Kaushik K Email and Phone Number

Make changes to client network like upgrading internet service and need to update the network to handle the additional connections between our WAN and LAN. The core infrastructure is Juniper, Dell and Cisco. Working on HA/Cluster creation/management VLANs on RETH interfaces ALG configuration. Provide tier-3 (expert level) operational support to resolve critical client issues that require deep network troubleshooting techniques and performance analysis.

Network Engineer with hands-on experience in support, operation, Configurations and administration of LAN, WAN, Wireless and Security concepts. Understanding and Performing tasks related to Implementation, configuration of Routers, Switches, Security and Wireless devices. Analyze all aspects of the existing infrastructure and recommend modifications that will enhance system reliability, availability, serviceability and scalability.

Sutter Health is one of the nation's leading not-for-profit healthcare networks, which includes award-winning physician organizations, acute care hospitals, surgery centers, medical research facilities and specialty services.Configuring, Administering and troubleshooting the Site-to-Site VPNs on CISCO ASA and Firepower environments.Implemented Site-to-Site VPNs over the internet utilizing security standards such as 3DES, AES/AES-256 with ASA 5580, FPR 2130 Firewalls.

• Installed and maintained production servers for client services (web, DNS, DHCP, mail). Experienced on working with Palo Alto Next Generation firewall with security, networking, and management features such as URL filtering, Anti-virus, IPsec VPN, SSL VPN, IPS, Log Management etc.• Managed syslog, Solarwinds on various network equipment to monitor, alert, and save network configurations• Worked with the Network planning team on IP allocation scheme for the routers, switches, workstations, phones, APs and various other devices. Used Infoblox, Net MRI, Solarwinds IP monitor and various tools. • Designed perimeter security policy, Implemented Firewall ACL's, allowed access to specified services, Configured Client VPN technologies including Cisco's VPN client via IPSEC • Worked on Autopilot, an Automation tool used for code upgrades & configuring new devices at data centers.• Migration of Palo Alto PA-500, PA-3060, PA-5060, PA-7050, PA-7080 from Cisco PIX and ASA.• Worked on BGP routing protocol, configuring BGP sessions and troubleshooting on Nexus 1K, 5K, 7K, Juniper MX-960 routers and cisco ASR routers.• Installed and configured LAN/WAN Networks, Hardware, Software, and Telecommunication services- Cisco Routers and Switches like Cisco 3750, 3750 Gig, 6500, Nexus 7k, ASR 9k etc.• Migration from NetScaler’s to F5 without any downtime. • Documentation of various changes made on devices and submit them for approvals and work along with alerts team and intimate them the changes to be made.• Worked on migration - XenApp 4.5 to XenApp 6.5 - Server 2003 (Legacy) to 2008 R2 (Gen 2) environment. • Managed Cisco Voice Mail Unity servers. Worked in Cisco Routing & switching background w/QOS.• Implementing IPv6 addressing scheme for routing protocols, VLANS, subnetting and mostly during up gradation of cisco ISR routers2800/2900/3800/3900 and switches.

• Configuring High Availability using Cluster XL on Checkpoint as well as VRRP and monitor the Sync status for tasteful replication of traffic between active and standby member.• Enterprise and Public Safety Wireless LAN/WAN (802.11, Mesh).• Implementing security solutions using Palo Alto PA-5000/3000, Cisco 5580/5540/5520, Checkpoint firewalls R70, R75, R77.20 Gaia and Provider-1/MDM.• Configuration and administration of firewalls, which includes Checkpoint, Juniper, and Cisco ASA• Configured & maintained IPSEC and SSL VPN's, implemented Zone Based Firewall and Security Rules on the Palo Alto Firewall. Exposure to wildfire feature of Palo Alto.• Administered Cisco AMP endpoint security infrastructure and monitor endpoints for threats.• Configuration and Maintenance of Cisco ASA 5580-20, ASA 5540, ASA 5520, ASA 5510 firewalls.• Researched, designed, and replaced Checkpoint firewall architecture with new next generation Palo Alto PA3000 and PA5000 appliances serving as firewalls and URL and application inspection.• Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using Panorama• Monitoring Traffic and Connections in Checkpoint and ASA Firewall. Provided tier 3 support for Check Point and Cisco ASA Firewalls to support customers, Backup and restore Firewall policies.• Manage project task to migrate from Cisco ASA firewalls to Check Point firewalls.• Follow information security policies, methods, standards, NIST standards, and practices to organize information systems, IT reference material, and interpret regulations.• Monitor Intrusion Detection Systems (IDS) console for active alerts and determine priority of response. Configure and Monitor Cisco Sourcefire IPS for alerts.• Strong understanding of Cisco networking technologies: ASA, IPS, WSA, ACS, VPN.• Creating object, groups, updating access-lists on Check Point, apply static, hide NAT with smart dashboard.•

• Create private VLANs, prevent VLAN hopping attacks, mitigate spoofing with snooping & IP source guard.• Installed & configured Cisco PIX 535 series firewall and configured remote access IPSEC VPN.• Worked on Cisco routers 7200, 3700 and Cisco switches 4900, 2900.• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include configuring firewall logging, DMZs, related security policies, monitoring, documentation and change control• Enabled STP enhancements to speed up network convergence using Port-fast, Uplink-fast and backbone-fast.• Installation & configuration of Cisco VPN concentrator 3060 for VPN tunnel with Cisco VPN hardware & software client and PIX firewall. Documenting and Log analyzing the Cisco PIX series firewall.• Troubleshooting of DNS, DHCP and other IP conflict problems. Used various sniffing tools like Wire-shark.• Hands on experience working with security issue like applying ACL’s, configuring NAT and VPN.• Troubleshoot problems on a day to day basis & provide solutions for problems within their Network.• Configured SITE-TO-SITE VPN on Cisco routers between headquarters and branch locations.• Implemented the security architecture for highly complex transport & application architectures addressing well known vulnerabilities and using access control lists on their core & failover firewalls.• Part of Network Operation Center NOC offshore support team from India supporting HP Data Center 24x7. L2 support for Cisco PIX and ASA Firewalls.