Cisco Certified Network Engineer with almost 8 years of professional experience in Network security engineering, performing Network analysis, design, Implementing, capacity planning with focus on performance tuning and support of large Networks. * Experience in Cisco Routing, Switching and Security with strong Cisco hardware/software experiences with Cisco Routers such as 1900, 2900, 3900, Cisco ASR-1k/9k, Cisco Multilayer Switches 4500, 6500, Cisco Nexus 2k/5k/7k/9k and Juniper: M320, MX80, MX480, MX960 and EX4200, EX8200 switches. * Implemented firewalls using Cisco ASA, Cisco PIX, CheckPoint Provider-1 /SiteManager-1 NGX R65, Firewall-1/VPN-1 NGX R65 Gateways, Secure Platforms. * Firewall technologies including general configuration, risk analysis, security policy, rules creation and modification of Check Point Firewall Smart Domain Manager command line & GUI, Cisco ASA * Implemented and Configured Palo Alto Networks Firewall models and centralized management system to manage large scale firewall deployments. * Symantec End Point Protection / AV Management, End point Encryption Symantec * Good knowledge on Endpoint incorporates a rules-based firewall, as well as an anti-malware technique * Good knowledge on Palo Implemented Zone Based Firewall and VPNs, identifying and resolving faults on managed security services, writing service and management system documentation. * Implemented Zone Based Firewall and Security Rules on the Palo Alto Firewall. * Adding websites to blocked list on the bluecoat proxies based upon business requirements. * Seasoned professional in Checkpoint firewall policy administration and support between various zones * Hands on Experience with blocking of IP's on Checkpoint which are suspicious * Experience in Checkpoint IP Appliances R65, R70, R75, R77 & Cisco ASA Firewalls * Migration with both Checkpoint and Cisco ASA VPN (Checkpoint R75.30 to Gaia R77.30 GA version) * Worked on migration from legacy PIX to new Cisco ASA appliances * Proficient in configuration of routing protocols like RIP, IGRP, EIGRP, OSPF multiple areas and BGP. * Involved in designing L2VPN services and encryption system and other VPN with IPSEC based services. * Expertise in IP subnetting and worked on various designing and allocation various classes of IP address to the domain * Good Knowledge and experience with UNIXbased infrastructure and solutions. * security solutions, including Qualys, SourceFire, FireEye, OpenDNS, and Endpoint Protection solutions such as Symantec and Cylance * Involved in troubleshooting of DNS, DHCP and other IP conflict problems * Good knowledge and experience in Installation, Configuration and Administration of Windows, HTTP, FTP, DNS, NTP, DHCP servers under various LAN and WAN environments * Excellent customer management/resolution, problem solving, debugging skills and capable of quickly learning, effectively analyzes results and implement and delivering solutions as an individual and as part of a team. * Access Control Server configuration for RADIUS & TACACS+. * Have experience on different network tools like Tufin, Firemon, Algosec, Splunk, IBK Qradara SIEM, ASDM, CSM, Panorama, Juniper NSM, Service Now, Remedy ticketing Systems, Solarwinds and checkpoint Smartlog. * Ability to Install, Manage & Troubleshoot Large Networks & Systems Administration on Windows & Linux platforms in Development, Staging, Lab & Production Environments. * Strong Experience in using various tools for management, analyzing, and troubleshooting, monitoring & process automation in Lab & Production environment. * Good Knowledge of SIEM tool to check the logs, create reports and dashboards * Highly valuable Project Management and Operations Planning skills.
Description
