Kanwaljeet Singh
Verified Expert in Engineering
Cloud Security Architect and Developer
Kanwal是一名云安全架构师,拥有超过十年的Azure经验, IT security operations, security information and event management (SIEM), information security, and vulnerability management. 他的专业知识得到了ISC2等供应商的各种网络安全认证的支持, Microsoft, Cisco, and Palo Alto Networks. 坎瓦尔目前正在从事与云和网络安全相关的项目.
Portfolio
Experience
Availability
Preferred Environment
云安全,网络安全,安全,基础设施,IT安全,漏洞管理
The most amazing...
...projects I've delivered include building a design, developing a strategy, 以及将关键业务工作负载从本地数据中心迁移到云.
Work Experience
Chief Cloud Security Architect
A Company in the Electronics Field
- Designed a secure defense-in-depth, 零信任云架构,将关键业务应用程序从本地迁移到云. 在云基础设施实现和应用程序迁移期间支持实现团队.
- Migrated a gateway stack in the US, Europe, 和亚洲的数据中心转移到一个高可用的、基于帕洛阿尔托的零信任网络架构.
- 领导全球所有网关栈的安全评估,以确保安全进入组织网络.
- 开发云安全合规工具,确保云架构符合行业法规.
- 根据业务需求开发高级设计(HLD)和低级设计(LLD),并与法国的体系结构和安全团队联系以实现新设计.
- 根据公认的标准和最佳实践,为工程网络安全解决方案提供设计和专家技术支持.
- 准备安全基础设施的关键合规性和操作指标报告.
- Performed periodic security assessments of firewalls, routers, switches, VPNs, SSL concentrators, and other network security configurations.
- Analyzed client requests (RFP, RFQ, RFI, etc.)了解项目的技术要求、进度和其他事项.
- 与欧洲其他中小企业就技术服务相关事宜进行合作, product, compliance, and legal agreements.
Senior System Administrator
Emind Learning Software Services Private Limited
- 在加州数据中心实施了IDS/IPS系统,以监控和阻止黑客和网络攻击企图.
- 跟踪和微调IDS签名,以确保误报的数量最少.
- 与合规性经理合作,确保成功进行数据中心审计.
- Performed security reviews to mitigate security issues.
Network Engineer
HCL Infinet
- 为客户交付一个项目,使用由Cisco路由器组成的安全基础设施将100个分支机构连接到总部, Sonicwall firewalls.
- 为Bose交付了一个项目,该项目使用安全的基础设施实现从其分支机构到美国总部的安全连接.
- 领导一个项目,建立一个海外呼叫中心,为客户提供支持电话.
- 成功执行了从Cisco ASA到SonicWall防火墙的网关堆栈的技术刷新.
Network Engineer
Primenet Global
- 为ISP基础设施实现开发HLD和LLD,为各种客户提供安全连接.
- Participated in implementing the ISP infrastructure from scratch, including border gateway protocol (BGP) that was peered with multiple ISPs.
- 准备交通监控解决方案,为客户和企业提供交通利用率的可见性.
- 从亚太网络信息中心(APNIC)获得自治系统号和IP地址空间.
Experience
Secure Cloud Infrastructure
Migrated 35000 Remote Access Users to a One-time Password Solution
Integration of Remote Access Service with Azure MFA
Integration of On-Prem AD with Azure AD
Technology Refresh of an Internet Gateway Stack
Skills
Tools
VPN, IBM QRadar, Sentinel, Azure Network Security Groups, Prisma, Terraform
Platforms
Azure, Burp Suite, QualysGuard, Amazon Web Services (AWS)
Industry Expertise
Network Security, Cybersecurity
Other
Certified Information Systems Security Professional, Palo Alto Networks, Cloud Architecture, Cloud Security, IPsec, Web Application Firewall (WAF), Security, Architecture, Network Engineering, Antivirus Software, Application Security, Routing, IDS/IPS, Border Gateway Protocol (BGP), Infrastructure, IT Security, Azure Cloud Security, Monitoring, Cisco Routers, Cisco, Open Shortest Path First (OSPF), Check Point, Vulnerability Management, Web Security, Data Loss Prevention (DLP), ASA, Networks, Dynamic Routing, SAML-auth, SonicWall, Fortinet Firewall Configuration, ASA Firewalls, Networking, Firewalls
Paradigms
Penetration Testing
Storage
Database Security, Azure Active Directory
Languages
Python
Frameworks
Windows PowerShell, WebApp
Certifications
Microsoft Azure Security Engineer Associate (AZ-500)
Microsoft
Palo Alto Certified Network Security Engineer (PCNSE)
Palo Alto Networks
Certified Information Systems Security Professional (CISSP)
ISC2
Cisco Certified Network Professional (CCNP) – Security
Cisco
How to Work with Toptal
在数小时内,而不是数周或数月,我们的网络将为您直接匹配全球行业专家.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring