SUMMARY

• Perform day today firewall activities like Administration, Management, monitoring and troubleshooting.
• Follow client change management process for day today firewall tasks.
• Configuration and troubleshooting of Site - to-Site VPN and remote access VPN.
• Act as Liaison with various internal teams and third-party vendors for firewall related activities
• Manage, deploy and support firewall Checkpoint Gaia, VSX, Palo Alto, Cisco ASA
• Implement and configure Checkpoint firewall including R80 and previous version of checkpoint firewall OS
• Hands on Experience in configuring Cisco routers and switches for packet routing and switching and ASA.
• Implement and monitored Firewall security policy with Log Logic
• Manage URL Filtering policies for Checkpoint, Palo Alto firewalls, Sourcefire
• Administer and Configure URL filtering on Bluecoat Proxy
• Configure and Monitor Sourcefire IPS for Malware and Intrusions on the network
• Configure Sourcefire IPS Access Control Policies to whitelist IPS or Blacklist suspicious (Malicious) IPs
• Well organized, self-starter, quick learner, self-motivated, team player with analytical, technical and communication skills
• Ability to multitask and work in a fast-paced environment
• Eagerness to learn and continually expand on skillset

TECHNICAL SKILLS

Operating Systems: Check Point NGX R65, R75.20, R75.45 (Gaia), R76, R77, R80, Cisco IOS 10.3 - 12.4Windows (XP- 8.1), Windows Server (2008, 2012), Linux/Unix familiarity (CLI skills), Static & Dynamic IP Addressing, NAT/PAT, Junos sslvpn, Junos OS 10.4, 11.4, 12.1, PAN OS 6.1-8

Routers/Switches: Cisco 1600, 1700, 1800, 2500, 2600, 3600, 4000, 6000, 7206, srx 3600, 240, 5400

Protocols: Static routing, RIPV2, EIGRP, OSPF, STP, RSTP, VLAN, Router-on-the-Stick, TCP/IP, SNMP, QoS, SMTP, IP addressing, Subnetting, CheckPoint Site-to-Site VPN, VLSM, VTP, VPN, CISCO ACL, DHCP, OSI

PROFESSIONAL EXPERIENCE

Confidential, Irving, Tx

Product Management Engineer

Responsibilities:

• Assist with launch various Versa Security products for various VES customer
• Prepare technical documents and contribute to Whitepapers, standards and comply policy
• Liaison with Product Management, Product Engineering, IT, ATG and MSSA (Managed Services for Security) and help launch offerings to cover some of the whitespaces
• Manage Checkpoint physical and virtual high availability environments

Confidential, Fort Worth, Tx

Network Security Engineer

Responsibilities:

• Implement, upgrade, administer, deploy Check Point Gaia R 7 .20 Firewalls & network Management
• Administer and Configure Zscaler cloud web proxies, URL filtering, application access
• Manage Checkpoint physical and virtual high availability environments
• Updating Checkpoint R77.30 devices with the latest hot fixes.
• Configure IP-SEC VPN, and SSL-VPN (Mobile Access) on Check Point Gaia based on user traffics that needs to be encrypted using Checkpoint.
• Testing and qualifying security devices as well as pre-deployment checkouts
• Vulnerability Assessment testing on security devices
• Tufin Securetrack and SecureChange Implementation and administration, monitoring and optimizing the firewalls
• Prepare technical documents for staff training purposes

Confidential, Dallas, TX

Infrastructure Security Engineer

Responsibilities:

• Manage, Monitor and audit Security devices with HP automation, Splunk and Service Now Ticketing, SecureCrt
• Configure Palo Alto PAN OS 6.1 through 7.1, Data filtering, Policy control, Logging & Reporting (PA-5k series) as well as a centralized management system (Panorama) to manage large scale firewall deployments.
• Created new vlan interfaces, implemented device group and template changes with the panorama manager
• Fine tune security profiles including anti-virus, anti-spam, vulnerability assessment policies with panorama
• Performed regular dynamic updates, create and troubleshoot global protect and IPsec VPN tunnels for third party and internal users
• Implement and administration of Check Point Gaia R7 .30 Firewalls & network Management
• Administer and Configure web access, URL filtering, application access, sock and plug access on Bluecoat Proxy
• Configure and fine tune Cisco firepower for network and host discovery, virus detection, cloud malware lookup
• Update Cisco appliance with the latest hotfixes
• Monitor and mitigate intrusions with firepower
• Manage Checkpoint physical and Virtual firewalls ClusterXL and VRRP environments
• Updating Checkpoint R77.30 devices with the latest hot fixes.
• Manage Juniper Netscreen OS and SRX firewalls via gui and cli
• Upgraded the customer Juniper OS srx firewalls from version 11.4 to 12.1
• Managed remote users via Juniper SSLVPN and Junos pulse client
• Configure IP-SEC VPN, and SSL-VPN (Mobile Access) on Check Point Gaia based on user traffics that needs to be encrypted using Checkpoint.

Confidential, Philadelphia, PA

Perimeter Security Engineer

Responsibilities:

• Manage, Monitor and audit Security devices with Tufin Securetrack, Splunk and CA spectrum
• Implement and administration of Check Point Gaia R7 Firewalls & network Management
• Manage Checkpoint physical and Virtual firewalls ClusterXL and VRRP environments
• Updating Checkpoint R77.30 devices with the latest hot fixes.
• Manage the firewall deployment, rules migrations, and firewall administration.
• Configure, administer, and document firewall Network subnet infrastructure, working with Gaia Checkpoint firewalls, and maintaining access policies for remote users.
• Configure IP-SEC VPN, and SSL-VPN (Mobile Access) on Check Point Gaia based on user traffics that needs to be encrypted using Checkpoint.
• Configure Palo Alto PAN OS 6.1 through 7.1, Data filtering, Policy control, Logging & Reporting (PA-5k series) as well as a centralized management system (Panorama) to manage large scale firewall deployments.

Confidential, NJ

Security Engineer

Responsibilities:

• Implement and administration of Check Point Gaia R77.30 Firewalls & network Management
• Manage Checkpoint physical and Virtual firewalls ClusterXL and VRRP environments
• Updating Checkpoint R77.20 devices with the latest hot fixes.
• Configure IPsec VPNs tunnels and B2BVPN on Checkpoint for the customers
• Configure Sourcefire for network and host discovery
• Monitor and mitigate intrusions with Sourcefire
• Manage the firewall deployment, rules migrations, and firewall administration.
• Configure, administer, and document firewall Network subnet infrastructure, working with Gaia Checkpoint firewalls, and maintaining access policies for remote users.
• Configure IP-SEC VPN, and SSL-VPN (Mobile Access) on Check Point Gaia based on user traffics that needs to be
• Configure Palo Alto PAN OS 6.1 through 7.1, Data filtering, Policy control, Logging & Reporting (PA-5k series) as well as a centralized management system (Panorama) to manage large scale firewall deployments.
• Manage the firewall deployment, rules migrations, and firewall administration.

Confidential, Moorestown, NJ

Security Operations Center Engineer

Responsibilities:

• Liaison as a POC between the Security teams and other teams to assist with scheduled maintenance of the security devices.
• Implement pre-approved Firewall connection request and assisted customers to troubleshoot/ resolve issues.
• Configure IPsec VPNs for customers on Checkpoint and Juniper FWs
• Identify/resolve firewall and VPN connectivity issues on 15400 series VSX FW
• Managed Checkpoint Multi-domain Environments (Provider-1, SmartView Tracker, Dashboard, and Monitor, Smart-1)
• Periodic security assessment and audit of firewalls, Cisco router, Cisco switches, VPN devices
• Monitor Health Status of security devices
• Manage URL Filtering policies for Checkpoint, Palo Alto firewalls, Sourcefire
• Configure and Monitor Sourcefire IPS for Malware and Intrusions on the network
• Configure Sourcefire IPS Access Control Policies to whitelist IPS or Blacklist suspicious (Malicious) IPs
• Provide Tier 2 support for the Security Operations Center on all managed devices and supported technologies.
• Create and managed clients roles and access groups using the Juniper SSL client
• Whitelist and Configure URL filtering on Bluecoat Proxy
• Managed Juniper firewalls from both the Command line and GUI (NSM).
• Configured and troubleshoot NAT/PAT issues on Cisco routers.
• Configure and Monitor Sourcefire IPS for Malware and Intrusions on the network
• Troubleshoot & resolved customer security issues in a timely fashion.

Confidential, Atlanta, GA

Network Security Engineer

Responsibilities:

• Work extensively on network security design using Palo Alto Firewall (AppID, URL filtering, Threat, Data Filtering).
• Implement Zone Based Firewalling and Security Rules on the Palo Alto Firewall (PA-200, PA-3k, PA-5k series).
• Configure centralized management system (Panorama) to manage large-scale firewall deployments.
• Create custom applications and assign to security policies.
• Manage URL Filtering policies for Palo Alto firewalls, Blue Coat
• Manage URL Filtering policies for Checkpoint, Palo Alto firewalls, Sourcefire
• Configure and Monitor Sourcefire IPS for Malware and Intrusions on the network
• Configure Sourcefire IPS Access Control Policies to whitelist IPS or Blacklist suspicious (Malicious) IPs
• Deploy Cisco routers and switches and administer network-monitoring services.
• Network monitoring, packet captures, and troubleshooting traffic passing through firewalls via logs.
• Troubleshoot, Monitor and configure checkpoint firewall issues and other smart console applications using CLI.
• Configure and administered security rules and policies to permit and/or deny user traffics based on company security policy.
• Configure Cisco Router (OSPF, EIGRP) for Cisco 2500 series and 3600 series routers