Introduction

My name is Brad Voris and I am a Security Professional who is passionate about technology and scripting. I’ve been in IT/IS/Cybersecurity since 1999. I have have the following certifications: ISC2 CISSP ,ISACA CISM ,CSA CCSK ,Comptia Network+ ,MS MCP ,MS MTA ,VMware VCA-DCV ,Fortinet NSE1 ,Fortinet NSE2 ,Palo Alto ACE ,DHS & CISA 100W - OPSEC ,CyberArk - Trustee, MS AZ-900

I started my Information Technology career in 1999. While working at BestBuy as a computer salesman I was asked by a customer to assist with finding appropriate memory for his Winbook. The support technician wasn’t particularly helpful for him so I took it upon myself to find out what the speed and size memory was needed. After a few minutes of verification I was able to provide him with the memory that he needed for his laptop. He mentioned that he worked for a survey company that was looking to hire a computer technician and if I was interested I should apply. We exchanged information and a week later I went in for an interview. I met with Dean Errington who after a discussion hired me for the role. This was my first computer related role fresh out of the military with minimal support experience. I was very fortunate to have made a good impression.

My Career

Jones & Carter, Inc. Computer Technician 1999 - 2007

Jones & Carter - a full-service civil engineering firm

I started working for J&C in September of 1999. First started out working on a mass of desktops. These were all DOS and Windows 95/98 machines. Repairs would be anything hardware or software related. Some days I’d replace failed power supplies, or solder a new AT keyboard port to a motherboard. I would spend my free time reading books on A+ and Network+. As the time went on we hired an additional tech and I took on more duties. My role as a computer technician working strictly on desktops soon changed to working on servers and networking equipment. This meant preparing Compaq Servers for deployment, installing patches, running backups, adding user accounts to Novell Netware 5.0, Windows NT 4.0 and Microsoft Mail. From the network side it was deploying new 3COM switches and removing the older HP and Intel 500 series switches. Eventually building VLANs and setting up QoS (it was very new). J&C was going through a massive amount of growth. We opened an office in Austin, aquired an engineering firm in The Woodlands and expanded our Dallas and Houston offices. Technology grew rapidly and I adapted. Taking on printer, plotter and firewall support. We migrated from Windows 95/98 to Windows ME and Windows 2000 Pro. We migrated from Novell Netware 5.0 to 5.5 and eventually off of Novell to WIndows File Servers. We migrated from Novell NDS to Microsoft Active Directory in Windows 2000 STD and then to Windows 2003. We Migrated from Microsoft Mail to Exchange 5.5 then to Exchange 2000 and then to 2003. We implemented new firewalls which were BorderWare, then to Fortinet. As we continued to expand our technology expanded and became a full Microsoft Shop. Eventually all desktops were migrated to Windows XP and I managed the day to day operations for desktops, servers,m and the network. This was a great job to cut my teeth and learn. While I enjoyed working for Dean I needed to bolster my skills and do more. In October of 2004 I got married and we went on our honeymoon. While not spending time with my wife I was studying for the Network+ exam. The Week After my aniversarry I took and passed the Network+.

• Employee management - interviews, mentoring, training, hiring • Support and manage 10+ Windows NT 4.0 - 2003 and Novell Netware 5.5 server environment • Support Exchange 5.5 - 2003 • Support Citrix Metaframe XP/Presentation 1.x-3.x Server thin clients and published applications • Support Borderware, Watchguard, and Fortinet firewalls. • Support tape backup systems Veritas, Brightstor and Arcserve • Train employees in the Information Technology department. • Create company policies and procedures governing corporate security, email and Internet usage, access control, and incident response. • Diagnose and repaired issues with printers (HP Laserjet, DesignJet plotters) • Website and Intranet development (HTML/PHP/CSS/JAVASCRIPT/Dreamweaver) • PDA support/installation (Pocket PC 2003, Mobile 5, Palm OS)

Lab Corp 2007

Lab Corp - operates one of the largest clinical laboratory networks in the world, with a United States network of 36 primary laboratories.

I don’t have this role on my resume or LinkedIn.

Metro Networks 2007

Metro Networks - broadcasting outsourcing company based in Houston, Texas

I don’t have this role on my resume or LinkedIn.

Solarent 2007

Solarent - was a managed service provider

I don’t have this role on my resume or LinkedIn.

DePelchin Children’s Center 2007 - 2009

DePelchin Children’s Center - nonprofit provider of children’s mental health, prevention and early intervention, and child welfare services

I took a role with the assistance of Solarent at DePelchin Children’s Center. This role was an IT Manager role where I managed the help desk, call center and data center for DePelchin. We had 2 senior technicians, and 3 technicians in the call center. I had a great team, who were really efficient and capable. While there we installed new firewalls, new file servers and database servers. I deployed and configured all new Cisco switches. I deployed an IDS and a honeypot for greater network visibility. This was a really good role and I learned a lot about managing people and resources.

• Manage help desk and server support personnel (interviews, hiring, mentoring, timesheets, conflict resolution, training, etc.) • SLA and vendor support contract administration • Server engineering & administration (Win 2k3, Red Hat Enterprise, Dell 2XXX Series servers, • Compaq/HP Proliant servers) • Network engineering & administration (Cisco switches, Fortigate, Watchguard firewalls.) • Nagios network monitoring • SQL Database administration

Serimax 2009 - 2010

Serimax - was an international pipeline welding company

I took an IT Manager role for the North and South American regions for Serimax. After taking this role the oil and gas industry was hit with a severe downtown which negatively impacted my role. I was the sole support person for North and South America. This meant supporting 500+ resources across numerous counteries.

• America regions • Departmental budgeting • Project Management • SOX Compliance • Help Desk / Service Desk Management • SLA and vendor support contract administration • MPLS/network administration (Cisco Pix/ASA firewalls, dell switches) • Windows 2003 server administration (Dell servers) • Active Directory, DNS, DHCP, IIS, File Sharing • Lotus Domino email server administration

Internet Medical Clinics 2010

Internet Medical Clinics - Chain of medical clinics

I don’t have this role on my resume or LinkedIn.

Cherry Demolition 2010 - 2014

Cherry Demolition - demolition, aggregate, and crushed concrete manufacturer

I took a role as a system engineer / IT manager for Cherry Demolition. Cherry was on a growth boom and required a lot of work. Essentially a mom and pop shop using retail grade equipment and having chronic network failures and system failures. I rebuilt their entire network from cheap 8-16 port switches, to multiple 48 and 24 port switches with fiber at their headquarters and 48 port switches at their branch locations. I deployed Fortinet firewalls at all locations, a forti-analyzer and fortimanager at their HQ. I migrated their Windows 2003 SMB server to Windows 2008 R2 file servers and a Windows 2010 Exchange Server. Those servers were on an old Compaq Proliant 1600 series server, which I upgraded to a bunch of Dell rack mounted servers and a Dell SAN. I deployed about half the servers in Hyper-V for ease of management. I also installed a couple of brand new full Dell racks. I deployed Ubuntu and Nagios resource monitoring. I deployed numerous DVR’s and IP cameras. I ran numerous projects for migrating phone systems from Iwatsu to Shoretel, MPLS migration, database migrations, department budgeting and vendor management.

Build and maintain Windows 2008 R2 servers for multiple locations (Active Directory, DNS, DHCP File Sharing, IIS) • Employee management - interviews, mentoring, training, hiring, termination, conflict resolution • Help Desk / Service Desk management • Support and maintain Microsoft Exchange 2010 Email server • Powershell Scripting • Fedora & Ubuntu Linux Server support and maintenance • Hyper-V server virtualization, installation, configuration, and maintenance • Maintain desktop, laptops, Blackberry, & Android cell phones for 200+ staff members. • Implement / manage MPLS/VPN network across 10 locations • Project/Department Management (planning, budgeting, implementation) • Gigabit Network migration (Dell 4xxx series switches and fiber) • Network & Security Monitoring With Nagios • Exchange 2003 to 2010 migration • Firewall migration SonicWalls to Fortigate with FortiAnalyizer • Implement Shortel VoIP phone systems at 12 locations • Manage Iwatsu phone systems • WSUS - Microsoft patch deployment • Department Budgeting • Data Center Experience – Capacity Planning, Designing, Rack diagrams, Electrical Power, HVAC • SLA and vendor support contract administration

Fort Bend Independent School District 2014 - 2015

Ft. Bend ISD - An independent school district in Sugar Land Texas

I took a role with FT Bend ISD as a Senior Systems Engineer II. In this role I managed multiple VMware servers, SANs, HP Blade and Chassis, Active Directory, DNS, DHCP, DFS, IIS, and helped manage their MS Exchange 2003 environment. I helped design and deploy additional server clusters and storage. I helped to support and manage Windows Server 2000 - 2012 R2.

• Support and maintain Microsoft Windows 2000 - 2012 R2 Enterprise server • Project Management • FERPA Compliance • Training • SLA • Active Directory, DNS, DHCP, DFS, IIS • Powershell Scripting and Reporting • MS Exchange 2003 support and maintenance • VMWare 5.0 – 5.5 installation, configuration, maintenance, template builds, P2V • Cisco UCS Blade and Chassis platform • HP EVA, MSA, 3Par SAN StoreServ Storage • HP C7xxx Blade & Chassis platform • HP DL Series Servers • Dell Servers • ITIL • Disaster Recovery Planning • Solar Winds, SCOM - System and Network Monitoring • WSUS - Microsoft patch deployment • Technical Writing • Data Center experience – Capacity Planing, Designing, Rack diagrams, Electrical Power, HVAC

CVR Energy 2015

CVR Energy - Oil refinig company

I took a role at CVR Energy and completely revamped their infrastructure. I migrated their servers from Windows 2003 to 2012 R2. Deployed DNS, DHCP HA, DFS (massive replication between locations to act as data backup), IIS. I managed day to day operations of a huge Exchange 2010 cluster and MS Lync 2010. I also managed all SAN and servers within VMware and Hyper-V.

• Support and maintain Microsoft Windows 2003 - 2012 R2 Enterprise server • Project Management • SOX Compliance • Training • SLA • Active Directory, DNS, DHCP (DHCP High Availability), DFS, IIS • Active Directory 2003 to 2012 R2 migration • Hyper-V 2008/20012R2 • Powershell Scripting and Reporting • MS Exchange 2010 Clustered Environment (multiple DAGs) support and maintenance • MS Lync 2010 support and maintenance • VMWare 5.1 – 5.5 installation, configuration, maintenance, template builds, P2V, deployment • Cisco UCS Blade and Chassis platform • Dell Compellent SAN • Dell Equallogic SAN • HP Servers • Dell Servers • ITIL • Technical Writing • SIEM - Log Rhythm - Security Log Monitoring • Solar Winds - System and Network monitoring

United Airlines 2015 - 2016

United Airlines - US airline with over 85,000 employee’s globally

At United Airlines I documented and designed systems for aircraft, airports, and lounges. This included designing UIs for aircraft WiFi systems, PCI-DSS environments, SOX environments and IOT devices. I worked with other engineers and architects to design and deploy numerous systems world wide. While working contract for UA, I took a week off unpaid to study for and pass the CISSP exam.

• Enterprise Infrastructure Engineering and Design • PCI, PII, SOX Compliance through infrastructure design • Financial systems engineering design • Project Management & Budgeting • Technical Writing and Document Control • Change Control • Windows 2008 R2 & 2012 R2 server engineering and design • Red Hat Enterprise Linux 6.5+ • HP C7xxx Blade & Chassis platform • Windows Server & SQL Clustering • Virtualization: Hyper-V & VMware • ITIL • Training • Application design

Tailored Brands 2016

Tailored Brands - is a formal clothing designer and resale

The role at Tailored Brands was short but provided a lot of hands on experience with security products. While at Tailored Brands I was messaged by a former co-worker about a security role that was opening up. I was offered the role and moved on from Tailored Brands.

• SIEM - Log Rhythtm / Correlog • Firewall - Check Point • DMZ Design • PAM/PIAM - CyberArk • PCI Compliance • SOX Compliance • Change Control • Project Management • Gemalto Encryption • 2FA - DUO • Network Security Policy Management/Orchestration

Texas Direct Auto / Vroom 2016 - 2018

TDA / Vroom - is an online car retailer

At Vroom I built the Information Security Program, designed and deployed numerous security countermeasures. This included Palo Alto Firewalls, security governance frameworks, ADDS (DNS, DHCP, Group Policy, DFS), EDR solution and a SIEM. I maanged IT and Security personnel and routinely had meetings with legal, HR and senior management.

• Security Governance Framework • Cisco ASA Firewall, IDS/IPS • Palo Alto Firewalls • PCI Compliance and vulnerability scanning • Project Management • Symantec Endpoint Protection / Sophos Endpoint Protection • Cloud Security • Policies, Procedures, Standards • PowerShell Scripting • Microsoft PKI (cert provisioning and revocation) • MS Infrastructure: Active Directory, DNS, DHCP, Group Policy, DFS • NIST, ISO 27002 • O365, Azure, Google Cloud Platform (GCP), AWS (Amazon Web Services) management • AlienVault SIEM installation, configuration and management • Security Awareness Training • Risk Management • Digital Forensics • Cyber Investigation • Department Budgeting • Penetration Testing • Application Security Testing OWASP

JP Morgan Chase 2018

JP Morgan Chase - US Based Bank

I don’t have this role on my resume or LinkedIn.

CGG 2018 - 2019

CGG - Oil and Gas data processor

CGG role was a focus specifically on network & cloud security and some Information Security. I helped build their SIEM and managed the day to day support with their MSSP. I provided security engineering and architecture assessments to help align business strategy. I also deployed instances in AWS, Azure and GCP to help log and monitor their cloud environments.

• Security Engineering & Architecture • Cloud Security: AWS, Azure, GCP Google Cloud • Palo Alto Redlock / Prisma Public Cloud • Network Security • Firewalls • IDS Intrusion Detection Systems / IPS Intrusion Prevention Systems • SIEM • Risk Assessments • Strategic Security Business Alignment • IAM & MFA • AWS Amazon Web Services: •••• VPC Deployment and management •••• Security Hub: Security standards from CIS AWS Foundations, Insight and Findings reviews •••• GuardDuty: Cloud platform security findings •••• CloudWatch/CloudTrails: Management of account audits, metrics, and event workflows

Texas Children’s Hospital 2019

Texas Children’s Hospital - US Based Hospital System

I don’t have this role on my resume or LinkedIn.

Shaw Systems 2020

Shaw Systems - Financial SAAS

My role at Shaw Systems had me manage day to day security operations, as well as review of IT operations. I worked with the business to try minimize risk and provide value to the business. I worked with Alert Logic to deploy logging and monitoring solutions. I also provided risk assessments and answered third party audits.

• Security Engineering & Architecture • Information, Cyber Security • Governance & Policy Writing • NIST Cybersecurity Framework • Risk Assessments • Cloud Security • DevSecOps • Security Awareness Training • SIEM - Alert Logic • Due Diligence Questionnaires • SOC Auditing • Incident Response

Walmart eCommerce 2020 - Present

Walmart - Worlds largest retailer with an online presence comparable to Amazon.

At Walmart I’ve helped design and secure numerous architectures for our internal and external clients. I’ve lead initiatives for the Information Security Architecture team to promote visibility and develop strategic business relationships. I’m a member of the CISO Advisory Board, the Enterprise Architecture Council, EDEE Steering Committee, and a mentor for the Walmart Mentoring Circle.

• Security Architecture & Design • Information & Cyber Security • Application Security • CISO Advisory Board Member • Enterprise Architecture Council • EDEE Steering Committee • Walmart Mentoring Circle