Network Security Engineer

Ananth Nag Kanchibhotla Santosh

** ***** **, *** ****, Jersey City, NJ-07310 +1-732-***-**** ******************@*****.*** Summary

CCNA certified with more than 5 years of experience as a Network Security Engineer in design, implementation and configuration of Checkpoint, Palo Alto, Cisco ASA, Fortinet and SonicWall firewalls. Innovative, hardworking and efficient with a flair for AWS efforts. Highly adaptive with an excellent academic background. Education

Texas A&M University-Kingsville, TX, USA Jan 2014- Aug 2015 Master of Science in Computer Science

JNTU, Hyderabad, India. Apr 2009- May 2013

Bachelor of Information Technology

Technical Skills

• Certification: CCNA –R&S, PCNSE(Pursuing)

• Firewall & Security: Checkpoint (R77.30 and R80), Palo Alto (7.1.x, 8.0.x and 9.0.x), Cisco ASA (9.4(x)x – 9.9(x)x), Fortinet (5.6.x)

• Hardware Versions: Checkpoint (61000 and 41000 Series, Palo Alto (7000 and 5000 Series), Cisco ASA (5500 Series)

• Network Management Tools: HP Service Manager, Service Now, Remedy and Easy-IP

• Firewall Tools: Tufin- SecureTrack, Tufin- SecureChange, Splunk Work Experience

Network Security Engineer, Moody’s Corporation, New York, NY, USA Nov 2019- Dec 2020

• Responsible for deployment of Palo Alto Prisma Access Cloud (Global Protect Cloud Service) to Mobile Users (10,000) for all the Moody’s and Non-Moody’s employees.

• Enabled Multi-tenancy on Prisma access to host multiple instances on a single panorama appliance which allowed us to onboard Users separately for Moody’s employees and Non-Moody’s employees and create separate template stacks, device groups for each instance.

• Provide on call support for Prisma Access project

• Responsible for staging/reviewing/pushing/implementing the desired firewall rule base on Palo Alto (Prisma Access).

• Worked on AWS Security Side in creating VPC’s, Security Groups, NACL’s etc.,

• Responsible for Change Management on ServiceNow (Creating Change Orders and Incidents for Firewall Projects and Issues)

• Generate reports and monitor live firewall traffic logs on Splunk using queries. Network Security Engineer, Capital One, Plano, TX, USA Apr 2019- Oct 2019

• Configuration, Management and Troubleshooting of various vendor firewalls including Checkpoint and Palo Alto.

• Worked on automation of disabling the shadowed rules on Palo Alto using python script.

• Worked on decommission project for cleaning up the decommissioned subnets on multiple device groups through Tufin.

• Responsible for staging/reviewing/pushing/implementing the desired firewall rule base on Checkpoint and Palo Alto.

• Utilize Secure SDM and Tufin to review all shadowed rules to reduce all ACLs for cleanup.

• Generate daily reports of firewall logs using Splunk queries Sr. Analyst, Network Security, SecureWorks Inc., Providence, RI, USA Jan 2018- Feb 2019

• Configuration, Management and Troubleshooting of various vendor firewalls including Checkpoint, Palo Alto, Cisco ASA, Fortinet, Juniper SRX and SonicWall.

• Extensively worked on upgrading the firewall devices on all platforms (ASA, Palo Alto, SonicWall and Fortinet)

• Worked on building site-site VPN across all the platforms, Integration and Acquisition projects.

• Experienced on troubleshooting firewall issues on various vendor platforms (Checkpoint, Palo Alto, Cisco ASA, Fortinet and Sonicwall)

Network Design Engineer, Transurban, Alexandria, VA, USA Oct 2017- Dec 2017

• Responsible for documenting Network technology enterprise level design, developing standards within the Network domain, facilitating the development of the network strategies and roadmaps. Develop contingency/fail-over network systems to ensure network performance. Monitor the network performance and generate the reports using SolarWinds. Network Security Engineer, Capital One, Henrico, VA, USA Aug 2015- Sep 2017

• Configuration, Management and Troubleshooting of Checkpoint and Palo Alto Firewalls.

• Experienced on troubleshooting firewall issues on Checkpoint and Palo Alto Platforms.

• Extensively worked on Rule Optimization and Decommission Changes using Rule Base Analyzers (Tufin) and generate Firewall audit reports.

Contact this candidate