Network Security Solutions Architect.

Information Technology & Cybersecurity

• Function as an area leader on large projects and/or project leader on small and medium projects. Coordinate resources, milestones, schedules, and related communication to meet project deliverables.• Design, implement, and support secure solutions for on-prem and cloud network infrastructures, defining and developing automations to enable large-scale deployments and operations.• Design, implement, and maintain highly available and fault tolerant network routing/switching/security infrastructure for the enterprise with minimal supervision from the Director.• Design & monitor Infrastructure technologies include, but are not limited to: Client based SSL VPN, Site-to-Site IPsec VPN, DNS, DHCP, firewall technologies, network load balancing technologies, network monitoring technologies, 802.11b/g/n wireless networks, and 802.3 based Ethernet networks.• Design, deploy and manage VxLAN architecture.• Design, deploy & monitor Nagios Xi.• Created Virtual lab environment for testing purpose through Eve-ng.• Interact and negotiate with vendors, outsourcers, and contractors to secure network products and services.• Collaborate with department heads to assess near- and long-term network capacity needs.

• Developed and maintained all systems, applications, security, and network configurations.• Led the team to successfully integrate Ekata AWS into Mastercard Corp network.• Led IT/Infrastructure team for Each location (Seattle, Singapore, Amsterdam, Budapest).• Led Mastercard team on M&A commercial integration (DII, TRA).• Led the team on discovery, design, and solution for required M&A.• Strategized implementation with teams during M&A integration (Network, Cloud, Servers).• Worked with Service delivery team to deliver circuits (MPLS, Internet) and help in localization.• Worked with vendors to identify and help select solutions for the business.• Created and maintained high-quality systems and application configuration documentation; including network diagrams, procedures, and technical guides, as well as knowledge base articles geared toward end user support and self-service.• Constructed IPsec Tunnel and Configured High Availability in various location.• Created and maintained documentation as it relates to network configuration, network mapping, processes, and service records.• Designed and deployed company LANs, WANs, and wireless networks, including servers, routers, firewalls, load balancers hubs, switches, UPSs, and other hardware

• Designed LAN (Ethernet) and WAN infrastructure for the new Data Centre Using PNETLab.• Configured and deployed HA between Palo Alto Firewalls.• Constructed IPSEC VPN tunnels in Palo Alto Firewalls in various locations.• Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists• Configuring and installing various network devices and services (e.g., routers, switches, firewalls, load balancers, VPN, QoS).• Configured and manage Cisco DCNM for Cisco Nexus 7k, 5k & replaced border routers.• Working with vendors to identify and help select solutions for the business.• Positioned and maintained AWS cloud Network Infrastructure.• Configuring, maintaining & deploying Palo Alto, Juniper SRX, Cisco ASA firewalls.• Configured, installed, & managed, proxy servers, WAN accelerators, DNS and DHCP.• Configuring and monitoring networking devices through Cisco Prime Infrastructure and ISE.

• Executed configurations for routers, switches, wireless APs, and WLAN controllers.• Configuration of Brocade switches Ex: ICX 7450, ICX 7750, ICX 7250 etc.• Maximize network performance by monitoring performance, troubleshooting network problems and outages, scheduling upgrades, collaborating with network architects on network optimization.• Troubleshooting TCP/IP, LAN/WAN.• Provide daily operations support and maintenance for Windows Server and Desktop Operating Systems, Active Directory, Microsoft Exchange, SQL Server, IIS, DNS, DHCP and Clustering.• Designing and implementing new network solutions and/or improving the efficiency of current networks.• Designing and monitoring VMware infrastructure and united communications (UC) systems.• Redesigned data center to include route redundancies and reliability (HSRP) and exchange routes with border routers (BGP).

• Worked on LAN technology Ethernet, TCP/IP, Fast Ethernet, Gigabit Ethernet, 10Gigabit, Ethernet, Port Channel, VLANS, VTP, STP, RSTP, 802.1.Q Administration, troubleshooting, support and implementation of single sign‐on solutions, EX: Imprivata, TAM/TFIM, ADFS/MS Azure.• Administration, troubleshooting, support and implementation of multifactor solutions, EX: Vasco Identity key (Digipass), Ping Identity MFA, DUO.• Administration, troubleshooting, design, support and implementation of Cybersecurity.• Access & Identity solutions including federated services authentications, access management solutions, role‐based access provisioning and de‐provisioning.• Performed switching technology administration including VLANs, inter-VLAN routing, trucking, port aggregation & link negotiation.

• Network Security Engineering.• Designed Network and Security solutions to support expansion of the network to handle new clients and projects.• Installed various network equipment in different office locations based on the requirement.• Setup new office in Chengdu, China (Project) - setup network switches, routers and firewalls, setup agent workstations,• backhaul connectivity through corporate MPLS network, internet connectivity, VPN connectivity to client.• Setup MPLS network backbone infrastructure (Project) - Lead a team to analyze existing point-to-point network architecture.• Setup PeopleSoft CRM environment (Project) - Created a firewall scheme to restrict internal and external access to production• critical environment, set up internal agent access and corporate client access to servers, configured server blade switches to• allow inter-server connectivity as well as connectivity to the rest of the network.• Performed supervisory role over Junior Network Administrator for period of 2 years as part of training for managerial duties.• Assigned tasks, monitored work flow and work load, acted as mentor, helped with training and certifications, discussed career path.• Configured the Cisco router as IP Firewall and for NAT, Configured RSTP, MST and used VTP with 802.1q trunk encapsulation.

Network Engineering.Network Support.Network Administration.