Sean Pluchino (Pluch)

Network Security Engineer with 15 years of experience designing, implementing, and supporting enterprise network and security infrastructure across global manufacturing and corporate environments. Extensive hands-on experience with Palo Alto Networks firewalls, Cisco ISE, Azure, VMware, Windows Server, Active Directory, DNS/DHCP, and enterprise routing and switching. Proven ability to troubleshoot complex network and security issues, implement secure infrastructure solutions, and support large-scale enterprise environments.

Recognized for delivering infrastructure modernization projects, strengthening network security through segmentation and policy management, and providing reliable operational support while collaborating with cross-functional teams.

Network Security Engineer - Zoetis Inc

(2023-02)

• Oversaw a global environment of next-generation firewalls across 49 manufacturing sites and 100 office locations utilizing Palo Alto Panorama for centralized control.
• Investigated vulnerability reports and designed vulnerability remediation efforts.
• Designed and enforced firewall policies, traffic inspection controls, and network segmentation strategies to reduce the attack surface and limit lateral movement across the enterprise.
• Procured and deployed $1M in infrastructure equipment as part of the company's firewall expansion initiatives from solution designs through implementation.
• Led three merger and acquisition integrations involving 1,200 users across 15 sites by securing acquired environments through firewall segmentation, policy standardization, and secure network integration, ensuring a seamless transition while maintaining enterprise security standards.
• Led a $200K project to deploy wireless connectivity to 20 restricted manufacturing sites.
• Designed and implemented 24 virtual Windows Server environments hosting Palo Alto User-ID agents, ensuring reliable identity mapping and authentication services.
• Designed and implemented security architecture across two Azure regions using Palo Alto virtual firewalls to inspect north-south and east-west traffic.
• Managed a 14-node Cisco ISE environment hosted on VMware, supporting enterprise wireless authentication and TACACS+ administration, performing upgrades and complex RADIUS/LDAP troubleshooting to maintain reliable identity and access services.
• Performed advanced troubleshooting of routing, DNS, IPsec VPN, authentication, and application connectivity issues utilizing packet captures, traffic analysis, system logs, and security telemetry.
• Utilized Infoblox for DNS, DHCP, and IPAM services, ensuring secure and reliable enterprise name resolution and address management.
• Managed 300 Active Directory accounts, group memberships, and access permissions.
• Leveraged AI-assisted troubleshooting and automation tools to reduce network and security issue resolution times by 20%.

Specialist Engineer, Professional Shared Services - NTT Limited

(2010-10 - 2022-12)

• Performed firewall policy cleanup for a large enterprise client, reducing total policies by 25% and improving rule clarity, manageability, and security posture.
• Established Palo Alto Zone Protection Profile Baselines and configuration standards for a large enterprise across four data centers, strengthening defenses against reconnaissance, spoofing, malformed packets, and denial-of-service (DoS) attacks.
• Implemented Fortinet firewalls for an automotive manufacturer across four production lines, created isolated air-gapped environments that restricted access unless physically connected.
• Engineered Cisco routing and switching solutions supporting enterprise WAN modernization, including a 264-office migration from RIP and EIGRP to OSPF and improved enterprise routing design standards.
• Delivered Riverbed WAN optimization solutions for enterprise customers, integrating centralized management, coordinating customer circuit activations, and supporting ISP service turn-ups to improve network performance and operational readiness.
• Delivered Cisco Unified Communications design, configuration, and deployment services for enterprise customers, including on-prem VOIP and collaboration solutions that strengthened infrastructure integration and operational readiness.
• Deployed Cisco voice and video infrastructure across an 11-ship cruise fleet supporting 6,000 to 10,000 IP-enabled devices per vessel.
• Deployed and configured Cisco data center switches across 12 data centers for a cloud provider, applied standardized baseline configurations, validated network connectivity, and transitioned systems to the Level 3 operations team for advanced configuration and production support.

Network/Telephony Engineer Manager - Greenfield Online - Wilton, CT

(2007-10 - 2010-07)

• Led telecommunication system implementations initiatives across 120 enterprise locations.
• Architected the global implementation of Internet and MPLS network circuits for voice and data.
• Managed telecommunications and networking infrastructure budgets while overseeing vendor relationships for global equipment and service providers.

Business Management - Housatonic Community College