Fatima A Email and Phone Number

• Implemented and managed Palo Alto Networks firewall infrastructure to safeguard the network against external threats and unauthorized access.• Installed and implemented new infrastructure in Data Center Implementing Security Solutions using Palo Alto PA-7000, PA-5000, PA-3000.• Managing Large Palo Alto Firewall network including 50 remote offices, and three Data Centers using 5000, 500 and 200 series firewalls, Palo Alto Management Software Panorama. • Configured and maintained Palo Alto Next-Generation Firewalls (NGFWs) to enforce security policies, ensuring compliance with industry standards.• Implemented advanced Palo Alto firewall features like URL filtering, User-ID, App-ID, Content-ID on both inbound and outbound traffic.• Deployed Palo Alto firewalls using confidential NSX through L2 and L3 interfaces on models such as VM-300, VM-500, and VM-1000-HV.• Migration and implementation of Palo Alto Next-Generation Firewall seriesPA-500, PA-3060, PA-5060, PA-7050, PA-7080.• Integrated Fortinet security solutions with other network tools and systems to establish a unified and comprehensive security architecture.• Engineered Fortinet firewalls high-availability configurations and disaster recovery strategies using Fortinet technologies to ensure continuous network protection and operational resilience.• Experienced in Fortinet firewall administration, configuration of FortiGate 3000, 3815 series as per network diagram.• Managed firewall using FortiGate to allow or blocks IPs, created policies added different interfaces and VLANs, installations, design, and implemented of Cisco solutions, VPN, Fortinet, VOIP.• Provided expertise and guidance on Nexus switch configurations and security best practices to junior team members and stakeholders.• Integrated Nexus switches with security tools and systems to create a comprehensive security ecosystem for threat detection and mitigation.

Responsibilities:• Configure, Manage and Monitor Palo Alto firewall models (specifically the PA-5050 and the PA5260).• Performed migrations from checkpoint firewalls to Palo Alto using the PAN Migration Tool MT3.3• Configuring Firewall rules for Application teams and required traffic flow at Palo Alto 5220,Panorama 100, and Juniper SRX. Worked on Palo Alto PA-5050 design and installation (Applicationand URL filtering, Threat Prevention, Data Filtering).• Configure all Palo Alto Networks Firewall models (PA-7k, PA-3k, PA-5k etc.) as well as acentralized management system (Panorama) to manage large scale firewall deployments.• Integrated Palo Alto firewall with various authentication mechanisms, such as ActiveDirectory, LDAP, and SAML to identify individual users accessing the network.• Troubleshooting the Palo Alto and monitoring the firewall’s performance, analyze logs, andgenerate reports to gain insights into network security and activity.• Worked on the transition to IPv6 by supporting IPv4-to-IPv6 and IPv6-to-IPv4 translation on PaloAlto firewalls, ensuring compatibility with improving network technologies.• Configured, managed and maintained Fortinet FortiGate firewalls, including FortiGate 60E, 100E,300E and 500E.• Implemented FortiGate firewalls with other security solutions such as SIEM (Security Informationand Event Management) Systems and threat intelligence platforms for enhanced threat detectionand response capabilities.• Deployed Fortinet (FortiGate300E and 500E) intrusion prevention systems (IPS), a vitalcomponent in identifying and blocking malicious traffic and exploit attempts aimed atcompromising the network.• Involved in Configuring and managing site-to-site VPNs using Cisco Firepower to establish securecommunication between remote offices and data centers.• Set up and maintained remote access VPN solutions with Cisco AnyConnect and Firepower,enabling secure access for remote users.

Responsibilities:• Configuration, troubleshooting of Palo Alto Firewalls - PA200, PA 2K, PA 3K, PA 4K and PA5Kseries as well as a centralized management system (Panorama) to manage large scalefirewall deployments.• Implemented and configured of ASA 5520 in failover along with the CSC module as per thecustomer requirement.• Took part in configuring Cisco ASA firewalls for failover scenarios, which includedActive/Standby and Active/Active setups.• Integrated Checkpoint Security Gateway, Gaia R77.20 with LDAP/Active Directory for identityawareness, user authentication and track activities.• Configured troubleshoot and manage HA (cluster) and IPsec, SSL, VPN checkpoint for networksecurity and redundancy.• Acquired knowledge in data networking while working on multiple projects related to Branchnetworks, Campus networks, extranet clients and Data Center Environments.• Deploy and support network load balancers, such as F5 LTM/GTM and configured (Profiles, I Rules)F5 Big-IP LTM-6400 load balancers, virtual servers, virtual IPs, pool, pool members• Experience with converting Cisco 6500 IOS to Cisco Nexus NX-OS in the data center environment• Designed 10 gigabit networks using Cisco Nexus 7000 series switches, Cisco 3800 series routers.• Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internalteams & external customers of all locations.• Monitoring and configuring Cisco 7600 routers and replaced old 6500 and WAN routers from DRtesting site at data center.• Routine maintenance was performed to upgrade Enterasys switch and Cisco switches (Nexus 9k,7k, 5k, access layer switches), Cisco APs, Palo Alto, Fortigate, ASA Firewalls, and Juniper switches.• Configured and installed Cisco routers 2500, 2600, 3601 and 4000 series. 2950 Switches & Linksys wireless access points• Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools

Responsibilities:• Responsible for Migration of Firewalls from PIX to ASA/Juniper Netscreen.• Configuring and Troubleshooting Cisco PIX & Cisco ASA.• Research and troubleshooting compatibility issues of Cisco devices with other Vendor products.• Implemented VPN Failover that enabled a second VPN tunnel, in the event the primary tunnelfails.• Implemented Remote Access VPN using IPSEC.• Implemented Static NAT, Policy based NAT and PAT for site to site VPN tunnels between Ciscoand other IPSEC compliant security appliances