Occupation:Network Security Engineer |
Location:Fremont, CA |
Education Level:Master |
Will Relocate:YES |
Description
PROFESSIONAL SUMMARY: * Over 6+ years of experience in network security engineer with proficiency in installing, upgrading, troubleshooting, configuring, and supporting variety of Network & Security Devices. * Maintain and Configure Firewalls like Palo Alto (PA-3k, PA-5k), Cisco ASA 55XX and Juniper SRX5400. * Configuring Policies in Palo Alto Firewalls & Analysis of logs using algosec. * Worked on Centralized management system to manage large scale firewall using Panorama * Implemented application based policy and URL filtering, Threat prevention, Data filtering policies (Palo Alto, Juniper). * Professionalized knowledge on mitigating various attacks like DOS, DDOS, KILLCHAIN, and ZERO DAY ATTACK * Established IPsec-VPN tunnels with ASA firewalls between branch offices and headquarters. * Efficient in Implemented security authentication using TACACS+ & RADIUS. * Experience deploying BIG-IP F5LTM Load Balancers & Citrix NetScaler for load balancing and traffic management of business application. * Good Knowledge of CISCO NEXSUS data center infrastructure with 5000, 7000 and 9000 series switches and including CISCO NEXSUS Fabric Extender (223, 2248). * Implementing and Troubleshooting Cisco & Juniper devices using Static, IGRP, OSPF, BGP, EIGRP. * Worked on configuration of MP-BGP, VRF using MPLS. * Proficiency in configuration of Layer2 and Layer3 Virtual Local Area Networks using Cisco multi-layer Switches supporting STP, RSTP, PVST along with inter VLAN routing and VLAN trunking 802.1q * Configured and Implemented Router redundancy protocols like HSRP, VRRP and GLBP. * Experienced in DNS, DHCP, SMTP, FTP, HTTPS, and web security architecture. * Experience in designing, integration, configuration, maintenance, performance monitoring and security of network infrastructure including Local Area Networks (LAN), Wide Area Networks (WAN). * Good Level of Knowledge about TCP/IP and OSI models. * Experienced in troubleshooting both connectivity issues and hardware problems on Cisco based networks. * Experience in Network Management Tools and sniffers like SNMP, HP-Open view, Wireshark, and Cisco works to support 24 x 7 NOC. * Experience in troubleshooting the traffic using Packet Capture and analyze using Wire shark. * In-depth knowledge on IP Addressing, VLSM, FLSM and ARP, Reverse & Forward proxy ARP, Ping Concepts. * Managed inventory of all network hardware by use of SSH, Syslog, SNMP, NTP. * Hands on experience in upgrading Cisco IOS & Firmware on different Cisco devices & modules.
Accomplishments
Highlights:
Keywords
