Douglas A. Dietz

Senior Security & Network Engineer with 30+ years of experience designing, securing, and supporting large‑scale enterprise environments. Certified CISSP, CCNP Enterprise, and CCNP Security professional with deep expertise in firewalls, VPN, IDS/IPS, cloud security, and network architecture. Proven track record leading security initiatives, hardening infrastructure, automating operations, and ensuring compliance with HIPAA, PCI, ISO, and SOX. Known for solving complex problems, improving reliability, and strengthening organizational security posture across diverse, high‑stakes environments.

Security Certifications

• CISSP – Certified Information Systems Security Professional
• CCNP Security – Cisco Certified Network Professional Security
• Cisco Certified Specialist – Security Core
• Cisco Certified Specialist – Network Security Firepower
• Cisco Certified Specialist – Network Security VPN Implementation
• Cisco Certified Specialist – Security Identity Management Implementation
• Cisco Certified Specialist – Web Content Security

Networking Certifications

• CCNP Enterprise – Cisco Certified Network Professional Enterprise
• Cisco Certified Specialist – Enterprise Core
• Cisco Certified Specialist – Enterprise Design
• Cisco Certified Specialist – Enterprise Advanced Infrastructure Implementation

Other Certifications

• ITIL‑F – Information Technology Infrastructure Library – Foundation

Security Technologies

• Fortinet (FortiGate, FortiManager, FortiAnalyzer), Cisco ASA/FTD, Palo Alto
• IDS/IPS, WAF, DLP (Symantec), Illumio, CyberArk
• BlueCoat Proxy/CAS, Web Content Filtering
• SIEM (Splunk), Incident Response, Compliance (HIPAA, PCI, ISO, SOX)

Networking Technologies

• BGP, OSPF, EIGRP, DMVPN, IPsec VPN
• F5 LTM/GTM, Load Balancing, HA/Failover
• LAN/WAN, MPLS, QoS, SNMP Monitoring

Cloud & Infrastructure

• AWS, Azure, Akamai VPN, VZ Cloud
• Virtualization, Distributed Monitoring, TACACS/AAA

Automation & Scripting

• Bash, PowerShell, Expect, Automation Anywhere
• Automation of network/security operations

• Led security integration for newly acquired subsidiary; built and trained a new security team from the ground up.
• Managed enterprise Fortinet security stack including NextGen firewalls, IPS, and WAF across production and cloud environments.
• Partnered with BISO/CISO to deploy standardized controls (CyberArk, Illumio, Symantec DLP) across the organization.
• Drove HIPAA compliance efforts by coordinating with auditors and penetration testers to close gaps and validate controls.
• Architected HA/LB VPN solution using Akamai, improving remote‑access reliability and security.
• Designed and secured enterprise guest Wi‑Fi for corporate environments.
• Automated operations with Bash and PowerShell, reducing manual workload and error rates.
• Built Splunk dashboards and alerting to improve visibility and incident response.
• Developed external circuit-monitoring system to validate ISP SLAs and reduce outage MTTR.
• Authored security policies and procedures to standardize operations and strengthen compliance posture.

---

• Delivered global managed‑security design and support for multinational enterprise customers.
• Architected multi‑country proxy platform using BlueCoat Proxy/CAS and F5 load balancers.
• Consolidated datacenters into secure NPHs using multi‑context HA firewalls.
• Migrated enterprise services to AWS, Azure, and VZ Cloud, improving scalability and resilience.
• Collaborated with compliance teams across PCI, ISO, HIPAA, and SOX frameworks.
• Designed secure vendor and remote connectivity using IPsec DMVPN.
• Led Managed Take Over (MTO) of thousands of retail security devices.
• Automated workflows with Bash, Expect, and Automation Anywhere.
• Designed and managed SIEM, DLP, and IPS solutions for global customers.
• Served on Incident Response teams handling high‑severity security events.

---

• Delivered global network design and support for multinational enterprise customers.
• Built a distributed packet‑capture/sniffer platform across three datacenters.
• Trained NOC personnel on enterprise network infrastructure and operational best practices.
• Managed Solaris servers supporting HP NNM, Netcool, Webtop, and NetQOS monitoring platforms.
• Deployed TACACS+ servers for AAA authentication.
• Performed hardware and software upgrades across enterprise routers, switches, and security appliances.
• Provided application load balancing for web farms using Cisco, Citrix, and F5 platforms.
• Controlled enterprise network access using Cisco firewalls and security policies.
• Created DumpcapUI, a lightweight GUI wrapper for Wireshark’s dumpcap engine that enabled long‑duration and scheduled packet captures; built to avoid Wireshark stability issues and simplify automated capture workflows. Downloaded thousands of times over 10+ years.

---

• Administered security platforms including Checkpoint firewalls, ACLs, and NIDS.
• Engineered iBGP connectivity between ICI and UUNET to support backbone integration.
• Led network‑wide re‑IP to align with WCOM standards.
• Designed NAT architecture for the ICI/WCOM merger.
• Managed broadband VPN and corporate ISDN services supporting enterprise connectivity.
• Supported RAS infrastructure for 2,000+ users using Cisco AS5200/5300 and TACACS+ authentication.
• Maintained corporate dial‑out modem pools used for outbound connectivity and legacy system access.
• Monitored network infrastructure using HP OpenView.
• Controlled enterprise network access using Cisco firewalls and security policies.

---

• Managed a 97‑server, 2,780‑user MAN supporting mission‑critical operations.
• Delivered core IT services including email, file/print, and web for enterprise users.
• Monitored 26 LANs at hardware and OS levels to ensure availability and performance.
• Supported 60+ sysadmins and workgroup managers across multiple sites.
• Migrated NetWare to NT4 across the enterprise.
• Managed DEC Alpha systems running VMS/DECnet for C2IPS operations.
• Installed Data General cluster servers for Exchange and databases.
• Maintained enterprise antivirus systems including updates, monitoring, and remediation.
• Maintained RAID storage systems ensuring disk health, redundancy, and uptime.
• Installed and configured T1, E1, 256K, 10/100BaseT, and fiber circuits across multiple facilities.
• Troubleshot critical communications systems using Fireberd, Oscilloscope, and HP OpenView.
• Performed QA and acceptance testing for mission‑critical systems.
• Maintained outage logs and circuit databases for operational continuity.