Carlos Cubillos

From January 2014 to August 2016

• Member of the Network Security Project Delivery team, providing network security solutions to internal Oracle customers for several LOBs.
• Migrate network security devices such as corporate firewalls and load balancers.
• Standardize office networks.
• Implement VoIP laboratories firewall and VPN solutions.
• Deploy security controls for management energy systems, among others.

From November 2007 to October 2009

• Resolve Level 1 and 2 incidents and change requests.
• Provide firewall and load balancing provision for global customers.
• Analyze network performance through management tools and discuss improvements with senior network engineers.
• Maintain a record of equipment failures and serve as liaison with local engineers and suppliers when necessary.
• Support network security technologies such as firewalls, load balancers, proxy servers, AAA servers, IDS and other security controls.
• Receive two consecutive Pacesetter Awards for customer service (Disaster Recovery projects with Command Center & Alpina implementation).

• Environment Preparation checklist for cluster deployment: Coordinate with network team to open firewall rules to allow connectivity between master and slave nodes, managing requests for Crypto Team to create a cicd keyrings to the terraform account, add IAM policy to allow the GKE Service Account with Encrypt/Decrytp/Viewer roles, DNS registry and SSL certificates.
• Terraform variable script and GITHUB repository updates.
• Develope and update infrastructure pipelines to deploy the infrastructure needed for each Devops team, using Terraform and Bash scripts, through Kurbenetes (Google Kubernetes Engine) and EC2 (AWS Elastic Computing).
• Automate the deployment process using tools such as Jenkins for each instance (Dev-Alpha, UAT-Beta and Prod-Beta) in several regions. This also includes Istio, Apigee and Twistlock services deployment.
• Coordinate with network team troubleshooting of network issues.
• Manage security certificates for GCP instances.
• Migration from tomcat 7.0.82 to 8.5.69 to mitigate security vulnerabilities.
• Appdynamics agent version upgrade to mitigate Log4j vulnerabilities.
• Proxy configuration automated for environment ts in Australia.
• Mitigate security vulnerabilities for weak SSL Cipher suites and Tomcat-Java.
• TLS-SSL secured configuration from Apache Tomcat to Oracle Database.
  

• Transform project business requirements into technical requirements.
• Install plan for Application and Data Base Server Build:
• Internet Information Service 2016 installation and configuration.
• Apache Tomcat Server installation and configuration
• Microsoft SQL Server 2016 installation and database schema configuration.
• Integration between IIS and Apache Tomcat
• Third party solution deployment and troubleshooting.
• Installation and configuration manual.
• Coordinate with other operation teams such as sysadmins, information security, project management and vendor, future application releases.
• Other tasks: Continuous monitoring of security vulnerabilities in IT environments for Chile and Argentina.

• Provide day-to-day L1 and L2 support to both local and remote employees.
• Build, maintain and deliver productivity tools utilizing DevOps approach such as Atlassian Confluence, Jira and Crowd, Jenkins automation, Gsuite and Workplace.
• Perform periodic user access control verification.
• Develop and maintain security monitoring, logging and auditing.
• Serve as technical security lead for large complex projects that involve other engineering teams.
• Design, implement, and deploy global IT policies including information, infrastructure and network security such as: Firewall Audit on Meraki Servers Guidelines, PCI security assessment via Alert Logic Guidelines and FireEye Endpoint Security - Palo Alto Prisma Cloud - AWS Security Hub product evaluation.
• Wi-Fi Network Controller upgrade and migration at Amazon Cloud.
• Employee TechChoice and Non-TechChoice Machine Registry.
• Ensure the availability of all the IT cloud infrastructure of services and applications (Google, AWS, Contegix).

• Receive project requirements and incidents between the Oracle Data Center and its global customers, through service requests.
• Review customer requirements and design a VPN solution proposal according the best practices and technologies offered by Oracle.
• Deploy network and VPN connectivity solutions for the private cloud using legacy devices (Juniper Firewalls and VPNs) and the Oracle Public Cloud (OPC) using Corente Services Gateway or for OCI (Oracle Cloud Infrastructure) using OCI DRG VPN.
• Respond to network security incidents, identify the root cause and coordinate corrective actions.
• Escalate and prioritize customer requests and serve as liaison with local engineers and vendors.

• Manage and deliver network infrastructure, provisioning network solutions, responding to Level 1 monitoring alerts and troubleshooting campus network and remote sites (offices) issues.
• Escalate customer requests and incidents with the NOC.
• Analyze network performance through management tools and discuss improvements with senior network engineers.
• Maintain a record of equipment failures and serve as liaison with local engineers and suppliers when needed.
• Receive Q4 FY13 award (VPN provisioning for Consulting Infrastructure Services.) & Q2 FY14 award (Oracle OpenWorld Support Team).

• Identify the level of risk presented by identified vulnerabilities in customer IT environments.
• Understand and interpret technical security requirements as well as security standards.
• Create reports to communicate customers about findings and associated risks.
• Perform scheduled assessments and track remediation activities.
  Support and execute audit, compliance and security questions.