Vishav Mehta

Network Architecture & Security

• Managed pfSense firewalls, including port mapping, NAT, user account management, and network monitoring.
• Deployed network devices and services, load balancers, Cisco routers, switches, wireless LAN, VPN, and failover solutions.
• Implemented IP address blacklisting, captive portals, bandwidth control, and deployed IDS/IPS with tools like Snort and Suricata.
• Monitored network usage using Traffic Graph, Zabbix, Prometheus, and Grafana.
• Configured load balancing and network failover on firewalls.
• Set up OpenVPN and IPsec for secure departmental connectivity.
• Managed UniFi servers, UniFi controllers, and Cisco Wi-Fi systems for organization-wide connectivity.
• Handled RADIUS server management in firewall and provided port security.
• Worked with firewalls such as pfSense, Palo Alto, and SonicWall.
• Applied knowledge of OSI model, TCP/UDP model, VLAN, EtherChannel, HSRP, EIGRP, OSPF, SSH, Telnet, SCP, DNS,including SD-WAN, SSL
• Conducted hardware and software installations, upgrades, and maintenance.
• Provided troubleshooting and technical support for Windows and macOS laptops.
• Supported Microsoft 365, laptop hardware (Windows 10, macOS), iOS, and Android devices.

Server Management & security

• Conducted routine server-wide audits to identify vulnerabilities and detect any suspicious activity, ensuring security and integrity of company servers.
• Security Policy Implementation: Implemented comprehensive server security policies across company, encompassing measures like denying unauthorized access, enforcing SSH policies, managing user access, and establishing root access policies and using Jump servers.
• Maintain and troubleshoot IT infrastructure, providing advanced technical support and problem-solving
• Configuring SSL/TLS and domain using cloud provider on servers.
• Configuration,Up-scaling or down scaling server according to requirement and patch management
• Managed server maintenance, including hardware upkeep and OS installations and patch management
• Monitoring server uptime and downtime using script and tools like kuma uptime

Monitoring Tools:

• Proficient in using monitoring tools like Zabix ,Prometheus, Grafana
• Worked on tools like EDR for scanning and finding venerability and malicious activities.

Mail Server Management:

• Experienced in configuring and maintaining mail servers, including Zimbra, iRedMail, Mailcow, and Zoneminder.

Cloud Security:

• Proficient in cloud security solutions, such as Cloudflare Zero Trust, OpenVPN, and IPsec .
• Implemented and managed cloud-based networking solutions using Twingate and Tailscale and Zero trust, openDNS.
• Knowledgeable in DNS configurations and domain management with platforms like GoDaddy ,Cloudeflare and AWS route 53.

Linux Administration:

• Expertise in Linux system administration, file permissions, and network configurations.
• Skilled in SSH key management, disk partitioning, and working with hard and soft links.
• Automate repetitive tasks and improve workflow efficiency with scripting ( Python) like Audit report and downtime mail.
• Experience with sendmail, VPN setup, and linux permissions.
• Proficient in Nginx reverse proxy and ngrok for secure tunneling.

Automation and Scheduling:

• Worked on automation with Ansible.

Docker :

• Skilled in Docker, including creating isolated networks, managing volumes, and configuring registries.
• Experienced in Docker container and image management, port mapping, Docker-file creation, and Docker Compose.

AWS

• Deploy and manage EC2 instances and storage resources.
• Create VPCs, subnets, security groups, and network configurations.
• Implement content delivery through Amazon CloudFront.
• Uploaded data in aws s3
• Implement load balancers like Elastic Load Balancing (ELB) and auto-scaling to manage traffic and application scaling.
• Domain Management using route 53