CV
- 1. Competencies Designing and Architecting in Network, Security Cloud and Automation DEBABRATA MITRA 121 Raipur Road, 275/10/1 K.M.C, Naktala, Kolkata 700047 Mob: +91- 9830691912; Email: mitra.raja@gmail.com Networking, Security & Cloud ConsultingNetworking, Security & Cloud Consulting Offering 13+ years of extensive experience & seeking senior level assignments in the IT Industry PROFILEPROFILE Dedicated individual with a reputation for consistently going beyond what is required and using personal high standards to achieve results. Technically qualified with a Diploma in Mechanical Engineering, coupled with industry experience in Advanced Switching, Routing, Security, Cloud and Automation adept in providing Design, Architecting & Customer Service. Well organized, detail oriented team member with excellent analytical, troubleshooting and problem solving skills. A Consistent performer with successful track record of achieving business targets regularly. Possess excellent written, oral and interpersonal and communication skills, with proficiency in English, Hindi & Bengali. Core Competencies Networking & Security Design and Architecting Cloud Design and Architecting Automation Project Management Vendor Coordination Voice Communication Customer Service Team Management PROFESSIONAL EXPERIENCEPROFESSIONAL EXPERIENCE Cognizant Oct’14 to till date Kolkata Design Consultant Projects Undertaken • Avaya Infrastructure Audit: Audited Avaya Contact Center infrastructure for network resiliency and hardware redundancy, including network, servers and VM HA and resiliency. • Automatic Failover of CE routers with EEM scripts: Automatic failover of CE routers for major financial client of Cognizant deploying EEM scripts to track and manipulating routes. • DMVPN Design and Architecting: Designing of global DMVPN architecture for Cognizant to enable centralized web browsing facility to all development centers across globe. • Azure PaaS Architecting: Designing Azure cloud infrastructure to enable Cognizant by using third party vendor equipments and connect over Private and Public-Private cloud. • O356 SaaS Architecting: Designing O365 solution to leverage Microsoft Exchange and One Drive over MPLS and Internet backup. • DMZ Architecture: Designing the DMZ zoning architecture with role based classification into web, app and db. • SDWAN Architecture and Design: Working with Viptela to design a solution on SDWAN. • SDN Architecture and Design: Designing SDN architecture with Cisco ACI for next generation datacenters using leaf-spine topology. • NFV Design and Architecting: Working with multiple vendors to work for a design to virtualize network functions like firewalling to be geo-independent. • Designing Intelligent Networks: Working with IXIA to design and architect a solution that would make the network self-aware and intelligent. • Automation: Undertaken project to automate network tasks with help of Python and Perl. Key Accountabilities: • Designing and consulting solutions for external and internal clients of Cognizant. • Recommending and POCs of new technologies and hardware elements to clients. • Auditing infrastructure for flaws.
- 2. • Costing and preparing BOQs and BOMs for client engagements. • Enabling clients with accordance to new hardware and technologies. Accenture Jan’11 to Oct’14 Kolkata Client Connectivity Manager Key Accountabilities: • Working as client connectivity manager in Accenture responsible for designing and implementation if new client requirement in the domains of routing and security. Working as a team lead for Kolkata region. • Designed and implemented on Juniper SSG firewalls. • Implemented and Designed GRE and GRE over IPSEC tunnels. • Designed and implemented BGP and MPLS BGP on Cisco 7206 routers. • Worked on QOS for Voice traffic and QOS implementation. • Worked BlueCoat Packet Shaper 7500 and 10000 series. • Designed IPSEC VPN Failover which is one of its kinds for client enterprise networks. • Designed of GRE Overlay with DMVPN on Cisco ASR 1000 series routers solution for Voice circuits across the Globe. • Responsible for costing and project delivery across domains and clients. • Creating technical documentation and papers for knowledge management and delivery. • Bandwidth analysis as per application and per client basis. • Preparing SOW and taking sign-offs from various stakeholders. WIPRO INFOTECH Dec’10 to Jan’11 Bangalore Technical Specialist (Security and Routing Switching) Key Accountabilities: • Working as a technical team lead of 36+ field engineers for the entire South zone of Wipro InfoTech. • Highest level technical escalation for security in South zone. • Consulting for products like Cisco, Checkpoint, Fortigate and other security vendors. • Providing solutions and architecting network security infrastructure for customers across South zone. • Involved in managerial aspect of maintaining and running a team of 36+ engineers. • Escalation lead of the South zone for security related issues involving cross vendor products. • Implemented VSX on Checkpoint R67 software release. • Designed and implemented IronPort C160 Email Security gateway and IronPort S370 Web Security Gateway. • Designed Palo Alto Networks Application firewalls. COGNIZANT TECHNOLOGY SOLUTIONS Feb’06 to Dec’10 Kolkata Associate Engineer (NSS) Key Accountabilities: • Working as the Network Administrator & providing technical support to 4000+ users. • Leading efforts across planning, procuring & implementing of new projects as taken up by the company for the clients. • Synchronizing with the Network Team the implementation of installation, configuration of Routers, Switches & Firewall. An insight: • Data Communication A. Switching: o Installing, Configuring & Maintaining of the Switched LAN environment spanning 30 Floors consisting of Layer-2 & Layer-3 Switches. Configuring VLAN & routing inter-VLAN. o Implemented HSRP in between the CORE Switches (Cisco 6509) for high-level redundancy within LAN. o Securing the LAN by implementing Access Control Lists for data traffic and TACACS for authentication purposes. o Accountable for configuring Ether-channel using LACP/802.3ad & PaGP protocols. Security: (i) Firewall Administration:
- 3. o Installing, Configuring & Maintaining Cisco PIX and ASA Firewalls. o Configuring access-lists, reviewing access on regular basis, revoking unnecessary accesses. o Configuring NAT (PAT, Dynamic & Static), STATIC routes & Syslog enabling Logging. o Configuring & troubleshooting VPNs. (ii) VPN Concentrator Administration: o Configuring Site–to–Site VPNs for various clients. o Configuring Remote Access VPN for users to login to Cognizant LAN. o Maintenance & monitoring of sessions. (iii) IDS Administration: o Installing both Host Based & Network based IDS. Maintaining software based IDS ISS Real Secure Site Protector (both Host & Network IDS). o Updating with Service packs & XPU’s, maintenance of IDS database. o Performing Vulnerability Assessment Tests using Nessus. (iv) Internet Proxy & Websense: Hardware Platform requirements: Cisco PIX 515, Cisco PIX 525, Cisco ASA 5510, Cisco ASA 5540, Cisco VPN Concentrator 3030. o Installing and maintaining SQUID Proxy on Linux & Integrating SQUID Proxy with Websense. o Installing Websense Server on Windows 2000 Server. Maintaining Websense Server and monitoring on a regular basis. o Implementing new Policies & Categories as per requirements. (v) Application Security o Conducting Source Code Analysis on C and C++ using RATS and Flawfinder. Rectifying buffer overflows and input validation problems. o Leading efforts across static analysis of PHP code using open source tool & rxBot (a IRC based bot) o Dynamic analysis of code with the help of IDA Pro and Ollydbg & Spyware using open source tools like Strings, Fport, Fpipe and Ollydbg. o Auditing web applications using Acunetix Web Vulnerability Scanner & network vulnerability using GFI Languard Network Scanner. o Load testing and fuzzing web applications using Paros proxy and Wireshark. o Signatures filtering of know malwares using Hexedit and Hjsplit. • Voice Communication: EPABX Administration: o Providing Level 1 support on Nortel 11C & 61C EPABX. o Configuring new extensions & Making changes to various class of services for extensions. o Competently creating Voice Mailbox for extensions. • MS Exchange & AD Administration: o Installing MS Exchange 2003 server. o Creating Mailbox Enabled Users & Groups. Troubleshooting user-id & mail-box related problems. Transferring Mailboxes. o Efficiently adding & modifying DNS entries. • DHCP administration: o Adding new IP segment in Windows 2000 DHCP server. o Troubleshooting DHCP related problems. • Network Monitoring: o Installed & configured various network monitoring tools (SNMP & Netflow) like Whats Up Gold, MRTG. o Administering and Configuring CiscoWorks and CSM. • Secure FTP Server Administration: o Installing SFTP server with jail on Linux & Creating SFTP users. Maintaining & monitoring the SFTP server. • Administration: o Planning and implementing network in new facilities. o Interacting with International Clients for setting up new connectivity’s and planning for new projects and also taking part in infrastructure calls. o Involved in Vendor management for procuring active and passive components for new and existing facilities and also planning accordingly. • Others: o Designing & Implementing Snort IDS, Tripwire HDS, Cisco NAC & Wireless o Configuring and Implementing Cisco IPS, Proventia IPS. o Penetration testing of company’s network with various open source tools. CMS COMPUTERS LTD. Aug’03- Feb’06
- 4. Customer Engineering Key Accountabilities: • Led efforts across maintenance & troubleshooting of the Software as well as Hardware Problems. • Efficiently worked on Windows XP and Lotus Domino Server. Took daily and weekly backups of the domain controller and lotus domino server. • Was accountable for maintenance & troubleshooting of Link problems faced by the customers. • Promptly provided L1 support for troubleshooting and configuration of routers according to customer specifications and directives • Monitored Bandwidth & generated a report on it reporting about its functioning & problems. • Coordinated and provided troubleshooting assistance to Client over the phone. • Closely monitored Connectivity of all Customer links & reported problems. Key Clients Handled Name of the Organization Designation Duration 1. ITC Sonar Bangla Sheraton, Kolkata System Support Engineer 2 months 2. Tata Internet Services Ltd., Kolkata Customer Support Engineer 2 months PROJECTS HANDLEDPROJECTS HANDLED At Accenture • Handling global projects across domains with respect to design and implementation. • Deploying IP Voice ISP POP deployment. • Deploying QOS across Voice infrastructure across Accenture. • Deploying DMVPN with mGRE and NHRP with OSPF. At WIPRO INFOTECH Security Implementation • Designing and deploying IronPort Email Security gateway for a large financial company. • Designing and deploying Cisco Security solution for a Banking client. • Consulting for a switching infrastructure for a big educational institution. At Cognizant Technology Solutions I. Data Communication (Switching) • Setup & Re-structuring, of Data & Voice LAN Infrastructure of 4 new office facilities Migration of Private IP segment: Modifying existing VLAN & static routes, coordinating in modifying IP’s of all m/c’s & Servers. • Implementing HSRP in the Core Layer for redundancy. • Ether Channel configuration using LACP/802.3ad protocol for SAN (EMC²) connectivity. Hardware Platforms required for the projects: 1. Layer-2 Switches > Cisco 2950, 2970. 2. Layer-3 Switches > Cisco 4006, 4503, 4507R, 6500 & Baystack SSR. II. Security (Firewall Administration) • Configuring firewalls for Offshore Development Centers as per client requirements creating separate secured network. • Migration of PIX 525 to ASA 5540. EDUCATIONAL AND PROFESSIONAL DEVELOPMENTEDUCATIONAL AND PROFESSIONAL DEVELOPMENT Diploma in Mechanical Engineering 1999 WBCTE Aggregate Percentage: 80.5%
- 5. HSC 1995 WBCHSE Aggregate Percentage: 54.5% SSC 1993 WBBSE Aggregate Percentage: 64.5% TRAININGS UNDERTAKENTRAININGS UNDERTAKEN Successfully completed the following trainings: • Training on Advanced Cisco Switching from Cisco. • Training on Advanced Cisco Routing from Cisco • Training on Checkpoint. • Training on PaloAlto Networks. • Training on Fortigate. • Training on Ironport Web security gateway. • Training on Ironport Email security gateway. • Websense training from Websense. • Microsoft ISA Server training from Microsoft Certified Training Partners. • Cisco Flexpod training from NetApp. IT FORTEIT FORTE Operating Systems : Windows 9x/ 2000/ 2003/ NT Networking : Cisco Networking Interface, Security Domain, Virtualization, Microsoft Systems, Linux. Date of Birth: November 20th , 1977 Permanent Address: C/O Ajit Ranjan Mitra, Hijli Coop Society, P.O Prembazar, Kharagpur- 700006; References: Available on Request
- 6. HSC 1995 WBCHSE Aggregate Percentage: 54.5% SSC 1993 WBBSE Aggregate Percentage: 64.5% TRAININGS UNDERTAKENTRAININGS UNDERTAKEN Successfully completed the following trainings: • Training on Advanced Cisco Switching from Cisco. • Training on Advanced Cisco Routing from Cisco • Training on Checkpoint. • Training on PaloAlto Networks. • Training on Fortigate. • Training on Ironport Web security gateway. • Training on Ironport Email security gateway. • Websense training from Websense. • Microsoft ISA Server training from Microsoft Certified Training Partners. • Cisco Flexpod training from NetApp. IT FORTEIT FORTE Operating Systems : Windows 9x/ 2000/ 2003/ NT Networking : Cisco Networking Interface, Security Domain, Virtualization, Microsoft Systems, Linux. Date of Birth: November 20th , 1977 Permanent Address: C/O Ajit Ranjan Mitra, Hijli Coop Society, P.O Prembazar, Kharagpur- 700006; References: Available on Request