Kushantha Dharmadasa

Experience

• 

  ITMIN Internet Services Limited

  Jun 1999 - Feb 2000

  Systems Engineer

  • Administration of Linux, Sun SPARC, Windows infrastructure. • Configuration and troubleshooting and maintenance of Cisco based networking infrastructure• Administration of Linux/Solaris based services such as Sendmail, DNS and web services • Administration of Livingston RADIUS• Shell (BASH) / Perl Programming to automate the systems and user ID administration

• 

  Ceylinco Dini Technologies

  Mar 2000 - Jul 2001

  IT Consultant

  • Design and implementation of enterprise wide networks • Define and administration of installation phases • Manage and assign implementation schedules • Implementation of project documentation • Evaluation and recommendation for network security improvements

• 

  Dubai Petroleum Company - Dubai Petroleum Establishment

  Aug 2001 - Oct 2008

  Senior Network Analyst

  • Installation, configuration and administrations of Check Point firewalls (Nokia/SPLAT) • Implementation and administration of RSA SecurID two-factor authentication system. • Implementation and administration of remote access infrastructure comprised with 2FA.• Design, implementation and administration network infrastructure based on Cisco routers and switches. • Implementation and administration of Blue Coat proxy.• Designed and implemented Cisco wireless bridge solution to connect satellite platforms to the main admin and control platform of an offshore oil field. • Lead a team of IT/Telecom specialists on design and implementation of new drilling rig IT infrastructure. Project involved the meetings with business and drilling service providers to design the system to match business requirements while maintaining the compliance with information security policy. • Perform System and product qualification tests for new equipment and services. • Network Capacity planning, design, implementation and maintenance of LAN / WAN in all sites of the enterprise network. • Network monitoring, management, security audits, report generation and continuous service improvement. • Coaching and mentoring the infrastructure team members. Show less

• 

  Dimension Data

  Oct 2008 - Feb 2016

  • Scope, design and implement on-premises and cloud security infrastructure. Develop high-level and detailed level design documentation, implementation followed by final as-built documentation. • Develop implementation/deployment strategies and plans, system integration testing and UAT documentation.• Improve and develop operational processes and documentation to meet clients’ security policies and operational requirements.• Networking security infrastructure policy risk reviews and reporting. Rule base optimisation and compliance reporting. Fine-tune compliance automated review tools to align with specific customer policies.• Develop incident management processes and involve in major incidents for managed clients in the capacity of technical/team lead and provide technical solutions. Work in close liaison of clients, vendors and internal resources for expedited incident resolution to minimize the business impacts. Provide service impact analysis reports.• Improve and develop security related process to meet clients’ policy and operational requirements.• Firewall policy risk reviews and reporting. Rule base optimisation and compliance reporting.• Service description reviews, alignment, effort estimates, solution development and service activation.• Manage, mentor and train highly skilled team of engineers who provide support around the clock covering various technologies and services. Show less • Configuration, troubleshooting and operational support for Check Point Technologies for enterprise customers including major banks and government agencies.• Configuration, troubleshooting and operational support for Cisco ASA/PIX implementations in government agencies and private companies.• Troubleshoot and configuration support for BlueCoat, IronPort, RSA SecurID, F5 and Infoblox technologies• Liaison between clients and vendors to support complex security and connectivity issues at customers’ business infrastructure and manage RMA on behalf of customers. Show less

  • Security Team Lead / Technical Lead : Managed Services

    Jun 2010 - Feb 2016

  • Security Engineer, Level 3

    Oct 2008 - Jun 2010
• 

  NTT Ltd.

  Feb 2016 - Jun 2020

  Senior Security Engineer : Professional Services

  • Scope, design and implement operational technology networking security infrastructure to meet various standards such as NERC, NIST 800-82 and IEC-62443 requirements. This include business and operation requirements gathering, scoping, design, implementation and handover of the various networking security infrastructure components.• Legacy firewall migration to enable next generation firewall capabilities using Palo Alto Networks NGFW platforms.• Provide security consultancy services to managed services clients on designing and infrastructure transformation projects.• Take part and lead the technical aspects of all parts of the project life-cycle. This includes the requirements gathering and reporting, develop high-level and detailed level designs, and work with pre-sales teams followed by implementation, testing and handover the solutions back to internal and external clients. • Assist pre-sales and solutions teams with technical and operational inputs when scoping and developing tender responses. • Improve and develop operational processes and documentation to meet clients’ security policies and operational requirements.• Networking security infrastructure policy risk reviews and reporting. Rule base optimisation and compliance reporting. Fine-tune compliance automated review tools to align with specific customer policies.• Manage, mentor and train highly skilled team of engineers who provide professional services covering security technologies. Show less

• 

  Unisys

  Jun 2020 - Sept 2022

  Network Security Engineer
• 

  Defence Australia

  Sept 2022 - now

  Security Architect at Australian Department of Defence - Contractor to Defence