Sean Carmean
Santa Barbara, California
resume@seancarmean.com
EDUCATION
B.S. Cybersecurity and Information Assurance, WGU
Certifications:
- CompTIA A+
- CompTIA Security+
- CompTIA Cybersecurity Analyst
- CompTIA Pentest
- CompTIA Project Management Professional
- Certified Ethical Hacker (CEH)
- ITIL Cloud Security
- Cisco Routing and Switching (CCNA)
- Aruba Switching Associate (ASCA)
- EC Council Cryptography Specialist
- NetScout WLAN Design and Site Survey Specialist
- Sophos Firewall Engineer
- Datto Backup specialist
SKILLS
Over a decade across networking, security, cloud, and automation. Core areas below.
- Networking: Cisco (campus, datacenter/Nexus), BigIP, Cloudflare
- Firewall: Palo Alto NGFW suite
- Wireless: Meraki, Aruba, Cisco; site surveys (Ekahau, AirMagnet)
- Automation: Python, Netbox, Nornir, Flask, CI/CD, Git, infrastructure as code (IaC)
- Security: Endpoint protection, IPS/IDS, firewall policy, security audits & remediation
- Cloud / Systems: Azure, Microsoft 365, Active Directory, Exchange, VMware
- Other: Backup solutions, SIP/PRI/PBX, datacenter & co-location management
EXPERIENCE
Enterprise role as a Network Engineer within a Fortune 100 software company.
Joined an early automation effort and built it into a full NetDevOps suite. Sole or primary developer across dozens of Flask-based tools, custom Python packages, and CI/CD pipelines, along with the engineering standards (code structure, development lifecycle) the team now operates on. Established the principles and governance around Netbox as the network source of truth, and integrated tooling with the major platforms across the environment (Palo Alto, Cisco, Meraki). Supports a large (10,000+) employee network and a multi-datacenter public cloud infrastructure.
Technical duties include:
- Automation/Code/Programming: Architecture and support of network development operations (NetDevOps), spanning backend and frontend network tooling. Infrastructure as code (IaC) development primarily in Python, using Netbox, Nornir, and Flask. Designed models, programs, and tools that expanded system capabilities and empowered end users.
- Firewall management: Full-stack Palo Alto firewall design and operation for large internal and external user groups.
- Route/switch: Design and operation of large-scale enterprise network infrastructure.
Accomplishments
- Transformed a one-person scripting effort into a full NetDevOps practice — architecture, tooling, CI/CD, and engineering standards — within a Fortune 100 network team.
- Authored dozens of Flask tools and custom Python packages used daily by the network team.
- Established the principles and governance around Netbox as the authoritative source of truth, maintaining its integrity across a 10,000+ node global network.
- Designed the canonical allow/block controls across the entire organization (entire security/network stack), reducing both risk surface and outages by over 90%
Served as a point of escalation for the Technical Support team as Lanspeed, a managed IT service provider. Responsible for assessment, onboarding, and management of small to large businesses. Duties include advanced technical support involving diagnosing and solving problems related to hardware, software, and networks. Responsible for project work involving planning and organizing technical projects from conception to completion, and maintaining project schedules and costs through regular monitoring, coordination, and problem solving. Primary vendors used include Microsoft, Sophos, Aruba, and Datto. Most aspects are customer facing or customer involved. Customers include local government and private businesses.
Technical duties include:
- Firewall management: Design and operation of firewall infrastructure, primarily Sophos, followed by Palo Alto and Fortigate. Significant remote access (VPN) work across IPSec, SSL, and GRE.
- Servers: Server infrastructure across Active Directory, Exchange, and VMware environments.
- Cloud systems: Administration and management of cloud infrastructure, primarily Microsoft 365 and Azure.
- Business Continuity: Continuity strategy and operation, primarily Datto devices.
- Wireless: Aruba wireless deployments ranging from small (2-3 AP) to large (1000+ AP) installations.
- Security: Owned client security including endpoint protection, firewall policy, and IPS/IDS. Led security audits and remediation, guiding multiple businesses' security practices against evolving threats.
Accomplishments
- Guided security strategy and practices for multiple businesses including local government and private enterprises.
- Led full lifecycle onboarding and technical management across a diverse client base ranging from small business to enterprise scale.
NOC point of escalation for an internet service provider. Designed and configured WAN and routing solutions (Adtran, Cisco ASR/ISR), supported Layer 2 switching and telecom/voice (SIP, PRI, PBX), and handled facilities and Central Office operations. Participated in on-call rotation for emergency response.
On-site professional services engineer; 50-80% travel to customer locations. Deployed large-scale wireless infrastructures (30-100 APs), performed datacenter migrations, and served as sales engineering advisor. Created reporting and engineering standards adopted by the broader PS team.
Testing and configuration of Cisco hardware across all product lines. Introduced scripting and automation to improve testing workflows; implemented new procedures for high-end devices.