Brett Meier

• Lead security architect and SME for deployment of telco workloads in public cloud.
• Automation lead for hyperscaler integration, supplementing cloud provider services with telco-specific enhancements for security and functionality.
• IAM policy SME for hyperscaler access/privilege management.
• Integrator for bespoke Serverless and Step Functions to manage policy compliance.
• SME for container technology conversion, with focus on security.
• Developed automation for rapid “reset and redeploy” lab environments to enable highly efficient iterative and “out of the box” deployment and destructive testing, reducing “lab reset” time from days to minutes.
• Designed and deployed National Call Testing Service for network quality validation, leveraging Open Source software, dramatically reducing solution cost and increasing availability.
• Reduced operating costs by $56M annually through network and facility consolidation, without negative impact to service availability or quality.

• Designed and deployed a commercial mobile VPN solution for a partner organization
  • High availability
    • Cloud aggregation points with BGP peering via tunnels to customer endpoints
  • Trusted Delivery
    • Hardware sealed in transit
    • All firmware signed and encrypted in transit
    • Configuration payloads encrypted and signed
• Designed and deployed a FTTH (Fiber to the Home) network for a large condominium complex
• Designed network and security infrastructure for multiple small office clients
• Sophos partner and solution manager for endpoint security and XDR for clients

Assumed an architect role for the evolution, integration, and sunsetting of the legacy Clearwire network, specifically within the domains of IP routing and security. Part of this evolution included relocating critical OAM functions from legacy data centers to a more permanent, optimized facility. Developed proof-of-concept cloud environments (OpenStack and RHEV) in prototyping lab. Recently added Network Function Virtualization to primary duties, with a focus on security (primarily SRX & vSRX).

• Migrated infrastructure services into new consolidated facility
• Integrated legacy network segments into the broader shared infrastructure
• Adjusted security posture to fall within the framework of the larger organization
• Significantly reduced operating costs by migrating to shared infrastructure
• Designed and deployed new PKI infrastructure for OAM access systems
• Supported onboarding of virtualized firewall platforms
• Lead engineer for SRX firewalls and VPNs in Clearwire network
• Redesigned and replaced legacy IAM solution with high-availability and policy + role based solution
• Deployed secure out-of-band access solution for OAM traffic in outage scenarios

Provided engineering support to Clearwire, and later to Sprint, as part of the Managed Services organization. I continued supporting critical infrastructure through its life-cycle, while adding CDN services to the ecosystem (Google and Netflix caching & peering) to reduce congestion. I also designed and deployed a provisioning system to intercept and re-provision customer devices to a new VoIP provider, dramatically reducing cost, time, and logistics involved in replacing thousands of customer devices.

• Reduced contention on DIA circuits / deferred augments
• Supported deployment of major upgrades to element management systems
• Designed caching/peering infrastructure

At Clearwire I was responsible for design and maintenance of customer-facing platforms such as DNS, as well as authoritative DNS for infrastructure. I also designed a distributed “fail-open” authentication system to contain authentication requests in the event of localized DoS events; this allowed network access to users in an impacted market, without flooding the centralized authentication systems with traffic, preventing nationwide impact. I also designed and implemented in-house PKI for provisioning to reduce cost and attack vectors associated with public certificate authorities.

• DNS infrastructure maintenance and support
• RADIUS SME for WiMAX protocol extensions
• Security audits to evolve mitigation strategies
• Implemented in-house PKI infrastructure for provisioning