Resume

Sign in

Network Security Consultant

Location:
Painted Post, New York, United States
Posted:
February 11, 2018

Contact this candidate

Resume:

RISHOO SINGH

Phone: +1-607-***-****

E-mail: ac4fsm@r.postjobfree.com

Place: Corning, NY

Aspires to pursue assignments in Senior/Middle level positions in IT Sector with techno-commercial profile to deliver solutions for complex product, business process management & technical requirements in an organization of repute.

SYNOPSIS

An incisive IT professional with 14+ years of experience in Pre-sales/Post-sales/Technical Support/ Network Architecture and Design Consulting and IT services.

A keen planner & strategist with the ability to manage project with perfection. Proven ability of achieving Service Delivery/ Process Targets.

Ability to develop a detailed project plan & scoreboard to monitor progress & flag issues, train the new team & develop detailed procedures and develop a measurement framework to smoothen the process.

Experience in communicating with customers and solving complex problems in a timely manner.

Proven ability to learn quickly and become an expert in a variety of technologies.

An excellent communicator with the ability to deal with issues with accuracy & precision.

SKILLS

Firewalls – Cisco PIX, Cisco ASA, Fortigate, Palo Alto, SonicWall, Checkpoint

VPN – IPSec (Remote access and Lan-to-Lan), SSL VPN (Clientless and client based)

Symantec message labs

Bluecoat proxies, Cisco WSA

RSA Secure ID

Cisco ISE

Cisco IPS

Experience in installing, configuring, and troubleshooting global networks utilizing multi-vendor Firewalls, IPSec and SSL VPN, Intrusion prevention systems, DLP and Encryption.

Network & security Architecture Review & Design.

Security Product Design & Implementation

Strong knowledge in TCP/IP

Experienced in implementing and troubleshooting firewalls Fortigate, Cisco ASA etc.

Experienced in implementing and troubleshooting IPSEC VPNs, SSL VPN, Dialup VPN, GRE tunnel.

Knowledge in various open source and commercial tools for security assessment like Wire shark, TCP Dump etc.

AREAS of EXPERTISE

Network Design and Implementation

Managing the design and implementation of networking entailing:

o Mapping business requirements o Finalizing Solution, technical specifications and Low Level Design o Providing technical presentation & training to customers

Managing the overall Implementation of security infrastructure and configuration of network

services

Technical Support

Providing on call and email support to the clients. Recreating the customer’s issues in labs and virtual environments to provide resolution.

Operations Support

Resolution of incidents as per the SLAs

Supervising the resolution of queries regarding the Information extending onsite support to the Technical specialist, Engineers and clients.

Team Management

Managing a technical team of 5 to 30 members for Security Operations.

Leading DC infrastructure implementation network and security teams of 3 to 6 members.

Leading a team of 25 members for Cisco Technical Assistance Center.

ORGANISATIONAL DETAILS

Nov’ 11 – till date with Wipro Technologies, as Consultant

Client/Project: Corning Inc, USA as Lead Technical Consultant –Apr’16 – till date

The project involves the transformation of client infrastructure to new Data Centers. In addition, new office sites at various locations across the globe.

Responsibilities/Tasks Handled

•Understanding the customer’s requirement and prepare the project plan

•Preparation of the High Level and Low Level Designs documents and getting client approvals.

•Preparation of the test plans for firewalls.

•Installation and Configuration of the Palo Alto Firewalls.

•Test the HA configuration and preparation of test reports.

•Configuring the policies as per the requirements.

•Hardened the firewalls to the best practices.

•Logs consolidation and report generation.

•Editing and configuring the session helpers for inspections.

•Documentation of all configurations and project documents.

•Documentation of the handover documents for the operations team.

•Documentation of Engineering and Design documents for the client.

•Responsible for the maintenance of the security products before the control is moved to the operations team.

•Supporting the operations team with various issues as and when required.

Client/Project: Canada Post Group of Companies, Canada as Lead Consultant –Aug’15 – Mar’16

Responsibilities/Tasks Handled

•Leading the Wipro consulting network security team.

•Responsible for the implementation of firewalls in client’s network.

•Responsible for consulting the implementation of firewall policies as per the PCI guidelines.

•Designing the network to segregate zones for production, management and backup.

•Coordination with different teams and understanding their requirements to be able to add and remove the rules from the firewalls properly.

•Analysing the existing rules which can be removed from the firewalls without causing any service impact or non-compliance.

•Co-ordinate with the partner Bell Canada in the implementation of the global rules on the firewalls and proper clean-up.

•Responsible to represent Wipro for any firewall requests coming in from any Wipro teams and getting them approved and implemented with proper business justification.

•Consulting for the changes on the Fortigate firewalls in customer’s network as a secondary task.

Client/Project: Hutchison 3G UK as SECURITY OPERATIONS LEAD – Apr’15 – Jul’15

Responsibilities/Tasks Handled

•Leading the H3G UK security ops team.

•Managing client’s security devices – Firewalls, proxies, RSA secure id.

•Analyzing HLD, LLD, prepare work plan and initiate approvals as per the change management policies and implement changes.

•Working in fully ITIL compliant Change Management, Incident Management process. Preparation of the test plans for firewalls.

•Working on BMC Remedy 7.5 tool.

•Packet level troubleshooting for Priority 1 & Priority 2 calls.

•Working on the incidents to get to the resolution as per the SLAs.

•Proactively troubleshooting routing and switching related issues.

•End to End administration and maintenance support of security tools like Bluecoat, Cisco firewalls.

Client/Project: Hutchison 3G UK as TRANSFORMATION LEAD– Oct’12 – Mar’15

The project involves the transformation for the EOL/EOS devices and technologies with the latest and most suitable ones as per the client requirements at all the data centers. It involves the implementation of Fortigate 3950B firewalls in HA cluster with multiple virtual instances of the firewalls.

Responsibilities/Tasks Handled

•Understanding the customer’s requirement and prepare the project plan

•Preparation of the High Level and Low Level Designs documents and getting client approvals.

•Preparation of the test plans for firewalls.

•Installation and Configuration of the Fortigate Firewall.

•Test the HA configuration and preparation of test reports.

•Configuration of the Virtual firewalls and representing the each firewall for different layers of the network.

•Configuring the policies as per the requirements.

•Hardened the firewalls to the best practices. Configuring the site to site VPN tunnels

•Logs consolidation and report generation.

•Editing and configuring the session helpers for inspections.

•Documentation of all configurations and project documents.

•Documentation of the handover documents for the operations team.

•Documentation of Engineering and Design documents for the client.

•Currently working on the Low Level Designs for the suggested versions of Bluecoat proxies.

•Responsible for the smooth transition of the proxies and firewalls at all the H3G sites across the UK.

•Responsible for the maintenance of the security products before the control is moved to the operations team.

•Responsible for the designing of the wireless solution for customer’s corporate locations.

•Implementation of Wi-Fi solution using Cisco ISE for authentication.

Client/Project: Hospira Asset Refresh as LEAD CONSULTANT– Nov’11 to Aug’ 12

•Worked as Lead Consultant for Network Security Refresh project for the client Hospira.

•The project involved the refresh of all the EOL/EOS firewalls.

•The project involved the replacement of all the firewalls at multiple locations in the USA, the UK and Australia.

•The project involved the implementation of new Cisco AnyConnect VPN solution for all the locations.

•The project involved the implementation of site-to-site VPNs on the firewalls as per the client requirements.

•Worked on Data Center consolidation project for EMEA and APAC regions, which includes configurations of Perimeter cisco ASA

•Worked on migration from Juniper to Cisco ASA firewalls.

Tasks handled

•Providing the plan of action for firewall migration from Checkpoint R65 to Cisco ASAs for all the Data centers and Disaster recovery centers.

•Preparation of the Scope of Work documents.

•Preparation of the Bill of Materials for the procured devices.

•Preparation of the test plans for the firewalls and VPN solutions.

•Getting the approvals on the submitted test plans.

•Configuration of the firewalls in cluster mode – both Active/Active and Active/Standby depending on the project plans for each site.

•Configuration of multiple firewall contexts as per the requirements.

•Test the HA configuration and preparation of test reports.

•Configuring the policies as per the requirements.

•Hardened the firewall to the best practices.

•Configuring the site to site VPN tunnels

•Configuring the firewall for RADIUS authentication for administration and VPN.

•Configuration of syslog servers for log consolidation.

•Configuration the firewalls to provide remote access VPN functionality using Cisco AnyConnect Mobility client 3.x in Australia and UK regions.

•Preparation of the test plans for AnyConnect VPN.

•Configuration of the ASA to provide the clientless SSL VPN solution as per the requirements.

•Documentation of all configurations and project documents.

•Documentation of the handover documents for the operations team.

•Documentation of Engineering and Design documents for the client.

•Upgraded the existing Checkpoint R65 firewalls to R71.10 before the transition to Cisco.

•Maintained the newly installed firewalls before the tasks were handed over to the operations team.

•Part of operations, Configuring, Managing and troubleshooting of simplified site to site IPSec VPN on the Juniper firewalls, Cisco ASA & Cisco Routers

PREVIOUS ASSIGNMENTS

May’07-Oct’11 with Aricent Group, as Network Specialist

The Key Result Areas

Working for Cisco TAC in Security Domain.

Responsible for Installation & Configuration of Firewalls.

Configuring and Troubleshooting Cisco PIX, ASA (6.x, 7.x and 8.x series), Routers and VPN Concentrator, IPS, ACS.

Solving High Tier – Level 1 & 2 cases helping the customers for Problems relating initial deployment or troubleshooting

Initial Setup and troubleshooting of Site-2-Site (LAn-2-LAN) and Remote Access VPN tunnels using IPSEC, GRE, PPTP, L2TPoIPSEC on devices like 3000 Series VPN concentrators, Cisco 500 series Pix Firewalls, Cisco IOS based Routers, Cisco 3.x and 4.x VPN Client software, etc.

Other Tasks Handled:

Maintaining the configuration management system by updating design and configuration documentation.

Ensure adherence to Aricent policies, standards and controls

Work within strict Change Control process and effectively manage and update Change Control records.

Preparing course materials and delivering in-transit training to new engineers.

Managing the team strategies to achieve team targets collectively.

The Accountabilities & Attainments

Have been rated as one of the Best Performers consecutively for the periods ’07-’08, ’08-’09, ’09-’10 and ’10-’11 in the yearly ratings.

Have been awarded the Extra Miler Award for the periods Jan’08-Feb’08 and Nov’08-Dec’08.

Aug’05-April’07 vCustomer India Pvt. Ltd., as Senior Technical Support Engineer

The Key Result Areas

Tasks Handled, Team Management and Quality/Training

Handling o Wired/ Wireless Routers, Switches, Internet Cameras, Hubs and Other Network devices. o Access Points, Powerline devices, Wired/wireless NICs, Print Servers and Cable/DSL routers.

o Networking protocols such as DHCP, DNS and their interaction. TCP/IP, LAN/WAN and Wireless Standards 802.11a/802.11b/802.11g/802.11n, VPN.

Identify potential areas for grooming Team Members through regular assessments and mentoring.

Implementing call monitoring for quality control and ensuring that the quality and services parameters are met at all levels. Analysing the training need & accordingly preparing training modules for imparting training on soft skills/ product/ process.

Ensuring the teams adhere to all the quality tool and procedures.

Actively participating in execution of quality improvements projects for continual improvements.

Jun’04-Jul’05 Zed Career Academy, Gwalior as Member of faculty staff + Network Admin

The Key Result Areas

Teaching & tutoring C and C++, network fundamentals.

Training the students enrolled for certification courses like DOEACC ‘O’ level and ‘A’ level.

Maintaining the labs network and ensuring that it is up.

Work Permit Details

H1B – Extendable Until 2023

ACADEMIA

CCIE Security # 30695 (Lab Certified)

CCIE Data Center - Written

Cisco Certified Network Associate (4.0)

Post Graduate Certificate Program in Business Management, XLRI, India

Bachelors in Software System (Engg)[2000-2004], Guru Gobind Singh Indraprastha University



Contact this candidate