Ghaziabad, Uttar Pradesh, India
AWS-CLOUD Infrastructure • Working in provisioning, operating, monitoring and maintaining linux and windows based infrastructure. • Knowledge of Backup and DR strategies,. • Providing highly available, Fault tolerance and scalable system architecture on AWS. • Working on various automation and deployment strategies on AWS. • Working with variousAWS-Compute, Storage, Networking and database-Services like VPC, VPN, EC2, RDS, ELB, ALB, SNS, SES, Cloudwatch, Route53, S3, Cloudformation, Lambda. Application Security Management • Analysing specific vulnerabilities and sensitive data. • Performing various types of testing like internal testing , blind testing & others. • Collection and storage of log files from business operating systems and software applications. • Monitoring System in real time , correlating events and identifying threats . • Management of systems by storing ,analyzing , manipulating and reporting on security records. • Tracking sequences of events indicating threats and alerts. • Managing the logs by data collection , efficient retention , searching , log indexing and reporting. • Managing the patches by testing and installing ,prioritizing vulnerability remediation and evaluating the compensation controls . • Managing the logs to ensure security and meet compliance . • Monitoring alerts and generating the reports . • Monitoring various systems such as Servers, Databases, Applications, Cloud Services. • Performing Scan of network accessible system like TCP/UDP packets. • Identifying open ports and services running on scanned systems. • Correlate system information with known vulnerabilities.
Network Engineer Innodata Software Solutions Dec 2019 to Jul 2020 (8 months) Current Project: Project Title: Global Support Telecoms Role : Network Engineer Duration : Dec 2019-July 2020 Environment : Cisco ACI & Cisco Firepower Roles and Responsibilities • ACI fabric deployment • Performing initial APIC turn-up and configurations, Commissioning Leaves, and Spines • Configuring ACI policy objects, interfaces, switch profiles, groups, and policies • ACI tenants, application profiles, Endpoint Groups (EPGs), contracts, and policies • Relating objects and policies —multi-tenancy in ACI • Configure external L2OUTs and L3OUTs • VMM integration with vCenter and UCS L4-L7 service insertion (firewalls, load balancers managed by ACI) • Migrating legacy network into ACI. Implementation of Cisco Firepower Device Manager(FDM) On-Box Management Deploying Firepower Threat Defense(FTD) & Firewall Basic Configuration Configuring Separate Management Machine Firepower Management Center (FMC) Registering Cisco FTD Firewall to FMC Connecting LAN Users to Internet and Outside World Deploying Access Control Policy Configuring URL Filtering Policies. Block Facebook. Allow Twitter. Block Gambling. Implementing SSL policy & Inspecting HTTPs traffic. Implementing File and Malware Policy Inside to Outside and Outside to Inside Rules. Defining Intrusion Policy and attaching it to Access Control Policy (ACP). Configuring Platform Settings on FTD.
Sr. Security Specialist HCL Technologies Jan 2017 to May 2019 (2 years 4 months) Project Title : Volvo Services Management Role : Sr. Security Specialist Duration : - March-2018 to MAY 2019 Environment : Cisco SD-WAN & Nexus Roles and Responsibilities: • Understanding of various components and architecture of the Cisco SD-WAN solution • Deploying vEdge routers in a secure extensible network • Creating templates to aid in the deployment and operation of the secure extensible network • Configuring and verifying overlay routing in the secure extensible network • Creating simple policies to control traffic flow in the secure extensible network • Configuring vPC PeerKeepalive and vPC Peer Link between Peer Switches • Configuring vPC on Cisco Nexus 7000 • Configuring Multiple vPC • Configuring vPC between 5K and FEX • Understanding of Fabric Path • Configuration of FabricPath • Configuring Switch ID and FabricPath • Understanding Fabric Path Database • Configuring vPC+ in FabricPath • Understanding OTV( Overlay Transport Virtualization) • Configuring OTV • Configurining SPAN, ERSPAN • Configuring EIGRP and OSPF In Cisco Nexus • Configuring HSRP, VRRP and GLBP in Cisco Nexus • Understand of ACI( Application Centric Infrastructure) • Understanding of APIC Hardware and it's functionality • Configuring Tenant, Context and Bridge Domain in ACI • Configure Interface Policy and Interface Policy Groups • Configure Switch Profile and Interface Profile. --------------------------------------------------------------------------------------------------------------------------------------------
Network Engineer Exponent Software Solutions Pvt Ltd. Apr 2012 to Dec 2016 (4 years 9 months) Project Title : Life sciences Business Services Role : Network Engineer Environment :Application Security & Aws Cloud Duration : Sep 2015 to Dec 2016 Roles and Responsibilities Analysing specific vulnerabilities and sensitive data.Performing various types oftesting like internal testing , blind testing & others.Collection and storage of log files from business operating systems and software applications.Monitoring System in real time , correlating events and identifying threats .Management of systems by storing ,analyzing , manipulating and reporting on security records.Tracking sequences of events indicating threats and alerts.Managing the logs by data collection , efficient retention , searching , log indexing and reporting.Managing the patches by testing and installing ,prioritizing vulnerability remediation andevaluating the compensation controls .Managing the logs to ensure securityandmeetcompliance .Monitoring alerts and generating the reports .Monitoring various systems such asServers, Databases, Applications, Cloud Services.Performing Scan of network accessible system like TCP/UDP packets.Identifying open ports and services running on scanned systems.Correlate system information with known vulnerabilities. Configuring AWS VPC public and Pvt subnets , AWS NAT Gateway, AWS NAT EC2 Instance, AWS VPC Peering , AWS VPC Endpoint, AWS Site 2 Site VPN Connections .Working with variousAWS-Compute, Storage, Networking and database-Services like VPC, VPN, EC2, RDS, ELB, ALB, SNS, SES, Cloudwatch, Route53, S3, Cloudformation, Lambda.