Position: Chief Information Security Officer (CISO), Network Security Engineer, Information Security Engineer, Information Security Analyst
Category: Security
English level: basic
Years of experience: 11

1. Disign and implementation of the standard 802.1x in a large corporate network.The components of the solution: Supplicant- Cisco AnyConnect NAM (OS Windows), Authenticator - Cisco Switch 2960,3560,3750,4507; WLC 4402, 2504, 3504, Authentication server - Cisco ISE (2 node in split deployment); Authentication Protocol - EAP-FAST.
2. Introduced infosec solution MS ATA for protect from multiple types of advanced targeted cyber attacks and insider threats (Reconnaissance, Lateral movement, etс.).
3. Implement a multi-factor authentication based on the Azure MFA Server. Integrating 2FA policy into a remote access VPN solution based on Cisco products (Cisco Anyconnect, Cisco ASA / Firepower, Cisco ISE).
4. Designing, implementing, configuring NGFW Cisco Firepower and Firepower Management Center in production. Design access policies that, on the one hand, take into account new features of the Cisco Firepower operating system (Access Control Policies, Intrusion Policies (Snort), File Policies (AMP for Networks), DNS Policies, Identity Policy (MS Active Directory integration), SSL Policy), on the other hand, inherit the policies of the old Cisco ASA 5585-X firewall.
5. Implementing project to upgrade a corporate wireless network. The outdated Cisco WLC 4402 controller has been replaced with Cisco WLC 2504.
6. Design and implementing Device Administration policy into Cisco ISE. Made configuration TACACS+ Authentication, Command Authorization and Accounting across the entire of enterprise network devices (Cisco Switchs, Cisco Routers, Cisco ASA, Cisco WLC).
I have 25 years of successful experience in the IT, including 15 years in development and support the network infrastructure and IT services in big company (more than 3000 hosts). For the last 7 years I have been engaged in implementation infosec solutions, design and implementation security policies in according with methodologies and best practices based on the ISO27001 standard, the frameworks NIST CSF, NIST RMF, NIST SP 800-53, CIS Top 20 Critical Security Controls and knowledge base MITRE ATT&CK™.  I have expertise in many information security/networks technologies and practices. Deeply passionate about cyber security issues. In the activities and skills more focused on the practice of Cyber Blue Team. Always aims to maximize results with a limited budget. At this moment I fulfilling a key role in upgrading network and infrastructure services in accordance with the new information security strategy of the group of companies. 
Configuring, managing and troubleshooting Cisco switches, routers, firewall in the enterprise. Established and maintain IPSec-based connectivity with external vendor. Supported remote access solutions (Cisco ASA). 
Implementation, configuration and maintenance of infrastructure services: VMware, Active Directory, DNS, DHCP, WINS, Public Key Infrastructure (PKI), Active Directory Federation Services (ADFS), Cisco Access Control Server (ACS), Cisco Context Directory Agent ( CDA), Wireless Control System, System Center Configuration Manager (SCCM), Cisco Anyconnect.
Deployed and managed ESET security endpoint severs and clients across the organization.
Reviewed and analyzed security response policies and programs for potential risks. The investigation of and response to network security breaches. 
Conducted R&D on emerging products, services, protocols and standards in support of security enhancement and development efforts.
Work in a company with properly built processes for implement the best practices of cybersecurity.