Lijo John

About Lijo John

8+ years of experience in routing, switching, network system design, implementation, troubleshooting and managing of large-scale enterprise network systems. Designed and replaced aging checkpoint R80.30/77.30 Firewall architecture with new next generation Palo Alto PA-5k, 7k appliances serving as firewalls and URL and application. Inspection. Cisco ASA deployment and configuration for nationwide VPN connectivity to business partners. Experience in CISCO Viptela (vManage, vSmart & vBond) SD-WAN Technologies. Experience in providing L2 and L3 Level 24*7 Network Support. Experience in layer-3 Routing and layer-2 Switching. Dealt with Nexus models like 9k, 7K, 5K, and 2K series and existing ACI fabric.Working experience in Python Scripting language.

Experience

1. Senior Network Security Engineer

   USAA

   May 2018 — Present · San Antonio, TX, US

   Worked on Panorama firewall management tool to administer CISCO Palo Alto 7080, 5250 and 5050 device groups. Experienced in configuring and troubleshoot Global protect SSL VPN for Work from Home Users on Palo Alto. Working experience in Configuring Security Policies for Access control, interzone connectivity, External Access on Palo Alto Firewall. Experienced on Configuring, Monitoring and Troubleshooting Cisco\'s ASA 5540, 5510, security appliance. Experience in risk analysis, security policy, rules creation and modification of Cisco ASA networks. Work experience in managing Cisco ASA Firewalls using ASDM (Creating and Modifying Rules). Experience working with Cisco Nexus 7700, 5500, 2148, 2248 series in Data Center Switches. Working for the secure development lifecycle for Cisco\'s Nexus line of products, including Application Centric Infrastructure (ACI), Application Policy Infrastructure Controller (APIC) Worked on developed cisco ACI templates for new device onboarding using APIC. Experience with incorporating Nexus series with existing ACI fabric. Experienced in configure Security Profiles such as Antivirus, Anti malware, Threat Prevention, Vulnerability Worked on troubleshooting, configuring and installing of Viptela SD-WAN Deployments Configured Network Security Group for Azure security and route traffic between virtual machines Worked on Implemented Cloud security controls in SecOps including but not limited to Encryption, Tagging, Container security, Golden AMI policy, IDS/IPS, NSG management, Service Endpoints, DDoS, Integrating 3 rd party services such as QRadar, Qualys, Redlock Deployed and configured virtual Machines in Windows and Linux platforms using Python Scripting, JSON templates and Azure Resource Manager portal.

Education

• Newman College

  Bachelor's degree, Bachelor of commerce and computer science

• Karpagam College of Engineering

  Master in Computer Applications , Master in Computer Applications