Serving BizzSecure clients architecting various security solutions as listed below:• Redesign entire Security architecture for various clients including financial and Insurance sectors.• Setup new Data centers with advanced Security architecture and design.• Network and Security Assessment.• Vulnerabilities scan and remediation.• Participated in ISO27001 (BS7799), ISO20000 (BS15000), NIST and SAS70 Audits.• Conduct external and internal scans, penetration tests using various security tools like NMAP.• Design and setup Firewall and Advance Malware protection solution using Cisco Firepower Threat Defense appliances, Palo Alto and Checkpoints.• Design and setup Intrusion Prevention and Intrusion detection solutions using Firepower & Checkpoint Appliances.• Design and setup URL filtering solutions on Forescout Websense and Firepower Appliances.• Design and setup Advanced Malware and Email protection using Fire Eye 4400 and 2400 series appliances. FireEye NX appliances for sandboxing web traffic for filtering malicious URL’s.• Design and setup secure Cisco Anyconnect Remote VPN solution integrating with ISE using Two factor authentication and RSA Secure id tokens.• Working on various transformation projects migrating application servers from legacy infrastructure to state of the art high-end infrastructure.• Design various firewall solutions including Cisco ASA, Firepower, Checkpoint, Palo Alto and Juniper Netscreen, SRX.• Design and Setup various Identity management solutions using Cisco ISE.• Design and implement AAA solutions for various network devices using Cisco ISE and migration from Cisco Secure ACS to ISE.• Integrate Cisco ISE with MDM, AD, RSA devices & CA's.• Migrating various applications with load balancing capability.

• Develop and maintain test plans and test cases, tools and infrastructure to improve quality and efficiency of perimeter security and defense.• Conduct firewall assessments to identify configuration or policy implementation flaws and gaps that increase risk or violate information security polices, standards and/or best practices.• Design and setup security solutions for different applications and businesses.• Working on Firewall transformation projects.• Provide security solutions involving Juniper SRX 1400, 650, Net screen 5400, 5200, ISG 2000, 1000 firewalls with integrated IDS capabilities and Checkpoint NGX R75.40, (Gaia), R77 on Nokia IP395, 695 and 2455 platforms, Checkpoint Provider 1 and Cisco ASA 5585 firewalls.• Design and architect various security zones/DMZ's based on application requirements.• Design and setup Intrusion Prevention and Intrusion detection solutions.• Design and setup URL filtering solutions on Forescout Websense.

• Design and setup security solutions for different applications and businesses.• Provide security solutions involving Checkpoint Firewalls with integrated IDS capabilities.• Design and setup firewalls with in Active-Active modes and Active-Passive modes.• Setup External DMZ on Firewalls for placing the Internet facing servers and VPN concentrators.• Setup Site to Site and Client to Site VPN Solutions to different client locations.