Khalid Khan Email & Phone Number

● Responsible for managing project costs, estimating and forecasting.● Global InfoSec Vendor Risk Assessments Team - engaged in Global Enterprise information security Vendor Risk Assessments from End to End for Confidential internal/external onboarding and integration of clients into cloud security infrastructure (IaaS, PaaS, SaaS) platforms.● Created and documented reports, rules, trends and Dashboard.● Developed custom SIEM deliverables in Splunk/McAfee/QRadar/ArcSight to meet customer needs in a variety of domains: IT security, financial, IT ops, human resources, physical security, etc.● Configure and troubleshoot Routing protocols such as OSPF and EIGRP for routing internally and BGP Migration for external routing.● Responsible for managing project costs, estimating, forecasting, and reporting on variance.● Evaluated technological infrastructure of financial lending institutions for IT/Telephony upgrades to VoIP.● Added Domain Controllers manually in Forti Authenticator to collect user login data, which will be used to authenticate users at Firewall.● Navigated through Algosec and Palo Alto, Checkpoint to find risky ports and unused firewall rules to help with firewall audit.● Configured Splunk Searching and Reporting modules, Knowledge Objects, Administration, Regex, Dashboards, Clustering and Forwarder Management● Implantation and deployment of VMware NSX Vxlan configuration-VTEP, VXlan pools LR and DR with OSPF configuration● NSX Service composer for registration AV endpoints deployments, Security groups and policies FW● Migration Envision and drove Cisco's SD-WAN (IWAN) and VPN for Enterprise and MSP networks existing to corporate office.

Washington, District Of Columbia, Us

● Involved in the implementation and configuration of Enterprise network infrastructure.● Working as a Network engineer supporting Cisco Routers, Switches, Bluecoat Proxy servers, and BIG-IP Load Balancers. ● Cisco routers, switches setup including WAN routers, coordinating with leased line vendors● Having experience on WLAN, dealing with Cisco Prime, Controllers, and Access Points.● Implementation, configuration, and support for F5 migration Big-IP LTM-6400 load balancers, ASA Firewall, and Palo Alto Firewall.● Push configurations and updates to multiple Splunk Enterprise instances via the Splunk Deployment Server● Perform tuning of the Security Incident and Event Manager (SIEM) filters and correlations to continuously improve monitoring● Used Earned Value Management for reviewing project progress, enabling early forecasting and resolution of cost and schedule issues.● Worked on Palo alto and Panorama in creating updating rules, VPN Tunnels, and troubleshooting the incidents.● Worked on Palo Alto PA- 5000 and PA-3000 series and panorama. Worked on creating new policies and OS updates.● Experience with Virtual route Forwarding, multicast routing, and policy-based routing. ● Created and refined processes for performing PCI and PA DSS compliance verification efficiently.● Involved in configuring and implementing composite Network models consists of Cisco 7600, 7200, 3800 series routers and Cisco 2950, 3500, 5000, 6500 Series switches.● Use BGP Migration attributes such as AS-PATH prepending and communities to influence routing amongst different paths.● Manage the day to day operations of CyberArk solutions including adding and deleting accts.● Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.● Vulnerability assessment, penetration testing, Risk assessment, Threat management, Security advisories, compliance audits, IT security assessment.

Washington, District Of Columbia, Us

● Designed and Configuring the Cisco 819 series 4G routers for 1000+ branches and ATMs.● Deploy Configuration and activate 4G routers for branches in multiple states.● Configure and troubleshoot Remote access and site to site-in Checkpoint & Palo alto firewall● Designed and implemented layer 3 private MPLS VPN services on Cisco 7600/ASR9000 routers● Worked with F5 migration Load balancing, IDS/IPS, Bluecoat proxy servers and Administrating.● Experience with Load Balancers for administrating and monitoring global & local traffic using F5 BIG IP LTM & GTM● Deploying sites with Cisco, Viptela, Riverbed, and ADC equipment● Tuning and updating security tools including SIEM (McAfee ESM \ Nitro), IDS/IPS, DLP, Web Proxy.● Configured F5 migration load balancer and also Citrix NetScaler to monitor the network, load balancing and also GLBP, creating a site for web interface for the internal clients. ● Configured Cisco ASA Firewall.● Addressed technical issues and questions regarding Cisco ISE including troubleshooting and feature changes and modifications.● Supported Infoblox appliances grid environment for DNS, DHCP and IP Address Management tools (IPv4), for the State Farm enterprise network.● Created reporting dashboards on Tableau, using OLAP cubes for a comprehensive look on deals/prospects for Investments Analysts and Portfolio Managers.● Experience with SIEM platforms (Splunk, Qradar, McAfee/Nitro, Arcsight, LogRhythm, Carbon Black)● Implemented IP Routing protocols EIGRP, OSPF, BGP Migration on Cisco Routers 7600, 3600, 2800.● Validated and updated documented process for the CyberArk privileged access management system● Configure and maintain security policies on Fortinet firewall and manager/ Fort Analyzer● Reviewed company network diagrams in preparation for PCI project, providing QSA insight and guidance.

● Worked on security tools and software such as CISCO WSA, Qualys, Splunk, Solar winds, Source fire, SIEM● Installed Aruba wireless controllers, AP's, and Airwave● Experience with convert Cisco ASA VPN rules over to the Palo Alto solution. Migration with both Cisco ASA and Palo Alto VPN experience● Provide Level 2 Operations support for end user resolution investigating RSA SIEM events to determine any true intrusions.● Provide oversight on PCI DSS compliance and completes annual PCI DSS Self-Assessment Questionnaire SAQ .● Maintaining and Designing Data governance and security for data platforms on AWS Cloud.● Implementation and Configuration (Profiles, iRules) of F5 Big-IP LTM-6400 load balancers● McAfee EPO - Project team member for implementation of New McAfee EPO console, repositories, and reporting● Provided technical support for different EHR and PM applications for medical practices in the Kansas City area such as Allscripts, PDS, eClinicalWorks, McKesson, NextGen, NuMed, Pulse and Millennium.● Worked on Cisco ISE for user Authentication, Security Group Tags, MAC based authentication for Wireless and Wired users, 802.1X, EAP, PEAP etc.● Used dashboard tools like Tableau.● Define, implement and monitor key risk indicators and key performance indicators (KRIs/KPIs).● Modified Opportunity and Pipeline by customizing various stages to help prospect better and enabled forecasting.● Designed and implemented security solutions like CyberArk, Symantec DLP, Archer, SEP Suite● Installation and administration of Checkpoint R 75.40 Firewall.

São Caetano Do Sul, São Paulo, Br

● Responsible for installation and maintenance of new network connection for the customers● Configured all the required devices and equipment for remote vendors at various sites and plants● In-depth expertise in the implementation of analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems● Design and Implementation of Bluecoat Proxy Infrastructure. Upgrading Radware Appwall WAF (Web Application Firewall) and fixing hot fixes and patches● Supported nationwide LAN infrastructure consisting of Cisco 4510 and catalyst 6513● Worked with cisco routers 2600, 2900, 3600, 3800, 7200 and 7600 and switches 2900, 3560, 3750, 4500, 4900, 6500