Shivam Verma
Summary
Senior Infrastructure and Network Security Engineer with 8+ years of experience designing, implementing, securing, and operating enterprise IT infrastructure for distributed healthcare environments. Skilled in enterprise infrastructure, network security, firewall engineering, identity and access management, endpoint security, Microsoft security technologies, virtualization, and security operations. Experienced supporting 15+ hospitals and clinics, 20+ multi-vendor next-generation firewalls, 80+ Site-to-Site IPSec VPN tunnels, approximately 200 Windows Servers, 2,800 managed endpoints, and 500 wireless access points. Strong background in infrastructure hardening, Microsoft Sentinel detection engineering, incident response, vulnerability management, disaster recovery, and compliance alignment with HIPAA, NIST Cybersecurity Framework, ISO/IEC 27001, and GDPR working knowledge.
Overview
2
2
Certification
8
8
years of professional experience
Work History
Network Engineer & Cyber Security Engineer
American Advanced Management
Jalandhar
06.2023 - Current
- • Design, implement, secure, and operate enterprise infrastructure supporting distributed healthcare operations across 15+ hospitals and clinics.
• Led secure infrastructure deployment for five new hospitals, integrating network, server, identity, and security services into the enterprise environment.
• Administer approximately 200 Windows Servers, VMware infrastructure, Microsoft 365, Active Directory, Microsoft Entra ID, DNS, DHCP, PKI, IIS, SQL Server, and enterprise backup solutions.
• Manage security across 20+ enterprise firewalls, including Palo Alto PA-460, FortiGate 60F/201F, Cisco FTD 2100/2110, Cisco ASA, SonicWall TZ/NSA Series, and Sophos SGS3100.
• Design and maintain 80+ Site-to-Site IPSec VPN tunnels and router VPN connections for secure communication between hospitals, clinics, datacenters, and third-party healthcare partners.
• Standardize firewall policies using network segmentation, NAT, IPS, SSL inspection, URL filtering, application control, and secure remote access controls.
• Perform firewall lifecycle management, including policy reviews, firmware upgrades, backup validation, change implementation, and troubleshooting of complex connectivity issues.
• Administer Active Directory and Microsoft Entra ID, including user lifecycle management, authentication policies, RBAC, Group Policy, and privileged access controls.
• Implement Conditional Access, Multi-Factor Authentication, PKI, and certificate-based authentication to strengthen enterprise identity security.
• Develop Microsoft Sentinel analytics rules, KQL queries, and event correlation logic to improve threat detection and security monitoring.
• Investigate security incidents using Microsoft Sentinel, Microsoft Defender XDR, SentinelOne, CrowdStrike, Splunk, and firewall telemetry; coordinate containment and remediation activities.
• Support vulnerability management, infrastructure hardening, operating system patching, certificate lifecycle management, disaster recovery validation, and remediation of production risks.
Senior Officer (IT)
Indoco Remedies Ltd
03.2023 - 05.2023
- Managed AD, DNS/DHCP, and Aruba switches; enforced M365 security policies and MFA for 200+ users.
- Supported patching, backup validation, and audit readiness, contributing to successful ISO 27001 audit.
IT Executive
Immacule Lifesciences
Baddi
09.2022 - 03.2023
- Administered SonicWall firewall and endpoint protection for 150+ systems; configured secure VPN access.
- Conducted vulnerability scans and patch deployment, reducing exploitable risks by 30%.
- Supported DR and backup solutions to ensure business continuity and data security.
Senior Officer
Metrocraft Pharma
09.2020 - 01.2021
- Directed IT and cybersecurity operations, managing user access, endpoint protection, and network monitoring.
- Led data classification and disaster recovery initiatives, improving resilience by 25%.
- Oversaw firewall configurations, CCTV, and access control systems for physical and network security.
System Administrator
Cipla
06.2019 - 08.2020
- Managed Windows Server patching, Active Directory, and endpoint antivirus.
- Monitored network logs via PRTG and Wireshark to identify anomalies and security risks.
End User Support
IDC Technologies Pvt Ltd
09.2018 - 04.2019
- Maintained server and network infrastructure, configured Symantec AV, and ensured endpoint protection.
- Performed daily log reviews and backup integrity checks as part of security compliance.
Education
MBA - Information Technology
Lovely Professional University
BSc - Information Technology
Lovely Professional University
Skills
- Firewall Management: Palo Alto
- Firewall Management: FortiGate
- Firewall Management: SonicWall
- Firewall Management: Sophos
- SIEM & Detection: Microsoft Sentinel
- SIEM & Detection: Splunk
- SIEM & Detection: QRadar
- SIEM & Detection: ArcSight
- Endpoint Security: Defender for Endpoint
- Endpoint Security: CrowdStrike
- Endpoint Security: Sophos Central
- Identity & Access: Active Directory
- Identity & Access: Azure AD
- Identity & Access: Intune
- Identity & Access: MFA
- Identity & Access: Conditional Access
- Incident Response: IOC analysis
- Incident Response: XDR containment
- Incident Response: MITRE ATT&CK mapping
- Vulnerability Management: Nessus
- Vulnerability Management: Qualys
- Vulnerability Management: Tenable
- Vulnerability Management: Patch SLAs
- Networking: VLAN
- Networking: VPN
- Networking: DHCP/DNS
- Networking: Wireshark
- Networking: PRTG
- Networking: SolarWinds
- Compliance: ISO 27001
- Compliance: NIST 800-53
- Compliance: SOC 2
- Compliance: ITIL
Certification
- Certified Cybersecurity Technician (C|CT), EC-Council, 2025-04-01
- ISC2 Certified in Cybersecurity (CC), ISC2
- MCSE Training, Udemy
- Diploma in Hardware and Networking, Jetking Institute
Key Security Projects
- Web Security & Decryption, Rolled out URL filtering and SSL inspection with exception handling on Palo Alto/FortiGate; decreased risky web categories and improved TLS threat detection.
- Sentinel Detections & SOAR, Built KQL rules for auth anomalies, MFA fatigue, suspicious PowerShell; automated enrichment (VT/whois/Defender) and ticket creation to reduce analyst handling time.
- DFIR Mini-Cases, Phishing and malware investigations with evidence trails, EDR isolation, and post-incident policy updates; mapped to MITRE ATT&CK for standardised learning.
Open To Remote
True
Open To Relocation
True
Personal Information
- Title: Cybersecurity Analyst | SOC L2 | Network Security Engineer
- Availability: Open to Remote & Relocation
Timeline
Network Engineer & Cyber Security Engineer
American Advanced Management
06.2023 - Current
Senior Officer (IT)
Indoco Remedies Ltd
03.2023 - 05.2023
IT Executive
Immacule Lifesciences
09.2022 - 03.2023
Senior Officer
Metrocraft Pharma
09.2020 - 01.2021
System Administrator
Cipla
06.2019 - 08.2020
End User Support
IDC Technologies Pvt Ltd
09.2018 - 04.2019
BSc - Information Technology
Lovely Professional University
MBA - Information Technology
Lovely Professional University