Security engineer

• May 2019 - Present

Network Security Administrator

• Sep 2014 - May 2019

Working for ADNET (Abu Dhabi Networks) and providing network and security support for ADNET connected Abu Dhabi government entities and shared government services.Handling and updating Changes, Incidents, Request and Problem records in HPSM as per ITIL process.Managing and implementing changes in Next Generation Palo Alto firewalls.Implementing the IPS threat prevention feature in Palo Alto firewall and enabling the IPS feature in all necessary traffic flows.Dynamically blocking the malicious domains, IPs and URLs in Palo Alto perimeter firewalls using the EDL feature.Implementing Wildfire analysis to enable zero day malware detection.Performing in-depth analysis in troubleshooting by capturing the packets in Palo Alto firewalls.Managing Palo Alto firewalls using Panorama and pushing changes from Panorama.Implementing changes to block the unnecessary file downloads by blocking the different file types download in Palo Alto perimeter firewalls.Implementing security policies in Palo Alto firewalls based on user-ids.Troubleshooting Palo Alto Global Protect VPN connectivity issues.Configuring virtual VSYS contexts in Palo Alto firewall as per project needs.Configuring virtual firewall contexts in ASA firewalls as per project needs.Performing quarterly patch management review to upgrade the security devices.Mitigating the vulnerabilities and bugs identified in the network and security devices as per the vendor recommendation.Managing Cisco Firepower firewall and implementing necessary changes.Managing and implementing changes in Tipping point NG-IPS devices, deploying malware and DV signature updates on regular basis. Managing the NG-Tipping point IPS devices through the management server(SMS)Whitelisting IP addresses in Tipping point IPS to enable penetration testing.Implementing custom filters developed for zero-day attacks. Configuring traffic management rules and inspection by pass rules as per operational requirement.

Network and Security Engineer

• Dec 2012 - Aug 2014

Handling request and incident tickets in HPSM tools as per the SLA.Handling ticketing tool for customer raised incidents and responding with proper solutions to fix the issues.Following change management for any configuration change.Managing, configuring and troubleshooting Checkpoint firewall, Cisco ASA,F5 big IP Load balancer, Cisco 6513 switches and FWSM.Configuring and troubleshooting site to site VPN connectivity issues in checkpoint firewall.Adding policies and nat rules in checkpoint firewall as per the requirementAnalyzing the traffic logs and tcp dumps in checkpoint for troubleshooting the VPN connectivity issues.Adding malicious IP’s in SAM rule to block the malicious traffic and pushing that to all the checkpoint gateways.Using voyager and Gaia to do the fail over and route addition as per the requirement.Configuring Applications and URL in F5 Big IP for load balancingConfiguring and Troubleshooting in F5 load balancerConfiguring SSL certificates and Profiles in F5 big IP load balancer.Load balancing Application/URL in F5 GTM between load balancers.Load balancing the URL between two data centers using the F5 GTM Load balancer.Configuring the URL in load balancer to support as per the requirement.Troubleshooting BGP and EIGRP redistribution issues in the MPLS cloud.Troubleshooting the DMVPN issues between HUBS and spokes.Configuring and troubleshooting Cisco Remote Access VPN’s Attending the troubleshooting bridges with client to fix the connectivity issuesImplementing the change scripts during the scheduled change windows.

Network Engineer

• Oct 2010 - Dec 2012

Monitoring the Network links, Switches, Routers Firewalls using monitoring tool.Handling ticketing tool for customer raised incidents and responding with proper solutions to fix the issues.Following change management for any configuration change.Configuring and managing Cisco ASA-5510,5520 seriesConfiguring and managing Juniper firewall NS ISG 1000 series Troubleshooting site to site VPN connectivity issues in Juniper Netscreen firewall.Adding policies and nat rules in Juniper Netscreen firewall as per the requirementConfiguring Site to Site VPN tunnels in juniper and ASA firewallConfiguring route based Site to Site VPN tunnels in Juniper firewallConfiguring and troubleshooting Client to site VPN in ASA and Juniper firewall Configuring Source and destination routing in Juniper firewallConfiguring and troubleshooting NAT and PAT in ASA and Juniper firewallConfiguring policies in firewall as per the requirementConfiguring NAT based policies in Juniper firewallConfiguring Policy based routing and Extended access listsRe-initiating VPN tunnels as per the tunnel SA status.Bandwidth utilization report generation for ISP links.Configuring IP SLA and Track for auto backup link switchover.

Resident Network Enginner in Steria India Pvt Ltd

• Mar 2008 - Oct 2010

Monitoring of Network links, Switches,Routers.Handling ticketing tool and responding to user raised incidents.Managing complete data center operations for all network activity.Member of a team in Data center shifting project in Planning and backup for all network device IOS and configurations and design.Configuring and troubleshooting Cisco switches and Routers.Configuring VLANs and VTP in Cisco switches.Configuring port security and access list in Cisco switches.Network links monitoring and also coordinating with the Vendors (BSNL, Reliance and Airtel for the Links stabilization).Maintenance of Internet lines and lease line connectivity. Maintaining and updating the asset details of entire network equipments.Maintenance of Video conference equipment Polycom & Tandberg System.