Siva Kumar Mattam

About Siva Kumar Mattam

Network Engineer with implementing, testing, optimizing, maintaining and troubleshooting Enterprise Network & Security infrastructures.•Experience on Zscaler Internet Access (ZIA) Cloud Proxy Service.•Implemented Zscaler products ZIA (Zscaler internet access) & ZPA (Zscaler private access) in Production.•Provided Support for internal users and Handled Service-Now tickets related to & Zscaler Proxy, Zscaler private access, Secure Pulse VPN and Aventail VPN along with the connectivity issues and escaleting working with TAM whenever needed.•Performing URL filtering and content filtering by adding URLs in Bluecoat Proxy SG\'s.•Extensive experience working with Firewalls, Switches, Routers, load balancers technologies of different vendors•Strong hands-on experience on Cisco Catalyst (series 3750, 4500, 6500), Cisco Nexus (series 3K, 5K, 7K), Cisco Routers (series 2800, 3800, 7600), ASA Firewall (5505/5510), Load Balancers (Cisco ACE, F5 BIG-IP LTM/GTM), Palo Alto Networks Firewalls (PA-820, series PA-3K, 5K), Checkpoint IP Appliances (NXG R60, R70, R75, R77)•Proficient in monitoring and managing networks using SolarWindsNetflow Traffic Analyzer, Network Performance Monitor (NPM), Network Configuration Manager (NCM); Cisco Prime, Security Device Manager (SDM), Cisco Works; HP Open View and Wireshark•Extensive experience in implementing, managing and troubleshooting IP addressing and subnetting, NAT, PAT, Routing protocols (RIP, EIGRP, OSPF, BGP), First Hop redundancy protocols (HSRP, GLBP and VRRP) on Layer 3; VLANs, Standard and Extended ACLs, VTP, WLANs, EtherChannel, STP, RSTP, and MST on Layer 2 technologies•Configured and maintained Quality of Service (QoS) protocols (SIP, SRTP, SDP, IAX) on VoIP along with PBX servers, VoIP Gateways and Cloud based PBX servers•Expertise in installing, configuring and troubleshooting Juniper Switches (series EX3300, EX4200, EX4600), Juniper Routers (series J, M and T) and Juniper series SRX Firewalls•In-Depth Knowledge and experience of various wireless 802.11 standards, controllers, Access Points, Wi-Fi analytics from various vendors (Cisco Meraki, HPE /Aruba, D-Link and Netgear) •Strong experience in Network security using ASA Firewall, Checkpoint, Palo Alto, IDS/IPS and IPSEC/SSL VPN and implementing security rules. •Network/Firewall knowledge including reading traces from various network diagnostic tools (i.e. WireShark, Fiddler etc.) Experience on Zscaler Private Access (ZPA)

Experience

1. Network Security Engineer -zscaler

   Blackstone

   Sep 2022 — Present · US

   Implemented security policies using ACL, Firewall, IPsec, GRE tunneling, VPN, Security TACACS+, and Radius on different series of routers.• Worked on Zscaler for our Internet traffic cloud proxy solution, all our corporate traffic is redirected to Zscaler to provide the security to all the internal APP\'s and internet traffic.• Worked on Zscaler Cloud based web security to manage the corporate web traffic.• Experience on Zscaler Internet Access (ZIA) Cloud Proxy Service.• Network/Firewall knowledge including reading traces from various network diagnostic tools (i.e. Wireshark, Fiddler etc.) Experience on Zscaler Private Access (ZPA).• Troubleshooting firewall rules in Cisco ASA, Checkpoint, Zscaler.• Responsible for Checkpoint firewall management and operations across our global networks. • Working with Checkpoint Support for resolving escalated issue• Working experience with in a secure public cloud and integrating Zscaler Private access.• Experience with Zscaler Cloud Proxy Architecture with ZIA, traffic forwarding using GRE tunnels to Zcloud, Azure AD Authentication, Access policies, ZCC 2.0 tunnel.• Worked on PAC file updates, Internet proxy migration from IronPort to Zscaler cloud. Access policies, AD-based, user-based, location-based access. ZAPP client.• Worked on ServiceNow Ticketing system to help clients resolve issues related to RSA two factor authentication, Zscaler ZIA server proxy whitelisting, Zscaler URL categorization, Zscaler PAC file change and Internet browsing exception requests.• Performing URL filtering and content filtering by adding URLs in Bluecoat Proxy SG\'s.• Successfully installed Palo AltoPA-3060 firewalls to protect Data Center and provided L3 support for routers/switches/firewalls.• Worked on Testing and migration of corporate Internet Zscaler tunnel from Dallas node and Ashburn node.• Worked on managing File transfer, webmail, elevated browsing, GitHub through the internet exception requests, on the Zscaler Proxy.

Education

• Wilmington University

  Master's degree, Network and System Administration/Administrator