Nov 2024 – Jun 2025 · 7 mos · Irving, TX · Hybrid

• ● Configured, managed, troubleshoot and optimized firewall policies, rules, and documentation to align with best practices and compliance requirements for Checkpoint firewall admin through Smart Console, Palo Alto (PA 5250/7000) firewalls through Panorama, responsible to co-ordinate with Network Security leading vendors TAC/TAM
• ● Provided technical support for premier security Zscaler proxy solutions, policies, log analysis for Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Source IP Anchoring SIPA, IdP integrations, firewall policies, experience in Zscaler Digital Experience (ZDX), ZTNA, Proxy Auto-Config (PAC) files, Zscaler Client Connector ZCC deployment, App profile,
• Forwarding Profile, Tunnel 1.0 v2.0, Root Cause Analysis for P1/P2 incidents following ITIL process
• ● Developed and maintain troubleshooting skills on all Check Point products and technical knowledge
• ● Experienced creating firewall security rules and configuration, zones, WildFire, User-ID, Global protect VPN in PaloAlto firewalls using Panorama for centralized firewall management, firmware upgrades, high availability (HA) in active active, active passive setup, CLI troubleshooting, traffic flow analysis
• ● Implemented and managed Identity and Access Management (IAM) policies to enforce the principle of least privilege,
• SAML, SCIM, SSO, MFA in Okta, custom IAM roles and policies to grant specific access levels to resources
• ● Monitored network traffic and security events to identify potential threats and vulnerabilities
• ● Experienced in network security designing, implementing, managing security solutions, access controls, ACL list, NAT, Security firewall hardening, SASE design, SaaS, Cloud computing, Networking, NGFW solutions, security architecture, SOC Transformation Technologies, proficient in integrating Zscaler with identity providers for SSO, Okta, MFA
• ZScaler digital experience

Jan 2022 – Dec 2023 · 1 yr 11 mos · Bengaluru, Karnataka, India · On-site

• ● Managed Migration from Legacy Datacenter to AWS Cloud , also responsible for preparation of HLD/LLD of network
• ● Handled overall ZScaler Operations for ZScaler Internet Access (ZIA) /security platforms , troubleshooting high priority incidents
• driving towards resolution within SLA through collaboration with cross functional teams, network NOC Engineers, Internet Service Providers and with both technical , non-technical stakeholders
• ● Offered guidance to organization to implement best security practise as per industry standards for ZScaler and other security platforms
• ● Resolved business impacting issues swiftly within Service Level Agreement with co-ordination from ZScaler TAC/TAM
• ● Specialized in implementation of access list, NAT, routes on NGFW firewall technologies , Cisco ASA, Checkpoint firewalls primarily
• ● Supported Data Centers (DC), Clouds, and IT Infrastructure network security protocols and cybersecurity services, and implementation
• ● Collaborated with key technical and non-technical stakeholders and to acquired CAB approval for risk involved changes
• ● Led technical recovery of services using ITIL processes, incident and alert management, and problem triage, Disaster Recovery ( DR ), multi region availability

Oct 2020 – Jan 2022 · 1 yr 3 mos · Bengaluru, Karnataka, India · Hybrid

• ● Provisioned 500+ devices/Virtual machines like Linux, Load balancer ADC - F5 BIGIP, AVI, Firewall- ASA, Palo Alto, Router- CSR V1000, Switch- Nexus, Windows
• ● Handled customer deliveries for Security and ADC Module to automate firewall and F5 rules/commands
• ● Hands-on experience on Hypervisors ESXi, Proxmox, Nutanix
• ● Knowledge of industry standards and regulations such as ISO 27001, NIST, and GDPR
• ● Commenced monitoring tool OpManager from POC stage to production and deployed various module network devices for monitoring, which eventually resulted in decrease of overall manual work by 90% through reporting and alerts
• ● Provided technical guidance and support to junior security engineers and other IT teams, assisting them in implementing and maintaining security controls in firewalls and ZScaler
• ● Reported issues with solution propositions to superiors based on analysis from OpManager (SIEM plug-in), with over 70% of these solutions being accepted for further developed
• ● Audit all network functional units on security dashboards with the SIEM tool - Splunk

May 2019 – Oct 2020 · 1 yr 5 mos · Bengaluru, Karnataka, India · On-site

• ● Configured firewalls for ENBIA (Enhanced Network Based Internet Access), SRUA / Remote Access SSL configuration for Vodafone ISP
• ● Supported ZScaler (ZIA) Policy Configuration
• ● Implemented Service Improvement Plan to perform Change Request as per the client's requirement within the approved time window.
• ● Hands on experience on MPLS, BGP, Black-hole routing, MC LAG techniques
• ● Packet Capture analysis, RMA and OS upgradation, Configuration and implementation of firewall rules, NAT in Fortigate ,FortiAnalyzer, FortiManager Devices and maintain highly functional, scalable networks/datacenters
• ● Developed security policies and procedures for the organization in accordance with industry standards
• ● Handled customer concerns and escalated major issues to Level 3 Engineers

Jun 2016 – Apr 2019 · 2 yrs 10 mos · Bengaluru, Karnataka, India · On-site

• ● Responsible to provide maintenance and operational support in areas of firewall and network security infrastructure daily basis by managing 800 + firewalls : Cisco ASA & Juniper SRX firewalls, Firepower Threat Defense, SourceFire
• ● Configured and Troubleshooted issues on CISCO ASA firewall 5500 series and 5500-x next generation firewall series, access filtering, firewall OS up gradation, IPSEC ( Site-to-Site S2S ) tunnel creation, SSL Tunnels, syslog-TACACS/ISE configurations, live traffic analysis, policy implementation
• ● Hands-on experience on Infoblox- DNS, F5-LTM
• ● Contributed Quarterly/Monthly Security Audit report and Remediation (STAR TASK)