Linkedin | Github

SUMMARY

Senior IT/OT Network Security Engineer with 13+ years of experience specializing in manufacturing infrastructure modernization, enterprise networking, disaster recovery, and global enterprise initiatives at 16+ facilities across the USA, Mexico, and Europe.

I help manufacturers reduce business risks and boost facility output by spearheading modernization and driving technology proof-of-concept initiatives—securing 3,000+ endpoints across IT and OT networks while leading infrastructure projects with combined budgets exceeding $1M. I led multiple cross-functional IT teams of 2-7 engineers and support staff, delivered CTPAT audit compliance, and deployed Solarwinds network solutions that cut incident response time across multi-site operations.

TECHNICAL SKILLS

• Networking: Cisco | Aruba | HPE | Meraki | Enterprise Wireless | DNS | DHCP | VLAN | Wireshark | TCP/IP | Industrial Networking | Network Architecture | Network Troubleshooting | Network Monitoring | Solarwinds (NPM, NCM, NTA) | Operational Technology (OT) | ICS

• System Administration: Active Directory | Veeam | Sysinternals | WDS | MDT | Confluence | Ignition SCADA

• Operating Systems: Windows 10/11 | Windows Server | Linux

• Cloud & Virtualization: VMware ESXi/vCenter | Proxmox | Windows RDS | Azure GovCloud | Entra | Microsoft 365 | DigitalOcean | Oracle Cloud Infrastructure

• Automation & Scripting: PowerShell | Python | Batch | SQL | Git

• Security: 802.1X | RADIUS | PKI | ACL | pfSense | FortiGate | Duo | OSINT Framework | Syslog | Port Security | Network Access Control | Firewall Management | Vulnerability Management | Incident Response

• Compliance: NIST | PCI-DSS | NDAA-889 | CMMC | Purdue Model | CTPAT

PROFESSIONAL EXPERIENCE

Consolidated Precision Products – Network Security Engineer – Rancho Cucamonga, CA

Apr 2023 – Present

• Orchestrated migration and deployment of global wireless infrastructure from legacy MSCHAPv2 to EAP-TLS, permanently reduced ticket counts, improving wireless experience, network security, and shifting 4500+ wireless clients toward password-less authentication, communicating the project status with the management team.
• Regionally and globally, a go-to contact for US/Mexican/European peers to contact for guidance, user incident de-escalation, provide technology recommendations, assist in troubleshooting complex network/system issues, and mentorship.
• Partnered with business groups, internal departments, contractors, and vendors to scope out projects, analyze business requirements, obtain quotes and budgets, and resources to build out systems and network infrastructure to meet business needs/demands.
• Developed Python automation to audit 200+ network infrastructure assets, producing executive-ready reporting that improved operational visibility and supported infrastructure investment decisions.
• Spearheaded modernization of global company PKI and NPS architecture and built NPS network policies from the ground up, establishing geo-redundancy and improving security access, following vendor-published best practices and latest industry standards, and troubleshooting new/unknown issues.
• Designed and deployed OT network following Purdue Model and NIST SP 800-82, implementing best practices across 5 Southern California facilities to secure ICS systems from the growing cyberthreats and to ensure health and operational safety for operators on the manufacturing floor.
• Led cross-functional infrastructure deployments involving support technicians, systems administrators, vendors, and business stakeholders in network and security migrations and deployments of AAA, RADIUS, Solarwinds NMS, and network infrastructure modernization projects.
• Developed enterprise firmware lifecycle standards and SOPs for 200+ network switches across 16+ global sites, improving infrastructure governance while providing management with deployment and compliance reporting.
• Developed a site-specific disaster recovery plan and actionable playbook for the Southern California region for IT team to follow to quickly bring back business operations from total loss.
• Implemented and administered SolarWinds Network Performance Monitor to monitor network health, firmware compliance, and infrastructure availability across 16+ sites.

Consolidated Precision Products – System Administrator – Rancho Cucamonga, CA

Jun 2012 – Apr 2023 (Promoted)

• Led one facility to achieve CTPAT compliance status, leading the Southern California facility to become the shipping hub for international shipping, and expediting the delivery time of company goods between the USA and Mexico.
• Through collaboration with inter-departments and contractors, drove technical standards and modernization of IT system infrastructure for 6+ sites in the Southern California region and Mexico region, boosting site productivity, improving user experience, and increasing system resiliency against unplanned outages.
• Rescued a Southern California facility from $14M loss in productivity by restoring critical business operations, triggered by an account lockout on a 30-year-old ICS computer that led to a nearly 24-hour halt in manufacturing operations.
• Researched, directed, modernized, and standardized wireless infrastructure of 250+ wireless access points for 10+ sites across the Southern California region and East Coast, improving quality of wireless coverage and user experience while working within site-specific budget constraints.
• Developed, deployed, and drove streamlined lite-touch imaging service using PowerShell, WDS, and MDT, from the ground up, shortening labor time required for new user hardware deployment from 8+ hours to 10 minutes, increasing satisfaction with the management team and improving internal IT reputation.
• Provided and assisted with on-site and remote Level 1-3 support across the USA and Mexico, serving 1000+ users and 3000+ endpoints at 16+ facilities.
• Deployed Confluence and helped build out regional documentation system, reducing siloed knowledge, maintaining information integrity, fostering collaboration among team members, and empowering new team members to take proactive action in driving resolutions.
• Built out Backup & Disaster Recovery infrastructure for Southern California region, managed and troubleshot Veeam server and technical issues, automated the endpoint backup agent to protect critical assets from total data loss and accidental file deletion.

Siam Dish Thai Cuisine (Family-owned) - Dishwasher, Delivery Driver, Inventory Control

Sept 2007 - Dec 2016

• Led daily restaurant end-of-day shutdown, directed kitchen workflow, and oversaw backend business operations
• Assisted with Inventory order/tracking/stocking of restaurant supplies and goods
• Led a build-out of simple business LAN infrastructure, working toward PCI-DSS compliance
• Oversee employees' work shifts and work schedules
• Acted as English translator/communicator between internal staff and 3rd-party vendors/city authorities