Zachary Ducker

About Zachary Ducker

I am a seasoned cybersecurity professional with experience in network security, endpoint…

Experience

1. Network Security Architect

   Mount Sinai Health System

   May 2022 — Present

   Deployed and managed Zscaler Internet Access to tens of thousands of on-site, clinic-based, and remote users.Defined policies within Zscaler for remote workers, hospital kiosks, clinical machines, and staff workstations.Designed Zscaler to implement different policies to specified user populations.Integrated Zscaler into Active Directory and enabled background SSO with the Zscaler Client Connector.Created URL filtering policies with custom allow and deny lists.Implemented Cloud App control policies within Zscaler to manage SaaS connections.Enabled malware protection and advanced threat protection via Zscaler network inspection rules.Managed PAC files within Zscaler to trigger network bypasses via PAC file entries.Worked with VPN gateway bypasses within Zscaler to properly route split tunnel network traffic.Conducted security assessments with vendors before initial product rollout or proof of concept deployment.Engaged with multiple business units to determine the best path forward when evaluating new technology solutions.Configured and managed Akamai web application firewalls.Deployed Akamai Edge DNS to isolate and protect internal DNS servers.Managed Akamai Prolexic for DDoS threat mitigation and prevention.Managed DTEX end-user behavior analytics solution.Assisted with Azure deployment and migration from colocation data centers to the cloud.Worked with Crowdstrike Falcon and integrated it into other security solutions for enhanced detection and analysis of threats.Security advisor for deploying Palantir Foundry Cloud with multiple hospital data sources.Assisted with investigations and incident response via SecureWorks Taegis XDR.Reduced attack surface by deploying network security solutions to exposed assets.Continuously scanned and monitored for network changes that introduced vulnerabilities.Utilized Algosec for firewall rule enhancement and network segmentation efforts.

Skills

• Information Security
• Cisco Routers
• Snmpc
• Hbss
• Help Desk Support
• Vulnerability Management
• Security
• Vmware
• Vulnerability Research
• Mcafee Antivirus
• Cisco Call Manager
• Troubleshooting
• Udp
• Network Design
• Cyber-Security
• Network Security
• Mac Os
• Vulnerability Scanning
• Hipaa
• Threat & Vulnerability Management
• Cisco Voip
• Lan Switching
• Security Patch Management
• Technical Support
• Networking
• Servers
• Patch Management
• Network Administration
• System Administration
• Vpn
• Server Administration
• Risk Assessment
• Sharepoint Server
• Microsoft Exchange
• Intrusion Detection
• Hyper-V
• Snmp
• Ip
• Vulnerability Assessment
• Domain Controller