Working with OMYA Germany (A leading Global producer of Industrial minerals) as a lead implementation Consultant for cyber security projects including the Win10 rollouts, deployment of new network infrastructure and security profiles to enhance companies Network security infrastructure across the plants/offices worldwide.Deployment and management of FortiManagers-VM64 HV to manage fortigate firewalls hardware and VMWare models.Performing FortiGate firmware upgrades on FortiGate Firewalls and Forti Managers.(FortiOS 6.4.7)Configuration and Management of access and core switches (Cisco MERAKI MS & MX and NEXUS 7k and 9k series) to achieve end to end connectivity of the manufacturing plants worldwide.Deployment and management of Checkpoint Management servers (R70.30 till R80.40) and Quantum security gateways (6900 till 26000 Series).

Worked with Deutsche Bank at Canary Wharf London.Involved in Strategic planning and Deployment of advanced Firewall solutions and migrations to achieve the vision, implementation and assessment of the plans. Performed recertification and migration of global Firewall databases.Overall design, connectivity and regulatory reviews of entire firewalls infrastructure including the creation of design and installations modules. Global provisioning of Development, UAT and Production infrastructure incorporates of remote access using BIGIP F5, web proxies and WAN acceleration using steelhead Riverbed appliances.Managing connectivity of SD-WAN to operate with Microsoft AZURE and Amazon web cloud (AWS). Prioritising SD WAN sites to aggregate to gateway points and creating interconnections till AZURE cloud.CISCO ISE deployments and management

Worked with DP World, the Gateway of London. Deployment of advance IT security solutions including the migration of entire IT Security infrastructure to get complete visibility and precise control over the Network traffic.Subject Matter Expert of CISCO ISE deployments and management.Migration of Cisco ACS to Cisco ISE including the integration of 400 plus network devices from multiple vendors like Cisco switches, Nexus 7k and 9k, Checkpoint 15000 gateways, F5 BigIP LTM, Juniper SRX, Cisco wireless LAN controllers, Solar winds, Prime infrastructure, UCS fabric interconnect.Migration of Cisco ASA and Juniper SSG firewalls to AMAZON AWS Cloud (Palo Alto VM 300,500 Series).

Worked with IBM and EVRY as a Security consultant delivering projects for NORGES BANK, POSTEN NORGE, TELENOR NORWAY, Gjøvik District Court, Gjensidige Nordic insurance group and for multiple Financial customers and investment Banks, Energy Companies and other Large Manufacturers.Implementation and management of BIGIP F5 Load Balancers, Checkpoint domain manager, VSX clusters, Cisco ASA’s, Triton Force point proxies, PALO ALTO Firewalls and site to site VPN solutions.Worked on IBM Security Access Manager and IBM Identity and Access Management (IAM) Solution tool to integrate web, mobile and cloud access, and provide security at the same time, including single sign-on and integrated access management control.Configured AZURE AD to connect/sync with on premise AD in order to manage end-user identities and access privileges.Manage configure, administer and documented F5 Load Balancer (LTM & GTM).

Working on Anglo American plc and De Beers Projects as a Network Security operations lead managing all aspects of IT Network Security Infrastructure.Responsible to Identify and drive Security Projects for Overall Security Operations. Accountable for enabling Service Improvement and best practice implementation in the Security tower and act as 3rd level escalation for Security Delivery and Compliance.Subject matter expert on Firewall implementations and SSL VPN deployments including Juniper SA and MAG Series, Palo-Alto Networks, Juniper (SG and SRX),Cisco products and Checkpoint series. Configuration and management of F5 Load Balancers (BIG IP) including LTM and SSL Traffic management.Responsible for BIG-IP installations and upgrades.Network performance and capacity planning using Cisco Ironport proxies and Barracuda virtual appliances.Responsible for performing vulnerability/penetration scanning using Qualysguard virtual scanner and hardware appliances.Network/Security devices integration with SKYBOX Security to ensure policies compliance across the network.Accountable for Security Architecture Review and recommendation to Customer.Conducting Periodic review with Customer.

Responsible for the overall network security including network consultancy and designing.Network security proposals preparation and implementations.Completed projects for companies in diverse sectors including Investment Banks, Pharmaceuticals, The Automotive Industry, Energy Companies and other Large Manufacturers.Fine tuning the juniper SSG/SRX boxes and customer handover (All hardware models).Implementation and management of Juniper Firewalls (SSG and SRX), Juniper SSL VPN boxes (SA and MAG), Juniper Dialup VPN, Palo Alto Networks, Cisco PIX/ASA Firewalls, and site to site VPN’s.Configuration and management of F5 Load Balancers (BIG IP) including LTM implementation for TCP, UDP, HTTP, FTP, SSL, SIP, and Microsoft® Remote Desktop Protocol (MSRDP) and HTTP connections optimization.Creation and distribution of Virtual servers to the pool members. Creating Load balancing pools, virtual servers and profiles.Configuring TOS level and load balancing methods including priority based member activation including Pluggable Authentication Module (PAM) technology to use multiple authentication methods.Configuration of SNAT AutoMap feature and SNAT Pools.Configuration, management and up gradation of Blue coat Proxy SG and AV appliances.(SG 500,600 series), RSA Secure ID – Hardware and software based implementation.Responsible for deploying Juniper SSL VPN solutions (SA and MAG) for customers including the deployment of SRX/SSG Firewalls for IP SEC VPN till the VPN concentrators at customer’s premises. Installation and management of Palo Alto Networks Firewalls, Cisco PIX/ASA Firewalls, Juniper Dialup VPN and site to site VPN implementations.Responsible for configuring Cisco routers and switches.Internal security audits and penetration tests on small to large networks in order to tighten up network security utilizing Qualys guard appliance and IPScanner.

Implementing project management practices. Handling rollout/migration projects by replicating the entire routing and security policies base from checkpoint to Juniper NSG550 Firewalls.Managing delivery of major core new firewall implementations, reviewing current solutions to upgrade existing technology stacks (both application and OS/IPSO). Successful projects delivered covered a wide range of IT from networks, security, servers and applications (Windows, Citrix, Juniper, NetApps, Vmware etc) through to operational support and network monitoring.Implementing change and Incident management processes and presenting to the Change Advisory Board. Undertaking process review at senior management level producing level 0,1 and 2 process maps.Recommending suitable solutions to support the client business requirements.Project Management of the rollout of Checkpoint R60 management servers to R75 and Nokia Voyager boxes running IPSO 4.2 to 6.2.Configured Palo Alto Network devices and Juniper SSL VPN boxes to support remote access VPN functionality for multiple users across international borders.Developing Correlation Rules using RSA Envision (Network Monitoring Tool). TCP/IP, GRE, IPSec, PPP (including Radius and TACACS Authentication). Configured HSRP and SNMP protocols.

Coordination with regional Internet Services Providers and teams in order to deliver broadband connectivity to end DSLAMS (Digital subscriber link access multiplexers). Managing relationship with major third party vendors including offshore service delivery. The core scope of work included management of Switched Networks, configuring and troubleshooting inter VLAN communications, ISL Routing, Ether Channels. Configuration of Routing Protocols such as EIGRP, OSPF and BGP. Installation of Point-To-Point and Point-To-Multipoint leased lines.Management of technical resources leading teams and supervising weekly assessments and reports.

Worked as a Network engineer managing Broadcast, Multi-access Networks, ATM and IP Networks. Administering advertised routes of others ISPs and soliciting outbound traffic (IP peering and IP transit). Configuring and troubleshooting layer 3 switches, Cisco 2500,3600 and 7600 series routers, Layer-3 Switches (Huawai), PIX Firewall (506,525 series). Configuration and management of BRAS (Broadband Remote Access Servers).Using concepts of IP Subnetting (VLSM/CIDR) while allocating user or group of users to different IP domains or IP pools/VLAN.Binding of NAS Port ID's and VLAN information with users accounts to segregate speed grades and time domains. Managed Cisco PIX Firewall (operating both 6.x and 7.x versions).