SUMMARY
Senior engineer who delivers complex infrastructure, cloud, and security implementations end to end across multi-client environments: scoping, design, build, documentation, and handoff. Operates as the final technical escalation point for an entire regional market across network security, endpoint, identity, cloud, email security, and vulnerability management. Advanced hands-on depth in Palo Alto and Panorama, Azure, Entra ID and Intune, Citrix, and multi-vendor networking, with a strong automation and API integration background. PCNSE, CCSP, SC-100, and AZ-500 certified, all earned while working full time.
EXPERIENCE
Managed Service Provider (Same as below, previous MSSP was acquired) | Sr. Managed Services Engineer | Jun 2025 – Present
- Sole senior technical resource and final escalation point for the Central market, covering network security, endpoint protection, identity, cloud, email security, and vulnerability management.
- Lead complex professional services engagements end to end: environment assessment, scoping, design, implementation, documentation, and handoff to ongoing support teams.
- Network: firewall migrations, Panorama onboarding and a Panorama deployment in Azure for the managed firewall fleet, HA pairs, SD-WAN design and implementation across branch sites and multi-hub topologies, firewall health reviews, TLS decryption, and ongoing remediation. Operate Palo Alto, Cisco, and Meraki platforms at an advanced level.
- Cloud & identity: Azure migrations and IaaS builds, Microsoft 365 implementations and tenant separations, AD to Entra ID hybrid transitions, federated domain migrations, Conditional Access policy design, Duo MFA, RADIUS proxy, and SAML/SSO integrations across the client portfolio.
- Endpoint: lead Intune MDM and MAM onboarding, including hybrid join, GPO to configuration profile migration, compliance policy design across Windows, iOS, macOS, and Android, and Conditional Access enforcement. Administer SentinelOne EDR across the client fleet.
- Own the vulnerability management program end to end: Tenable deployment and tuning, remediation prioritization across the client base, GPO and automation-driven remediation at scale, and client-facing risk reviews and reporting.
- Built and own an alert triage automation integrating SentinelOne, ConnectWise PSA, and an automation platform over REST APIs, reducing analyst handling time by roughly 80 percent. The resulting automation library is now standard practice across four regional markets.
- Primary internal knowledge resource: lead technical training for peers, own the majority of engineering documentation and runbooks, and drive process standardization.
Managed Security Service Provider | Managed Services Security Engineer | Jun 2022 – Jun 2025
- Led technical onboarding and end-to-end client projects spanning networking, endpoint, server, cloud, and email, from assessment through handoff.
- Escalation point for complex networking and security issues across a multi-client environment; designed, implemented, and managed secure network infrastructure for clients across multiple industries.
- Delivered professional services engagements covering EDR/MDR, RMM and patch management, email security, web filtering, vulnerability management, and virtual desktops.
- Directed advanced infrastructure projects including Intune and Duo rollouts, Citrix cloud migrations, AD to Entra ID hybrid migrations, MFA and SSO enforcement, firewall deployments, and mobile device management.
- Built scripts and automations that reduced manual workload and improved delivery consistency; developed and maintained the internal documentation supporting technician efficiency.
- Earned PCNSE, CCSP, SSCP, CCNA, and AZ-500 during tenure.
SELECTED ENGAGEMENTS
Network & Security: Palo Alto deployments and migrations across the PA-200 through PA-1400 series including HA pairs; Panorama onboarding and an Azure-hosted Panorama build; SD-WAN across branch and multi-hub topologies; multi-site Meraki firewall, switch, and AP deployments including international offices; Fortinet health assessments and mitigation; SSL/TLS decryption; VLAN and DMZ segmentation; office relocations with minimal downtime.
Cloud & Datacenter: Azure cloud migrations and IaaS builds; Azure Firewall implementation; AHV conversion with Azure NC2 build and DR setup and migration; Nutanix node expansion; Zerto and Cohesity deployments; Windows Server 2012 R2 and 2022 upgrade programs.
Microsoft 365 & Identity: tenant separations and consolidations; email, SharePoint, and domain migrations; federated domain migration; Entra ID and Intune rollouts; Microsoft 365 to Google Workspace migration.
Virtualization: Citrix XenApp, DaaS, and NetScaler deployments, including on-premises to cloud migrations and universal license conversions.
Security Programs: Tenable vulnerability management program; internal penetration test remediation; DMARC enforcement to p=reject; email security deployments across Mimecast, Defender for Office 365, Avanan, and Check Point Harmony; DNSFilter migration; Splunk deployment correlating logs across 30+ systems.
EARLIER EXPERIENCE
Private University | Network and Cybersecurity Lab Manager | Jun 2021 – Jun 2022
- Led a team of 7 lab assistants operating the core infrastructure behind the networking and cybersecurity programs; managed ESXi virtualization and a multi-vendor Palo Alto and Cisco environment.
- Partnered with faculty to integrate SD-WAN and emerging network architectures into the curriculum.
Private University | Threat Analyst, Collegiate Cyber Defense Club | Jun 2020 – Jun 2022
- Lead threat hunter using Splunk and Elasticsearch. 1st place state and Midwest qualifiers; 1st place Iowa CDC 2022; competed at the Global CCDC in 2021.
Retail Pharmacy Company | Sr. Security Architect Intern | Jun 2019 – Aug 2019
- Threat modeled pharmacy platform APIs during a cloud migration, helped design HIPAA-compliant infrastructure, and identified a vulnerability in the platform’s OAuth 2.0 implementation.
EDUCATION
BS Private University, BS Cybersecurity, CS Minor – Dean’s List, Presidential Scholar | 2017 – 2022
CERTIFICATIONS
- PCNSE (Palo Alto Networks Certified Network Security Engineer)
- PCNSA
- CCSP (Certified Cloud Security Professional)
- SSCP
- CCNA
- SC-100 (Microsoft Cybersecurity Architect)
- AZ-500 (Azure Security Engineer Associate)
- Tenable One
TECHNICAL SKILLS
Network Security: Palo Alto (Panorama, Strata Cloud Manager, Strata Logging Service, SD-WAN, HA, TLS decryption), Cisco, Meraki, Fortinet, UniFi, WatchGuard; Prisma Access and Cloudflare Zero Trust
Cloud: Azure (IaaS, hybrid, migrations), AWS (Site-to-Site VPN, Transit Gateway, BGP, EC2), Nutanix, VMware, Hyper-V
Identity & Access: Entra ID, Conditional Access, Duo, Okta, SAML/SSO, SCIM, RADIUS, Active Directory
Endpoint: Intune (MDM/MAM), GPO, NinjaRMM, SentinelOne, Microsoft Defender for Endpoint, CrowdStrike; Windows and Linux CIS hardening
Vulnerability & Cloud Posture: Tenable (Tenable One), Nessus, Qualys, Prisma Cloud
SIEM & Monitoring: Microsoft Sentinel, Splunk, Elasticsearch, Rapid7, Arctic Wolf
Email Security: Defender for Office 365, Mimecast, Avanan, Check Point Harmony; SPF, DKIM, DMARC, PowerDMARC
Automation & Tooling: PowerShell, Python, Bash, REST API integration, ConnectWise PSA; Terraform and Ansible in lab environments
