Aritra Ghosh
Capgemini
River Edge
1
Language
1
Certification
18
years of professional experience
Accomplished network security professional skilled in designing zero-trust frameworks and optimizing hybrid network architectures. Experienced in leading teams to enhance application performance and ensure regulatory compliance, committed to advancing security measures across enterprise environments.
Work History
Lead Network Security Architect
5 Months- Designed and managed high-availability enterprise WAN, LAN, and WLAN networks to optimize hybrid network traffic flow and enhance Quality of Service (QoS) across AWS and cloud environments.
- Deployed Network Access Control (NAC) with Cisco ISE and 802.1X protocols to ensure secure endpoint compliance and prevent unauthorized access.
- Deploy Network Access Control (NAC) utilizing Cisco ISE and 802.1X protocols to enforce secure endpoint compliance and restrict unauthorized access.
- Integrated network infrastructure logs into cloud-native SIEM platforms (Microsoft Sentinel/Splunk) to enable advanced real-time anomaly detection and threat response mechanisms.
- Maintain accurate, exhaustive documentation of network topologies, IP schemes, security protocols, and Standard Operating Procedures (SOPs).
Lead Network Security Architect
10 Years 7 Months- Led a team of 8 to deploy AWS ALB and WAF solutions for a high-frequency trading platform, improving application latency by 30% and achieving 100% PCI-DSS compliance.
- Architected a zero-trust enterprise security framework using Zscaler ZPA, reducing unauthorized lateral movement access by 50% across 10,000+ endpoints.
- Automated NGFW firewall rule updates with Ansible and Python scripts, reducing manual deployment time by 40% and eliminating configuration errors.
- Designed and established high-availability IPsec VPN tunnels between Palo Alto firewalls and AWS VPC, achieving 99.99% uptime through automated failover.
- Conducted recurring threat modeling, network vulnerability assessments, and penetration testing remediation, mitigating over 150 critical vulnerabilities each year.
Senior Network Security Engineer
4 Years 10 Months- Spearheaded enterprise F5 BIG-IP LTM/GTM load balancing upgrades for a trading platform, achieving zero downtime and boosting system scalability by 35%.
- Developed automated workflows for F5 ASM WAF rule updates utilizing the iControl REST API, reducing manual engineering effort by 50%.
- Optimized BGP and OSPF routing protocols, improving network performance by 20% while ensuring compliance with RPKI security standards.
- Automated VIP creation, SSL certificate rotation, and health checks with custom Python scripts, enhancing traffic flow efficiency.
- Mentored 6 junior engineers and created training modules on Palo Alto firewall configurations, enhancing team efficiency.
Network Security Analyst
2 Years 4 Months- Deployed and managed Cisco ASA and Palo Alto firewalls, achieving a verified 98% reduction in external network attack success rates.
- Acted as an escalation point for network incidents and resolved 100+ critical events annually using Splunk for traffic log analysis, forensics, and root-cause remediation.
- Configured Kerberos and secure end-to-end encryption protocols for network access control, reducing authentication incidents by 70%.
Education
Bachelor of Science - Information Technology
Skills
Cybersecurity strategy
Network architecture
Next-generation firewalls
Cloud security
Vulnerability assessment
Endpoint security
Threat intelligence
Traffic analysis
ISO 27001 compliance
Accomplishments
- Cloud-Native Security Framework: Designed an AWS-based architecture integrating WAF and automated encryption standards, reducing breach risks by 40% for a SaaS provider.
- Open-Source Firewall Automation Tool: Contributed to a GitHub automation project for Palo Alto NGFW rule updates, utilized by 1,000+ developers globally
Certification
- AWS Certified Security – Specialty (Amazon Web Services)
- HashiCorp Certified: Terraform Associate (003)
- AWS Certified Solutions Architect – Associate
- Check Point Certified Security Administrator (CCSA)
- Cisco CCNP Security: Implementing Cisco IP Switched Networks (642-813) & Deploying Cisco ASA (642-617)
- Cisco Certified Network Associate (CCNA)
- ITIL Foundation Examination
Languages
English
Full Professional
Timeline
Lead Network Security Architect
Capgemini
03.2026 - CurrentRead More
Lead Network Security Architect
TCS
08.2015 - 03.2026Read More
Senior Network Security Engineer
Accenture
10.2010 - 08.2015Read More
Network Security Analyst
HCL Infosystems Limited
06.2008 - 10.2010Read More
University of Burdwan
Bachelor of Science from Information Technology
Read More