avishek raha CISSP

Associate Consultant

Kolkata, West Bengal, India18 yrs 10 mos experience
Most Likely To SwitchHighly Stable

Key Highlights

  • 19+ years in Cybersecurity and Network Architecture.
  • Expert in OT security architecture and frameworks.
  • Proven track record in global enterprise security transformations.
Stackforce AI infers this person is a Cybersecurity Architect specializing in Operational Technology and Network Security.

Contact

Skills

Core Skills

Ot/ics SecurityNetwork SecurityCompliance / GrcCloud Security

Other Skills

CISCO SDA fabricmicro segmentationIEC 62443GAP analysisCheckpoint firewallAzure cloudCisco ISEOSPFNetscoutCDNDNSProxyWAFNIST frameworkSSL certificate automation

About

CISSP-certified Cybersecurity and Network Architect with 19+ years of experience designing and securing enterprise and industrial environments. Specialized in Operational Technology (OT) security architecture, network segmentation, and industrial cybersecurity frameworks including IEC 62443 and NIST SP 800-82. Proven expertise in designing secure OT/IT convergence architectures, implementing micro-segmentation, Zero Trust models, and secure remote access for critical infrastructure and manufacturing environments. Experienced in leading security architecture, risk assessments, and security transformation programs for global enterprises across pharma, manufacturing, telecom, and retail sectors. Currently focused on OT security strategy, industrial network segmentation, and cyber risk assessments aligned with international standards. Seeking Senior OT Security Architect / Industrial Cybersecurity Leadership roles with global organizations offering hybrid or remote working environments. ________________________________________ OT/ICS Security IEC 62443, NIST 800-82, Purdue Model, ISA/IEC-62443-4-2, Zone & Conduit Design, OT Risk & GAP Analysis, Armis, Cisco SXP Network Security Palo Alto (NGFW, Prisma), Fortinet, Checkpoint, Cisco ISE (NAC), Zero Trust, Micro-segmentation, VPN (IPSec/SSL), F5 LTM/ASM Cloud Security Azure Security (AZ-500), CNAPP, NSG, Azure Firewall, Traffic Manager, S2S VPN, Cloudflare WAF, CASB SIEM / SOC Microsoft Sentinel, Splunk, Microsoft E5 Security Suite, DLP, Endpoint Security, Email Security Network Infra Cisco Nexus (9k/7k/5k), Cisco ACI, SD-WAN (Fortinet), BGP, OSPF, EIGRP, QoS, Cisco Meraki Wireless Compliance / GRC NIST CSF, IEC 62443 SL2, Risk Assessment, Security Architecture Review, Vendor Security Assessment Automation & Tools Terraform (IaC), Python (Network Automation), Wireshark, SolarWinds, ManageEngine, Bluecat DNS, Netreo

Experience

18 yrs 10 mos
Total Experience
3 yrs 1 mo
Average Tenure
4 yrs 7 mos
Current Experience

Tata consultancy services

Associate Consultant

Sep 2021Present · 4 yrs 7 mos · Greater Kolkata Area

  • Working as Cyber Security consultant for various Projects:
  • Working for an eminent Consumer goods client for designing Network segmentation using CISCO SDA fabric and micro segmentation on OT world aligning the IEC 62443 standard Purdue model.
  • worked as a core team member for Ingress(CDN/DNS/Proxy/load balancer/WAF) solution design and implementation for multiple customers
  • Worked as COE member for CNAPP solution selection and deployment for customer
  • Worked as a GRC resource for GAP analysis(in NIST framework) for SAAS applications for Customer
  • Deploying Checkpoint firewall in Azure cloud
  • Deploying Cisco ISE distributed architecture for guest authentication solution
  • Deploying OSPF to migrate from static routing to dynamic routing infra for Checkpoint firewall
  • Solution for Netscout design and implementation
CISCO SDA fabricmicro segmentationIEC 62443GAP analysisCheckpoint firewallAzure cloud+5

Cognizant

2 roles

Manager

Promoted

Sep 2015Jul 2021 · 5 yrs 10 mos · Greater Kolkata Area

Associate operation manger

Sep 2015Nov 2019 · 4 yrs 2 mos · Greater Kolkata Area

  • ROLE: Associate Operation Manager
  • Working as Associate Operation Manager for Client Stewart.
  •  SPOC for all technical issues which covers Data center.
  •  Did Automation for SSL certificate expiration on F5 LTM single handedly.
  •  Analyzed the implemented DC migration and suggested that Orphan port traffic needs to be isolated.
  •  Code upgrade for F5, Netscaler, Cisco ASA, Nexus 7010, switches.
  •  Understood client requirement for AIM+ application infra and implemented the required F5 and Firewall
  • changes.
SSL certificate automationData center migrationF5NetscalerCisco ASANexus 7010+1

Accenture

Team Lead

May 2015Aug 2015 · 3 mos · Greater Kolkata Area

  • • Worked as a process lead.

Broadcom

Network engineer,staff

Feb 2014Apr 2015 · 1 yr 2 mos · Bangalore

  • ROLE: Network Engineer
  • As a Network engineer responsible for all network related daily support and implementation activities which includes as follows:
  • SPOC for all network related issues mainly for INDIA sites. Supporting across the world all Broadcom sites by Follow The Sun Model.
  • IP addressing, Vlan, Security policy design, planning, implementation for sites as well as internal LAB users.
  • Migration from old network devices to new network devices.
  • Migration, Upgrade, Cost estimation, ISP negotiation, follow-up for Internet and MPLS links.
  • Making customize solution for LAB users. Documenting the design, implement and support it.
  • Co-ordination with system integrator service providers, OEMS for best product quotes and after sales service.
  • Daily basis network related issues coming through Remedy, mail, call.
  • Wireless Configuration, Troubleshooting.
  • Managing LAN through Omni center Alert Monitoring Tool.
  • Using Cisco LMS for Device addition, deletion, configuration and backup management.
  • Security policy implementation, packet captures on Content Firewall like PAL ALTO.
  • Cisco ASA implementation, Implement security policy, troubleshooting packet capture.
  • POC for new network devices and solution. Research and implement new technologies like ISSU on 4510 switch.
  • Data Center related daily activities like configuration and troubleshooting for Nexus switches, planning for power shutdown of DC and related maintenance activities.
  • QOS, latency, slowness related issues over WAN.
  • Looking after Finance and Operation related issues regarding network equipment Procurement, Ordering etc.
Network supportIP addressingVLANSecurity policy designMigrationNetwork Security

At&t

tier 3 network engineer

May 2010Feb 2014 · 3 yrs 9 mos · Bangalore

  • ROLE: Tier 3 Network Engineer
  • CLIENT: IBM GLOBAL
  • Responsible for handing PROBLEM tickets for VPN, ROUTING, BANDWIDTH related issues. Issues which involved
  • Configuration of Routing (STATIC, PBR (Policy Based Routed), OSPF, GRE), Natting, Security policies in Cisco Router, Switches, ASA, Pix, FWSM, Checkpoint as required.
  • Putting TCPDUMP on NOKIA, Packet capture in CISCO ASA, FWSM, PIX, Routers, Switches (L3 switches). Identify and fixing the issue and solve it for both Security and routing, switching issues.
  • Administration of AIX boxes which gives SOCKS access to customer
  • Device replacement activity which includes IOS upgrade, module replacement, configuration of new device and testing the connectivity after replacement.
  • Bandwidth related issues which involves analyzing utilization, partition, proper classification in Blue coat packet shaper
  • VPN related issues (site to site, SSL, Client to Site) which includes frequent disconnection, site to site tunnel
  • Not coming up, Slowness, Applications access issues
  • QOS related issues like proper class of service value matched, hits for any particular application.
  • BGP Routing Implementation and troubleshooting which includes BGP peering issues, Route-advertisement issues, BGP Community configuration issues.
  • Firewall issues like failover, rules related issues
VPNRoutingBandwidth analysisFirewall configurationNetwork Security

Wipro

System Integration engineer

Feb 2007May 2010 · 3 yrs 3 mos · Bangaon, West Bengal, India

  • Worked on several Projects starting from banking clients to Government sectors. Mentioning Major projects as below
  • ROLE: Senior project Engineer (System Integrator)
  • Worked on Multiple projects spanning INDIAN and Foreign Client which includes
  •  Configured BGP at Cisco 3845 Router for both DC and DR.
  •  Configured 3845 router for DR Site and 3845 Router for DC Sites for Brach routers at remote site by using BGP
  • AS Path Attribute.
  •  Configured Cisco 2811 Router for ISDN as Backup.
  •  Configured EIGRP between Routers and Cisco3750 Layer-3 switch installed
  •  Conducted site survey
  •  Installation, implementation of network equipment.
  •  Designing IP addressed scheme,VLAN for LAN, based on Departments
  •  Configuration of Wired LAN and Wireless LAN which includes Cisco 4500, CE 500, and CE2960 Switches,
  • Wireless LAN Controller (Cisco 4500 series).
  •  Implementation of Inter-VLAN routing, RSTP, HSRP.
  •  Troubleshooting the network
  •  Making of LLD Documentation
BGPEIGRPLAN/WLAN configurationDocumentationNetwork Security

Education

West Bengal University of Technology, Kolkata

B.Tech — Information technology

Jan 2002Jan 2006

Sodepur high school

higher secondary — science

Jan 1995Jan 2001

Stackforce found 100+ more professionals with Ot/ics Security & Network Security

Explore similar profiles based on matching skills and experience