Rudolf Eggelbusch-Datacenter Engineer, Network & Security Administrator
Check rate
Experience
Datacenter Engineer, Network & Security Administrator
International insurance group
Operation and further development of the network and security infrastructure.
Monitoring, analysis and resolution of network and security incidents.
Cross-department collaboration with other specialist teams for operations, further development and reporting.
Firewall vulnerability analysis.
Firewall rule approvals.
Troubleshooting IP communication issues in the network and firewall infrastructure.
Security-critical IT infrastructure, processing of personal data, compliance with legal regulations.
Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5
Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI
F5 migration project as sub-project lead/consultant / Cybersecurity Consultant
Healthcare, content and datacenter provider for health insurance companies
Analysis of the current state of 500 virtual servers and development of various migration scenarios to the new F5 load balancer infrastructure.
Sizing calculations, capacity analysis. Reporting as sub-project lead.
Adjustment of WAF policies (Web Application Firewall).
Vulnerability analysis.
Firewall rule approvals.
Troubleshooting IP communication issues on Palo Alto FW.
Products: F5 LTM VPR-B2250, F5 5200v, F5 R12600, Journeys tool, BIG‑IP Application Security Manager (ASM), F5 Release V14 & V17, Palo Alto Networks Firewalls
Network and Security Administrator (Firewall Rules / VPN Access)
Municipal utilities NRW
- Technical support and third-level support for LAN networks / firewall security / VPN access.
- Administration of VPN access.
- Setup, revision and verification of existing firewall rules.
- Coordination of LAN and security service providers.
Security Architect / Firewall Auditor
German Glasfaser
Internal firewall auditor.
Overall review and assessment of firewall rules with the goal of raising the security level of the IT/ISP areas.
Recording all audit findings/events and improvement suggestions with specialist departments.
Re-certification of existing firewall rule sets, establishment of re-certification and request processes in FW administration/change requests.
Reporting on issues and findings related to firewall rules during the audit.
Showing possible solutions to prevent security threats.
Products: Fortinet Firewalls, Forti Manager, Forti Analyzer, Sophos Firewall, Palo Alto Networks Firewall, Shorewall Firewall
Sub-project lead / Security Consultant - Worldwide Firewall Rollout
Bayer/Arlanxeo
- Provision of a timely and technically suitable successor solution for the plant and office firewall solution and rollout for all ARLANXEO locations (based on Fortigate).
- Provider coordination.
- Technical decision papers.
- Rollout plan.
- Review and adjustment of 150 existing firewall configurations.
- Re-certification of existing firewall rules.
- Creation of a master security policy for all firewalls.
- Project reporting.
Network/Security Consultant – Deputy Project Lead (VPN Access – LMS)
Bayer/Currenta
- Provision of a timely and technically suitable successor solution for: SiZe - UMTS-VPM LMS Access, SiZe - Remote Access Points for LMS.
- Pilot project “Specific VPN Access”, solution design with technical service provider TCS.
- Provider control / service management of the service providers ITK/NetSit and TCS.
- Aruba Wireless Access Points.
- Network expansions.
- LAN & WAN connections to campus and datacenter.
- Creating and reviewing FW/VPN security policies.
- Creation of an IT process with Signavio.
Network Architect
Stadtwerke Duisburg NRW
Technical support for the Europe-wide tender “City Netz” MPLS network 100 Gbit as One Network.
Saving the SDN layer and merging all networks as “One Network” based on MPLS.
Creation of network plans / fiber optic route planning (path diversity) / checking technical tender texts.
Review of bills of materials and evaluation of manufacturer offers.
Consulting on the use of MPLS and Metro-LAN technologies.
Participation in manufacturer workshops and testing equipment for possible use in the project.
Creation and pilot test of a QoS concept for rollout in the WAN network.
Creation of an L2 Virtual Etherlink template for future MPLS L2 services with QoS.
Setup of an L2 QoS pilot link in the Duisburg city area between two hospitals.
Planning of GPON deployment (Huawei) for internet access in the new development area of Duisburg.
Technical assessment / feasibility analysis.
Capacity planning (Data-MUX) per apartment block, etc.
Workshop with Huawei – clarification on technical implementation and security questions.
Products: Huawei routers, GPON routers, Cisco routers, Cisco ACI.
Technologies: MPLS, LDP, BGP, Metro-LAN, Cisco ACI, VPWS, VRF, QoS, GPON, provider WAN solutions, MPLS-L2-VLAN.
Security Consultant
Metro Hauptverwaltung
Analysis and approval of security policy rules for the Metro Group worldwide.
Independent preparation and activation of new security policies or commissioning an external security team, changes according to ITIL standard.
Products: Algosec Analyzer, Check Point 61000 Appliance, Check Point Smart Domain Manager R80, Check Point SmartLog R.80.
Technologies: Security Access Control / VPN Remote Access, Web Security Application Gateway / SSL Application Security Gateway from Check Point.
Datacenter Engineer
AXA Versicherung
Migration of several hundred VPN connections from Check Point to Cisco ASA 5555.
Analysis of the current state, definition of updated security standards for VPN.
Planning and execution of migrations with external partners.
Products: Algosec Analyzer, Check Point 61000 Appliance, Check Point Smart Domain Manager R77-20, Check Point SmartDashboard R77-20, Check Point Virtual System Firewall VSX R76, Check Point SmartLog, Cisco ASA 5555 V9.4, F5 BIG-IP V12.1.2, Cisco Nexus 7000/5000, Netscout nGenius.
Technologies: SDN / Cisco EPIC, Cisco ACI VPN IKv2.
IP Network Planner
Thyssenkrupp
WAN MPLS migration – 300 sites worldwide.
Collection, consolidation and evaluation of operations and planning data as well as existing documentation.
Analysis of device configurations (switches, routers), comparison with the existing documentation.
Reverse engineering of undocumented physical and logical connections.
Identification of logical dependencies and possible obstacles for the migration.
Planning and implementation (creation of configuration guidelines, communication matrix and routing tables).
Verification, adjustment and re-certification of firewall rules per TK site.
Coordination and monitoring of implementation steps between operations departments and MPLS provider.
Idea and creation of a requirements specification for the UNAT tool (User-Acceptance Tool), successfully used for automated tests.
Technologies: TCP/IP, firewalling, routing, UNAT, ITIL changes.
Third Level Support / Network Designer
Evonik
Third Level Support / Network Design Services / Network Design Verification.
Network Designer: New secure worldwide OOB-Access Solution (All IP).
Design support for international multi-provider MPLS network.
Replacement of old Cisco switching network for European and ASEAN locations with Cisco 3650 switches; zero failure, zero downtime approach.
Products: Cisco ASR Router, Cisco 3650, FWSM, IDSM, CSE.
Technologies: Mutual OSPF redistribution, BGPv4, BGPv4 route filtering, BGPv4 communities, large-scale MPLS inter-VRF routing, advanced routing, IOS-XE, IOS-XR, IPv6 introduction & migration, IPv6 tunnel, IPv6 peering.
Project Engineer
HP
Migration of extensive firewall rules to new Check Point firewall systems.
Vulnerability scanning with freeware and commercial products.
Penetration testing according to BSI procedures.
Products: Cisco ASA, Check Point HP-D2, HP-D8, VMware, Check Point R70 cluster, Check Point VSX, Multi-Domain Manager, HP ProCurve switches.
Technologies: Security, FW, VPN, access, virtualization.
Security Testing: Nmap, Nessus, Wireshark, Hping, John the Ripper, Egressor, BSI OSS Security Suite, BackTrack, Metasploit.
WAN Site Planner
Bayer
WAN migration/outsourcing to Verizon VzB.
Conversion of more than 300 sites and 600 WAN lines to a new worldwide MPLS network.
Network Mgmt: Eramon.
Project Engineer
Deutsche-Bank / Postbank Bank Headquarters
Expansion and update of the existing SIEM solution (ArcSight).
Measures for SOX compliance certification in the area of security logging.
Products: ArcSight Logger, ESM, Smartconnector, Oracle Database 11g.
Technologies: SIEM, CEF, RBAC, Syslog, databases, Oracle (RAC), LDAP.
Network Automation
Bayer
Development of an EXPECT TCL script for automatic monitoring of OOB management access for 200 sites (~1000 ports).
By using the script, 4 MT can be saved per test case, ROI of the solution 2 months.
Products: Cisco product range switches & routers, DSL/analog dial-up modems.
Technologies: TCL/EXPECT.
Security & Network Architecture
Daimler/Fujitsu
Design for 4 global datacenters.
Datacenter infrastructure for 200,000 users (applications: MS Exchange, SharePoint, Lync).
Products: Cisco product range switches & routers, Cisco ASA + IPS, Nexus 5000.
Network mgmt: CA Spectrum, ManageNow.
Datacenter Relocation, Planning & Network Migration
ERGO
Planning and migration of ERGO datacenter networks into the new data center in Düsseldorf.
Products: Cisco product range switches & routers, 6500 VSS, Cisco 3750X cluster.
Network mgmt: Command.
Technologies: MPLS, VRF, LDP, EIGRP, BGP, EtherChannel, HSRP, Spanning Tree (802.1w), LACP, QoS, VoIP.
Subproject Lead: "Project Gematik" / Implementation Engineer / Test Engineer / 3rd-Level Support
T-Systems
Introduction of the health card in Germany: setup and testing of the L2TP/IPsec VPN remote access solution with PKI/smartcard authentication.
High-availability configuration for VPN and access network, security configuration of the security zone.
Took over subproject lead for "secure access network".
Operations & support (3rd level) for shared datacenter infrastructure: carrying out changes, resolving incidents (routing/switching).
Delivered VPN/security training.
Proof of concept: datacenter relocation for a state bank - reviewed the network design and verified failover safety.
Products: Cisco product range switches & routers, Cisco FWSM, Cisco CSS, F5 load balancer.
Network mgmt: Cacti, Nagios, MRTG, Peregrine ServiceCenter.
Technologies: MPLS, VRF, EIGRP, BGP, EtherChannel, tunnel interfaces, L2TP, HSRP, Spanning Tree, QoS, IPsec-HA, PKI, certificates, FW contexts.
Security Architect / Implementation Engineer / 3rd-Level Support
AXA Colonia
Design and testing of a Network Admission Control solution for 5,000 remote users (Check Point Integrity / Cisco).
Design and testing of an Identity Access Management solution for remote users based on smartcard authentication (PKI/certificates) with dynamic access rules.
Security process management: creation of security documentation for second-level support and helpdesk.
Security compliance management.
Products: Cisco ASA 5544, Check Point NGX R65, Check Point Integrity Server, Microsoft PKI/CA, ActivIdentity smartcards, Cisco ACS, Microsoft IAS, Microsoft IIS.
Network Designer / Test Lab Engineer
KDDI
Network redesign to introduce QoS in an MPLS-based network (Cisco).
Expansion of the POP (point of presence) in Düsseldorf.
Connection of an additional internet uplink for redundancy and load sharing via BGPv4.
Products: Cisco 7600, Catalyst 6500.
Network mgmt: HP OpenView.
Design/Implementation Engineer
Santander Bank
High-performance central firewall system based on Checkpoint/Nokia (VPN-1 NGX) and Cisco Catalyst 6500.
Development of a migration strategy to maintain 99.999% availability during the switchover.
Creation of security rules taking VoIP and CTI applications into account.
Maximum data throughput of the security solution: 10 Gbit.
Products: Checkpoint/Nokia (IPxxx, VPN-1 NGX), Cisco Catalyst 6500.
Support and Design/Implementation Engineer
Vodafone
Support and Design/Implementation Engineer for "ONE Network", Vodafone's international MPLS-VPN network.
Setup of VPN-IPsec remote access connections.
Cisco management automation with the "EXPECT" language.
Design for a VoIP toll bypass between international sites by linking the PBXs via MPLS (ROI < 6 months).
Products: Cisco ONS, GSR 12000, Cisco 7600, Catalyst 6500.
Implementation and Integration Engineer
Local service provider
Installation and integration of a new multiservice data & voice backbone based on MPLS.
Use of traffic engineering for load balancing and availability.
VPN services via MPLS-VPN and multiprotocol BGP.
Products: Cisco Catalyst 6500, Cisco 3800, Cisco 2800/800.
Security Consultant
Mid-sized company in the pharmaceutical industry
- Formulation of a security policy.
- Carrying out internal security audits - penetration testing - social engineering.
- Guidance toward BSI basic protection compliance and preparation of the network for certification according to BSI/ISO 17799 / ISO27001.
Security Integration Engineer
Clinic in Cologne
- Integration of a UTM (Universal Threat Management) solution for central scanning of network data for viruses, worms and email spam.
Security Concept Specialist
Mobilprovider
- Created a concept to secure billing (user cost calculation) and to increase the accuracy and availability of the billing process.
Security Specialist
Papierfabrik
- Set up a highly available network-based virus scanner and intrusion prevention system for an international company in paper processing.
Technical Engineer / Sales Engineer
Fortinet
Consulting and technical support for ASIC-accelerated UTM (Universal Threat Management) systems.
Product improvements in cooperation with product management and engineering.
Products: FortiGate, FortiManager, FortiLog.
Security Consultant
Mobile-Provider
- Created a concept for secure data exchange over the GRX (GPRS Roaming Exchange Network) of mobile network operators.
- GTP inspection, intrusion detection, and data encryption.
Security Project Engineer
Mobile-Provider
- Project for a high-performance central firewall to protect the Gi interface between the provider wireless network (UMTS/GPRS) and the internet.
Security Architect
Mobilfunktbetreiber
- Created a concept including a POC (Proof of Concept) for a large-scale universal IPsec VPN to connect partner companies' extranets.
Consulting Engineer (Mobile Solution Team)
Cisco Systems
- Security consulting in EMEA for leading mobile operators such as Vodafone, O2, Orange, and T-Mobile.
- Designed new security solutions specifically for mobile operators (GTP Inspection, URL Filtering, Secure CMX).
- Pre- and post-sales support for account teams.
- Training of the AM and SE community in the area of security.
- Troubleshooting and project support for large security projects.
Infrastructure & Security Administrator
International Import/Export Agency
- New switch infrastructure, securing network segments and internet access through a central firewall.
- Administration of Windows 2000 servers and desktop PCs.
- Drafting and integrating a security concept for desktop PCs.
MySAP Contentnetworking & Security Project
RAG-Informatik
- MySAP Contentnetworking & Security project based on a highly available Cisco CSS11500 cluster.
- Testing of the involved components, POC, creation of a highly secure operating concept, and implementation.
Security Consultant
Service-Provider
Secure management in the central management network for a web server hosting farm.
Products: Cisco Catalyst 6500, IOS Security Features.
Internetworking Consultant
Cisco Systems
Network and security consulting in Europe for leading service providers and mobile operators.
Security architect: supporting service providers in building secure security solutions based on Cisco products.
Knowledge transfer to the Cisco sales force as a member of the "Virtual Security Team".
Technologies: LAN switching, routing, MPLS, xDSL, security management.
Firewall Cluster Consultant
Bank in Polen
Securing authentication servers with a highly available firewall cluster.
Products: Check Point, Nokia.
BGP Routing Consultant
Service Provider in Polen
- POC (Proof of Concept) and setup of BGP4 routing in the service provider backbone between Cisco routers and Nokia firewall routers.
Senior Network Consultant / Senior Technical Consultant
Nokia Internet Solutions Group
Security consultant for ISP, channel partners, and enterprise customers in Europe.
Technical trainer for security and routing training courses (BGP4).
Planning highly available firewall clusters to protect ISP server farms.
Products: IP440 Firewall (IP330/650).
Network Engineer
ACI (Anixter)
WAN/LAN traffic analysis, planning, installation, and troubleshooting.
New network infrastructure for Renault-Germany in Bonn based on Bay Networks.
New network infrastructure for Continental Reifen AG in Frankfurt based on Bay Networks and IBM.
Design and integration of a new backbone for Karmann Automobile based on ATM and Token Ring.
Products: IBM MSS 8210, 8260, 8274, 8271/72, Bay Networks.
Network Administrator / LAN/WAN-Administrator
Keiper-Recaro
- Implementation of a new LAN/WAN infrastructure for more than 3,000 employees worldwide.
- Support and administration of the WAN network.
Service-Engineer / Substitute Technical Manager
Equant / ITS
Setup and commissioning of a datacommunication hosting data center in Düsseldorf.
Setup and maintenance of a service provider POP in Düsseldorf for around 200 international company branches.
Planning and installation of the IT infrastructure for United Airlines at Düsseldorf Airport.
Technologies: Frame-Relay, X.25, X.28, HDLC, SDLC, TCP/IP.
Service Engineer
Fiedler Datentechnik
- Installation and repair of computer equipment from IBM, Compaq, Toshiba, and others.
Computer Consultant
Schmitt-Computersysteme
- Consulting in the computer field.
Industry Experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Telecommunication, Manufacturing, Chemical, Healthcare, and Automotive.
Business Area Experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Operations, Project Management, Customer Service, Audit, and Product Development.
Summary
20 years of experience in IT, working for top customers with a focus on networking and security.
Proven ability to deliver high-level consulting as a permanent employee for top vendors like CISCO, FORTINET and NOKIA/CHECKPOINT at CCIE level.
Known for the ability to build effective customer relationships and meet customer, reseller and vendor goals.
Expert in networking and security in one person for design, implementation and support
IDC Security Conference Speaker
Skills
Security Compliance
- Iso 17799
- Bsi Baseline Protection
- Basel Ii
- Sox
Vulnerability Scanning / Penetration Testing
- Vulnerability Scanning With Freeware, Commercial Tools And Custom-Built Script Tools
- Penetration Testing According To Bsi Methods
- Security Testing With: Nmap, Nessus, Wireshark, Hping, John The Ripper, Egressor, Bsi Oss Security Suite, Backtrack, Metasploit
- Source Code Analysis
- Development Of Attack Methods
Application Security
- Analysis, Activation And Review Of The Vendor'S Security And Data Protection Requirements For Effectiveness At The Application And Data Layer (Order: Network Security / Os Security / Application Security)
- Review Areas: Rbac, Authentication, Encryption, Access Control, Dos Stability
Mobile-Wireless
- Technologies: Gsm, Gprs, 3g, Umts, Gtp, Smsc, Ran, Billing Charging Mediation, Lawful Interception
- Products: Cisco Cmx, Itp
- Openwave: Basic Product Knowledge
Other Areas Of Knowledge
- Project Management: Ms-Project, Sub-Project Lead In It Projects
- Operating Systems: Sun Solaris V.8, Windows 2000/2003 Server, Xp
- Linux Distributions: Debian, Gentoo, Redhat
- Open Source Security Software: Iptables, Ethereal, Nmap, Snort, Nessus, Openvpn, Metasploit, Clamav, Spamassassin
- Programming: C, C++, Perl, Visualbasic, Java, Wmi-Scripting
- Shell-Scripting: Bash/Csh
- Assembler Intel, Motorola 68k
- Database: Sql, Mysql, Ms Sql, Dbase, Clipper
- Www: Webserver: Apache, Iis
- Software: Excel, Power Point, Visio, Word, Access, Ms-Project, Corel-Draw, Adobe Photoshop, Blender-3d, Mindmanager
Languages
Education
Telekolleg II
University of Applied Sciences entrance qualification at evening school · University of Applied Sciences entrance qualification · Germany
Municipal elementary school on Helmholzstraße
Germany
Heinrich-Hertz-Kollegschule
Intermediate school leaving certificate · Electrical engineering · Germany
Certifications & licenses
ISC^2
Checkpoint Certified Security Administrator-CCSA
CHECKPOINT
Checkpoint Certified Security Engineer-CCSE
CHECKPOINT
Cisco Certified Internetworking Professional Security-CCIP-SECURITY
CISCO SYSTEMS
CISCO SYSTEMS
Cisco Certified Security Professional-CCSP
CISCO SYSTEMS
IBM Certified Solution Engineer Level II
IBM
LPI Linux Professional Level I
Linux Professional Institute
Microsoft
Statistics
Experience
Global Experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Daily Rate Distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar Freelancers
Discover other experts with similar qualifications and experience
Christian Decker
Mustafa Kederoglu
Stephan Selnerat
Andreas Antoni
Andreas Fischer
Jin-Ho Yun
Sami Bejaoui
David Bleyer
Miguel Skirl
Frank Joraschkewitz
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Datacenter Engineer, Network & Security Administrator
Christian Enderle
Pierre Gronau
Alwin Freelancer
Minh duc Freelancer
Pascal Farys
Thomas Hartung
Federico Leefhelm
Mahmoud Tadjallimehr
Alagi Mansaray
Axel Dalz
Nearby freelancers
Professionals working in or nearby Ratingen, Germany
Felix Bauchspiess
Peter Sachs-Witzel
Matthias Bullmahn
Henry Hanau
Fadi Shoaa
Dirk Volkmann
Antje Baumann
Ali Catak
Andreas Kürzinger
Alexander Döring
Most recent projects
FRATCH works with many companies and recruitment agencies. Here you will find our recently posted projects and opportunities.
