Engineer Information Security

Atif Email: ***********@*****.***

Shehzad Phone: +1-778-***-****

OBJECTIVE:

To best utilize my management, technical skills and experience I have gained during 13+ year of engagement in different technical aspects at different multinational organizations. EXPERIENCE:

Getz Pharma Private Ltd. – [http://www.getzpharma.com] Oct 2015 till June 2019 Manager Information Technology

• Responsible for running Getz Pharma networks, systems, data centers, help desk, IT operations and logistic.

• Planning, Budgeting, Product/Solution and vendor Selection/evaluation, Designing, Procurement, Implementation, training and optimization of all major networks, systems infrastructure, data center and information security projects.

• Responsible for developing and implementing SOPs and policies as per the guidelines of ITIL and GAMP.

• Responsible for ensuring data backup of all business critical application and data.

• Responsible for all IT audits clearance and compliance.

• Responsible for smooth maintenance activities of data centers, infrastructure hardware and software.

• Responsible for IT asset management (from procurement till disposal)

• Responsible for IT Help Desk Operation, recruiting, training and monitoring.

• Responsible for smooth provision of integration services to internal clients, vendors and third party.

• Responsible for developing information security strategy and controls implementation to ensure data integrity and data loss prevention

• Responsible for incidents and change requests closure along with change control and configuration management.

• Responsible for coordination with consultants and vendors for data center design and product selection as per Tier 2 and 3 guidelines.

• Responsible for recruitment, training and management of 12+ staff team and international IT POP in regional offices.

• Responsible for all internal and external SLAs as per the KPIs.

• Responsible for organization cloud provisioning and infrastructure comprising of O365, Azure and AWS services

ABM InfoTech Pvt. Ltd. – [http://abminfotech.com] May 2012 till Sep 2015 Senior Technical Consultant – Information Security

• Pre Sales and Consultancy tasks including planning, sizing and designing of enterprise solutions using Symantec products.

• Consultancy for domestic and foreign enterprise solutions to Symantec.

• RFP response, technical solution proposal and client presentations

• Requirement gathering and assessment for solution proposal.

• Documentation including Pre-check lists, project plan, design documents, scope documents, UAT document, Proposals and presentations for kick off meetings.

• DLP, CCS, SSIM, PGP, SWG, SMG, SEP deployment at different corporate clients.

• TITUS Data Classification tools implementation

• Project Management for Symantec solution deployment using different communication media like phone calls, emails and presentations.

• Coordination with Symantec Support team for issue resolution and escalation.

• Bugs and errors reporting to Symantec team.

Projects:

• SABIC – Saudi Arabia: Designing and implementation following solution for user base of 40,000+ clients

Symantec Endpoint Protection (AV, Firewall, IPS/IDS, ADC)

Symantec Mail Security for MS-Exchange

Symantec Protection for SharePoint Servers

Symantec Data Center Protection

• Habib Bank Limited: Designing, scoping and implementation of Symantec Data Loss Prevention and Encryption solution at HBL with following products. Carrying out data classification services for HBL team to have their documents classified into categories as per data sensitivity.

Symantec Data Loss Prevention with 3000 nodes

Symantec Whole Disk Encryption with Management Platform with 2000 nodes

Symantec Endpoint Encryption Removable Storage with DLP integration

TITUS Data Classification

• Al-Fardan Holdings, Qatar: Successful deployment of following Symantec Security Solutions at Al-Fardan Holdings IT department.

Symantec Endpoint Protection with 1000 endpoints

Symantec Messaging Gateway (Physical 8360 and virtual appliances)

Symantec Web Gateway (Physical 8450 and virtual appliances)

Central Intelligent Unit for web gateways

• Ufone: Successful deployment of Symantec Security solution comprising of following products at one of the largest telecom companies.

Web Gateway

Messaging Gateway

Endpoint Protection Suite with 2500 endpoints

Control Compliance Suite – Vulnerability Manager with 500 nodes

Data Loss Prevention Suite with 1000 endpoints

Data Classification with Titus and 5 categories

Project deployment included pre-sales, designing, data classification, work flow analysis and post deployment activities including presentations, POCs, Design documents, Scope Documents, UATs and knowledge sharing sessions.

• Zong: Successful completion of Data Loss Prevention project at PMCL. Project included complete DLP suite with following components.

Network Monitor

Network Prevent for Web and Email

Network Discover and Protect

Endpoint Discover and Protect

Data Classification with Titus along with comprehensive data flow assessment. Project deployment included pre-sales, designing, data classification, SOP creations and post deployment activities including presentation, POCs, Design document, Scope Document and UAT Mobilink Pakistan – [http://www.mobilinkgsm.com]

Islamabad, Pakistan

Team Lead Systems Engineering Feb 2011 till April 2012

• Revamping of country wide system team

• Optimization of DNS, SMTP, MX-Exchange 2003, Tracer, Proxy (squid) platform.

• Technical budgeting

• Procurement of new hardware

• Introduction of VMware virtualization platform to increase service output and resiliency and decreasing CAPEX and OPEX

• Replacement of hardware without downtime for critical services

• Correspondence with LInkDev team for Tracer Support agreement

• Planning, deployment, installation, configuration and optimization of new IBM hardware

• Planning, deployment, installation and configuration of country wide Proxy Squid setup for PTA URL blocking and filtering requirement

• Managing team resources and KPIs (Key Performance Indicator) of team.

• Managing Mobilink IT relay service for crucial email deliveries along with other corporate clients

• Deployment of redundant DNS (BIND) setup for customer domain hosting.

• Delegation of operational task to NOC

• Coordination with other departments and vendors. Team Lead WiMAX Team June 2010 -- Feb 2011

• Designing of WiMAX core with Juniper platform (E320, EX 4200, 3200 series switches, SRC, SBR, VTA, LDAP and Oracle DB RAC).

• Configuration of Juniper M7i, M10i, M320 for remote POPs.

• Designing, planning and migration of WiMAX DBs from MySQL to Oracle RAC.

• Designing and planning of LDN and Mobilink WiMAX AAA setup using Juniper SBR, SRC.

• Designing and planning of servers (DNS, SMTP, DHCP, SBR, MRTG, NMS) for WiMAX core.

• Coordination with Commercial teams for budget inputs.

• Budget exercise for WiMAX projects including capacity planning of hardware, licenses, software, Internet and intercity bandwidth, RAN aggregation network,

• Comparative analysis and weighted evaluation of vendors.

• LLD, HLD, SOW, MOP documentation with vendors.

• Coordination with PMO for projects execution.

• Projects presentation to relevant stake holders.

• Coordination with Finance for budgeting, procurement and payment terms and conditions.

• Coordination with RF planning for access sites upgrading, expansion and roll out.

• Coordination with IP/MPLS team for intercity and internet connectivity.

• Coordination with Transmission, Power Planning for remote sites deployment.

• Level 3 Support to NOC, Operation teams.

LINKdotNET Telecom Services - [http://www.link.net.pk] Karachi, Pakistan

Deputy Manager Systems Engineering May 2008 – May 2010

• Management of country wide team of systems engineer deputed at different locations.

• Deployment of LINK gaming platform

• Deployment of LINK portal.

• Deployment of Juniper SDX (LDAP, SAE) platform on Solaris OS.

• Deployment of IBM DS3400 storage SAN.

• Deployment of IBM hardware (x3600 and x3800 series servers) in Data Center.

• Managing team resources and KPIs (Key Performance Indicator) of team.

• Deployment of centralized SMTP gateways model (for email relay).

• Deployment of redundant DNS (BIND) setup for customer domain hosting.

• Management of remote hosting servers for customers’ portals, websites.

• Centralization/consolidation of regional Dialup DBs.

• Deployment of DSL AAA and DB setup using NAVIS and MS-SQL.

• Deployment of Slip Stream servers.

• Regional MRTG servers setup deployment.

• Decommissioning of WOL proxies, DBs and RADIUS in remote locations.

• Coordination with other departments and vendors. Senior Systems Engineer January 2008 - April 2008

• Deployment of Windows 2003, 2000 platform based servers.

• Deployment of MS Exchange 2003 and migration of consumer email addresses from Linux based

(sendmail and exim) email accounts to MS Exchange 2003.

• Centralization of different WOL and Dancom servers.

• Deployment of MS Active Directory platform for different Windows based application. Dancom Online Services (Pvt.) Ltd. - [http://www.dancom.net.pk]] Karachi, Pakistan

Senior Systems Engineer June 2006 – December 2007

• Installation, configuration of DNS (BIND) servers using RH, CentOS, Slackware, Fedora and Solaris platform.

• Installation, configuration and optimization of mail servers using Qmail, Exim and Sendmail with virtual domains hosting and integrated with SpamAssassin and ClamAV.

• Installation and configuration of Web Servers using Apache 1.3, Apache 2.2 and Tomcat.

• Installation of MRTG server for network monitoring with RRD tool and integration with .asp pages for client access.

• Installation of proxy server using squid on CentOS, RH platform.

• Installed, configured FTP, SFTP, SSH, TACACS, TFTP server on Linux platform.

• Installed and configured Sun Solaris 8,9,10 on V880, E250, V250, E280R with RAID arrays using RAID1 and RAID0.

• Installed and configured Oracle 9i on Sun Solaris platform for dial in users and PPPoE and PPPoA clients’ database.

Senior Network Engineer July 2005 – June 2006

• Deployment of IS-IS, OSPF and BGP routing protocols.

• Deployed and configured Cisco 7200, 7500, 2600, 3800 series routers and 2900, 3700 and 6509 switches.

• Coordinate with ITI-PIE for upstream and bandwidth allocation.

• Installation and deployment of Cisco ciscoworks, HP Open View and Solarwinds monitoring tools.

• Deployment of NetFlow analyzer.

• Deployed and configured Lucent PSAX 2300 ATM switch and provide connectivity with BRAS through DS3.

• Deployed Lucent Stinger FS/FS+ ATM DSLAM in the access network.

• Deployed Paradyne 4200 and 8820 ATM GranDSLAM in the access network.

• Configured Traffic Engineering using MPLS tunnels.

• Configured AAA using TACACs Server.

• Managing Network and troubleshooting of network if any problem occurs.

• Taking regular backups of configuration files of routers and switches to tftp server. Assistant Network Engineer August 2004 - June 2005

• Managing Core IP and IP/ATM access network and troubleshooting issues.

• Configuration of ACLs, route maps, E1 media.

• Configuration of Ascend/Lucent MAX TNT

• Configuration of Harbour L3/L2 switches and IP DSLAMs.

• Responsible for network performance and monitoring.

• Configuration of DNS, Email, Web and MRTG servers. CERTIFICATIONS:

CCNA

JNCIA-JUNOS

JNCIS-SP

JNCIP-SP

Symantec Data Loss Prevention ASC

Symantec Enterprise Security ASC

Symantec DLP STS

Symantec SSIM STS

Symantec PGP Universal Server STS

Symantec Messaging Gateway STS

Symantec Network Access Control STS

Symantec Endpoint Protection STS

SKILL SET:

Authorized Symantec Data Loss Prevention Trainer

Authorized Symantec Consultant for DLP and Enterprise Security Encryption solutions

Data Classification

Vulnerability Assessment through Metasploit

Two Factor Authentication

SSL certificates

Symantec Managed Security Services (SOC)

Riverbed Wan Optimization and Network Performance Solution Symantec Mobile Management Suite

Cisco 7500, 7200, 2600, 3800, 6500, 3700, 2900, CiscoWorks Juniper M3i, M7i, M10i, M320, ERX 1440, E320, EX3200, EX4200 series Juniper SDX, SRC, SBR

Alcaltel Lucent IP/ATM DSLAM, PSAX ATM switch, MAX TNT, NAVIS AAA Harbour IP DSLAM, Routers and switches

Paradyne/Zhone IP/ATM DSLAM, ATM Switch, NMS

Barracuda 600, 900 and 1000 series

Symantec DLP, CCS, PGP, SSIM, SMG, SWG, SEP, VIP, SNAC, CSP IP/MPLS, RSVP, OSPF, ISIS, RIP, BGP

Linux RHEL, CentOS, FreeBSD, Fedora, SuSE, Solaris 8,9,10 Microsoft Windows 2000, 2003 server, 2008 server

VmWare ESXi, Xen

BIND, DHCP, MRTG, TACACS, Syslog, Solar Winds, SMTP, POP, IMAP, Webmail, RANCID, CVS, FTP, TFTP, NetFlow Analyzer, Cacti, Nagios, SiteScope,

Technical budgeting and capacity planning

Project Management

EDUCATION:

Associate Degree in Computer Networks 2017

Virtual University of Pakistan with 3.8 cumulative GPA Undergraduate 2001

Minnesota State University, USA

Intermediate [Pre-Engineering] 1997

DJ Sindh Government Science College, Karachi

Matriculation [Science] 1995

St. Paul’s English High School, Karachi

TRAININGS:

Harbour DSLAM Training April 2004

Lucent Stinger DSLAM Training Feb 2005

Paradyne DSLAM Training Feb 2005

RedLine WiMAX Training August 2006

Sun Solaris Administration October 2010

Juniper SBR November 2010

Symantec App Center July 2013

Symantec Managed Security Services February 2014

REFERENCES:

Will be furnished upon request.

Contact this candidate