Shijin كوبارامبيل

Spearheading the Network Security for all projects, managing the design, installation and maintenance of companys network and IT Infrastructure with Technical Team to monitor specialized Data Center and Disaster Recovery Site for 250 branches in UAE and Kuwait.
• Strengthening the reliability and security of IT Systems by closely monitoring & evaluating network performance issues including availability, utilization, throughput and latency.
• Designing, implementing, and maintaining F5 network devices, including load balancers, application delivery controllers, and SSL VPNs.
• Leading vulnerability audits, forensic investigations and mitigation procedures and driving the Information Security, Data Centre Networking and Business Continuity activities.
• Monitoring network performance and troubleshooting network issues including connectivity problems and slow performance and ensuring network is running smoothly and efficiently.
• Implementing security controls like firewalls, intrusion detection systems, and VPNs, to protect network from security threats and ensure compliance with industry regulations.
• Maintaining network & systems by managing product and capability roadmaps; establishing maintenance procedures, and working with systems administrators and engineers to perform regular network maintenance.
• Managing network capacity and scalability to ensure that the network can support the organizations growth and changing needs.
• Managing the design, installation, upgradation, maintenance, and troubleshooting of multiple vendor security products including Fortinet, Juniper, Checkpoint and F5.
• Administering firewall performance tuning, installation & configuration multiple Demilitarized Zones (DMZs); configuring, troubleshooting wired and wireless network problems and checking firewall logs & activity.
• Supporting and monitoring the existing infrastructure, supervising preventative maintenance and backup as well as performing other regular support activities to ensure effectiveness.
• Leading the design and documentation of infrastructure processes, procedures and standards along with the maintenance and preparation of system and software documentation.
• Developing cost estimates and recommending systems development as well as upgradations to existing systems; evaluating infrastructure services equipment and software for purchase.
• Security Strategy and Planning: Developing and implementing an effective security strategy to safeguard financial systems, networks, and data. This involves identifying potential risks, assessing vulnerabilities, and designing appropriate controls and countermeasures.
• Security Architecture: Designing and implementing secure network architectures, including firewalls, intrusion detection/prevention systems, and data encryption mechanisms. Collaborating with other IT teams to ensure security is integrated into system designs and infrastructure.
• Emerging Technologies and Threat Intelligence: Staying updated with the latest trends and technologies in cyber security, especially those relevant to the financial services industry. Monitoring threat intelligence sources to stay informed about new and emerging threats and proactively mitigating potential risks.

As Assistant Manager - Network Security I have lead a 5-member Network Security Operations Team managing enterprise-wide security infrastructure for 300+ branches across UAE, Kuwait, and an IT development center in India.Responsible for the design, planning, delivery, and operation of all branch IT Infrastructure and Data Centers infrastructure.
- Act as the escalation manager for all Level 1 & Level 2 network security incidents, ensuring business continuity and zero-downtime network operations.
- Oversee IT infrastructure integration with third-party payment gateways, financial institutions, and government entities for secure remittance, cash pickups, and digital wallet services.
- Collaborate with business development teams and external partners to ensure seamless API connectivity between middleware servers and third-party systems while adhering to IT security best practices.
- Architect and implement Next-Generation Firewalls (NGFWs), Web Application Firewalls (WAFs), and Zero Trust security frameworks to protect financial transactions and customer data.
- Ensure regulatory compliance with PCI DSS, ISO 27001, NESA, GDPR, and Central Bank of UAE security mandates, working closely with auditors and regulators.
- Design, deploy, and maintain secure network architectures across LAN, WAN, and SD-WAN, optimizing latency, redundancy, and resilience.
- Manage Application Delivery Controllers (ADC) and Load Balancers (F5 BIG-IP LTM/APM) to enhance application security, performance, and availability.
- Manage relationships with technology vendors, MSSPs, and financial regulators, ensuring alignment with industry-leading cybersecurity solutions and best practices.
- Deploy advanced Cyber Threat Intelligence (CTI) strategies by integrating Netskope Cloud Proxy, Forescout NAC, and CrowdStrike EDR to enhance network security posture while overseeing endpoint security, threat detection, and vulnerability management using CrowdStrike EDR, SIEM tools, and forensic analysis techniques.

As Sr. Network Engineer
- Deployed firewalls, intrusion detection systems, and VPNs to protect the network from threats, achieving full compliance with regulatory standards.
- Oversaw the design, installation, and troubleshooting of security products from vendors including Fortinet, Juniper, Checkpoint, and F5, ensuring optimal performance.
- Conducted regular stress tests and tuning of network components to maximize system efficiency and security.
- Managed network scalability to accommodate organizational growth and evolving IT needs.
- Administered multi-DMZ environments, firewall configurations, and troubleshooting, while regularly reviewing logs to identify and mitigate risks.
- Maintained high availability for critical services through consistent monitoring, timely upgrades, and rapid resolution of incidents.

• Administered firewalls in all facilities, configuring and monitoring Site to Site IPSec VPN, SSL VPN and Client VPN
• Recognized for successfully setting-up and managing IP Telephony with 500 extensions operating on Avaya S8800 Server with G450 Gateway.
• Created object group, successfully configured Security Context, Modular Policy Framework and implemented network security with access-lists, Zone Based Firewall, AAA, SSH and NAT.
• Developed, implemented and maintained policies & procedures, and associated training plans for information security, network administration and disaster recovery.
• Defined and implemented network disaster recovery and hardware & software and monitored high availability and Load Balancing of Edge firewalls.
• Played a key role in Trainers Campaign as well as organized and conducted IT Security training for departmental staff.
• Documented and maintained reports related to network problems and network topology changes and resolutions.
• Assisted in developing relevant IT policies and procedures for annual information security audit - ISO 27001 of organization

- Administered firewalls across all facilities, ensuring secure operations through effective configuration and monitoring of Site-to-Site IPSec VPN, SSL VPN, and Client VPN.
- Designed and implemented network security measures, including access-lists, Zone-Based Firewalls, AAA, SSH, and NAT, ensuring a robust and secure infrastructure.
- Configured Security Context and Modular Policy Framework to strengthen the organization’s IT security posture.
- Successfully set up and managed IP Telephony systems with 500 extensions, utilizing Avaya S8800 Server and G450 Gateway for seamless communication across the organization.
- Developed and enforced policies and procedures for information security, network administration, and disaster recovery.
- Played a key role in the ISO 27001 annual information security audit by assisting in the development of IT policies and procedures.
- Defined and implemented network disaster recovery plans, monitored hardware/software reliability, and ensured high availability through effective load balancing of edge firewalls.

Provided technical support to customers for installing, configuring and troubleshooting SonicWALL firewall and fixing network related problems.
Managed and resolved critical issues and escalated cases from Medallion Partners and Business Partners of SonicWALL by offering appropriate solutions.
Troubleshot and resolved issues by utilizing best practices for problem resolution and documented step-by-step activities involved in issue resolution.
Mentored new engineers by answering technical questions, escalating cases, and teaching detailed process development.
Handled complicated issues relating to configuration of IPSec VPN & SSL VPN and recommended suitable action plans.
Promptly supported various issues relating to:
Security Services i.e., IPS, Gateway Antivirus and Spam Filter.
High Availability and Load Balancing.
Content Filter Services.
Syslog Server using Viewpoint.

- Provided technical support to customers for installing, configuring and troubleshooting SonicWALL firewall and fixing network related problems.
- Managed and resolved critical issues and escalated cases from Medallion Partners and Business Partners of SonicWALL by offering appropriate solutions.
- Troubleshot and resolved issues by utilizing best practices for problem resolution and documented step-by-step activities involved in issue resolution.
- Mentored new engineers by answering technical questions, escalating cases, and teaching detailed process development.

Managed the entire network of Software Development center with 150 workstations in Chennai office facility and multiple branch offices in the US.
Configured networks to ensure smooth & reliable operation and monitored computer networks connected through VPN.
Installed administered and troubleshot Windows 2003 servers and workstations and fixed problems of routers & switches.

- Managed the entire network of Software Development center with 150 workstations in Chennai office facility and multiple branch offices in the US.
- Configured networks to ensure smooth & reliable operation and monitored computer networks connected through VPN.
- Installed administered and troubleshot Windows 2003 servers and workstations and fixed problems of routers & switches.

Reviewed and analyzed customer requirements given by presales team and notified the team about the solutions offered.
Installed, configured & troubleshot HP Proliant ML/DL series server, HP Desktops and Printers for subscribed customers.
Visited client sites for installing and troubleshooting of switches, routers, servers and other peripherals.

- Reviewed and analyzed customer requirements given by presales team and notified the team about the solutions offered.
- Installed, configured & troubleshot HP Proliant ML/DL series server, HP Desktops and Printers for subscribed customers.
- Visited client sites for installing and troubleshooting of switches, routers, servers and other peripherals.