Arnold J.

• Over 10 years of experience in network administration and security. • Languages: English, French, Spanish, Mandarin. • Master’s Degree in Electronics and Communication Engineering. • Advanced diploma in cybersecurity from Polytechnic Montreal. • Cisco CCNA Routing and Switching certified. • CompTIA Security+ certified. • CompTIA CySA+ certified. • CompTIA CSAP certified. • (ISC)2 Certified in Cybersecurity. • CEH (Certified Ethical Hacker) in progress. • AWS Cloud Practitioner in progress. • Fortinet NSE 1,2,3,4,5,7 certified. • Expertise in various security tools (IPS, Firewalls, IDS, SIEM, SOAR, EDR, Antivirus, Antimalware …) • Ability to work in a fast-paced environment and under pressure. • Experience handling multiple tasks and maintaining comprehensive documentation. • Excellent customer relations and communication skills. • Self-motivated, self-starter, innovative and creative. • Strong team player with the ability to work independently with little or no supervision. • Flexible and available to work shifts and hours. TECHNICAL SKILLS ------------------------- Expert level in Fortinet products: Fortigate, Fortianalyzer, Fortimanager, Fortiswitch, FortiAP, FortiAuthenticator, Forticlient. ▪ IDS, IPS. ▪ Suricata, Security Onion, Snort, Bro, Kibana. ▪ SIEM/FIM, UTM. ▪ Vulnerability scanning (OpenVas, Nessus). ▪ Port Scan with Nmap. ▪ OS Hardening. ▪ Security industry standard (NIST, COBIT, CIS, OWASP, MITRE ATT&CK). ▪ NAC, Mobile device management (MDM). ▪ Wireshark and SolarWinds. ▪ Microsoft Active Directory. ▪ DHCP and DNS. ▪ Routing and switching. ▪ Incident Management. ▪ Cyber investigation using tools like XL-parser, XL-Whois, XL-Tools. ▪ Networking, TCP/IP and OSI protocols stacks, EIGRP, OSPF RIP, static routing, BGP, SD-WAN, SNMP. ▪ Microsoft outlook. ▪ VMWare and VirtualBox. ▪ Microsoft office suite (word, excel, PowerPoint). ▪ VPN IPSEC, remote VPN, SSL VPN, VLAN. ▪ Antivirus and Anti-malware. ▪ McAfee live safe: key escrow, virus scan, remote wipe, host protection. ▪ Open PGP: secure email, PKI, digital signature. ▪ ELK (Elasticsearch, Logstash, Kibana) · Incident response (on Firewall): a) Contain the attack: isolation; removal; segmentation b) Identify the attack and create appropriate customized IPS rules and signatures to stop it c) In case of DOS attack, create appropriate DOS policy to block the attack on the firewall d) Edit antivirus signatures to thwart the attack e) In case of brute force attacks, implement 2 factor authentication with password and token for increased security f) Monitor the network after the attack is blocked · Assist with new network architecture implementation and building fortigate firewall from scratch: customer provides the desired architecture, and I assist with setting it up and improving it if needed, with customer's approval. · Set up and troubleshoot for customers: a) IPS rules and signatures b) VPN (remote access, site to site) c) Firewall rules d) High availability and redundancies e) Link monitoring on firewall (monitoring link and devices failures) f) DOS policies g) Access points and switches h) Authentication: Radius, LDAP, 2FA or MFA i) Single sign on technologies j) SAML k) BGP, OSPF, static routing l) Web filtering, application control, SSL inspection m) SD WAN n) Certificate installs o) Remote logging p) Assist with PCI DSS compliance scanning q) And much more · Provide customers advice regarding new, future, and existing network and security architecture, to harden it and make it as secure as possible.