Giriraj Dangi

CURRICULUM VITAE 

Giriraj Dangi  

PROFILE SUMMARY 

● 9.4 years of experience in Network Security and Cloud Security. People Management, performing analysis, design, implementing, and troubleshooting with a focus on performance tuning and support of large enterprise networks. Experience in service validation, gateway support and troubleshooting network, security and cloud infrastructure. Expertise in creating test plans, test estimation, test execution & reporting and Client Management. 

MULTI-VENDOR TECHNICAL EXPOSURE 

Cloud security, Network Architecture Design, ISO27001, PCI-DSS, CISCO ASA Firewall, Palo Alto Firewall, AWS, Azure, Kubernetes, Docker, SIEM, ISO 27001, Python, Network Automation, F5 load balancer, Routers, VPN, Nexus Switches, Switches, VoIP, Wireless, Information Security, IPS/IDS, Bluecoat Proxy, ISE and SDWAN. 

EMPLOYMENT HISTORY                     

   Fiserv    |          Network Engineer  Specialist   |      November 2016 – August 2022

• Strong experience with Network Security Architecture Design, Implementation and Troubleshooting.
• People Management. Managed 10 People Team.
• Experience in Designing and supporting multi-cloud environments (AWS/Azure)
• with Firewall, Cloud, Routers, Switches, SIEM, Nexus, and F5 load balancer.
• Experience with container orchestration, with Terraform, Kubernetes
• Experience in HLD and LLD for On-premise and Cloud Solution Architects.
• Experience with Networking, Security, VPN, VoIP, F5 load balancer, SDWAN, 
• Perform Cloud, Firewall, Security, routing, and networking tasks daily.
• Explain complex technical architectures to those less fluent
• Interact with Clients, and work in complex Environments.
• Work on Network Automation (Python), Software-defined networks (SDwan, Meraki, ACI). 
• Knowledge of security compliance standards and regulations ISO 27001 and (PCI DSS).
• Plan and prioritise workload, whilst dealing with changing demands
• Take ownership of the Project and thrive on a high level of autonomy and responsibility
• Built the entire Office IT setup including Cloud, Firewall, Router, Switches, Wireless APs, Controller, VoIP, and Bluecoat Proxy.
• Vendor and client management.
• Build 4 Network Infrastructures across the Globe.

 PFSweb         |        Network Engineer    |                          April 2015 - November 2016 

• Designed and built the PFSweb India on-premises Data Centre in Bangalore.
• Migrated the Data centre without any downtime.
•  Set up the 5 India branch offices and connected for Network and data redundancy to USA Dallas.
• Built the entire Office IT setup including Firewall, Router, Switches, Wireless APs, Controller, and Network Elements.
• Responsible to manage the Network and Security Infrastructure of  27 PCI DSS environment Global Locations. 
•  Client and Vendor management.
• Worked on day-to-day basis tickets, Monitoring. 

CISCO (Payroll Company Skylab Infotech)                                                                                                                                                Network Security Engineer                |             May 2013 to March 2015

• Designed and Built Network Infrastructure for Clients.
• Responsible for Client Infrastructure (configuration, Upgrade, Troubleshooting).
• Setup Interact with the Client and design the Network Infrastructure (Firewall, Router, Switches, WLC AND WAP)
• Site visits and mitigates and troubleshoots the issues.
• Provide Solutions to the client for Billing and Data-centre Maintenance. 
• Handle the client’s configuration and device replacement. 

EXPERIENCED TECHNICAL SKILLS, TOOLS AND TECHNOLOGY  

Cisco Firewall, FTD, Checkpoint, Smart Console, Palo Alto Firewall, AWS, Azure, Kubernetes, Network Automation, Meraki, F5 load balancer, Routers OSPF, EIGRP, BGP, VPN, DMVPN, MPLS, Nexus Switches, API, Switches, VoIP, Wireless, Information Security, IPS/IDS, Bluecoat Proxy, ISE, SDWAN, MPLS, ServiceNow, Qradar, Splunk, Tufin, Tcpdump, Wireshark, Trace-route, Nmap, Cisco Prime Infrastructure, Solar wind Orion, Spectrum, VDI, Out of Band, Cisco ACS, Nagios, Unified call Manager, Unity and Finesse, Cambium PTP 650, WLC, WAP, PCI- DSS Compliance, ISO 27001, Network Automation, SIEM, Security Compliance.

EDUCATION AND TECHNICAL CERTIFICATIONS 

BACHELOR OF ENGINEERING   - RGPV UNIVERSITY    APRIL 2009- APRIL 2013

            CCNP SECURITY ( CISCO )                                              SEPT 2014 - PRESENT

             PCNSE ( PALO ALTO)                                                     JUNE 2022- PRESENT

             AZ900 ( MICROSOFT AZURE)                                     MARCH 2022- PRESENT

             AZ500 ( MICROSOFT AZURE)                                      JULY 2022- PRESENT

            AZ900 ( MICROSOFT AZURE)                                      AUGUST 2022- PRESENT

             ITIL V4 FOUNDATION ( AXELOS)                                JULY 2022- PRESENT

MORE ABOUT ME 

PROFILE SUMMARY

● 9 years of experience in Network engineering, performing analysis, design,
implementing, troubleshooting with focus on performance tuning and support of
large enterprise networks.
● Experience in service validation, gateway support and troubleshooting network,
security infrastructure on routers, switches, and firewalls; expertise in creating test
plan, test estimation, test execution & reporting.
● Worked on Cisco Routers, Cisco Switches, Cisco ASA, Nexus series, IPS/IDS, ISE,
Bluecoat , Cisco Wireless Controller, AP, WSA/Iron port, Cisco call Manager, ACS
server, Cisco Call Manager, Voice mail unity, Load Balancers, Firewalls.
● Part of Migration Project for Cloud Security (Azure and AWS).
● Worked on the Audits, PCI DSS compliance, Security rules and Vulnerability
assessments.
● Worked on Tufin, HPNA, Spectrum, Nmap, Qradar, Wireshark and packet analyzer.
● Expert in configuration of Virtual Local Area Networks using Cisco routers, multi-
layer switches and supporting STP, RSTP, PVST, RPVST with troubleshooting inter-
VLAN routing & VLAN trunking using 802.1Q.
● Worked on routing protocols BGP, OSPF, EIGRP, RIP.
● Experience in working with F5 Load Balancers for LTM and GTM

● In-depth understanding of IPV4 & implementation of Subnetting Knowledge of
implementing and troubleshooting complex layer 2 technologies such as VLAN
Trunks, VTP, Ether channel, STP, RSTP and MST, VLAN, STP, VTP, HSRP & GLBP.
● Expert in implementation, configuration, troubleshooting of Access Control Lists
(ACL), NAT and Cisco IOS.
● Knowledge of various advanced technologies like Cisco Call manager, Finesse, VOIP,
QOS, IPv4, Multicasting.
● Worked on Cisco catalyst routers and implemented.
● Setup of IPSEC VPN and remote Site-to-site VPN, Web VPN, DMVPN and MPLS
connections to communicate between branches.
● Hands-on experience on CISCO ASA Firewalls, ASA 5500, 55XX series firewalls.
Implemented Security Policies using ACL, IPS/IDS, AAA (TACACS+, RADIUS).
● Implementation of Data Center migration.
● Worked on Eline Setup
● Worked on PALO ALTO firewall and Dell Sonic wall firewall.
● Experience of Monitoring tools Solarwinds Orion, Nagios, Cisco prime
infrastructure, Qradar, Lansweeper, PRTG, MRTG.
● Hands on experience in Cisco CAT IOS, XE and XR configuration & troubleshooting of
routing protocols: RIP, BGP, OSPF, EIGRP,
● Experience with different Network Management Like Tufin, Pearl, Cisco prime infra.
● Experience in ticketing tools like ServiceNow, Kayak Fusion, Track IT.
● knowledge on Backtrack and kali Linux OS.
EXPERIENCE
Fiserv, Pune Network Engineer, Specialist from November 2016 - Present
Responsible for Network Architecture Design, Administration, Maintenance (IT Operations)
based around Cisco technologies also responsible for compliance and security. Working as
part of a team and operating in a fast paced, changing, and challenging 24x7 environment.
- Duties:
● Managing the Datacenter Administering & designing LANs, WANs internet/intranet.
● Network and security infrastructure Planning, Implementation & Designing and
troubleshooting.
● Configuration and troubleshooting of Cisco ASA5500-X, ASA 5500, Firepower, Palo
Alto Firewall.
● Worked in a high availability environment and provided Level 3 network support.
● Network and security Architecture design, Implementation and Troubleshooting.
● Configuration and troubleshooting DMVPN, MPLS, Site-to-site VPN.
● Configuration and maintaining IPS/IDS, WSA (Iron port), ISE (identity Service
Engine).

● Configuration and troubleshooting Cisco WLC (5508, 2504), Meraki, CAP and AP.
● Work on Network security audits (PCI-DSS), Compliance, and security Reports.
● Work on RSA signature, CA certificates and ACS server (AAA).
● Worked on Bluecoat Proxy.
● Worked on Vender management skills (Service provider, product purchasing).
● Designed and installed new branch network systems. Resolved network issues,
running test scripts, and preparing Network documentation.
● Responsible for service request tickets generated by the helpdesk in all phases such
as troubleshooting, maintenance, upgrades, patches, and fixes with all around
technical support.
● Worked on CISCO Nexus platforms, Catalyst Switches (Multi-layer, L3 and L2).
● Resolution of complex routing, switching and security related problems with Cisco
and routers and firewalls.
● Upgraded 50 sites WAN technology with DMVPN Sites design, implementation.
● Deal with monitoring tools like Orion Solar winds, Nagios, Splunk and network
packet capture tools like Wire-shark etc.
● Configured HSRP, GLBP, VLAN, VTP's, Trunking 802.1Q, STP, Port security on
switches.
● Involved in Configuring, monitoring, and troubleshooting Cisco ASA 5500,55XX, Palo
Alto, Failover DMZ zoning and configuring VLANs, routing, NAT, ACL with the
firewalls as per the design.
● Involved in L2/L3 Switching technology administration including creating and
maintaining VLANs, Port security, Trunking, STP, Inter Vlan Routing, LAN security.
HSRP and Ether channel configuration.
● Configured VoIP using Cisco Call Manager, Unity, Finesse.
● Responsible for communication protocols (RIP, EIGRP, OSPF and BGP) configuration,
integration & security.
● Configured and performed configuration, troubleshooting and software upgrades on
Cisco Wireless LAN Controllers 5508 for wireless Network Access control
integration.
● Configured and implemented F5 BIG-IP, LTM, GTM load balancers to maintain global
and local traffic.
● Planned, tested & evaluated equipment's, systems, IOS & procedures for use in
Network/security infrastructure.
Tools- Tufin, Pearl, Wireshark, HPNA, Spectrum, Orion, Cisco Prime.
Environment: Nexus 7k, 5k, Checkpoint firewall, Cisco ASA 5500, BGP, EIGRP, OSPF, MPLS,
VPN, F5 Load Balancer, HSRP, QoS, VPN Core switches 6800, 6500, 4500, Cisco routers 3660,
7609, ASR 5500,AS4 Routing WireShark, Solar winds, Cisco Routers, Switches, OSPF, EIGRP
,Palo Alto, Routing, Bluecoat, Net flow, Access Control Server (ACS), DMVPN, VPN, MPLS,

LAN, WAN, ASA, Solar winds, Cisco Prime, VMware, Cisco ISE, , Bluecoat, ISE, Iron port,
bluecoat, Tufin, Service now, CCM, Unity voicemail, Wireless, WLC, AP.
--------------------------------------------------------------------------------------------------------------------

PFSweb, Bangalore Network Security Engineer from April 2015- present
Responsible for Network Architecture Design, Administration, Maintenance also responsible
for compliance and security. Working as part of a team and operating in a fast paced,
changing, and challenging 24x7 environment.
- Duties:
● Managing the Datacenter Administering & designing LANs, WANs internet/intranet.
● Worked with Network Design & Implementation teams on projects related to
Branch, Campus & Data Centre.
● Responsible for communication protocols (RIP, EIGRP, OSPF and BGP), configuration,
integration & security.
● Configuration/troubleshooting of Cisco Routers, Switches, Nexus Switches.
● Configuration and troubleshooting of Cisco ASA5500-X, ASA 5500, Sonicwall-
NSA2400.
● Configuration and Troubleshooting DMVPN, IPSEC VPN.
● Configuration and maintaining intrusion prevention system (IPS), Web Filtering.
● Worked on Orion, Nagios, PRTG, CISCO Prime infrastructure.
● Configuration and troubleshooting Cisco WLC, Meraki, CAP and AP.
● Work on RSA signature, CA certificates and ACS server (AAA).
● Network infrastructure Planning, Implementation & Designing.
● Wireless P2P connection (cambium PTP-650).
● IOS Upgradation of Routers, switches, and Firewalls.
● Worked on Cisco WSA (Iron port).
● Configured Cisco IP (VOIP) phones, and Telephony.
● Implemented Firewall Technologies NAT, PAT & Access Control Lists (ACL), Failover
(Active/active, active/standby).
● Configured network using routing protocols such as RIP, EIGRP and troubleshooting
L2/L3 issues.
● Tested various networks, which works on the protocols of TCP/IP (IP, TCP, UDP,
SNMP, DNS, DHCP, FTP, HTTP, HTTPS, ICMP, SMTP, ARP,).
● Involved in Troubleshooting of complex LAN/WAN infrastructure, network
connectivity, Network Down situation and emergency.
● Monitored and resolved network device issues identified by Orion.
Environment: Firewall, ASA, WSA, Switches, Routers, WLC, VoIP, Quality Center, Balance
Manager, WAP, WLC, Snooper, Solar winds, WireShark. Sonic wall firewall, Cisco ASA 5500,

BGP, EIGRP, OSPF, MPLS, VPN, HSRP, QoS, VPN, Cisco switches 2232, 5596, 7009.
Implementation, monitoring and Troubleshooting.
---------------------------------------------------------------------------------------------------------------------
Levvo Technologies (CISCO), Bangalore Network Engineer May 2013 to March
2015
- Duties:
● Designing and providing solutions to clients.
● Network and security infrastructure Planning, Implementation & Designing and for
clients.
● Design, Configuration/troubleshooting of Cisco routers and switches, Cisco ASA and
PIX.
● Configuration/troubleshooting of D-Link Wireless, VOIP.
● Responsible for communication protocols, configuration, integration & security.
● Configuration and troubleshooting on Routing, Switching, EIGRP and OSPF.
● Configuration and Troubleshooting on ASA, ZBF and Transparent Firewall.
● Handling change management and IOS upgrade of all the devices CISCO.
● Worked on issues of VPN, GRE.
● Worked on Syslog, SNMP, and NOC.
● Handle the client’s configuration, device replacement.

EXPERIENCED TECHNICAL SKILLS
Security Technologies:
IronPort, ISE, Compliance, Security, Vulnerability scanning, Security Patching, Access
Control List (ACL), Time Based ACL, Reflexive ACL, CBAC, TCP Intercepts, Data Plane
Security, Control Plane Security, Attack Mitigation techniques using Network Based
Application Recognition (NBAR), Policy Based Routing (PBR), DOS attack mitigation, IP
Source Tracker, IP Spoofing, Reverse path forwarding (RPF), routing protocols
authentication, ACS, AAA, Radius, TACACS+.
Firewalls:
Palo alto, Cisco PIX / ASA, Downloadable ACLs, SLA monitoring, Application layer
Inspection,
TCP Normalization techniques, URL Filtering, DMZs, State-full inspection, Arp Inspection
Transparent mode, Active/Active Failover, Active/Standby Failover, Stateful Failover, Multi-
context, Access Control List, and Object groups, Same-Security-Level Communications,
Management Protocols Configuring SNMP V2&V3.
Virtual Private Networks:
Cisco ASA based VPNs, Cisco VPN client, DMVPN 1,2 and 3
IPSec LAN-TO-LAN VPN, L3 VPN, GRE P2P, IPSec over GRE, Cisco DMVPN, MGRE, Cisco
EZVPN, Split-tunnel, GET-VPN, proxy VPN, RSA signature.
Routing Technologies:
Static, Dynamic, RIP, EIGRP, OSPF, Redistribution, Route Filtering, IPv4, IPv6.
Switching Technologies:

L2 switching. VLANs, Private-VLANs, VACL, VTP, Ether-channel/Port Channel,
LACP/PAGP, STP, RSTP, MSTP, SPAN/RSPAN/VSPAN, Layer-2 ACL, BPDU, DHCP
Snooping and Port Security.
IP Services:
NAT/PAT, NTP, DHCP, DNS, NTP, GRE, HSRP, VRRP, GLBP, Access Control List (ACL),
IOS up-gradation, Netflow, Syslog.
Security: SourceFire (SFR), IPS , Web Security Appliance (WSA), Identity Service
Engine (ISE), Network Vulnerability Scan, Network Patch fix, PCI-DSS (Network
Part).
Others:
Bluecoat, HPNA, Spectrum, Qradar, Pearl, Orion, NagiosXi, PRTG/MRTG, Net brain,
VMware, Nmap.
MULTI-VENDOR TECHNICAL EXPOSURE
Routers - 2911-k9, 3945, ISR-XE, XR, ASR9k
Switches - Nexus Platform 7k (7009), 5k(5548P), 4507E, 3850, stack switches, Cisco MDS
904507E, 20, Cisco sg300, 2960, 2960-x, 3650, Matrix, Brocade.
Firewall- 5500 series, 5500-X series, Palo alto, Dell Sonicwall
Wireless controller – CISCO 2504, 5508, Meraki , Clear air AP
VOIP- CISCO Call manager and Unity.Others: Cisco ACS, ISE, WSA, ASDM/IDM, Prime, Bluecoat, F5, Cloud ( Azure, AWS).
 

Qualification School\College University
B.E. (Computer & Science) RIT, INDORE RGPV, Bhopal (72%)

PROFESSIONAL CERTIFICATION

CCNP-SECURITY

PCNSE

ITIL V4 Foundation

AZ900

AZ500

AZ700