Tahir Bhat

Experience

• 

  Netmetric Infosolutions Pvt. Ltd.

  Jan 2010 - Dec 2011

  Network Engineer

  Client NETMETRIC SOLUTIONS Routing & Switching:Dynamic Routing protocols like RIP, EIGRP, OSPF and BGP..Policy based routing in RIP, EIGRP, OSPF and BGP.Summarization in RIP, EIGRP, OSPF and BGP.Stub Area, NSSA, Totally Stub Area in OSPF.BGP (Internal BGP and External BGP)VLANS and communication between VLANS on different vendors.Service Provider:Basic MPLS and Routing protocols like RIP, OSPF, BGP and EIGRP between PE/CE.VRF creation and usage of Route Targets and Route Distinguishers.MPLS Security.Multiprotocol Label switching Archive.Multiprotocol Label switching High Availability. Multiprotocol Label switching Quality of Service.Multiprotocol Label switching Traffic Engineering Other Vendors:Coordinate with other technology vendors like Microsoft, checkpoint, Sonic wall, Juniper,Cisco watchguard, Amazon, etc to resolve client’s issue(s) and design their networks properly Show less

• 

  Networxx

  Dec 2011 - Dec 2014

  Network Engineer

  Client NetworxxProject: Kurdistan International Bank, Kurdistan, Erbil, IraqAccountabilities:Security: Firewall.Firewalls, Intrusion Prevention & AMPASA Configurations NAT & ACLs Intrusion Prevention:Balanced Intrusion Prevention Policies, Tuning an Existing Signature on the Intrusion Policy, Event Filter, Custom Signature, Network Discovery Policy, and Intrusion Policy based on the Firepower Recommendations.Configuring AMP AMP Policies to Block Specific File types, AMP Policies to Block Files Infected with Malware.IOS-Based Firewall.VPNs on ASA & FTD LAN-TO-LAN IPSec VPN on ASA – IKEv1/ IKEv2. Remote-Access SSL-Based VPN on ASA, Clientless SSL VPN on ASA.Identity Service Engine (ISE) :Basic Initialization, ISE to communicate to the Switch & WLC Network Devices, 802.1x using ISE, Posture Validation Using ISE, Cisco Trust Sec with SGT Exchange Protocol [SXP], ISE for Device Administration.Routing & Switching:.Dynamic Routing protocols like RIP, EIGRP, OSPF and BGP..Policy based routing in RIP, EIGRP, OSPF and BGP.Summarization in RIP, EIGRP, OSPF and BGP.Stub Area, NSSA, Totally Stub Area in OSPF.BGP (Internal BGP and External BGP)VLANS and communication between VLANS on different vendors. Service Provider:Basic MPLS and Routing protocols like RIP, OSPF, BGP and EIGRP between PE/CE.VRF creation and usage of Route Targets and Route Distinguishers.MPLS Security.Multiprotocol Label switching Archive.Multiprotocol Label switching High Availability. Multiprotocol Label switching Quality of Service.Multiprotocol Label switching Traffic Engineering Other Vendors:Coordinate with other technology vendors like Microsoft, checkpoint, Sonic wall, Juniper,Cisco watchguard, Amazon, etc to resolve client’s issue(s) and design their networks properly Show less

• 

  KBITS IT Integration Solutions

  Jan 2015 - Apr 2021

  Project: Ministry of Water and Electricity, Riyadh, KSAAccountabilities:Security:Firepower Firewall.Firewalls, Intrusion Prevention & AMPASA Configurations on 9.XNAT & ACLs on 9.XIntrusion Prevention:Balanced Intrusion Prevention Policies, Tuning an Existing Signature on the Intrusion Policy, Event Filter, Custom Signature, Network Discovery Policy, and Intrusion Policy based on the Firepower Recommendations.Configuring AMP AMP Policies to Block Specific File types, AMP Policies to Block Files Infected with Malware.IOS-Based Firewall.VPNs on ASA & FTD LAN-TO-LAN IPSec VPN on ASA – IKEv1/ IKEv2. Remote-Access SSL-Based VPN on ASA, Clientless SSL VPN on ASA.Identity Service Engine (ISE) :Basic Initialization, ISE to communicate to the Switch & WLC Network Devices, 802.1x using ISE, Posture Validation Using ISE, Cisco Trust Sec with SGT Exchange Protocol [SXP], ISE for Device Administration.Web Security Appliance (WSA):Initial Configuration, Web Filtering Using WSA,E-Mail Security Appliance [ESA]Wireless LAN Controller (WLC) :Configuration of the WLC & WAP, Basic Wireless LAN,Routing & Switching:.Dynamic Routing protocols like RIP, EIGRP, OSPF and BGP..Policy based routing in RIP, EIGRP, OSPF and BGP.Summarization in RIP, EIGRP, OSPF and BGP.Stub Area, NSSA, Totally Stub Area in OSPF.BGP (Internal BGP and External BGP)VLANS and communication between VLANS on different vendors. Service Provider:Basic MPLS and Routing protocols like RIP, OSPF, BGP and EIGRP between PE/CE.VRF creation and usage of Route Targets and Route Distinguishers.MPLS Security.Multiprotocol Label switching Archive.Multiprotocol Label switching High Availability. Multiprotocol Label switching Quality of Service.Multiprotocol Label switching Traffic Engineering Other Vendors:Coordinate with other technology vendors like Microsoft, checkpoint, Sonic wall, Juniper,Cisco watchguard, Amazon, etc Show less

  • Senior Network Security Engineer

    Apr 2016 - Apr 2021

  • Network Security Engineer

    Jan 2015 - Mar 2016
• 

  HCL Technologies

  Apr 2021 - now

  Project: CFSC - WESTROCK USA Accountabilities:Leading the Cyber Security fusion center Team for Westrock USA & GOODYEARPrimary Responsiblites:-Firepower,Fotinent,Checkpoint,Vyatta , AWS Firewalls, Infoblox,Crowd Strike, Logic monitor, Cisco Umbrella,ISE, IBM Qradar, Zscaler (ZIA) Firewalls, Intrusion Prevention & AMP Intrusion Prevention:Balanced Intrusion Prevention Policies, Tuning an Existing Signature on the Intrusion Policy, Event Filter, Custom Signature, Network Discovery Policy, and Intrusion Policy based on the Firepower Recommendations.Configuring AMP AMP Policies to Block Specific File types, AMP Policies to Block Files Infected with Malware.Identity Service Engine (ISE) :Basic Initialization, ISE to communicate to the Switch & WLC Network Devices, 802.1x using ISE, Posture Validation Using ISE, Cisco Trust Sec with SGT Exchange Protocol [SXP], ISE for Device Other Vendors:Coordinate and managing with other technology vendors like Microsoft, checkpoint, Sonic wall, Juniper,Cisco watchguard, Amazon, zscaler,Cisco Meraki, Azure, AWS, IBM Cloud etc. Show less Project: AVON UK,Accountabilities:Security: Firewall.Firewalls, Intrusion Prevention & AMPASA Configurations NAT & ACLs Intrusion Prevention:Balanced Intrusion Prevention Policies, Tuning an Existing Signature on the Intrusion Policy, Event Filter, Custom Signature, Network Discovery Policy, and Intrusion Policy based on the Firepower Recommendations. AMP AMP Policies to Block Specific File types, AMP Policies to Block Files Infected with Malware.IOS-Based Firewall.VPNs on ASA & FTD LAN-TO-LAN IPSec VPN on ASA – IKEv1/ IKEv2. Remote-Access SSL-Based VPN on ASA, Clientless SSL VPN on ASA.Identity Service Engine (ISE) :Basic Initialization, ISE to communicate to the Switch & WLC Network Devices, 802.1x using ISE, Posture Validation Using ISE, Cisco Trust Sec with SGT Exchange Protocol [SXP], ISE for Device Administration.Routing & Switching:.Dynamic Routing protocols like RIP, EIGRP, OSPF and BGP..Policy based routing in RIP, EIGRP, OSPF and BGP.Summarization in RIP, EIGRP, OSPF and BGP.Stub Area, NSSA, Totally Stub Area in OSPF.BGP (Internal BGP and External BGP)VLANS and communication between VLANS on different vendors. Service Provider:Basic MPLS and Routing protocols like RIP, OSPF, BGP and EIGRP between PE/CE.VRF creation and usage of Route Targets and Route Distinguishers.MPLS Security.Multiprotocol Label switching Archive.Multiprotocol Label switching High Availability. Multiprotocol Label switching Quality of Service.Multiprotocol Label switching Traffic Engineering Other Vendors:Coordinate with other technology vendors like Microsoft, checkpoint, Sonic wall, Juniper,Cisco watchguard, Amazon, etc to resolve client’s issue(s) and design their networks properly Show less

  • Associate Consultant

    Nov 2023 - now

  • Technical Specialist

    Apr 2021 - Oct 2023