SUMMARY

• Experienced Network Security Engineer with a demonstrated history of 8 years in the information technology, Skilled in troubleshooting and administration of Endpoint Security solutions and Security Vendor Firewalls such as Palo Alto, Checkpoint Security, Fortigate, Cisco ASA and Network Routing Protocols like Border Gateway Protocol (BGP), Open Shortest Path First (OSPF) and IPSEC/SSL protocols.

TECHNICAL SKILLS

• Working knowledge of SIEM, Splunk, Zscaler, Bluecoast, Tufin, Azure Cloud.
• Threat modeling, Vulnerability assessment and Risk Management
• Troubleshooting of infrastructure systems such as DNS, email, and firewalls.
• Intrusion Detection/ Prevention System (IDS/IPS), VPN
• Traffic Analyzing tools like Wireshark
• Experience with Cisco and Aruba Routers and Switches.
• Knowledge of Windows Operating Systems, Active Directory, & Group Policy.
• Strong Presentation and interpersonal communication. and ability to work effectively alone and as a member of a team.
• Quick learner, highly organized, with strong attention to detail and problem - solving skills and ability to quickly adapt to change.

PROFESSIONAL EXPERIENCE

Network Security Engineer

Confidential, Moorestown, NJ

Responsibilities:

• Responsible for managing over 50 Fortinet firewalls in a HA pair using FortiManger.
• Migrated a Checkpoint Firewall to Fortinet Next Generation Firewall.
• Working with FortiMail and FortiSanbox to identify to identify advanced threats.
• Change management and 3rd level incident management being the primary responsibility, participate directly as well as take escalations from team members as when required.
• Design implementation and troubleshooting of endpoint security, firewall connectivity, rule remediation on Fortinet and F5 firewalls.
• Managing over 4000 CISCO ASA VPN tunnels.
• Involve in performing firewall vulnerability testing and reporting.
• Providing high operational support for client and vendor SSL / IPSEC VPN connections on CISCO ASA and F5 BIG-IP technology.
• Responsible for troubleshooting advance Aruba network infrastructure.

Confidential, Atlanta, GA

Responsibilities:

• Experience with writing and re-writing policies, policy review and policy cleanup in an enterprise environment.
• Conducting security policy/rule review to identify and remove rules that are not needed to reduce Checkpoint firewall policy lookup.
• Evaluating risks & threats while adopting adaptive security policies, processes, and technologies.
• Managing different checkpoint security gateways and Security Management Servers, as well as their security policies using Multi-Domain Server.
• Designing and implementing Checkpoint firewall blades like threat prevention blade and threat emulation.
• Upgraded from Checkpoint R77.30 Gaia to R80.10 Gaia operating system.
• Integrated Paloalto firewall with Panorama network security management, Global Protect for endpoints Wildfire, Malware and Threat prevention as required.
• Migrated Cisco ASA firewall to Palo Alto Next Generation Firewall
• Upgrade Palo Alto PAN OS version 7.0 to PAN OS version 8.1.3
• Supported deployment of Palo Alto Firewall PA-3020, PA-5020, PA-7050 in an enterprise environment.
• Managed over 100 Palo Alto firewalls using Panorama M-100, and M-500
• Perform system upgrades, regular product updates, patch upgrade, and routine system maintenance.

Network Security Engineer

Confidential, Atlanta, GA

Responsibilities:

• Was responsible for implementation and operation of Palo Alto firewall-based perimeter security network.
• Managed multiple security devices including PA-5000 and PA-7000 series using Panorama in an enterprise environment.
• Worked with an Architect designing and micro segmentation of new infrastructure.
• Troubleshoot network and firewall related issues, specifically on Palo Alto and Checkpoint.
• Implemented web-filtering and intrusion prevention solutions on Palo alto and Checkpoint firewalls.
• Checkpoint R77.30, R80.10 administration and configurations, OS upgrades, CLI troubleshooting, rule re-ordering and optimizations..

Network Security Administrator

Confidential

Responsibilities:

• Deployed and managed FortiGate appliances 1000D and 1200D using Forti-Manager.
• Played an Integral role in migrating Fortigate firewall OS from Fort iOS 5.4 to Fort iOS 5.6 on FortiGate 1200D.
• Encrypted data to protect confidential information through the configuration of site to site VPN.
• Configured and troubleshoot FortiGate high availability to provide redundancy and prevent data loss.
• Routinely performed backup, upgrade and restore for firewall security for efficiency.
• Provided support in ensuring security infrastructure is kept up to date with the latest versions, patches.
• Maintained effective communication with vendors and clients to resolve network issues.
• Created Firewall policy rules according to the company's guidelines and performed functional review of the policy implementation.
• Troubleshoot and monitored Firewall traffics/issues through CLI.
• Performed filtering based on user identity, URL and device.
• Worked with my security team to resolve configuration and networking problems, to improve operations.
• Responsible for service request tickets generated by the help desk in cases such as troubleshooting.