Philadelphia, Pennsylvania, United States
Career / Skill Summary: Hands-on IT Admin and Security Architect with comprehensive teaching background in colleges, universities, technical schools, and global corporations. Lead large IT system migrations and deployments with focus on Data Center Security, Cyber Security, Cloud Security (GCP/AWS/Azure/Alibaba Cloud), Encryption, Email Protection, DLP, Information Management, NIDS, Big Data Analytics, National Critical Infrastructure Protection (e.g. EMS/OMS/DMS, SCADA, RTU, PLC, Smart Grid, etc.), online education, and technology. Spearhead major IT initiatives that encompass logical and physical security design of network infrastructure, SIEM Security, IAM, data loss prevention, system backup / restore, disaster recovery, and platform management in Windows, Mac, Linux, AIX systems. • Deep understanding of entire IT project lifecycle, Cyber Security, encryption, and Data Loss Prevention. • Extensive experience in Network and Information Security Architecture, security tools, protocols, workflows. • Hands-on experience in data science, Cryptography, SIEM, Email Protection, DLP, Office 365 and various IT security practice and industry security / compliance standards. • Ability to analyze complex technology issues, create innovative solutions, and finish projects on time, within budget, and with high quality. • Proven effective communication skills with technical and non-technical audiences and individuals. • Tri-lingual in Mandarin Chinese, English, and Japanese.
• Responsible for providing Data Maintenance, Display Maintenance, Network Model Maintenance and ADMS application support for distribution and Substation Systems. • Support SCADA Database, Display Builds and Database linking for all SCADA and Manual controlled devices. • Develop new and/or modified DMS displays and databases. • Maintain NERC CIP compliance, Cybersecurity standards, Recloser and substation equipment program. • Provide Analytical Documentation and weekly reports to support the business processes.
Responsible for managing and providing IT services, physical & cyber security solutions to end-client enterprises (e.g. MWResource, Inc., Johnson American Fastener Company Conduent, Tmunity, HCSC-BlueCross BlueSheild, Thrivent, Kernel University) via various tools and frameworks (TOGAF, NIST, COBIT) including Security Cameras, Locks, wireless technologies, PKI, DLP, Encryption, Zero Trust, ERP, IAM, AD, LDAP, MFA, SSO, AWS, Azure (Microsoft Sentinel), O365, network automation, GCP, Alibaba Cloud, firewalls, routers, switches, Cisco Meraki SD-WAN, SDN, Java, IDS/IPS, DLP, Tripwire, Zscaler, Email Protection, Microsoft Exchange On-line security, Google Cloud, G-Suite, Defender, Teams, Zoom, Azure NSG, ASGs… --- Senior NERC CIP compliance specialist
Responsible for providing IT/OT onsite/cloud/container/cyber security solutions, policies, automation, architecture designs as well as Penertrartion Testing Lab setup, cybersecurity reports and advice to upper management of State of New Jersey MVC regarding onsite/cloud/application security, SOC team establishment, GRC, vulnerability management, security assurance and best practices, CrowdStrike and Microsoft Security product implementations, e.g. BitLocker, Defender, Intune, Endpoint Protection, DLP, CASB, XDR, MS Security Copilot, Kali Linux, etc.)
Responsible for providing physical/cloud/container/cyber security solutions, asset and vulnerability management and security assurance to end-client enterprises ( Qomplx, Vanguard) via Palo Alto Firewalls, SSO, OPA Gatekeeper, Github, O365 as well as system migration, network automation with Cisco Meraki SD-WAN, Firewall, Routing, switching, ACL, AWS, Dell EMC VxRail systems, Tripwire Enterprise, etc.
• Provide leadership, roadmap, guidance across a wide range of technologies at an enterprise-level for security architecture, design, engineering, and strategic planning. Align security standards, frameworks (TOGAF, NIST, COBIT, HiTrust) and security solutions (GCP/AWS/Azure/Alibaba Cloud) with the overall business and technology strategy. • Responsible for working with the information security management team to administer the Company’s information security programs, maintain Sarbanes-Oxley, HIPAA, and PCI DSS compliance programs, and supporting a variety of security systems and processes, including Encryption, IAM framework, Palo Alto NGFW, Splunk, ExtraHop, Vectra, Email Protection, DLP, Office 365 …. • Researches, evaluates, recommends, designs, implements, and administers information security controls that meet strategic and tactical information security objectives. Example projects are Cloud Security Solutions / Guidance, Datacenter Network Security (both north-south and east-west traffic), IT Security Architecture – Best Practices, etc.