Leading the Next-Gen Network and Cybersecurity Architecture and Engineering for one of the best companies in the world

Master SME level Architect and Director level Technical Lead in Network, Hybrid Cloud and Enterprise Security Architecture

Some Key projects include:Led the Engineering process of Designing and configuring Palo-Alto Firewalls deployment and security Architecture from ground-up in accordance to best practice Governance and Security compliance. Led the Architectural, design and implementation of Global Protect, SDN and SDWAN. This initiative was to convert and consolidate MPLS circuits to VPN over SDWAN technology. Led the design and implementation of a full-fledged Disaster Recovery plan for the organization’s Network Infrastructure. This encompassed building a DR Center colocation from ground up incorporating the critical and major elements of the Business OperationLed the deployment of Rapid 7 Nexpose Vulnerability Management Scanners across the Enterprise. This encompassed strategic placement of the Scanner appliances to enable them for efficient and effective scanning. Subsequently Managed the Administration and Operations of the Nexpose Scanners from Infrastructure Security Architecture standpoint

Design and Implement Network Infrastructures of FRB at various districts. Led key projects such as: Richmond District Core switching and Firewalls move, NY Markets Modernization, VoIP enhancement, etc.

 Developed Site-to-Site and DMVPN redundancy model for the Enterprise wide Architecture incorporating RRI, DPD and HSRP. Successfully accomplished the objective of attaining seamless failover in between sites. Enhanced Card Services DMZ architecture by segmenting through multiple zones: Access, SVC, App & Auth. Defined distinctive devices to be placed in each zone, ie: Checkpoint and External Interfaces of the XML gateways in the Acc zone, subsequently JBOSS Integrated Desktop and Auth server in the App & Auth Zone. Implemented VRF Lite, GRE Tunnel, ASA and ACE contexts accordingly to provide interconnectivity and Security throughout these zones Enhanced Protected Zone backend Architecture by implementing proper FWSM and ACE context for share services. Subsequently attained proper segmentation and application layer data traffic inspection requirements through placing Imperva and Tipping point IPS solutions in protected backend and DMZ segments Upgraded Alert broker and Interactive Voice Response Systems by implementing new Vendor Solution. Enhanced the end to end infrastructure of these systems by implementing state of the art firewall inspection, IPS and XML gateway inspection for QA and prod Environments. As lead consultant of the Capacity planning and Performance Optimization team, identified troubled and congested links through NetQOS. Optimized link efficiency by implementing proper MQOS policy across the troubled links. Reserved adequate bandwidth for priority traffic. Led the Corp, Dev and Prod Environments Separation effort by implementing a new ASA context, subsequently redefined appropriate routes and VLANs for the appropriate zones for PCI compliance. Led the Vormetric File Server Encryption project by identifying appropriate segments for placing the reference servers. Subsequently created the appropriate routes and Interconnectivity. Used enhanced ACL and modular policy framework on Agg ASA context for Internetwork Security

 Architected and led the new infrastructure deployment of USBC post it’s migration from Wisconsin. Restructured the entire infrastructure to be hierarchical, responsive and secure. Earned numerous awards and accolades from the Executive leadership and the board for the excellence of quality of this project. Configured modular QOS and traffic shaping all across the company including the remote VPN sites to prioritize voice, video and important data traffic. Led the migration process of Bowl.com hosted infrastructure from an outsourced datacenter to in-house datacenter; saving the organization over $95000 for the next year. Built Distributed VMNet in congruity with the VLAN architecture of the Server Farm Network on the VSphere Enterprise platform. Have performed facility wise RF assessment for placement of access points. Have configured WLCs to deploy WLAN infrastructure, configured specification for trunk port on core switches for WLCs. Have configured VLANs, Subnets and SVIs in correspondence with WLANs for Layer 3 routing of the WLAN subnets. Have configured security policies, access rules, ACL parameters and other policies as needed. Have performed deployment and administration of cisco UCC 7.1. Configured the ASAs in a multi-zone based model to support all the DMZs. Implemented redundancy to ensure 99.999% uptime for bowl.com Configured ACLs, policy-maps and all other type of advanced configuration on the ASAs as required. Designed and implemented custom-build VMPS for port security model with backend vmps servers as Ubuntu and vmpsd. VMPS servers’ uptime had been 100% Configured site-to-site VPNs for remote sites and dmvpn tunnels over the MPLS sites. Led a team of Five Engineers to day-to-day Network Operations, Monitoring, Threat Analysis, Incidence response troubleshooting traffic congestion and protocol analysis etc.

 Implementing BGP, OSPF, EIGRP, HSRP, GLBP configuration on the 720x VXR and 3845 Border Gateway Routers. Maintain Internet BGP tables, Exit ISP pipes load balancing, path optimization, failover, etc. Implementing inter sites connectivity over T1 and MPLS on 3745 Aggregation routers. Setup VRF Routing, NAT, access policies. Implementing end to end QOS framework for traffic shaping, IP Telephony and HD Video Conferencing for Customers Network Infrastructure.  Designing customer Network R/S, Voice, Security Infrastructure according to their requirementConfiguring customers perimeter and core level Routers, switches and Firewalls -- PIX, ASA, SonicWall and Checkpoints. Daily maintenance activities including reviewing log files, monitoring traffic flow, backing up configurations, checking for intrusions and abnormalities, etc.  Add, monitor, manage, maintain clients on switches and across the Network as required. Configure traffic shaping and other routing/switching and QOS tasks as necessary.  Inspecting bandwidth policies across WAN links. AT&T/TWT/AboveNet DS3, OC3 and T1 links. Watch for chokepoints, congestion. If occurs, find the cause and source. Take appropriate measures to resolve them.  Inspecting customer's traffic shaping policies. Make sure the links are conforming to specified bandwidth. If there are over-usages, adjust. Implementing QOS and Traffic Engineering as needed for Voice and other important traffic. Monitor QOS and VoIP for traffic prioritization. Adjust as required. Interact and collaborate with partners and vendors for budgeting, purchasing, procurement and negotiation issues. Have performed extensive use of Wireshark for in depth troubleshooting in the areas of QoS, Network monitoring and network optimization.

 Successfully finished the mission-critical project to upgrade the Store systems Networks for 1110 stores nationwide. Primary focus was to implement VLANs and deploy all the required Security policies and measures to secure the infrastructure for all the stores. Played a significant role in drawing the architectural design layout and blueprint implementation for upgrading the Store Systems Networks. Architectural design works included considering all the criteria and requirements to draw the final draft of Network segmentation through VLSM and VLANs implementation. Subsequently, outline all the policies and procedure to implement the SECUR framework for the segmented VLANs. Played the primary role in writing the roadmap and procedures to implement the deployment of the Network Upgrades; subsequently deploy the secure lockdown of the upgraded networks through ACLs and other security tools. Played a distinctive role in architecting, optimizing and configuring routing protocols of the JCP Internetwork routing infrastructure like OSPF, EIGRP and BGP. In the process, implemented advanced routing mechanisms such as: policy based routing, static and dynamic route-redistributions and route-maps. Implemented all the major scripts to create the necessary scopes for the Upgraded Networks with the new VLANs on the DHCP servers. Performed necessary troubleshooting and debugging. Deployed the new configurations for Network upgrade on the routers and Wireless Switches. Conducted all the necessary tests to ensure the functionality and expected security of the upgraded networks to the fullest.

 Performed Comprehensive Analysis, assessment and estimates to draw the architectural design to deploy Customers Network Infrastructure with Network Security a major focus. Deployed Physical Networks from Ground up. Installed Cables, Switches, Firewalls, Routers and other Networking equipments as required. Depending on customers demand, provided Windows or UNIX based Client/Server Framework Solutions. Configured Servers, Switches, firewalls and routers based on Customers Environment Specifics. Performed troubleshooting on various Networking, Server applications and Desktop related problems. Performed vulnerability and Exploit scans on a periodic base and implemented required security measures to ensure perimeter and inside Security for customers Network. Primary focus is to maintain an excellent customer relationship and exceed their expectations. Provided second level Support for the Prime Support Engineering Group. Designed escalation strategies, mentored engineers, served as the product lead for the WebShield for Solaris product. Administered test lab that replicates customers’ technical problems and performed testing to provide solution.  Wrote technical documents based on the results of those testing and researches to contribute to the internal and external Knowledge Base Solutions database. Performed QA testing in Unix native Shell Scripting language, Perl, C and Java for Software pre release. Conducted vulnerability assessment on Client’s network and provided suggestions with taking necessary measures to optimize security holes lock-down. Participated in designing and writing training manuals, administrative guides etc. As an active member of the Quality Management Team that was comprised of Senior Management of NAI, participated in designing strategies to enhance the quality of technical support for the organization.