Henri Malts

Working for the cloud platform team as the AWS lead.

Weekly platform activities:

• Review and apply baseline code updates with Terraform
• Review and release new module versions
• Test new Terraform module releases
• Support network, security and DNS related issues
• Work closely with Information Security, Enterprise Architecture, Network and Firewall team.
• IAM role and SCP updates

Design and development:

• Designed a secure solution for internet-facing web applications with WAF, NLB, NACL, SG & Palo Alto firewall. Documented the solution and created a workflow how to deploy public facing applications.
• Designed Bluecat Edge and DNS/DHCP to operate in the Cloud environment
• AWS migration from VPN to Direct Connect (multi region)
• Azure migration from VPN to Express Route and multi region express route peering
• GCP Global VPC multi-region design and implementation

Recent projects:

• Repository migration from Github Enterprise to Github.com
• Workspace migration from Terraform Enterprise to Terraform Cloud for Business
• Introduced Gateway load-balancer to Palo Alto firewall pair (segments VPC to VPC flow)
• AVI global load-balancer POC
• Route53 failover routing for RDS and DB2 hosted on EC2
• Direct Connect and Express Route Circuit failover tests

Working in a team responsible of Network Firewall, Proxy, SSL VPN and IP Address Management Service.
Daily Duties:Completed Projects:

• Analyzing and implementing Firewall and Proxy change requests on Cisco, Check Point and Palo Alto Networks security appliances.
• Administrating DNS and DHCP using BlueCat IPAM
• Presenting firewall and proxy changes on the change management meetings
• Working closely with CISO's to make sure the firewall requests are compliant with the security policy
• Creating VPN tunnels to AWS Cloud and working closely with application developers.
• Monitoring logging health
• Providing firewall and proxy expertise to the business on a daily basis
• Providing Network Security status updates on the daily operations call
• Update policy and informational documents in MS Teams and Intranet

AWS Cloud Work:

• Creating instances in AWS Cloud using Terraform
• Managing AWS accounts
• Configuring VPCs and connectivity with On-Prem
• Corrected firewall audit findings such as: weak password policy for local accounts, unencrypted and weak SNMP community string.
• Migrated a group of users from local SSL VPN service to a centralized SSL VPN service.
• Onboarded Firewalls and proxies to Splunk
• Helped to plan and support DR exercise for multiple vendors

Working in a network team responsible of 2 hospitals and dozen clinics. Being part of 24/7 on-call rotation. Working closely with security auditor, server engineers and application analysts.

• Upgrading IDF switches
• Managing IP addresses and DNS records with Infoblox
• Monitoring data center infrastructure
• Cisco ASA and IPS administration
• AlienVault (SIEM) administration
  
• CUCM & Unity administration
• Nortel PBX administration
• Monitoring switches, firewalls and UPS devices
• PRTG Network Monitor Deployment
• Migrating network monitoring from What's UP gold to PRTG network monitoring
• Cisco Web Security Appliance administration
• Cisco Prime administration
• Cisco access point installation
• Troubleshoot internet problems for all users.

Network support for Hertz car rental offices worldwide. Working closely with GUC engineers and field engineers.

• Troubleshooting network connectivity issues
• Remotely assisting field engineers to configure network devices
• Configuring new equipment (Cisco ASA, Cisco 2811)
• Monitoring network equipment with Solar Winds
• Ordering Cisco dispatches with Cisco TAC
• Ordering Cisco RMA's
• Blackberry phone support
• Blackberry Enterprise Server administration

• Providing WAN/LAN support, troubleshooting connectivity issues
• Managing firewall rules on Cisco ASA and Juniper SSG firewalls
• Creating and troubleshooting Cisco VOIP user and phone profiles in Cisco Callmanager
• Installing devices on-site
• Creating and troubleshooting site-to-site VPN connections on Cisco and Juniper firewalls
• Creating remote access VPN profiles using Junos Pulse
• Monitoring customer's network devices with Nagios
• Windows server 2003 administration

Gained specialist training in customer service and Remedy ticketing system. 

• Customer Support for Lotus Notes, MS Office and Windows XP