8-Attachment 5- BPM003793 Key Personnel.pdf

Attachment 5 Supplemental: Key Personnel

Solicitation No. BPM003793

Network and Telephony Equipment and Services

Arizona Department of Administration State Procurement Office

100 N 15th Avenue Phoenix, AZ 85007

Answer all questions thoroughly in the spaces provided. Complete this form in full for each one of the key personnel proposed to be involved in carrying out the Work. Duplicate as needed. Insert or attach a separate resume if desired, but any attached resumes are supplemental to this form and do not substitute for this form. If there are more than three (3) Key Personnel, please utilize the same form for each additional Personnel.

1 Name: Philip James How long with company? 11 years

Current position in company: Director of Engineering How long in position? 3 years

Position for the Services: Director How much of time will be dedicated to the Services? 50 %

What primary functions will be assigned?

Philip currently oversee a team with broad range of skills from Collaboration, Network – Firewall, and Security.

Describe person’s experience in performing services like those that are to be assigned:

Philip would support State of Arizona utilizing his strong team in meeting the needs and goals of Collaboration, Network – Firewall and overall Technical Security needs.

List person’s job-related training and education:

Education and Certifications CCIE #19950 in Security

CCNP, CCDP, CCSP

Resume: filename

State Procurement Office

Answer all questions thoroughly in the spaces provided. Complete this form in full for each one of the key personnel proposed to be involved in carrying out the Work. Duplicate as needed. Insert or attach a separate resume if desired, but any attached resumes are supplemental to this form and do not substitute for this form. If there are more than three (3) Key Personnel, please utilize the same form for each additional Personnel.

1 Name: Michael Bonner How long with company? 11 years in company: SOC Manager How long in position? 4 years

Position for the Services: Manager How much of time will be dedicated to the Services? 50 %

What primary functions will be assigned?

Michael works with NOC/SOC to make sure that the client’s needs are being met within their scope. He will also assist as needed for setting up Managed Clients within GMI.

Describe person’s experience in performing services like those that are to be assigned:

Michael has extensive experience in managing the NOC/SOC as well as Incident Response. He is one of GMI senior engineers. He will assist as needed with Network, Cloud and Collaboration effort with State of Arizona.

List person’s job-related training and education:

Education and Certifications Bachelor of Science in Computer Engineering, Villanova University Certified Information Systems Security Professional (CISSP)

Security Architecture / Operations Security Program Development

State Procurement Office

Answer all questions thoroughly in the spaces provided. Complete this form in full for each one of the key personnel proposed to be involved in carrying out the Work. Duplicate as needed. Insert or attach a separate resume if desired, but any attached resumes are supplemental to this form and do not substitute for this form. If there are more than three (3) Key Personnel, please utilize the same form for each additional Personnel.

1 Name: David Gutierrez How long with company? 4 years in company: Senior Consultant How long in position? 3 years

Position for the Services: Senior Consultant How much of time will be dedicated to the Services? 50 %

What primary functions will be assigned?

David has a broad range of technical skills. He could work on Azure cloud, Network, Firewall as well as Security Initiatives.

Describe person’s experience in performing services like those that are to be assigned:

David Gutierrez is natural at focusing on customer needs and managing projects. He excels at clear communication, able to speak in technical terms, but also to explain concepts to those with less technical acumen. David can accomplish any technical task or project that he would be assigned to support the State of Arizona or their co-ops.

List person’s job-related training and education:

Education and Certifications CCNA | A+ | MCSA 2000 | Network+ Department of Defense Secret Security Clearance, 2008 Bachelor of Science in Information Technology, Colorado Technical University, 2007

Knowledge Base Palo alto Firewall (8.x, 9,x) Cisco ASA firewall (9.x) Cisco Web Security Appliance (7.7.x) Switching (Cisco from 2960 to Nexus 7000) Routing (Cisco 2900 series routers) VoIP (Cisco Unified CM 8.6 and 7900 series phones) F5 Local Traffic Manager (LTM 11.x) Symantec Endpoint Management Windows patch management (Tivoli BigFix)

GMI | Philip James

Philip James

CCIE #19950

SUMMARY

Philip James, CCIE (#19950, Security) is a Network Security Architect/Manager drawing on over 15 years of experience designing and leading complex internetworking and security projects for global companies.

Experience managing small and large teams of engineers on global projects. Philip has extensive experience securing networking technologies including Data Center, Campus, Virtualization, Wireless, and

Endpoint Security. In his role as a Network Security Architect/Manager, Philip consults with fortune 500 customers on their network security challenges and risk management issues and how to address them.

Philip worked at Cisco as a Security Consulting Engineer, with a focus on Network Admission Control, where he became the SME for the west coast. Philip also worked as a Senior Security Architect at one of

Cisco’s premier partners in the United States. A major emphasis of his role was working with the customer Data Center and endpoint security teams on the Trusted Internet Connections initiative and how to solve the associated challenges.

Philip’s network security career began when he joined a data center hosting company in 2000 as part of their network engineering team. During the years Philip has supported many Fortune 500 companies in numerous verticals, including financial, State and local government, retail and High Tech. His major technical focus was on network security.

Education and Certifications

CCIE #19950 in Security

CCNP, CCDP, CCSP

SELECTED EXPERIENCE

Alagen – Director of Architecture and Integration

GMI | Philip James 2

Philip James, CCIE (#19950, Security) leads our Architecture and Integration practice area. A gifted, veteran Network Security Architect, Philip has spent nearly 20 years designing and leading complex internetworking and security projects for global companies, and consulting with Fortune 500 companies on how to address their security challenges and risk management issues. He has extensive experience securing networking technologies including data center, campus, virtualization, wireless, and endpoint security. Philip’s other job is coaching his kids’ soccer and lacrosse teams where he lives with his family in Maine. A living kidney donor, he is also an advocate for organ donation.

Intuit – Staff Security Analyst

Staff Security Analyst responsible for many aspects of data and network security for the corporate information security team. Recent focus has been on end-to-end data center security virtualization.

Design and implementation of next generation security services including virtualized firewalls, virtualized switches, and virtualized access control. Lead architect for endpoint security program, consisting of

Network Admission Control (NAC) in remote access and local area network environments. Maintain professional relationships with business units within Intuit to provide guidance regarding security projects. Provide ad hoc technical training to cyber incident response analysts. Identify, analyze, remediate, and report on cyber security incidents. Interact with cyber intelligence analysts conducting threat analysis operations as well as numerous IT professionals performing varying technical roles within the organization.

Cisco –Security Consulting Engineer

Security Consulting Engineer that provided consulting services including Security Architecture Reviews

(SAR), Security Architecture Design / Configuration Reviews, and Cisco security product implementations.

Served as a team leader for extended engagements for very large companies. Responsible for finalization and delivery of reports for each consulting engagement; prepare and deliver formal presentations for senior (C-level) executives; develop and maintain software tools to enhance Cisco consulting services;

and contributed directly to Cisco's knowledge management initiatives by documenting and briefing other

Cisco security consultants on lessons learned from engagements and by developing new methodologies for delivering services.

Experienced installing, configuring and troubleshooting the following Cisco security technologies: Cisco

Security Agent (CSA), Cisco NAC Appliance Expert (SME for Advanced Services), 802 dot1x, IPS, ASA, CS

GMI | Philip James 3

Manager, MARS. Have a detailed understanding of TCP/IP protocols, good understanding of routing protocols, layer 2 protocols and technologies. Experienced in project management, ability to clearly communicate security planning and technology issues verbally on both a formal and informal basis to all levels of client staff or for network security industry events/seminars.

Calence – Sr. Security Consultant

Senior Security Solutions Consultant for the number one Cisco Gold partner. (Cisco partner of the year

USA and Canada, 2005) Responsible for Pre-sales Design, implementation and project management of enterprise class security solutions. Security solution experience that consists of large-scale network design utilizing enterprise caliber routing, switching, firewall, network IDS, host IDS/IPS, SEM, VPN, NAC

Appliance/Framework, CSA and security assessment tools. Responsible for developing customer-centric security solutions aligned with customer business objectives. Extensive experience integrating security solutions in complex, mission-critical environments.

OurVacationStore.com – Network Security Engineer

Administered, monitored design and maintained networking/security equipment, including switches (L2, L3), routers, Firewalls and Intrusion Detection. Managed SLAs and system monitoring. Responsible for designing and implementing a high availability security solution. (Cisco PIX and Cisco IDS) In charge of 5

International site-to-site virtual private network tunnels, terminating on a Cisco 3015 and a 3030 VPN

Concentrators. Required to maintain two datacenter co-location facilities for high availability e commerce web sites. Designed and deployed Secure LAN solutions, including VLAN’s and PVLAN’s. Coordinated and assisted Windows administrators as required. Helped develop and maintain company policies for security. Implemented a Cisco wireless LAN solution using Aironet 1200 series wireless bridge and

WLSE.

GMI | Michael Bonner 1

Michael Bonner

Michael Bonner is a Security Architect with experience designing and implementing security solutions. At the moment, Mr. Bonner is currently the manager for GMI’s Security Operations Center, as well as the

Incident Response lead for large customer incidents. Mr. Bonner has extensive experience with a variety of security technologies as well as the development of supporting processes.

Key Skills

Security Architecture / Operations

Security Program Development

Certified Information Systems Security Professional (CISSP)

Bachelor of Science in Computer Engineering, Villanova University

National MSP

Lead incident responder for a MSP that was the target of FIN-6/7 (APT), performed an assessment and remediation roadmap for a Fortune 500 MSP that suffered a full compromise from a foreign actor.

National Healthcare Organization

Enterprise Security Architect for one of the largest healthcare providers in the US. Performed a security assessment of an enterprise of 100,000 users and developed a 5-year security program roadmap. Built

GMI | Michael Bonner 2 security architecture, engineering, and operational teams; created playbooks, and was lead on large incident responses that impacted the entire organization or were executed by APTs.

International Mining Company

Lead incident responder to APT1, provided Triage and architectural remediation for Fortune 100 company. Provided guidance and oversight for the implementation of a managed service security provider including personnel responsible for level 2 operational monitoring and security response.

Assisted with the implementation of technology and processes used for security and operational monitoring of IT assets globally.

International Educational Institute

Designed and implemented security technologies including PKI based 802.1x infrastructure for 35,000 administrative and ~100,000 student users, leveraging Great Bay’s Endpoint Profiler and Cisco ACS 5.0.

Provided subject matter expertise to teammates on various routing and security technologies.

National Retailer

Designed a scalable highly available Internet edge and led a global Cisco Pix to ASA migration.

Financial Software Company

Tuned multiple SIEMs including Cisco MARS, and Q1 Labs QRadar. Designed and deployed a web filtering solution, Websense v7.x and audited multiple firewalls within the Datacenter infrastructure.

Municipal Government

Designed a campus infrastructure for several thousand users, incorporating Cisco advanced technologies, such as CSM, NAC, VPN, IDS, and Firewalls. Installed and configured Ironport M and S-series appliances for web filtering and DLP.

Graduate University

Provided a complete campus design, incorporating Cisco advanced technologies, such as VPN, IDS, Firewalls, and NAC for 1500 students and faculty.

GMI | Michael Bonner 3

International Furniture Retailer

Participated in a team of 5 that designed 2 Colo Datacenters, including VPN, Firewalls, and IDS.

Domestic Pre-Clinical / Clinical Testing Company

Developed 2 campus designs, incorporating Cisco advanced technologies, such as CSM, NAC, VPN, IDS, and Firewalls for a 3500 user Campus and a 1500 user Campus.

International Investment / Retail Bank

Created a Colo Datacenter Design and implementation for seven DCs across the US, including R&S, VPN, IDS, and Firewalls.

GMI | David Gutierrez 1

David Gutierrez

David Gutierrez is a Sr. Network Security Engineer / Consultant. A natural at focusing on customer needs and managing projects to meet them, Mr. Gutierrez is a quality addition to any technical team. He excels at clear communication, able to speak in technical terms, but also to explain concepts to those with less technical acumen.

Key Skills

Network Security Architecture

NGFWs / Network Identity Services

CCNA | A+ | MCSA 2000 | Network+

Department of Defense Secret Security Clearance, 2008

Bachelor of Science in Information Technology, Colorado Technical University, 2007

Alagen, LLC – Sr. Network Security Engineer / Consultant

For more than three years, Mr. Gutierrez has helped improve security posture for Alagen clients. His work has included supporting security operations at a major healthcare provider. He also has worked on Cisco

ASA and F5 LTM.

Capgemini –Network Engineer / Consultant

GMI | David Gutierrez 2

For this hosting and outsourcing company, Mr. Gutierrez supported a multi-client datacenter and remote management clients. Companies ranged from small to Fortune 500. He supported all Cisco platforms and

F5 load balancers.

L-3 Communications –Network Communications Specialist II / ISSM

Mr. Gutierrez was part of a 2-man team that managed the enterprise network which spanned across six sites nationwide and included an AVPN running BGP and Cisco ASA Firewall. He facilitated network moves, adds, and changed in a dynamic manufacturing environment. Mr. Gutierrez designed and implemented a VoIP system using Cisco Unified CM. He also maintained antivirus with SEPM and patches with Trivoli BigFix. ISSM requirements included audits of secure computers and networks. He helped maintain the secure environment for confidential information.

KNOWLEDGE BASE

Specialties Include:

• Palo alto Firewall (8.x, 9,x)

• Cisco ASA firewall (9.x)

• Cisco Web Security Appliance (7.7.x)

• Switching (Cisco from 2960 to Nexus 7000)

• Routing (Cisco 2900 series routers)

• VoIP (Cisco Unified CM 8.6 and 7900 series phones)

• F5 Local Traffic Manager (LTM 11.x)

• Symantec Endpoint Management

• Windows patch management (Tivoli BigFix)