Network Security administrator | HCL

Responsibilities

1. Design and Deployment of Data Centre switches with Nexus 9K at Leaf and Core layer.

2. Design and Implementation of Cloud Proxy and VPN Remote Access solution by Zscaler.

3. Handling BAU issues related to Routing/Switching and upgrade of Routers and switches in Data Centre setup as DC/DR and remote sites.

4. Managing connectivity of remote sites to the Data Centre

5. Implementing changes, handling operational issues and software upgrades on Network Firewalls like, PaloAlto, Checkpoint and Cisco ASA firewalls) 6. Implementing changes, handling BAU and upgrade of F5 GTM and LTM devices.

7. Assess customer environment and requirements and design world-class solutions, leveraging best practices and best-of-breed technologies

8. Performs system integration tasks

9. Investigate and provide the RCA for the incidents

10. Knowledge of ITSM process

Essential Requirements (Skills Requirements)

Knowledge on OSI & TCP/IP Network protocol architecture, Layering benefits and concept, functions of different layers, switches and LAN design, VLANs

Configuring and troubleshooting Cisco routers/switches

Routing protocols (EIGRP, OSPF, BGP). WAN transport technologies (Private/Leased Line, MPLS,)

Switching : VLAN, STP, VTP, HSRP

Very good knowledge of network concepts 802.1x, STP,GRE, DMZ VPNs, VLAN configurations

Well versed with Switching, Routing & F5 Load Balancing (LTM/GTM and APM module)

Experience with firewalls including Layer 7 firewalls (Cisco ASA, PIX)

Good experience in configuring various types of VPN network [Point to Point, GRE, SSL ]

Manage security appliances and next generation firewalls from various vendors such as check point, Cisco ASA, checkpoint, palo alto and FortiGate Etc.

Hands on experience in configuring URL filtering, file blocking and security profiles in Palo Alto firewalls , checkpoint firewalls and fortigate firewalls .

Apply Firewall rules and Checkpoint on R65 & R75 on Nokia IP 390, Cisco PIX 515 E, Cisco ASA 5510 & 5520.

Apply firewall rules and troubleshooting on checkpoint gaia r80.20 , R80.40 . Palo alto pan os 8.0 and 9.0 , Fortigate firewalls .

Citirx Netscaler and Access Gateway configuration and Management

Cisco WAAS , Wireless and IP management

Experience in analyzing network traces

Experience in Nexus 9k, 7k , 5k , 3k firmware upgrade , troubleshootng .

Handson expeirence working on ACI , OTV , VPC

Knowledge of Tufin secure change and secure track , Cisco MSE , Cisco ISE , Cisco Prime infrastructure , Cisco ACS .

Handson expeirence on Gigamon , Packet sniffer tools like Wireshark .

Handson experience on Cisco Anyconnect VPN , Bluecoat proxy ASG and SG , Zscaler Cloud proxy

Education :- Bachelors degree in Information technology

Years of Experience :- 10+ years

GOOD TO HAVE

F5 handson experience

VPN handson experience

Zscaler handson experience

Handson experience in AWS and Azure networking

Knowledge of Cisco ACI

Knowledge of Ansible , Python , Datadog

Technical / Professional Skills

CCNP or equivalent required in Datacenter or Security

Effectively able to administer multi-vendor network security technologies

Non-Technical / Soft Skills

1. Must have strong communication skills (Verbal and Written) and the ability to articulate task management, priorities, and issues, participate in customer visits, conference calls, and assisting with defining the scope of services tasks

2. Must be able to perform people management, Escalation management , Work management related tasks

Responsibilities

1. Design and Deployment of Data Centre switches with Nexus 9K at Leaf and Core layer.

2. Design and Implementation of Cloud Proxy and VPN Remote Access solution by Zscaler.

3. Handling BAU issues related to Routing/Switching and upgrade of Routers and switches in Data Centre setup as DC/DR and remote sites.

4. Managing connectivity of remote sites to the Data Centre

5. Implementing changes, handling operational issues and software upgrades on Network Firewalls like, PaloAlto, Checkpoint and Cisco ASA firewalls) 6. Implementing changes, handling BAU and upgrade of F5 GTM and LTM devices.

7. Assess customer environment and requirements and design world-class solutions, leveraging best practices and best-of-breed technologies

8. Performs system integration tasks

9. Investigate and provide the RCA for the incidents

10. Knowledge of ITSM process

Essential Requirements (Skills Requirements)

Knowledge on OSI & TCP/IP Network protocol architecture, Layering benefits and concept, functions of different layers, switches and LAN design, VLANs

Configuring and troubleshooting Cisco routers/switches

Routing protocols (EIGRP, OSPF, BGP). WAN transport technologies (Private/Leased Line, MPLS,)

Switching : VLAN, STP, VTP, HSRP

Very good knowledge of network concepts 802.1x, STP,GRE, DMZ VPNs, VLAN configurations

Well versed with Switching, Routing & F5 Load Balancing (LTM/GTM and APM module)

Experience with firewalls including Layer 7 firewalls (Cisco ASA, PIX)

Good experience in configuring various types of VPN network [Point to Point, GRE, SSL ]

Manage security appliances and next generation firewalls from various vendors such as check point, Cisco ASA, checkpoint, palo alto and FortiGate Etc.

Hands on experience in configuring URL filtering, file blocking and security profiles in Palo Alto firewalls , checkpoint firewalls and fortigate firewalls .

Apply Firewall rules and Checkpoint on R65 & R75 on Nokia IP 390, Cisco PIX 515 E, Cisco ASA 5510 & 5520.

Apply firewall rules and troubleshooting on checkpoint gaia r80.20 , R80.40 . Palo alto pan os 8.0 and 9.0 , Fortigate firewalls .

Citirx Netscaler and Access Gateway configuration and Management

Cisco WAAS , Wireless and IP management

Experience in analyzing network traces

Experience in Nexus 9k, 7k , 5k , 3k firmware upgrade , troubleshootng .

Handson expeirence working on ACI , OTV , VPC

Knowledge of Tufin secure change and secure track , Cisco MSE , Cisco ISE , Cisco Prime infrastructure , Cisco ACS .

Handson expeirence on Gigamon , Packet sniffer tools like Wireshark .

Handson experience on Cisco Anyconnect VPN , Bluecoat proxy ASG and SG , Zscaler Cloud proxy

Education :- Bachelors degree in Information technology

Years of Experience :- 10+ years

GOOD TO HAVE

F5 handson experience

VPN handson experience

Zscaler handson experience

Handson experience in AWS and Azure networking

Knowledge of Cisco ACI

Knowledge of Ansible , Python , Datadog

Technical / Professional Skills

CCNP or equivalent required in Datacenter or Security

Effectively able to administer multi-vendor network security technologies

Non-Technical / Soft Skills

1. Must have strong communication skills (Verbal and Written) and the ability to articulate task management, priorities, and issues, participate in customer visits, conference calls, and assisting with defining the scope of services tasks

2. Must be able to perform people management, Escalation management , Work management related tasks