Brandon Extra Avenel, NJ | 732-207-2933 | [email protected] | LinkedIn | portfolio website PROFESSIONAL SUMMARY Certified IT & Network Security Specialist blending 9+ years of operational leadership at Amazon with advanced technical training in cloud architecture, network infrastructure, and virtualization. Transitioning into a Help Desk / NOC Analyst role to combine a strong background in real-time incident routing with a deep technical curiosity for cybersecurity and user support. Highly proficient in configuring enterprise firewall environments (OPNsense), managing hardware hypervisors (Proxmox), deploying hybrid cloud perimeters (VPS), and performing root-cause analysis. Possesses a strong ability to read, analyze, and parse multiple programming languages to diagnose backend errors and script system automations. CERTIFICATIONS & TECHNICAL PROFILE Active Certifications: CompTIA A+ | Google Cybersecurity Professional Certificate | NJIT Software Development Professional Certificate Active Pursuits: CompTIA Security+ | Cisco Certified Network Associate (CCNA) | AWS Certified Solutions Architect – Associate Code Literacy & Scripting: Proficient at reading, auditing, and parsing code syntax in Python, JavaScript, PowerShell, and Bash to trace database query errors, debug deployment configuration loops, and audit application log files. Remote Access & Zero Trust: Hybrid VPN Mesh Architectures, Zero Trust Network Access (ZTNA) Deployment (Twingate), Peer-to-Peer Mesh Overlays (Tailscale), Split-Tunnel Optimization, Least-Privilege Application Micro-Segmentation. Cloud & Perimeter Security: Hybrid Cloud Architecture, VPS Deployment (OVHcloud), Secure Tunneling (WireGuard), Cloudflare DNS-01 ACME Automation, MaxMind GeoIP Edge Whitelisting, Authelia Access Gateways, Fail2ban Perimeter Protection. Networking & Security: OPNsense Enterprise Firewall Administration, 802.1Q VLAN Segmentation, Wireshark Packet Analysis, CrowdSec Hybrid IPS, Splunk SIEM Monitoring, TCPDump, DNSSEC, Oblivious DoH (ODoH) Mapping, Inter-LAN DNS-over-TLS (DoT). Virtualization & Datastores: Proxmox VE (Cluster Quorum & High Availability), Docker & Docker Compose Containerization, Dockhand, Unraid NAS Data Systems, Linux OS Management (Ubuntu/Debian Server), Proxmox Backup Server (PBS). TECHNICAL INFRASTRUCTURE PROJECTS Hybrid Cloud Security & Multi-Node Cluster Simulation Lab | Technical Architect Engineered a dual-layered remote access architecture pairing a Tailscale Mesh VPN overlay for core hypervisor data-plane orchestration with a Twingate Zero Trust Network Access (ZTNA) gateway to enforce strict application-level micro-segmentation. Integrated the ZTNA perimeter with a centralized Authentik identity provider via OIDC (OpenID Connect), mandating biometric hardware security keys and multi-factor authentication before tunneling remote client sessions. Designed an obfuscated network edge architecture using an OVHcloud VPS reverse proxy shield, enabling public application accessibility while keeping 100% of inbound WAN ports securely closed on the residential perimeter. Established a high-throughput, kernel-level WireGuard data tunnel bridging the cloud VPS to a home network infrastructure core, bypassing traditional user-space performance overhead to achieve seamless 4K media streaming routing. Deployed a hybrid CrowdSec Intrusion Prevention System (IPS) across both the cloud proxy and home gateway node; configured real-time Local API logs to block malicious IP vectors at the cloud edge before they cross the home network boundary. Hardened the public-facing cloud perimeter by compiling Caddy Server with Layer4 extensions to ingest raw TCP/UDP packets, integrating a MaxMind GeoIP database for geometric whitelisting, and layering an Authelia gateway for administrative authentication. Engineered a 3-node high-availability (HA) Proxmox VE hypervisor cluster incorporating an isolated firewall core (Intel N300), a high-density compute/storage node (Ryzen 5), and an ARM64-based resilience voting quorum node (Raspberry Pi). Configured a virtualized OPNsense firewall architecture serving as the home core, integrating Zenarmor Layer 7 Deep Packet Inspection and a decoupled, privacy-hardened Oblivious DoH (ODoH) / DNS-over-QUIC (DoQ) model to strip ISP tracking footprints. Implemented strict 802.1Q VLAN segmentation across physical managed switches to dynamically isolate corporate assets, insecure smart IoT devices, and guest traffic, minimizing the internal horizontal attack surface. Deployed a fault-tolerant Unraid storage array passing through native LSI HBA / SATA storage controllers, backed by an incremental, block-level Proxmox Backup Server (PBS) routine to safeguard core infrastructure snapshots. Programmed an automated data center infrastructure Network UPS Tools (NUT) master-slave loop wired to a smart UPS to monitor real-time voltage thresholds and initiate graceful, safe database shutdowns during power grid failure events. PROFESSIONAL EXPERIENCE AMAZON | October 2016 – December 2025 Dispatch Manager | April 2020 – December 2025 Directed daily logistics operations, dispatching 25+ delivery vans and trucks under strict, time-critical 30-minute launch windows. Functioned as the Central Point of Contact for real-time incident response, coordinating rapid communication across drivers and base teams to resolve hardware, vehicle, and routing disruptions. Handled ticket escalation and operational troubleshooting under strict SLAs, utilizing diagnostic data logs to run root-cause analysis on field failures. Generates comprehensive technical documentation and workflow templates to standardize driver tracking procedures and response metrics. Analyzed daily route telemetry and delivery metrics to identify mechanical and software bottlenecks, implementing continuous performance changes to improve driver efficiency and delivery accuracy. Quality Assurance Specialist | August 2019 – March 2020 Traveled across the tri-state area to business partners and residential hubs to monitor fulfillment flows and ensure corporate quality compliance standards were met. Investigated and resolved systemic delivery failures by gathering on-site field performance data and generating formal incident reports for regional logistics coordinators to enact operational corrections. Ambassador | January 2018 – August 2019 Served as a technical and workflow liaison between shift management teams and floor associates, ensuring proper knowledge transfers and training compliance. Spearheaded high-volume inventory flow initiatives requiring strict adherence to standard operating procedures (SOPs) and corporate technical guidelines. Managed the physical tracking and onboarding of cargo trailers, monitoring pallet layouts and package counts to meet high-volume operational targets. EDUCATION NEW JERSEY INSTITUTE OF TECHNOLOGY | Newark, NJ Professional Certificate in Software Development Core Technical Coursework: SQL & Data Modeling | Principles of Programming with Python | MERN Stack System Architecture | React & Redux Infrastructure | JavaScript Front-End Web Engineering