Network Analyst with Security Focus and Ops Experience

ASHISH GHIMIRE

+1-318-***-**** • **************@*****.*** • linkedin.com/in/ashish-ghimire-96755b179 • github.com/helloashishghimire SUMMARY

Network Engineer delivering Tier-2 support and system administration in enterprise environments. Experienced in designing, deploying, and maintaining LAN/WAN infrastructure, including VPNs, VLANs, and firewall configurations to ensure secure and reliable connectivity. Led migration of 200+ users to Microsoft 365 and implemented network monitoring solutions using tools such as SolarWinds and PRTG, improving visibility, reducing incidents, and enhancing uptime. Strong expertise in troubleshooting network and system issues, optimizing performance, and collaborating with cross-functional teams and vendors to maintain stable and efficient IT operations. EXPERIENCE

Louisiana State University Shreveport Oct 2024 – May 2026 Network / Cybersecurity Analyst (Tier II) — Shreveport, LA

• Managed and troubleshot enterprise LAN/WAN infrastructure including routers, switches, firewalls, and VPN gateways; configured VLANs, inter-VLAN routing, trunking (802.1Q), STP, OSPF, and static routing to ensure reliable, high-availability network connectivity.

• Monitored network performance and security events using Splunk, Microsoft Sentinel, SolarWinds, PRTG, NetFlow, and Wireshark; investigated anomalies including brute-force attempts, unauthorized access, and suspicious traffic with proactive alerting and reduced false positives.

• Configured and maintained firewall policies, ACLs, IDS/IPS, VPN tunnels (IPSec/SSL), and network segmentation; enforced identity and access controls using Active Directory, Entra ID, and MFA across Microsoft 365 (Exchange, Teams, SharePoint).

• Managed incidents end-to-end through ServiceNow, performing root cause analysis and SLA-driven resolution; documented network configurations, runbooks, and change logs to maintain operational standards and compliance. Max International Private Limited Jan 2020 – Jul 2023 Network Security Engineer — Nepal

• Designed and deployed enterprise network infrastructure across banking, government, and airport environments; configured Palo Alto and Fortinet firewalls, Cisco ASA, IPSec/SSL VPNs, IDS/IPS, ACLs, and NAT rules securing 100+ devices at 99%+ uptime.

• Implemented OSPF, BGP, and static routing; configured VLANs, trunking (802.1Q), STP, and inter-VLAN routing; monitored performance with SolarWinds, PRTG, SNMP, and Wireshark to proactively resolve latency, packet loss, and connectivity issues.

• Administered DNS, DHCP, Active Directory, Windows Server, and Linux systems; provisioned AWS VPC subnets, route tables, NAT gateways, and security groups; built Python and Bash automation scripts for log parsing, alert triage, and network monitoring.

• Conducted vulnerability assessments using Nessus and Rapid7 Nexpose across 50+ systems identifying 200+ vulnerabilities; performed penetration testing with Nmap, Burp Suite, and Metasploit, improving incident response efficiency by 25%. SecuritPal AI Aug 2023 – Dec 2023

GRC Analyst (Contract) — Remote

• Conducted security and compliance assessments aligned with SOC 2, ISO 27001, NIST CSF, and HIPAA; performed third-party risk reviews, security questionnaire analysis, and policy validation to improve audit readiness and reduce compliance gaps.

• Identified and documented security risks, control weaknesses, and vulnerabilities; tracked remediation activities and supported enterprise risk management initiatives to improve overall organizational security posture. SKILLS

Networking: TCP/IP, OSI, IPv4/IPv6, Subnetting, OSPF, BGP, STP, VLANs, Inter-VLAN Routing, Trunking

(802.1Q), NAT, ACLs

Hardware: Palo Alto, Fortinet, Cisco ASA/Routers/Switches, Juniper, IDS/IPS, VPN (IPSec/SSL), Load Balancers, Wireless APs

Monitoring: Wireshark, Splunk, Microsoft Sentinel, SolarWinds, PRTG, NetFlow, SNMP — packet analysis & performance tuning

Cloud: AWS (VPC, Subnets, Route Tables, NAT Gateway, Security Groups) Azure (VNet, NSG, Entra ID, MFA)

Systems: Windows Server, Linux, Active Directory, Group Policy, DNS, DHCP, Microsoft 365, Exchange Online, ServiceNow

Automation: Python, Bash, PowerShell, Ansible, Docker, CI/CD Pipelines CERTIFICATIONS

CompTIA Network+ • CompTIA Security+ • CompTIA CySA+ • CompTIA PenTest+ • AWS Solutions Architect Associate • AZ-500 Azure Security Engineer Associate

EDUCATION

M.S. Computer Science, Cybersecurity Concentration Louisiana State University Shreveport, LA May 2026

Contact this candidate