SUMMARY

• 5+ years of experience in Networking Security and proven expert proficiency in designing, engineering, configuring, and maintaining of large enterprise firewalls.
• Responsible for the Core Security of the Network. Managing the entire Network Security Products deployed in the network such as Checkpoint.
• Advanced knowledge, design, installation, configuration, maintenance and administration of ASA Firewalls, Checkpoint Firewall R55 up to R77 version and VPN.
• Advanced knowledge in TCP/IP suite and routing protocols, such as OSPF, BGP, EIGRP, multicast, IPSEC VPN design connection & protocols, IPSEC tunnel configuration, encryption and integrity protocols.
• Advanced knowledge in Design, Installation & configuration of Palo Alto & Checkpoint Provider Environment
• Extensive experience in various aspects of Infrastructure management, majorly in the field of Information Security, Network security & Networking.
• Knowledge of Cisco configurations focused on Routing, QOS, MPLS Multicast and Security.
• Configured Cisco IOS and NXOS devices for various routing and switching tasks, such as a redundant Internet firewall.
• Strong hands on experience in layer - 3 Routing and layer-2 Switching. Dealt with Nexus models like 7K, 5K, 2K series, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches.
• Configuring, Administering and troubleshooting the Checkpoint, Palo Alto, and ASA firewall.
• Advanced knowledge in Cisco ASA 5000 series and PIX installation, configuration and maintenance, configuration and installation of IOS security features and IPS, security risk analysis, attack mitigation & penetration tests based on LPT methodology.
• Experience with Cisco IOS, Cisco NxOS, F5, Checkpoint, Cisco ACS, VPN, QoS.
• Good working experience on Cisco Nexus 3000/5000 devices and Riverbed Steelhead (WAN Optimization) devices.
• Implementation: Palo Alto Firewall, Cisco ASA (FW-Active/Passive, S2S VPN), Juniper Net screen.
• In-depth knowledge and hands-on experience in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX SSL Security.
• Providing offshore support on Checkpoint firewalls on Nokia boxes and UTMs, Cisco ASA, Palo Alto, Bluecoat Proxy and directly interacting with customer and work with them for any new request comes.

TECHNICAL SKILLS

Platforms: Microsoft Windows XP/2000/NT, Red Hat Linux, Sun Solaris UNIX, & Nokia IPSO

MS Servers: Windows Server 2003; Windows Server 2008

Firewalls: Palo Alto, Checkpoint, Cisco Firewall Service Module, and Cisco PIX, Cisco ASA

Switches: Cisco Catalyst VSS 13 / 00 / 3750- X / 2960 Cisco 2000/7000 Nexus Series

Routers: Cisco Routers ASR 06 / 06 / 51 / 2600

PROFESSIONAL EXPERIENCE

Confidential, Chicago, IL

Network Security Administrator

Responsibilities:

• Keep traces of all process and confirm whether all the process/activities are carried our as per the norms.
• Staging complex networks for troubleshooting and debug purposes.
• Deployment of Security firewall gateways (Checkpoint 77.20 and Palo Alto 5520) and management servers globally for customer, project still in progress.
• Update NXOS on Nexus 700 switch.
• Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs.
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall.
• Principal architect and technical lead on Firewall Environment Upgrade Project - multiphase high budget effort to migrate firewall environment from R65 open servers/IP Appliance to R75.40 on Checkpoint appliances. L3 Support engineer for Checkpoint firewalls based environment.
• Checkpoint firewall deployment Confidential multiple sites with fine tuning.
• Working experience with routing and network service protocols (e.g. OSPF, MPLS, Multicast, SNMP, IPv6)
• Configure & troubleshoot IPSec VPN issues.
• Dynamic IP Routing protocols (OSPF, EIGRP, BGP, Multicast).
• Configure all Palo Alto Networks Firewall models (PA-2k, PA-3k, PA-5k etc.) as well as a centralized management system (Panorama) to manage large scale Firewall deployments.
• Handle BlueCoat proxy day to day operation issues along with device configurations
• Perform security architecture reviews.
• Leading incident response and forensics analysis for security breaches and mitigation support.

Confidential, Warrenville, IL

Network Security Engineer

Responsibilities:

• Manage day-to-day incident response and investigative duties for customer.
• Coordinate multi-departmental responses to information security events including events within the corporate infrastructure.
• Manage, operate, and analyze data from corporate security systems including Event Analyzer, Checkpoint IPS.
• Site network diagrams, Layer2 & Layer3 diagram for FW's.
• Writing FW Instructions for specific activities.
• Handling day to day FW related activities for Service Production.
• Configuration and Maintenance of ASA, ASA 5540, ASA 5520, ASA 5510, PIX 535, FWSM Firewalls.
• Installation of Cisco ASA 5500 series firewalls, Cisco 3500, 4500, 6500 series switches
• Configuring, Administering and troubleshooting the Checkpoint, Palo Alto, and ASA firewall.
• Configuration and Maintenance of ASA, ASA 5540, ASA 5520, ASA 5510, PIX 535, FWSM Firewalls.
• Configuring & troubleshooting Checkpoint Cluster XL & VRRP.
• Configure and upgrade network equipment of the following types: Cisco IOS, NXOS, FWSM and ASA Firewalls, F5 LTM
• Successfully installed Palo Alto PA-3060 firewalls to protect Data Center and provided L3 support for routers/switches/firewalls.
• Configuration and maintenance of Cisco 2600, 2800, 3600, 4400, 7200, 7609 Series routers and Cisco 2900, 3500, 3700, 5000, 6500 Catalyst Series, Cisco 7000, 5000, 2000 Nexus Series Switches
• Worked on Palo Alto firewalls, TCP/IP, UDP Multicast, OSPF, and various network mediums.
• Installing & rebuilding IP appliances, checkpoint appliances.
• Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls.
• Perform regular vulnerability assessments and internal penetration tests against corporate assets.
• Handling security operation & security projects implementation team.

Confidential

Network Support Engineer

Responsibilities:

• Security of all Business traffic flowing in/out of the India Network.
• Installing and configuring new projects in all network security devices.
• Internet Installation, configuration, management and troubleshooting of firewalls, routers & switches.
• Daily monitoring of various parameters of firewall, routers, switches.
• Configuring Site to Site IPSEC VPNs between the various 3rd parties involved with clients.
• Provided day-to-day support for users Checkpoint and clients.
• Designed and recommended effective security and network design solutions for customers over different platforms covering firewalls, routers, switches with multiple ISP connections.
• Worked with various vendor platforms such as Checkpoint, Cisco, Linksys etc. to provide heterogeneous security and VPN solutions.
• Worked on Cisco 871 DSL, IAD, 1800, 1900, 3900, 7200 series routers and Cisco Nexus Architecture 5000.
• Performing site survey and designing the network for optimization.
• Evaluation of new products and providing the demos/POC to the customers.
• Validating network infrastructure devices for Security baselines, Resiliency test, evaluating Port- analysis on access request and vulnerability scans.