Saif Khan

Experience

• 

  Optimum Technology

  Jan 2003 - Mar 2004

  System Support Engineer
• 

  Cybernet

  Jun 2007 - Aug 2007

  Internee Network support Engineer

  •Respond to technical queries related using standard procedures.•Responsible for Field deployment (Broad band Modem, DSL)•Configuration of Wireless Modem and DSL CPE•Complaint handling trouble shooting•Respond, resolve and track IT support complaints and escalated issues.•Provide computer/network support relating to software and hardware problems reported by users•Technical support of all computing hardware (desktop, laptop, printer).

• 

  Expotek Consultancy Services

  Feb 2008 - Dec 2008

  System & Network Administrator

  • Administration of Windows 2003 Server which include user’s security policy implementation, user creation, active directory management.• Administration of Microsoft Exchange, designing of workflow for HR department.• Handle LAN & WAN.• Installation & replacing defective hardware include RAM, Hard disk, Mother board etc.• Provide users support on XP, Office.• Explain how to use equipment and solve any equipment problems.

• 

  United Capital Securities (Pvt) Limited

  Aug 2009 - Apr 2011

  Assistant IT Manager

  •Administration of Windows 2003 Server which include user’s security policy implementation, user creation, active directory management.•Migration from Windows Server 2003 to Windows Server 2008.•Administration of Microsoft Exchange, designing of workflow for HR department.•Administration of network user accounts and mailboxes.•Implements network security at the regional level as established by corporate Security Director. •Established VPN Client between Branch offices.•Technical fault analysis and troubleshooting. •Monitoring and verification of service processes – i.e. backups, patch distribution •Maintenance of data centre environment – i.e. cabling, labeling, standards •Manages the purchasing of all software, hardware and other IT supplies at the regional level.•Perform routine backups and archival of files stored on the network to assist with disaster recovery.•Provision servers into data centre environment.•Developing documentation, including user guides.•Gathering data and preparing reports •Undertaking project work when required.•Managing email, anti spam and virus protection•Managed & resolved issues in Active Directory, DHCP and DNS.•Maintaining system documentation logs and assisting in troubleshooting and diagnosis of system problems. Show less

• 

  Al Rostamani Communication LLC

  May 2011 - May 2013

  Network & Secutiry Engineer

  Al Rostamani Communication LLC (Abu Dhabi) Abu Dhabi Police Head Quarter (Abu Dhabi)Abu Dhabi Marine Authority-OPCO (Abu Dhabi)Abu Dhabi Tawteen Council (Abu Dhabi)Kelvin Catering & Services (Abu dhabi)Telectron Services (Abu Dhabi)AL Hussam (Abu Dhabi)ZADCO (Abu Dhabi)Abu Dhabi Judicial Department (Abu Dhabi)Al Dhabi (Abu Dhabi)• Configure Sonicwall NSA 3500 on High Availability Mode for Fail Over.• Configure 20 Sonicpoint Integrate SonicPoint with Sonicwall Firewall.• Create Virtual Access Point for Roaming Profile on NSA Firewall 3500 for Employee and Guest. • Integrate Sonicwall Firewall NSA 3500 with Active Directory.• Configure CFS Policy to for Privilege and Non-Privilege Users.• Configure Firewall Access Rule.• Configure ISPs Link with Fail Over Load Balancing on Sonicwall NSA 3500.• Cisco 2960 PoE Switches according to VLAN.• Create Firewall Access Rule to route Traffic for SMTP through Leased Line.• Establish Site-to-Site VPN between 3 Branches with DynDns Account. • Configure Cisco Router 2900 for internet connectivity between etisalat routers.• Create VLAN on Core Switches in VTP Server Mod.• Configure DHCP on Cisco 4503E Switches according to the VLAN Tags, with DHCP Exclusion for their Servers.• Configure 15 Cisco 2960 PoE Switches according to the VLANs in Client Mode.• Establish Site-to-Site VPN between 4 Branch Office from Head Office Abu Dhabi to Dubai, Sharjah, and Mina.• Configure McAfee ePolicy Orchestrator.• Establish connectivity ePO with LDAP to import all Active Directory User on McAfee ePolicy Orchestrator.• Push Agent and Virus Scan on all Client Machine through McAfee ePolicy Orchestrator.• Configure McAfee ePolicy Orchestrator on Standalone server establish connectivity ePO with LDAP to import all Active Directory Users on McAfee ePolicy Orchestrator.• Manage and provide support for McAfee Antivirus on 12000+ nodes. • Create policy on Data Loss Prevention for Workstation to Block USB and CD/DVD. Show less

• 

  Americana Computer System, LLC.

  Jan 2013 - Jan 2013

  Network & Security Engineer
• 

  HeiTech International LLC

  Jun 2013 - May 2015

  Senior Network & Security Engineer

  Saaed Traffic System (Abu Dhabi)• Administration of Windows 2003 Advance Server which include user’s security policy implementation, user creation, active directory management.• Create Additional Domain Controller on Windows Server 2008.• Migration from Windows Server 2003 to Windows Server 2008• Complaint handling trouble shooting.• Provision servers into data center environment.• Provided first and second line support and managed solutions including servers based, network devices - Cisco switch/router, HP Firewall/Switches, Nortel Core Switches located across multiple sites.• Implement McAfee for System Security, where place McAfee ePO Server, Virus Scan, Host Data Loss Prevention, Host Intrusion Prevention System, End Point Encryption of PC (Patrol & Laptops).• Configure McAfee ePolicy Orchestrator on Standalone server establish connectivity ePO with LDAP to import all Active Directory Users on McAfee ePolicy Orchestrator.• Upgrade McAfee ePO 4.5 Patch 1 to McAfee ePO 4.5 Patch 6.• Upgrade McAfee ePO 4.5 Patch 6 to McAfee ePO 4.6 Patch 2.• Upgrade McAfee ePO 4.6 Patch 2 to McAfee ePO 5.1• Implement Agent Handler on 5 Sites for Load Sharing on ePO Server for Deployment of McAfee Packages, enforcing Policies, Anti-Virus Update.• Implement Policy according the organization requirement for Host Data Loss Prevention where allow access to the USB / CD,DVD for Executive Users and Block access for outside of the LAN Users and Normal Users.• Implement Policy for Host Intrusion Prevention System to Prevent Critical Attacks and ignore others.• Implement Policy for End Point Encryption for PC to encrypt Hard Drive for (Patrol and Laptops).• Manage and provide support for McAfee Antivirus, Device Control, and HIPS on 700+ nodes. • McAfee ePolicy Orchestrator (ePO) administration. Responsibilities include the installation and setup of servers, storage and required infrastructure. • Day to Day support Task. Show less

• 

  Dana Gas

  May 2015 - Jul 2020

  Senior Security Engineer

  • Implement McAfee for System Security, where place McAfee ePO Server, Virus Scan, Host Data Loss Prevention, Host Intrusion Prevention System, Drive Encryption. • Apply Policy for Removable Storage Protection to prevent File/Data being copied on to USB or any External Drive. E.g Clip Board, File Extension, Email Protection, Screen Capture. • Configure and Install Risk Advisor on Workstation and Server for the Vulnerabilities. • Configure and Install McAfee Drive Encryption on all Workstation as well as on Laptops to prevent loss of Data. • Configure Agent Handler for 3 Sites Egypt, Sharjah, and Datacenter. • Generating report on Weekly Basis from ePO for IPS, HIPS, Virus Scan, Host DLP, Host IPS. • Managing Sonic Wall Firewall in Sharjah HQ, Saj Gas and Hamriah Site. • Migrate Sharjah Head Office Perimeter Sonicwall Firewall to Fortigate 500D.• Place Server Farm Core McAfee 1035 Next Generation Firewall.• Enable UTM Feature on McAfee Next Generation firewall. • Place McAfee IPS in Inline mode at Head Office. • Data Center place a Perimeter Fortigate Firewall 1000D for branches interconnectivity VPN.• Migrate Data Center Perimeter Palo Alto Firewall to Fortigate 500D for Application Publishing.• Place Server Farm Core McAfee 1035 Next Generation Firewall (Stone Soft) at Datacenter.• Migrate Branch office SonicWall Firewall to Fortigate 500D.• Established an IPSec VPN between all of the branches with Fortigate Perimeter Firewall.• Established an SSL VPN on Foritgate for IT Staff.• Managing McAfee IPS for Data Center and branches.• Implement Tenable Vulnerability Manger.• Implement McAfee Network Data Loss Prevention for Web and Email.• Implememt McAfee Web Gateway 7.6.• Implement McAfee ATD, TIE/DXL in order to provide secure network access to user.• Prevent 0 Day Attacks/Threat.• Integrate ATD with McAfee ePO, NSM, Web Gateway, Force Point NGFW.• Enable GAM (Gateway Anti Malware) on ATD and Web Gateway. Show less

• 

  Mutex Systems Pvt. Ltd.

  Aug 2020 - Sept 2021

  Infrastructure Security Lead

  •Engage in Pre-sales activity, evaluate RFPs and prepare Technical Response for the RFP.•Support sales team by conducting Proof of Concept at customer premises.•Understand Customer requirement and needs to propose right solution.•Engage in Solution demo and Presentation for customer.•Conduct Security Architecture Review & Design exercise for customer and provide review reports.•Lead Complex Implementation.•SOC and Incident Response Consulting.•Engage in Project kick-off meeting with Customer, understand requirement and recommend best design and approach for solution implementation.•Provide Pre-requisites, HLD/LLD documents and Implement end to end solution as per scope within deadlines.•Provide Training and Knowledge transfer session to peers and customer.•Provide L2/L3 remote and onsite support to customer on various security products.•Plan and carry out upgrades, migration activities smoothly in customer outage window.•Carry out regular Health checks for customer security devices and recommend fine-tuning of existing device configurations.•Support Pre-sales team by conducting Proof of Concept at customer premises.•Set-up internal LAB for product evaluation and testing.•Provide management of technology initiatives including creating comprehensive plans for achieving infrastructure Security project objectives.•Lead infrastructure security project activities.•Supervise assigned staff and plan work schedules for maximum efficiency and productivity•Guide and supervise staff assigned to work on the infrastructure security operations and provide technical assistance•Provide a secure environment, by implementing controls to manage and mitigate risks. Show less

• 

  Dana Gas

  Oct 2021 - now

  Senior Security Engineer