Network Security Palo Alto

ANAND PATEL

Bolingbrook, Illinois Email: **************@*****.*** Tel: 630-***-****

Summary

Over 7+ years of experience in designing, configuring, and managing complex enterprise network infrastructures, including TCP/IP, IPv4/IPv6, DNS, DHCP, and NAT.

Expertise in routing protocols such as OSPF, EIGRP, BGP, RIP, IS-IS, and MPLS, ensuring optimal performance and scalability of large- scale networks.

Advanced knowledge of VLANs, VPNs (Site-to-Site, Remote Access), and high availability protocols (HSRP, VRRP, GLBP) to ensure network redundancy and uptime.

Skilled in WAN technologies like MPLS, Frame Relay, PPP, and SD-WAN, enhancing connectivity across distributed sites and improving network efficiency.

Proficient in network security tools and protocols, including firewalls (Cisco ASA, Palo Alto, Check Point), VPN (IPSec, SSL), AAA

(TACACS+, RADIUS), and IDS/IPS systems.

Experienced in using network monitoring and troubleshooting tools like Wireshark, SolarWinds, Nagios, and Lansweeper for effective network performance tuning and issue resolution.

Expertise in cloud networking and virtualization with AWS, Azure, VMware, and Hyper-V, ensuring secure and scalable hybrid network architectures.

Knowledgeable in wireless networking technologies (Wi-Fi 6, WLAN design, RF site surveys) and troubleshooting, ensuring seamless connectivity across diverse environments.

Skilled in network automation and scripting using Ansible, Cisco DNA Center, Python, Bash, and PowerShell, streamlining network management tasks and improving efficiency.

Strong background in network design and architecture, including network segmentation, VXLAN, load balancing (F5 BIG-IP), and the use of MS Visio for network diagramming.

Expertise in Wireless & RADIUS Technologies, including Cisco APs, Aruba wireless and APs, Cisco Meraki, Prime Infrastructure, Air Magnet, AirWatch, WLCs (8510, 5508, 5706), Cisco Aironet APs (2600, 3600, 3700), ISE, MSE, Aruba 225, Aruba 3000 controllers & Airwave, ISE, Clear Pass (6.0, 6.2, 6.5), and 802.11a/b/c/g/n/ac. Technical Skills

Networking Fundamentals: TCP/IP, IPv4/IPv6, Subnetting, DNS, DHCP, NAT, PAT, SNMP, SMTP, VLANs, VPNs (Site-to-Site, Remote Access), High Availability (HSRP, VRRP, GLBP)

Routing & Switching: OSPF, EIGRP, BGP, RIP, IS-IS, MPLS, Ethernet, Fast Ethernet, Gigabit Ethernet, VTP, STP, EtherChannel, 802.1q VLAN tagging

WAN Technologies: MPLS, Frame Relay, PPP, SD-WAN

Network Security: Firewalls (Cisco ASA, Palo Alto, Check Point, Juniper SRX), VPN ( IPSec, SSL VPN, GRE Tunnels ), Authentication

(AAA (TACACS+, RADIUS),

Security Tools: SIEM, Cisco NAC, IDS/IPS, Encryption (DES, 3DES, AES)

Network Monitoring & Troubleshooting: Wireshark, SolarWinds, Nagios, Lansweeper, Packet Analysis, Network Performance Tuning, Log Analysis

Cloud Networking & Virtualization: AWS, Azure (Hybrid Networking, Cloud VPN, VPCs), VMware, Hyper-V

Wireless Networking: 802.11 (Wi-Fi 6), WLAN Design and Troubleshooting, Ekahau, RF Site Surveys

Network Automation & Scripting: Ansible, Cisco DNA Center, NetDevOps, Python, Bash, PowerShell

Network Design & Architecture: Network Segmentation, VXLAN, High Availability, Load Balancing (F5 BIG-IP), MS Visio

Wireless & Radius Technologies: CISCO APs, Aruba wireless and APs, Cisco Meraki, Prime Infrastructure, Air Magnet, AirWatch and WLC s (8510, 5508, 5706), Cisco AironetAP s (2600, 3600, 3700), ISE, MSE, Aruba 225, Aruba 3000 controller & Airwave, ISE, Clear Pass 6.0,6.2,6.5, 802.11a,b,c,g,n,ac

Operating Systems: Linux (Ubuntu, CentOS), Windows Server (2016/2019)

Voice & Collaboration: IP Telephony, VoIP (SIP, H.323, MGCP), CCM, QoS

Collaboration Tools: Jira, Confluence, ServiceNow Experience

Goldman Sachs Global April 2022 – Current

Network Engineer

Spearheaded the design, implementation, and optimization of enterprise network infrastructure, improving system reliability by 30% through advanced routing protocols (OSPF, BGP) and high availability solutions (HSRP, VRRP).

Led the migration of legacy WAN technologies to SD-WAN, reducing operational costs by 25% while enhancing network performance and scalability across global offices.

Configured and managed site-to-site and remote access VPNs, ensuring secure connectivity for over 5,000 users across multiple regions, contributing to a 40% increase in remote work efficiency.

Administered network security protocols, including Cisco ASA, Palo Alto firewalls, and IPSec VPNs, reducing security incidents by 20% and maintaining compliance with industry standards.

Utilized network monitoring tools such as SolarWinds and Wireshark to proactively identify and resolve performance bottlenecks, improving network uptime by 15%.

Implemented network automation using Ansible and Python, reducing manual configuration time by 50% and streamlining daily network operations.

Optimized cloud networking configurations for AWS and Azure, enhancing hybrid cloud integration and reducing latency by 30% for critical applications.

Collaborated with cross-functional teams to design and deploy network architecture for high-traffic environments, ensuring seamless performance for 10,000+ devices.

Delivered comprehensive network troubleshooting and packet analysis, resolving network issues 25% faster and ensuring minimal downtime for business-critical applications.

Managed VLAN configurations and Ethernet switching for high-traffic environments, ensuring optimized data flow and reducing network congestion by 18%.

Conducted RF site surveys and WLAN design, improving wireless coverage and network performance across 20+ office locations, resulting in a 40% improvement in user satisfaction. Ameri Source INC July 2017 - March 2022

Network Engineer

Engineered and maintained network infrastructure, implementing MPLS, Frame Relay, and VPN technologies, improving data transmission speeds by 35% across multiple client locations.

Administered routing protocols (OSPF, EIGRP) and switching technologies (EtherChannel, 802.1q VLAN tagging), enhancing network stability and scalability for over 1,000 users.

Deployed and managed network security solutions, including Cisco ASA firewalls and IDS/IPS systems, increasing threat detection accuracy by 40%.

Led the migration of traditional network setups to cloud-based solutions (AWS, Azure), improving system uptime by 20% and reducing operational costs by 15%.

Utilized network monitoring platforms (Nagios, Lansweeper) to track performance metrics, identifying and resolving over 50 network issues, leading to a 25% reduction in service interruptions.

Automated network configuration tasks using Python and Bash scripts, cutting manual efforts by 30% and improving deployment times for network changes.

Conducted in-depth network performance tuning, utilizing Wireshark and SolarWinds, which reduced latency by 18% and optimized bandwidth utilization.

Designed and implemented wireless networks, including Wi-Fi 6 configurations, increasing wireless coverage and reducing interference by 20% across office spaces.

Managed VPN (IPSec, SSL) solutions, ensuring secure remote access for over 500 employees, contributing to a 30% increase in remote workforce productivity.

Collaborated with IT and security teams to implement AAA authentication protocols (TACACS+, RADIUS), enhancing network access control and reducing unauthorized access incidents by 15%.

Delivered end-to-end network architecture solutions for large-scale projects, ensuring 99.9% network uptime and supporting critical business operations across multiple regions.

Implemented and managed Wireless & RADIUS technologies, including Cisco APs, Aruba wireless and APs, Cisco Meraki, Prime Infrastructure, Air Magnet, AirWatch, WLCs (8510, 5508, 5706), Cisco Aironet APs (2600, 3600, 3700), ISE, MSE, Aruba 225, Aruba 3000 controllers & Airwave, ISE, Clear Pass (6.0, 6.2, 6.5), and 802.11a/b/c/g/n/ac, optimizing wireless network performance and security.

Education

Bachelor's degree in computer science

Towson University, Towson MD

Certifications

CCNA - Cisco Certified Network Associate

CCNP - Cisco Certified Network Professionals

Contact this candidate