Senior / Staff Cloud Support Engineer - Database Security

ROSHAN ZAMEER MULLA

Mobile: +91-973**-***** E-Mail: *****.******@*****.***

Current Location: Bhoomika Prime Rose, Opp. Aradhana Academy, J P Nagar, Bangalore, Karnataka, India- 581401 MANAGERIAL ASSIGNMENTS

Project Management Infrastructure Management Networking Solutions Career Snapshot

A Certified Engineer with nearly 22 years of experience in following

- IT Infrastructure - Project Management - Networking & Security

- Cloud/Cyber Service - Compliance - Technical / Customer Support

- Service Delivery - Disaster Recovery Management - IT Security Management

- Cost & Resource Deployment - Change Management - System Implementation

- Backup & Contingency Planning - Requirement Mapping - SLA / TAT Areas of Expertise

Networking

Installing, configuring, upgrading and maintaining LAN as per organizational requirements.

Expert in LAN, WAN, SDWAN, Microwave, Leased Lines, MPLS, P2P, etc.

Policy Routing, Static NAT, Dynamic NAT, NAT Zero, PAT, Global, DMZ, Firewall Context, Policy map, Class Map, Inspect, Object Group, Service Group, GLBP, Access Lists, AAA, Multilink, Load Balancing, Failover, etc.

Password Recovery, configuration file and image maintenance SDH System.

Layer 2 and 3 switching, 6500 series Catalyst switches, Cisco Nexus series switches, HP Switches, Aruba, Huawei, TP-Link, FortiGate and 3Com switches.

Virtual Switching System (VSS)/ Virtual Switch Link (VSL)/ VRF (Virtual Routing & Forwarding).

Managed/Unmanaged/Fixed/Modular Switches, VLAN Configuration, Inter-VLAN routing and VLAN security.

Troubleshooting of VTP, Inter-Switch trunk and traffic pruning, DMVPN, etc.

Implementation of QoS using AutoQoS, system redundancy using HSRP.

Configuration and troubleshooting of Spanning Tree Protocol – STP, RSTP, Ether Channels, etc.

Cloud Computing, Cloud Security (Amazon Web Services, Azure, Google Cloud).

Wireless infrastructure with Access Controller, Access Points, LDAP, ADC, MFA and Google/Fortinet Authenticator.

IP Telephony Cisco CCM/CCME/SRST, Huawei IP Telephony Solutions, Yeastar/Avaya/Grand Stream, Unified- messaging system, Voice mail, auto attendant setup, Call Centre setup, Hunt-group, Extension mobility, Multi party conference, IVR system configuration, TDM (Avaya/Alcatel/3Com) etc.

Cisco Identity Service Engine (ISE) or next-generation NAC solution.

Proxy solution with Bluecoat/Palo Alto/Microsoft Proxy/IBM ISS and Anti-Virus software.

Network Security Design / BMC Software / Structured Cabling (Copper & Fibre). IT Security

Reviewing the physical & logical security measures and safeguarding the information resources of the enterprise to maintain integrity, confidentiality & availability of data.

Developing security operation procedure for efficient operation and protection of asset and property set up, maintain security integrity, and function with strict rules and regulations.

Configuring Cisco Firewall, Fire Power, FWSM, Palo Alto, Juniper Net Screen, SonicWALL, Checkpoint, Sophos, Huawei, FortiGate, Fortinet, ForcePoint, VMware, Zscaler and Microsoft Firewall.

Access Control List, Port –based traffic control, VPN (Easy VPN, Site-to-Site and Remote-site, Cloud Based VPN)

Cyber Security & AWS Solution Expert.

Web Application Firewall (WAF) using F5 (BIG IP)/Citrix/Imperva/Incapsula/Cloudflare/Citrix/SonicWALL, etc.

Next-Generation (NGFW)/Stateful Inspection/ Application/ Packet Filtering/ Circuit-Level Firewall.

Wireless Security using WEP, WPA, WPA2 and Wireless Encryption TKIP & AES.

TACACS+ and Radius Protocols (AAA), Cisco CSACS configuration.

Cisco Content Switches, F5 ACE for load balancing, Amazon Elastic (ELB)/Azure Application Load Balancer, Application Filtering and SSL offloading.

FTD/FMC, IPS, IDS and IME implementation and configuration.

Web & Email filtering using Palo Alto, IronPort, Bluecoat, SonicWALL, Surf Control and Mxtreme appliance.

Syslog & Event Log Analysis - Splunk/Jira/Algosec/Windows/Dynatrace/Tuffin/Skybox/F5. Systems Administration

Executing installation of OS, application software, deployment of servers, disk quota management and distributed file systems, network and monitoring the same.

Handling installation of operating system, hardware maintenance and configuration of servers/Virtual Servers.

Undertaking configuration & troubleshooting Servers, Storage Devices, OS, Internet, Intranet, LAN/WAN.

Implementation, configuration and troubleshooting of Window/Linux Server OS.

Active Directory design and implementation, Configuration of Enterprise Messaging system using MS Exchange.

Installation/Configuration/Troubleshooting of Application & Database Servers.

Raid Implementation/ Disaster Recovery Backup Exec.

Firmware Upgrade on Server and updates on all computers & Servers. Career Highlights

Saudi Media Systems (Riyadh, Saudi Arabia) Nov’22 – until Date Senior Network Security Specialist

Amdocs (Pune, Maharashtra, India) Aug’15 – Oct’22

Senior Cyber Security Specialist

NCR Corporation (Dubai. U.A.E) Oct’11- May’14

Senior IT Network Systems Security Engineer (Resident Engineer in Dubai Police General HQ) Meraas Holdings (Diwan of Dubai, U.A.E) May’08- Sep’11 Senior IT Network & Systems Security Engineer

Deyaar Development P.J.S.C, Dubai, U.A.E Dec’04-Apr’08 Network System Supervisor (Dubai Islamic Bank)

APPLICOM S.A.R.L (Dubai Internet City, U.A.E) May’01-Nov’04 Network System Engineer

Key Deliverables

Managing & Administering Enterprise Network & Security WAF, IDS/IPS, Secure Cloud, HP, Aruba, Cisco, Palo Alto, Sophos, FortiGate, Check Point, Imperva/Incapsula, Fortinet, Huawei, TP-Link, etc...

Installation/Configuration/Troubleshooting Application Policies & Fine Tuning of Policy String in Application Policy for Corporate & different customers.

Monitoring Application Policies & Fine Tuning of Policy String on Premises & Secure Cloud for Corporate & different customers.

Supervising VLANS, Inter-VLAN routing, Trunk & Access port, VTP, HSRP, VLAN pruning, Spanning tree, Channel Group, etc…

Administrating policy routing, GLBP, Access Lists, Encryption, Dynamic Multi Point VPN (DMVPN), Class Map, Load Balancing, Multilink, Traffic Shaping, etc…

Experience in deployment and administering enterprise networks with footprints in public clouds with three main cloud-computing models IaaS (Infrastructure as a Service), PaaS (Platform as a Service) & SaaS

(Software as a Service). Azure deployment models when configuring a cloud solution Public Cloud, Private Cloud, and Hybrid Cloud with Azure Blob Storage, Azure Files, Azure Queue Storage, Azure Tables & Azure Managed Disks.

Cisco Vss (Virtual Switching System) & Fire Power Appliance, Firewall Switch Module (FWSM) with failover, ASA Firewalls, Huawei in Failover, Fortinet in Failover, Palo Alto Firewall with High Availability.

VPN site-to-site, remote-site, easy VPN connections and Cloud Based VPN.

Firewall Policies, Static NAT, Dynamic NAT, NAT Zero, PAT, Global, DMZ, Firewall Context, Policy map, Class Map, Inspect, Object Group, Service Group, DMVPN, Failover, etc…

Inspection Engines Cisco FTD/FMC, IDSM – 2 with failover, Palo Alto IPS Engine in HA.

Cisco Vss, Core, Access switches, Nexus, Huawei, Fortinet & HP switches.

Static routes & Dynamic Routing protocols (BGP, OSPF & EIGRP).

Cisco Content Server Switches for Load Balancing and Application filtering.

WAN Networks (Internet LL, SD-WAN, MPLS, P2P LL, Microwave, ISDN PRI & BRI).

Access Control Server (ACS) and controlling access of all network and security devices through access control server using AAA policies.

F5 Application Control Engine (ACE) for server load balancing and Application Inspection.

Palo Alto proxy with failover, content filtering, Access Policy, updates access policy, etc…

Mail filter, Incoming and Outgoing Mail Policies, Content filtering, Cluster Configuration, Spam Filtering, Content Updates, Auditing, Quarantine & Reporting.

Inspection Engines FTD/FMC, Cisco IDSM – 2 with failover Palo Alto IPS Engine in High Availability and IPS Manager Express for IPS Management.

Syslog & Event Log Analysis using Splunk/Algosec/Jira/Tuffin.

Overseeing port-based scanning for Network & Server devices, scanning for vulnerabilities on network, etc..

Wireless infrastructure with Access Controller, Access Points with encryption, Open, WEP, 802.1x/EAP, LEAP, EAP-FAST, PEAP, and EAP-TLS. LDAP integration and Multi Factor Authentication (MFA).

MS Outlook, OWA, TCP/IP, DHCP, DNS, FTP, WINS, ADS, RPC over HTTP, etc…

Installing, troubleshooting, supporting and supervising Windows 2003/2008/2012/2016/2019/2022 servers including administration of Domain controller, Mail servers, Application server etc…

Windows OS 11/10/08/VISTA/2003/XP/Me/2000, MS Outlook, OWA, TCP/IP, DHCP, DNS, FTP, WINS, ADS, etc.

Structured cabling (CAT6, CAT3 & Fiber Optics).

Designing network using Microsoft Visio, Documentation, Project task list, etc… Education

Diploma in Computer Science and Engineering from R.N Shetty Polytechnic, Board of Technical Education, Bengaluru, Karnataka, India in 1999.

Higher Diploma in Computer Networking Technology from Asset International, Mysore, Karnataka, India in 2000.

Higher Diploma in IT Security & IP Telephony from Fast Lane Computers Dubai U.A.E in 2006 Certifications

Cisco - CCIE Security (Written), CCNP, CCSP, CCVP, CCDP, CCNA – Security & CCNA

Microsoft – MCSE & MCP

Fortinet – NSE1, NSE 2 & NSE 3

Veeam VMTSP – Container Protection, Microsoft 365 Protection, Public Cloud & Ransomware

A+ Certification - from Asset International.

Personal Vitae

Date of Birth: 7th May 1979

Nationality: Indian

Languages: English, Arabic, Hindi, Urdu, Kannada, Marathi, Konkani, Malayalam, Tamil, Gujrati & Telugu Marital Status: Married

Permanent Address: C. P. Bazaar, Sirsi, Karnataka, India Driving Licence: Valid UAE, Indian & International Driving Licence

Contact this candidate