RUPINDER S KHARBANDA, *********@*****.***, Home 905-***-****, Cell 416-
Motivated, Quick learner, Dedicated, well Organized, Independent
Contributor, Team player,
Excellent Reporting, Analytical, Management, Communication and good
interpersonal Skills
Profile
o Experienced, Security, Engineering, Analyst, Operations, Data,
Administrator, Core Network.
o Managed multiple projects, complete project life cycle, plan, cost,
budget, coordinate, design, document, implement, execute, support,
maintain, communicate with groups, schedule and meet deadlines
o Possess certifications, training, manage, work experience, RSAenvsion
( SIEM), Q1Labs (SIEM), Arcsight (SIEM), RSA (DLP), McAfee (IPS), (
SCM/ Email WS), Ironmail (email gateway), Palo Alto (FW), Checkpoint
(FW), Net Screen (FW), Blueccoat (web protection, LAN - WAN
optimizer), EMC (SAN-storage), Microsoft Certified System Engineer +
Internet, MCSA, A+, Net+, Cisco ACS, VPN concentrator, ASA, CCNA,
including ITIL and SCNP-Security Certified Network Professional, etc.
Technical Skills
o Responsible for providing multi-disciplinary Security operations,
upgrades, as-build, configuration, maintenance of Palo Alto FW,
Checkpoint FW, Cisco Adaptive Security Appliance (ASA), Cisco Access
Control Server (ACS), McAfee IPS, Symantec Endpoint Protection,
Bluecoat proxy, Arc Sight ESM, RSA Secure ID, RSA Envision, DLP, Cisco
Wireless LAN Controllers
o Secure, test, VPN in preproduction, document work orders for
production, implement, change request, troubleshoot, Checkpoint,
Firewall Management, configure secure Firewall policies, load
balancing, APN, VPN, NAT, PAT, FW-VPN cluster version from R55, R65
later R70 with IPSO
o Monitor Capacity, CPU, Memory, Interface throughput, out of order
packets, logs, systems, health
o Secure Data, Big IP, Cisco Routers Switches Policy making, Traffic
flow, Load balancing, optimize
o Secure Remote Access, VPN any connect, clientless, SSL VPN, ASA, ACS,
UCP, CSG, Cisco routers
o Juniper Net screen FW, Switches, Secure Wi-Fi Air
Defense(Motorola),MRV In-Reach terminal service
o Monitored, Configured, alerts, RFC, Firewalls, SSL/VPN, Secured
platforms, Database, Remote access, Tokens, NAC, IPS/IDS, URL
Filtering, Secure messaging, Routers, Network Management, WAN
Optimization, Load Balancing, Vulnerability, Threat Management,
Authentication, Log Analysis.
o Packet capture, sniffer tools, Wire-shark etc. network tool analyzer,
traces, dumps, matches signatures.
o RSAEnVision, McAfee IPS, Checkpoint, F5, Cisco ASA, Fortinet,
Tripwire, Websence, Bluecoat, etc.
o Vulnerability scanners tools using NMap, McAfee's Found stone, etc and
recommendations.
o EMC-SAN, NAS, DAS, direct, switched, fiber, isci, zoning with layered
applications, backup restore
o ITIL and IT Service Management (ITSM) level, implementation,
operational services, IMAC Install Move Add and Change, SLA's, OLA's,
MOU/MOA's.
Project Management Skills
o Projects managed, coordinated, analyzed, assistant, planning,
execution, monitoring, resources, balancing skills, supported multiple
simultaneous. Program Manager, PMO, stakeholders, Matrix status.
o Prepared organizational presentations, reports, Project Summary
Dashboard, Eye charts, Schedules, Departmental, groups, vendors,
incorporating Multiple Capital Projects, technology, engineering,
planning, implementation, stages, go no go, launch, operational,
completions, budget, resources, actual, forecast.
o Created daily issues tracker, follow resources dependencies split
isolate task schedule individual resource micro-level, color code
impacts, dependencies hand off, matrix checklist update real time,
stamp versions review report
o Incorporated cross functional meets dependencies, interdependencies,
leads during the cycle of the project with components and
interlocking, serial, parallel tasks, milestones, resources, schedule.
o Microsoft Power point, Excel 2000, 2003, 2007, and 2010 with functions
formulas, plans, diagrams, designs, inter connectivity, dependency,
flow chart, utilized for schedules, resource repository, inventory,
cost calculations, update, charts, analyze, report, publish,
presentations. Support effective MOPs. MS Visio 2000, 2003 for
designing and documenting diagrams, flow charts, plans, layouts
o MS project 2003, 2007, Projects, Milestones, Tasks, Schedule,
resources, duration, cost, dependencies, Critical analysis.
Experience:
Security Analyst / Engineer
Mar 2013 - current
Hydro One
o Analyzed log files, investigated, summarized events, created reports,
dashboards, and trends, active channels, received from various systems
into Arc Sight ESM. Assets management.
o Performed content development in Security Event Management solution.
Assist in the development and implementation of security hardening
procedures. Verify procedures through testing. Rules, correlations.
o Prepared documentation of procedures assisted in installation and
operations of the SEIM system. Assisted in integrating and connecting
the Arc Sight SEIM system with other applications and services.
Backups, performance, resource monitoring. ESM, Smart connectors, flex
connectors and loggers.
o Tipping point (IPS), TrendMicro, F5 Firepass (APM), Bluecoat,
Checkpoint, Cisco Wireless Control System (WCS), etc.
Security Systems Analyst / IT Specialist
June 2012 - Feb 2013
TD Canada
o Responsible for technology change from Checkpoint FW to Palo Alto
Networks FW project (FW team).
o Pre-test in lab, with 4020, 4050, 5060, Panorama, SW upgrades, URL
filtering, anti threats, antivirus, anti spy, policy, web policy,
VMware, Active directory ad agents, UID.
o Managing risk, mitigating risk, exposure within the credit, data,
securities, risk policy, operational and enterprise risk management
and reporting.
o Created, mops, NOC support document, handover, etc. from Engineers to
Operations.
o Architect Design Network Security, Data Flow, Applications,
Authentication, stake holders meetings, plan, schedule, document, lab
test, cutover etc. for Palo Alto Networks FWs, F5, identity management
(Cyber-Ark Ent. Pswd. Vault (EPV)), safe password, enterprise key
management (SSL certificates) etc.
Security Systems Analyst
Jan 2012 - May 2012
Sentry Metrics
o Responsible for providing multi-disciplinary Security, operation,
support, managed services for FWs -Checkpoint, Fortinet, SIEM, RSA
envision, Arcsight, QRadar, IPS McAfee, ADSP Motorola, etc.
o Provided training to support engineers, knowledge base, technical
documentation, audit, compliance.
o Response to the incidents, analyzing security events, problems, new
change requests, owning and managing tickets to a resolution, for
clients under managed services and project.
Security Analyst
Jan 2011 - Dec 2011
The Herjavec Group, Canada
o Meet security heads of the organizations; discuss security technical
issues, change requests, client requests, processes, upgrades,
development, projects, secure network flow and platforms.
o Responsible for providing Security, operation, support, managed
services for platforms and clients.
o Provided third level support for all network, security platforms,
sensors, VPN, Firewall, TLS, email gateways, web proxies, LAN/WAN
systems, provided training to the tier one support engineers.
o Managed, monitored, network, security, web, filter, block, bypass,
explicit, ensuring optimal protection of computing resources from
identified security threats. Plan, execute, report, Availability,
Performance, Capacity management of Network, Security, Monitor what's
up gold, ip monitor, lan/wan, tools etc. Correlation rules, devices,
events, signatures, scans, logs,alerts, vulnerability, and reports
o Vendor, support, packet capture, sniffer, wire shark, network
analyzers, traces and vulnerable signatures.
o Experienced, trained, certifications with RSA envision, Arcsight,
McAfee IPS, McAfee EPO, McAfee EWS, Sarbanes Oxley Regulations,
QRadar, BlueCoat, Websense, Checkpoint, Cisco ASA, Fundstone,
Sidewinder, IPS, FWs, DLP, SAN, Websecure, Bigfix OS patch updates
fixets, Network monitors tools.
Project Manager - Prime Coordinator
Jan 2010 - Dec 2010
Rogers Communications Inc. Canada
o Managed all aspects of scope, finance, resource assignment, plan
development, tracking, monitoring, and reporting, through the
application of proven project management principles and methodologies.
o Develop, maintain, document (Project Plan, Issue and Action Logs, Risk
Management, Communication Plan, Status Reports, Post Implementation
Reviews, etc.).
o Pull together resources effectively, to implement projects.
Orchestrate multiple activities at once, to accomplish
objectives. Regularly communicate update with PMO, managers and
director.
o Used critical analyst skills, anticipate and manage potential risks.
Communicate quickly and effectively.
o Coordinate, resource management, as part of the continuous development
of the application, update changes, internal techs, specialists,
equipment engineers, platform engineers, sites, and data centers.
o Deployment teams, vendors like Cisco-US, Wireless, Cable, video link
services, channels, frequency
o Experienced project's life cycle, plan, design, critical analysis,
risk prevention, risk mitigation-costing
o Incorporate cross functional meets dependencies, inter dependencies,
leads during the cycle of the project with components and
interlocking, serial, parallel tasks, milestones, resources, schedule
costs
o PMO/PM, Vendor management single point of contact, Collect,
coordinate, communicate, collaborate, update, progress, report, meet
minute, change, create versions of documents, Support effective MOPs,
ITIL and IT Service Management (ITSM) level, implementation,
operational services, IMAC Install Move Add and Change, SLA's, OLA's,
MOU/MOA's.
Security Data Specialist - Core Network Engineer
Aug 2008 - Dec 2009
Rogers Wireless Inc - Rogers Communications Inc. Canada
o Managed projects as prime, coordinated with several groups, Data
platforms Services, IP Design, Equipment engineering, Schedule,
Analyze, Priority, organize, resources, tackled issues-met dead lines
o Data, Security, traffic flow, connectivity, filter, block, secure,
allow services over the network, logs, capacity, trouble shoot,
maintain and implement day to day changes
o Nokia Checkpoint, Juniper Net screen, Firewall, Security, NAT,
policies, rules, traffic load balancing, static-routes, spoof-pool,
log-server, management-server. Security, troubleshoot, test in
preproduction, document work orders for production, with PCI
Compliance, implement, change request and maintain. Security
Checkpoint Firewall Management, Firewall policies, load balancing,
NAT, FW-VPN cluster using management versions dashboard, R55, R65,
R70, with checkpoint, IPSO, Voyager
o Route, static, spoof, path data traffic flow redirect, interfaces,
VLAN, Cisco Routers, Juniper Extremes 4200 switches, F5 Big IP load
balancers.
o Checkpoint, Juniper's Net Screen, Cisco's PIX/ASA firewalls, ACS, SSL
VPN
o Secure remote access, Checkpoint-Connectra, VPN extender,
certificates, Security, Configure, Cisco ASA 5500, Cisco ACS 4.2,
Cisco UCP, maintain, change request, profile, access list,
permissions, groups, for VPN, Secure remote access - any connect
clients, from LAN direct to Backbone and Smart access - clientless
from home via internet,
o Security, IDs, taps, gig monitor, mirroring traffic, packet capture,
log, data, report and analyze threats
o Monitor, flag, plan, implement, infrastructural changes, capacity
augmentation, and performance..
System Support Engineer, Microsoft managed Solutions,
Feb 2008 - Aug 2008
Siemens, Canada
o Microsoft SharePoint - Team site - My site related, Security
permissions, document library, issues
o Client Security, Setup-Create Team site, meetings, workplaces,
Security roles administrator, designer, contributor, contributor data
entry, reader, programmer - web pages.
o Active directory - LDAP, users, groups, shared non user mail boxes,
documents library security
o DNS, DP, Print Server, Adv application, SMS, Data Shared, TS, Jump
boxes others
o Microsoft Exchange Server 2003, client end migration, Outlook 2003,
2007, OWA, live meeting, calendar, meetings, delegation and security
- spam issues for XL, Energizer, and Ceridian
o Advance troubleshooting MS Visio, Vista, MS2007 office, Win XP,
Windows 2000
o Responsible for the installation of Microsoft managed server - SMS
push software
Network Data Specialist (Communications)
Aug 2007 - Jan 2008
Cara IT Operations Ltd
o Project report, Alert, Analyze, Plan, gather eta, activity,
exceptions. actions - Servers with Micros POS
o Secure, hops, Firewall, Cisco, Juniper, Brocade, router-switches,
ports, traffic data flow, route, servers
o Remotely download, Compile, Verify data, pickup, backup and
production data, extract, run script, rectify script, trouble shoot
script for failures, network path, folders for the files on each
failure
o Monitor data poll, Remote Ware, schedule tasks, grabs, folders, SAN
-production, backup, redundant, audit. Share-point, purser, pickup,
SQL, cube, secure, transparent, dynamic, expandable on San.
Systems Support Engineer, EMC
Nov 2006 - Aug 2007
Siemens Canada
o Supported and implemented layered applications for EMC Clarion Cx, Ax
arrays, SAN and NAS direct and network attached systems maintenance
encompassing hosts windows/unix Os to the array direct or attached
with switches, Secure configure troubleshoot LUNs network Cisco,
McData, brocade, Juniper and inter switch links, zoning, Connectrix,
load balancing and path redundancy
o Software and Hardware Raids-Create RAID Groups hot spares-Rebuild and
Equalizing
o Allocate LUNS, bind LUNS for data storage, Meta LUNS, and administer
virtual discs-drives.
o Troubleshoot SAN-NAS-DAS, over ISCI, Fiber, access by hosts to LUNS
using Storage Groups
o Secure implement fail over software (Power path), to avoid loss of
connectivity between host to array
o Run CPG, Setup the SPs, Install and configure Navisphere Management
Suite, Snap-View Mirror-View Power-Path, SAN-Copy - maintain no DU/ DL
environment 24x7
Network System Analyst
July 2006 - Oct 2006
Shell Canada, ON
o Implemented ITIL as a professional, followed SLA's and ITIL management
systems
o Information, research, gather, coordinate changes, document, implement,stay current with technology
o Coached and trained tier analysts, troubleshoot Microsoft
applications, Microsoft Office, Outlook, PST/OST, calendar, Profile,
exchange, integrated, with active directory, VPN, RSA, Blackberry
management, Smart card management, CITRIX remote access
o Deploy of systems, servers, digital phones, Nortel call pilot 100/150
voice mail box system, launch call pilot inbox in outlook. Call
manager admin browser, register, configure, IP and extensions.
Assistant System Administrator
Aug 2004 - July 2006
Cyberdyme Network Management
o Microsoft-Visio Design, Implement infrastructure links, Map network
Technical Document processes
o Optimize profiles permissions domain group policy Win2003 Win 2000 Win
XP SUN Linux.
o Backup, tuning, harden systems, NAC user profiles, secure, firewall,
LAN, Wan, wireless, IPSec.
o Cisco router, Web sense Web Filter, secure, network, IPSEC, remote
access Norton secured VPN
o VMware for virtual environment setting and configuring networks.
Created labs for domain, enterprise, desktops, integrating with 2003
servers performance sustaining in Domain environment (TCP\IP) using
virtual routers, switches, subnet, super-networks
o Reimage ghost and deploy of lab, systems, subnets, bridge, route,
forward, block etc with group policy, create, add, disable, apply on
enable on active directory with users, computers, printers and
resources
Academic Education and Certifications
MDBA: Masters Diploma in Business Administration (3 years integrated course
including 2 years DBM)
BS: Bachelor of Science. University of Poona 3 years (six semesters) Degree
Course
Certifications include:
Microsoft Certified System Engineer + Internet, MCSA, A+, Net+,
Completed PDU"S with PMBOK4 understanding PMP,
SCNP:-Security Certified Network Professional,
Certified McAfee Network Security Platform,
McAfee E Policy Orchestrator - Delta Technician,
RSA envision Certified System Engineer - EMC Corporation,
RSA Data Loss Prevention Certified System Engineer - EMC Corporation
[pic] ca.linkedin.com/in/rupinderkharbanda
Well managed projects, supported all aspects, having vast experience with
fast pace leading organizations, using latest technology