Senior Network Security Engineer Resume
0/5 (Submit Your Rating)
Chicago, IL
SUMMARY:
- Innovative, detailed - oriented engineer with wide range of experience in many aspects of designing and testing of wireless and wireline networks. Background includes networks security within OpenStack cloud environment, transport engineering, and software development. Skilled at investigating and solving difficult problems with proven ability to clearly document the overall task. Juniper networks security certified - JNCIS-SEC.
TECHNICAL SKILLS:
Languages: C/C++, Python, Perl
Platforms: Palo Alto and Juniper SRX firewalls, Linux, OpenStack, Git, Perforce, Bugzilla
Networking Protocols: Ethernet, IP, Mobile IP, MPLS, OSPF, TCP, UDP
PROFESSIONAL EXPERIENCE:
Confidential, Chicago, IL
Senior Network Security Engineer
Responsibilities:
- Design and configure new features for Palo Alto NGFW within the company’s data center.
- Analyze east-west and north-south traffic within the data center to design firewall polices enforcing normal behavior of software applications.
- Design and develop Python software modules to automate various tasks.
Confidential, Warrenville, IL
Network Security Engineer
Responsibilities:
- Participated in the instantiation of Juniper SRX firewall virtual machines (VM) within OpenStack cloud environment. OpenStack’s Heat (orchestration) have been used extensively.
- Configured Juniper SRX firewalls in lab and production environments with features such as NAT, high availability cluster, security policies, IPSec VPN, and IPS.
- Created and executed SRX firewall test cases in a lab environment.
- Provided Tier VI technical support for virtual firewalls in both lab and production networks. This included mirroring ports to capture traffic and using Wireshark for analysis. The firewall’s debugging tools were used as well to assist in resolving end to end traffic issues.
- Designed and developed Python software application to automate OpenStack heat environment files. An environment file consists of project specific information to instantiate a VM, e.g., IP addresses, Subnets, availability zones, image name, and flavor.
Confidential, Schaumburg, IL
Principal Staff Engineer
Responsibilities:
- Participated in the definition of a LTE network architecture. The architecture may then be customized to accommodate a customer’s specific requirements.
- Designed and developed software application to analyze the network’s performance log files. The application is used to discover abnormal patterns in the network. Used Perl language in a windows environment to implement the application.
- Designed and developed availability models for LTE systems. Used the generated Reliability Block Diagrams (RBD) to compute the overall system availability. Proposed a detailed object-oriented system to calculated service availability in real-time using the network outage information.
Confidential, Naperville, IL
Software Staff Engineer
Responsibilities:
- Participated in the design and the development of an ATM cell concatenation product. Traffic engineering and Quality of Service (QoS) issues were addressed. This is a software/hardware solution that allows ATM traffic to be carried over an MPLS-enabled Internet backbone more efficiently.
- Participated in the design and the development of Structure-Agnostic TDM over Packet (SAToP) product. Traffic engineering and QoS issues were addressed. This is a software/hardware solution that allows TDM traffic to be packetized and carried over an MPLS-enabled Internet.
Confidential, Schaumburg, IL
Principal Staff Engineer
Responsibilities:
- Selected as a technical member of corporate level patent committee. Applied a broad range of techniques to evaluate new ideas for possible patent filing and future product commercialization.
- Invented an event correlation application for communication systems, which effectively addresses the issues of maintainability, scalability, and accuracy. Investigated and used Finite State machines, neural networks, codebooks, cluster analysis, and Bayesian networks.
- Generated a library of fault signatures based on lab experiments on a test system. Designed and developed software to analyze the fault signatures.
- Invented a set of techniques to detect and identify event storms in wireless systems. Both exploratory data analysis and traditional statistical techniques were used.
Confidential
Senior Staff Engineer
Responsibilities:
- Enhanced the performance of TCP in a wireless environment by developing a simulation model based on related RFCs. Analyzed the performance of the Round Trip Time (RTT), Round Trip Time Out (RTO), window size, and time-outs under different system conditions for an FTP session.
- Enhanced the integration of voice and data services in a wireless system by developing an M/M/c/c queueing system which models voice traffic in a TDMA channel shared by both voice and data traffic. Performed traffic engineering analysis and identified conditions under which data service blockage occurs.
- Developed an analytical/simulation model which represents a cellular-like infinite population of mobile stations accessing a TDMA channel based on the slotted ALOHA protocol. Generated channel access time distribution based on packet data and voice loading, and channel quality of the population.
- Increased system capacity by developing an Ethernet voice only simulation model where all nodes are synchronized. Analyzed node loading, collision resolution times, and packet retransmission distribution.
Confidential
Software Engineer
Responsibilities:
- Team leader of a base station software development group. Responsibilities included requirement specification, high-level design, and development of new functionalities. Emulator timing analysis was used to study the performance of the software architecture and the possible reduction of CPU loading.
- Participated in the development of a voice router. Responsibilities included initialization and setup routines for the 68302 microprocessor-based hardware. They included the root task, pSOS/pROBE configuration tables, exception vector table, and interrupt service routines.