Muntazir Imam

About Muntazir Imam

10+ Extensive experience with multi-site, globally located enterprise networks, and data centers• Develop scalable, maintainable, and highly available network security architectures that effectively support business goals and objectives.• Maintain minimal downtime for maximized productivity through proactive issue detection, threat prevention, and skillful, prompt troubleshooting • Technical Knowledge of Palo Alto and Juniper SRX firewalls.• Manage security policies and rules through the central management platform Panorama.• Manage series of Palo Alto firewalls like, PAN NGFW PA-3200, PA-5200, M-500, M600, VM-700, VM-500, VM-300• Experience with Pulse Secure VPN solution (PCS or Pulse Connect Secure).• Subject matter Expert (SME) on Pulse Secure Unified access control & IC (Infranet Controller)• Plan, design, configure and implement Palo Alto Global Protect VPN solution. • Install and maintain Cloud Virtualized firewalls and central management systems, like Panorama, • Working knowledge on Cisco Nexus 7k, 5K, 2k and Cisco Catalyst • Knowledge on Arista hardware.• Experience with F5 and ultraDNS load balancers - LTM, GTM series for corporate applications and their availability – configured a unique design with UltraDNS load balancer for Global Protect VPN solution.• Hand-on experience with Infoblox products (Infoblox, IPAM, Net MRI, DNS & DHCP)• Good knowledge and experience in installation, configuration and administration of FTP, DNS, DHCP, TFTP, Windows OS under various LAN and WAN environments• Dealt with monitoring tools (Solar Winds, Grafana, Splunk, Net spyglass), and packet capture tools like Wire-shark, TCP Dump.• Excellent working knowledge of TCP/IP protocol suite and OSI layers.• Experience with Microsoft VISIO/Office, lucid chat, draw.io, gliffy, JIRA, Confluence, and MS-SharePoint as technical documentation and presentation tools.• Working experience with Service Now ticketing tool for SOX compliance.• Implement changes through the change management process ITIL Process.• A team player, with effective interpersonal skills, adaptive to any environment, with the latest technologies, and delivering solutions as an individual and as part of a team.

Experience

1. Network Security Engineer

   Gap Inc.

   Feb 2018 — Present · Pleasanton, CA, US

   Served as a key resource and a lead role at GAP during the Covid-19 pandemic to keep the business running by providing/supporting VPN access to GAP employees, contractors, and vendors to work from home. Configured Palo Alto central management platform with Panorama, deployed mainly using VSYS according to Gap topology, working on URL filtering, Content-ID, User-ID, App-ID, etc. Create policies and rules both for East-West (server-server) traffic and North-South (client-server) traffic, and forward logs to security log audit teams. Configured and deployed Palo Alto firewall in an Active/Standby HA (High-Availability) with Vwire and Layer 3 modes of deployment. Worked on Info-Blox grid to enabling the DNS entry, global load balancing, managing DHCP pool & IPAM. Migrated Juniper SRX firewalls to Palo Alto both manually and using the Palo Alto migration tool, to ensure the accuracy of the policies following successful migration. Planned, designed, implemented, installed and migration path from Pulse Secure Connect to Palo Alto Global Protect Experienced with Palo Alto Prisma followed by plan, design, and implementation. Created a workflow to deploy Prisma Access to cover each use case scenarios to serve GAP remote users. Created multiple VPN tunnels to connect PAN Prisma Access to GAP network. Created RBAC (role based access control) for end users to authenticate and authorize to access GAP. Created general and specific portals and gateways as per the requirement. Planned and configured HIP (Host information profile) based policies to restrict access to only compliant user devices. Configured security group-based security policies to allow access only to required resources. Integrated Prisma access to Splunk to create the desired dashboard for monitoring and audit purpose.

Skills

• Palo Alto Networks
• 802.1q
• Vtp
• Cisco Nexus
• Ssl Certificates
• Dns
• Eigrp
• Pagp
• Vrf
• Cisco Routers
• Ppp
• Infoblox
• Hsrp
• Active Directory
• Ssh
• Trunking
• Pulse
• Tacacs
• Ldap
• Spanning Tree
• Security
• Dhcp
• Srx
• F5 Bigip
• Routing Protocols Like Rip
• Vlan
• Ospf
• Vrrp
• Vpn
• Juniper Technologies
• Catalyst Switches
• Glbp
• Radius
• Ipsec
• Wireless Networking