Resume of Scott Small
Scott Small
phone: 650.302.1427
7473 Dumas Drive, Cupertino, CA 95014
Objective:A Security Engineer position in a dynamic and rewarding environment that will allow me to build upon my past experiences with complex projects.
Summary:Experienced security engineer with a diverse systems administration background that spans both commercial and federal environments.
- Effective communicator and team member
- Over 10 years of experience in architecture and analysis of complex systems
- Attained a federal security clearance that involved an extended background investigation for positions of public trust
Most Recent Experience:
Sr. Security Engineer, Responsible Solutions, Ltd. October 1999 - May 2002
Primary client: United States Postal Service
San Mateo, CA
- Security Review of architecture and procedures for a national ID verification project.
- Security responsibility for and the Internet face of the USPS
- Systems Architect of a large-scale Certification Authority. Executed project through the root key generation ceremony. Created root keys for inclusion in MS Internet Explorer and Netscape Navigator. Worked with auditors and Security Officers to ensure regulatory compliance.
Network Manager, Atari Games Corporation June 1997 - September 1999
Milpitas, CA
- Replaced preexisting security infrastructure to better protect corporate assets.
- Redesigned corporate network to improve throughput.
- Performed design review and analysis for a proposed nationwide on-line gaming network.
Systems Administrator, Sequent Associates March 1996 - May 1997
Primary client: Siemens AG (Automotive Division)
Sunnyvale, CA USA / Regensburg, Bavaria Germany
- Supported a crew of German programmers on a Navigation Systems R&D effort started as a crash joint development project in Sunnyvale, California.
- Established the development team's Internet and transatlantic WAN connectivity to enable collaboration with remote team members.
- Physically relocated R&D network from Sunnyvale, California to Regensburg, Germany with minimal downtime. Remained in Germany for 4 months to provide ongoing support.
Relevant concepts and technologies:
Policy & Procedure – risk assessment, design review, policy development, forensics, incident response, capacity planning, business continuance planning, disaster recovery
Network Security - Checkpoint Firewall-1, firewall toolkit (fwtk), ipchains, service proxy, stateful inspection, packet filter, tcpdump, sniffer, NIDS
Host Security – vulnerability assessment, system hardening, system auditing, access control, biometrics, nmap, tripwire, whisker, log monitoring, HIDS
Encryption - certification authority, public key infrastructure (PKI), X509v3 certificate, CRL, PKCS, SSL, ssh, FIPS-140, key storage unit, cryptographic accelerator
OS & Systems – UNIX/Linux/Solaris/IRIX/BSD, MS Windows 95/98/NT/2000, Cisco IOS, Sun ultraSparc, Silicon Graphics MIPS, Wellfleet, Bay Networks, ICE, embedded systems
Storage - data replication, samba, SMB, CIFS, NFS, EMC Symmetrix, SymmConsole, failover, volume manager, journaling filesystem, fiberchannel, Veritas NetBackup, Alexandria,Legato Networker
Protocols/Services - TCP/IP, UDP, SMTP, sendmail, NIS/YP, DNS/BIND, LDAP, syslog