Security Engineer
Tahakom
Total years of experience :15 years, 8 Months
o Working with Palo Alto Firewall, FortiGate Firewall and Bluecoat ProxySG.
o Configuration and management of Proxy, Email gateway and Cisco ISE.
o Optimization & fine tuning of security solutions based on industry best practices.
o Coordination with Vendors & partners for implementation of new Security projects.
o Preparing & implementation of base-line documents for infrastructure for hardening.
o Responsible for daily operations on Palo Alto cluster firewalls External and Data center.
o Fine-tuning & optimization of security rules to remove risky, unused & shadowed rules.
o Implementation and configuration of FortiGate firewalls as external and DC firewalls.
o Configured IPSec Tunnel over WAN L2 Link between HQ and new DC PA & FortiGate.
o Configure, Verifying and troubleshooting security infrastructure devices.
o Configure and troubleshoot Cisco Routers, Cisco Switches and Firewalls.
o Troubleshooting network issues, routing and switching issues at different sites.
o Administration and configuration of Routing protocols EIGRP, BGP, OSPF etc.
o Responsible for Implementing and troubleshooting of IPSec Site-to-Site VPN.
o Responsible for Implementing SSL Any connect and clientless technologies on ASA.
o Support site & remote users in issues related to network connectivity and security.
o Responsible for implementation, management, monitoring network infrastructure.
o Handling daily operations to ensure that network & infrastructure is up & running.
o Responsible for troubleshooting of Network issues at Layer 2 and Layer 3 level.
o Supported remote access solutions Palo Alto Firewall, FortiGate Firewall SSL VPN.
o Suggest, plan and implement IT Security Solutions in order to fill security gaps.
o Working Cisco ASA Firewall, Palo Alto Firewall, Fortigate Firewall & Bluecoat ProxySG.
o Monitoring multiple security technologies using SIEM tool AD Audit and log analyzer to detect IT security incidents.
o Follow detailed operational process procedures to appropriately analyze, escalate and assist in remediation of critical information security incidents.
o Monitoring multiple security technologies such as, IDS, IPS, syslog, file integrity, firewall, proxy, mail gateway, web gateway, and vulnerability scanners.
o Cisco Switches 3850, Cisco ASA Firewall 5585-X Series, ASR 1001-X WAN Router / ASR 1009-X WAN Routers, Cisco FirePOWER 8140 / Cisco FirePOWER 8270.
o Configuration and management of CUCM, Cisco Unity and Cisco Presence Server.
o Configuration & Management of Active directory 2012 server.
o Configuring APS Rack Monitoring System, Power Distribution Units, Rack Automatic Transfer Switch and other Power Unites, Configuration of Splitter (Ethernet\Fiber Optic).
o Monitoring & Management of McAfee Email Gateway and McAfee Web Gateway.
o Configuring Gigamon TA-1 Packet and Traffic Aggregation.
o Implement & monitor security measures for the protection of computer systems & info.
o Identify and define system security requirements.
o Prepare and document standard operating procedures and protocols.
o Configure and troubleshoot security infrastructure devices.
o Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
o Report security incidents.
o Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.
Responsible for network and IT support of University of Swat, a network comprising of 400 users using Cisco and Microsoft technologies. Extensive troubleshooting of network, hardware and software environments. Infrastructure support on Microsoft Windows and Cisco technologies.
Routing/Switching Administration and configuration of routing protocols EIGRP, BGP, OSPF, RIPv2 and IP Routing. Configuration of VLANs, VTP, STP, HSRP, VRRP, GLBP, DHCP, Inter-VLAN and port security. VPN Connectivity between campuses and remote access VPN.
Troubleshoot: Troubleshooting network issues, routing and switching issues at different sites. Carry out full installation of cisco routers, protocols and cabling for routers, switches & new workstations. Troubleshooting different L2 and L3 issues by remote or site visit. LAN administration and support to provide full connectivity for the LAN network. Diagnosing and solving hardware & software faults.
Network/System Support: Network Support, Active directory account management, LAN, WAN, network, printers troubleshooting. Support of IT issues from other University branches and locations. Installation, configuration and troubleshooting of hardware and software’s.
Site Support: Support site users in issues related to network connectivity, machines connectivity, operating system issues, scanners, users profiles, viruses and vulnerability related issues. Interface with end-users to provide problem resolution via the telephone and remote desktop support for hardware, software, and other items.
Network Monitoring: Configuration of Network monitoring tools: PRTG, Syslog Server, Network Time Protocols (NTP) and Simple Network Management Protocols.
Network Security: Administration of Cisco ASA, Firewall, Dell SonicWALL and hardening cisco routers and switches.
System and Infrastructure: Windows Server 2008 R2, windows server 2012, and 2003 server administration & management. Responsible for implementation, management, monitoring network infrastructure. Installing maintaining and configuring ADS, Configuring Group Policies.
o IT support, a network comprising of 150 users using Cisco and Microsoft technologies.
o Extensive troubleshooting of network, hardware and software environment.
o Infrastructure support on Microsoft Windows 2003 and cisco technologies.
o Administration of Local Area Network of the company and network troubleshooting.
o Installation, configuration and troubleshooting of PCs, networks and software.
o Identifying, diagnosing and resolving network problems.
o Installation, configuration of printers, scanners and PC maintenance.
o Monitoring and verification of service processes.
o Responsible for auditing infrastructure environment and maintain printers, scanners, computers installation and troubleshooting and helpdesk operation.
o Providing support to all type of issues relating to client’s connectivity, application support, operating system, user profile support and other general IT issues.
o Writing up accurate technical documentation.
o Administration of Local Area Network of the company and network troubleshooting.
o Installation, configuration and troubleshooting of PCs, networks and software.
o Extensive troubleshooting in application software, viruses and hardware.
o Provide technical assistance to end users regarding Network, Servers & Software issues.
o Manage office equipment including desktops, laptops, Scanners and printers.
o Log and track all issues with Helpdesk ticketing system.
o Provide basic training of applications and systems to users.
o Technical fault analysis and troubleshooting.
o Providing technical support to a wide range of users - internal and external.
o Monitoring network security and alerts.
o Managing network IP addresses on routers and DHCP server.
o Provide desktop and application support over the telephone.
o Install, configure, and support the LANs WANs and Internet systems.
MSc in Computing, Manchester Metropolitan University, Manchester, U.K 2008, Major in Networking and security
Master of Information Technology, Al-Khair University, Islamabad, Pakistan 2003. Major in Networking, IT and Security
URL removed due to policy violation. Please contact support for further information.