Senior Network security engineer
Al Fardan exchange
Total years of experience :5 years, 10 Months
Responsible for network systems administration and maintenance, configuring NGFW Forcepoint Firewalls, Routers, Switches, Load Balancers, etc. Conduct daily network health checkups and ensure connectivity. Collaborate with teams on network IT projects. Provide 24/7 support for critical infrastructure and assist end-users. Proficient in CCNA/CCNP/CCIE, F5, LTM, GTM, WAF, AWS Routing & Switching, SDWAN/SDN, Palo Alto/FortiGate/Forcepoint Cybersecurity, network automation, and end-user security management. Skilled in technical documentation, vendor coordination, and designing enterprise infrastructure. Lead projects, ensure compliance, conduct audits, and develop disaster recovery plans. Stay updated on tech and mentor junior staff. Manage AWS security services like AWS Inspector, Guard Duty, WAF & Shield, and Firewall Manager.
• General administration and maintenance of network systems
• Configuration and maintenance of network Infrastructure includes NGFW Forcepoint Firewalls, Routers, L3&L2 Switches, WAF, Load Balancer etc.
• Daily monitoring the network connectivity including LAN/WAN/VPNs/MPLS etc.
• Daily monitoring the health check of the Network systems including NGFW, Router, Switches, Load Balancer, WAF etc. Coordination/support with business partner and internal team to complete the IT project related to network.
• Ensure the 24/7 support and availability for critical network infrastructure.
• End user network support
• End user security Management
• Technical Documentation
• Vendor/Service providers coordination
• Good understanding of network security architecture in enterprise network environments (Zero trust networks)
• Understanding of containers, Kubernetes PaaS environments in general
• Hands-on expeirence with SIEM Tool : SPLUNK, WAZUH
• Experience with threat hunting and cyber incident management, response and reporting procedures
• Administering the integrity, avalibility and confidenteility target as defined via a risk-based approach
• Proven knowledge and practical application of Firewall security, Advacned persistent threats and Malware Protection tools, sandboxing.
• Ability to conduct detailed analysis of various security related events like phishing, spoofing, Ransomeware, SQL injections etc
• Expereince with setting up hybrid enviornemnts, connecting on-premises infrastrucutre to the cloud using Direct connect AWS
• Practical knowledge in system/applicance Exploits, vulenrabilites, networkattacks, Packetanalysis tools (TCPDUMP, Wireshark.etc), Endpoint security, email security, cloud security, windows server & Active directory Exploits.
• Managing and Implementing Zone Based policy and security rules in Palo Alto ( PANORAMA) Firewall
• End-to-end configuration and managing the Palo Alto firewalls, checkpoint firewalls which includes addition or deletion of rules and troubleshooting if there are connectivity issues
• Upgrading the PaloAlto Firewall, Checkpoint Firewall, Fortigate Firewall, and F5 Load Balancer as part of vulnerability remediation
• Monitiroing and Managing Algosec/Tufin tools firewall logs capturing and firemon for rule clean checkup
• Renewal of SSL certificates associated with F5 VIP
• Handling day-to-day service requests and Incidents for Cisco devices, Palo Alto FirewallLoad balancers skills (Big-IP F5 knowledge/experience troubleshooting and upgrade the F5 ( LTM and GTM ) and Radware (Alteon)
• Upgradation of vManage, vBond, vSmart, vEdges of SDWAN circuits (Viptela) and Cisco Meraki MX devices
• Configuring new circuits on vEdge, TLOCs, and other necessary WAN configurations
• Diverting the traffic from primary link to secondary link in case of primary link having issue and vice versa
• Allowing the interesting Traffic into ASA & FortiGate firewalls based on the customer requirements
• Configuring the BGP, MPLS & Broadband on Routers based on the customer requirements
• Expereince with core switching and routing technologies such as OSPF, EIGRP, BGP, and static routing. Familirity with Wan and LAN technologies like SDWAN, SDN, SD-Access.
• Configuring and troubleshooting VIPs, nodes, pools, iRules, SNI Policies, SNAT on F5 loadbalancers
• Configuring and managing of cisco Meraki Wireless Access points
• Desirable experience in F5 WAF, GTM, LTM and DNS Infoblox, and AWS network security group enforcement polices and Firewall implement.
• Hands on experience with Firewalls from vendor like Cisco ASA, Forti gate, Paloalto .etc, understanding of NAT, PAT, ACLs and other managing Zero Trust Networks.
• Experience working with log management, security montioring, vulnerability management and security incident/event management tools ( SIEM) .
• Hands on experience in Datacenter technologies including Nexus switches (N5k and N9V), VMWARE, TCP/IP, BGP, STP, HSRP, NAT, QoS, SNMP, ACLs, Routing, Switching etc.
• Expert knowledge in installing, configuring and troubleshooting Cisco Nexus and Cisco IOS switches.
• Hands on experience in setting up and troubleshooting IPSEC VPN Tunnels.
• Comfortable facing the client on call during onboarding or troubleshooting calls
• Requires a general understanding of Cisco UCS in a virtualized environment
• Experience in network protocol analyzers/sniffers such as Wireshark.
• Knowledge of heterogeneous networking components along with knowledge of routing/ switching involving 100s of VLANs.
• Design, configure, administer, and troubleshoot complex Datacenter network environments across multiple geographic locations.
• Analyzing, troubleshooting and correcting network problems remotely and on-site.
• Manage and oversee network and datacenter products, services, protocols, and standards
• Implements, manages and troubleshoots existing network and system environments, and supports a variety of network equipment and other hardware.
• Set up IPSEC tunnels between the client and our datacenters as part of onboarding new customers.
• Hands on experience in private cloud technologies (VMware NSX)
• Evaluation and Recommendations concerning network security systems.
• Installing, testing network components as well as the functions associated with these tasks.
• Maintaining maintenance records on networking hardware.
• Oversee/perform new and existing equipment, hardware, and software upgrades.
• Responsibilities include technical documentation of all upgrading devices in the network
• Attending meetings and technical discussions related to NOC changes
• Implementing access-lists, configuration, management & troubleshooting of Fortigate & Cisco ASA firewalls
• Involving in the configuration and maintenance of IPsec Site-Site VPN
• Implementing security measures using ACL and configured NAT according to the connectivity requirement
• Implementing traffic filters using Standard and Extended access-lists
• Designed ACLs, VLANs, troubleshooting IP addressing issues and taking back up of the configurations on switches and routers
• Analyzing the firewall logs in Syslog servers and taking necessary action
• Documenting and drawing network diagram using Visio
• Handling operations & maintenance of Satyam WAN Network running all over world i.e. maintenance of point to point links and MPLS links connecting different states, ensuring proper functioning of BGP routing protocol (CE side), implementation of access-lists, configuration
• Configuration of SNMP and NTP on Router and Switches
• Inspecting the internet traffic by allowing and denying the traffic on Bluecoat web proxy
• Taking responsibility of severity 1, 2&3 issues and all kind of network connectivity issues
• Ensuring installation, configuration and operation of routed LAN/WAN with static routing protocol
• Configuring IPSLA for network performance monitoring, Edge-to-edge network availability monitoring
• Diverting the traffic from primary link to secondary link in case of primary link having issue and vice versa
• Implementing access-list on ASA as per users request
• Configuring HSRP on routers and switches wherever required so as to bring in high availability
• Handling and the thousands of Routers (Cisco & Huawei), switches (Cisco & Huawei).
• Configuring the ASA & Fortigate firewalls based on the customer requirements.
• Configuring the BGP, MPLS & Broadband on Routers based on the customer requirements.
• Handling the different kind of ticketing tools and working as per the SLA standards.
• Configuring the Cisco Wireless controllers to join the APs to WLC.
Highlights:
• Knowledge on NSX & VXLAN and ACI
• Experience in Converged Network and Unified Storage Infrastructure in Datacenter
• Upgrade the latest IOS version in ISR Routers & ASR Routers & Nexus Switches & Catalyst switches
• Blocked the IP`s at FortiGate/ASA alerts are getting with effected Malware/Vulnerability & suspicious alerts
In 2010, I obtained my Bachelor of Technology degree in Electronics and Communication from MIST College, affiliated with JNTU University in Hyderabad. This foundational education equipped me with a comprehensive understanding of electronics and communication systems, laying the groundwork for my career in the field.
In 2023, I completed a Post Graduate program in Cyber Security (PGCC) from Great Lakes University. This specialized program provided me with advanced knowledge and skills in the field of cyber security, preparing me to tackle the complex challenges of securing digital systems and networks in today's interconnected world.
Overview: In 2010, I obtained my Bachelor of Technology degree in Electronics and Communication from MIST College, affiliated with JNTU University in Hyderabad. This foundational education equipped me with a comprehensive understanding of electronics and communication systems, laying the groundwork for my career in the field.