SUMMARY:

• Senior Network Security professional with over fifteen years’ experience in Security Consulting and Managed Services in IT/Banking Sectors & various aspects of IT Security - Engineering, Design and Support. Exceptional skills and experience in planning, detailing, coordinating and executing highly critical projects mostly with zero outage tolerance.
• Expertise in Firewall Administration, Information Systems Audit, Firewall compliance reviews, Risk and Vulnerability Assessment, Design and Implementation of Network Security and VPNs in a global, complex Enterprise Network. Excellent project management and documentation skills.

TECHNICAL SKILLS:

Firewalls: Check Point (SPLAT, NGXR55, R60, R65, R70, R75, Provider-1/SmartConsole), Netscreen SSG/NSM, Juniper and Palo Alto

Firewall Analyzers: Algosec Firewall Analyzer, Tufin Security Suite and Skybox

Security: ACL, VPN (site to site, client to site), AAA, Radius, TACACS+, 802.1X, Checkpoint IPS/IDS, RSA vulnerability testing and OS security.

Proxy: Microsoft ISA 2004, ISA 2000 and Bluecoat

Unified Solutions: Polycom Video Conferencing

Routers and Switches: IOS based Cisco 36xx, 25xx, 72xx series Routers, CAT OS based Cisco 65xx Switches and Wireless Access Points (Cisco Aironet AP1100)

Routing: BGP, EIGRP, OSPF, RIP, re-distribution, Summarization and Traffic engineering.

Services: NTP, FTP, HTTP, HTTPS, content filter, proxy (Microsoft ISA), Active Directory, DHCP (Windows Server and Cisco), NAT, SNMP, syslog, virtualization and datacenter hosting.

Network and Security Monitoring Systems: Solarwinds, Orion, CiscoWorks, GFI LANguard N.S.S. 5.0, NetQOS and Nagios.

PROFESSIONAL EXPERIENCE:

Confidential, Jersey City, NJ

Senior Network Security Consultant

Responsibilities:

• Formulate firewall Security policy/Rulebase and manage firewall Security configuration as per the Business requirements.
• Reviewed 1000+ Checkpoint firewall designs spanning 160+ countries as a subject matter expert in the Checkpoint domain in the last 5 years.
• Successfully designed and implemented End of life remediation projects for Checkpoint M2/M8 on SPLAT with Checkpoint 12200/12600 Gaia (Provider 1) and Juniper SRX firewalls with ZERO severity 1 or 2 outages.
• Interactions with the Security Architecture and Standards team in defining the standards and also reviewed the roll-out of new standards helping achieve optimization within Citi Technology Infrastructure.
• Manage a Team of over 25 Firewall Engineer and 200 Projects spread across the globe.
• Project Management and Running the huddle meetings for Global Security Build Team covering 200+ projects and over 25 Engineers.
• Audited the network/security infrastructure and mitigated security audit findings.
• Provided Level 3 troubleshooting support for new Firewall builds and EOL firewall replacements on Checkpoint, Juniper and Palo Alto
• Adhered to strict change control and change management policies to ensure compliance and best practices.
• Built new Sites for Citi that included reviewing the Bill of Materials, rack and stack, firewall initial installation, applying required configuration as per design, pushing policies and locking down the firewalls
• Documented and updated technical diagrams, implementation/migration plans in a centralized database.
• Mentored new employees of the team and created best practices documents for their utilization.
• Coordinated activities with clients, business heads and operations personnel including the GCC (Global Command Center) and performed Change Management using ServiceNow.

Confidential

Senior Network Engineer

Responsibilities:

• ESA Network Management team supporting Ingersoll Europe area.
• Administered and managed Checkpoint firewalls for IR Europe sites using Provider 1
• Conducted firewall Compliance reviews and Change Management using Tufin Security Suite- Secure App Secure Track and Secure Change.
• Designed and Implemented Data and Voice Network solutions for new and existing customer sites.
• Managed Network Infrastructure of remote Ingersoll Rand sites in Europe and Middle East.
• Monitored 200+ devices including Firewalls, IDS/IPS, Routers and Switches.
• Provided bandwidth analysis for Ingersoll Rand site in Europe and Middle East countries.
• Liaised with service providers and network vendors for various WAN related issues, outages and procurement/replacement of Network devices including Firewalls, Switches and Routers.

Confidential

Technology Specialist

Responsibilities:

• Administered Infosys North America firewalls - Netscreen SSG550 and Check Point NGX
• Managed Network Security Infrastructure of remote offices in USA.
• Architected and designed security solutions and technologies for various fortune 500 clients.
• End-to-End Setup and Deployment (Independantly ) of Infosys ODC in Bentonville, AR, USA.
• Migrated multiple services like hosting, Audio conference, Blackberry, Data Storage, etc. as part of datacenter movements.
• Single point of contact for critical customer connectivity and IT infrastructure lead for various engagements. Clients included leading companies in banking, insurance, retail and pharmaceutical domains.
• Defined and architected security solutions that support the business units while staying inline with the company and client’s security posture and risk appetite.
• Migrated Services for multiple clients from Netscreen Environment to Check Point Firewalls
• Identified IT Security risks and evaluated and proposed mitigation strategies.
• Designed secured Wi-Fi Infrastructure for mobile and guest users across multiple locations with efficient strategies and planning.
• Prepared network and security designs and implemented the projects comprising of different network components like routers, switches and firewalls.
• Performed firewall rule reviews and approvals.
• Responsible for the development of business continuity and disaster recovery plans, process and procedures.
• Engaged in Client connectivity discussions, design, solution, project management and execution of the design.

Confidential

Senior Network Engineer

Responsibilities:

• Member of HCL NMS - Network Management and Security team managing the Corporate Network.

Confidential

Network Support Engineer

Responsibilities:

• Provided end to end network solutions for various clients and firms.