Shuja Mir (Sam)
shujamr@yahoo.com
703-349-9648

(Active secret clearance)

 

 

SUMMARY OF QUALIFICATIONS

 

Senior Network Security Solutions Engineer with an extensive background in security and networking while currently performing senior-level security engineering support. Specializing in network security, including firewall, IPS, and IDS, UTM support; incident response and analysis; with a background in routing. Extensive background in SOC, NOC and Customer Support environments performing security analysis, incident response, maintenance, and configuration to include all layers of the OSI model. Authored high-level documentation and training materials for Security Operations, Network Operations.

 

CLEARENCE:

 

DOD secret clearance.

MTIPS clearance.

 

 

PROFESSIONAL PROFILE
 

2000-Present Verizon Federal, Ashburn, Virginia

Senior Network Security Solutions Engineer - Verizon Federal (Managed Security Services)          October 2007 – Present

§ Managing a Federal team of Tier 3 security engineers.

§ Identify, prioritize, structure, and lead multiple projects.

§ Manage cross-functional and detailed project plans and represent the MSS team in all strategic planning recommendations and approvals.

§ Prioritize project activities and coordinate resources to achieve project goals.

§ Facilitate/lead the development of meaningful internal operational benchmarks that can be owned by MSS team.

§ Gather and analyze data in order to report weekly & monthly results for key initiatives and ad-hoc requests.

§ Develop strong collaborative relationships with cross-organizational leadership in order to assess and meet the needs of the business.

§ Build and maintain strategic planning partnerships with all applicable business units.

§ Responsibilities include coaching the team, employee performance feedback and improvement methods, one-on-one sessions, project time line and goal recognition.

§ Some of the projects include designing centralized knowledge base, documentation and SOPs.

§ Acting as a liaison between clients and Verizon to maintain good client relations.

§ Responsible for PCI, NIST and KPMG audits.

§ Perform maintenances to include code upgrades, device replacements and new installations.

§ As a team leader, provide 24x7 engineering support, including on-call support, for security events and incidents.

§ Configure, support and maintain Fortigate UTM (Web/URL Filtering, Anti-Virus, Data Leak Prevention, Application Control)

§ Configure, support and maintain Cisco Firewalls (PIX/ASA)

§ Configure, support and maintain Juniper Firewalls (Netscreen ISG, SSG, Junos- SRX, Juniper Client VPN, Juniper Site-to-Site VPN)

§ Configure, support and maintain Intrusion Prevention System IPS (TippingPoint, SourceFire/FirePower and ActiveScout)

§ Emergency Threat Response and Remediation – report and mitigate Security Vulnerabilities announced by platform vendors.

 

Team Lead Senior Network Engineer – Verizon Business (Network Operations Center)            September 2000 - October 2007

§ Lead a team of network operations engineers.

§ Maintain day-to-day health of the network infrastructure, with a focus on maintaining and ensuring network stability and organizational productivity.

§ Provide training on multiple platforms on existing as well as new procedures and requirements.

§ Perform code upgrades.

§ On call 24/7 support.

§ Configure, support and maintain Cisco Routers (12000, 7000 and 2500)

§ Configure, support and maintain Juniper Routers (M-160, M-40, M-20 and M-10)

§ Experience with Lucent CBX-500, BSTDX-9000 series switches, ascend fore switches.

§ Hands-on Network Management of BGP, ISIS, OSPF and RIP Networks.

§ Responsible to write & edit standard operating procedures (SOP)

 

1998-2000            Cais Internet, Mclean, Virginia

Senior Network Engineer (Network Operations Center)                                 January 1998 – September 2000

§ Provide 24x7 operational engineering support, including on-call support, for security events and incidents.

§ Configure, support and maintain Cisco 7000, 3000, 2500 series routers.

§ Configure and maintain Cisco catalyst switches.

§ Troubleshoot wireless issues including Breezecom; in conjunction with various network devices like 3COM and Bay stack switches.

§ Self study and train other engineers on supported security products and technologies.

§ Client and Site-to-Site VPN – Configured and supported remote access connectivity for remote clients and off-network offices.

§ Firewall and IDSM Standardization and Optimization - Upgraded, automated, standardized and optimized Cisco FWSM and IDSM modules to current code, enabled automatic updating, implemented optimal policy ordering, and provided many other tweaks allowing the modules to operate at optimum efficiency.

 

1997-1998           Fannie Mae, Herndon, VA

Network Engineer (Network Operations Center)      July 1997 – January 1998

§ Deployed a LAN solution, which comprised of multiple PDC and BDC under Windows NT 4.0 platform with Windows NT workstations and Windows 98 clients.

§ Installed and configured multiple DHCP servers with various subnetting scope.

§ Troubleshot TCP/IP and dialup networking issues.

§ Implemented schema for Ghosting and replicating folders to the system server, and conducted performance analysis and tool recommendations.

§ Managed a desktop support for over 50 user LAN including password management, directories, permissions, radius server.

 

TRAINING AND CERTIFICATIONS

 

Fortinet Training: Fortigate NSE 4,5 UTM (Web content/URL filtering, Proxy, Anti-Virus, Data Leak Prevention) (2016)

Cisco Training: Source Fire/Fire Power SSFIPS training (2016)

Cisco Certifications – Cisco Certified Network Associate CCNA (2003)

Juniper Certifications – Juniper Firewall Certification JNCIA-FWV (2009), JNCIS-FW (2010), JNCIA-JUNOS (2012), JNCIS-SECURITY (2013)

IT Service Management Certification - based on the Information Technology Infrastructure Library (ITIL/ISO9000/ISO20000) – (2010)

Comp Tia Certification - Comp Tia Security Plus (2007)

 

EDUCATION

 

Stratford University

Diploma in Telecommunication.

 

SPECIALIZED SKILLS

 

Equipment: Fortigate UTM (Web/URL Filtering, Anti Virus, Data Leak Prevention, Application Control) Cisco Routers, Switches, PIX, ASA, Juniper Routers, Switches, Juniper Netscreen Firewalls, Juniper SRX Firewalls Juniper Netscreen IDS, Juniper VPN (SA-6000, SA-6500), SourceFire/FirePower, HP TippingPoint IPS, Forescout ActiveScout/CounterAct IPS.

Network Monitoring Systems: Espresso Alarm Handling (VZB proprietary), ActiveScout, StealthWatch.
Operating Systems: Cisco IOS 12.+ and earlier, Solaris 8, Windows95/98/NT/2000/XP/2003, Vista.
Software: Netscreen Security Manager, Cisco Active Security Device Manager, Netcool, Citrix,  Windows, Remedy, Microsoft Office, Enira, Snort, ArcSight, SMARTS, TippingPoint SMS, CounterAct Edge Manager.
Protocols/Standards: OSI, TCP/IP, BGP, MPLS, RSVP, IS-IS, OSPF, EIGRP, RIPv2, VoIP, SONET, DWDM, OC-192, OC-48, OC-12, OC-3, ATM, Frame Relay, SMDS, PPP, Ethernet, Fast Ethernet, GigE, 802.1q, DHCP, NAT, SNMP.

 

REFERENCES

Available upon request.