1. Experience:
15 years in IT Network (LAN & WAN) & Security Designing and
administration, Managing MPLS VPN based links across the
country with three service providers for load sharing and fall back
up features, Lotus Domino Emailing admin, security
Administration, Symantec enterprise antivirus , Internet link and
internet security policy implementation, IT Network audit, Internet
systems, Video Conferencing IT infrastructure.
4 years : Manufacturing Plant as electronic maintenance engineer
1. Job Description :-
I am responsible (heading Network group) for Designing, procurement and implementation,
support of Enterprise Wide Area Network (WAN & LAN ) of IFFCO, Enterprise
Network Security , Enterprise Video Conferencing, e-mail system of IFFCO,
Enterprise Antivirus system and internet system for the organisation. Responsible for
suggestion/ recommendation for any design change/ up gradation of above systems to higher
management and other group of companies such as IFFCO Tokio (ITGI), IKSL, Kisan Call
Center (KCC) for GoI etc. in addition to implementation technologies with help of team.
IFFCO, head office in Delhi, has five manufacturing plants and around 600 marketing offices
all over India having turn over more than Rs. 20,000 (approx) crore and 6500 permanent
Workforce. Oracle ERP, HRMS, payroll, work flow for all internal applications/forms, e-
procurement system, payment to vendor etc, marketing management system and e-mail
system are fully software based, developed and managed by inhouse team of IFFCO. The
computerization is reached upto Field offices level and all applications are centrally deployed
and used through WAN. WAN includes about 150 MPLS VPN link from BSNL (most of the
links are 8 Mbps but some of 80 mpbs) links, from Tata Communication and Airtel getting
terminated on same router for failover and load sharing. Routers are Cisco 3925/2851, Cisco
2811 and Cisco 1841. BGP is configured for routing protocol. Radware link load balancer
installed to get failover features. 29 & 10 MPLS VPN links are commissioned from Airtel
Bharti & Tata communication to provide redundancy and load sharing.
Implemented network security policies by installing and configuring Cisco PIX/ASA
firewalls, IPS, Intrusion Detection Systems (Macfee IPS) on all three internet links for
securing WAN, LAN and server systems from external world.
Implemented Checkpoint based firewall for creating DMZ zone in existing LAN. In this
zone all critical servers are installed and security policies are implemented on it to
provide security from internal employees/vendors as well from external world.
Rules based policy giving permission/restricting ports and IP of servers and clients are
configured on checkpoint Firewall. Servers/Application are Redhat Linux, Windows,
Oracle, Domino mail server, Symantec etc.
Daily activities involve monitoring log of denied traffic and behavior of other traffic/user
on the Checkpoint, Websense reporting portal.
Providing nationwide technical support to Operations team and Project
Engineers/Managers for WAN, Security, Lotus Domino mail servers, Symantec
enterprise antivirus systems, Information security and internet systems
2. Monitoring and analyzing health of mail servers, routers and WAN links by using
different network management software tools (NMS) i.e. Cisco what’s up works,
Solar Wind Orion NMS, PRTG, Ping plotter etc.
Two factor with Entrust OTP Token based Cisco VPN client have been configured in the
firewall and ACS server to give full access of IFFCO Data center from employees’
residence through broadband internet to work after office hour/travelling or holidays..
Design , procure and implemented Cisco Nexus based fully redundant switches on LAN for data
center with Fiber connectivity of 10Gbps.
Design , procure and implemented Cisco Nexus based fully redundant switches on LAN for data
center with Fiber connectivity of 10Gbps.
Design , procure and implemented Cisco 4507R Core fully redundant switches on LAN for data
center with Fiber connectivity of 10Gbps with other network within building and integration with
WAN.
Implemented Cisco based wi-fi network with controller integrated.
Responsible for Planning, preparation of specifications, procurement, Installation,
configuration and maintenance of Lotus domino mail servers in IFFCO and its
administration. There are 8 mail servers on IBM Red Hat Linux blade servers.
Responsible for Planning, preparation of specifications, procurement, Installation,
configuration and up gradation of WAN equipments. All WAN equipments are CISCO
make.
Designed and implemented VoIP system on MPLS VPN link covering all offices of
IFFCO across India using CISCO Call Manager.
Planned, designed and implemented Symantec endpoint Protection Antivirus servers
in Head office Delhi and client at plants, Zonal office and other offices arcos the country.
Groupware on Lotus mail servers is also installed on each mail server to prevent virus and
spam mails.
Planned, procured, commissioned and Managing three internet lease links and Linux
based Squid proxy servers are configured to provide internet to selected users throughout
India using MPLS VPN.
Coordinating with HCL Comnet Ltd. for maintenance of 93 MPLS VPN links.
Maintaining PSTN dialup on MPLS VPN links that are about 500 field offices in smaller
town of India.
Member of Information Security committee of IFFCO setup for security
implementation, study and gap analysis of ISO 2000.
Design, procure, install and maintaining HD Video conferencing systems at 25 offices
including 5 Plants across the country with 99.5% uptime in lowest budget and no
recurring cost. Telepresence systems is integrated with legacy system
2. Team Size :-
Team includes myself as team leader, 10 IFFCO’s Asst systems analyst and team of 5
resident engineers of HCL Comnet and many engrs in the field.
3. Certification & Training program attended :-
Checkpoint Certified Security Administration NGX (CCSA) .
3. One week training program on Red hat Linux for installation and managing servers etc
conducted by Red Hat.
One week training program on Standards and best Practices for ISO 27000 (Information
security Mgmt systems standard) conducted by BSI, India.
One week workshop on information system audit “ Procedures and Practices” by CISMA
Chennai.
Attended 3 months training program on Oracle, SQL and Java based programming, LAN,
WAN in the year 2000.