michaelkeenan
RÉSUMÉ
Download PDF View in new tab

Michael Keenan

Senior Network Security Engineer

B.S., Information & Computer Science Networking and Security, magna cum laude

I design, implement, and secure enterprise network and cloud infrastructure across healthcare, defense, and critical infrastructure. My work spans firewall architecture, SIEM operations, and Zero Trust across Palo Alto, Fortinet, Cisco, Azure, and AWS.

Portrait of Michael Keenan

14-year U.S. Air Force veteran

14+Years in security
120+Firewalls administered
11K+Security rules developed
99.99%HA uptime achieved

01 Profile

Professional Summary

Senior Network Security Engineer with 14+ years of experience designing, implementing, and securing enterprise network and cloud infrastructure across healthcare, defense, and critical infrastructure. Expertise in firewall architecture, SIEM operations, and Zero Trust frameworks across Palo Alto, Fortinet, Cisco, Azure, and AWS. Proven record of reducing security incidents, improving uptime, and leading large-scale security deployments in regulated environments aligned with NIST, ISO 27001, and HIPAA. Former Air Force NCO; current Public Trust clearance and prior TS/SCI clearance (inactive, 2013–2016).

Military Service

MAY 2002 - OCT 2016

14-year U.S. Air Force veteran. Held TOP SECRET clearance while securing mission-critical systems in TS/SCI environments.

02 Professional experience

Information Security Systems Engineer

Lancesoft (L3Harris) / Melbourne, FL

MAY 2025 - PRESENT

  • Validate Fortinet FortiGate security designs and configurations for 14 sites (IPS, application control, geo-blocking) against Critical and System Design Documents (CDD/SDD), logging 50+ design deviations for remediation before go-live.
  • Review 2,000+ pages of security design documentation for Australian Defence Force systems and critical airport infrastructure, validating FortiGate, Splunk, Cisco Threat Grid and Imprivata PAM designs against CDD/SDD requirements.
  • Automate documentation-compliance checks with in-house AI tooling, cutting review time per document set ~40%.

Senior Network Security Engineer

LifePoint Health / Nashville, TN

OCT 2021 - MAY 2025

  • Administered 120+ Panorama-managed Palo Alto NGFWs (including 16 HA firewalls across two geographically separated data centers) and 28 Cisco ASAs with FireMon, enforcing Layer 3–7 north-south and east-west policy with custom App-IDs, User-ID, EDLs, threat signatures and URL filtering for hospitals and clinics in 42 states.
  • Led a 4-engineer team that architected load-balanced Palo Alto firewalls in Microsoft Azure: a hub-and-spoke inspection design for 20+ VNets, integrated with the on-prem Panorama estate. Applied NIST SP 800-207 Zero Trust controls (identity-based policy, segmentation, least privilege).
  • Led network security integration for LifePoint's 2021 acquisition of Kindred Healthcare, connecting 30+ rehabilitation and behavioral-health hospitals through site-to-site IPsec VPNs, secure inter-organization routing and access controls.
  • Codified 200+ Azure network resources (VNets, subnets, NSGs, route tables) in Terraform and Git under an IaC pipeline, cutting manual deployment errors 30%.
  • Maintained 11,000+ security rules and ACL entries across 150+ firewall, router, switch and load-balancer rule bases, using FireMon analysis to retire 1,100+ (~10%) redundant, shadowed and unused rules.
  • Ran quarterly HIPAA/ISO 27001 access reviews across 150+ firewalls, VPN gateways and NetScaler load balancers (ACLs, IPsec tunnels, TACACS+ admin access, VIPs), retiring 250+ stale entries a year.
  • Engineered FortiGate high-availability clusters at 10+ sites, eliminating single points of failure and sustaining 99.99% availability (under 53 minutes of unplanned downtime a year).
  • Engineered split-tunnel SSL VPN for 5,000+ corporate and clinical users, offloading SaaS traffic to cut VPN bandwidth ~30%.

Network Security Engineer

Integrated Resources Inc. (TECO Energy) / Tampa, FL

JUL 2020 - OCT 2021

  • Rolled out Cisco ISE network access control (802.1X/MAB) for 4,000+ IT/OT endpoints and segmented the network into 10+ Check Point-enforced zones, closing access-control gaps under the Emera Cyber Security Framework (NIST CSF-based).
  • Secured OT connectivity between 20+ electrical substations and central control systems, maintaining GarrettCom Magnum 10RX routers and hardening their routing and communication protocols.
  • Led the Eastern Operations Center infrastructure upgrade, patching and modernizing 25+ switches to close critical vulnerabilities with zero unplanned outages to 24/7 operations.
  • Audited 30+ Cisco and Check Point firewalls and the enterprise DNS infrastructure against the Emera CSF, remediating 25+ high-risk findings, including critical DNS vulnerabilities.

Cybersecurity Engineer

Ashley Furniture Industries / Tampa, FL

NOV 2019 - JUL 2020

  • Led a 3-engineer team that architected centralized logging for Azure Sentinel (now Microsoft Sentinel) within months of its general availability, onboarding 250+ firewall, server and network log sources through Syslog-NG.
  • Rolled out MFA to 2,000+ users across Azure applications and Palo Alto GlobalProtect VPN, closing password-only access.
  • Implemented OT network segmentation and vendor remote-access security policies across 5+ manufacturing plants, isolating production systems from corporate IT.
  • Tuned Darktrace IDS models across 1,000+ endpoints and supported monitoring, cutting false positives 45%.

Network Security Engineer

ReliaQuest / Tampa, FL

JUL 2016 - NOV 2019

  • Led a 3-engineer team that rebuilt VPN redundancy for 150+ enterprise clients, including SeaWorld and Marriott, deploying 300+ redundant IPsec tunnels and restricting tunnel ACLs to required services.
  • Wrote the SOWs and SLAs for a new co-managed NGFW service (Palo Alto NGFW and F5 ASM WAF), set its policy standards and delivered its engineering, onboarding 10+ clients in the first year.
  • Scoped NGFW refreshes, wrote SOWs and recommended platforms for 20+ enterprise clients, including IHG Hotels & Resorts, Domino's and SeaWorld, influencing $2M+ in security infrastructure investment.
  • Replaced FortiGate firewalls with Palo Alto NGFWs, IPS/IDS and web proxies at 10+ enterprise clients, re-segmenting networks and tightening external access.
  • Led Cisco FirePOWER deployments (AMP, NGFW, NGIPS) for 10+ enterprise clients, writing 50+ custom Snort IPS rules.
  • Deployed F5 LTM and ASM (WAF) configurations for 40+ client applications, providing secure, load-balanced delivery.
  • Overhauled SolarWinds monitoring for all 150+ clients, adding visibility into 300+ client VPN tunnels.

Network Engineer / Little Rock, AR

Arkansas Blue Cross and Blue Shield / Little Rock, AR

MAY 2014 - JUL 2016

  • Deployed an SSL/TLS VPN portal with two-factor authentication for 500+ remote users.
  • Deployed and tuned IBM QRadar SIEM, integrating 50+ log sources and cutting false-positive offenses ~40%, while managing the Cisco ASA firewall, IPS and anti-malware stack.
  • Served on the Blue Coat ProxySG evaluation board, then configured SSL decryption to inspect 65%+ of outbound traffic.
  • Implemented Cisco Context Directory Agent to drive identity-based ASA firewall ACLs for 2,500+ Active Directory users.

Cyber Systems Operations

Arkansas Air National Guard / Ft. Smith, AR

MAY 2012 - OCT 2016

  • Supervised a 16-member network and systems operations team in a TS/SCI facility, keeping classified systems secure.
  • Administered accounts, access control and patching for 150+ systems under DoD security policy.

Crew Chief (Aerospace Maintenance)

U.S. Air Force / Various Locations

JUN 2002 - MAY 2012

  • Worked with Lockheed Martin to integrate 177 maintenance laptops tracking flight-line technical data on up to 22 aircraft.
  • Directly supervised 9 airmen maintaining mission-critical aircraft and equipment valued at up to $288M.
  • Helped stand up the first joint Active Duty/Guard aircraft maintenance unit, bedding down 8 aircraft valued at $1.6B.

03 Technical expertise

  • Firewalls & network security

    Palo Alto (Panorama), Fortinet FortiGate, Cisco ASA / FirePOWER / FTD, Check Point, F5 ASM / LTM, NetScaler, Blue Coat, FireMon

  • SIEM & monitoring

    Splunk, IBM QRadar, ArcSight, LogRhythm, Microsoft Sentinel, Syslog-NG, Darktrace, Cisco Threat Grid

  • Identity & access

    Cisco ISE, TACACS+, Active Directory, Imprivata PAM, MFA, PKI, SSL/TLS

  • Cloud & infrastructure

    Microsoft Azure, AWS, VMware vSphere / ESXi, Cisco Nexus / IOS, SolarWinds, DNS, TCP/IP

  • Frameworks & practices

    Zero Trust (NIST SP 800-207), NIST 800, ISO 27001, HIPAA, DevSecOps, third-party risk

04 Education

05 Certifications

  1. Certified Information Systems Security Professional (CISSP)

    ISC2

    Apr 2017 - Apr 2023 (Expired)

  2. GIAC Security Essentials Certification (GSEC)

    GIAC Certifications

    Nov 2017 - Nov 2021 (Expired)

  3. Cisco Certified Network Associate (CCNA)

    Cisco

    Jul 2019 - Jan 2023 (Expired)

  4. Microsoft Azure Fundamentals

    Microsoft

    Apr 2022

06 My YouTube channel

Knowledge sharing / since 2018

Watch on YouTube

Founder and content creator at Michael Keenan LLC, publishing security tutorials on YouTube.