John Larson

Resolved complex performance bottlenecks and system outages across critical security devices and network equipment, optimizing uptime and operational efficiency.

Spearheaded the deployment of Cisco Secure Workload (CSW) to establish Zero Trust Network Access (ZTNA), micro-segmenting applications and configuring precise rulesets for Cisco FTD and Check Point firewalls, reducing attack surface.

Automated the deployment of Cisco Secure Workload (CSW) agents across server environments, enhancing security visibility and operational efficiency through scripting.

Developed and maintained Infrastructure-as-Code (IaC) pipelines using Terraform for automated provisioning and configuration of network devices, improving deployment speed and consistency.

Integrated CI/CD frameworks and Agile methodologies for script development and CSW agent deployments, accelerating feature delivery and improving code quality.

Consulted with SMEs to analyze Application Dependency Mapping (ADM) reports, translating complex application requirements into precise firewall rulesets for mission-critical systems.

Mitigated critical security vulnerabilities (CVEs) by applying timely patches, updating firewall rulesets, and managing Cisco Secure Workload (CSW) agents, strengthening infrastructure defense.

Streamlined CSW agent deployments by migrating from legacy package building to automated installations via Ansible and the CSW agent console, significantly improving deployment efficiency.

Automated ACI contract updates using Ansible and Terraform, eliminating manual 'cut and paste' methods via APICs and improving configuration accuracy and deployment speed.

Collected and analyzed critical device metrics (memory, utilization) from ACI network equipment across primary and secondary data centers, integrating data into Tableau and Datadog for enhanced reporting.

Provided comprehensive network infrastructure support for Cummins Power Systems across headquarters, data centers, manufacturing sites, warehouses, and product labs, ensuring operational continuity.

Engineered and implemented robust network segmentation via firewalls, isolating production, manufacturing, and testing networks from the enterprise, effectively securing non-compliant SCADA, HVAC, and EHS devices.

Designed and deployed dedicated network infrastructure for cybersecurity product testing labs, supporting both blue and red teams in developing and validating advanced security solutions.

Managed and coordinated external vendors for voice, data cabling, security, and access control systems, ensuring seamless integration with facilities networks and project timelines.

Authored comprehensive Standard Operating Procedures (SOPs) and departmental documentation, standardizing operations and enhancing cross-functional communication and support efficiency.

Managed the end-to-end network infrastructure across McGough's headquarters, warehouses, regional offices, field sites, and data centers, ensuring reliable connectivity for all operations.

Successfully virtualized and migrated on-premise data center environments to regional redundant data centers, enhancing disaster recovery capabilities and business continuity.

Led the migration of Checkpoint security appliances to Cisco ASA Firepower and Cisco AnyConnect, modernizing security infrastructure and improving threat defense capabilities.

Maintained and monitored a diverse array of network equipment, including routers, switches, firewalls, WLAN controllers, APs, and voice systems, ensuring optimal network performance and security.

Managed robust perimeter security using Checkpoint Provider-1, Cisco ASA firewalls, and Cisco FWSMs, ensuring comprehensive external threat protection.

Configured and managed critical network security components including firewalls, IPS, proxy services, web filtering, DLP, and secure remote access, safeguarding sensitive data and network integrity.

Successfully migrated multiple legacy firewalls (Juniper, SonicWall, Checkpoint) from acquired entities to standardized Cisco ASA firewalls, streamlining security operations and compliance.

Provided lead support for critical network infrastructure across diverse business unit facilities, including data centers, offices, labs, and manufacturing sites, ensuring robust operational continuity.

Directed the virtualization and migration of on-site data centers to geographically dispersed regional colocation facilities, enhancing redundancy and disaster recovery capabilities across the US.

Maintained and continuously monitored a comprehensive suite of network equipment, including routers, switches, firewalls, WLAN controllers, and wireless APs, ensuring peak performance and security.

Managed critical network infrastructure components including Nagios, Infoblox, F5 Big IP LTM, Cisco ACE, Cisco WLAN, RSA SecureID 7, and Cisco ASA firewalls, optimizing network performance and security.