Sandeep Singh - Network Security Engineer - Tata Consultancy Services

Summary

I am actively pursuing a Layer-3 level position in the Networking Domain, where I can leverage my networking skills, dedication, and hard work to contribute to the growth of the organization. I possess hands-on experience in configuring Cisco Routers/Switches as well as expertise in Security with Juniper/Palo Alto. With a detail-oriented and team-player mindset, I demonstrate strong organizational skills and the ability to handle multiple projects simultaneously while maintaining a high degree of accuracy.

Overview

15

years of professional experience

7

years of post-secondary education

Work History

Network Security Engineer & Operational Support

Tata Consultancy Services

02.2014 - Current

Project- Apple EMEIA

Client Name - Apple UK

Setting up new OSVs (Outsourced Vendor sites) and FSOs (Field Sales Offices)
Established new OSVs and FSOs in the EMEIA region over MPLS links as permanent solutions after collaborating with stakeholders, project managers, and vendor teams.
Implemented S2S VPN connections for OSVs in case of delays in MPLS circuit delivery.
Managed circuit upgrades for OSV sites and handled routine issues, including policing and restricting access to new applications.
Major Recent Projects
Successfully migrated Firewall SRX 3400 to Palo Alto-5020.
Added FEX (Nexus 2Ks) in LD5.
Conducted policy cleanup in SRXs.
S2S IPSec VPN Setup
Proficient in establishing secure S2S IPSec VPN connections between Palo Alto and Cisco ASA firewalls.
Operational Responsibilities
Managed site subnet expansions, addressed daily ticketing for EMEIA FSOs, ensured compliance with configuration standards, resolved WiFi issues, performed hardware break fixes, and conducted troubleshooting sessions with users, voice teams, and other departments.
Weekly On-Call Support
Provided on-call support once every two months as part of the Euro Netops team, responding to P1 incidents during off-business hours.
Network Security and Management
Configured ACLs on VLANs, performed policing on DMZ/BZ/Perimeter Firewalls, and managed LAB firewalls as part of routine work.
Conducted upgrades for various network devices, including Cisco 3850 switches, WLCs, Arista Core devices, Juniper ISGs, Juniper SRX, Palo Alto, Cisco ASRs 1004, Cisco 3945s, and Cisco 4451s.
New FSO Site Setup and Tech Refresh
Successfully executed new FSO site setups and conducted tech refresh projects.
ISP Collaboration and Circuit Restoration
Worked with various ISPs to ensure demanding circuit restoration, performed Root Cause Analysis (RFO), and conducted analysis to ensure service availability.
Break-Fix Support
Collaborated with Cisco/Juniper teams for case analysis related to hardware behavior, bug fixes, equipment RMA, licensing, and IOS/JunOS upgrades to resolve issues.

Network Engineer

Network Bulls Technologies

12.2012 - 01.2014

Resolving User reported Tickets from Retail Stores related to LAN connectivity, bringing peripheral devices in network and other network related issues under GNS Offshore-Retail Scope
Configure, support and troubleshoot on Cisco routers, switches
Break-Fix: Working with Cisco /Juniper teams for case analysis related with Hardware behavior, bug fix
Routing configuration: EIGRP, OSPF and BGP
Switching configuration: Spanning-Tree, HSRP, VRRP ,GLBP, Trunking, Access-lists
Troubleshooting problems with various network devices
Diagrams, Network troubleshooting, Project handover documents
Provide complete LAN Support for about 2000 nodes.

Technical Assistant

HCL Infosystems and Ltd

12.2008 - 12.2009

Provide administrative support to technical staff
I maintained and establish variety of records related to responsibilities and generate reports as requested
Provide training regarding application software that is IISFM, CIPA and VAHAN & SARATHI Software and computer hardware like Cd Rom Hard Drive etc
Peripheral and network problem
I visited at all FCI depots for routine inspection and maintenance of assigned district area computers and Network hardware
Maintained monitor network environment and resolves configuration and troubleshooting issues and handle other traffic security and access problems
I used to maintain all system and configure networking systems including Cisco Routers , Switches ,Hub,Lan,Wan connectivity devices
Take backup on routine basis of all software as appropriate, archive data and restore data as needed.

Education

Bachelor of Technology - Electronics & Communication

Punjab Technical Universitiy

Punjab

05.2004 - 12.2008

Standard XII -

P.S.E.B

Punjab

05.2002 - 05.2003

S.C -

P.S.E.B

Punjab

03.2000 - 04.2001

Skills

Firewalls: Palo Alto Networks, Cisco ASA firewalls, Checkpoint, Panorama Palo Alto Networks firewall management

Routers: Cisco 7600, 7200, 3800, 3600, 2900, 2800, 2600, ASR 7K, ASR 12K

Switches: Nexus 2K/5K/7K, Cisco Catalyst 6500, 4500, 3850,3560, 3750, 2960

Communication Protocols: TCP/IP, UDP, DHCP, DNS, ICMP, SNMP, ARP, RARP, PPP, HDLC, ISDN, SDN, and SD-WAN

Routing Protocols: OSPF, EIGRP, BGP, MPLS PBR, Route Filtering, Redistribution, Summarization and Static Routing

Switching Protocols: LAN, VTP, STP, PVST, RPVST, Inter VLAN routing & Multi-Layer Switch, Ether channels, Transparent Bridging

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, VLANs, VTP, STP, RSTP, 8021W, Cisco Prime

Wireless Technologies: WLC s (8510, 5508, 5706), Cisco AironetAP s (2600, 3600, 3700), Aruba 225, Aruba 3000 controller

Network Security: Cisco ASA 5540, ACL, IPSEC, F5 Load Balancer, ISE, SSL, IPSec VPN, GRE VPN

Network Management and Packet Analyzers: Wireshark, SNMP, and Tcpdump

Operating systems: Windows XP/ 7/ 8/10, Windows Server 2003/ 2008, Mac OS and Linux

Applications: MS (Office, Word, Outlook, Excel, PowerPoint, Visio), Confidential, Adobe Photoshop, and Illustrator

Tools : Splunk, Cloud Jira, Cloud Confluence , Service Hub

VPN: Good understanding on S2S VPN implementation on Palo alto firewalls, Migration from Cisco to Palo Alto with the help of Expedition tool , VPN setup with different vendors devices (Cisco to PA , ASA to PA), PCNSE

Accomplishments

CCIE - Routing and Switching (CSCO12308857)
CCIE - Security (CSCO12308857)
AWS - AWS Certified Solution Architect-Associate (AWSS03217541)
PALO ALTO - PANW00095217

Additional Information

Over 12+ years of multinational working experience.
Extensive knowledge in configuring and deploying Next Generation Firewalls including Palo Alto, Cisco ASA and Checkpoint Firewalls.
Strong knowledge on leveraging advanced firewalls features like APP-ID, User-ID, Global Protect, Wild Fire, NAT policies and Security Profiles.
Profound working knowledge of administration and management of Palo Alto firewalls using centralized Panorama M-100 and M-500 devices.
Expert level knowledge on configuring and troubleshooting IPSec VPN and SSL VPN tunnels for connectivity between site-site and remote location users by using IKE and PKI.
Proficient in establishing S2S IPSec VPNs between Palo Alto and Cisco ASA's.
Successfully set up new OSVs (Outsourced Vendor Sites) and FSOs (Field Sales Offices) in the EMEIA region using MPLS links as permanent solutions, collaborating with stakeholders, project managers, and vendor teams.
Extensive hands-on experience with Cisco routers and switches, including 1800, 1900, 2600, 2800, 2900, 3700, 3900, 7200, ASR 1K, ASR 9K, and switches 1900, 2900, 3550, 3560, 3750, 3850, 4500, 6500, Nexus 2k, 5k, 7k, 9k series.
Recent projects include successful migration from Firewall SRX 3400 to Palo Alto-5020, addition of FEX (Nexus 2Ks) in the data center, and policy cleanup in SRXs.
Proficient in managing and implementing various protocols in routers and switches such as EIGRP, OSPF, BGP, VTP, STP, HSRP, VRRP, GLBP.
Experience in setting up S2S IPSec VPNs between Palo Alto and Cisco ASA's.
Routine tasks include configuring ACLs on VLANs, policing on DMZ/BZ/Perimeter Firewalls, and working with LAB firewalls.
Proficient in upgrading Cisco 3850 switches, WLCs, Arista Core devices, Juniper ISGs, Juniper SRX, Palo Alto, Cisco ASRs 1004, Cisco 3945s, Cisco 4451s, etc.
Handled new FSO site setups, tech refreshes, and worked with various ISPs to restore circuits and perform RFO analysis to ensure service continuity.
Skilled in break-fix scenarios, collaborating with Cisco/Juniper teams for case analysis, hardware behavior, bug fixes, equipment RMA, licensing, IOS/JunOS upgrades, and other support to resolve issues.

Timeline

Network Security Engineer & Operational Support

Tata Consultancy Services

02.2014 - Current

Network Engineer

Network Bulls Technologies

12.2012 - 01.2014

Technical Assistant

HCL Infosystems and Ltd

12.2008 - 12.2009

Bachelor of Technology - Electronics & Communication

Punjab Technical Universitiy

05.2004 - 12.2008

Standard XII -

P.S.E.B

05.2002 - 05.2003

S.C -

P.S.E.B

03.2000 - 04.2001