Palanikumar Kathirvel
Singapore
Summary
Accomplished Senior Network and Cybersecurity Engineer with 15 years of experience in designing and implementing comprehensive network security solutions for on-premises, cloud, and hybrid environments. Expertise includes network security architecture, firewalls, VPN, and cloud security. Proven experience in security monitoring, incident response, and vulnerability management, delivering secure and scalable enterprise solutions.
Overview
1
1
Certification
16
16
years of professional experience
Work History
Senior Network Security Engineer
8x8 International Pte Ltd Singapore
07.2024 - Current
- Designed, implemented, and supported enterprise network security solutions across global cloud and on-premises environments as a Senior Network Security Engineer.
- Led evaluation, architecture, and Proof of Concept (PoC) for next-generation security technologies, enhancing security posture through advanced solutions like Firewalls, SASE, SSE, ZTNA, EDR, and Email Security.
- Lead the evaluation, architecture, and Proof of Concept (PoC) of next-generation security technologies, including Firewalls, SASE, SSE, ZTNA, EDR, Email Security, and other cybersecurity solutions.
- Provide technical leadership in information security architecture, solution design, incident response, vulnerability management, and security best practices.
- Collaborate with cross-functional teams, cloud engineers, vendors, and stakeholders to develop High-Level Designs (HLD), Low-Level Designs (LLD), implementation plans, and migration strategies.
- Design and implement enterprise firewall policies, IPSec VPNs, SSL inspection, application control, URL filtering, and network segmentation to strengthen the organization's security posture.
- Perform implementation, migration, and centralized management of FortiGate firewalls using FortiManager, ensuring consistent security policy deployment and compliance.
- Evaluate emerging cybersecurity technologies and recommend optimal solutions based on technical capability, operational efficiency, integration, and total cost of ownership.
- Prepare technical proposals, solution presentations, architecture documentation, and Statements of Work (SoW) to support customer and business requirements.
- Ensure successful project delivery by providing technical guidance, effort estimation, risk assessment, and solution planning while meeting project timelines and quality standards.
- Produced management reports on network security posture and operational risks, providing strategic recommendations and supporting major incident investigations with root cause analysis and corrective actions.
- Conducted technical and commercial assessments for enterprise security initiatives, including solution sizing, licensing evaluation, pricing analysis, and service cost optimization.
Senior Network Security Engineer
Ultimate Kronos Group (UKG) Singapore
11.2021 - 06.2024
- Worked as a Cyber Security Engineer to implement, administer, operate, and troubleshoot enterprise network security solutions across on-premises and cloud environments.
- Evaluated emerging cybersecurity technologies, led Proof of Concepts (PoCs), and successfully deployed approved solutions into production, including EDR, NDR, Threat Intelligence, and Vulnerability Management platforms.
- Administered and optimized Palo Alto Networks firewalls through Panorama, including security policy management, SSL decryption, URL filtering, application control, and security profile implementation.
- Administered and optimized Palo Alto Networks firewalls through Panorama, managing security policies, SSL decryption, URL filtering, application control, and security profiles.
- Designed, implemented, and managed Web Application Firewall (WAF) solutions using Cloudflare, Google Cloud Armor, and AWS WAF to protect internet-facing applications.
- Designed and implemented secure connectivity solutions, including GlobalProtect remote access VPN and site-to-site IPSec VPNs, ensuring secure communication between corporate sites and customer environments.
- Assessed network and security infrastructure, performed architecture reviews, and provided recommendations based on industry best practices to enhance security posture and operational efficiency.
- Served as a technical liaison among internal teams, business stakeholders, vendors, and third-party service providers, delivering technical analysis, solution design, and implementation strategies during pre- and post-sales engagements.
- Created and maintained technical documentation, including High-Level Designs (HLDs), operational procedures, incident response playbooks, use cases, and implementation guides to support operational efficiency.
Senior Network Security Consultant
NCS Pte Ltd Singapore (Client: NTUC Income)
10.2018 - 10.2021
- Administered, monitored, and troubleshot enterprise network infrastructure, including Cisco and Juniper routers, Layer 2/Layer 3 switches, firewalls, F5 Load Balancers (LTM/GTM), proxy servers, VPN gateways, and IDS/IPS, ensuring high availability and optimal network performance.
- Administered, monitored, and troubleshoot enterprise network infrastructure, including Cisco and Juniper routers, Layer 2/Layer 3 switches, firewalls, F5 Load Balancers (LTM/GTM), proxy servers, VPN gateways, and IDS/IPS, ensuring high availability and optimal network performance.
- Managed AWS-hosted production and disaster recovery network environments, including VPC networking, Transit Gateway (TGW), VPN connectivity, route tables, security groups, and hybrid cloud connectivity with on-premises data centers.
- Configured, monitored, and troubleshot enterprise routing protocols including OSPF, BGP, static routing, route redistribution, HSRP/VRRP, VLANs, STP, EtherChannel, and Layer 2/Layer 3 switching technologies.
- Supported Software-Defined Networking (SDN) initiatives, including SD-WAN connectivity, network segmentation, centralized policy management, and secure branch connectivity to enhance network agility and resilience.
- Performed firewall policy reviews, security rule optimization, NAT policy management, daily log analysis, and performance monitoring to meet compliance, audit, and security governance requirements.
- Managed and troubleshoot SSL VPN and IPSec VPN connectivity for branch offices, remote users, third-party vendors, and cloud environments while working closely with vendor TAC teams to resolve critical incidents within SLA commitments.
- Led network technology refresh projects involving routers, switches, firewalls, load balancers, VPN gateways, and security appliances, ensuring minimal service disruption during implementation and migration.
- Managed and troubleshot SSL VPN and IPSec VPN connectivity for branch offices, remote users, third-party vendors, and cloud environments while working closely with vendor TAC teams to resolve critical incidents within SLA commitments.
- Created and maintained High-Level Designs (HLD), Low-Level Designs (LLD), network diagrams, SOPs, implementation guides, disaster recovery documentation, and operational runbooks in collaboration with infrastructure, cloud, application, and security teams to deliver comprehensive enterprise networking solutions.
Senior Network Engineer
HCL Insys Pte Ltd, Singapore (Client: Singapore Government Agencies)
04.2014 - 09.2018
- Providing Level-2 technical assistance for network troubleshooting and configuration needs
- Implementing & troubleshooting of Aruba Clear Pass.
- Carryout Firewall Policy review every six months as part of compliance
- Carry out Firewall Policy review every six months as part of compliance
- Assisted remote site network engineers in resolving network issues, enhancing overall service continuity.
- Monitored firewall logs and performance metrics to ensure optimal operation.
- Providing Level-2 technical assistant for network troubleshooting and configuration needs
- Coordinated with TAC teams of product vendors for resolution of high-severity and critical issues, facilitating timely solutions
- Assisting the Technical Managers in all aspects of implementation and troubleshooting of issues
Network Engineer
IBM Info services) – Chennai, India (Client: Bharti-Airtel
Chennai, India
03.2011 - 11.2013
- Configured WAN infrastructure with multiple E1 links using Cisco 2600, 2900, 3700, 3800, 7000 series routers and Cisco 2900, 3560, 3750, 4507 series switches to enhance network performance.
- Maintaining L3 Network devices connected with various remote locations with E1, and Fiber Optic connectivity and Coordinate with Various service providers like AES, BTSOL and Reliance network team for MPLS and multiple network link troubleshooting.
- Improved Wi-Fi performance by troubleshooting access-related issues, ensuring reliable connectivity for users.
- Monitored network utilization and events through MRTG, Syslog, Solar Winds, and Tivoli Network Manager to ensure optimal network performance.
- Troubleshooting Access oriented issues for WIFI
- Provided proposed LAN, wireless LAN, and WAN network designs to the IT Head and client, updated the network topology diagram, and shared it with the IT Head to maintain current information about the network.
- Job Responsibility:
Network Engineer
TVSNet Technologies Ltd (Pay Roll of Mafoi Management) Chennai, India
Chennai, India
03.2010 - 03.2011
- Provided level one technical assistance for troubleshooting and configuration issues, improving response time for customer queries.
- Coordinating and working with TAC team of product vendors in case of high severity and critical issues.
- Maintained team performance, ensuring 24x7 technical support for customers to minimize downtime.
- Provided level one technical assistant for troubleshooting and configuration needs.
- Coordinated with TAC team of product vendors to resolve high severity and critical issues, enhancing network reliability.
- Outlined responsibilities for the position.
Education
B. Tech - Information Technology
PTR College of Eng. & Tech
Madurai01-2009
Skills
- Cyber Security EDR, NDR, SIEM, SOAR, Vulnerability Management, Threat Intelligence, Information Security, Incident Response, Email Security
- Firewall implementation expertise
- Routing protocols
- VPN technologies
- SASE security
- Firewall management
- Web filtering
- Aruba NAC expertise
- Load balancer expertise
- Routing protocols knowledge
- Wireless Security Solutions
- Network monitoring
- Security monitoring
- Virtual Network Management
- Network Automation Tools
- Network Diagnostics
- Threat Detection Automation
- Network troubleshooting
Certification
- Cisco Certified Network Associate CCNA 640-802
- CCIE Security Certified - CCIE Security #67734
- CCNP-Routing & Switching
- Palo Alto Networks Certified Network Security Engineer (PCNSE)
- Check Point Certified Security Expert (CCSE)
- Aruba-Certified ClearPass Professional Certification (ACCP)
- Fortinet NSE 4 - Forti OS 6.0
- AWS Certified Security - Specialty
Languages
English & Tamil
Deceleration
I hereby declare that the above-mentioned information is correct up to my knowledge and I bear the responsibility for the correctness of the above-mentioned particulars. (Palanikumar Kathirvel)
Timeline
Senior Network Security Engineer
8x8 International Pte Ltd Singapore
07.2024 - Current
Senior Network Security Engineer
Ultimate Kronos Group (UKG) Singapore
11.2021 - 06.2024
Senior Network Security Consultant
NCS Pte Ltd Singapore (Client: NTUC Income)
10.2018 - 10.2021
Senior Network Engineer
HCL Insys Pte Ltd, Singapore (Client: Singapore Government Agencies)
04.2014 - 09.2018
Network Engineer
IBM Info services) – Chennai, India (Client: Bharti-Airtel
03.2011 - 11.2013
Network Engineer
TVSNet Technologies Ltd (Pay Roll of Mafoi Management) Chennai, India
03.2010 - 03.2011
B. Tech - Information Technology
PTR College of Eng. & Tech