PROFESSIONAL SUMMARY:

An Enthusiastic Network Security Engineer with passion for Implementing security architecture Solutions and processes with security standards and business goals. Eager to contribute to team success through hard work, attention to details and customer satisfaction. Versed in network defense strategies.

SKILL:

• Skilled Knowledge of the OSI Model and TCP/IP Protocols
• Exceptional Knowledge and Management of Palo Alto and Checkpoint firewalls
• Ability to Adapt to a Changing Network / firewall Environment by Regularly Updating and Upgrading Software/Hardware, Staying Ahead of Malicious Attackers and Cyber Threats
• Management of PAN NGFW with Panorama
• Configuration of VPN on Palo Alto Firewall and Checkpoint
• Project Coordination
• Configuration and Management of Cisco Routing and Switching
• Configuration of Network Address Translation
• Knowledge and usage of Routing Protocols, OSPF,BGP, RIP V2 and EIGRP.
• Knowledge and Implementation of Threat Intelligence, USER - ID,APP-ID,URL FILTERING,APPLICATION OVERRIDE
• PAN NGFW Routing and Switching
• Protocol Knowledge of ICMP, IP, TCP, UDP, HTTP(S), DNS, SNMP, TELNET, SSH
• Panorama Deployment and Management
• Configuration of Interfaces and Zones
• Set up and Manage Security Policies
• PAN NGFW High Availability (HA) Deployment and troubleshooting
• PAN NGFW APP ID, CONTENT ID, USER ID Configuration
• Configuration of Threat Prevention Profile and Policies
• VPN Deployment and Troubleshooting
• PAN NGFW NAT Configuration and Troubleshooting
• PAN NGFW Traffic Monitoring

WORK HISTORY:

Network Security / FIREWALL Engineer

Confidential, Atlanta, Georgia

Responsibilities:

• Monitored use of data files and regulated access to protect secure information.
• Participated in the deployment, configuration and maintenance of Multiple Palo-alto firewall clusters and their management with Panorama device along with supporting routers and switches
• Participated in a Rotational on-call duty to Respond to service tickets
• Configured and Troubleshot High Availability for all Firewalls preventing single point of failure
• Configured and Troubleshot Site to Site IPSEC VPN between HQ and Partnering Office
• Configured Best Practice Security Policies in accordance to the company’s objective, goals and Regulations
• Configured Source Nat to translate IP Address for internet bound traffic on Palo Alto NGFW
• Configured Destination Nat for all servers located in the DMZ Zone
• Created Custom Application to Audit and Report Applications Traversing the Network so as to rectify Internal Applications showing as Unknown Traffic in the Network
• Initiated Policy Verification (Nat / Security Policy) using Traffic Log and Hit counts to monitor activity on the PAN NGFW
• Configured Zone Protection Profile to prevent Denial of Service, TCP SYN Flood Attack and Reconnaissance Attacks on the Server
• Deployment and Management of WF-500 Wildfire Threat Intelligence Appliance to monitor, identify and update the Wildfire public cloud of malicious attack
• Enabled Threat prevention Features such as URL Filtering, Wildfire Services, Security Profiles that support Vulnerability protection, Autofocus Intelligence and File Blocking
• Participated in Project of PAN OS Upgrade to 8.1 for all firewalls and Panorama

Customer Support /Network Engineer

Confidential, Atlanta , Georgia

Responsibilities:

• Identified and immediately resolved issues with network devices, including Layer 2/3 Devices and Palo Alto firewall.
• Resolved Long standing Issues pertaining to Palo Alto Firewall stability, Performance and secure Client Accessibility
• Integrated Antivirus Profile and Created Security Rules Against Malicious Attacks
• Palo Alto VPN management and Troubleshooting of Remote Access VPN
• Worked closely with customers to identify business needs, including costs and benefits of implementing computing solutions.
• Analyzed, troubleshot and enhanced network performance to drive efficiency.
• Configured and performed troubleshooting with routing and switching protocols, including OSPF, RIP and BGP.
• Maintained company servers, computers, printers, cables and other equipment.
• Analyzed and Suggested recommendations on continuous network improvements.
• Configured and Set Up Data Filtering Profile
• Demonstrated Ability to Process, Document and Keep Account of Day to Day Activities
• Performed day-to-day LAN and WAN Monitoring, maintenance and support.

JNR Network Engineer

Confidential

Responsibilities:

• Provided Network support and attended to Tickets generated in a Timely Manner
• Developed plans and provided Real-time support to the customer service Department and Clients
• Managed and Configured Security Policies on the Fortigate firewall
• Monitored Fortigate firewall incoming and outgoing traffic and overseeing Log details
• Remotely and physically connecting to End-users device to troubleshoot and resolve Network connectivity and Access control
• Worked closely with the Senior security Engineers and system Administrators in the area of firewall and Network
• Communicated New Techniques, Risk and Threat of Credit cards / Frequent Flyer Miles Fraudulent activities to Management.
• Controlled Unauthorized access to company Resources, used waste bins and shredders, locked document storage cabinets to protect confidential data, files and reports
• Reviewed violations of computer security procedures and developed mitigation plans.