Jaroslav Novotny

- Check Point Maestro firewall architecture, Tufin SecureTrack and SecureChange automation - McAfee Web GW Proxy support and troubleshooting, FireEye NX - F5 BIG-IP (LTM), FortiMail, Totemo TrustMail - SSO, LDAP, RADIUS, IAM, Kerberos authentication- Check Point Maestro firewall architecture, Tufin SecureTrack and SecureChange automation - McAfee Web GW Proxy support and troubleshooting, FireEye NX – LCM project - F5 BIG-IP (LTM), FortiMail, Totemo TrustMail - SSO, LDAP, RADIUS, IAM, Kerberos authentication

- F5 BIG-IP (LTM, ASM) - FortiWeb, FortiADC, FortiWeb Manager - WAF (Web Application Firewall) migration - F5 to FortiWeb/FortiADC - IBM DataPower Gateway migration to FortiWeb/FortiADC

- Firewall Life Cycle Management projects, migrations (Juniper, Fortinet) and software upgrades, IDS/IPS deployment - FortiConverter, FortiManager, FortiAnalyzer, 2FA SSL VPN - FortiToken, IPsec VPN migrations - Infosim StableNet®, Entuity Network Analytics, Amdocs Cramer OSS, Elasticsearch-Logstash-Kibana - Cisco ACI, Infoblox IPAM, Wireshark,

- Firewall change validation and approval - Supporting server migration projects from Legacy environment to Next Generation Network environment - Firewall configuration review and audit – Tufin Secure Track - Developing, maintaining workflows and Python automation scripts for Tufin Secure Change

- Member of SOC team - Responsible for the operation and maintenance of customers' managed security devices - Monitoring of security events and identifying threats to international clientele - Analyzing messages about critical security vulnerabilities and communicating them to stakeholders - Planning changes and executing them (Cisco, Checkpoint, Bluecoat, Fortinet, Palo Alto, F5) - Optimizing detection systems and resolving security and device incidents - Release upgrades and vulnerabilities fixing

- Working for UBS bank as external employee - Firewall policy audit, quality checks, rule-set review, standardization and simplification - Ensuring firewall change requests are complete and correct, and are compliant to architecture design - Network subnets migrations - Support setting up new locations and new environments for applications. - Performing the firewall rule certification program, Tufin firewall and security policy management tool

- Replacing EoL Checkpoint UTM-1 appliances by new Checkpoint NGFW/IPS appliances - Replacing Checkpoint appliances by new Palo Alto Firewalls NGFW/IPS - Managing and troubleshooting Bluecoat Internet Proxies, RSA Authentication Manager, Pulse Secure RA - Algosec firewall policy management, change management, validations, consultations - Python, Bash scripting

Responsible for developing and implementing standard firewall solutions for multiple leveraged customers in EMEA and HPE internal use. Designing the security solutions for customers according to predefined corporate architecture standards. Working on projects: Migration of Checkpoint CMA from one P-1 to another P-1 - Migration from Cisco to Checkpoint appliances - Migration from Checkpoint to Fortinet appliances - S2S IPSec VPN migration from Juniper SSG to Fortinet appliances

Configuration and troubleshooting of firewalls (Cisco FWSM module with multiple contexts, Juniper SSG, Checkpoint IP series) proxy servers (Cisco Ironport and Microsof ISA proxy) within customer network. Working as member of operations L2/L3 team. Responsibility for incident, problem and change management. Determining root cause of an incident – initiating actions to isolate or correct the issue.

Traffic data collection for client network trend analysis. Producing utilization reports for customers, showing performance statistics data like CPU, interface utilization, memory utilization, errors, etc. Leading monthly or bi-weekly meetings with customers and presenting the data, findings.

Computer networks