Jason Murray, PEng 624 Amaretto Avenue, Pickering, ON, L1X 2V2 905-831-4016 jmurrayat_private Experience GROUP TELECOM FEB 2001 - PRESENT LAN/WAN & SECURITY SPECIALIST * Performed audit of corporate network architecture, and recommended changes to remedy identified weaknesses, including scalability issues, performance problems, and security deficiencies. * Leading the team responsible for selecting a new enterprise anti-virus product, that will provide automated distribution of signature updates, on-demand and on-access scanning, and a centralized console for managing virus outbreaks. * Spearheading the effort of hardening existing servers in order to close security vulnerabilities discovered by a third party audit. * Evaluate the security impact of product offerings on Group Telecom systems infrastructure. * Responsible for reviewing and approving any changes to existing systems that have potential security implications. * Monitor various security mailing lists and inform application owners about possible threats to their systems. CLEARNET 1996 - 2001 SECURITY SPECIALIST JUNE 1999 - FEB 2001 * Performed a security review of company systems and processes. This was done both on a larger, company wide basis and on a more focused basis for various individual systems. Focused reviews were recently done on the following systems: * WAP server cluster and supporting access devices * Network perimeter architecture, this includes network architecture, firewall policy, intrusion detection system, etc. * Web portal architecture * Provide technical and procedural security expertise to groups within the company to assist in ensuring that best practices are followed and the company policies are adhered to. * Responsible for reviewing and approving any changes to existing systems that have potential security implications. * Update and improve on existing security policies, this involves writing new policies if existing policies do need a give need. * Installed, maintain and operate the distributed firewall cluster. The cluster has 10 firewalls in various parts of the country. * Designed, deployed, maintain and monitor the intrusion detection system. The system has a total of 4 network sensors, and 100+ host sensors. * Perform ongoing vulnerability assessments of information resources using a variety of tools, and assist with remedying the flaws discovered. * Monitor various security mailing lists and inform application owners about possible threats to their systems. * Administer and operate the external DNS system. * Investigated and designed the architecture of the load balancing and SSL acceleration of the myclearnet.com portal web servers. NETWORK ENGINEER MARCH 1998 - JUNE 1999 * Designed and implemented the perimeter network and security architecture of the Internet point of presence. This included DMZ architecture, firewall configuration, placement of intrusion detection engines, etc. * Involved in the initial design, ongoing evolution and maintenance of the engineering national IP backbone. * Designed, deployed and maintained the iDen mobile IP infrastructure. * Engineered and installed PCS circuit switched data infrastructure. * Implemented a performance monitoring system used to monitor the backbone routers. NETWORK ANALYST MAY 1997 - MARCH 1998 * Evaluation, selection, deployment, administration and ongoing operation of performance management systems for Clearnet's two wireless networks. * Shared pager responsibilities for various equipment within Clearnet's networks. INTERNET DEVELOPER SEPT 1996 - DEC 1996 * Design and development of a system to deliver email to the MIKE handset. * Redesign of web based system to deliver messages to MIKE handset. NEWBRIDGE NETWORKS JAN - APR 1996 TESTING TECHNICIAN * Testing the tcp/ip stack of ViVID Yellow Ridge ATM/Ethernet combination hub/router. * Implementation of automated testing suite for the ViVID Yellow Ridge. HOOPP MAY - AUG 1995 SOFTWARE DEVELOPER * Design and deployed an application to facilitate distribution of pension materials. * Development of an application to track software versions and revisions. UNITEL TORONTO JAN - APR 1994 TESTING TECHNICIAN * Installation and troubleshooting of an orderwire system on Fujitsu SONET equipment. Education UNIVERSITY OF TORONTO 1998 - PRESENT MASTERS OF ENGINEERING IN COMPUTER ENGINEERING Specializing in Information Security UNIVERSITY OF WATERLOO 1992 - 1997 BACHELOR OF APPLIED SCIENCE IN COMPUTER ENGINEERING Senior level courses focusing on computer networking, digital communications and software development Technical Skills In depth knowledge of the following products and technologies: * Checkpoint Firewall-1 * Cryptography * ISS RealSecure * ISS SystemScanner * ISS InternetScanner * ISS DatabaseScanner * Solaris * Windows NT/2000 * Linux * OpenBSD * Sendmail * DNS/Bind * Cisco 36xx/4xxx/7xxx series routers * Cisco Catalyst Switches Programming experience with the following languages: * C * Perl * Shell * Tcl Exposure to or knowledge of the following products and technologies: * HP/UX * HP OEMF (network management framework) * NewNet SMS (short messaging product) * NewNet Metrica (performance management) * Lucent Autoplex (CDMA wireless system) * Lucent Autopace (performance management) * Lucent Billdats (billing collection) * Motorola iDen (GSM-like wireless system) * iPlanet Enterprise Server * WAP (phone.com) * LDAP and directory services * IPSEC and VPN * Web development * PKI * x.509c certificates * SSL/TLS Professional Memberships * IEEE * IEEE Computer Society * IEEE Communications Society * ACM * Usenix * Computer Security Institute Personal Interests * Impacts of technology on society, especially as it relates to privacy issues * All things relating to computer, network, and information security * Training and working with my Bernese Mountain Dogs * Cycling, mountain, road, racing, etc.