Jai Koolwal Email & Phone Number

California, United States

Sunnyvale, Ca, Us

Expanded scope to manage a global org of 10 Software Engineers & Security Architects across 2 teams with tech leads. Built secure architecture frameworks & security products in vulnerability management, network & infrastructure security verticals for LinkedIn’s production & corporate fleet.

Mountain View, Ca, Us

• Led several initiatives to deliver intent-driven network security across Google • Developed long range plans & forward-looking roadmap for Google Enterprise's firewall strategy • Automated security policy enforcement and auditing for onboarding new vendors • Led development and maintenance of network security toolchain • Authored RFP qualification criteria for next generation security products • Led NPI of next generation firewalls to drive multi-vendor strategy • Designed & implemented automated testing of open-standard API models (OpenConfig) • Acted as Tech Lead guiding vendors through firewall industry's first OpenConfig API implementation • Lead facilitator of the diversity, equality and inclusion program within Google

San Francisco, California, Us

Scaled and managed global production network security infrastructure as tech lead.• Architected the framework to accelerate security posture enforcement from 21 days to less than 1 day• Conceptualized tools to automate firewall and ACL deployments by leveraging declarative data stores• Designed a security solution to ensure the global LB VIPs are PKI standard compliant• Led a team of software engineers to automate network security policy validation• Led proof of concept initiatives to evaluate & test different vendors’ equipment• Designed multi homed BGP edge architecture with Active/Active firewalls

San Francisco, California, Us

• Tech Lead for global patching strategy across network security assets• Designed 100G firewall solution to meet security requirements with growing business capacity needs• Implemented BGP path manipulation to deterministically control traffic across multi-geo datacenters• Led maintenance windows to complete migrations to new architecture minimizing end user impact• Authored runbooks for junior engineers to complete large scale migrations across global DCs• Successfully handled on-call responsibilities over weekends & after hours on weekdays• Responsible for upgrading the global firewall infrastructure to the latest code• Acted as escalation point for level 1 engineering teams on network security

San Jose, Ca, Us

Owned and resolved customer escalations for sensitive accounts by leading cross functional teams.• Automated, tedious configuration and troubleshooting tasks to reduce ticket volume by ~50%• Fostered junior engineering teams via technical training & practical lab sessions• Detected DDOS attacks on network edge & created configurations to mitigate future events• Designed inter-site high availability clustering solutions with ASAs utilizing global datacenters• Designed solutions involving multi-context ASA Firewalls in routed/transparent mode• Designed zone based firewall solutions involving Site to Site IPSec tunnels & DMVPN• Designed multi-homed BGP solutions providing network resilience in the event of device/ISP failures• Resolved connectivity issues by fixing NAT, ACLs and application inspection on firewalls• Provided configuration advice on new features such as policy based routing & BGP on ASAs• Resolved complex issues by troubleshooting & configuring OSPF, EIGRP & BGP routing protocols• Partnered with sales teams to accelerate adoption of Cisco's next generation products in the market• Completed troubleshooting and configuration of Firesight Management center and Firepower IPS • Fixed business impacting network problems by reviewing packet captures• Led troubleshooting on MPLS, VRF-Aware Software Infrastructure interfaces & zone based firewalls• Utilized scripting skills to automate configuration and troubleshooting tasks• Hosted presentations representing Cisco’s Technical Assistance Center in the global new hire training• Successfully handled on-call responsibilities during non-business hours for 24x7 support

San Jose, Ca, Us

Handled complex network problems for Cisco’s Enterprise customers in extreme pressure situations.• Trained a new team in Asia by going on-site for a month, acted as their team lead & mentor• Analyzed packet captures using Wireshark & tcpdump to improve network performance• Created scripts to automate troubleshooting tasks and provide Root Cause Analysis• Configured WCCP between web proxies & several network devices including 6500 series & Nexus 7K• Resolved critical network situations in a short time by working on UNIX proxy devices• Acted as the single point of contact for Director & VP visibility customer escalations• Developed deep expertise of troubleshooting TCP/IP, UDP, FTP, DNS, HTTP and HTTPS/SSL

Chicago, Illinois, Us

Worked at the Network Operations Center at TransUnion, one of the largest credit bureaus in the world.• Configured eBGP peering between edge routers and ISP, maintained company’s iBGP network• Completed VPN troubleshooting on calls with customers to successfully establish connectivity• Configured DMVPN and GRE tunnels with IPSec• Configured ACLs, NAT/PAT, Conduits (PIX specific), network-objects & service-objects on ASAs• Configured Netflow on critical enterprise devices for monitoring traffic flows• Completed successful firewall troubleshooting using packet-tracer and by setting up packet captures

Schaumburg, Il, Us

• Configured DMVPN, IPSEC, GRE, BGP, OSPF, EIGRP, DHCP & NAT across the company network• Set up firewalls (ASAs – 5510s, 5520s, 5580s, PIXs) in Active/Standby pairs• Configured Cisco 26xx, Cisco 29xx, Cisco28xx, Cisco 37xx and Cisco 65xx routers/switches• Deployed site to site VPN, GRE tunnels and the DMVPN to connect offices across the world

M.S., Electrical And Computer Engineering

B.E., Electronics And Communication