# Personal Summary: Experienced Network & Security Engineer with more than Nine years of experience in NOC and Infrastructure management. Excellent hands-on experience in Palo Alto, Checkpoint, FortiGate and Cisco Firewall, Routing, Switching, Cisco Viptela SDWAN and Load Balancer. Holding multivendor expert level experience. Progressive experience in Implementation, Integration and Troubleshooting in Data Center, local and remote environments. Experienced in Installation, Configuration, Maintenance, Troubleshooting and Managing Network on multiple platforms and vendors. Potential of handling multiple tasks easily and capable of meeting deadlines, adept in evaluating end-user requirements and custom designing solutions. Possess excellent interpersonal communications and organizational skills. # TECHNICAL SKILLSET: Firewall Configuring and troubleshooting on Palo Alto, Checkpoint, Cisco ASA, FortiGate firewalls. Configuration of Security policies, Natting, Routing.Configuring IPSEC VPN with Palo Alto, Checkpoint Gateway. Global Protect,Running TCP Dump Routing and Switching Configuring and troubleshooting EIGRP, OSPF, BGP VLAN, STP, HSRP, VRRP, Ether Channel Nexus Cisco Nexus (7K, 5K, 2K, fabric extenders FEX, VPC, VDC) Load Balancer Image upgradation and hot fix, UCS Backup, Implementing and troubleshooting of VIP, Pool Member, Node, Persistence, SNAT, Load balancing Algorithms, SSL offloading, Health Monitors, HA, Profiles, TCP Dump Cisco Viptela SDWAN vManage, vSmart and vEdge overlay Mgmt, HUB and spoke, Full mesh topology and custom topology, app ware routing, Qos. Features & Services Infoblox, DHCP, NAT, PAT, HTTP, SNMP, SYSLOG, NTP, TFTP and FTP Management, Net flow, SPAN, RSPAN. #Network Equipment Hands-On: Firewalls: Checkpoint: GAIA R80.10, R77.30, R75, IPSO, CP 5000 Series, 5100, 5900, 5545, VSX 21700, IP290 Appliances. Palo Alto: PA 5260, 5060, 3020,7050, PAN-OS 7.1, 8.1 Panorama 8.0 FortiGate: 500D, 600D, 100E, 200E, 60E-POE, 280D-POE,60E, 90E Appliances. Cisco: ASA 5510, 5515 Appliances. Cluster XL, VRRP High Availability, IPS Blades, Content Filtering, IPSEC VPN, Global Protect SDWAN: Cisco Viptela, v18.4, vManage, vSmart, vBond and vEdges. Proxy: Basic Knowledge of Zscaler Cloud v 5.6.Managed Content Filtering Load Balancer: F5 LTM (BIG-IP), F5 i5800 LTM Switching: Cisco Nexus (7K, 5K, 2K, fabric extenders FEX, VPC, VDC), HP and Aruba Switches,C2960, C2970, Catalyst 3750, 4500, 6500 series, C2950/C2960/C2970/C3750/C4500/C6500 series. Forti Switch 248D. Routing: Cisco routers 7600/1004/880/1800 series. Endpoint Security: McAfee EPO AV management. Network Monitoring Application: Nagios, Spectrum. Ticketing Tool: Service-now, Remedy (Incident, Change, Request and Problem Management). DNS/DHCP/IP Management: Infoblox, Solarwinds Wireless Network: Basic understanding and troubleshooting on Cisco, Aruba, Motorola Wireless Controllers and APs. Windows Platform : Servers and Desktop # Synopsis of Work Experience: Duration 04th August 2019 - Till date Company Atos Global IT Solutions and Services Private Limited, Pune Position Senior Network and Security Specialist NOC (Sr. Consultant - Tier3 Team Lead) Role Level 3 (Team Lead) Technologies: F5LTM, Switching, Nexus, Routing, Cisco ISE, Viptela SDWAN, Firewalls Responsibilities: Working as a Team Lead L3 (Network & Security) in Managed Services for providing Network & Security Support for customer. Implement network security design standards. Troubleshoot issues like P1 and P2 tickets generated by user for Network and Security Firmware up gradation on firewalls Checkpoint, Fortinet, Palo Alto and ASA to keep it updated. Hands on experience on configuring fresh Checkpoint/Fortinet firewalls. Manage rule -base, policy packages and document the changes. Responsible to manage any threats discovered by SIEM team and apply best practices/patches recommended by vendors. Lead implementation for any new network security updates, Planned Activities and change Management. Manage tickets with Checkpoint, Cisco, Fortinet firewall vendors. High Availability: Active /Standby Failover, Active/Active Failover, State Full Failover. Implementing Virtual Firewall Security Context Implementing new service request related to F5 and Palo alto firewall. Configure VIP creation, SSL Certificate import and installation, remediation and troubleshooting on F5 LTM box. Ability to take initiative and ownership of incidents from reporting to resolution. Ability to understand business impact. Experience in leading teams and providing guidance to fellow employee. Network security documentation, review and periodic updates. Assist on Windows Platform related issues. Duration 04th January 2016 - 28 th July 2019 Company Mphasis Ltd, Pune Position Lead Infrastructure Engineer Role Lead Infrastructure Engineer Technologies: Checkpoint Firewall, FortiGate Firewalls, Zscaler Cloud Proxy, Switching. Responsibilities: Managing Checkpoint, FortiGate, Cisco Firewalls and Zscaler Cloud Proxy at client locations. Looking after the Client Network Security Infrastructure from offshore and provide 24/7 BAU Services by providing technical support for managed security services, infrastructure, and management. Performing change management like Firewall rules/policies, IOS version upgrades/hotfixes. Configured, troubleshoot and upgrade Firewalls for manage clients which included network resource access, software or hardware problems. Manage firewall/security systems by establishing and enforcing policies, defining and monitoring access. VPN troubleshooting, configuration and providing access for remote offices/users. Troubleshoot network and resource access related Firewall and Proxy issues. Managing and monitoring McAfee EPO AV management for Windows Servers 2015 and 5000 client systems. Monitoring vulnerabilities and taking actions for removing from Network and engaging other technical teams for resolution. Provided support to end-users, performed troubleshooting, and resolved network and software issues. Handling P1, P2 Incidents related to Firewalls, Switches, Servers and Proxies and Co-ordinating with other technical teams for various issues. Good understanding of ITIL process, Incident, Change, Request and Problem management. Interfaced with vendors and service providers ensuring that hardware or software problems were dealt with efficiently and effectively, with minimal downtime. Monitor systems, networks, and send assessment reports from time to time to the Clients. Work closely with colleagues to meet team goals and improve processes and practices. Duration Sept 2006 - Dec 2015 Company Delcam Consulting and Technology Services Pvt. Ltd. (Autodesk Ltd.) Pune, MH. Position Network and Systems Administrator Role Network and Systems Administrator Technologies: Cisco ASA Firewalls, FortiGate Firewalls, Switching, Routing. Responsibilities: Managed the Inhouse network infrastructure of the organization. Manage the day to day IT operations and responsible for keeping the network operational Configuration and management of Cisco Routers and Switches, Wireless Access points. Implementation, Configuration and troubleshooting of multi-vendor Firewalls Cisco ASA, FortiGate UTM. Managing Cisco ASA 5510, and Fort iGATE UTM Firewalls and Traffic Filtering using IPS/IDS, content filtering, Policy Implementation and ACL, intrusion/virus protection at Gateway level. Looking after the commercial aspect of Network Infrastructure and managing Hardware AMC Vendors, ISP, Antivirus, Vendor management, Security Access Door and CCTV management. Monitor systems, networks, and send assessment reports from time to time to the Management. Windows Server 2008 Management with ADS, DHCP, DNS, WSUS configuration. Backup management using Symantec Backup Exec for various Departments within organization and Polycom Video Conferencing. # IT Networking and Security Certifications: PCNSE: Palo Alto Networks Certified Network Security Engineer Certified Cisco ISE Specialist: Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Certified Cisco SDWAN Specialist: Implementing Cisco SD-WAN Solutions (300-415 ENSDWI) Certified Zscaler Specialist : Zscaler Zero Trust Certified Associate (ZTCA) Certified AWS Cloud Certification: AWS Certified Cloud Practitioner Certified CCNP Routing and Switching: Cisco Certified Network Professional Certified MCSE : Completed Microsoft Certified Systems Engineer on Windows Server Certified # Academia : B.Sc. Computer Science (Full-Time): From Amravati University, Maharashtra. #Personal Details : Permanent Address : Flat no 706, Royal Residency, Pimpri Waghere, Morwadi, Pimpri, Pune Date of Birth: 26-04-1981 Gender: Male Marital Status: Married Fluency : English, Hindi, and Marathi. Passport: Yes # Declaration : I hereby declare that the above written particulars are true to the best of my knowledge and belief. ASHISH R. GAWANDE