Extensive experience in networking and security, including hands-on experience in providing network installation, network integration, network support, end-point security, and analysis for a broad range of LAN/WAN/MAN communication systems. Hands-on experience on implementation and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether Channel, STP, RSTP and MST. Implementation of HSRPand VRRP for Default Gateway Redundancy. Hands-on experience with Cisco 2960, 3650, 3750, 3850, Cat 4500X, Cat 6500, Cat 6880, and Cat 9K series switches in an enterprise environment. Experience Installing, configuring, and troubleshooting Nexus 2K, 3K, 5K, 7K, and 9K in the datacenter. Thorough with VPC, VDC and FEX. In-depth knowledge and hands-on experience in ISP Routing Policies, Network Architecture, IP Addressing and Subnetting, ARP, VLSM, TCP/IP, MPLS, NAT, ACL, DHCP, and DNS. I worked on Zscaler and Bluecoat proxies. Experience with PAC file, Access Policies for Web traffic, Log feeds to SIEM, Arc Sight, Policies for Internet WEB security based upon location, User ID, Department, AD group, etc. I worked on Cisco IOS for configuration & troubleshooting of routing protocols: OSPF, EIGRP, RIP, and BGP v4. Hands-on experience in configuring and supporting site-to-site and remote access Cisco IPsec, VPN solutions using ASA/PIX firewalls, Cisco AnyConnect and VPN clients. Responsible for Palo Alto and Cisco ASA firewall administration across global networks. Experience the Palo Alto 5K series firewalls. I worked on URL Filtering, SSL Forward Proxy, SSL Decryption, APP ID, and Threat ID on Palo Alto Firewalls. Working knowledge and demonstrated experience on the PAN-OS 6, 7.1, and 8.0 versions: PA 220, PA 820, PA-2K, PA-3K and PA-5K firewalls. Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration. I worked on Application load balancing with Cisco ACE, F5 LTM, GTM, APM, Citrix NetScaler, and A10. I worked on both software and Hardware load balancers. I am well versed with TCP, UDP, Http/Https, SSL, tcpdump, cur and TCL scripting for iRules. Hands-on experience on F5 LTMand GTM series like 6400, 6800, and 8800 for corporate applications and their availability. Experience on Virtual Servers, Pools, Persistence, iRules, Listener IP’s, WideIP’s, SSL, HTTP and TCP headers. I worked on Application traffic security with WAF, F5 ASM, F5 APM for Authentication, Citrix NetScaler’s for ICA proxy, Citrix VDI, Microsoft Office 365, Azure AD, AWS, Zscaler cloud-based proxies, Cisco IronPort proxies and Blue Coat. Experience with end-point Security, DLP, Threat analysis, Tuning, Assessment, Risk Analysis, Security Breach investigations and patching, and vulnerability testing. Experience with ALIEN VAULT, SEIM, N-CENTERAL, ORION, SONIC FIREWALL’S, WATCHGURD, and McAfee/Norton Virus Protection Utilities. Experience in Penetration Testing using manual/automatic tools Providing Technical help to customers on various issues of Symantec Endpoint Protection. Implementation of Symantec Endpoint Protection. Advanced Security Analytics and Endpoint Detection and Response solutions. Experience with industry-recognized SIEM solutions such as NITRO, Splunk, Force point and many other tools. Advanced Security Analytics and Endpoint Detection and Response solutions. Expertise in National Institute of Standards and technology Special Publication (NIST SP) documentation. Experience with HITRUST, HIPPA, PCI and IRS Pub. 1075 Regulation requirements and documenting policies and procedures. Demonstrated ability to work within matrixed resources in a team environment. Possesses strong organizational, time management, and diplomacy skills. Experience in Network intrusion and Intrusion detectionandprevention systems and firewalls. Experience with the process of identifying appropriate controls to comply with security policies and regulations. Experience with threat and vulnerability management tools that include commercial and open source. Experience with MacAfee and other SIEM tools for log analysis and threat management analysis. Providing Technical help to customers on various issues of Symantec Endpoint Protection. Implementation of Symantec Endpoint Protection. Responsible for network equipment maintenance and deployed upgrades to customers. Experience working with multiple vulnerability platforms like Rapid 7, Nessus, Tenable, and IBM Detailed knowledge and hands-on experience in configuring and troubleshooting Layer 3 Interior Gateway Routing protocols such as Link-State routing protocols (OSPF and IS-IS), Distance Vector routing protocols (RIPv1, RIPv2 and EIGRP), and Exterior/Path-vector routing protocols (BGP). Experience in testing Cisco routers and switches in laboratory and deploying them on-site production. DMZ zoning& configuring VLANs,routing, and NATs with the firewalls as per the design. I configured BGP/OSPF routing policies and designsand worked on implementation strategies for the expansion of the MPLS VPN networks. Implemented DMVPN for remote site connectivity. Experience with mGRE tunnels, NHRP tunnels, and IPSEC tunnels. Experience with Junos Pulseand Cisco AnyConnect SSL VPN Solutions. Hands-on experience and demonstrated knowledge on Software-Defined Networking (SDN)and SD-WAN. Experience with Cisco ACI on Creating VXLAN’s, VTEPS, VNID’s, EVPN, Bridge Domains, Tenants, Application profiles, contracts, etc on ACI. Thorough understanding of Spine-Leaf Architecture. SD-WAN experience deploying NFV and SD-WAN platforms (Flex Ware, VeloCloud, Silver Peak, Viptela). Demonstrated ability to work with technical and non-technical staff to identify user requirements and translate them into technology-based solutions. Working knowledge of testing practices and troubleshooting procedures associated with network support. Demonstrated ability to interpret and apply regulatory standards and technical specifications. Exposure to multiple ticketing tools, workflows, and monitoring tools that include ServiceNow, Jira, Remedy, SolarWinds, Wireshark, NetCool, Whatsup Gold, SNMP v2c and V3.