Shiv Santosh SAHU
Bhawanipatna
Summary
Experienced Network Security Engineer with 4.9 years in network setup, troubleshooting, and security. Expertise in Palo Alto Firewalls, Cisco ISE, F5 Load Balancer, and monitoring tools. Knowledgeable in Microsoft Azure AZ-104 and Zero Trust Architecture concepts. Proven track record in product support engineering and effective issue resolution.
Overview
5
5
years of professional experience
3
3
Certifications
3
3
Languages
Work History
Technology Analyst
Infosys
06.2024 - Current
- Manage day-to-day operations, LAN/WAN/Network components monitoring using SolarWinds.
- Configured and maintained routers, switches, firewalls, F5, and WLCs.
- Monitored network performance and conducted regular assessments.
- Created and managed Nodes/Pools/VIPs and I-Rules as per application requirements.
- Created and maintained Health Monitors (HTTP, HTTPS, TCP).
- Monitored Virtual Server and Pool health status on regular basis.
- Assisted in VIP, Nodes, Pool-member enable/disable activities as per change requests.
- Developed internal and external DNS entries using Men & Mice and Infoblox.
- Configured and modified Palo Alto firewall policies.
- Generated & Renewed Certificate for Cisco FMC, FTD, ISE, Infoblox.
- Monitored firewall health, logs, traffic flow, and NAT rules for troubleshooting.
- Reviewed Cisco ISE logs and performed MAC address whitelisting.
- Collected and maintained QK-View files during deployments and troubleshooting.
- Performed PRE/POST validations for production changes.
- Created SOPs and provided KT sessions to new engineers.
- Created and managed users and groups in Microsoft Azure Active Directory (Azure AD).
- Assigned user roles and permissions using Azure RBAC based on access requirements.
- Managed Azure subscriptions, resource groups, and user access permissions.
- Assigned and managed Microsoft licenses for users in Azure environment.
- Performed user account creation, modification, password reset, and account disable activities.
- Configured security groups and administrative roles in Azure AD.
- Implemented Multi-Factor Authentication (MFA) for user account security.
- Monitored user activities and Azure resources using Azure Monitor and Activity Logs.
- Managed Azure Virtual Machines, Storage Accounts, and Virtual Networks.
- Configured Virtual Networks, Subnets, and Network Security Groups (NSG) in Azure.
- Supported basic cloud administration and troubleshooting activities in Microsoft Azure.
- Worked with Azure Portal and basic PowerShell commands for resource management.
- Maintained secure access management following Azure security best practices.
- Supported user onboarding and offboarding activities in Azure environment.
Product Support Engineer
Instasafe Technologies
10.2021 - 05.2024
- Diagnosed and resolved complex technical issues, enhancing product performance and user satisfaction.
- Gained foundational knowledge of Zero Trust Architecture principles to enhance security practices.
- Verified user and device access based on identity and security posture to ensure compliance with access protocols.
- Validated existing access policies to support least-privilege access, enhancing security posture.
- Monitored authentication and authorization logs to maintain integrity of Zero Trust controls.
- Assisted in troubleshooting user access issues in Zero Trust-based environments.
- Assisted in user and device access verification based on identity and security posture.
- Supported least-privilege access by validating existing access policies.
- Monitored authentication and authorization logs related to Zero Trust controls.
- Supported policy validation for secure access to applications and services.
- Worked with identity and security teams to validate access requirements.
- Modified basic iRules for redirection and traffic handling.
- Monitored F5 device health and application traffic flow.
- Supported F5 LTM/GTM troubleshooting and daily operations.
- Followed Zero Trust security policies and SOPs during incident handling.
- Supported identity-based access controls for users and devices.
- Assisted in troubleshooting authentication failures.
- Verified role-based access as per defined policies.
- Monitored login attempts and access logs for anomalies.
- Escalated identity-related issues to L3 teams with logs and details.
- Basic understanding of Zero Trust Architecture (ZTA) principles such as never trusts, always verify.
Education
Bachelor of Technology - Electrical Engineering
GITAM
Bhubaneswar 04.2001 -
Skills
- Network Security
- Firewall Management
- Routing and switching
- Network Troubleshooting and Configuration
- Network performance monitoring
- Network Automation
- Cloud Networking
- Wireless Networking
Accomplishments
- Palo Alto OS upgrade from 9.1.15-h1 to 10.1.9 to 10.2.7-h3.
- F5 Load Balancer LTM OS upgrade from 16.1.5 to 17.1.1.1.
- Cisco FTD & FMC upgrade from 6.6.5.2 to 7.2.5.
- Migrated DNS entries from Men & Mice to Infoblox.
- CISCO ROUTERS & SWITCHES IOS upgrade to latest version to prevent Security Vulnerability
Certification
Completed Certification on Cisco Certified Network Associate (CCNA 200-301)
Interests
Watching Pod casts, Watching Cricket, Travelling
Timeline
Technology Analyst
Infosys
06.2024 - Current
Product Support Engineer
Instasafe Technologies
10.2021 - 05.2024
Bachelor of Technology - Electrical Engineering
GITAM
04.2001 -
SOCIAL LINKS
Link: https://www.linkedin.com/in/shivsantosh-sahu-738458249/