HARIKRISHNAN M

Technical deliveries

Project DMZ Evergreening:

• Deployed Cisco ISR4431 routers and 9300 NXOS switches, incorporating VRF’s to strengthen the security framework for extranet connectivity.
• Implemented Fortinet firewall models, such as the 101F and 201F, beginning with baseline configurations and tailored to conform with the established standard design.
• Configuration management with multiple ADOMs across regions using Forti Manager and logging over Fortianalyzer.

Project HSBC Internet

• - Configured the Internet environment for HSBC, Created complete segregation of staff internet access and mobile (BYOD) users access to ensure secure and efficient connectivity
• Integrated Juniper MIST edge controllers featuring tunnelling capabilities to access points throughout HSBC campus and branch locations.

Project Bluecoat Proxy Migration

• Supported the enhancement of Bluecoat capacity uplift by utilizing a virtual ESXi environment and managing the migration of security policies.
• Provided support for testing and deploying Zscaler Internet Access (ZIA) solutions, focusing on enabling split-tunnelling for remote users. This approach optimized access to internal resources while allowing efficient use of cloud services such as Microsoft 365 and zoom.

Other Major Project deliverables

• Egypt: WAF Implementation for Central Bank regulatory URLs for WPB, transformed from Akamai to on-prem F5 load-balancers.
• Qatar: Qatar central Bank Portals enablement via Symantec Bluecoat proxy SG400-S with AD authentication to enable restricted access to secure portals.
• Oman: Datacentre revamp with connection establishment to regulators using DynDNS functionality.
• United Arab Emirates: Two layered firewall environments for SIRA regulatory access for Branch CCTV and NVR’s

Subject Matter

• Provided Support as part of the Run-The-Bank (RTB) team for Alcatel OmniPCX Enterprise and Avaya Communication Manager (CM) voice solutions, including Aura Messaging, OTMS, and OTMC conferencing.
• Performed endpoint profiling and device onboarding (IPT phones, ATMs, PCs, etc.) using Cisco Identity Services Engine (ISE), ensuring secure and policy-compliant access.
• Worked on project requirements and implemented firewall policies on Checkpoint (perimeter) and Cisco ASA.
• Monitored network and security events using tools such as IBM QRadar and Cisco Stealth watch, aiding in threat detection and incident response.
• Configured and managed F5 LTM and Security policy deployments for web application protection and publication, also handled SSL certificate deployment/renewal, and log analysis.

TAC Support Lead

• Served as L2 Technical Support Engineer for OmniPCX Office and Enterprise communication servers, representing Alcatel-Lucent Enterprise in client interactions and escalated issue resolutions.
• Conducted detailed SIP and ISDN trace analysis to resolve signalling and interworking issues with voice services.
• Enabled interoperability between multi-vendor PBX systems using private SIP trunking, facilitating smooth communication across platforms.
• Provided technical support and configuration assistance for Alcatel Call Centre modules and Metering Integrations for Call Accounting systems.
• Contributed to the Alcatel-Lucent Knowledge Base as a Publisher, authoring solutions and best practices to support global TAC engineers.