Ajay Kumar Pilla

Client: Microsoft

• Configured routing and security policies on Palo Alto PA-5250, Panorama, FortiGate 200E and Check Point firewalls, including security profiles such as web filtering, anti-spam, IPS and IDS
• Optimized 50+ enterprise firewall policies on Palo Alto, FortiGate, and Check Point platforms to enhance security posture.
• Reduced security incidents through implementation of IPS/IDS, URL filtering, and geo-blocking controls.
• Successfully configured and supported IPsec VPN and SSL VPN connectivity for multiple business-critical applications.
• Monitored intrusions and vulnerabilities; implemented URL filtering and geo-blocking to strengthen defenses against threats. Configured and troubleshot Cisco Layer 2 switching, including STP, BPDU Guard, Root Guard, Loop Guard, BPDU Filter, PortFast, EtherChannel and VTP pruning.
• Configured Nexus 6000/9000, Arista and Juniper MX platforms, including vPC, VLANs, port channels, trunk/access ports, STP/RSTP, BPDU Guard, SVI and ACLs.
• Configured and troubleshot VLANs, SVI, inter-VLAN routing, ACLs and DHCP across Cisco 3750X, 3750, 2960, 3560 and CE500 platforms.
• Worked with static, default, EIGRP, OSPF and BGP routing.
• Configured IPsec site-to-site VPN and SSL VPN for remote access to internal resources.
• Supported network security and cloud migration activities involving AWS connectivity and data-center environments; analyzed traffic using Wireshark.
• Supported cloud migration initiatives involving AWS and Azure environments, ensuring secure connectivity and minimal downtime.
• Executed firewall policy reviews and optimized NAT configurations, ensuring compliance with network security standards.
• Conducted packet-level troubleshooting using Wireshark, reducing incident resolution time.

Client: ICICI Prudential

• Configured and updated security policies, source NAT and destination NAT on Palo Alto, FortiGate, Check Point and Juniper SRX3500 firewalls.
• Facilitated firewall migrations from Juniper to FortiGate and Cisco ASA to Palo Alto, ensuring seamless transition and minimal downtime.
• Managed public and internal DNS record configurations, including A and AAAA records, to enhance network accessibility.
• Configured static NAT, dynamic NAT, NAT overload, PAT, vulnerable IP/domain blocking and geo-blocking.
• Configured and troubleshoot Layer 2 switching, including STP, PortFast, EtherChannel, Loop Guard, BPDU Filter and BPDU Guard.
• Configured Cisco Layer 3 routing, redistribution, static routing and OSPF.
• Configured Nexus 5K/9K switches with vPC, VLANs, port channels, trunk/access ports, STP/RSTP, BPDU Guard, SVI, and ACLs to optimize network performance and security.
• Installed SSL certificates and configured Citrix NetScaler and F5 LTM/GTM for internal load balancing and DNS traffic.
• Supported DR drills, application migrations between production and DR data centers, and server induction/de-induction.
• Performed Cisco switch and firewall OS upgrades and regular configuration backups using TFTP.
• Configured public and internal DNS records, including A and AAAA records.

Client: National informatics data centre, Hyderabad

• Implemented security policies and NAT rules on FortiGate, Check Point and Palo Alto firewalls.
• Monitored and troubleshot network devices, internet, MPLS, and P2P links; coordinated escalations with ISPs to ensure network reliability.
• Built and troubleshooting site-to-site VPN tunnels, including Phase 1/Phase 2 configuration, firewall rules, ACLs and NAT. Performed connectivity troubleshooting using packet captures and TCP pings; supported Active/Standby and Active/Active Palo Alto HA.
• Supported large and complex network security infrastructure and global customer firewall environments.
• Oversaw deployment of firewalls across various network environments., rule migrations, administration and new firewall implementations.
• Implemented measures to block malicious IPs and websites for security. using application and URL filtering.
• Decommissioned Juniper Netscreen VPN firewalls and commissioned Palo Alto firewalls; configured encryption domains.
• Configured Cisco routers 3800/2800 and Catalyst switches including 3560/4500, and supported standalone ASA firewalls.
• Set up access control lists to manage network traffic effectively., NAT rules and IPsec tunnels on Palo Alto; administered Check Point firewall monitoring and troubleshooting. Used Panorama for Palo Alto policy provisioning and FortiManager for FortiGate management.

Client: RMI Systems Pvt Ltd, Bangalore

• Supported firewall administration, routing, switching and monitoring.

• Participated in incident response and network security operations.