Sr Network Security Administrator
Gulf International Bank
Total years of experience :18 years, 4 Months
•Supported the creation, customization, and optimization of clients network security policy using Fortinet and Cisco ASA Firewall's.
•Configured, installed, and troubleshoot Fortinet Firewall's and Cisco network infrastructure.
•Supported and monitored anti-virus and firewall security logs (Symantec and McAfee).
•Concentrated on the design of the bank's Network Security/ Network, as well as troubleshooting and/or debugging network-related problems.
•Created Progress Reports, Policies and Procedures that were implemented within the Bank.
•Installed, configured and maintained Network/Network Security equipment.
•Responsible for operational support/maintenance/security of corporate network & security infrastructure.
•Supported the network systems in areas of configuration and troubleshooting of network design, implement and manage networking infrastructure between data centres and connecting networks.
•Configured and maintained IPSEC and SSL VPN's on Fortinet Firewall's.
•Juniper Netscreen and Juniper SRX service Gateway, Firewall Policy creation in SRX gateway, Hardening of SRX Firewall, Creating VPN etc
•F5 LTM: Configuration, Solution Designing and Managing F5 BIG IP LTM Load Balancer
•Creating VIPs, Creating Pools, and Associating Pools with VIPs, Creating Persistence Profile, SSL Profile, SSLOffloading, Creating iRules, designing with High Availability solution with Network Failover.
•F5 ASM: Creating the Security policy in ASM for Detect and Prevent the various application base attacks based on anomaly and apply those security policy in the HTTP/HTTPS VIP in LTM.
•Managing Cisco Wireless LAN Controller and Cisco Access Point
•Configuring and managing ForcePoint and Bluecoat proxy
•Deploying ISE in wired environment to perform Dot1x port based authentication configure the Posture polices perform Change Of Authorization CoA for users connecting to the corporate network.
•Integrating Configuring Cisco ASA Firewalls with ISE to the Posture policy compliance perform CoA for remote VPN IPSec, SSL AnyConnect users.
•Worked with Internal and external auditors for compliance issues.
•Supported the creation, customization, and optimization of clients network security policy using Check Point Firewall / VPN-1 (4.1 and NGX) and Check Point Provider.
•Configured, installed, and troubleshot Nokia firewall appliances (running Check Point Firewall on IPSO) and Cisco network infrastructure.
•Supported and monitored anti-virus and firewall security logs.
•Configuring and managing the high end Cisco Router and Switches with dynamic routing protocol of OSPF and BGP.
•Configuring Device Redundancy with HSRP and VRRP protocol, configuring L2 and L3 switches with Etherchannel. Configuring STP and VLAN.
•Hands-on experience deploying Nexus 7000/5000 Data Centre switches, designing 10G core infrastructure consolidating/migrating Catalyst 6500's to Nexus 7000 platforms
•Configured and maintained Cisco Call Manager, Unity and related Cisco Unified Communications configurations
•Handled SRST, Voice Routing Protocols, QoS and Voice Gateways and even maintained network engineering framework.
•Managed Cisco’s IP telephony and IPCC Contact Centre Enterprise
•Good Knowledge of Network Tools as Cisco Works, Solar Winds.
A part of technical team, of engineers who are responsible for managing complete technical support and projects.
Responsibilities Included:
•Installation and configuration of Checkpoint Provider-1 on Sun Solaris and Secure Platform.
•Installation and configuration of the Checkpoint VPN-1/Firewall-1 Solution on Nokia, Secure Platform, crossbeam and Windows Platform
•Installation and configuration of Nokia Secure Access System (NSAS) and Checkpoint Connectra a SSL based VPN solution.
•Applying regular HFA and upgrading to the firewalls to latest version.
•Service provider security design and implementation.
•Studying different security products available in the market.