Khan Hashmat Ali

Software Engineer

Mumbai, Maharashtra, India12 yrs 2 mos experience

Highly Stable

Key Highlights

Over 10 years of experience in Network and Security Consulting.
Led a team of 8+ experts in implementing security solutions.
Expert in Firewall technologies and Network Security management.

Stackforce AI infers this person is a Cybersecurity professional with extensive experience in Network Security and Consulting.

Contact

Skills

Core Skills

Network SecurityProject ManagementPre-salesNetwork Engineering

Other Skills

Checkpoint Security solutionAPT solutionThreat EmulationThreat ExtractionEDR solutionPOCSplunkDocumentationNetwork analysisNetwork Security designsCheckpoint FirewallPalo Alto FirewallNetwork designsCisco FirepowerBOM Creation

About

• Passionate, diligent, and focused Principal Lead Engineer with more than 10 years of working experience in Network and Security Consulting, Design, Configuration and Troubleshooting • Managed a team of 8+ Network security experts to Implement and upgrade the Stock exchange and multiple Banking/Enterprise environment • Well-versed in the handling of enterprise project delivery, implantation, operations, migration and with experience in network, and data security management for the large-scale, complex organization • Firewall technologies: CheckPoint, Palo Alto, Cisco ASA • Zero Trust/Micro-segmentation: Guardicore/Akamai • Unified Threat Management: SOPHOS UTM • APT Solution/Sandbox Solution • SIEM: Splunk • Pre-sales, doing POC and Creating BOM, HLD, LLD • Project Management and Leadership

Experience

12 yrs 2 mos

Total Experience

2 yrs 1 mo

Average Tenure

1 yr 6 mos

Current Experience

Cloudflare

Solutions Engineer @ Cloudflare

Nov 2024 – Present · 1 yr 6 mos · Mumbai, Maharashtra, India · On-site

Qos technology

Principal Lead Engineer

Dec 2017 – Nov 2024 · 6 yrs 11 mos · Mumbai Area, India

Migration of Network Security OEM (ASA, Juniper, and Fortinet) into a checkpoint Security solution
Design and implantation of Checkpoint APT solution (Threat Emulation and Threat Extraction)
Design and implication of CheckPoint EDR solution
Upgrdation of Checkpoint solution to the latest and stable Checkpoint solution
POC/POV of CheckPoint and Splunk solution
Documentation: creating process documentation and Knowledge sharing and training with offshore resources.
Managing and maintaining multiple projects and major accounts and sign-off
Support customers with network analysis and network Security designs.

Checkpoint Security solutionAPT solutionThreat EmulationThreat ExtractionEDR solutionPOC+6

Bt

Network Security Analyst

Dec 2016 – Dec 2017 · 1 yr · Gurgaon, India

Working for British Telecom dealing with Client as Security Implementation Engineer.
New build - Setting up of a new firewall for various stores located for Dixons car-phone stores located all over the UK. The firewall setup involves Checkpoint and Palo Alto Firewall’s
Transition- Takeover of Management and Maintenance of equipment. In summary, means bring various types of devices under BT management.
Support customer with network analysis, network designs.
Implementation changes related to connectivity and troubleshooting issues
Upgrading checkpoint GAIA firewall upgrades as well as Palo Alto Firewall.
Upgrading checkpoint VSX Gateway under Provider One.
Integrating multiple vendors Firewall with Skybox Security and reporting tool.
Monitoring and troubleshooting Nagios Alert,
Documentation: creating process documentation and Knowledge sharing with the offshore resources

Checkpoint FirewallPalo Alto FirewallNetwork analysisNetwork designsDocumentationNetwork Security

Tech data

Solution Associate

Mar 2016 – Dec 2016 · 9 mos · Gurgaon

Working for TECH DATA dealing with Reseller and Client as Pre-sales Engineer
Doing POV/POC for the Cisco Firepower (ASA-X series with AMP, URL, and NGIPS) Device.
Customer Requirement Gathering
Solution Creation and presentations
Bill of Materials ( BOM) Creation using Cisco CCW
Support customer with network analysis, network designs.
Understanding the customer needs, doing requirement analysis & providing them
Techno-commercial solutions according to their business requirements
Conducting product presentations, Demos for the customer for proposed solution.
Suggesting various Cisco Router, Switch, ASA, and Firepower depending upon customer environment.
Helping sales team and suggesting Devices as per the customer needs like (ESA, WSA, ISE, Router, Switch)

Cisco FirepowerBOM CreationNetwork analysisSolution CreationPre-sales

Sophos

Network & Security Engineer

Mar 2015 – Feb 2016 · 11 mos · Greater Ahmedabad Area

Helping partners with configuration of the UTM as per network security architecture of the client
Configuring and troubleshooting Site to Site VPN between Sophos to Sophos as well as between from Sophos to other network devices( Cisco ASA, Palo Alto, Soniwall)
Configuring and troubleshooting IPSEC and SSL Remote access VPN's
Configure and troubleshoot User level authentication, integration with Active Directory, Radius authentication and Single Sign On authentication.
Configure and troubleshoot internet access policies, web application and content filtering, bandwidth policies and surfing quota policies.
Configuration and troubleshooting of Remote Ethernet Device (RED) for branch office to main office connectivity.
Configuration and troubleshooting of high availability between Sophos

UTM ConfigurationVPN ConfigurationNetwork Security ArchitectureNetwork Security

Allied corporation

NETWORK ENGINEER

Jan 2014 – Feb 2015 · 1 yr 1 mo · Mumbai Metropolitan Region

Main responsibility is network support related to data and security infrastructure.
Participate with vendors in resolving critical network issues.
Network documentation including L2 and L3 drawings.
Managing LAN environment having over 10 L2& L3 Switches.
Configuring and troubleshooting of switching technologies like Spanning Tree Protocols (RSTP, PVRST, and MSTP), VTP Domains, Inter VLAN Routing, HSRP, and Etherchannels.
Extensive use of OSPF and sometime BGP routing protocols.
Device configuration standardization as per defined security policies.
Transition of new clients into Airtel Network.
Policy Changes on Cisco ASA.
Configuring firewalls as a failover pair (Active/Standby) as well as configuring Active/Active failover on multiple context firewalls.
Setting up SSL VPNs for corporate users/vendors.
Setting up IPSEC VPN tunnels between two sites and its business partners/vendors.

Network supportLAN managementSwitching technologiesNetwork Engineering

Velocis systems private limited

Network Trainee Engineer

Aug 2013 – Jan 2014 · 5 mos · Mumbai Metropolitan Region

Operational Responsibilities
Main responsibility is network support related to Hardware and Physical Connection between the Networking devices
LAN/WAN
Configuring LAN environment having 2 to 3 L2 & L3 Switches and 1 to 2 Routers
Configuring and troubleshooting of switching technologies like Spanning Tree Protocols (RSTP, PVRST, MSTP), VTP Domains, Inter VLAN Routing, HSRP, Etherchannels.
Extensive use of Default route or static Routes pointing towards the ISP connection
Device configuration standardization as per defined security policies.

LAN/WAN ConfigurationSwitching technologies