● Maximizing network performance by monitoring performance, troubleshooting network problems and outages,scheduling upgrades of network devices.● Design, Configure, Deploy, and maintain new sites or remediate old sites for the business. Includes design, Present, Order network equipment, configure network devices based on requirement, implement, establish network/internet access to site.● Support global network environment to include routers, switches, firewalls, wireless controllers of cisco, Arista, DellVEP, Silver peak, Open gear, SDWAN Etc.● Leading the Cisco ISE upgrades from 2.4 to 2.6, 2.8 and 3.0 with patches for a global deployment.● Working on Aruba ClearPass to provide TACACS and Radius services to the enterprise.● Working directly with the customers to understand their business requirements and ensure networking projects are properly designed and implemented.● Deployed many Aruba Silver Peak edge connect devices using EXSi for remote site with DMVPN or ISP provider to move them to SD WAN connection to steam line the SDWAN access globally.● Configuring templates to streamline the process in deploying Edgeconnect devices to Aruba orchestrator, have Traditional HA and Edge connect HA for redundant connection. Also using VRRP for redundant connections.● Deploy OSPF, BGP and Stack routes in SDWAN network based on the requirement.● Deploy the ECV appliance using YAML file using zero touch configuration which would save a lot of time.● Troubleshooting the latency and bandwidth issue using application, Bandwidth, and tunnel trends.● Good understanding of underlay and overlay tunnels formed in SDWAN and Dynamic VLANs, BIO and Templates.● Create Groups for managing remote sites based on region globally to apply the EC-V BIO and templates in Aruba SDWAN. Create templates for deployment configuration to save time and avoid configuration errors.● Initially used DELL VEP device as EXSi host to run the OVE file for the ECV device and used Vcented to config.

● Worked as a Network Senior security engineer at ExxonMobil for 4 years designing, configuring, troubleshooting, and managing complex global networks.● Hands-on experience in working on Checkpoint Firewall with versions R80.40, R80.30, R80.20, R80.10, R77.30, R75, R65, IPS/IDS, URL Filtering, IPSEC and Threat prevention.● Worked on deploying Aruba SDWAN Orchestator and upgrading them. Deployed Site to SDWAN using Aruba network.● Hands on experience in working in Aruba network to deploy edge connect ECV to Aruba Orch and manage them from Orchestrator.● Moved remote site to SDWAN remotely gathering ISP and Internet provider info to configure ECV and deploy then in production using change process.● Good knowledge on configuring template deployment profiles to deploy to the ECV and deploy appliances using zero connect configuration, using YAML File.● Designed global ISE deployment in 4 regions NA, EU, AP, and SA with redundancy and high performance and availability. Primary work includes creating policies, profiling, AD group, Conditions. Create profiles for the end devices like Xerox, cameras, Printers, access points etc.● Knowledge about Cisco Identity Service Engine (ISE) using Cisco Platform Exchange Grid (pxGrid) devices in detecting the Identity awareness advanced threats, Malware protection and providing secure connectivity. ● Leading the Cisco ISE upgrades from 2.1 to 2.4 and 2.6 with patches for a global deployment.Stronghold on Checkpoint Deployment, upgrade, Site to site VPN, Remote VPN configuration and troubleshooting.● Create Policy for NAT, port opening and other kinds of requirements based on customer requirements.Hand on experience in high availability Cluster checkpoint firewall setup with no down time. ● Experienced in managing on perm Physical and virtual Checkpoint appliance models 5200,4800,4600 and 4200.● Integrate cloud and hybrid networks based on business requirements.● Been part of migrating on-perm infrastructure to AWS Cloud.

● Worked as Network Cisco Switching, routing and Firewall engineer.● Worked on Checkpoint R55, R65, R75 and R77 (Updated).● Worked on Disaster Recovery (DR) test plan and built an IPSEC tunnel site to site. ● Experienced in working F5 load balancer physical appliance configuration and troubleshooting in cluster mode.● Hands on experience in creation of iRules and access policy manager APM in F5.● Involved in many projects to design and Develop Security Rules for the Project and access.● Routing protocol configuration such as OSPF, EIGRP, HSRP and BGP, Router redundancy configuration (HSRP, VRRP and GLBP).● Worked on Software Driven Network SD-WAN Development and Maintenance.● Worked on F5-Load Balancer, NetScaler Load Balancer and Bluecoat Proxy.● Worked intensively on Bluecoat Proxy SG Devices in Implanting, Configuring, and troubleshooting. ● Worked in Palo Alto and Panorama in creating updating rules, VPN Tunnels and troubleshooting the incidents.● Creation of security policies and VPN tunnels for site-to-site connection in Juniper SRX firewalls.● Created NAT, Zones, Tags, VPN tunnels using 5060, 3050 and 3020 series in Palo Alto.● Worked on Web filtering using Bluecoat proxy, Bluecoat SSLV, Pac file and proxy devices. ProxySG800, SG600.● Experience with design and deployment of MPLS Layer 3 VPN, MPLS Traffic Engineering, MPLS QOSConfigured, Troubleshoot and Upgrade checkpoint firewalls for managing secure access for the clients.● Hands-on experience with VLAN’s, Trucking, RSTP, SNMP, Ether Channels, HSRP, Port Security, ACL’s, QoS, Traffic Policing, Shaping, NAT, PAT, Inspections, VPN’s, DHCP, Wireshark etc.● Working knowledge on Data loss prevention (DLP), Authentication, Network Access control (NAC), Intrusion Prevention Systems (IPS). ● Worked on Bluecoat Proxy SG800,510.

● Worked on configuring Cisco switches, routers to deploy, Upgrading/Re-imaging Network device.● Worked on checkpoint R65 in Upgrading and troubleshooting the level 1 and 2 incidents. ● Worked on creating a template for switch and router configuration to deploy soon.● Worked on creating documentation on step-by-step process on configuring and managing network devices.● Worked on Arista and nexus switched to deploy as core switches for the buildings.● Create network design using vision. ● Worked on multicasting protocols for data transmission. Protocols DVMRP, MOSPF, and PIM.● Hands on experience in Cisco SourceFire Firepower Network security and Firewalls. ● Hands on experience in port allocation, port security and port fast. ● Extensively used TCP/IP tools like TELNET for remote login to the routers and SSH for secure login. Configuring and Maintaining TACACS+ for AAA.● Worked extensively on Cisco Firewalls, Cisco PIX & ASA 5500(5525/5585)● Worked on Identity and access management IAM and Data Loss Prevention DLP.● Worked on level 1 and 2 security incidents and event management using IBM Qatar SIEM● Worked with Routing Protocols of OSPF, SD-WAN, SPB and BGP.● Worked on DHCP servers and DNS, Citrix NetScaler load balancer.