Evilcoder.org

Senior Network Engineer, Security Engineer at Getronics Datacenters

Member of the network infrastructure team

Handling a multitude of clients, amongst them large government agencies, various public resources etc. Here I took care of a large customer, made improvement changes throughout the infrastructure, upgraded various devices, did massive troubleshooting for some clients.

Writing Technical Design’s for a large project which involves the migration of one of the Dutch airline companies to a new location and datacenter. Our manager made me Technical Lead, right next to the Technical Consultant. For this we use various firewall blades (FWSM) and VRF’s which run through multiple devices. Secondary project to help migrate outstations to the new environment, for this I needed to write Technical Design’s.

For another client, I am responsible for making sure that multiple regions are able to maintain the client, which involves creating standarized drawings, standarized documentation, connecting the management environments etc. I also do advanced troubleshooting on the firewalls and proxies (Bluecoat) of the client.

Helped troubleshooting the environment of an health insurance company, where performance issues had been found.

Senior Network Engineer, Security Engineer at Getronics Datacenters

From KPN a project was initiated to physically move the datacenters. I was hired by Getronics to make that happen for the government group I worked for. I was the main responsible for this project. With a collegue we did an inventory, cleanup, buildup, administrative tasks, executing the migrations, moving hardware, arranging documentations, communicating with the customers etc. We scored 100% on this move.

After that project I am now doing various projects to assist with the customer and implement new features as they desire.

Senior Network Engineer, Security Engineer at KPN

At KPN I am doing a large project to migrate the central facilities of a dutch government department. The central facilities included migrating a standalone Juniper firewall to a redundant Fortigate cluster, and migrating a loaded Checkpoint environment to a new Juniper (SSG series) platform. The migrations itself went smoothly given the base that had been used it was a big success! I also helped out the operational team managing all devices by setting up a new monitoring system (NMIS) and using Rancid for various important devices to keep a version track of all configurations. On the social plate I am guiding my collegue’s and training them where needed on area’s that I could help with.

FreeBSD liason

In February, I started helping Ed Schouten with his study, Ed is a student temporary working at Snow B.V, writing an MultiProcessorSafe (MPSAFE) TTY layer for FreeBSD. I act as a liason between FreeBSD and Ed to make sure he can graduate. We both traveled to Canada to let Ed give a presentation for the FreeBSD development team. Ed finally graduated with a 9!

Unix Engineer, Network Engineer, Security Engineer at Financial Institute

At the “Financial Institute” I was a member of the Security / Unix and Networking Team. It was my responsability to maintain various access routers and switches, core routers and switches, as well as key Unix systems and the Firewalls throughout Europe. I was also part of a team that is going to consolidate services and networks from Europe towards one central data Centre (Design phase). I was providing Network architecture, Firewall architecture and where possible Unix server Architecture. From June 2007 till Oct 2007 I trained a new team member with our main area’s of attention: Cisco, Checkpoint and Unix.

Starting from late 2007, I was also participating within a consolidation project (Architecture and technical implementation of the design), where I lead the implementations that needs to be done on the networking/unix/checkpoint side. I was responsible for implementing the entire Firewalling infrastructure (multiple clusters, internal security, exteriour security and vpn (remote users, remote site to site) security), both architectural as technical implementation and setup. Together with a Snow Collegue I was also building up the regular network within the new datacenter, implementing a common ground for the routers and switches, implementing tftp services, building up new management hosts with new monitoring tools; all as standarized and flexible as possible. Both my Collegue and I were also very active with communication migrations for the connected countries (we move them from the previous WAN/MPLS provider to the new provider).

System administration multiple Sun machines including: Email: Sendmail, DNS: BIND, Checkpoint Management stations and various other tasks

System administration multiple GUI Applications: Netscape Proxy/Mail Server, Checkpoint, Provider-1, Nokia Horizon Manager, Netscreen Manager, Siteprotector (ISS), HSE

System administration multiple IPSO (3.7, 3.8) machines:Checkpoint Firewalls

System administration multiple BSD/I , FreeBSD machines: Tunix Firewalls

System administration multiple ISS RealSecure machines: IDS Server Sensors (Mostly Windows based) IDS Network Sensors (both External as Internal) (based on Windows, Proventia A-series, and G-series appliances)

System administration multiple Cisco devices: SCA’s, Appcelera’s, CSS, HSE, Routers, Switches

Reading and acting on multiple security mailinglists/groups

Processing Security Events (alerting from the IDS machines)

Keeping the security filtering up to date for processing and alerting (Perl based)

Functional Security management

Maintaining contacts with external branches all over the world

Participating in projects taking place all over the world (physical location: NL)Here I need to deliver the concept, implementation options and guiding the technical implementor.

Reviewing and maintaining security policies, reviews and important security documentation.

Temporary teamcoordinator

I replaced the teamcoordinator multiple times when he was not available for work

Mostly-Harmless.nl

Guiding newcomers

Projectleader Documentation (contents)

DSINet.org

Writing Security Articles (Dutch and English)

FreeBSD

Maintainer of the Dutch Documentation Project

Member of the FreeBSD Documentation Team

Member of the FreeBSD Security Team

Acting FreeBSD Security Team Secretary

Member of the FreeBSD Source Committer Team

Member of the FreeBSD Bugmeister Team

Evilcoder.org

Writing my own Administration Toolkits in Perl

Writing check_honeynet, a custom tool to check the mirror status for various honeynet mirrors.