This document contains a summary of Santosh K L's contact information, work experience, skills, and qualifications. Some key details include: - Over 6 years of experience in technical services, process management, team management, and client servicing roles. - Most recent role as a Technical Services Engineer at Curvature Singapore supporting Cisco products such as switches, routers, and firewalls. - Previous experience as a Senior Network Engineer at Dimension Data Bangalore supporting firewall and security products from Checkpoint, Palo Alto, Cisco, and others. - Skilled in network security, routing, switching, firewall configuration and troubleshooting, and team leadership.

1. Santosh K L
Contact No.: +65 8236 8734, +91- 9686263949
E-Mail: kl.san20@gmail.com
To seek challenging assignment and responsibility, with an opportunity for growth and career
advancement as successful achievements.
 An astute, multifaceted, results-oriented leader with an experience of 6+ years in Technical services, Process Management,
Team Management & Client Servicing.
 Been associated with IBM India Pvt. Ltd, Bangalore as Operations Professional & Sr. Systems engineer with Larsen & Toubro
InfoTech.
 Proficient at managing & leading large teams for running successful process operations & experience of developing
procedures, service standards for quality excellence.
 A thorough professional with a proactiveattitude, capableof thinking in and out of the box, generating new design solutions
and ideas.
 An exemplary team leader with proven abilities in resolving critical escalated issues of team members.
 Possess excellent interpersonal, communication and organizational skills with proven abilities in team management,
customer relationship management and planning.
Process Management
 Mapping client’s requirements & coordinating in developing, implementing the required service specified by the client.
 Creating & implementing workflows to facilitate structured support in relevant areas and issues.
 Sending reports to top management and maintaining agreed SLA with customers & thereby focusing on maximizing customer
satisfaction with quality adherence.
Team Management
 Identifying and implementing strategies for building team effectiveness by promoting a spirit of cooperation between team
members.
 Creating and sustainingan environment that fastens development opportunities and motivating the employees for enhancing
the existing performance levels.
 Maintaining the attrition levels and developing career progression plans.
Professional Experience
Dec 2016 till present, Curvature Singapore as Technical services engineer
 Workingas Technical services engineer supportingmainlyCisco products suchasSwitches, Routers, ASA, Firepower, ISE, IPS
etc…
 Performhardwarediagnosticsfor customer queries suspectinghardwareissues and raiseRMAaccordingly for replacement.
 Configuringvirtual firewallsin cisco ASAfor network traffic isolation,troubleshootingand configuring high availability with
Active/active & active/standby failover.
 Deployingsite-to-siteIPsec vpn,managingCertificate Authority server for PKI based authentications, Configuring Remote
Access IPSEC VPN using cisco VPN client.
 Proactivenetwork monitoring with cisco IPS sensor.IPS sensor initialization with deployingin promiscuous,inline&
inlinevlan pairmodes.

2.  Configuring and troubleshooting dynamic routing protocols OSPF, EIGRP and BGP.
 Configuring and troubleshooting VLANs, VTP, STP, RSTP, etherchannel etc…
 Perform day-to-day operations for managing and network and security devices in a complex multi -vendor environment.
 Implement next-generation identity and accesscontrol platform,which enablesenterprises to enforcecompliance, enhance
infrastructure security and streamline service operations using Cisco ISE, which uses RADIUS and TACACS+ protocols.
 Manager VPN sessions, interface throughput, configure HA, IPsec site-to-site VPN etc... Using ASDM.
 TroubleshootASAconnection issuesusing packet tracer feature in ASDM and keep track of real time logs using ASDM log
viewer.
 Configure and troubleshoot DNS, DHCP, NTP and syslog servers.
 Administer and troubleshoot OSPF, EIGRP and BGP routing protocols on Cisco routers.
 Prevent loop occurrence when switches areinterconnected via multiple paths using STP.
 Configurelayer 2 security featureslikePortsecurity,DHCP snooping,IPsourceGuard and dynamic ARP inspection in Cisco
switches.
Mar 2015 till Dec 2016, Dimension Data Bangalore as Senior Network Engineer-Security
 Working as Senior Network Security TAC engineer supportingmultiplevendor products such asCheckpointR77 firewall, Palo
Alto firewall, Bluecoat ProxySG, Cisco ASA, Cisco ISE, Infoblox IPAM.
 Administration & troubleshooting ProxySG 510 which includes policy management using VPM, web caching, content
filtering, authentication & access logging using Reporter toolkit & HTTPS traffic interception.
 DeployingPalo Alto firewall rightfrominstalling on VMware platform to configuring the necessary features as defined by
customer.
 RegisteringPANfirewall for downloading regular updates for antivirus, URL filtering and PAN OS updates for keeping the
firewall up to date for protection against threats.
 ConfiguringZones to isolate the security levels to inside, outside and DMZ networks as part of basic security of network.
 Create multipleVirtual Routersto routedifferentcustomer traffic based on routing information in virtual routers which is
similar to VRF in Cisco terminology.
 Setting up dynamic routing in PAN firewall using OSPF.
 Design security policies on PAN firewall for controlling what traffic needs to be allowed or blocked based on customer
requirements.
 ConfigureOutbound SSL decryption on firewall, URL filtering for blocking malicious websites based on categories or the
content.
 Deploy Global Protect (Client VPN) for secure access over internet with encryption and site to site VPN tunnel using VTI.
 Organise Captive portal for the end users to authenticate before establishing connection to internet.
 Experience in configuring & troubleshooting dynamic routing protocols like OSPF and EIGRP.
 OSPF route filtering based on Route-type, advertising router, interface, next-hop etc…
 Optimizing OSPF by tuning Hello-interval, Dead-interval and retransmit-interval.
 Worked on Checkpoint R76 & R77 GAIA platform which includes administration of checkpoint components such as
Smartdashboard, SmartviewTracker and SmartUpdate etc...
 Hands on experience in troubleshooting MDS (Multi Domain Server) & DMS (Domain Management Server) for managing
complex network security infrastructure using Checkpoint firewall which includes VSX & clustering.
 Active/standby failover setup on all the DMZ, security & vpn zones firewalls.
 Failover & redundancy setup for internet facing routers with HSRP protocol & QOS for priority based traffic routing.
 Configuring and troubleshooting dynamic routing protocols OSPF, EIGRP and BGP.
 Configuring and troubleshooting VLANs, VTP, STP, RSTP, etherchannel etc…
 Deployingsiteto siteIPsec vpn,managing Certificate Authority server for PKI based authentications, Configuring Remote
Access IPSEC VPN using cisco VPN client.
 Managing end user authentication using AAA services with Cisco ISE integrated with Active Directory.
Sep 2013 to Mar 2015, L&T InfoTech Bangalore as Systems Engineer
Chevron Texaco Corp, Singapore
 As senior systems engineer I’mexposed to a complicated setup of network security infrastructurewhich includes more than
1000+ firewalls across globe.
 Identify and control users regardless of IP address,location or device usingPalo Alto (PA) firewall.

3.  Perform day to day operations for managing and network and security devices in a complex multi -vendor environment.
 Implement next-generation identity and accesscontrol platformwhich enables enterprises to enforce compliance, enhance
infrastructure security and streamline service operations using Cisco ISE which uses RADIUS and TACACS+ protocols.
 Manager VPN sessions, interface throughput, configure HA, IPsec site-to-site VPN etc... Using ASDM.
 TroubleshootASAconnection issuesusing packet tracer feature in ASDM and keep track of real time logs using ASDM log
viewer.
 Configure and troubleshoot DNS, DHCP, NTP and syslog servers.
 Administer and troubleshoot OSPF, EIGRP and BGP routing protocols on Cisco routers.
 Prevent loops from being formed when switches are interconnected via multiple paths using STP.
 Configurelayer 2 security featureslikePortsecurity,DHCP snooping,IPsourceGuard and dynamic ARP inspection in Cisco
switches.
 Perform network maintenance activities with proper change management approvals with scheduled downtime window.
 Upgradenetwork and security devicesto keep the devices up to datewith latestfeatures and fixingknown vulnerabilities to
ensure no security flaws.
 In depth understanding of latest attack strategies like Advanced Persistent Threats (APT), Polymorphic attacks, blended
threats, phishing & social engineering.
 Wideknowledgeon cisco Iron port for URL filtering based on categories and for http & https traffic redirection via cisco
IronPort.
 Extensive knowledge on FIREEYE product which is Next Generation Threat Protection (NGTP) solution that provides
automated threatforensicsand dynamic malwareprotectionagainstadvanced cyber threats, such as advanced persistent
threats and spear phishing.
 Training juniors in Network routing & switching, Network security and assisting them in their respective projects.
Feb 2010 to Jan 2013, IBM India Pvt. Ltd. Bangalore as Operations Professional
 Deploying and troubleshooting dynamic routing protocols such as RIP, OSPF, and EIGRP etc…
 Configuringand troubleshootingNAT,Modular policyframework (MPF),advanced protocol inspection of FTP, HTTP, IM, DNS
etc…
 Configuringvirtual firewallsin cisco ASAfor network traffic isolation,troubleshootingand configuring high availability with
Active/active & active/standby failover.
 Deployingsiteto siteIPsec vpn,managing Certificate Authority server for PKI based authentications, Configuring Remote
Access IPSEC VPN using cisco VPN client.
 Proactivenetwork monitoring with cisco IPS sensor.IPS sensor initialization with deployingin promiscuous,inline&
inlinevlan pairmodes.
 IPS signaturetuning based on customer requirements to avoid malicious traffic.CustomHTTP, Atomic IP & String TCP
Signatures creation to block unnecessary traffic.
 Blockingand rate limitingnetwork traffic based on Application ResponseController (ARC) feature in cisco IPS.
 ImplementingACL’s on IOS routers and ciscoASAfirewall to filter certain traffic.Deep packetinspection using MQC filtering
tool.
 Securing dynamic routing protocols using authentication & route filtering.
 Mitigating against different attack vectors such as Fragmentation attacks, port security, VLAN hopping attacks, DHCP
snooping, IP spoofing etc…
 Plan,schedule,and implementnetwork upgrades,implementations, and migrations in a timely manner, and during times
that will have the minimum impact on the users of the affected networks & systems.
 Be available, on-call, to rapidly troubleshoot any problems resulting from the changes.
 Relevant professional experience including working knowledge of the following technologies:
a) TCP/IP networking including IP classes, subnets, multicast, NAT
b) DNS and DHCP Network troubleshooting.
c) Microsoft OS and Server technologies
d) Mitigating attack vectors such as CAM table overflow, BPDU guard etc…

4. TECHNICAL PROFICIENCY
ASA: ASA configuration,NAT(static,dynamic and policy Natand Nat exemption) Access Control
Lists,Failover (Active-Active and Active-Standby), Security Contexts, Configuration of Modular
Policy framework, Configuring transparentfirewall.
VPN: Implementation of IPsec Site-to-Site VPN, GRE over IPsec,DMVPN, Remote Access VPN, SSL
VPN (clientless and Anyconnect), Easy VPN, GET VPN.
Identity Management: Security Protocols (TACACS+ AND RADIUS), Cisco ACS Configuration,Authentication Proxy,
Cut-through Proxy and DownloadableACL.
Web Security Appliance: Cisco WSA configuration such as web traffic redirection,BlockingURLs
ISE: ConfiguringAAA with ISE, Integration with AD, MAB with VLAN authorization,Configurewired
and wireless 802.1x,CWA for wired and wireless etc...
IPS: Inlineand Promiscuous Modeconfiguration,InterfacePair,Vlan Pair. Tuningexistingand
configuringnew custom signature.
WLC: Configuration and troubleshootingof WLC, ManagingAP from Wireless LAN controller.
Routing Protocols: Configuringand troubleshootingStatic, RIP,OSPF, EIGRP, Default Route, Summarization,
Authentication, Route Filtering,Distribution List, and BGP Basic.
Switching Protocols: Configuringand troubleshootingVLAN, and PRIVATE VLAN, VLAN Trunking (IEEE 802.1Q and
ISL) VTP, STP (SpanningTree Protocol) security mechanism(BPDU guard, ROOT guard, BPDU
filter) and Ether Channel,Switch Port Security, DHCP Snooping. HSRP, VRRP, GLBP
configuration.
Advanced security & Mitigating Network attack
Control Planeprotection, Broadcastcontrol,TCP intercept, uRPF, IP, ARP, Mac Spoofing
attacks,Fragmentation, , Smurf, Syn, Mac flooding,VLAN Hopping attack.
Operating Systems: Windows XP/2003/2008/Vista/7. Windows server 2003/2008 (Worked on AD & Exchange
server 2003 & 2007).
Certifications
Cisco Certified Internetwork Expert Security (Lab & Written) 39816
Microsoft Certified Systems Engineer (MCSE 2003)
Microsoft Certified Technology Specialist (MCTS – SharePoint server 2010 configuring)
Professional Courses
(I) Microsoft Certified Systems Engineer (MCSE)
(II) Cisco Certified Network Associate (CCNA)
(III) Red Hat Certified Engineer (RHCE)
(IV) Checkpoint Firewall administration.

5. 2009 Bachelors of Engineering from Sir M Visveswaraya Institute of Technology Bangalore
Date of Birth : 30th December 1987
Address : #13, 18th Street, Kanakanagar,RT Nagar post, Bangalore – 560032
CCIE Security v4 number : 39816
Languages known : English,Hindi,Kannada,Telugu
Passportnumber : JF682226
Date of Expiry : 20.02.2021
I hereby declare that the above written particulars are true to the best of my knowledge and belief.
Place: Bangalore
Santosh K L