Technical Lead – Network & Information Security
Wipro Technologies
Total years of experience :16 years, 7 Months
First Abu Dhabi Bank, Abu Dhabi (Client Side) - FAB DC Migration Project (Part of)
Responsibilities:
Working on Designing, configuring and implementing Cisco Firewall as VPN concentration for FAB DC.
Overall responsible for migrating their existing IPSec VPN tunnels from NBAD & FGB environment to FAB DC & DR infrastructure.
Leading team members for other technologies Cisco Iron-port etc in terms of reviewing HLD & LLD documents.
Leading team members for giving technical inputs on designing and side by side getting customer expectation.
National Stock Exchange, Mumbai (Client Side)
Responsibilities:
Designing, configuring and troubleshooting networking and security architecture based upon requirements.
Managing ASA firewall infrastructure.
Responsible for configuring & managing site to site and remote access IPSEC VPN for their third party vendors.
Overall responsible of handling infrastructure of Cisco Lancope tool use for Network Anomaly Detection
Was responsible of administrating and supporting Bluecoat proxy with WCCP platform for another client i.e. Quest Diagnostics
Technical documentations and architectural diagrams for related technologies for peer and training review
Creation of related SOPs and KM articles for team.
Providing support to team members in terms of conducting investigations or any other technical challenge.
Accomplishment:
Successfully Upgraded Cisco Lancope NADS tool overall infrastructure to latest version
Involved in upgrading Websense DLP environment from version 7.8.3 to 8.1.0
Responsible for a stable and standardized service to Capgemini Outsourcing Clients.
•Managing Data Centre Infrastructure for providing services to the various Capgemini Outsourcing clients. Team member of Network Infrastructure Services and responsible for technical escalations and network management.
•Hands-on Experience in Network Planning, Designing, Implementation and Troubleshooting of Local and Wide-area enterprise networks.
•Configuring & managing site to site and remote access IPSEC VPN tunnels for various Netherlands clients
•Configuring & managing firewall contexts for multiple customers on Cisco ASA & FWSM.
•Configuring & managing FWSM, ASA, switches, routers, ACS servers, load balancers, Wirless LAN controllers etc for Data center environment
•Responsible for creation of Change implementation plans and reviewing / authorizing & implementing Changes across the network.
•Providing Level 3 technical support for escalations from lower levels to various Dutch clients of Capgemini
•Preparing monthly Availability and Capacity management report for Client Network Infrastructure
•Handled new client transition project with respective of Network & Security Infrastructure Services.
•Onsite Projects handled for Dutch Retail Solution in Netherlands
Configuring Branches firewall for opening port wise rule for requires applications.
•Handling Web sense server for web traffics filtration.
•Working on GFI LAN guard system for scanning Bank LAN.
•Handling MS ISA server with web proxy and firewall to control Bank internet traffics.
•Handling branches routers on OSPF routing protocol topology for HO connectivity.
•Designs, implements and maintains various networks such as LAN and global WAN in accordance with specified requirements. Prepares network diagrams and drawings to document and assist in communicating operational status of networks.
•Provide leadership and work guidance to less experience team members and work as a team player and share information with the colleges ensuring all configurations, design and setup updated and documented
Involved in configuring routers, switches, trunk ports, VTP, STP, and VLAN, also handled configuration/maintenance of DHCP and VPN.
Configured Remote Access VPN on Cisco ASA with AAA authentication on LDAP and Kerberos protocols.
Configured policy base routing in branch offices as part of redundancy network.
Configured priority based access list on HO routers as part of network QOS.
Configuring and Monitoring Cisco ASA for publishing internal websites on internet on different ports.
Global responsibility for security including network and internet security, host security and LAN/WAN security.