Jiwan Bhattarai

• Configured and troubleshot multivendor network components, including firewalls, IDS/IPS, and VPNs, across cloud and on-premises environments.
• Implemented NAC, system hardening, and secure architectures to bolster comprehensive security across critical client networks.
• Managed network security for high-stakes sectors (trading, banking, finance) with stringent security protocols, supported premium European, American clients.
• Performed troubleshooting complex datacenter issues, optimizing critical infrastructure, and enhancing network resilience for sensitive financial and healthcare environments.
• Applied ITIL best practices for service management, improving process efficiency and compliance through structured SOPs, POAs, and RCAs.

• Resolved complex security challenges in multi-vendor environments (Cisco, Fortinet, Palo Alto, F5 Big-IP), managing escalations and coordinating resources for efficient solutions.
• Led design, integration, and troubleshooting of SSL/IPsec VPNs, high-availability configurations, and clustered firewalls to establish secure, resilient networks.
• Configured advanced routing switching protocols and conducted proactive vulnerability assessments using Nessus, OpenVAS, Qualys, and Wireshark for risk mitigation.
• Deployed Cisco Identity Services Engine (ISE) for robust Network Access Control, implementing 802.1X, device
posturing, BYOD management, guest authentication, and TACACS+ for centralized AAA.
• Consulted with clients on multivendor security solutions (Cisco, Palo Alto, Fortinet, Checkpoint, F5, SD-WAN), conducted workshops and delivering customized architecture designs.
• Created comprehensive network security documentation (LLDs, HLDs, POCs, migration and implementation plans), ensuring structured project lifecycle management.

• Led and trained a team of engineers for B2B security projects, coordinating with vendors to ensure timely delivery and implementation of security solutions.
• Configured and managed site-to-site and AnyConnect VPNs across Cisco routers and firewalls, enhancing secure remote access for clients.
• Performed vulnerability assessments and IP routing/switching configurations, ensuring secure deployment and
compliance with industry standards.
• Authored detailed project plans, network security documentation, and test plans to support robust service delivery and client requirements.
• Provided continuous performance metrics and IT health reports to CISO, maintaining situational awareness and
proactive security measures.

• Provided continuous performance metrics and IT health reports to CISO, maintaining situational awareness and
proactive security measures.

• Automated system administration tasks using Bash scripting, enhancing operational efficiency in processes like log rotation, user management, and backups for both Linux and Windows environments.
• Configured and troubleshot networking systems (routing, switching, VPN, wireless) and managed server infrastructures (Active Directory, Group Policy, DNS, DHCP, RADIUS) and VMware virtualization support.

• Performed redundancy testing, troubleshooting, and protocol configuration (TCP/IP, DHCP, PPPoE, SNMP, NAT, VLAN, VoIP) for WAN links, optimizing connectivity and network reliability across Etisalats infrastructure.
• Managed structured cabling, device installation (OLT, ONU, GPON, Routers, Switch, AP), and high-speed internet activations for UAE service provider networks and global data centers.

• Installed and maintained network infrastructure, including wireless links (Mikrotik, Ubiquiti) and Cisco LAN setups, OS
security through antivirus solutions ensuring stable connectivity and security.