Clay Haynes

Design and develop tooling to simplify deployment tasks for multiple network platforms. Manage network security for Crowdstrike's production environment. Lead projects across multiple teams from design to implementation. Establish network security standards and monitoring of security posture across the environment.

Key Accomplishments:

• Built a firewall policy conversion tool using python which reduced firewall conversion times from several weeks to an hour per device
• Deployed Firemon Security Management Platform which reduced auditing efforts by 25%
• Designed a firewall ACL management solution to clean up and standardise ACLs across a fleet of 1000 network devices
• Developed and deployed Ansible Templates for Fortinet Firewalls which reduced deployment times from weeks to a single day

Design and migrate legacy network stack to BGP/EVPN/VXLAN. Deploy and maintain A10 load balancing environment introducing Anycast, L2DSR, and L7 reverse proxy concepts for a highly-available architecture. Develop tools to automate tasks or gather metrics for deployment and troubleshooting. Work across teams to ensure network and security standards are being considered. Introduce technical design documents to introduce new ideas or define standards across the organisation.

Key Accomplishments:

• Built a firewall route snapshot solution using python which provides an accurate view of the firewalls' route table
• Migrated business applications from Azure to On-prem which increased performance of the applications and significantly reducing cloud spend
• Deployed A10 load balancers using Terraform, reducing deployment times from days to hours
• Deployed a datacenter fabric using BGP and EVPN which increased network capacity by 500%

Design and deploy network flow monitoring solution to support DDoS detection and traffic engineering services. Architect of Twitter's Zero Trust Network Access strategy. Work across teams and organisations as an infrastructure and security shepherd to provide guidance about secure development. Write and implement ad-hoc tools, integrating them into a CI pipeline to automatically update the tools as new versions are released. Develop a service to build a Source of Truth for network Access Control Lists.

Key Accomplishments:

• Deployed a new network flow analysis solution which increased network visibility and analysis
• Deployed a Zero Trust remote access solution which reduced the demand for a legacy VPN solution by nearly 25%
• Reduced tool deployment speeds by 90% by integrating tool development into a CI pipeline

Senior Network Security Engineer

Plan and deploy network security design across four sites for third-party vendors in trust and safety department using SSLVPN solution. Enable automation teams to dynamically update hosts by revitalising internal stateless filters and security enforcement points. Devise visualisation tool to take XML output from Juniper routers, output HTML, and display to non-technical users. Implement mitigations to address security issues in PCI-scoped networks during a PCI Audit. 

Key Accomplishments:

• Reduced operational response time from 1 week to 1 day by modifying and improving configuration templates used across Twitter's network infrastructure. 
• Developed new remote access solutions and steered global expansion of trust and safety services by 10X. 
• Augmented network capacity to cloud providers from 1Gbps to 100Gbps while maintaining strong security posture. 
• Decreased SSL VPN issues by 50% by deploying Passthrough Proxy and Anycast services. 

Headed multiple network and security design assessments, including configuration analysis and proposed mitigation solutions to strengthen network integrity and reliability. Spearheaded design and deployment activities for multiple datacenter security solutions utilising high-end SRX clusters (SRX5k series). Created automation scripts to automatically deploy VM Environments for training classes utilising python, chef knife, and bash. Served as an Active instructor for Pulse Secure and Palo Alto Networks with high ratings from students as well as prepared detailed presentations on ethernet VPN and presented at CHINOG 06 and BOSNOG. 

Key Accomplishments:

• Improved lab and training virtual environments to efficiently utilise datacenter resources along with automation of essential components of training environment, reducing deployment time of new labs from a week down to 4 hours. 
• Contributed to Juniper Networks Certified Design Specialist - Security Exam (JNCDS-SEC). 

Designed and deployed fleets of Juniper SRX firewalls with managed nodes in four continents. Used MAG and SA Series for implementing multiple Global SSLVPN solutions for 20,000+ concurrent users. Devised and maintained CRM solution powered by Salesforce to deliver business intelligence, automation, and accountability across the organisation. Tailored Splunk solution for long-term log-management and wrote scripts (bash, PowerShell, python) to help with automating repetitive tasks. Executed in-depth discussions and presentations on topics such as virtualisation security, disaster recovery, and mobile security. Deployed and maintained MX Series, EX Series, and SRX Series solutions for multiple customer environments. Piloted customer deployments from pre-sales to post-installation operations; acted as the Technical liaison between customers, vendors, and account managers to resolve issues. 

Key Accomplishments:

• Enhanced Security Operations Center services, slashing detection and triage times from 60 minutes to 15 minutes. 
• Minimised physical infrastructure requirements (network/server hardware) by 95% to support internal and customer-facing services; refurbished physical infrastructure to migrate to ~100% virtualised environment. 
• Conducted training for staff to guide on solving complex customer issues and deployments, improving customer satisfaction. 

Conducted research and managed a core switch replacement while installing, configuring, and maintaining Juniper SSL VPN system. Designed, developed, and implemented servers, fibre-channel SAN, and external storage for a Document Management System. Led development of 10 Small Form Factor computers for daily use and installed anti-virus, anti-spam, and content filtering systems. 

Assisted in system migration from Novell 4.1 to Windows Server 2003. Developed in-house solutions for patch management, computer image deployment, and application deployment. Maintained Infrastructure, as well as assisting students and teachers with a variety of technological questions.