Network Engineer- Firewall

Minimum of 6 - 10 years experience in L3 network Support. Proven ability in learning and upgrading new technologies/technical skills.

Knowledge troubleshooting Checkpoint (R80, R77 Gaia, R75, R70, R65, Provider-1, VSX, SPLAT, Cluster XL, Smart Center Server)

Knowledge in Palo Alto (Pa-500, PA-3k,PA-5k, PA-7k, VSYS and Panorama)

Experience with IPSEC, VPN, and SSL

Perform firewall rule audit and optimization using Tufin, Firemon and Algosec.

Upgrading the code from Pan OS 7.1.X to 8.0.X. Experience working on Panorama M100. Migration from Cisco ASA to PA firewalls.

Palo Alto design and installation (Application filtering, Threat Prevention, Data Filtering).

Configuration and troubleshooting of Site to Site as well as Remote Access VPN on Cisco ASA and Check Point firewalls.

Should have knowledge on Fortinet firewall.

Maintain the Palo Alto Networks solution uptime/availability and provide guidance on architecture changes, upgrades, fixes etc.

Palo Alto Networks XML API integration experience

Knowledge in Installing a Security Gateway, VSX Gateway

Knowledge in email security, and web protocols

Plan Proactive maintenance windows for DR tests, execute corrective action as needed for high business uptime

Extensive knowledge of different security threats and virus detection systems

Strong understanding of core Internet protocols and applications.

Configured and troubleshooting the F5 LTM and APM and providing level 2 support for the customers.

Configuration and troubleshooting F5 LTM and providing level 2 and level 3 support for the customers.

Extensive hands on experience with BIG-IP 5000 and 2000 series.

Allocation and designing appropriate virtual IP for F5 ADC through IPAM InfloBox.

Licensing and provisioning of F5 modules such as LTM, GTM, VCMP (Virtual Cluster Multi Processing).

Extensively worked on code upgrades from v11.5.3 to v11.5.3 and downgrades from 12.0.0 to 11.5.4.

Extensively worked on virtual F5 LTM module on VMware for application testing.

Configured VCMP Host and created VCMP guests for Exchange and ACE migrations.

Created a high availability feature between the VCMP guests for different VCMP hosts.

Extensive knowledge in configuration via CLI (TMSH and advance shell).

Good knowledge on basic iRules scripting and debugging.

Creating custom profiles, health monitors, and also configuring SNAT pools, syslog and SNMP

Implementation of major application services with the iApps templates.

Extensive knowledge and experience regarding F5 BIG-IP LTM VIP configuration with health check.

Extensive knowledge and experience with hosting SSL certificates on F5 platforms.

Experience in managing the load balancers in a high-availability infrastructure.

Solid understanding and experience in managing Data center LAN

Must be able to demonstrate excellent troubleshooting and problem solving skills . Good communication skills

Good understanding (Of L3 Level) of Switching & routing protocols, and products like : H3C Device, Alcatel Lucent DWDM, Checkpoint firewalls, F5 LoadBalacers, IPAM, Netscout Packet Capture and Flow Analyzer

Management of onsite vendors - During implementation activity and day after support.

Escalation point for network implementation issues - Telco, Cabling, and Managed Service Vendor

Analyze/solve application -related problems - Use advanced network troubleshooting techniques required to analyze and solve application-related problems within large geographically dispersed networks as needed.

Analyze/solve advanced Switching/routing problems - Apply advanced network troubleshooting techniques required to analyze and solve protocol routing problems within large geographically dispersed networks.

Analyze/solve application -related problems - Use advanced network troubleshooting techniques required to analyze and solve application-related problems within large geographically dispersed networks as needed.

Configure network switches/VLANs/VTP - Implement features of each communication type in a large network. Implement features of a Layer 2 switch. Implement features of routers and VLANs. Identify differences between end-to-end and local VLANs. Establish guidelines for creating and deleting a VLAN in global mode.

Configure virtual LANS/ trunk protocols - Configure virtual LANS (VLANS) and VLAN trunk protocols in a switched network.

ITIL V3 Foundation Certification is desired