Ujas Shah

About Ujas Shah

A secure network is not just a system, it’s the backbone of trust that keeps every transaction moving!”As a Senior Network and Security Engineer, I apply my around 10 years of experience in network design and security operations to protect the company\'s network from cyber threats, risks, and vulnerabilities. I leverage my credentials as an AWS Solution Architect Professional, a Palo Alto Networks Certified Network Security Engineer, and a Palo Alto ACE to design, deploy, and manage firewall, IPS, web proxy, cloud firewall, and endpoint security solutions across the enterprise.Some of the key projects I have worked on include Checkpoint IDS cleanup, Zscaler Private Access deployment and troubleshooting, Cisco ASA code upgrade and migration, and Palo Alto Global Protect implementation in AWS cloud. I also use Splunk to analyze security-based events, reports, and audits, and work on automation and orchestration for packet capture and IPS profile creation. I am passionate about learning new technologies and staying updated with the latest security trends and best practices. My goal is to continuously improve organization\'s network security posture and resilience.

Experience

1. Lead Network Security Engineer

   T-Mobile

   Jan 2022 — Present · Bellevue, WA, US

   Checkpoint network Security Engineer with extensive experience in managing firewall deployment, rule implementation and monitoring. Used Splunk Deployment Server to manage Splunk instances analyzed security-based events, risks & reporting Worked on Checkpoint IPS and IDS (R80.10) and managed IPS/IDS blade. Working on Checkpoint IDS cleanup project and doing packer capture enable for the for all the CVEs. Working on automation for the packet capture enable and detect mode. Worked on new IPS profile creation from the old profile. Major Projects - Zscaler Private Access Deployment and Troubleshooting, Cisco ASA code Upgrade and Migration, Deployed and supported Palo Alto Global Protect, provided support in multiple projects involved with configuring and troubleshooting firewalls (Palo Alto, Fortinet, Cisco ASA), proxy (ZIA) & VPN (ZPA and Global Protect) as per business requirements. Design, configuration, deployment, and maintenance of the Palo Alto Networks threat prevention profiles (IPS), URL Filtering, User-ID, DNS Security, Anti-virus, Wildfire and Panorama. Worked on PAN OS 9.X and 10.X Firewall Administration, Access Lists, Network Address Translation, Panorama Administration, PAN NGFW APP ID, CONTENT ID, USER ID, PAN NGFW IPS and IDS. Also worked on PAN NGFW VPN Deployment and troubleshooting, PAN NGFW High Availability (HA) Deployment and troubleshooting, PAN NGFW NAT Configuration and Troubleshooting, Zone Protection, Denial of Service (DOS) Protection PAN NGFW Traffic Monitoring. Worked on SSL Decryption, Certification Management, Windows, Linux OS, PAN NGFW Routing and Switching. Incident handling and investigation experience leveraging PAN firewalls, Zscaler proxy, Crowdstrike. Build and configure Palo Alto NG firewall and management server (Panorama) and Global Protect in AWS cloud and worked on deploying Palo Alto (Global Protect VPN solution) into AWS Cloud

Education

• Ganpat University

  Bachelor of Science - BS, Computer Engineering

  2009 — 2013

• California State University, Fullerton

  MS in Computer Software Engineering

  2014 — 2015