Hi, I'm Raj Subhash
Patil

Fortinet: - AI Security /TAC-NSE. 4-6 (Asia · Remote) TAC Security Engineer |GenAI |AIOps Jul 2026 – Present Client Exposure: National Stock Exchange (NSE) | SEBI | Bajaj Group | RBI • Provide TAC support for enterprise Cybersecurity and Network Security environments, specializing in FortiGate Firewalls and FortiOS. • Monitor and investigate security events, suspicious traffic, Indicators of Compromise (IoCs), malicious activity, and potential cyber threats. • Perform threat investigation, incident response, containment, remediation, and Root Cause Analysis (RCA) for security incidents. • Troubleshoot Firewall, VPN, Routing, NAT, SD-WAN, HA, Authentication, and Network Connectivity issues, including IPsec/SSL VPN, SAML, Firewall Policies, VIP/DNAT, SNAT, and Security Profiles. • Analyze FortiGate traffic/event logs, security logs, VPN/authentication logs, debug outputs, and packet captures to identify abnormal or potentially malicious activity. • Investigate unauthorized access attempts, suspicious connections, policy violations, and network anomalies, coordinating escalation and remediation within defined SLAs. • Coordinate with SOC/NOC, Fortinet TAC, network teams, ISPs, vendors, and cross-functional engineering teams for complex security incidents. • Work across Cisco Routing & Switching, VLAN, OSPF, BGP, SD-WAN, WAN/LAN, ISP, and enterprise security environments. • Leverage AI, GenAI, and AIOps for threat analysis, log correlation, incident investigation, alert analysis, automation, and Network Security Operations. • Develop AI-assisted workflows, scripts, and automation concepts to improve threat detection, incident response, troubleshooting, and security operations.

Wipro Limited | Pune, Maharashtra (27th March 2026 To 21st July 2026) Security Operations Center Analyst | GenAI /CybeOps-Network Operations Project: Comcast – USA | L2 Security Operations (TAC Support) • Supported enterprise Security and Network Operations for a USA-based telecom project. • Monitored and analyzed security events, network alerts, incidents, and connectivity issues. • Handled incident management, troubleshooting, escalation, and SLA-based ticket resolution. • Collaborated with L2/L3 technical teams to troubleshoot and resolve network and security incidents. • Gained hands-on exposure to SOC operations, network monitoring, incident response, security operations, and enterprise infrastructure….

MASL Millennium Automation Systems Limited: - Pune Maharashtra. (27th March 2026) Key Responsibilities: Project: CBS (Consolidation Billing System)– BSNL Data Center (Govt. of India) Role: Project In-charge – IT Infrastructure & Network Security (L3 Engineer) Client: BSNL & Central Bureau of Broadcasting Key Responsibilities: • Led end-to-end IT infrastructure setup for CBS at BSNL & CBI Data Centre environment • Managed full project lifecycle: Planning, Design, Budgeting, Implementation & Final Handover • Designed and deployed secure, scalable 3-tier network architecture (Core/Distribution/Access) • Implemented high-availability architecture with failover and redundancy planning • Ensured zero downtime integration across cross-department systems Network Security: • Deployed and managed enterprise firewalls: Check Point & FortiGate/Cisco ASA • Designed and implemented: o NAT Policies o VPN (IPSec / SSL VPN) o DMZ Architecture o Multi-tier firewall segmentation Configured IDS/IPS, NAC and endpoint security platforms Conducted vulnerability assessments & supported penetration testing activities Ensured compliance with CERT-In, MeitY and DoT cybersecurity guidelines Executed firewall deployment, migration and upgrade activities across enterprise data center environments. Performed Day-0 and Day-1 firewall implementation and validation. Implemented firewall changes during planned maintenance windows following change management procedures. Conducted impact assessment and risk analysis before security policy implementation. Coordinated with application, infrastructure and security teams for successful change execution. Performed post-change validation and troubleshooting to ensure business continuity. Documentation & Compliance: Created comprehensive documentation: SOPs, Risk Assessments, Project Reports, and Audit Checklists. Ensured 100% alignment with CERT-In, DoT, and MeitY cybersecurity frameworks. Maintained 24/7 operational readiness for audits and system health monitoring. Data Centre & DR Infrastructure Expertise • Hands-on experience in Data Centre & Disaster Recovery (DR) Architecture Design & Implementation • Designed and supported High Availability (HA) network architecture, redundancy models & failover strategies • Implemented 3-Tier Architecture (Core / Distribution / Access Layers) in enterprise environments • Experience in rack-level planning, structured cabling, hardware installation & power redundancy setup • Involved in DR drills, failover validation & business continuity planning • Strong understanding of server farm integration, virtualization & storage connectivity in DC environments Load Balancer – Installation & Configuration • Installation, configuration & troubleshooting of enterprise load balancing solutions • Hands-on experience with Alteon D-5208S • Configured: o Virtual Servers (VIP) o Server Pools o Health Monitors o Persistence Profiles • Implemented L4 & L7 traffic management policies • Configured High Availability (Active/Standby) setup • Performed backend server troubleshooting & traffic flow analysis ◆ Firewall Installation & Configuration • End-to-end firewall deployment, migration & upgrade projects • Designed and implemented: o NAT Policies (Static/Dynamic) o Security Policies o IPSec & SSL VPN o DMZ Segmentation • Hands-on experience with: o Fortinet (FortiGate) • Performed firewall hardening, rule optimization & policy cleanup • Log monitoring, threat analysis & security event troubleshooting • Multi-tier firewall architecture implementation in Data Center environment. • Experience with implementing and configuring Fortinet FortiGate, Cisco ASA and Check Point Firewalls in enterprise environments. • Executed Firewall Deployment, Migration and Upgrade activities across Data Center environments. • Experience with implementing Day-0 and Day-1 Firewall Configuration including NAT, ACL, IPSec VPN and SSL VPN. • Implemented firewall changes through Change Management process and ServiceNow change requests. • Performed Impact Assessment and Risk Analysis before production firewall implementations. • Executed firewall changes during planned maintenance windows and performed post-change validation. • Managed DMZ firewall policies and network segmentation for enterprise applications. SAN & Storage Infrastructure • Installation & configuration of Fibre Channel SAN switches • Performed SAN Zoning (Single Initiator – Single Target Model) • Configured VSAN, trunking & inter-switch links (ISL) • Fibre Channel (FC) troubleshooting & link diagnostics • FCIP switch configuration for DR connectivity • SAN Storage provisioning: o LUN creation o LUN masking & mapping o Host-to-storage connectivity validation • Supported DR replication & failover testing between DC & DR sites. Data Center Fabric – Leaf & Spine Architecture • Hands-on experience in implementing Leaf–Spine Data Center Architecture for high-performance and low-latency environments • Configured full-mesh Spine-to-Leaf connectivity using ECMP-based routing • Designed scalable fabric architecture optimized for East-West traffic flow • Integrated server farm, firewall, load balancer & storage networks under Leaf layer • Performed uplink redundancy validation and failover testing MC-LAG (Multi-Chassis Link Aggregation) • Configured MC-LAG for Active-Active uplink connectivity between dual Leaf switches • Implemented LACP-based link aggregation for servers, firewalls & storage devices • Eliminated STP dependency by deploying multi-chassis logical link design • Validated high-availability architecture with dual-homing strategy • Troubleshot peer-link synchronization, MAC consistency & forwarding behavior Switching Platforms & OS Exposure • Worked on Arista Networks Routers in Data Center fabric environment • Hands-on experience with Dell EMC PowerSwitch (L2/L3) • Exposure to Broadcom ASIC-based switching architecture • Experience with SONiC (Software for Open Networking in the Cloud) based switching environments

EBIXCASH PVT.LTD- Mumbai BKC. Operations Team Lead-Networks (MH&GOA) Client: - Punjab National Bank ZO Mumbai September 2024 – 27th March 2025 As a Network Team Lead, designed, implemented, and maintained of the Banking LAN, WAN, and wireless networks, Designed, analyzed, configured, tested, and fixed issues with the network infrastructure or application components. Lead Operations team to restore faults and proactively maintain network infrastructure for both fixed and wireless Planoperational readiness and acceptance for new projects and configurations Supports 24/7 operation, manages Technician's activity, and resolves escalated issues. Engage with the contractor and define objectives on incident management Schedules routine preventive maintenance to avoid major incidents and fault occurrence Review documentation to ensure compliance with the required procedures and standards on network activities including the installation, monitoring, troubleshooting, maintaining and testing of network systems and solutions. Provided mentoring and guidance to the team for complex network configurations and Routing Protocols Ensured networks were designed, installed, and maintained for all JPS locations. Provided subject matter expertise to the Data Network Team Lead and Network Services Manager in the areas of data network design, capabilities, operation, and maintenance. Analyzed traffic patterns and implemented efficient data traffic routing logic to achieve better application response time. Evaluated new data network technologies that support the mission of JPS existing/proposed enterprise applications Served as a resource/liaison for the Network Services group to assist other HTS technical, operations, and user support Staff. Participated in multi-discipline, technical workgroups in the implementation of new technology initiatives. Responsible for investigating and resolving problems for services, delegated to team members, followed ITIL processes, And managed major network-related incidents.

EBIXCASH. LTD (NASHIK) (Client is Punjab National Bank CO Nashik) Designation: Network Engineer L1-L2 & Banking Outsourcing & Monitoring for ATM’sNetwork Duration: Dec. 2021 to Sep.2024 To check monitoring and 66 Branches Primary Secondary Link every day. Monitoring 72 ATM’S for Smooth Network Operations Good Communication with Punjab National Bank It Team and Link Service Provider by Email and Telephonic Etc. Monitor and follow up on Primary Secondary Link every day and the Daily Report Submitted H.O.Good relationship with Punjab National Bank and Service Provider. Good Knowledge of New Routers, Switches and Networking Devices. ATM VLAN ACTIVITIES for Onsite Location. Configuration and Installation of Cisco& HP L2-L3Switches & Routers Cisco IP Phone Configuration. Configuring and managing routing on Cisco routers, including static and dynamic routing protocols such as EIGRP, OSPF, Switching STP, RSTP, MSTP, HSRP, VPC Configurationof redundancy andload balancing using HSRP, VPC, Port Channel ConfiguringPort Security, VLAN, inter-Vlan routing, Staking and LACP on multi-vendor devices like Cisco 1900. Switches/Switching • Cisco Catalyst 6500, 4500, 3850,3560,3750,2960, Cisco-1000, 12000, 7600 series switches configuring and troubleshooting Vlan, STP, RSTP, MSTP, ATM. • VTP,ARP, LAN, STP,PVST+RPVST-Inter VLANrouting & Multi-Layer Switch,Ethernet Channels • TACACS+, SNMP, Trucking (IEEE 802.1Q and ISL), SVI, Switch Port Security(Port Security, 802.1X, DHCP • VLANs. Routing Cisco ISR 4331 and 4351 series routers, Configuration and troubleshooting of routing protocols such as OSPF and EIGRP. Configuration of route filtering using distribute-list, route map. Routing/Protocols: - (EIGRP, OSPF, IGRP, HSRP,RIP & BGP) Cisco ISR 4331 and 4351 series routers Configuration and troubleshooting of routing protocols such as OSPF EIGRP. Configuration of route filtering using distribute-list, route-map. Router Knowledge Cisco 1841, 1941, 4221, 7600, 7200, 3800, 3600, 2900, 2800, 2600, 800M SD-WAN vEdge1-3-4 Configuration/Implementation on Punjab National Bank, HDFC Bank, /IDFC BANK Experience(Network Security) in Cisco switching and routing technologies, Experience in core / Distribution /Access, Server Farm switches, managing complex 3 tier network architecture, Checkpoint Firewall Management, Cisco Access points, Managing Campus wireless Network, Cisco NAC, Cisco IP Telephony Switching and Routing, WAN Management, Multiple ILL Management, Troubleshooting WAN, LAN. Deep understanding of fiber network and topologies. Experience in the areas of Technical Implementation/Support, Project Management, System Administration, Networking and end-to-end Infrastructure Management of Possess IT with a strong foundation in internetworking and troubleshooting. Firewall: - Palo Alto Networks, Cisco ASA firewalls, Checkpoint, firewall management. Load Balancers: F5 Networks (Big-IP), Load Balancers. Responsible for overall firewall configuration implementations and policy installations across all platforms during maintenance windows, including Check Point and Fortinet for a major enterprise network. 3+years of experience as a Network/Systems Administrator specializing in Cisco devices, Network security, Firewalls and VPNs, Cisco Routers, LAN/WAN connectivity, TCP/IP Windows XP, Windows Vista, NT/2000/2003 System administration, communications. • Supportingproduction LAN/WAN and data center network environment. • Install, configure & support for LAN/WAN Network devices & intranet/internet links • Installation, configuration of Cisco core switches, Cisco routers • Working on firewall link FortiGate, Checkpoint and Cisco ASA etc. Dept.:Banking, Outsourcing & Monitoring for ATM’s Network Installation Configurations Responsibility: Cisco Catalyst 6500, 4500, 3850,3560,3750,2960, Cisco-1000, 12000, 7600 series switches for Punjab National Bank. • Cisco Catalyst 6500,4500,3850,3560,3750,2960, Cisco-1000,12000,7600 series switches. Configuring and troubleshooting Vlan, STP, RSTP, MSTP, ATM Configuration. • Currently Handling 14 District’s Circle Punjab National Bank ATM’s / BNA/ Passbook Printing Machine. • Coordination with Various Vendors for day-to-day operations. • Coordinationwith Bank staff for onsite & CRACuts. For offsite. • MonitoringATM Balances & ensuring low balances ATM Loadingwill be done onapriority basis. • Monitoring FLM/SLM call logs to get follow up for resolve earliest. • MonitoringUptime of ATM /BNA/Passbook Printing Machine. Avoid downtime & less availability • Escalating daily basis issues faced in ATM /BNA/Passbook Printing Machine operations to the BO, ZO&HO

ll. SYSNET GLOBALTECHNOLOGY PVT LTD(Client TATA Consultancy Services) Designation: System Engineer /Network Engineer Duration: 11-05-2020/14-12-2021 Job Profileand Responsibilities Responsible for maintaining the Backup network, hardware, software, and files regularly according to the company policies. Responsible for maintaining & troubleshooting network printers. Administer Laptop, Desktop, Software deployment, Security updates and Company-provided Mobile phones. Analyze the system for failure and assist in restoring files with the help of the operating system. Monitor andreview system logs andtroubleshoot problems. Responsible for troubleshooting Internet issues, supporting remote access to On-premises Applications using TightVNC, any desk, etc. and delivering excellent customer experience. Microsoft Outlook Configurations remotely support Administer Laptop, Desktop, Software deployment, Security updates and company-provided mobile phones. Key Responsibilities Working as an FME-Engineer for multiple projects which is Carlsberg, Apollo Tires, TCS-PMS, Induced Bank, HDFC BANK, Punjab National Bank, Yes Bank, Reliance Petro, Mahindra & Mahindra, Amway, TVS Sundaram, Tata Motors, VECV, Walmart Nashik District Location & Responsible for overall firewall. configuration implementations and policy installations across all platforms during maintenance windows, including Check Point and Fortinet for a major enterprise network. PROJECTS/On-Site StateBank of India: - Field Project Firewalls Management Configuration/ Load Balancers: Cisco ACE & Brocade Load Balancers. Responsible for overall firewall configuration implementations and policy installations across all platforms during maintenance windows, including Check Point, and Fortinet for a major enterprise network. WIPRO: - IndusInd Bank IT FME System Engineer. HDFC-BANK: Printer Network Printer Installation and Configurations TataConsultancy Services: - Indian Railways/PMS/UPS Installation Citrix PC Desktop. •