298623
Security+ COMP001020252912
CCNA 407749207017GQZG
CCNA Security 407749207017GQAG
CCNP 406644172450FLVH
CCDA 39656418294FRUK
Sun Certified Network Administrator for Solaris 8
Cisco Certified Network Professional Security Specialist
Cisco Certified Network Professional Voice Access Specialist
Sniffer Certified Professional
Electrical Engineer, CA #E6209
Previous Certifications (Not Current)
Cisco Certified Internetwork Expert (CCIE #4830, 1999 2006)
Certified Information Systems Security Professional (CISSP #2657, 2001 - 2004)
MCSE+I (Microsoft Certified System Engineer + Internet, 1996 - 2005)
Other Training:
STIG Training STIG-IATP-2BFD00001
DoD DIACAP Training DIAC-IATP-2BF300003
Retina RTNA-IATP-2BF400003
Wireless Awareness WIRE-IATP-2BFB00002
Army G3 Computer Security Training G3CS-IATP-2B8000080
Verisign VPN Training
Cisco Wireless Systems
Cisco AVVID Systems
SANS security training
Teaching Experience:
Taught a variety of classes in data communications, networking and computers for University of Maryland Asia Division. Taught four courses on Cisco equipment and networking for members of the InetForum (previously Network Professional Association). These were 3 to 4 day classes covering both theory and practical hands-on exercises. Also taught some UCLA engineering extension classes.
Contact this candidate