Sandeep C M

Cybersecurity Design & Implementation:

• Designed and implemented certificate-based IPSec VPN tunnels (G2G & T2G) for securing vital and non-vital communications.
• Enforced MAC and 802.1X authentication for onboard device and maintenance access control.
• Applied TLS with client/server certificates to secure web access to network and security devices.
• Integrated RBAC via LDAPS and interfaced with private PKI for certificate lifecycle management.
• Performed system hardening in compliance with IEC 62443 cybersecurity standards.
• Worked as an On-demand PoC of Security Gateway based firewall protection concept introduction on ETCS mainline Datalogger project for an Israel main line project.

Network Design & Implementation:

• Developed IPv4 addressing plans and VLAN-based segmentation for secure OT/IT networks in compliance with cybersecurity standards.
• Designed QoS strategies for onboard, wired, and wireless networks to ensure performance for critical applications.
• Engineered backbone ring networks using HPE Gigabit Ethernet and Nokia MPLS for high availability.
• Integrated backbone networks with subsystems (ZC/LC, ATS, ATC, TCMS) via onboard Gigabit Ethernet.
• Designed and deployed monitoring solutions (SolarWinds, Zabbix) and virtual infrastructure aligned with IEC 62443 compliance.

Verification & Validation activities performed are:

• Set up virtualized Linux environments to support V&V activities for network and cybersecurity solutions.
• Developed and executed test cases to validate system designs and interface integrations.
• Prepared configurations, performed subsystem integration testing, and documented results in detailed test reports.
• Identified design gaps and collaborated with subsystem architects to propose solutions or escalate risks.

• Designed and implemented network solutions for branch office migrations, including DMVPN and MPLS coordination with ISPs.
• Installed, configured, and upgraded Cisco routers, switches (Nexus 5K/2K), and wireless infrastructure (WLC, LAPs).
• Provided remote support for Palo Alto firewall deployments, SSL VPN policies, and PBF rule configurations.
• Diagnosed and resolved network and security issues across LAN/WAN, VPN, and wireless environments.
• Ensured high availability and compliance by aligning configurations with organizational standards and best practices.

• DATA SERVICE business unit Network Planning & Engineering.
• Remote support to onsite engineer on Installation, Integration and Rehome jobs.
• Responsible for network documentation and weekly reports.

• Worked in Site survey, Installation, Configuration, Upgradation, Operation and Maintenance for Next Generation VoIP networks.
• Manage and configure Networking devices such as Cisco routers 2851, 2821 and Cisco switch 2950.

• Timely monitoring and reporting of Network devices abnormality to concerned engineers for next action.
• Testing of antenna gain and monitoring of spikes in the network.