Shampad G

Implement, manage and troubleshoot Azure/AWS hybrid network in a global enterprise network . Led end-to-end migration of a hybrid global infrastructure (on-prem + AWS workloads) into Azure environment managed via Palo Alto Strata Cloud Manager. Configured and deployed CrowdStrike Falcon agents across 5,000+ endpoints (Windows, Linux, macOS) in a hybrid AWS/On-Prem environment. Investigated and responded to real-time threats using Falcon Insight EDR, threat intelligence, and MITRE ATT&CK mappings. Designed and implemented Netskope Private Access (NPA) and Cloud Firewall policies to secure traffic between cloud workloads and on-prem resources. Conducted threat modeling (STRIDE, DREAD) across cloud workloads and microservices, identifying misconfiguration risks and providing mitigation strategies in design and development phases. Designed and implemented Akamai,Imperva, CloudFront, Cloudflare WAF policies tailored to the platform’s specific security requirements, ensuring robust protection against SQL injection, cross-site scripting, and other common web threats. Collaborated with Blue Team and engineering to develop detection rules and response workflows based on application behavior and AWS log telemetry (CloudTrail, GuardDuty, VPC flow logs). Ensure secured web traffic by enabling WAF in AWS/Azure/FTD Firewall and Application Gateways. Palo Alto firewalls are centrally managed via Panorama. Analyze and deployed UTM i.e Threat prevention (Anti-Spyware, Antivirus, Vulnerability protection), Data filtering, Anti-DDoS, URL filtering, Palo Alto's APP-ID to enable application-based traffic inspection in 800,7K series firewalls. Configured Google Cloud Armor (GCP) and Firewall rules to protect web applications from DDoS attacks, ensuring secure access to internal services. Implemented and maintained security controls in Azure, including Azure AD, IAM, Azure Key Vault, and Azure Policy. Deploy and troubleshoot various IPSEC/DMVPN tunnels in ASA-VM and express route issues.

• Deployed, configure and implemented Cisco Firepower Thread defense-FTD in client’s large scale enterprise Bio-tech environment . • Centrally managed all the LCE cisco FTD firewalls via Cisco Firepower Management Center -FMC. • Generated log reports in FMC on daily basis for various geo locations to analyze the traffic hitting “any/any” rules . • Created script in Shell/python to nslookup in the log reports. • Created access-control policies based on the generated log reports. • Centrally managed all the Palo Alto firewalls via Panorama . • Based on traffic pattern, business requirements, whitelisting of URLs were created and URL-filtering were implemented in Palo Alto firewalls via Panorama. • Configured and troubleshoot various technologies including MPLS (L2, L3 VPNs), BGP, STP, VTP, VLANs, PBR, ACLs, and NAT, more particularly for key client networks. • Managed Linux and Windows virtual servers on AWS EC2 and created VMs in Azure/AWS environment when required. • Monitored the client’s global network via Solarwinds, Nagios and cacti . • Update and resolve issues, create change request via ServiceNow Managing tool. • Administered the wifi network WLCs,APs via Aruba Clearpass policy manager. Ensured thorough network documentation, including maintaining each account's network matrix, backup configurations and network diagrams

• Deployed, Configured and upgraded firewalls for managed client’s global network via Palo Alto’s centralized management platform Panorama . • Implemented App-ID, URL filtering, threat prevention and wildfire subscription on PAN OS . • Created and modified various access polices to allow vpn ports for certain services and applications in Palo alto via Panorama in various geographical regions. • Actively Monitor, analyze and capture logs in Palo Alto to identify the root cause and resolution of the critical network incident for client’s global network. • Created custom report on the cpu processor history of the firewall analyze the traffic in management and data plane. Deployed and administered via Clearpass Policy Manager for 802.1x authentication on wired and wireless networks. Deployed and administered Clearpass Onboard and Guest solutions. Successfully upgraded the all wireless Cisco/Aruba access points and Airwave controllers to 8.2 . Designed and configured switches , routers , wireless access points and controllers for new sites and branch offices as created network traffic flow diagram in Visio . Designed and configured switches , routers , wireless access points and controllers for new sites and branch offices as created network traffic flow diagram in Visio . Configured and implemented NAT, SVS (site-to-site) vpn client request in Global Protect and Palo Alto and also troubleshoot various SVS connection issues within our SLAs. • Implemented , upgrade and modified virtual servers, pool members and irules in BIG IP F5 LTM/GTM. • Troubleshoot and Performed health checks on F5 LTM/GTM load balancers and monitored the status of the application servers. • Create filters like Change request, service request and incident request on ServiceNow to promptly resolve the tickets. Configured and troubleshoot issues related to VLAN, inter-VLAN and STP protocols. IPv4/v6,CDP,OSPF,BGP,EIGRP,VPN,Frame Relay, Wireless LAN and WAN.

Designing and migrating the entire state network with up-to-date state of art equipment to meet the latest security standards