Shivanshu Misra
Senior Engineer - Virtualization & Cloud
Dublin,CA
Summary
Certified network and cloud security professional with 6+ years of experience in virtualization and enterprise firewall technologies. Strong expertise in detailed risk and threat assessment with a deep understanding of security vulnerabilities and corresponding mitigations in multi-cloud system architecture.
Overview
7
7
years of professional experience
6
6
years of post-secondary education
4
4
Certifications
Work History
Senior Engineer
Palo Alto Networks Inc.
Santa Clara, CA
01.2017 - Current
- Provide virtualization subject matter expertise in NGFW and cloud infrastructure, application & data security feature deployments on PaaS and IaaS computing infrastructure.
- Leverage layered security models to defend critical network infrastructure.
- Own all aspects of cloud security product definition including vendor integration, platform integration and monitoring for public, private or hybrid cloud platforms.
- Build Python modules to automate deployment of Palo Alto Networks firewalls.
- Streamline automated deployment of VM-Series firewalls and VM instances on public cloud using Infrastructure-as-Code tools such as Terraform, AWS CloudFormation, Azure ARM, Google Cloud Deployment Manager, Ansible.
- Comprehensive knowledge on syslog integration with Splunk server including managing data inputs, indexes, field transformations and user access.
- Proficient with VM-Series and Panorama integration with Docker orchestration and containerization using Kubernetes.
- Effectively lead cross-functional technical discussion and recommendations across infrastructure, management, application development and support teams.
- Manage escalations from partners and other high-priority security incidents, bug reporting using Jira.
- Routing and switching fundamentals, TCP/IP and OSI models, IP addressing.
- Develop solutions for customers complex network security issues related to PKI, SSL-Decryption, IPsec VPN, Global Protect, URL Filtering, User-ID, Panorama, system performance, High Availability etc.
- OWASP Top 10 Issues identifications like DoS/DDoS, SQLi, CSRF, XSS, RESTful APIs, unvalidated redirects etc.
- Drive knowledge share sessions and conferences on virtualization technologies with as required.
- Publish reports, manage Virtualization/VM-Series space internal webpages and technical support bulletins.
- Participate in on-call rotation coverage in managing issues.
Network Security Engineer
CSS Corp.
Draper, UT
01.2015 - 01.2017
- Managed corporate network security solutions with an emphasis on internet and other external network connections.
- Troubleshoot and perform end-to-end configuration of Palo Alto Network platforms including VM-Series, PA-200, PA-500, PA-2000, PA-3000, PA-4000, PA-5000, PA-7000 series, Wildfire cloud based malware analysis and Panorama (Virtual Appliance, M-500, M-100).
- Primary administrator for Palo Alto Networks firewalls, DNS, email gateway, ftp, IPSEC VPN, and other internet services.
- Handle configuration changes in network architecture and provide information on design practices and upgrade procedures.
- Recommend best practice to improve network performance and security including policies, vulnerability protections, User Activity reports, WAF.
- Develop automation and utilize frameworks to scale both protection and mitigation tools.
- Evaluate and testing new vendor platforms and in house network initiatives for security issue.
- Built collaborative relationships with cross-functional teams.
- Became lead "go-to" person for new reps and particularly for challenging escalations as one of company's primary mentors of both new and established employees.
- Drafted security standards and procedures documents.
Technical Support, Level II
Office of Technology Services, IIT
Chicago, IL
05.2013 - 12.2014
- Serve as University's FPOC (First point of contact) for technology and network-related service requests.
- Manage campus lab infrastructure deployment, installation and maintenance to increase business functionality.
- Provide remote assistance to install and update business applications for students, professors and staff.
- DHCP Network Registration, IP routing and Active Directory maintenance.
Software Engineer
Accenture
Pune, India
07.2010 - 12.2012
- Experience across Finance, Telecom, and Insurance domain diamond clients of Accenture in CRM (Customer Relationship Management) functional area and Oracle PL/SQL and Oracle Fusion as technological realm.
- Implemented complex functionalities, which involved working closely with analytics team, SQL designing for fetching data, database development using PL/SQL and front-end development using oracle forms.
- Managing end to end flow journeys including order provisioning, order configuration and order completion.
- Working on Support related activities for designated clients and teams.
- Involved in client coordination, quantitative analysis, perform technical troubleshooting to determine root cause of software or hardware.
- Database development, tuning, query optimization (Oracle).
- Led team of 10+ resources on training and sharing knowledge with series of 5 technical sessions in account modules.
Education
Bachelor of Technology - Computer Science
Harcourt Butler Technological Institute
India 08.2006 - 06.2010
Master of Science - Computer Science
Illinois Institute Of Technology
Chicago, IL 01.2013 - 12.2014
Skills
OSPF, BGP, Static Routing, ECMP, SD-WAN
Automation, Python, Ansible, Terraform, CloudFormation Templates, RestAPIs, Cloud Deployment Manager, ARM Templates, JSON
OWASP Top 10, PKI, Decryption, SSL/TLS, ACL, VPN, IPSEC, User-ID, IPv4/IPv6, SIEM tools, High Availability, TCP/IP
Breakpoint, Tcpreplay, Spirent, Wireshark, Microsoft Network Monitor
VMware, Microsoft Hyper-V, OpenStack, Cisco ENCS, Amazon Web Services (AWS), Microsoft Azure, KVM, GCP, Alibaba, Oracle Cloud (OCI), KVM, Public Cloud Load Balancers, Autoscaling, IAM, Kubernetes (AKS, GKE, EKS, Openshift), Docker, Containerization, Bootstrapping, IAM
Vulnerability and Risk Assessments, Partner Integrations, Customers PoCs
LACP, VXLAN, VLAN, NAT, DHCP, DNS, ARP, Authentication/Authorization, GlobalProtect, Endpoint Protection, Okta MFA
Customer Relationship Management Tools, Salesforce, Jira, Bitbucket, GitHub
Oracle PL/SQL
Palo Alto Networks, Panorama, Prisma Access, Cortex XDR, Cisco
Linux, Unix, Red Hat, Bitnami WordPress, Centos, Debian, Windows Server
Certification
Cisco Certified Network Associate (CCNA) - Routing & Switching
Accomplishments
· Awarded Most Valuable Player for Q1-2020 in Palo Alto Networks.
· Consistently maintaining top performance with the overall quality score above 108% each quarter in CSS Corp.
· Received a fast-track promotion in Accenture and Palo Alto Networks within 12 months awarded to less than 30% of the fresh recruits across the organization.
Timeline
Python for Everybody Specialization - Coursera
09-2019
Palo Alto Networks Certified Network Security Engineer (PCNSE)
04-2018
Senior Engineer
Palo Alto Networks Inc.
01.2017 - Current
Accredited Configuration Engineer (ACE) - 6.1
04-2015
Network Security Engineer
CSS Corp.
01.2015 - 01.2017
Cisco Certified Network Associate (CCNA) - Routing & Switching
03-2014
Technical Support, Level II
Office of Technology Services, IIT
05.2013 - 12.2014
Master of Science - Computer Science
Illinois Institute Of Technology
01.2013 - 12.2014
Software Engineer
Accenture
07.2010 - 12.2012
Bachelor of Technology - Computer Science
Harcourt Butler Technological Institute
08.2006 - 06.2010