Occupation:Network Security Engineer |
Location:Austin, TX |
Education Level:Master |
Will Relocate:YES |
Description
Professional summary: Overall 8+ years of Experience of Network Technologies and Security Profiles, which Governs all the Configuration, Optimization, Upgrading, Troubleshooting and Maintain Complex Network Topologies with Profound experience on Security, Routing and Switching protocols. * Archaic knowledge in designing network infrastructure which includes various Senses like Inspection Engines, Load balancers, Routers, Switches. * Administering multiple Firewalls, in a managed distributed environment and knowledge on SIEM tools like QRadar. * Well defined Aim on Palo Alto [PA 3060, 5060], Juniper [SRX-550, SRX-220], ASA 55xx, Checkpoint [R7x, R8x] firewalls. * Hands on designing security topologies using Palo Alto and various Endpoint Protection like traps. * Responsible for using cutting edge solutions for Data Loss Prevention DLP from RSA. * Information protection solutions including DLP and Security Auditing solutions from Symantec, etc. * Performed support tasks involved work with Linux, Apache Server, RSA SecureID, ACE servers, AAA servers, IDS/IPS & various other DLP products. * Developed the framework for Data Loss Prevention DLP. * Projects to expand scope of DLP monitoring. * Experience in configuring and troubleshooting of Checkpoint Firewall. * Experienced in Migration from Checkpoint and Cisco ASA Firewalls to Palo Alto. * Experience in adding IRules for customizing F5 load Balancers. * Monitoring Checkpoint Firewall traffic through Smart Dashboard and Smart View Tracker applications. * Hands on experience in implementing Authentications like ACN, RADIUS and TACACS+, AAA. * Maintained Bluecoat proxy manager. * Palo Alto Network Security Device Configuration of New Access Policy, Firewall Rules, QoS Rules, User ID agents, Threat Policy, security policies, Routing instances, Zone Based policies. * Strong in installing, configuring, and troubleshooting of Cisco 7600 series routers and Juniper routers M320 and SRX series routers. * Expertise on centralized management system (Panorama) to manage large scale firewall deployments. * Proficient knowledge on firewall Rule audit and optimization using Algosec. * Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools like NMAP, Solar Winds, Wireshark, CYFIN and Splunk. * Extensive knowledge in network devices using PANOS, Cisco IOS, JUNOS and NX-OS. * Enterprise in network design and documentation using Microsoft Visio. * Professionalized knowledge on mitigating various attacks like DOS, DDOS, KILLCHAIN, and ZERO DAY ATTACK. * Maintained Load Balancer BIG-IP F5 (LTM and GTM) and ACE. * Professionalized on tunneling modules like GRE, VPN [ISAKMP, IPSEC]. * Configured customized Redistribution among IGP & EGP routing policies, worked on designing MPLS VPN networks. * DMZ zoning & configuring VLANs/routing/NAT with the firewalls as per the design. * Worked on integration of feeds and features like different Flow Feeds (Net flow, Jflow etc..). * Experienced in working with Nexus 7009, 7018, 5548P, 5596T, 2148T, 2224T, 6000 switches and Juniper EX Series. * Worked on configuration & troubleshooting of routing protocols: OSPF, EIGRP, BGP. * In-depth knowledge on IP Addressing, VLSM, FLSM and ARP, Reverse & Forward proxy ARP, Ping Concepts. * Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, HDLC, STP, and RSTP, MSTP. * Implementation of DHCP, DNS, FTE, FTP, TFTP. * Configuring BGPv4, BGP Path Attributes, and Route Reflectors for an ISP transit network. TECHNICAL PROFICIENCY: * Firewalls: Cisco ASA Appliances (5540, 5550), Palo Alto [3060,5060], check point [R7X, R8X], Juniper [SRX-550, SRX-220]. * Network Security: ACL, IPsec, VPN, Port-security, RSA, AAA and IPS/IDS * Router Platforms: Cisco 76XX, 72XX series, Juniper M320, T640, SRX series.
Accomplishments
Highlights:
Keywords
