1. Door No #514
Aratt Felecita Apartment
Begur, 560068, Bangalore, India
+91-9986530034
anoopva@gmail.com
Anoop V A
Objective A responsible position, which offers me constant challenges, which will fully
utilize my proven organizational and interpersonal skills and advancement based
on my merit and value addition in a growing concern.
Strengths
• More than 9 years of experience in C/C++ in various platforms.
• More than 8 years of Network security protocol design.
• Sound knowledge in protocols like, IKE, IKEv2,IPSec, GDOI and
NHRP
• Sound knowledge of software engineering principles and the related
processes.(Agile and waterfall model).
• Development experience on high performance Networking operating
systems like IOS, Linux and VxWorks.
• Good knowledge on version control tools – clear case and SVN.
• Flexible, highly organized individual with the proven ability to adapt
and react quickly in a fast-paced environment.
Skill Set • C/C++
• IKE/IKEv2, IPSec – VPN Solutions.
Experience
2010 Dec – Till Date Cisco Systems India Bangalore, India
Software Engineer
• Development and support for different VPN solution EzVPN, DMVPN,
FlexVPN and GetVPN.
• Development and support for IKE/IKEv2 – IPSec protocol
• Customer interaction – on the VPN solutions support on the live
network.
2007 Aug – 2010 Dec Huawei Technologies Bangalore, India
Software Engineer
• Involved in all the software life cycles of the project ‘IP Security
Component’.
• I have been a great team player and motivator in my team.
• Successfully handled MT projects.
• I have been a part of the ‘Training System’, exclusively implemented by
our department.
2. 2006 June – 2007 Aug Infosys Technologies Hyderabad, India
Software Engineer
• I was working for BT services.
• Developed an automated testing tool for BTQUEBEC.
• Extensively worked in the manual testing process carried out for
BTQUEBEC.
Key Projects
# ESON
Encrypted Secure Overlay Network is centralized security model based on
IPSec protocol. A centralized Key Generating Server(KGS) pushes a key
seed to all the client which is registered to it. Using this key seed the clients
derives a pairwise key b/w two devices with minimal message exchange(2
message).
# iWAN –AKAMAI IPSec Support.
Internet WAN model with AKAMAI network – supporting DmVPN/IPSec
use cases. The feature is mainly from IPSec side to form the IPSec side to
support building the Tunnel over the AKAMAI network.
# GIKEv2
GIKEv2 is the solution that implements the Group Encryption Traffic VPN
over IKEv2. GIKEv2 is site-to-site VPN solution that managed by a central
unit. It enables Multicasting over the IPSec tunnels – usually fit for
ISP/MPLS networks.
# DMVPN
Enhancement and support for the DMVPN solutions. Dynamic
Multipoint VPN enables the device to discover the peer dynamically and
brings the VPN tunnels. It internally used NHRP protocol for dynamic peer
discovery. Its fits in dynamic site-to-site IPSec based VPN solution.
# Flex VPN
Flex VPN is an IKEv2 based solution that integrates all the VPN
solutions in a single umbrella. Flex VPN serves – remote- access and site-to-
site in single construct.
# EzVPN
EzVPN is typical remote-access VPN solution based on IKEv1 protocol.
EzVPN is a powerful and widely used cisco remote-access solution with rich
feature set.
# GDOI
GetVPN is a solution that provides a site-to-site VPN solution – where
the tunnel can carry even multi cast data. This protocol runs over IKEv1 and
mostly used in MPLS/ISP network.
# PKI Support in IKE
RSA based authentication method implementation for IKEv1. It includes
both signature and public key encryption authentication method
# DSCP Support in IPSec
Differentiated Service integration in IPSec tunnels. The idea is to
establish multiple IPSec SA between the same peer with the same proxies –
but with different DSCP bits (according to the configuration). This enables the
encrypted packet to carry the original DSCP policy even on the overlay
transport routing.
# Repeated Authentication in Internet Key Exchange
Re-Authentication mechanism for IKEv2 protocol. This feature
enables the IKEv2 peers to re-authenticate periodically to keep the trust
model.
3. # Dead Peer Detection
Dead Peer Detection – is a keep alive mechanism used in IKEv1 to
check the liveliness of the peer. This enables faster recovery on network
outage.
# AES Support In IKE
Provided support for IKEv1(ISAKMP) / IKEv2 and IPSec protocol for
different VPN solution designs. Mainly it was sustenance work, and some
optimization for the protocol based on the scale figure requirement and
porting to different platforms etc.
# BTQUEBEC
NMS management for the BT devices. This includes inventory and
management of devices using IBM proviso tool. This includes customization
of the tool to meet the customer requirements.
Achievements
• Received best performer award for the new comer from Huawei
• Two CAP award for solving critical customer issues. Solved more than
100 customer issues.
• Received spark award for team collaboration.
• Spark award for conducting training session to the Sales and Marketing
engineers.
Qualifications *. B.Tech in Computer Science and Engineering - (2000-2004)
College of Engineering, Munnar
University: Cochin University of Science and Technology, Kerala, India.
Passed with 1st Class. (71%)
*. Advance Diploma in Embedded systems. – (2005-2006)
Cranes Varsity Bangalore
*. Linux Administration certification (2004)
NIIT – Kodungallur
Personal Details Permanent Address : Anoop V A
Vadakethalakkal House, Mathilakam P.O
Thrissur, Kerala, India – 680685
Date of Birth : 26 April 1983
Marital Status : Married
Nationality : India