Sr Analyst III Infrastructure Services

Job Description:

Capability

Network Engineer

Job Level

SPE

Job Profile

Educational Qualification : Degree in Computer Science or equivalent

Skills – Technology

LAN/WAN, IPAM, Load Balancer, Packet Analyzer

Certifications

AIS/ASE/MASE/CCIE /PCNSE/ CCSA

Experience level

5 to 6  years relevant experience

Job Description

• Minimum of 6 - 10 years’ experience in L3 network Support. Proven ability in learning and upgrading new technologies/technical skills.
• Knowledge troubleshooting Checkpoint (R80, R77 Gaia, R75, R70, R65, Provider-1, VSX, SPLAT, Cluster XL, Smart Center Server)
• Knowledge in Palo Alto (Pa-500, PA-3k,PA-5k, PA-7k, VSYS and Panorama)
• Experience with IPSEC, VPN, and SSL
• Perform firewall rule audit and optimization using Tufin, Firemon and Algosec.
• Upgrading the code from Pan OS 7.1.X to 8.0.X. Experience working on Panorama M100. Migration from Cisco ASA to PA firewalls.
• Palo Alto design and installation (Application filtering, Threat Prevention, Data Filtering).
• Configuration and troubleshooting of Site to Site as well as Remote Access VPN on Cisco ASA and Check Point firewalls.
• Should have knowledge on Fortinet firewall.
• Maintain the Palo Alto Networks solution uptime/availability and provide guidance on architecture changes, upgrades, fixes etc.
• Palo Alto Networks XML API integration experience
• Knowledge in Installing a Security Gateway, VSX Gateway
• Knowledge  in email security, and web protocols
• Plan Proactive maintenance windows for DR tests, execute corrective action as needed for high business uptime
•  Extensive knowledge of different security threats and virus detection systems
•  Strong understanding of core Internet protocols and applications. 
• Configured and troubleshooting the F5 LTM and APM and providing level 2 support for the customers.
• Configuration and troubleshooting F5 LTM and providing level 2 and level 3 support for the customers.
• Extensive hands on experience with BIG-IP 5000 and 2000 series.
• Allocation and designing appropriate virtual IP for F5 ADC through IPAM InfloBox.
• Licensing and provisioning of F5 modules such as LTM, GTM, VCMP (Virtual Cluster Multi Processing).
• Extensively worked on code upgrades from v11.5.3 to v11.5.3 and downgrades from 12.0.0 to 11.5.4.
• Extensively worked on virtual F5 LTM module on VMware for application testing.
• Configured VCMP Host and created VCMP guests for Exchange and ACE migrations.
• Created a high availability feature between the VCMP guests for different VCMP hosts.
• Extensive knowledge in configuration via CLI (TMSH and advance shell).
• Good knowledge on basic iRules scripting and debugging.
• Creating custom profiles, health monitors, and also configuring SNAT pools, syslog and SNMP
• Implementation of major application services with the iApps templates.
• Extensive knowledge and experience regarding F5 BIG-IP LTM VIP configuration with health check.
• Extensive knowledge and experience with hosting SSL certificates on F5 platforms.
• Experience in managing the load balancers in a high-availability infrastructure.
• Solid understanding and experience in managing Data center LAN
• Must be able to demonstrate excellent troubleshooting and problem solving skills . Good communication skills
• Good understanding (Of L3 Level) of Switching & routing protocols, and products like : H3C Device, Alcatel Lucent DWDM, Checkpoint firewalls, F5 LoadBalacers, IPAM, Netscout Packet Capture and Flow Analyzer
• Management of onsite vendors - During implementation activity and day after support.
• Escalation point for network implementation issues  - Telco, Cabling, and Managed Service Vendor
• Analyze/solve application -related problems - Use advanced network troubleshooting techniques required to analyze and solve application-related problems within large geographically dispersed networks as needed.
• Analyze/solve advanced Switching/routing problems - Apply advanced network troubleshooting techniques required to analyze and solve protocol routing problems within large geographically dispersed networks.
• Analyze/solve application -related problems - Use advanced network troubleshooting techniques required to analyze and solve application-related problems within large geographically dispersed networks as needed.
• Configure network switches/VLANs/VTP - Implement features of each communication type in a large network. Implement features of a Layer 2 switch. Implement features of routers and VLANs.  Identify differences between end-to-end and local VLANs.  Establish guidelines for creating and deleting a VLAN in global mode.
• Configu