Network Architect-Security

Total 10+years

Relevant . of experience: 8 years is a must

Mandatory skills•Deep understanding SDWAN technology,involving design, implementation and troubleshooting Experience.•Develop scalable and resilient SD-WAN architectures to optimize network performance.•Lead the deployment and configuration of Cisco SD-WAN appliances and controllers.•Implement routing policies, quality of service (QoS), and security measures within the SD-WAN infrastructure.•Better understanding of TLOC configuration and DIA traffic flow.Network Architect LAN/WAN/WIRELESS/ACI/SDWAN
•Design, deploy, and manage ACI fabrics.•Automate network provisioning and policy enforcement.•Troubleshoot and optimize ACI environments effectively•Understanding of OSI Model, IP Protocol suites and Quality of Service.•Understanding of IPv4 & IPv6 IP address planning and implementations.•Product experience in Cisco,Juniper,F5,Riverbed,Cisco Nexus.•Network WAN/LAN/WLAN/MAN/MPLS/VPN and data communications technologies.•Expertise in Routing and switching protocols BGP, EIGRP, OSPF,HSRP,VRRP,LDP,RSVP, STP, RSTP, MSTP,Multicast,Policy based routing•TCP/IP packet analysis•Experience in complex MPLS/BGP WAN design and implementation•Data Center Virtualization-Architecture and Design Capabilities,Product Expertise in CISCO NEXUS 7000, 1000V, OTV,Consolidated I/O, Fibre Channel•Understanding on Managing Switches/Routers/Load blanacers/WAN Optimizers.•Advanced Knowledge of Routing, Switching,WAN Optimization and Load balalncing•Understanding of advanced network technologies and solutions including IPv6, MPLs, BGP, EIGRP, OSPF, HSRP, multicast, policy-based routing, ether-channel, QoS, traffic-shaping, Load balancing, VPN tunnels, WAN Optimization.•Clear understanding of 802.11a/b/g/n Wi-Fi standards and related components•Excellent Knowledge on Wireless Controller and Access Points implementation and troubleshooting including setup/configure wireless network (controller / Access points)•Design, plan, establish,



and optimize wireless networks.•Develop wireless network infrastructures and make recommendations on systems enhancements for optimization.•Knowledge of Cisco Nexus 5k,7k and 9k and Riverbed steelhead CX,DX and EX series.•Experties in BIGIP F5 (LTM and GTM)•Load Balancing, including priority group activation and connection limits. Persistence concepts•BIG-IP GTM: Global Traffic Manager - Installation and Licensing, Accelerated and Intellegent DNS Resolutions, LDNS Probes and Metrics, DNSSEC, iRules, Synchronization, DNS Integration, iHealth•BIG-IP LTM: Local Traffic Manager - licensing, provisioning, network configuration, local traffic configuration, Dynamic load balancing methods, Traffic processing through virtual servers/ SNATs, Configuring high availability, Traffic behavior modifications with profiles•Advanced BIG-IP LTM configurations - VLAN tagging and trunking, SNMP features and packet filters•Configure Cisco Nexus 7k 5k series•Configure ASA firewalls, Cisco Next-Gen firewalls experience, MPLS, F5 expertise.

Network Security
Relevant- of experience: 8 years is a must
Mandatory skillsKnowledge on Palo alto and Checkpoint is highly preferred.Good understanding of various Firewall vendors like Palo alto/Checkpoint/Cisco ASA/Cisco FTD Operation & Design.Advanced knowledge on Zscaler Private Access (ZPA) - Operation & DesignKnowledge on Illumio Core MircrosegementationUnderstanding of various tools like Cloudflare,Cisco ISE etc.Enterprise Security ArchitectProficient in designing, implementing, and managing Zscaler cloud security solutions.Extensive experience in designing and configuring secure Site-to-Site VPNs for interconnecting multiple locations.In-depth knowledge and hands-on experience with Palo Alto, Cisco ASA, Cisco Firepower,



and Checkpoint firewall platforms.Expertise in configuring and managing Azure Firewall for cloud-based security.Proficient in configuring and managing Bluecoat proxy solutions for web traffic filtering and security.Strong understanding of Cloudflare services, including DDoS protection and web application security.Experience in integrating and optimizing Illumio for micro-segmentation and advanced access control.Expertise in implementing Cisco Identity Services Engine for secure identity and access management.Proven experience in designing, deploying, and managing Cisco SD-WAN solutions.Proficient in configuring and maintaining F5 Load Balancers for efficient traffic distribution and high availability.Hands-on experience configuring and managing proxy solutions, including Cloudflare, Bluecoat, and reverse proxies.Hands-on experience with reverse proxy solutions to enhance security and performance.Strong background in routing and switching technologies, including protocols such as BGP, OSPF, and VLAN configurations.Integration of various security solutions with cloud environments, ensuring a seamless and secure transition.Expertise in integrating security solutions with cloud environments, using tools such as Zscaler and Cloudflare.Implementation of network access controls to secure and manage user and device access.Ability to implement effective network access controls to prevent unauthorized access.Strong documentation skills, including the ability to create comprehensive documentation for security configurations and procedures.Demonstrated capability to conduct training sessions for IT staff and end-users on security best practices and emerging threats.Strong understanding of intrusion prevention and detection systems.Ability to conduct threat assessments and implement proactive security measures.Palo Alto PCNSE, Checkpoint, or Cisco CCNA/CCNP Security, Zscaler ZTCA, F5 Certifications, etcDesign/Upgrades/control/configure existing security systems by monitoring security workplace; identifying security gaps; evaluating and implementing enhancements, policy and procedures; solving highly complex issues

📌 It Infrastructure Architect (Hyderabad)
🏢 Cloudxtreme
📍 Hyderabad