Project Engineer - Security
Salam Technology
مجموع سنوات الخبرة :10 years, 1 أشهر
Projects: HAMAD PORT
Country: Doha, Qatar
Duration: July 2017 to Sept 2019
Key Position Responsibilities:
• Experience in ITIL process and implementation
• Implementation & operational support experience in Cisco legacy ASA, FTD, Palo Alto, Fortinet & Checkpoint Firewalls
• Implementation and operational support experience in site to site VPN and Remote Access VPN
• Implementation & operational support experience in Blue Coat, Cisco WSA proxy and Websense / Forcepoint in URL filter, Web filter & Content Filter, SSL Encryption & Decryption
• Implementation & operational support experience in F5 load balancer LTM, ASM & operational experience GTM
• Implementation & operational support experience in Cisco ISE, IPS/IDS in FMC
• Operational support experience in routing and switching- router, switches, ACI
• Operational support experience in Cisco Email Security Appliance and DLP
• Implementation and operational support experience in Cisco Wireless Controller and Access Points
• Experience in Test Cases, LLD and Operational Manual build
Handling network and security issues for GE users from across the world at Incident Managemen
t level. Users are majorly from ASPAC, US and EMEA regions.
• Experience in ITIL process implementation.
• Strict SLA adherence, RCA, SOP, Proper Escalation, Vendor co-ordination, Documentations, Rep
orts.
• Methodological approach towards the problem solving, Self-motivated, dedicated.
• Auditing Cisco firewalls (PIX and ASA) and checkpoint firewalls.
• Ensure all live rules meet GE security standards.
• Understanding the network architecture and making changes in the rule that are vulnerable to
more specific rule for security.
• Packet capturing analysis through Wire shark.
• Change scripting and implementation as per the process.
• Troubleshooting firewalls (Checkpoint, PIX and ASA).
• Troubleshooting on F5 Load balancer.
• Troubleshooting on proxy related issues (Bluecoat and WSA)
• Analyzing logs.
• Emergency Configuration changes as per the requirements.
• Understanding the network architecture.
• Understanding the issues and working with different teams on a Bridge Call to resolve the issue
s.
Design the internal network and make the changes as per the requirement.
• Configuring devices
• Routers (Cisco-GSR12410, ASR9000, 7206, 3800, 3600, 2851, 2800 & 1800 Series) and Juniper-
M10i.
• Switches (Cisco - ME3800X, 2960S, 2960 Series).
• Configuring OSPF on GSR (running under 3 ospf areas) and ASR with the rest of the devices as In
terior Gateway protocol.
• Configuring BGP (iBGP and eBGP both) between multiple Autonomous systems in India.
• Configuring MPLS on WAN links and providing VPN services to the customers through vrf’s at cus
tomer edge routers and configuring RD tags and route targets in PE router and importing and ex
porting VPNV4 routes into BGP through implementing MP-BGP in the MPLS domain.
• Provisioning and Commissioning of new links all over in Karnataka by coordinating with the ISP’s
( BSNL, Railtel and PGCIL ) to make the line up at both the provider and customer end.
• Has commissioned near about 45 new links in Karnataka by taking the remote access of the devi
ce and sometimes by visiting the Clients place.
• Sound Knowledge of Modems like Tellabs 8110 CTU-R and CTU-S, Conventional and MLLN mode
ms, and also good knowledge of fibres like SC-SC, LC-LC, SC- LC and OFC Fibre Patch Cords.
• Good knowledge of ISP devices placed at NIC such as UTL-MP-0072 DWDM, Tejas TJ-1400, TJ-15
00, TJ-1600-STM16, ITI-TJ100CPr4-STM1, STM 4 and TJ100MC-MADM-STM16, Tellabs-6350 Switch
Node-STM64, ZTE-UNITRANS-DWDM.
• Configuring Juniper M10i at Customer edge locations and upgrading Junos to version 7.
• Taking the router configuration backups at the start of every month using 3C Daemon as TFTP s
erver.
• Monitoring of links using Nagios, What’s up Gold and One Click Spectrum.
• Monitoring router performance and status, by using tools like - MRTG (Multi-Router Traffic Grap
her), under weekly health checkup.
• Coordinating with L1 Engineers of Karnataka for configuring new links by taking remote access t
hrough putty - telnet or ssh.
in