Varun Kumar Email & Phone Number

United States

Sunnyvale, California, United States

• Utilized proxy server caching to reduce bandwidth usage and accelerate content delivery by serving cached content to clients.• Skilled in day-to-day operations, including system monitoring, performance optimization, and troubleshooting to minimize downtime.• Segmented LANs and WANs into distinct zones or segments using VLANs or virtual routing instances, implementing security measures to control traffic flow and restrict unauthorized access.• Utilized Cisco ACI’s built-in tools and third-party integrations for real-time monitoring, performance analysis, and troubleshooting of network issues.• Executed the migration process, including the translation of Cisco ACLs to Palo Alto security policies, ensuring minimal disruption to ongoing network operations.• Configured and fine-tuned Palo Alto security policies, leveraging advanced features such as App-ID, User-ID, and Threat Prevention for network operation.• Skilled in utilizing Panorama, Palo Alto Network’s central management platform, for centralized configuration, monitoring, and reporting across multiple PA-5410 series firewalls.• Configured intricate firewall rule sets, access controls, and security profiles on the PA-7050, PA-5410 to meet the intricate security needs of a dynamic network.• Knowledge of extending Cisco ACI policies to public cloud environments using ACI Anywhere, enabling consistent network policy enforcement across hybrid cloud deployments.• Expertise in designing and implementing policy-based automation using Cisco Application Centric Infrastructure (ACI) to streamline network operations and reduce manual configuration efforts.• Setting up and managing VPN connection, including site-to-site VPNs and remote access VPNs, on FortiGate3700F, 3500F, and 4400F for secure communication and data transfer.• Conducted SSL/TLS decryption and inspection on Cisco Firepower1150 devices to analyze encrypted traffic for hidden threats, ensuring security.

San Jose, California, United States

• Created and maintained detailed documentation, including network diagrams, standard operating procedures (SOPs), and configuring records.• Effective communicator, capable of collaborating with cross-functional teams, vendors, and stakeholders to gather requirements and address operational needs.• Conducted troubleshooting and resolved connectivity challenges associated with VPNs, DHCP, DNS, and Firewall DMZ configurations.• Implemented INFOBLOX APIs and automation scripts to streamline network, DNS record updates, and IP address management tasks, reducing manual effort and errors.• Managed and fine-tuned intrusion detection and prevention systems (IDS/IPS) to proactively detect and block malicious activities. • Experienced in configuring and managing Palo Alto Networks firewall models, including PAN-PA-7000-DPC-A, PA-5450, and PAN-PA-5400-DPC-A Series.• Experience in optimizing these firewalls to handle large volumes of network traffic efficiently while maintaining security measures.• Experience in deploying and managing multi-site ACI environments, ensuring seamless connectivity and policy consistency across geographically dispersed data centers.• Hands-on experience with Azure identity and access management, including role-based access control (RBAC) and conditional access policies.• Designed, configured and utilized UTM features of FortiGate firewalls (600E, 800E and 1000E) such as antivirus, intrusion prevention system (IPS), web filtering and application control.• Experience with Azure networking services such as Virtual Network (VNet), ExpressRoute, Azure Load Balancer, and Azure Firewall.• Set up AWS CloudWatch alarms to monitor EC2 instance performance, detect anomalies, and respond to security incidents.• Automated user account provisioning and deprovisioning processes through Active Directory.

New York, New York, United States

• Experienced in working with Palo Alto PA-7k, 5k, 3k series firewall.• Researched, designed, and replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliances serving as firewalls and URL and Application inspection.• Configuration, deployment and Administration of Checkpoint, Palo Alto Firewalls to manage large scale firewall deployments.• Experienced in creating multiple policies and pushing them in to Checkpoint Firewall (Gateways) and hands on experience in managing the Checkpoint Management Server.• Experienced on Check Point Firewalls NG, NGX R65, R70, R75, R77, NSX (VMware Network).• Configuration and Troubleshooting on site-to-site VPN and Remote VPN on Cisco ASA 5540 security systems.• Provided proactive threat defense with ASA that stops attacks before they spread through the network.• Converted Checkpoint VPN rules over to the Cisco ASA solution and worked on RSA secure IDS to providing VPN Token to Company USERS, Migration with Cisco ASA VPN experience.• Implementation of F5 includes configuration/creation of Network Element, Pool, Pool members and virtual server.• Basic and advance F5 load balancer configurations, including migrating configurations from Cisco ACE to F5 and general troubleshooting of the F5 load balancers.• Knowledge on configuration of iApps (BIG-IP) application service in implementing F5 load balancer.• CSU/DSU loop testing in examining WAN link issues by implementing hardware and software loops.• Deployed Cisco ISE 1.2/1.3 for Enterprise RADIUS Authentication with Active Directory, RSA Secure ID, Proxy Radius Services to Cisco ACS.• Setup Cisco ACI Fabric (Spine/Leaf/APIC) Configure ACI APIC controller.• Back up a Cisco IOS to a TFTP server and Upgraded and restored a Cisco IOS from TFTP Server.• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP, IPv4/IPv6 and configured IP access filter policies.

Indianapolis, Indiana, United States

• Implemented and configured of ASA 5520 in failover along with the CSC module as per the customer requirement.• Integrated Checkpoint Security Gateway, Gaia R77.20 with LDAP/Active Directory for identity awareness, user authentication and track activities.• Configured troubleshoot and manage HA (cluser) and IPSec, SSL, VPN checkpoint for network security and redundancy.• Configuring Nexus 2000 Fabric Extender FEX which acts as a remote line card module for the Nexus 5000.• Working on Cisco ACI, NxOS and IOS, other SDN products Tiered Domains, QoS, data center network design, cloud infrastructure design and management, OSPF, BGP, VLAN Trunking• Involved in Configuration of various Cisco Routers & L2/L3 Switches and implementing OSPF and BGP on the routers.• Integrated Palo Alto next-gen firewalls with overlay VMware NSX SDN network.• Involved in the configuration troubleshooting of routing protocols MP-BGP, EIGRP, BGP v4. Configured IP access filter policies.• Configuring and implementing F5 BIG-IP, LTM, GTM load balancers to maintain global and local traffic.• Used Splunk Search Processing Language (SPL) and Regular expressions to filter Firewall logs AIX TCP/IP DCT team works on Security Vulnerability issues, customer reported PMRs, internal defects and features on TCP components. Work on new enhancements includes FRS, Design Doc and coding.

India

• Responsible for implementation and maintenance of router configuration of CISCO routers and switches between the NOC and other entities.• Participated in load balancer deployments, ensuring proper configuration and load distribution.• Developed and managed load balancer solutions, such as F5 Load Balancers, to ensure high availability and scalability of critical applications.• Led the deployment of SD-WAN Viptela technology across multiple sites, enabling seamless connectivity and centralized management.• Deployed Arista network equipment's like 7508, 7304 spine switches 7280, VXLAN, LAN. Worked with VM segmentation (VMware NSX, Illumio, vArmour, GuardiCore), Firewall management and auditing (Firemon, Tufin, AlgoSec, RedSeal, Skybox, etc.) Sandboxing and Analytics (Fire Eye, Damballa, Check Point, Fortinet, Palo Alto) Network packet brokers (Gigamon, IXIA, NetScout)• Performed maintenance and troubleshooting of connectivity problems using PING, and Trace route.• Provided technical support on hardware and software related issues to remote production sites.• Support 24x7 operations and answer calls from the customer on network emergencies and resolve issues.