Anuj Pratap

This project aimed to construct 10 data centers across India and as a cybersecurity manager, I oversaw the entire process, from solutioning to design, implementation, and integration, where we designed data centers and implemented cybersecurity solutions. I also played a key role in end-to-end design and deployment.

I collaborated with several original equipment manufacturers (OEMs), including Palo Alto Prisma, VMware, Cato Networks, and Fortinet, to develop their secure access service edge (SASE) solutions. During this project, I identified the benefits, risks, and use cases of zero trust network access (ZTNA). Additionally, I discovered use cases for continuous trust verification and continuous security inspection within the context of ZTNA.

I created baseline and best practices documentation for Cisco routers and switches and Check Point and Palo Alto firewalls. The goal was to comply with ISO audit requirements for hardware, software, and configuration. I communicated with the customer multiple times and reviewed all of the solution configurations. I also collaborated with the change management team to ensure they were up-to-date with the new baseline standards.

This project involved designing and implementing a complete end-to-end next-generation perimeter FortiGate firewall into the customer's primary and secondary data centers.

ACCOMPLISHMENTS
• Design documentation for the high and low levels of the firewall.
• Performed the initial firewall configuration—POST—and interface settings.
• Configured firewall objects and rule bases.
• Integrated the FortiManager firewall.
• Managed several VDOM setups.
• Performed troubleshooting.

This project was the first step towards establishing client IaaS on Azure Cloud, where established a connection between the customer's primary and secondary data centers using Azure ExpressRoute and IPsec VPN tunnels, and furthermore, we migrated Check Point CloudGuard firewalls and NSG groups based on workloads.

As part of this project, I managed the full vulnerability management cycle for the customer's Data Centre infrastructure. There were 26 public websites, 32 internal websites, around 30 public IP addresses, and 271 internal customer assets. In addition, I collaborated with the application/server team to address any detected issues. I used Nessus and Burp Suite as tools.

In this project, I managed Netskope cloud-based proxy solutions. My work included overseeing the entire proxy solution and process, from solutioning to design, implementation, and integration. I also reviewed the Netskope policy design and day-to-day activities.

CONTRIBUTIONS
• Policy creation
• Collaboration with end users
• Configuration
• Troubleshooting

This project involved upgrading ASA5555-x Cisco firewall devices in HA failover from 9.4(4)5 to 9.6(3).1. 

FEATURES
• No-downtime capability
• User application testing
• Failure analysis
• Firewall configuration verification

This project was to replace the client datacenter existing Cisco ASA firewall with the Palo Alto firewall.

DUTIES
• Design
• Review
• Implementation
• Software upgrade
• Integration with Panorama
• ACL, NAT rules configuration

I have successfully delivered end-to-end Azure cloud design and implementation projects, leveraging cloud-native solutions and Palo Alto firewalls for robust security and scalability and the core focus of these projects was to build highly available, scalable, and secure cloud infrastructures that align with business objectives and regulatory requirements.

Key contributions:
Cloud architecture and design: Designed and implemented comprehensive Azure cloud infrastructure utilizing cloud-native services such as Azure Virtual Network (VNet), Azure Load Balancer, and Azure Application Gateway.

Security integration: Integrated Palo Alto Networks VM-series firewalls into the Azure environment, securing both north-south and east-west traffic, ensuring enterprise-grade protection. Configured and deployed firewalls to monitor, inspect, and secure all network traffic, including encrypted traffic.

Cloud-native solutions: Deployed Azure-native services like Azure Load Balancers, Application Gateways, and Enable Web Application Firewall (WAF) rules.

The project involved deploying Micro Focus ArcSight SIEM across the organization and integrating logs from over 200 endpoints, servers, and network devices and the solution included configuring ArcSight Logger, SmartConnectors, and ESM for real-time threat detection and compliance reporting. Key achievements included reducing incident detection time by 50% through advanced correlation rules, automating regulatory compliance, and enhancing overall security posture. Challenges like integrating legacy systems were addressed through custom parsers, ensuring seamless log ingestion. The deployment significantly improved the organization's threat monitoring and incident response capabilities.