michaelkeenan RÉSUMÉ

Michael Keenan

Senior Network Security Engineer

B.S., Information & Computer Science Networking and Security, magna cum laude

I design, implement, and secure enterprise network and cloud infrastructure across healthcare, defense, and critical infrastructure. My work spans firewall architecture, SIEM operations, and Zero Trust across Palo Alto, Fortinet, Cisco, Azure, and AWS.

Portrait of Michael Keenan

14-year U.S. Air Force veteran

14+Years in security
120+Firewalls administered
11K+Security rules developed
99.99%HA uptime achieved

01 Profile

Proven record of reducing security incidents, improving uptime, and leading large-scale security deployments in regulated environments aligned with NIST, ISO 27001, HIPAA, and PCI DSS.

02 Professional experience

MAY 2025 - PRESENT

Information Security Systems Engineer

L3Harris Technologies / Remote

  • Validate Fortinet FortiGate security designs and configurations across 14 sites for an Australian Defence Force and airport cybersecurity infrastructure upgrade.
  • Review 2,000+ pages of CDD/SDD documentation for compliance before third-party implementation.
  • Validate Splunk SIEM, Cisco Threat Grid, and Imprivata PAM designs against security requirements.
  • Use in-house AI compliance tools to improve documentation validation and implementation accuracy.
  • Support R&D on an in-house security posture and NOC alerting system.
FortiGateSplunkPAMDefense

OCT 2021 - MAY 2025

Sr. Network Security Engineer

LifePoint Health / Formerly Kindred Healthcare

  • Administered 120+ Palo Alto devices plus Cisco ASA, Fortinet FortiGate, Panorama, and FireMon across distributed data centers.
  • Engineered high-availability FortiGate solutions that achieved 99.99% uptime and removed single points of failure.
  • Developed 11,000+ security rule sets across routers, switches, load balancers, and network management platforms.
  • Resolved 300+ security incidents with segmentation, ACLs, and IPS, reducing incident rates by 20%.
  • Led Azure security architecture and Zero Trust controls aligned with NIST SP 800-207.
  • Integrated Kindred and LifePoint networks after acquisition using site-to-site VPNs and secure IP routing.
Palo AltoAzureZero TrustHIPAA

JUL 2020 - OCT 2021

Network Security Engineer

Integrated Resources Inc. / TECO Energy

  • Engineered segmentation and Cisco ISE Network Access Control with Check Point firewalls for the Emera Cyber Security Framework.
  • Audited DNS and firewall configurations against the framework and optimized policy compliance.
  • Modernized 25+ switches at the Eastern Operations Center and supported routers at 20+ substations.
Cisco ISECheck PointCritical infrastructure

NOV 2019 - JUL 2020

Cybersecurity Engineer

Ashley Furniture Industries / Tampa, FL

  • Tuned Darktrace IDS across 1,000+ endpoints, cutting false positives by 45%.
  • Deployed MFA for Azure applications and Palo Alto GlobalProtect VPN to 2,000+ users.
  • Designed Syslog-NG to Microsoft Sentinel log management and configured Palo Alto ACLs and URL filtering.
  • Implemented least-privilege IAM and secured operational technology integrations.
DarktraceSentinelMFAOT security

JUL 2016 - NOV 2019

Network Security Engineer / Security Engineer

ReliaQuest / Tampa, FL

  • Scoped NGFW refresh projects for clients including IHG, Domino's, and SeaWorld, influencing $2M+ in security investments.
  • Led IPsec VPN redundancy for 150+ clients and rebuilt SolarWinds monitoring for mission-critical networks.
  • Deployed Cisco FirePOWER, Palo Alto, and FortiGate NGFW platforms across client environments.
  • Engineered SIEM deployments using LogRhythm, ArcSight, and IBM QRadar with multiple threat-intelligence sources.
  • Designed security architectures, policies, standards, and roadmaps; coached new hires after promotion.

MAY 2014 - JUL 2016

Network Engineer

Arkansas Blue Cross and Blue Shield / Little Rock, AR

  • Managed enterprise firewalls, IPS, anti-malware, and network security systems.
  • Deployed IBM QRadar with 50+ log sources and tuned correlation rules.
  • Deployed SSL/TLS VPN with MFA for 500+ users and administered 50+ PKI certificates.
  • Implemented Blue Coat SSL inspection and identity-based policy; mapped network paths for operations.

MAY 2012 - OCT 2016

Cyber Systems Operations, TSgt/E-6

Arkansas Air National Guard / Little Rock AFB, AR

  • Supervised a 4+ member team in a TS/SCI facility, overseeing tickets, rollouts, and enhancement projects.
  • Managed accounts, access, and patching for 150+ systems and supported secure intelligence operations.
  • Delivered TCP/IP and security training and executed uptime remediation plans.

MAY 2002 - MAY 2012

Aerospace Maintenance Technician

United States Air Force / Little Rock AFB, AR

  • Supervised six airmen as an NCO, maintaining mission-critical aircraft and equipment valued up to $288M.
  • Helped establish the first joint Active Duty/Guard unit for eight aircraft valued at $1.6B.
  • Partnered with Lockheed Martin to integrate 177 maintenance laptops for flight-line technical data.

03 Technical expertise

Firewalls & network security
Palo Alto (Panorama), Fortinet FortiGate, Cisco ASA / FirePOWER / FTD, Check Point, F5 ASM / LTM, NetScaler, Blue Coat, FireMon
SIEM & monitoring
Splunk, IBM QRadar, ArcSight, LogRhythm, Microsoft Sentinel, Syslog-NG, Darktrace, Cisco Threat Grid
Identity & access
Cisco ISE, TACACS+, Active Directory, Imprivata PAM, MFA, PKI, SSL/TLS
Cloud & infrastructure
Microsoft Azure, AWS, VMware vSphere / ESXi, Cisco Nexus / IOS, SolarWinds, DNS, TCP/IP
Frameworks & practices
Zero Trust (NIST SP 800-207), NIST 800, ISO 27001, HIPAA, DevSecOps, third-party risk

04 Education

05 Clearances & certifications

Certifications history
CISSP · GSEC · CCNA · AZ-900
Current clearance
Public Trust / L3Harris
Prior clearance
TS/SCI / 2013-2016

CISSP, GSEC, and CCNA are expired. AZ-900 is listed without an expiration.

06 My YouTube channel

Knowledge sharing / since 2018

Founder and content creator at Michael Keenan LLC, publishing security tutorials on YouTube.