Dedicated Information Security professional with over 5 years of experience in network access control (NAC). Led NAC deployments and firewall assessments, utilizing Cisco ISE, Aruba ClearPass, and Palo Alto Networks. Proven ability to thrive in independent environments and rapidly adopt new technologies
Overview
1
1
Certification
5
5
years of professional experience
Work History
Senior Security Consultant
EY GDS
Noida
10.2024 - Current
Led security assessments identifying vulnerabilities in client systems, providing tailored guidance on best practices and compliance standards to enhance security readiness.
Firewall Infrastructure & Operations: Successfully executed comprehensive Palo Alto Networks firewall security assessments, policy reviews, and day-to-day operational management to optimize threat protection and rule efficiencies.
Network Access Control (NAC) Engineering: Led the implementation and deployment of Aruba ClearPass NAC solutions, ensuring seamless policy enforcement and network visibility across client enterprise infrastructure.
Conducted architecture reviews and health checks for Cisco ISE environments, delivering optimisation reports and posture enhancements that strengthened client security posture.
Network Security Engineer
SecurView System Pvt. Ltd.
Pune
10.2022 - 09.2024
Configured TACACS+ for central device administration and managed complex authentication/authorization policy sets, utilising protocols including PEAP, EAP-TLS, and MSCHAP to improve access control.
Designed and deployed Cisco ISE across wired, wireless, and VPN environments, integrating network switches, Wireless LAN Controllers (WLCs), and firewalls to enhance AAA services.
Network Profiling & Visibility: Enabled ISE dynamic profiling to achieve real-time visibility and context of all endpoints connected to the enterprise network.
Managed daily VPN operations, configured split tunneling, created user realms, and allocated roles to ensure accurate reporting for client stakeholders.
Network Security (CISCO ISE TAC) Engineer
Capgemini (formerly Altran Technologies )
Gurgaon
04.2021 - 10.2022
Oversaw ISE AAA server management for authentication, authorization, and accounting, maintaining security and compliance standards.
Troubleshooting issues related to ISE, Radius and TACACS configuration on Layer 2, Layer 3 Switches, Routers, ASAs (Adaptive Security Appliances)
Troubleshooting dot1x authentication, RBAC (Role Based Access Control, Active directory, EAP (Extensible Authentication Protocol) issues.
Developed Technical Solutions for customer issues related to ISE (AAA server product) version 2.4, 2.6. and CISCO recommended latest 3.0.
Developed and implemented workarounds for ISE product errors, improving system reliability and user experience.
Executed patch management, licensing, OS/software upgrades, and authentication/authorization on switches and routers, ensuring optimal system performance and security compliance.
ISE (Identity Service Engine) installation on Cisco appliancess: SNS 3500 and SNS 3600 series appliance. and Virtual Machine
Education
Bachelor of engineering - Electronics & communication engineering
Senior Network Infrastructure Security (Team Lead) at Sahara international petrochemical companySenior Network Infrastructure Security (Team Lead) at Sahara international petrochemical company