Ajay Dmello Email & Phone Number

Doha, Qatar

Doha, Qatar

• Rollout, integration and testing of IEEE 802.1X based IBNS and NAC via Cisco ISE across a 4000 endpoint environment.• Managing secure authentication and connectivity via standards-based IPsec/SSL VPN of remote workers as well as national/international banks for regulatory/taxation interconnectivity.• Responsible for hardening the attack surface, penetration testing and vulnerability remediation across the entire IT endpoint landscape.• Designing, integration, testing and troubleshooting of SOAR via internal/external connectors to drive higher use case adoption using a mix of 3rd party connectors and Microsoft Power Automate/Azure Logic Apps.• Designing, integration and planning of DR implementation for Azure as well as scenario building for testing/migration.• Hardening/best practice implementation across virtual and physical firewalls, IAM servers, switches, wireless in a hybrid cloud environment.• Migration, upgrade, troubleshooting of internal and external network and security infrastructure hosted in multiple data centers and co-ordination amongst various government entities/stakeholders during issue resolution.• Serving the role of a consultant in architecture, requirement building/scoping meetings as well as technical evaluation of vendor/product in accordance with identified roadmap or vision.• Web filtering policy implementation/whitelisting coupled with phishing/malware incident investigation, Wireshark packet capture analysis, SIEM log integration/investigation, gap analysis, recommendation, and fixation.

Qatar

• Designed, tested and verified a redundant AAA architecture for a network spanning over 500 compatible devices and multiple OS’s using Bulk Import/Export sheets for ease of administration/maintenance.• Designed, tested, integrated and verified a redundant CSM architecture in accordance with vendor best practices spanning over 100 firewalls and IPS sensors.• Analyzed, performed and evaluated bug scrubs for OS/device upgrades and routing observation/implementation of PSIRTS and field notices.• Fault isolation, root cause analysis and troubleshooting of NC’s pertaining to firewalls and IDS systems on a need to fix basis as well as proactive inventory, EoL/EoS and license tracking.• Scoured system logs of various IOS/IOS XE/NXOS/ASA OS and IDS for security logs pertaining to SIEM integration and designing log sheet(s) in reference to the same.• Routine configuration maintenance of firewalls to add new devices/services into the network and liaising with CM/Procurement/Rollout teams in reference to the same along with updating the respective centralized configuration repositories.

Bengaluru Area, India

• Perform security assessments for IOS/IOS-XE/IOS-XR/NX-OS based devices by evaluation respective configurations against hardening best practices.• Conduct PSR’s (Proactive Software Recommendations) on ASA, ISE, ACS, AnyConnect to identify bugs pre-upgrade and recommend version upgrades post appropriate field exposure.• Test integrated/deployed infrastructure mainly ASA, ISE, ACS against the designed LLD/HLD’s for validating implementation.• Assist in the network security design and implementation as well as HLD/LLD preparation in conjunction with the customer requirement.• Conduct KT sessions for internal peers to educate them on the latest customer implementations and integrations.• Won the “You Amaze Me” award for scaling the network security assessment of our clients to a record figure.• Completed FirePower training and a lab workshop on the FirePower OS 5.4.

Chennai Area, India

• Handling the EMEA region technical support for Juniper SRX at all levels (P1-P4).• Assist team members in escalations and efficient resolution of cases within the shortest possible time.• Have been selected as Star of the Month for February 2015 and was awarded the High 10's certificate.• Have excelled and topped the entire team in Oral and Written Skills through means of quality checks with an average of 90.54 percent in both.• Have delivered SRX training to three batches and mentored the same during the skill progression and early deployment stages.• Have conducted interviews of over a 100 candidates for the team selection process in Gurgaon and Bangalore recruitment drives as well as over the phone.• Assisted in the entire Juniper SRX Lab data center setup and configuration and maintenance of the same.• Have the highest individual case closures to days worked ratio in the entire SRX team.

Bengaluru Area, India

Deployed and maintained a lightweight wireless network spanning two buildings and 9 floors through a mix of LoS Ubiquiti for outdoor wireless networking as well as Cisco LAP 1261’s for indoor wireless networking.The project involved the configuration, maintenance and troubleshooting of ASA firewall 5500/Checkpoint 2100 and 4400 series appliances, IPS 4255, Cisco routers 1841, 2611XM, 2811 ISR, 2911 ISR G2 series, L2/L3 Catalyst Switches 2960, 3560, 3550, 3750,3750-X series switches.Part of a team of R&D wherein we did testing and configuration of multi-vendor equipment like Endian, CheckPoint , Untangle, Cisco ISA, Meraki’s UTM, Meraki WAP’s, Cisco Nexus 7009, Nexus 5548, Cisco MDS 9222i/9216i, BIND 9.9 etc.Configuring ACS and ISE server authentication and authorization using both RADIUS and TACACS+ as well as data backups monitoring. Implementing a comprehensive security policy involving routers, switches and firewalls and password rotation policies and network usage policies and well as network design and segmentation comprising of DHCP Snooping, IP source guard, Dynamic ARP Inspection, VACLs, Zone Based Firewall, unicast RPF, AutoSecure, CBAC, TCP Intercept, Authentication Proxy, Flexible Packet Matching, CPPr, MPP, Role based access control, IP source tracker, RMON alarms, CPU and memory thresholds. Configuring and troubleshooting routing to establish and maintain end to end network reach ability by employing the use of both static routing and dynamic routing protocols like EIGRP, OSPF, RIPv2 and situational redistribution. Offering technical training to internal employees and retail and corporate clients as and when needed on various topics of expertise like IPS, ASA, SECURE, ISE, Data Center etc to companies like Aricent Group, Accenture to name a few. Have also worked on the deployment of virtualized VMware based infrastructure in the organization through the use of ESXi, vCenter 5.5.

Bachelor’S Degree, Electrical, Electronics And Communications Engineering

Activities and Societies: Quiz Pro Quo, Symposium Team, Debate team, AXIS MoFun Event Organizer Team Completed a certificate course.

High School, Computer Science, 89.8

Activities and Societies: Debate team, Spot Speaking Team, Toastmaster, Volleyball team, Football Team, Won multiple debates and quizzes.

Aisse, Computer Science, 89.2

Activities and Societies: Debate team, Toastmasters, Spot Speaking Team, Football team  Integral member and active participant.