Category: Network Security Engineer

jessica claire montgomery street san francisco ca 94105 555 4321000 resumesampleexamplecom professional summary passionate network security engineer 6 plus years experience health finance industries specialization datacenter management enterprise wide security experience configuring optimizing troubleshooting complex network infrastructure includes expertise enterprisewide routing switching network security wireless domains experience configuring designing troubleshooting security policies nat policies routing different failover mechanisms palo alto pa7000705052603260 series cisco asa 55xx juniper srx check point r77 series fortinets firewall expertise migrating cisco asa fortinet firewalls palo altos nextgeneration firewalls using pan migration tool expedition tool extensive knowledge configuring troubleshooting monitoring palo alto firewalls central management device panorama m500 expertise implementing ipsids expert configuring threat prevention includes antivirus antispyware vulnerability implementing file blocking wildfire analysis dos protection palo alto firewalls expertise configuring deploying global protect vpn multiple gateways rolled 30kusers expertise configuring implementing troubleshooting remote access solutions like ipsec vpn remote vpn ssl vpn dmvpn extensive knowledge implementing url filtering applicationbased policies implementing zones strong knowledge mitigation ddos attacks ipsec ssl implementation cisco palo alto firewalls experience kill chain management strong hands experience install configuring troubleshooting cisco 72003800 series routers expert level knowledge troubleshooting implementing optimizing testing static dynamic routing protocols eigrp ospf ibgp ebgp ability interpret resolve complex routing issues handson knowledge citrix netscalar f5 bigip load balancing ltm gtm method implementation troubleshooting strong hands experience implementing configuring troubleshooting data center switches like cisco nexus 7k arista switches expert level knowledge standard extended acls versed routemap implemented policy based routing redistribution clearpass policy manager clearpass guest access manager authenticate wireless users worked aruba virtual mobility controller aps aruba 6000 controller aruba ap65 70 124 125 experience installing configuring dns dhcp forward proxy servers expert level knowledge osi model depth knowledge hands experience ipv4 addressing subnetting vlsm arp reverse arp proxy arp icmp concepts packet analysis tools wireshark monitoring tools like solarwinds nagios netscout siem tools like splunk qradar trusted network security engineer 6 years protecting companies bad actors disrupt business operations serves primary safeguard external threats educates colleagues best practices network safety protocols protects networked assets preventive reactionary measures siem provider management byod program implementation incident logging oversight network security management firewall installation symantec endpoint protection designing security controls skills lan technologies ethernet fast ethernet gigabit ethernet waps ieee 80211 token ring workgroup domain hsrp dns static vlan stp vtp ether channel trunks wan technologies hdlc ppp channelized links e1t1e2t2 leased line isdndialup frame relay circuits metro ethernet atm sonet mpls vpn ipsecvpn routing protocols ospf eigrp bgp rip v1v2 route redistribution route filtering summarization static default routing distance vector path vector link state ospf bgpv4 mp bgp switching technologies vlans inter vlan routing port channels vtp vtp modes vtp pruning hdlc ppp authentication pap chap spanning tree protocols like pvst rstp mst bpdu guard filter multilayer switching port security vss cef network security technologies asa 55505540 firewalls juniper srx firewall palo alto firewall pa 3050 pa 5260 pa 5220 pa 5250 pa7050 check points access control lists ipsec ids ips mcafee security center firewalls palo alto cisco asa 55xx series checkpoint appliance juniper fortigate network management wireshark snmp netflow solar winds tufin splunk qradar nessus security center syslog ntp dhcp tftp load balancers f5 networks bigip ltm gtm apm asm 6800 64002000s 1500 citrix netscaler gre tunneling remote access vpn site tosite vpn asa 5505 firewall aip ssm csc ssm fwsm acl access control list ipsids nat pat nexus features vdc vpc vrf fex fabric path f series line cards aaa architecture tacacs radius cisco acs cisco ios panos nexus os work history senior network security engineer 012019 current apogee minneapolis mn various greenfield brownfield large dispersed cisco ise deployments tacacs device administration radius wired wirelessvpn endpoints using ad securid radius external identity sources migrated cisco acs cisco ise virtual ise appliances physical ise appliances forklift rip replaces patches softwareupgrades tasks include installing software linux based systems installing patches upgrades configuring authentication systems support variety vendor platforms review approve provision tokens user authentication enable locked user accounts perform periodic audits users groups authentication system designed deployed automation network configuration troubleshooting monitoring developed customized monitoring checks alerting reporting business intelligence performed several network security review remediation projects including cisco acs cisco ise aruba clearpass cisco network infrastructure juniper network infrastructure good understanding setting ipv6 tunnels via mpls core ipv6 based ibgp core ipv6 dmpvpn gres vpls bgp multihomed arin prefix allocation expert level knowledge standard extended acls versed routemap implemented policy based routing redistribution designed deployed palo alto network physicalvirtual firewalls privatepublic cloud infrastructures datacenters worked f5bigip ltm appliances written rules ssl offload everyday wip vip tasks software upgrades f5 loadbalancers juniper switches cisco nexus switches time time order meet compliance implemented security system intrusion detection system protocols like gre vpn ike tacacs radius etc assisted deploying troubleshooting vpn tunnels ipsec open vpn also managed site site vpn connectivity capacity redundancy expertise setting nat secure resources lan enabling pat dynamic nat overload configured ads active directory sever ldap palo alto firewall authenticate user ids configured tacacs ldap ipsec radius cisco asa palo alto firewalls expertise conducting security policy rule review identify remove rules needed reduce palo alto firewall policy lookup worked aws corporate connectivity aws ec2 auto scaling nat gateways managed cisco pix firewall acl vpn also worked physical server migration aws data center involved designing implementation aws network connectivity bw physical aws dc designing deploying dynamically scalable highly available fault tolerant reliable applications aws established bgp peering onsite datacenter newark aws cloud involved troubleshooting network health issues reduced network downtime using monitoring tools like splunk solarwinds senior network security engineer 012019 122019 apogee nashua nh responsible managing maintaining datacenter dr network infrastructure respond outages user problems triaging troubleshooting plan device os upgrades implemented ospf within four areas administer setup datacenter dr area 0 regions different areas install configure administer deploy document firewall infrastructures migrated cisco asa firewalls palo alto firewalls installed palo alto pa 7000 52605250 firewalls data center maintained ipsec ssl vpns performed firewall migrations asa 55xx series palo alto using pan expedition tool configuration firewall palo alto security policies global protect vpn url filtering data filtering file blocking profiles currently working palo alto 3050 50607000 panorama 100 500 series machines pan os 86 troubleshoot conduct scans access network issues patch vulnerabilities mitigate ddos attacks palo alto firewall use appid url filtering allowing denying web traffic also prevent hosts accessing malicious websites configured ads active directory sever ldap palo alto firewall authenticate user ids configured tacacs ldap ipsec radius cisco asa palo alto firewalls expertise conducting security policy rule review identify remove rules needed reduce palo alto firewall policy lookup configure monitor global protect gateways create ipsec ssl vpns tunnels users customers palo alto firewall configured acls cisco asa 5520 firewall internet access requests servers protocol handling object grouping nat implemented configured fortinet firewall fortigate 600 800 series designed implemented fortinet network third party equipment per isp sr service request included juniper f5 cisco catalyst cisco nexus 7k higher end fortigate create rules pre post default objects device groups templates panorama configure natpat policies well captive portal perform independent verification validation project requirements including data configured sitetosite ipsec vpn cisco asa fortigate firewall troubleshoot created prevented measure stop spamming implementing spam filtered acl list content filtering configuring recipient variation ldap fortimail spamming appliance provided customer support fortigate fortimail protect authenticate localnet dmz defined policies nat anti spoofing internal external networks well internet gateways monitored maintained switches routes firewalls load balancers assisting tire iii troubleshooting switching routing issues production environment deployed onearmed twoarmed architecture f5 bigip load balancer including ltm gtm apm asm custom irules development configure wan technologies like ppp hdlc mpls frame relay cisco 7200 edge routers fixed issues related network analyze traffic flow using wireshark tcp dump administered cisco catalyst 6500 4500 nexus 2k 5k 7k juniper ex2300 ex3400 switches enabled l2 critical configurations like 8021q encapsulation port channels vtp vlan inter vlan routing etc designing f5 solutions migration work applications websites cisco css load balancers f5 big ip load balancers using 6400 6800 devices implementation wireless access lan reallocated cisco routers accesspoints needed experience network automation firewall migration ftd fmc experience configuring onsite cloud connectivity using aws configuring ha pair two palo vm300 series aws instance firewalls testing failover activity well eni migration involved troubleshooting network health issues reduced network downtime using monitoring tools like splunk solarwinds network security engineer sme 012016 012018 apple inc louisville ky administered core distribution access layer routing switching firewall infrastructure setup band management infrastructure used bgp internet traffic worked attributes like local preference outbound traffic path inbound traffic used attributes steer traffic set ha active passive model connectivity 2 different isp connections lead security engineer responsible enterprise palo alto firewall platform including panorama management stations 35 firewalls responsible building network security infrastructure confidential investments separation using pa5250 pa5260 amazon aws virtual firewalls vm300 integrated cisco aci fabric selecting appropriate aws service design deploy application based given requirements defined deployed monitoring metrics logging systems aws migrated existing onpremises applications aws helping cloud architecture next steps proof concept aws open stack ms azure cisco aci juniper contrail sdn nfv selecting appropriate aws stack implemented highavailability url filtering ssl decryption global protect vpn clients layers 47 policies userid using ldap appid threat prevention autofocus minemeld integration zone protection dns sinkhole wildfire configuration leveraged multiple vsys traffic separation migrated checkpoint 10 palo alto pa5250 pan os 80 migrated checkpoint firewall palo alto firewall using pan migration 30 tool configured managed checkpoint palo alto firewalls implemented checkpoint dlp data loss prevention sg 4800 firewall ips ids application filter web filter configurations idsips signature various vulnerability efficacy testing various sets attack respect signatures performance tuning signatures deployed realize network insight get existing traffic patterns network information physicalvirtual nsx nonnsx network help leveraging nsx adoption optimum level achieve required micro segmentation critical components installed maintained vmware nsxexperience developing implementing use cases next generation firewalls vmware nsx palo alto network maintained multisegmented applicationbased network vmware nsx palo alto firewalls created enterprise multizones vmware nsx integrated palo alto network experience integration nsx manager 60 palo alto firewalls also responsible vpn migration cisco connect palo alto global protect involved deployment cisco nexus 7k 5k 2k along asr 9k 6509s sup 720 cisco 4900 3750 2960 switches worked configuring bgp ospf eigrp protocols cisco 7200 3800 juniper mx240 mx280 series routers also enabled hsrp vrrp protocols redundancy assisted setting new 510 810 blue coat proxy sg units performed one many proxy migrations good hands experience deploying troubleshooting configuring cisco meraki layer 2 layer 3 switches like ms 225 ms 250 ms 350 performed firewall policy optimization using third party tools like tufin ensure policy auditing across many dependent firewalls setup tufin clusters virtual environment worked monitoring tools like solarwinds splunk qradar sniffing tools like wireshark network security engineer 062014 122015 state farm city state installation configuration cisco switches routers along asa firewalls per user requirement installation configuration cisco routers 2800 2900 3900 asr1k 9k involved deployment cisco nexus 7k 5k 2k along asr 9k 6509s sup 720 cisco 4900 3750 2960 switches using command line asdm asa firewalls configuring route filtering bgp eigrp wan links traffic hitting internet dc installation configuration troubleshooting cisco asa 5505 5510 firewalls worked route maps understand implement different bgp attributes like local preference med aspath etc managed enterprise bgp setup made configuration changes troubleshooting needed deployed ios upgrades catalyst 1900 2900 3500 series switches 2500 2600 3600 series routers along asa firewalls development conceptual physical horizon design technical workshops whiteboard sessions consultation validation conceptual design physical design ensure design meets customer requirements consideration constraints vsphere horizon view health check assessment current horizon pools composer golden images os images app volumes uem vsan storage pcoip networking vsphere vcenter esxi hosts configuration required components ensure solution alignment vmwarebest practices configured vlan trunking 8021q stp 8021q stp port security catalyst 6500 switches deployed worked activestandby failover mechanism cisco asa firewalls order provide highavailability ha experienced implementing managing f5 bigip load balancing including gtm apm asm custom rules development configured dynamic static nat extended accesslist cisco asa firewalls hands experience content security control security services module cscssm advanced inspection prevention security service module aipssm cisco asa firewall created vlan intervlan routing multilayer switching vmware horizon view 70 training session 2 onsite engineers 2 vmware ap appliances 2 connection servers composer server updated master image dedicate 1 view pool persona configuration overview new horizon view 74 environment designed implemented installed configured upgraded view horizon server 516 7071 installed view composer vcenter server standalone server installed configured view connection server experienced configure dedicated link cloned vm experienced configure view security server connection server experienced configured certificate authority internal vdi ssl certificate view security dmz education bachelor technology electrical electronics communications engineering 042012 jawaharlal nehru technological university hyderabad master science electrical electronics engineering technologies 042014 university bridgeport bridgeport ct certifications palo alto networks certified network security engineer pcnse cisco certified network associate ccna symantec specialized certified