Experience

• 

  Vardhman textiles

  Oct 2012 - Feb 2015

  Network administrator

  Managing LAN on CISCO L2 and L3 and network security UTM boxes like Fortigate.Managing Fortigate of 25 locations from the head office. Troubleshooting the issues of users related to web filtering, MPLS connectivity, VPNs, Load Balancing and Bandwidth issues.Managing the security over the Fortigate for whole India Vardhman locations.Looking after all the MPLS lines and raising the TACs and following and coordinating with the ISP.Managing the bandwidth of all the locations.Looking after the whole LAN connectivity from head office at Ludhiana, managing VLANs and and user connectivity.Looking after all the new projects related to networks and managing all the new expansion in the network.Providing the remote support to all the users for connectivity related issues to the servers at head office.Lead the project of network audit with the IBM team at VardhmanManaging a CISCO LAN with VLANS in network, VTP , Port Security, Ether channels for connectivity to servers, switch connectivity through stacking.Passive• Passive cabling (Copper and Fiber) for corporate building and data center.• Rack labelling and Dressing.• Downtime Management• Fluke testing and OTDR testingAudit• Network Audit with IBM team at 22 major manufacturing plants.• Firewall configurations, Switch configurations and Passive Network audit.Switching• Hands on experience with of STP, VLAN, VTP, Stack, Ether channels, Management VLAN, ACL, Storm Control, Port Security, VLAN Trunk port management for allowing VLANS, DHCP Snooping, DOT1x, MAC Binding and CISCO VOIP environment, SNMP.NMS Tools• Hands on experience in deploying and managing PRTG and Whats Up gold.VC Solution• Experience of handling Polycom VSX 8000.Documentation Work• Documentation of the whole firewall on simple excel sheets• Maintained all excel sheets for network connectivity of WAN lines• Maintained network device inventory.• Preparation of rack elevation, physical and logical diagrams of network on Visio. Show less

• 

  Sisl infotech

  Feb 2015 - Aug 2015

  Pre sales consultant and senior technical associate

  Working as a senior technical associate and a pre sales consultant for wired and wireless networking Fortinet, Cisco, HP) and network security solutions ( Fortigate).Installation of UTM Fortigate at customer end as per the customer requirement and providing online and onsite support to the customer related to Fortigate and Forti AP and switching.Implementation of projects of complete network solutions from switching, wireless and security.Discussion with the customer as pre sales for recommendation of the technology over the network. Managing Fortigate firewalls of CGC Landran, CGC Janjheri, GNA university, Fast way, SBOP Corporate Patiala, Baba Farid Group of institutions, Click Labs, Web Design Pvt Ltd., Pinegrove School, Zapbuild Technologies, Victor Forgings, Hotel Icon, Hotel Country Inn and suites and many more. Worked over the project of Baba Farid Group of institutions where Fortigate 1000 D, Fortianalyzer 200 D, Microsoft AD, Forti AP 221 C (30 Nos) were installed and configured for a network of 10000 users. Worked over the technology of Device authentication using MAC IDs over Fortigate and even MAC binding over Fortigate. Show less

• 

  Infosys

  Aug 2015 - Dec 2015

  Senior system engineer

  Worked as a senior system engineer in Infosys at Chandigarh.Worked over a switching network of Cisco 6500, 4500, Cisco VSS.Worked over the DOT1x, Mac Binding, and Cisco VOIP environment.Managed a CISCO network with all trunk ports have limited allowed VLANs to pass through and also each access port being a member of VOIP as well data VLAN.Worked for day to day tickets raised for the network support.Worked over a VTP enabled network.

• 

  Dalhousie university

  Jan 2016 - Oct 2017

  Student at masters of internetworking

  Student at Dalhousie university.Pursuing Masters of Internetworking.Active role in Labs:1. Working over SDN.2. Working over Cisco 3925, Cisco 3845, Cisco 2950, Cisco 3550.

• 

  Saint mary's university

  Mar 2016 - Oct 2017

   Working over the new project of Fortigate implementation (Fortigate 1500D in HA) for traffic shaping and bandwidth management by monitoring applications (Application sensors) and working over the network security by managing the firewall policies. Analyzing the whole network and then recommending for the LAN as well as WAN that is firewall security by policy hardening. Implementation of Forti analyzer (400E and VM-64) for the storage of logs and setting up the analyzer to generate necessary IPS, Application sensor and bandwidth utilization reports, threat reports, security analysis reports, top user utilization reports. Preparing SOW for the whole project along with the phase wise plan to carry on the project with the footsteps. Documentation of the whole firewall on simple excel sheets which is easy to be read and understood. Preparing well-structured plans on the documents before going through any kind of new implementation by analyzing the current network scenario. Analyzing the effects of the new implementation and documenting the steps to troubleshoot in case any issues occur with the new implementation. Along with these, documenting the steps to monitor the whole new implementation if it goes the way it is expected. Preparation of well labeled network, rack diagrams. Recommendations and implementation for firewall hardening as per server and users on the network.  Recommendations for the best secure network topology with redundancy. Recommendations and implementation on LAN switching security (MAC binding for wired, DHCP snooping, STP, LLDP or CDP, VTP, IP source binding if required, Storm Control, VLAN management, Trunk port allowed VLANs.) Implementation of Application sensors for Botnet blocking. Implementation of IDS and IPS. Configuring and implementation of SSL/ IP sec VPNs for the access of the servers for the vendors or the network team or server team. Show less

  • Network Security Consultant

    Oct 2016 - Oct 2017

  • Maintenance Engineer of Bright Space

    Mar 2016 - Sept 2016
• 

  Abm integrated solutions

  Nov 2017 - Nov 2019

  Network engineer

  * Fortimail implementation and monitoring.* Fortisandbox implementation and monitoring.* Managing Switching environment.* FortiAP implementation and monitoring.* Fortigate implementation and monitoring.* FortiSIEM implementation.*FortiClient EMS implementation and monitoring.*3cx Pbx tshoot.* Solarwinds monitoring and implementation.* Fortianalyzer and Forticloud knowledge.* Documentation and diagrams updates.* Designing and Discovery of networks and security. Show less

• 

  Stewart mckelvey

  Sept 2019 - Oct 2023

  Network analyst

  Manage Firewalls, switches and access points for all the locations. Recommendations and implementations of best practices of network security. Participate in Change Management Meetings. Documentation of projects, inventories and various network documents along with diagrams updates. Designing and Discovery of networks and security. Planning, coordinating and implementing network projects with Manager and the team. Configuring and implementing firewalls, switches and access points for clients. Hands On Experience with developing technical procedures and change documents. Aruba switching and Aruba IAP environment implementation. Experience with wireless IDS and alerting via airwave. Wireless and Wired Implementation with Clearpass 802.1x auth. Services Implementation on Clearpass for Web Override policies, 802.1X , VPN Auth , TACACS andRADIUS auth. VRRP Implementation over LAN Extension for DR across two Data Centers. Implementation of switch level security DHCP Snooping, mac based auth or aaa auth with NAC. IPSec and SSLVPN Implementations. Trusted, Untrusted and DMZ Zone designing and implementations. DMZ Implementation with FSSO for user based access control. Implementation of user based and device based access control in network. Implementation of Application controlled policies over the internet. Traffic analysis over the analyzer and performing zone traffic hardening for interzone and Internet. Experience with IPS, WAF, Webfiltering, URL Filtering, DdoS, Deep Packet Inspections, DNSFiltering, Third party threat feeds. Implementation of DNAT with SSL Server inspection over the firewalls. Implementation of QoS over switches and firewalls for VOIP and Video traffic. Experience with Fortianalyzer reports, alerts and creation of custom reports and alerts. Experience on analyzing network security alerts for mitigation over the network. Data Center Cabling management and implementing proper labeling and rack dressing. Show less

• 

  J.d. irving, limited

  Oct 2023 - now

  Senior network analyst