Sai Kiran

Skills

Firewalls: Palo Alto, FortiGate, JUNIPER, Checkpoint
Cisco Routers: 1841, 25xx, 26xx, 28xx, 36xx, 37xx, 38xx series
Cisco Switches: Nexus 6000, 9000, C2950, 3560, CE500, SG300, WS-3750 (layer 3)
Others: ASA5540, Juniper SRX3400, FortiGate 2200E & E2200 Series, PA-5220
Operating Systems: Windows 7 and 10/11, Windows Server 2012 R2
Cisco IOS Versions: Nexus 9.3 (8), Catalyst 12.2
Protocols & Technologies: TCP/IP, OSPF, EIGRP, BGP, SDWAN, IPsec, HTTP/HTTPS, SNMP, ICMP, POP3, EIGRP, BGP, DNS, QoS, TSO/ISPF, PoE, VTAM, NTP, DHCP, RIP, VLANs
Security Tools: ForeScout, Firewalls, NAC, VPNs, Splunk Enterprise Security (ES), QRadar SIEM, Splunk Universal Forwarder, QRadar Vulnerability Manager
Security Protocols: IDS/IPS, Firewalls, Network Security Monitoring, Data Loss Prevention (DLP)
Data Analysis & Correlation: Log Management, Event Correlation, Incident Detection, Security Event Analysis
Firewall OS: PAN-OS 8.1, FortiOS 7.4, ASA 9.1(x), Junos 17.3
Cloud Technologies: AWS, Cloud Gateway – VCG, VMware Cloud on AWS (vSphere, vSAN, NSX, and vCenter Server on AWS), Azure Networking
SIEM Tools: Splunk, QRadar
Compliance & Standards: NIST, CIS, ISO 27001, GDPR, HIPAA
Security Operations: Incident Response, Threat Intelligence, Security Monitoring, Log Analysis, Vulnerability Assessment
Other Tools: Wireshark, Nessus, Palo Alto Networks, McAfee, Trend Micro, SolarWinds
Monitoring & Observability: Splunk, Datadog, Grafana, Prometheus
Load Balancers: Citrix NetScaler, F5, NGINX, HA Proxy
Scripting Language: Python (for automation and scripting)

About

• Experienced and result-driven IT Analyst for data, servers, SOC & Networks Operations. Over 12 + years of experience in configurations and troubleshooting of data, inclusive of routers, switches, and firewall technologies
• Expertise in configuring and troubleshooting routers, switches, and firewalls, and proven ability in designing, implementing, and maintaining network security solutions.
• High proficiency in troubleshooting network protocols, including TCP/IP, UDP, IPSEC, HTTP, HTTPS, and routing protocols, and experience in creating observability dashboards and conducting firewall log analysis for proactive network monitoring.
• Proficiency in core networking technologies (LACP, STP, VLAN, MLAG, OSPF, BGP, IGMP, PIM).
• Proficiency in network services (SNMP/Telemetry, Syslog, NTP/PTP, TACACS+/RADIUS).
• Proficient in IT systems and infrastructure management, server administration, network support, and ensuring security compliance.
• Competent in setting up and managing Windows Server with Active Directory and enforcing security policies using Group Policy, and skilled in using deployment tools for Windows 10/11 installation and configuration on workstations.
• Expertise in deploying and managing security technologies, including firewalls, intrusion detection systems, VPNs, and endpoint security solutions, with extensive experience in SOC operations.
• Strong background in Palo Alto firewall management, including dynamic routing, NAT configuration, and packet-level analysis, and proven excellence in root cause analysis for complex problem resolution.
• Experienced in collaborating with cross-functional teams to enhance productivity, efficiency, and reliability, and demonstrated sound judgment in assessing technical risks and prioritizing issues.
• Expert in using load balancers such as F5, NGINX, and HA Proxy for high availability, scalability, and efficient traffic distribution, and extensive experience in managing integrated security systems like cameras, access controls, and Perimeter Intrusion Detection Systems (PIDs).
• Hands-on experience in secure network infrastructure design and deployment in data centers, and proficient in configuring ticketing systems like JIRA and ServiceNow to match organizational workflows, set issue categories, and establish SLAs for timely resolution.
• Led security initiatives with a strong focus on SIEM platforms (Splunk and QRadar), ensuring the effective deployment, configuration, and ongoing management.
• Conducted in-depth analysis of security data and logs to identify potential threats, vulnerabilities, and incidents, enhancing organizational security posture.
• Utilized Splunk and QRadar to provide insights into security operations, improving incident detection, investigation, and resolution processes.
• Optimized and configured SIEM platforms for real-time monitoring, reporting, and alerting, contributing to proactive threat management.
• Collaborated with IT and OT teams to design and implement comprehensive security measures, improving system resilience and incident response times.
• Delivered training and guidance on SIEM best practices and security strategies, enhancing team capabilities and operational security.
• Contributed to a rapid response to security incidents, employing advanced threat intelligence and incident response protocols to mitigate risks.
• Engaging in the planning of network infrastructure, overseeing capacity management, and contributing to procurement activities.
• Establishing and upholding secure configuration standards, firewall policies, and compliance with information security policies to safeguard network resources. Additionally, taking part in security audits for internal business units.
• Overseeing relationships with both internal and external stakeholders, including traders, data centers, third-party vendors, and service providers.
• Ensuring documentation, inventory records, and monitoring systems are kept current and accurate