Network Security Palo Alto

Network Security Analyst (Illumio & Palo Alto Firewall)

Mohammed Nazim Uddin

*****.********@*****.***

Phone: 972-***-****

PERSONAL PROFILE:

Distinguished IT Professional with expertise in networking security technologies (Palo Alto & Illumio). Illustrated success in installing, configuring, and maintaining all facets of the network Security. A visionary with the ability to think creatively to find resolution of complex technical issues. Strong leadership skills to spearhead and oversee projects. Works well in team-oriented environments as well as independently. Consistently recognized for going above and beyond the call of duty.

Network Security Analyst:

Elevance Health Inc.

Dec 2021 – Sep,2024

Working in Palo Alto & Illumio Core.

Experience with Panorama, log collectors and Global Protect.

Knowledge and understanding of Firewall, IPS, Proxy, SSL, VPN and DDOS technologies.

I have a clear understanding of Information Security Domains such as Identity Access Management, Cryptography, Data Protection, Vulnerability Assessment, Single Sign-On, Multi-Factor Authentication.

Experience in Service Now tools.

Experience using Office 365 Data Loss Prevention (DLP).

Experience with Microsoft security technologies such as Azure Security Center, Microsoft Defender, and Active Directory.

• Intrusion Prevention and detection policy.

• Web access proxy servers and URL filtering and DNS Security.

• Threat research, vulnerability remediation, and creation of compensating controls.

• Site-to-site and remote-access VPN connectivity and Network Access Control.

• Network Security policy creation, exception documentation and approval.

• Authentication, Authorization and Accounting (to include multi-factor authentication).

• Firewalls and network filters, in both Enterprise and cloud networks.

I am responsible for managing the delivery of information and network security systems and technology services, which include server, desktop, network, database, helpdesk components.

Do essential duties can include but are not limited to providing trouble resolution on complex problems and leads implementations for system and network security technologies

Develops testing plans to ensure quality of implementation.

Coordinates and prepares the reporting of data security events and incidents Provides system and network architecture support for information and network security technologies.

Provides technical support to business and technology associate’s in risk assessments and implementation of appropriate information security procedures, standards and technologies, represents major upgrades and reconfigurations in change control.

I Design & analyze mix of vendor services meeting business and information security requirements.

Maintains relationship with key vendors.

Determine and perform complex configuration changes to meet business and information security requirements.

Serve as the technical escalation for results of preventative maintenance routines, supervise preventative maintenance.

I Represents infrastructure security support in significant projects and performs the most complex operations and administration tasks.

Responsible for level 3 & 4 change and problem requests without supervision; lead level 1 & 2 incident recoveries and root cause analysis.

Network Firewall Engineer:

Perry home - TX, July 2019 – Dec 2021

Worked with Palo Alto firewalls PA250, PA4050, PA3020 using Panorama servers, performing changes to monitor/block/allow the traffic on the firewall. Technical assistance for LAN/WAN management and complex customer issues.

Responsible for evaluating, testing, configuring, propose and implementing network, firewall and security solutions with Palo Alto networks.

Assist with the maintenance of Firewalls, Routers, Switches, Virtual Switches, VPN configuration, Wireless Controllers, Servers, and Security appliances for access to vital business applications in our private cloud and hosted.

URL filtering, SSL Decryption, Forward Proxy on Palo Alto Firewalls.

Moved Palo Alto Firewalls from on premise to Azure cloud

Palo Alto Firewalls for web filtering and application control

Scripting for automation of processes for Windows Servers. Familiarity with main script languages like Python.

In-depth knowledge in designing, implementing, configuring with best practices on NextGen IDS/IPS Firewalls such as Palo Alto, Cisco Firepower (Sourcefire).

Serve as the customer’s go-to resource for all matters related to the Palo Alto next-generation firewall.

Additional tasks include assisting with the day-to-day operations and management of other network devices such as Cisco ISE, Infoblox, Palo Alto firewalls and Panorama.

Migrated Palo Alto Next-Generation Firewall series PA-500, PA-3060, PA-5060, PA-7050, PA-7080 from Cisco PIX, ASA and Source of knowledge for SD-WAN and routing trends and technologies

Network operational and investigated complex network and security system problems in Checkpoint Firewall, Cisco ASA, FTD, Palo Alto Firewall, Cisco Meraki Wireless Access Points and Cisco network appliance.

Experience security tools like AV, SIEM, FIM, VPN, IDS/IPS.

Experience with Infoblox DHCP, DNS, IPAM, NTP.VMware.

Ensure all network and security applications are patched current and vulnerability scans.

In AZURE I create the systems and network needed for these computer cloud systems.

develop cloud networks that store data remotely and access online and work on the systems related to connecting clients to clouds so that they can use them effectively.

Coordinated the resolution of system problems by identifying issues and meeting with users, managers, and hardware/software vendors to identify solutions.

Provided expert guidance to management on network and security systems lifecycle, including upgrades and potentially complete replacement of existing infrastructure with new technologies.

Provides expert interpretations of network and security administration regulations and guidance, advises on the purchase and specification of new technologies, and supports infrastructure.

Monitored usage and performance of environments with SolarWinds NPM, Services now, and Cisco ISE.

Develops and modifies complex network and security systems and develops subsystems to enhance the overall operational environment.

Utilized various monitoring tools, perform active monitoring and remediation of rough intrusions.

Assessed and resolved tier 2 and tier 3 operational and performance issues with the networking infrastructure, working with vendor support or other organizations as needed.

Network Engineer:

Montefiore hospital - Bronx,

March 2016- June 2019

Worked with Palo Alto firewalls PA3020, PA5020 using Panorama servers, performing changes to monitor/block/allow the traffic on the firewall.

Palo Alto/ASA Firewall troubleshooting and policy change requests for new IP segments that either come online or that may have been altered during various planned network changes on the network.

Upgraded the existing Panorama

Designed and configured OSPF, BGP on Juniper Routers and SRX Firewalls

Performed processes of optimization, backup, configuration and updating of Cisco IOS and IOS XR.

Configured IP-SEC VPN for user traffic that needs to to V8.0.6. Integrating the new firewalls into Panorama and responsible for working on changing tickets for existing 3250 Palo Firewalls in the environment be encrypted using Palo Alto, Cisco ASA, and Azure cloud.

Experience in migration of VLANS & Configured VLANs with 802.1q tagging, Ether channels, and Spanning tree for creating Access/distribution and core layer switching

Configure IPSEC and SSL VPN with Palo-alto, Cisco ASA, Fortinet, Checkpoint and Router.

Worked on Source Fire and Palo Alto IPS/IDS Systems, Splunk log monitoring tool, Qualys vulnerability assessment tool.

Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost effective network solutions to accommodate customer requirements and project scope.

Configured routers and coordinated with LD Carriers and LECs to turn up new WAN circuits.

Work on Change Management for migration from Cisco ASA to Palo Alto.

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.

Manage Palo alto, Checkpoint, Cisco ASA and Fortinet policy and network

I migrated from Cisco ASA to Palo Alto.

Configuring & managing around 500+ Network & Security Devices that includes Cisco Routers & Switches, Nexus Switches, Juniper and Palo Alto Firewalls, F5 Big IP Load balancers, Blue Coat Proxies and Riverbed WAN Optimizers.

Upgraded Panorama version 7.0 to 8.0 on Palo Alto Firewalls.

Engineering, installation, and maintenance of one or several of the following disciplines: Local and Wide Area Networks, Data Centers, VOIP Networks, Virtual Infrastructure, Security Appliances, and Wireless Networks.

Installed, support, and configure Extreme routers and switches as well as all necessary security solutions.

Provided ongoing network maintenance, including updates and security patches.

Monitored, evaluated, and solved potential network performance issues.

Developed and maintained documentation related to the installation, administration, and maintenance of network infrastructure.

Interacted with other Technology teams regarding new application deployments and service installations.

Configured, test, install and support network hardware and software. This includes, but is not limited to routers, switches, firewalls, cabling, wireless access points, and controllers, intrusion detection systems, load balancing, Cisco Internetwork Operating System (IOS), and Web Security Gateway appliances.

Built, test, implement, integrate, support, and maintain new solutions such as Redundant Multiprotocol Label Switching (MPLS) circuits, SD-WAN, Voice over Internet Protocol (VoIP), Unified Communication, and Video over IP solutions.

Lead, respond, and mitigate network security vulnerabilities.

Assisted in developing, implementing, and maintaining policies, metrics, procedures, and training plans to improve network systems and appropriate use.

Network Engineer:

Desh Cloud Software Inc. New York,

Jan 2014 – Feb 2016

Configure IPSEC and SSL VPN with Palo-alto, Cisco ASA, Fortinet, Checkpoint and Router.

Worked on Source Fire and Palo Alto IPS/IDS Systems, Splunk log monitoring tool, Qualys vulnerability assessment tool.

Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost effective network solutions to accommodate customer requirements and project scope.

Configured routers and coordinated with LD Carriers and LECs to turn up new WAN circuits.

Work on Change Management for migration from Cisco ASA to Palo Alto.

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.

Manage Palo alto, Checkpoint, Cisco ASA and Fortinet policy and network

I migrated from Cisco ASA to Palo Alto.

Configuring & managing around 500+ Network & Security Devices that includes Cisco Routers & Switches, Nexus Switches, Juniper and Palo Alto Firewalls, F5 Big IP Load balancers, Blue Coat Proxies and Riverbed WAN Optimizers.

Lead for presenting maintenance of user’s system account, security and troubleshot. Quick response remote support to clients, answered call to manage clients with supports. troubleshoot network protocol including TCP/IP, EIRGP, Cisco Router, and Switches. Work Network team support national operation.

Taken responsibility and ownership in complete satisfaction of our clients, provide high level troubleshooting and disaster recovery of Windows based PC, Servers and back-office products.

Network support and configure LAN/WAN of new office. User Admin supports, by creating new user profile in Active Directory, user password and reset, outlook support, wireless Internet support.

Researched new technology that will utilize and provide service to users.

Managed vendor relations including key networking equipment and cabling infrastructures vendors. Provided input for division –wide technology documented such as strategic plan, technology plan and acceptable use policy.

Planning and maintaining hardware, software, and cabling related to the division’s network infrastructure including router, switches, wireless access point, servers, power backup, and conditioning, multi-user application, and network wiring.

Troubleshooting network issues and optimizing network performance.

Ensure high availability for mission –critical application tools, including VOIP, online state testing, and collaboration tools.

Planning and implementing changes to Bank division’s data and voice networks, including WAN, LAN, VOIP and Server resources.

Graduation Degree: Master of Accounting.

University: National University of Bangladesh.

Certificate: Cisco CCNA

Contact this candidate