NETWORK SECURITY ENGINEER
Knit Technologies
Total des années d'expérience :2 years, 4 Mois
• Installed, configured, and managed firewalls such as FortiGate, Check Point, PaloAlto and Prisma Access SASE.
• Implemented and configured GlobalProtect VPN on Prisma Access SASE for customer, and maintained, modified, reviewed, and updated firewall rules sets to align with changing business requirements, security threats, and compliance regulations. Optimize rule sets for performance and efficiency. Analyze network traffic patterns and logs to identify potential security risks, anomalous behavior, or vulnerabilities.
• Lead incident detection and response efforts for the Prisma Access (ZTNA) solution, ensuring the security and integrity of user access to corporate resources. Developed and implemented proactive measures to enhance incident detection capabilities and reduce response times.
• Lead the security monitoring and analysis team responsible for safeguarding the organization's network infrastructure, utilizing a combination of SIEM tools, VPN technologies, EDR solutions, and IPS/IDS systems.
• Collaborate with cross-functional teams to deploy and configure security tools, including firewalls, VPN gateways, endpoint security agents, and threat intelligence platforms such as SentinelOne, Cybereason and CrowdStrike.
• Administered and maintained Microsoft Entra ID (Azure Active Directory) for enterprise, ensuring seamless access and security for users and resources.
• Designed and implemented identity and access management (IAM) solutions using Azure AD, including user provisioning, group management, and role-based access control (RBAC).
• Managed Azure single sign-on (SSO) configurations for firewall and Remote VPN services.
• Implemented and configured Web security, Remote Browser Isolation (RBI) solutions across the organization's using ERICOM ZTEdge.
• Implemented and configured active-active two Ookla SpeedTest servers on RHEL 9.
• Upgrade Cisco ISE 6 nodes deployment, admin guide for upgrading CIE nodes and UAT.
• Maintain accurate documentation of firewall configurations, endpoint policies, web security policy, network diagrams, and operational procedures. Document firewall policies and procedures for knowledge sharing and training purposes.
• Led the testing and deployment efforts for the CATO Secure Access Service Edge (SASE) solution that including SD WAN, Secure Web Gateway (SWG), TLS Inspection, Intrusion Prevention System (IPS), DNS Protection, Remote Browser Isolation (RBI), Anti-Malware, Application Control, and Data Loss Prevention (DLP).
• Collaborate with the sales team and customers to understand their requirements and design customized network solutions. Create technical proposals, and network designs that address customer needs and align with industry best practices.
• Work closely with customers to gather their technical requirements and assess their existing network infrastructure. Analyze customer needs and identify potential gaps or opportunities for improvement.
• Provide technical guidance and mentorship to junior analysts, facilitating knowledge sharing and skills development within the security operations team.
A Bachelor of Engineering (B.E.) in Electronics is a comprehensive undergraduate program that provides students with a strong foundation in the principles and applications of electronic systems and devices. The program typically spans four years and combines theoretical knowledge with practical skills to prepare graduates for careers in various industries, including telecommunications, consumer electronics, healthcare, and more.