Intel CorporationSenior Network Security Engineer/Architect, focused on Remote Access solutions
Jun. 2016 - Oct. 2021Jerusalem, Israel- Ensured corporate remote access service is designed, operated and maintained using best security practices, adhering to InfoSec standards and frameworks. - Created architecture, design and documentation of remote access (on-prem & cloud) solutions, securing connectivity with 3rd party networks, M&As, tailored to customer needs. Evaluated new products via RFx process.
- Product/solution management through different lifecycle stages, roadmap definition.
- Technical lead for a global team of engineers. ๐๐ฒ๐ ๐๐ฐ๐ต๐ถ๐ฒ๐๐ฒ๐บ๐ฒ๐ป๐๐:
โข ๐๐ผ๐ฉ๐๐๐ญ๐ต ๐ถ๐ป๐๐๐ฎ๐ป๐ ๐ฉ๐ฃ๐ก ๐ฐ๐ฎ๐ฝ๐ฎ๐ฐ๐ถ๐๐ ๐๐ฝ๐๐ฐ๐ฎ๐น๐ถ๐ป๐ด - Designed and led integration of on-prem and public cloud hosted virtualized VPN solutions to transition over 100,000 employees to fully remote mode of work within just three weeks.
โข ๐๐ถ๐ณ๐ณ๐ฒ๐ฟ๐ฒ๐ป๐๐ถ๐ฎ๐๐ฒ๐ฑ ๐ฅ๐ฒ๐บ๐ผ๐๐ฒ ๐๐ฐ๐ฐ๐ฒ๐๐ โ Improved the adoption of โLeast privileged accessโ security principle by changing architecture and design of the corporate remote access solution to offload authorization decisions to external PDP (Policy Decision Point). Laid the groundwork for ZTNA for remote access.
โข ๐๐ผ๐ง ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ - Designed and integrated a secure multi-domain solution for IoT devices used by smart building systems.
โข ๐๐ฎ๐๐ฎ-๐ฑ๐ฟ๐ถ๐๐ฒ๐ป ๐ฅ๐ฒ๐บ๐ผ๐๐ฒ ๐๐ฐ๐ฐ๐ฒ๐๐ (๐ฅ๐) ๐๐ฒ๐ฟ๐๐ถ๐ฐ๐ฒ โ transitioned Remote Access to become a data-driven service, enabling data-driven decision making to: 1) Improve visibility into overall service state, 2) Uncover security and configuration related problems, detect anomalies, 3) Improve capacity planning and increase the efficiency of resource utilization.
โข ๐ฅ๐ฒ๐บ๐ผ๐๐ฒ ๐๐ฐ๐ฐ๐ฒ๐๐ ๐๐ผ๐น๐๐๐ถ๐ผ๐ป ๐ฅ๐๐
- Led vendor engagement, security and functional requirements definition, lab testing & PoC, solution architecture, design & integration. Resulted in more advanced product selection, improving ZTNA capabilities.