Network Security Engineer
Smiths Detection
مجموع سنوات الخبرة :11 years, 10 أشهر
Configuration on Matrix Servers.
Creating network design for new requirement as per customers
Creating new Virtual Servers.
Creating Active Directory, policies, etc..
Configuration of re-check stations and workstations to communicate with Matrix Server.
Configuration of ASA 5506-x Firewall, troubleshooting active issues.
Configuration of Hirschmann Switches, STP configuration.
Configuration of EXSi, creating VM’s for different platforms.
Configuration of NSX on VM’s in order to get other network communication with our VM’s
Installation of NSX on different VM’s as per the requirement.
Configuration of Cisco 9300 Switch’s, Stacking, creating Vlan’s, ethernet channels, etc..
Troubleshooting active issues with related to servers and ports communication.
Troubleshooting Firewall, Switch, Router, TACACS, Cisco, F5, Pulse Secure, Cisco CUCM, Citrix NetScaler
and Cisco & Juniper Firewalls
Working and fixing issues with related to Data-center, Cabling, SFP+, etc…
Working on Pulse Secure SSL Appliances and SSL Offloading on F5
Experience in security incident handling, Vulnerability assessments and Fix.
Sound Knowledge of Routing Protocols like OSPF
Configuration of RSTP, Virtual Chassis Fabric, Ether channel
Working as one point of contact for critical issues with related to Data-center
Handling overall responsibility for the operation and security and networking environment
Configuration on devices Cisco ASA, Cisco FTD, Load Balancer f5 & Citrix.
Creating WAF policy on Big F5 LB and Citrix ADC.
Creating new VIP’s on Content Switching and Virtual Servers.
Creating Lanes on Citrix ADC and VPX for B2B and B2C.
Configuration of Rate Limit and responder policies.
Applying relaxation rules for URL’s on WAF integrated profiles and policy.
Working on JAWs Cloud adding new NSG group and mapping with security policy.
Working on F5 creating VIPs, SSL offloading, rewriting the policy.
Troubleshooting the VPN issues, NAT issues, ACL issues and global policy issues.
Worked on ticking portals HPSM, Citrix, NGO, and Azure.
Conducting daily stand-up meetings with team and tracking the progress on projects and tickets headcounts.
Designing the network and part of automation like Ansible.
Working on Azure Cloud whitelisting public IPs and opening global port.
Daily tickets resolution on issues like port opening
Configuration of SNMP on all cisco devices
F5 & Citrix LB configuration and troubleshooting
Discussion with client with the new requirement on LB’s and network design.
Greenbox- Project (Implementation of New Data Centre in Australia and New Zealand)
Manages the Data Center from end to end and responsible for designing, setting up, and managing information/network/server systems at data centres
Planning, organizing, implementing and monitoring all the connected devices at Data Center Operations
Maintain up-to-date knowledge of network administration and firmware integration. Monitor the environmental conditions of a data centre to ensure they are optimum for servers, routers, and other devices.
Conduct inspections on power and cooling systems to ensure they are operational and efficient
Organize the floor space that harbours data centre equipment to allow for easy accessibility and resolve operational, infrastructure, or hardware incidents in a data centre.
Leads the end-to-end systems infrastructure design, capacity planning, and performance management to meet systems requirements while finding opportunities for automation, cost savings, and service quality improvement
Working on Juniper SRX from initial configuration till migration.
Working on Juniper MX40 Routers from initial configuration till migration.
Working on SAN switch’s, working on the stacking of switches of EX4300.
Configuration of EX4300 switch on Junos Space
Configuration of Pulse Secure PSA 3000
Configuration of DiGi Passport 16 console.
Allowing firewall rule on Juniper JunOS space and on SRX 1500 firewall.
Troubleshooting day to day issues and configuration hops on Juniper SRX and Cisco ASA.
Upgrading Pulse Secure PSA 3000 patch file as per PCI requirement.
Configuration and upgrading nGeniusONE Netscout for all network devices.
Configuration and upgrading Netscout application Infinistream which is connected to all network devices for data mining.
Upgrading IPS/IDS as PCI requirement and performing an audit for these IPS/IDS Cisco ASA Firepower modules.
Installation, configuration, and maintenance of Cisco security devices.
Hands-on development and maintenance of infrastructure libraries in the Juniper and Cisco solutions. Assist in solving major design challenges and issues that require system-wide.
Translate reoccurring development challenges into new infrastructure requirements in Cisco ISE Working on Firewall policies, Failover, multiple context mode, Transparent firewall, and proxy devices experienced in VPN technologies IPSEC, SSL.
Perform network security design and integration.
Experience in cisco ASA Codes-8.4 to 9.6, Firepower modules and Proxy devices.
Implementing security appliances like ASA firewall, WEB sense, IDS and IPS. Ability to configure and operate network security-focused monitoring and logging systems. Working on different NAT and PAT technologies such us Static, Dynamic, Twice NAT and NAT traversal. Risk Assessments, Threat Assessment, and independent third-party security sets and industrials standard security practices.
Reviewed the IT infrastructure setup and suggested suitable measures to improve the performance & availability of the network & telephony system.
Conducted IT audits across the three offices, to determine gaps in the network & telephony setup. Provided technical advice on complex matters relating to the desktop & server environment, and ICT infrastructure.
Compiled all the IT infrastructure information and created new templates for future use.
Created AS-IS documents & diagrams for existing IT infrastructure.
Made new policies and procedures as per the best industry practices for ease of maintenance and operation.
Carried out vendor selection & negotiation for procurement of new hardware and software and governed their execution as well. Got the structured cabling implemented in the Server room.
Managed deployment of new Desktops (including OS & other office applications), Telephony Hardware, and Wifi equipment.
Reviewed existing contracts and suggested improvements.
Improvement - The entire IT setup looks more organized, with required information documented & available at one place, systems are in control, resulting in enhanced user’s experience.
Working on Platform of ISG 2000, JunOS, Linux, Juniper Firewalls, Fortigate Firewalls.
Implementing VPN tunnel between customers end to our end
Troubleshoot of VPN connectivity issues onboard
Off-boding and On-boding of VPN sites and customer’s
Expert knowledge of network protocols and algorithms.
Networking hardware such as Cisco routers, switches, load balancers, security gateways, such as Cisco, Checkpoint, Juniper, And Nortel
Experience in IP Telephones (AVAYA, Cisco), Wireless, Security, Routers, and firewalls (Juniper and Cisco ASA, Checkpoint, JunOS)
Taking weekly meeting with Team
Handling 10 People team
Assigning Work Orders and Task to respective Engineer and coordinating with Customer on the latest update.
Taking care of giving On-Time delivery and resolution to the customer as per the request.
Maintaining all documentation and reports of Customer and Change Request on VPN Tunnels.
WAN Routers and Junos Space Management System and Cisco Wireless LAN
Networking hardware such as Cisco routers, switches, load balancers, security gateways, such as Cisco, Checkpoint, Juniper, And Nortel
Experience in IP Telephones (AVAYA, Cisco), Wireless, Security, Routers, and firewalls (Juniper and Cisco ASA, Checkpoint, JunOS)
Hands-on Cisco 3750 configuration.
SSL VPNs such as Juniper SRX, Juniper ISG Cisco ASAs and Hands-on experience on Juniper ISG2000
Coordinating with Branch office Site contact to understand the site-specific Network devices and
connectivity.
Preparing the Task list for remote sites implementation steps with timelines and owners
Preparing the Activity list and configuration backup, fall-back plan and test cases
Responsible for the configuration of network devices used to design the service.
Maintaining & Troubleshooting 30 No’s L2 LAN switches. (Cisco 3750 Series)
Maintaining & Troubleshooting Cisco Wireless Access point in Ford entity.
Maintaining a Video Conference system using 128 Kbps ISDN link.
Troubleshooting Cisco 7910, 7912, 7936, 7940, 7960 IP Phones.
Maintaining license and Configuring Cisco Soft IP Phones with onsite team.
Procurement and commissioning of the leased line.
Configuring the MLLN, MPLS-VPN, Point to point
Leased line and ISDN Circuits in CISCO Routers.
Installation of various types of MODEMS for Leased Lines and ISDN.
Monitoring and connectivity of all these links, preparing reports, and troubleshooting in case of link
down.
Worked on Data Storage Network
Worked on SAN
Expert in support remote field service to server 2008 R2, 2003, etc..
Monitoring and maintaining the 18 Branches leased line and ISDN links at central site Location.
Preparing and sending the daily downtime and utilization report.
Commissioning and troubleshooting the links in case of any breakdown.
Making weakly Server Backup
Doing Server Recovery if necessary
Configuration of Juniper Firewall
Configuration of Switches Cisco catalyst 3524, Cisco 3750 V2.
Trucking of the ports.
Configuration of Matrix server of Smith Detection
Configuration of NetID Server CEIA.
Installation of Work-Stations of 2003 & 2008 and Re-Check Stations
Page 7 of 9
Installation of CCV IP Camera and making Backup of it
Maintaining CCTV NVR
Working on Active Directory group policy.
Configuring various Network and Router implemented.
Configure all types of Routers and Switches.
Configuring Routing RIP, EIGRP, OSPF and configuring VLAN’S and creating VLAN’s.
Configuring Access list both Standard and Extended
Database and system admin activities for production support and day-to-day operations
Space management to resolve Network issues
Evaluate various IT policies and procedure and recommend necessary remediation.
Migration of environment from one platform (OS) to other
Setup auditing on Windows Server 2008
Installing Active Directory
Making users and applying policies.
Reset the passwords of the users.
Worked on Windows Server 2008 Active Directory and all policies
Administration of users, concurrent manager, web and form servers
Applying Network policies
Applying Group policies
Maintain user security.
Maintaining all the System Administration works.
Troubleshooting on Network and System Administration Issues and connectivity problems
Major Project was on Wireless Sensor Network.
courses: SSC