Chalamalasetti Raja

Network Security Engineer & Security Operations with over 3.3 years of experience working with enterprise networks. Skilled in setting up and managing IPsec & SSL VPNs, Cisco switches (9200, 9300, 9500), ISR-4000 routers, Cisco FTD1150, and FortiGate firewalls (1100E, 200E, 100E). Experienced with LAN/WAN configurations and switching protocols like VTP, STP, EtherChannel, Port Security, VLANs, Trunking, and Stacking.

Focused on creating secure, reliable, and scalable network solutions for business environment.

Network Engineer - Crisil - Mumbai

(2023-04)

• Maintaining regular backups of switches, routers, and firewalls configurations to ensure quick recovery and uninterrupted network operations.
• Monitored critical network parameters such as uptime, interface status, CPU load, and ISP outages using PRTG.
• Installed and configured Cisco 9200, 9300L2, and 9500 switches with VLANs, VTP, STP, EtherChannel, port security, and switch stacking for secure and optimized network performance.
• Configured site-to-site VPN tunnels to ensure secure connectivity between branch offices.
• Troubleshot issues related to both site-to-site and client VPN connections.
• Responsible for the network configuration, incident management, and requests.
• Configured OSPF and BGP for dynamic routing and better network performance.
• Set up VLANs and trunk ports to improve security and traffic control.
• Configured NAT/PAT and ACLs to manage and secure internet traffic.
• Fixed routing and connectivity issues follow-up by ISP vendors.
• Set up IPsec and SSL VPNs on Cisco ASA and AnyConnect for remote access.
• Troubleshot VPN issues like latency and authentication using log analysis.
• Managed firewall rules on Fortinet and Cisco ASA for secure access control.
• Conducted troubleshooting in collaboration with TAC support.
• Manage and update security policies (URL filtering, firewall, DLP) to control user access and protect against threats.
• Assisted in vulnerability identification, remediation tracking, and patch management for network and security devices.
• Worked with Web Application Firewall (WAF) policies to help protect web applications against attacks such as SQL Injection, XSS, and malicious traffic.
• Performed security log monitoring and traffic analysis using Wireshark, PRTG, and SolarWinds.
• Worked on monitoring web application traffic and identifying suspicious requests using WAF dashboards.
• Knowledge of Layer 7 application security and HTTP/HTTPS traffic inspection.
• Understanding of positive and negative security models in WAF implementation.
• Familiar with rate limiting, geo-blocking, IP reputation filtering, and bot protection.
• Experience analyzing false positives and tuning WAF rules for optimized security.
• Supported incident response activities including threat investigation, access review, and security troubleshooting.
• Collaborated with internal teams to implement secure access controls and improve overall security posture.
• Assisted in monitoring endpoint and network security events aligned with security operations processes.
• Worked on firewall policy reviews, URL filtering, and security rule optimization to reduce security risks.
• Knowledge of vulnerability scanning tools and security assessment methodologies.
• Familiar with remediation tracking and vulnerability prioritization based on business impact.
• Understanding of network, server, and application vulnerability analysis.
• Assisted in monitoring security posture and maintaining compliance standards.
• Familiar with threat-based risk assessment and exposure management concepts.
• Enabled content filtering using Zscaler ZIA and firewalls.
• Supported Zscaler client setups and handled user login via SAML and LDAP.
• Set up PAC files, GRE/IPSec tunnels, and Zscaler Client Connector for secure traffic forwarding.
• Monitor threats, internet usage, and generate reports using the Zscaler dashboard.
• Help users with Zscaler Client Connector installation and troubleshooting issues.
• Set up data protection policies and generate compliance reports as per standards.
• Created and managed VPNs including Site-to-Site IPsec, SSL VPN, and Cisco AnyConnect for remote access.
• Monitored network traffic and security alerts using tools like PRTG, SolarWinds, and Wireshark.
• Troubleshot complex network issues including routing problems, firewall rule conflicts, and VPN outages.
• Handled device upgrades, patching, and IOS image management for switches, routers, and firewalls.
• Collaborated with ISPs for outage resolution and escalation cases.
• Collaborated OEM vendors for support and RMA processing.
• Performed regular backup and recovery of network device configurations.
• Participated in network change management processes, including documentation and impact analysis.
• Diagnosed connectivity issues using tools like ping, traceroute, tcpdump, and netstat.
• Created and maintained network diagrams and documentation using Microsoft Visio.
• Monitored and analyzed security alerts, suspicious traffic, and firewall events to support security operations activities.

B.S.C - Krishna University (2023-05)