Candidates About

Pavan Kumar

Network Security Engineer

Professional Summary:

●        Network Security Engineer with over 3 years of experience in Network & Security Implementation; Proficient in installing, upgrading, troubleshooting, configuring, and supporting variety of Network & Security Devices.

●        Strong hands on experience in installing, configuring and troubleshooting of Checkpoint Firewalls.

●        Checkpoint Enterprise Firewall and End-Point Infrastructure Design and Deployment in large, branch office networks.

●        Experience in Implementing Check Point Firewalls R75, R77.

●        Configuration, Troubleshooting and Maintenance of Palo Alto Firewalls - PA2000 series, PA3000 series, PA4000 series and PA5000 series.

●        Deployment of Palo Alto enterprise firewall in production environments.

●        Monitor the network traffic post migration and validate the Palo Alto Networks configuration.

●        Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools.

●        Hands-on configuration and operational experience working on Juniper (SSG&ISG), SRX, Checkpoint Firewalls (Nat policies, VPN Configurations, policies) in both standalone and HA mode.

●        Knowledge on Juniper SRX240, SRX220, and SRX550 series firewalls.

●        Worked on Juniper Netscreen Firewalls like, NS50, SSG 550M, SSG520M, ISG 1000, ISG 200.

●        Managed network security processes using ASA Firewalls.

●        Involved in planning, design, implementation and troubleshooting of Cisco ASA Firewall.

●        Configured F5 Load balancer LTMs and GTMs to isolate traffic from the web servers.

●        Configured static NAT, dynamic NAT inside Global Address Overloading, TCP overload distribution.

●        Hands on experience in performing various configurations on Access, Distribution and Core layer switches like Cisco Catalyst 2960, 3750, 4507, 4010, 6506, 6509 switches.

●        Expertise in installing, configuring, and troubleshooting of Cisco Routers (3800, 3600, 2800, 2600, 1800, 1700, 800).

●        Expertise in installing, configuring, and maintaining Cisco Switches (2900, 3500, 3700 series, 6500 series).

●        Experienced in configuring, deploying, maintaining, and troubleshooting of routing protocols like RIP, OSPF, EIGRP and BGP.

●        Expert level knowledge on IP Addressing, Subnetting, VLSM, OSI model, TCP/IP model.

●        Proficient in implementing first hop redundancy protocols like HSRP, VRRP, and GLBP.

●        Global Provider-1 Deployment and Smart Centre consolidation

●        Experience in authentication protocols PAP, CHAP, 802.1x and Port Security and Configuring Security policies including NAT, PAT, VPN, Route-maps, prefix lists and Access Control Lists

●        Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: OSPF, EIGRP, RIP, IGRP, BGP etc.

●        Worked with Bluecoat proxy servers and Administration.

●        Experience working on network monitoring tools like, SolarWinds, CiscoWorks, Wireshark and Splunk.

●        Highly motivated with the ability to work independently or as an integral part of a team and Committed to highest levels of professional.

Technical Skills:

Certifications:

●        Cisco Certified Network Associate (CCNA) - R&S

●        Studying for Cisco Certified Network Associate (CCNA) - Security

●        Studying for Cisco Certified Network Professional (CCNP) - R&S

Experience Summary:

HP/DXC, Tulsa, OK

Title/Designation: Network Security Engineer                                                  Period: March 2016 – Present

Roles and Responsibilities:

●        Responsible for the planning, design, implementation, organization and operation of Checkpoint, Cisco ASA, Palo Alto, Juniper Firewalls based perimeter security network and network security devices.

●        Architecture Designed and Implemented Checkpoint R75.40 Secure Platform 77.20 Gaia with total 560+firewall, Cisco ASA 5540, 5580 and VSX, Juniper SRX 3600,650,240 600+ as per the business requirements.

●        Actively use  SmartView Tracker, and Checkpoint CLI (to security gateways) for troubleshooting.

●        Implementing and configuring Checkpoint VSX for security gateways.

●        Planning, designing, implementing, organizing and operating of Juniper SRX Firewalls.

●        Administer and support Juniper Firewalls Using NSM ( NetScreen and ISG firewalls)

●        Migration of checkpoint firewalls from Cisco ASA 5510.

●        Successfully installed Palo Alto PA 3060 firewalls to secure Data Center and provided L3 support for routers/ switches/firewalls.         

●        VPN setup and troubleshooting including IPSec and FlexVPN.

●        Configured and built an industry standard network monitoring and alert system using SolarWinds.

●        Plan and conduct complex project studies; includes analyzing multiple data sources and publishing results to the team or to the technical user community.

●        Troubleshooting network and firewall problems, specifically Checkpoint and some Juniper SRX firewalls.

●        Monitor that the firewall and network system is adequately monitored to identify and solve data communication problems and user performance issues; this includes understanding chronic issues causing inefficiency in operation and seek resolution.

●        LAN Management Service for remotely monitored and administered FW’s for over several global locations.

HCL, Chennai, India       

Title/Designation: Jr. Network Engineer                                                              Period: Oct 2012 – May 2014

Roles and Responsibilities:

●        Management of L2 and L3 technologies and security including adjacency/convergence protocols and techniques (EIGRP, OSPF, BGP).

●        Responsible for the planning, design, implementation, organization and operation of Cisco based data communications network and network security devices.

●        Maintaining the Network Infrastructure, Installation, migration and configuration of routers and switches for clients.

●        Configuration and Troubleshooting of core, distribution and access switches (Cisco 6500, 3750, 2950 series) in LAN and WAN networks.

●        Upgrading the IOS on 1900, 2900, 3500 series Cisco Catalyst switches and 2500, 2600, 3600 series Cisco routers using TFTP.

●        Managed the F5 Big IP LTM, GTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs.

●        Performing network troubleshooting, provided technical support, and recording of backup operations.

●        Restricting access to network using ACL.

●        Monitoring performance and availability of the network on an ongoing basis.

●        Worked on Network Security Implementation & Support.

●        Involved in the creation and closing of IMAC (Add, Move, Change Requests) tickets.

●        Communicating with the clients by creating tickets for the issue and dispatching to the correct queues for resolution. 

●        Interacting with second level support and providing them necessary details in order to resolve the issue.

●        Worked on network-based IT systems such as racking, stacking and cabling.

●        Network cabling, dressing, labeling and troubleshooting network drops onsite.

●        Involved in planning, designing & configuring LAN/WAN ensuring max uptime.

 Education:

   Master’s in Computers and Information Sciences

   SUNY Poly - Utica, New York

                Aug 2014 to Dec 2016

                Bachelor's in Information Technology

                GVPCOE (JNTUK) - India                                                                                    

               Aug 2008 to May 2012