Brian Madera

Working for a project to uplift existing equipment, enhance security, segment the network separating Factory from Corporate side on 18 site offices. This is OT (Operational Technology) Transformation Project where I am tasked to handle the networking aspect in general

• Deploy new Aruba network equipment dedicated for OT factory network
• Update existing network topologies to align with new segmentation
• Redesign new network diagrams and deployment phases
• Define firewall zones and policy rules for the Palo Alto firewalls on each site

Role was for a 6 month engagement to complete the 802.1x project involving 13 WSU campuses across New South Wales. This is securing end points access, rolling out macauth and dot1x authentication to Aruba Clearpass. My accomplishments:

• Setup of Aruba Clearpass roles, role mappings, policies, profiles and dot1x switch configuration
• Getting our remote campus up at Surabaya, Indonesia using Cisco Meraki gear (MX, MR, MS devices) and linking it to our main network via Site-to-site VPN with Clearpass dot1x authentication
• Helped with BAU support with DDI (DNS,DHCP, IP address Management) systems, Netscaler Load balancers and Ruckus Wireless Controllers

Contracted for 1 year to perform special projects. The Sydney organization has only been operating for 5 years with a lot of gaps.

These are my contributions and accomplishments:

• Setup of Syslog server and Solarwinds netflow monitoring/alerting on certain criteria like consumption, internet usage, connections table, etc
• Onboarded the corporate staff building to Aruba Clearpass fully setup for 802.1x authentication
• Segmented wireless corporate staff BYOD devices, separated from corporate policies and aligned with guest network policies
• Authored documentations on device upgrades, enhanced configurations, monitoring, policy changes, problem resolution, learnings
• Overall presence has contributed to the business in a smoother process and enhanced security
• Hands on with Checkpoint Firewalls, Aruba Clearpass, Aruba and Arista switches, Solarwinds, Aruba mobility controllers

Full time role as a Network Engineer handling BAU and part project work. Supporting 80 customers with service requests and incident management.

• Performed varied engineering assignments with MPLS, SD-WAN, WAN, LAN, iPsec tunnels, Routing and switching
• Worked experience with Cisco ASA, Firepower, Meraki, Palo Alto, Sophos, Fortigate, Checkpoint
• Part of design, development, improvement, implementation, testing and maintenance of networked systems
• Participated in high level engagements with clients and management, resolving critical cases, brainstorming probable resolutions and working out a favorable outcome for each incidents

Worked as a Technical Lead for Windows 10 upgrade project for McDonalds east asia markets. The project, which has kicked off last March 2021 covering 13 countries.

• Made sure all project documentation are in place; procedures, guidelines, requirements for all asia markets
• Providing them with training and lab support as they prepare for scheduled phases leading to mass deployment
• Looked after issues and tickets raised by each markets during lab activities and initial project phases
• Working alongside different contractors and consolidating work, resolutions in addressing market challenges and project show stoppers

Full time role mostly dealing with MDM for mobile devices, gadgets for medical purposes.

• Issued a total of 300+ mobile phones to the organization for voip and vocera use
• Provided a high level of support, even off duty hours to support users with any phone problems as the hospital operates 24/7
• Slashed telecommunication costs about 20% and more gradually by negotiating pricing and fees, while ensuring continuation and enhancement of services
• Proposed and rolled out VOIP solution to the organization that proves to be an effective platform for communication both on medical and corporate staff

This was a senior network role with high level engagement with Head office and multiple subcompanies. Working to improve design, segmentation and ease of access.

• Made some significant improvements on the company's network infrastructure by implementing redundant connections and applied proper core load balancing
• Enforced a security layer on the Cisco ASA firewall, created traffic filtering and restrictions
• Achieved a major milestone in connecting 7 sub offices to the main holding office using site to site IPSEC VPN tunnels
• Connectivity between all offices was setup using the hub and spoke design
• Further structured the entire organization by implementing proper VLAN assignment and defined a level of access at a vlan and host levels
• Applied a logging tool and an SNMP monitoring tool
• Saved the company huge telco costs by setting up PSTN bypass on the Cisco UC560 Call Manager where 2 remote offices (Qatar and UK) were making phone calls for free via ipsec tunnel
• Contributed to the systems team by creating backup policies, group policies, mailbox policies, file replication services, resource access level policies, quota management, and file screening management
• Performed consultancy work and was contacted on a per task basis by the company from January 2014 to December 2015
• The work mainly focused on making changes on the configuration of network devices