Aleksei Serzhant

Translating Security requirements/policies into final technologies and reference architectures.

Network Security Architecture for DMZ Services block (GSLB, Load Balancing, Firewall L4-L7, WAF). Integration with Cisco ACI and Legacy infrastructures.

As a part of Global Transformation Program leaded Site Deployment activities for 11 sites (>1500 end users) around the World (EMEA/APAC/NORAM). Covered Workplace, Infrastructure, Network and Security areas.

As a part of Global Transformation Program leaded Data Center stream with the next key milestones: • Defined High and Low Level Design for DC and Lab environments • Designed network security controls accordingly internal policies and standards • Planned and configured peering with legacy infrastructure • Planned and performed all main delivery steps of the project • Handovered to Operation teams

• Defined and implemented Azure network security design • DMZ design based on 3rd parties appliances (Palo Alto) and built-in Azure Security controls • Defined routing (traffic flow) in the public cloud for different security zones and between public cloud and network on-premise • Planned Disaster Recovery from public cloud network perspective

• Being responsible for information security of the Games Services and leading IT Security team for designing, implementing and operating IT Security Services for Olympic Games - PyeongChang 2018 - Tokyo 2020 - Beijing 2022

• Defined Network and Security solution for Data Center for Olympic Games • Defined implementation architecture for Olympic services • Defined IP addressing plan for Olympic Games • Planed bandwidth for WAN lines • Supported Implementation and Operation teams • Close work with Cloud provider for capacity and solution itself • Managed capacity • Defined solution for Integration Test Lab for Olympic applications

• Supported Network Architect to define and document network solution for Olympic Games Network, focusing on security • Assisted Security Architect in the development of network security procedures • Co-ordinated with Provider for re one and central locations (Internet, WAN) • Implemented configuration for Network and Security devices

• Being responsible for installation and configuration Voice (AVAYA/Nortel, AudioCodes), Data (AVAYA/Nortel, Cisco, Extreme Networks) and WiFi (Cisco) • Supporting presales team in bid phase • Defining network architecture for industrial network, interfaces with Support network • Being responsible for full installation (Voice, Data, WiFi) on site • Supporting infrastructure after installation phase (tuning, interfacing with Voice and Internet providers)

• Being responsible for monitoring, prevention of accidents and recovery for data and voice traffic (Ethernet, Frame Relay, SDH, PDH, DSL, CCS7 etc.) • Communicating with others ISP providers to track critical incidents (e.g. cut of trunk line between countries) and issues with CCS7 signaling • Leading shift team (two persons)