Senior Network Engineer
• Upgrade Network Operating System installed in the Network Security Devices.• Configure secure administrative access in the network security devices.• Integrate network security devices with network monitoring and traffic analyzing software's like SolarWinds, Micro Focus NNMi• Exploring and Gripping the enthralling core banking networks, consists of over 1400nationwide branches.• Good hands-on Juniper Routers MX-104 and Firewalls of different models like SRX-200/210/300/1400/5400.• Created different Routing Instances / Virtual Routers on SRX-5400 and running OSPFprotocol as IGP and implementing the routing policies to control the routing as per ourrequirement.• Created different security zones as per design requirements on SRX-5400/1500/1400 andimplementing the security policies on intra-zone and inter-zone for controlling the access ofnetwork resources.• Upgrading IOS to mature release to mitigate vulnerabilities in previous versions.• Implementing Static/Destination/Static NAT on SRX firewalls for hiding the identity andavoiding the overlapping subnets.• Configuring the juniper firewall filter on management plane, for UDP services, SNMPvulnerabilities, ICMP traffic, permitting the "traceroute" legal ports, for allowing thelegitimate SSH traffic, for packet fragment protection & interface-specific RUNT packets.• Determining the network security devices in compliance with the bank’s IT security policy.• Consistently deliberating and discoursing with the Information Security team on gap analysis• between existing network policy with industry practices.• Managing Route Based and Policy-based IPSEC VPNs on SRX-5400 in a hub and spoke design.
