Network Engineer III

• Feb 2023 - Present

Infrastructure Network Security Specialist

• Sep 2021 - Feb 2023

•Remote site Medical and Pharma manufacturing plant network( L3 switches and routers ) and security devices ( Palo Alto VMs 300,500 ) build and maintain facilities. •IPsec VPN tunnel configuration and build with B2B customers and support. •Configuring Cloudgenix Firewall and building and maintaining Zscaler Proxy for outbound/Internet calls from remote sites and data center routes. •Inspect and filter web traffic from remote sites using Zscaler configuration. •Supporting the third-party VLAN traffic which is not a trusted entity to Bypass Zscaler inspection. •Maintaining standards to add domains in a category and use the category in the SSL exception in Zscaler configurations. •IoT SSID VLAN segmentation and applying and learning security policies, cutting over Palo Alto VM Firewalls. •DMZ Core Switch and Palo Alto Firewall Refresh creating a TAP interface, configuring security policies and SVIs on the Firewall for a better security posture. •Configuring and Maintaining Sophos Firewall for AWS environments maintaining decrypt policies and outbound flowing traffic. •Configuring Dynamic Routing IPsec VPN Tunnels with BGP to GCP cloud routers and adding the needed NATs and security policies. Show less

Network Security Engineer

• Jul 2018 - Sep 2021

•Complex network flows from on-premise Web Hosting Infrastructure Datapower devices to Business Partner Network fleeting multiple firewalls and routing. Governed Architectural standards for Virtual Desktop Extranet environments to be able to communicate with the Vendor. •Executing production engineering processes on the Local Traffic Manager (LTM) load balancers in changing the virtual server types, defining new rules for traffic picking and rerouting automatically to the opposite Datacenter, changing the monitor type for a simple HTML read in the Tools Environment for the Genesys IVR voice platforms for the Nationwide Finance business area and the Contact Center team. •Delivered extensive product optimizations for the network flow in the Media DMZ Voice platforms network cages and implemented needed security policies for the public internet communicating with the internal voice gateways for routing of voice calls from desk phones to personal client mobiles. Troubleshooting complex RTP, and SIP calls within Media Networks added new routes and VLAN interfaces to the Media Firewalls for East Datacenter routing. •Modifying and scripting changes needed on the BigIP Global Traffic Manager (GTM) load balancer across data centers. •Reviewing network and security configuration for technology products migrating over to AWS cloud, governing data protection in Amazon VPC, and controlling with best security policies for inbound and outbound traffic back into the data center. •Day to Day operational support for firewalls, load balancers, proxy, and other network products. •Incident management. •Software upgrades, hardware refresh, and vulnerability management. •On-call coverage on a rotation basis. •Weekend support for critical infrastructure changes. •Participation in BCP and DR activities. •Network support for application migrations. Show less

Senior System Engineer

• Jun 2015 - Jul 2018

•I have worked as a Senior systems engineer in Infosys limited as L2 Network Engineer which involves resolving incidents in Service now within the agreed SLA with the customer. Arranging/ scheduling calls involving customers/users and multiple vendors to have a quick resolution. •Troubleshooting, scheduling, and performing configurational changes on Citrix NetScaler like -Multi-protocol VIP creation for reverse-proxy setup, -Generating CSR and binding SSL certificates to the VIPs, -Creating Transformation Profiles, Policies and attaching them to appropriate VIPs as per customer requirements. •Coordinating with ISPs like Orange, Telefonica, AT&T, BT, and Vodafone.. for issues related to WAN links and for WAN failover testing. •Drafted various KB articles and SOPs for team members, engaging with multiple stakeholders on multiple issues. •Coordinating with various onshore teams & engineers for incident resolution as and when required. •Scheduling and performing configurational changes, installing, replacement, monitoring, and troubleshooting of Cisco & HP devices. •Troubleshooting and resolving issues related to high bandwidth utilization, slowness, and unreachability of servers. •Monitoring the Infrastructure of the network using tools like CiscoPrime Infrastructure, Libre NMS, SolarWinds, Nagios XI, and Aruba Airwave. Show less