Security Manager
Resume:
Tripat Kaur Datta
Skill Summary
Provide L* assistance on Cisco Security devices including Cisco Adaptive Security Appliance (ASA), Intrusion Prevention System (IPS/IDS), Firepower (FPR), Defense Center (DC), Email Security Appliance (ESA), Cloud Email Security (CES). This includes troubleshooting the networks belonging to worldwide customers including closed one like defence.
Recreate scenarios on lab devices and work with engineering team to develop engineered images for HTTS customers.
Assistance on firewalls includes initial setup/configuration, troubleshooting on ASA 5500 series (5505, 5510, 5520, 5540, 5580), Cisco ASA 5500-X series (5512-X, 5515-X, 5525-X, 5545-X, 5585-X).
Assistance on IPS includes Initial set up, troubleshooting of hardware/software IPS based modules in ASAs like Security Service Modules (SSMs), Security Service Processor (SSPs) and help customers with the existing configurations.
Installed/managed ASAs through Adaptive Security Device Manager (ASDM) and IPS through IPS Manager Express (IME)/ IPS Device Manager (IDM).
Assistance on Firepower includes Initial set up, troubleshooting of hardware/software Firepower based modules in ASAs like 5585-X, 5506-X through ASA 5555-X, Defense Center and help customers with the existing configurations.
Assistance on ESA/CES includes Initial set up, troubleshooting of hardware/virtual/hosted based environment and Security Management Appliance (SMA).
Understanding and configuration Knowledge of VPN (IPSec ikev1, SSL handshake).
Deploying AAA on IOS Routers, Switches and ASA for user authentication, authorization and accounting using a centralized ISE server.
PROFESSIONAL EXPERIENCE
Aricent Technologies (Holdings) Limited Oct 2016- till date
Network Specialist in Cloud Email Security
Job Responsibilities:
Involved with L2 tier team to configure/troubleshoot features on ESA/CES like Mail Policies, Content Filters, Email Authentication (SPF/DKIM/DMARC), Quarantine etc. Working on SMA includes Centralized Email Security Reporting, EUQ etc.
Involve in escalation of L1 tier team and collaborate with them in their tickets.
Recreate issues in lab environment and file defects.
Working with business unit on the escalations and find a resolution.
Creating knowledge based articles on new topics.
Network Specialist in Planning Designing and Implementation (PDI), Digital Network Architecture (DNA)
Job Responsibilities:
Involved in DNA Voucher Operations team assisting, delivering appropriate information to partners and collaborating with mentoring team.
Working with PDI to provide assistance on Cisco Firepower, Firewall, ESA, ISE.
HCL Technologies Jan 2016-Oct 2016
Network Specialist in Global Security Operations Center
Job Responsibilities:
Handle Jardin Llyod Thompson (JLT) group, an insurance company network security devices and provide assistance to the customer .This includes incident tickets that belongs to JLT customers.
Raise/Perform change request for firewall rule additions or modify the existing ones as per the client’s procedure. Also, assist team members in firewall remediation process.
Monitor the Firewall’s policies, debug/logs and responsible for change implementation, Incident management.
Monitor the JLT security devices like Cisco ASA, Checkpoint, Cisco ESA and prepare daily health check reports.
Impact analysis of firewall configuration changes, and regular audits of security policies.
Aricent Technologies (Holdings) Limited Dec 2012 – Dec 2015
Network Engineer (ASA/IPS/SFR)
Job Responsibilities:
As a Customer Support Engineer in ASA/IPS/SFR TAC teams, my responsibilities primarily were real time troubleshooting of complex & sensitive network related issues ranging from packet drop to complete network connectivity loss, with enterprise customers like HTTS, Financial Organizations, Service Providers, Universities, US Government federal organizations.
Responsible to configure security policies on ASA to allow access within the same or different networks. Security policies includes applying access-lists, network address translation (nat), application inspection, filtering on modules like IPS/SFR, applying QOS, VPN etc.
Set up IPS on ASA to perform additional checks based on applied signature sets. The setup of IPS includes initialization of module, configuration of event action rules/override, installing/updating signatures, installing/updating license, upgrading system images and performance related issues.
Working with Firepower includes configuration/troubleshooting of access-control policies, intrusion policies, file policies, external alerting/reporting, scheduling tasks, licensing the DC/FPWR modules/sensors, updating the firepower module software.
Register Firepower modules/Sourcefire device with Firesight Management Center.
Deployment of FireSIGHT Management Center on VMware ESXi.
Contact Vulnerability Research team (VRT) to file new bugs related to vulnerabilities/false positives alerts on DC.
Products Supported:
Cisco ASA 5500 series, ASA5500-X series.
Cisco ASDM, Cisco IDM, IME.
Cisco IPS modules and sensors.
Cisco Firepower modules, Defense Centers.
Cisco ESA, CES, SMA.
TECHNOLOGY: Firewall, IPS, ESA and Fire Power.
TROUBLESHOOTING TOOLS:
Monitoring packet flow using Wire shark, BDB for lab recreates.
Ericsson Global India Pvt. Ltd. Jul 2012-Dec 2012
Consultant in Performance Management
Job Responsibilities:
Handle Bharti Airtel Network and prepare reports on nodes like BSC, MSC, and RNC.
To evaluate the day by day performance and provide the analysis based on working and outage of the units.
EDUCATION / CERTIFICATIONS / TRAINING
B. Tech in Electronics & Communication Engineering
12TH Standard –C.B.S.E
10TH Standard – C.B.S.E
Cisco Certified Network Associate- CCNA, CCENT.
Contact this candidate