Sumit B Email & Phone Number

Clifton, Nj, Us

Woonsocket, Ri, Us

• Designed, implemented, and maintained microsegmentation policies using tools like Guardicore Centra and VMware NSX to prevent lateral movement of threats.• Managed application micro-segmentation project with VMWare NSX and windows Hyper-V.• Working with Cisco tetration on recent project which states the tetration offer sholistic workload protection for multi-cloud data enabling Zero-Trust model using Segmentation.• Provide NSX Micro-Segmentation Security for AWS Data Centre.• Successfully implemented and managed Akamai's content delivery network (CDN) solutions to optimize website performance and deliver seamless user experiences globally.• Experience in using and managing Linux-based operating systems and developing Python scripts.• Setup VMWare NSX distributed firewall (DFW) for Micro Segmentation and distributed Load balancing• Designed and implemented Tetration policies to microsegment workloads, ensuring precise communication controls and reducing attack surfaces.• Managed IPsec and SSL VPN tunnels on FortiGate firewalls, including models like FortiGate 1500D, 2000E, and 2500E.• Manage Juniper & VMWare NSX hosts micro-segmentation firewalls.• Experienced in TCP/IP architecture, TCP/IP protocol suites and dynamic routing protocols including IGRP, EIGRP, OSPF and BGP eBGP/iBGP.• Worked on Zero Trust Expert (NSG’s, MS ATF, GuardiCore, Illumio, Palo Alto, Cisco, Pulse Secure, and VMware NSX) for On-Premise and Cloud Digital Assets.

Louisville, Kentucky, Us

Worked on Leaf and Spine model in Legacy mode (NXOS) Worked with Cisco ASA Firewalls as well as Fortinet FortiGate Appliances. Worked on operational issues in SD-WAN and Nexus. Expertise in checkpoint, Palo Alto, Illumio and FortiGate firewalls migration and Panorama Network security management box. Created and modified various access policies to allow VPN ports for certain and applications in Palo Alto via Panorama in various Geographical regions. Used Illumio to stop lateral movement and securely migrate application to the cloud. Worked on Nexus 9k, 7k and 5k series switches advanced security features, such as TrustSec and Cisco ACI, to ensure granular security policies and control access to network resources. Machine learning with Cisco Secure Workload and behavioral analysis to detect anomalies and potential threats within the network. Efficient work on Cisco TrustSec, Cisco Prime, Cisco ISE and PRTG SNMP network monitoring tools. Worked on ISE 802.1X, ISE wired/Wireless guest and ISE TrustSec implementations. Leveraged Akamai's Web Application Firewall (WAF) to protect web applications from various attacks, including SQL injection, cross-site scripting (XSS), and DDoS. Designed and implemented NSX in multi-Regional Data Center, micro Segmentation, Load balancing Used Cisco ACI Fabric based on Cisco Nexus 9000 Series Switches and the Cisco Application Virtual Switch (AVS). Upgraded ASA 55055 to 5525X and Setup high availability ASA pair with Firepower. Configuration and troubleshooting of CSM, integration with ASA devices. Utilized Python to automate network discovery and mapping, identifying active devices, open ports, and potential vulnerabilities. Gigamon configuration for map updates on new TAP ports, Gigamon OS upgrades from v2.8 to v4.7 DOS. Implemented Akamai's Fast DNS solutions to improve DNS performance, reduce latency, and enhance DNS availability for critical applications.

San Jose, Ca, Us

• Worked on Nexus family for (ToR) Top of Rack and tier3/tier4 architecture using Nexus 9k, N7k, N5K and N2K.• Integration of Cisco security solutions with Cisco Secure Workload such as firewalls and IPS/IDS to enhance threat detection.• Integrated the Cisco WSA with Cisco ISE using PxGrid technology to share contextual information about authenticated users and Trust Sec• Experienced for improve scalability and ease of deployments of the Openstack underlay network by migrating from Standalone Nexus to Cisco ACI platform.• Worked on Cisco Tetration using ACI and Zero trust model.• Worked on provide second/third level technical support for ACI (Application Centric Infrastructure), APIC technologies.• Proficiently deployed and managed Cisco Tetration, a comprehensive workload protection platform, to achieve granular visibility, security, and compliance across the data center.• Proficient in Silver peak SD-WAN technology, including configuration, deployment, and troubleshooting.• Experienced in proactively monitor resources and applications using AWS Cloud Watch including creating alarms to monitor metrics such as EBS, EC2, ELB, RDS, 53, SNS and configured notifications for the alarms generated based on events defined.• Experience with SD-Access architecture design, deployment, and management.• Proficient in implementing and managing Palo Alto Networks' Prisma Access solution for secure network connectivity.• Managing Cisco Secure workload across heterogeneous environments, enhancing operational resilience and reducing cybersecurity risks.• Utilized Python to automate network discovery and mapping, identifying active devices, open ports, and potential vulnerabilities.• Configured and optimized Cloud flare services, including CDN (Content Delivery Network), DDoS (Distributed Denial of Service) protection, DNS (Domain Name System), and WAF (Web Application Firewall), to improve website performance and security

• Experienced in planned and implemented new infrastructure in Data Center Implementing Security Solutions using Palo Alto Pa-5000/3000, Checkpoint firewalls R75, R77.20 Gaia and Provider-1/MDM.• Working with configure Security Profiles on Palo Alto / Checkpoint for URL filtering, Anti-Virus, Anti-Spyware, Vulnerability Protection, Threat Prevention, File Blocking.• Worked in configuring rules and maintaining PaloAlto firewalls and analysis of firewall logs using various tools• Experienced on identified and removed security policies those are no longer needed to reduce Checkpoint firewall policy lookup.• Worked in Configure DirectFlow on Arista 7050SX3 to offload the traffic from the Palo Alto/Checkpoint firewalls and use Arista EOS DirectFlow extension for applying the security policies on the network based out of band monitoring, deep packet inspection and other platform analysis.• Experienced in migrate the conventional remote sites with ISR routers with Viptela SD WAN and achieved elastic network connection through MPLS and internet.• Worked on experienced in Cisco Routers 3600, 3800 and 7200 ASR 1002, 1006, Cisco Catalyst 2900, 3570, 4500 and 6500 Switches.• Experienced in Created several AWS Data Migration jobs ordering AwS Snowball edge and moving data from data center of customer into AWS leveraging AWS S3 bucket in a secured manner, data encrypted in transit and at rest.• Worked on Database related task like changing instance type of RDS, monitoring, and backing up of RDS, storage task such as disk addition, increase & decrease of existing disk using EBS volume and, S3 bucket to store object like data.• Experienced in Enabled Cloud Trail across all geographic regions and AWS services to prevent activity monitoring gaps.

• Experienced on implementing networking technologies to facilitate market data feeds; MPLS, BGP, OSPF, Multicast, Layer 2 protocols.• Worked on Configuring & troubleshooting of LAN & WAN TCP/IP Networks for customer links.• Experience on Cisco Nexus 7K, 5K, 2K, Cisco ASA firewalls, Catalyst switches (2960,3750,4500,6500), Cisco ASR & ISR routers (1900,2900,3945,4500,7200,7600).• Experienced in managing customer wireless network through Cisco Prime and Cisco Wireless Controllers.• Experience on working in Arista (7150S), Huawei (NE40E) and Juniper devices.• Working in deployed specialized Multicast feeds to POP, MPLS and LL customers.• Worked on Configuration of routing policies and ACL as per the customer requirements.• Experience for Make Changes on VLAN database as per requirements.• Experience with VTP mode configuration, trunking, port channel, ether channel configuration• Worked on VRRP, HSRP configuration for redundancy, IPSLA configuration for redundancy.• Experienced on VSS configuration and using stack solution in our network.• Worked on Ensure End to End IP connectivity from various ISPs at project Location.• Working experienced in even handles Regional Office Network Connectivity.• Experienced in Preparation of reports like Link Utilization, RFOs etc.• Coordinating with ISP to rectify problems like latency issues, routing, multicast or other issues.