Swapnil Shah

• Leading enterprise security strategy and governance for MCIS Life’s critical systems and cloud workloads.
• Acting as the SME for BNM RMiT compliance, mapping controls across infrastructure, cloud, and application security.
• Designing and reviewing security architecture for new projects, integrations, and digital transformation initiatives.
• Managing SIEM, SOC workflows, incident response, and threat hunting activities.
• Overseeing identity & access governance including Azure AD/Entra ID, MFA, conditional access, and privileged access controls across all systems.
• Implementing network security controls across firewalls, segmentation, NAC/SAC/DAC, and secure remote access.
• Driving vulnerability management, patch governance, and remediation tracking across on prem and cloud environments.
• Collaborating with Infra, Cloud, DevOps, and Application teams to embed security-by-design.
• Preparing documentation, risk assessments, and audit evidence for internal and external audits.
• Supporting corporate environments with secure configurations, hardening, and monitoring.
• Acting as a primary point of escalation for all security incidents.

• Firewall Management: Configuring and maintaining firewalls to control traffic and protect networks from unauthorized access
• Intrusion Detection and Prevention Systems (IDS/IPS): Implementing and managing IDS/IPS to detect and respond to potential security breaches
• Network Segmentation: Designing and implementing network segmentation to limit the spread of threats and enhance security
• Switching : Configuration and maintenance of Cisco switches, including LAN / WAN, vlans, trunk links, L3 switching (OSPF), redundancy protocols like STP, VRRP, HSRP etc..
• Operating System Hardening: Securing operating systems (Windows, Linux) through configuration changes, patch management, and reducing attack surfaces
• Endpoint Protection: Deploying and managing endpoint security solutions, including antivirus, anti-malware, and endpoint detection and response (EDR) tools.
• Vulnerability Management: Using tools like Nessus, Qualys, and OpenVAS to identify vulnerabilities in systems and networks.
• Patch Management: Ensuring timely application of patches and updates to mitigate vulnerabilities and protect against exploits.
• Security Information and Event Management (SIEM): Designing and implementation of SIEM tools (Rapid7,Qualys) to collect, analyze, and correlate security event data for real-time threat detection.
• Log Management: Setting up and managing log collection, storage, and analysis to monitor security events and detect anomalies.
• Penetration Testing: Conducting penetration tests to identify and exploit vulnerabilities, providing actionable remediation advice.
• Ethical Hacking: Applying ethical hacking techniques to assess and improve the security posture of systems and networks.
• Security Audits: Conducting security audits and assessments to ensure adherence to policies, procedures, and regulatory requirements.
• Cloud Security Best Practices: Implementing security best practices for cloud environments (AWS, Azure, Google Cloud).
• Identity and Access Management in Cloud: Managing IAM in cloud platforms to ensure secure access control and user management.
• Data Protection in Cloud: Securing data in cloud environments through encryption, access controls, and regular audits.
• NAC: Managing NAC for controlling the unauthorized access and devices to get into the network.
• SAC: Implementing and managing SAC for controlling the unauthorized access over servers.
• DAC: Implementing and managing SAC for controlling the unauthorized access over database.
• Security solutions : Designing, implementation and manging the different security solutions like EPS , EDR , DLP , Document Security , Proxy etc.
• Server : Configured and managed VMware vSphere environments (vCenter, ESXi hosts, vMotion, HA/DRS. Conducted VM migration, backup/restore, and disaster recovery using VMware tools.
• Storage : Deployed and administered storage solutions (SAN, NAS; vSAN for VM datastores)
• Datacenter : Leading and managing the datacenter infrastructure.

• Managing Vulnerability assessment and its management.
• Managing vulnerability remediation.
• Responsible for the Patch Management for the whole organization which includes endpoints, on prem servers, cloud instances, network devices etc.
• Key player for the migration team of the organization for carrying out different migration and testing for on prem and cloud services.
• Responsible for managing Data Centre and its network and security.
• Taking care of security aspects for all Archer organization which includes (India and 3 locations in the US).
• Responsible for the DLP monitoring, troubleshooting and its implementation.
• Managing security over cloud like on Azure and AWS.
• Managing more than 50+ Hyper V terminal servers.
• Managing Cisco Meraki Switches and its AP’s. (Troubleshooting and configuration).
• Managing PaloAlto, Sonicwall and Fortigate firewalls for India & US Data Centres.
• Managing AD and office365 and applying policies as per the requirement.
• Managing DUO as 2FA for the organization. (Configuration and implementation).
• Managing DRUVA for file backup.
• Working with different vendors for the implementation of different tools to make the network secure and reliable.
• Primary contact for Infrastructure and Security escalations.
• Taking care of firmware upgradation for all NOC devices.
• Using multiple monitoring tools for the organization network and its system monitoring. (OPMAN, LanSweeper, ME).
• Using Rapid7 as an SIEM tool. (IDR, MDR, Appsec etc..).
• Looking after infrastructure security.
• Hands on experience on Azure Cloud Technologies.

• Worked on patching for more than 70 clients from the Connectwise platform Patching and managing more than 1200++ devices.
• Working on SonicWall and Sophos firewall for its security configuration.
• Working on DUO admin portal for more than 70 clients.
• Managing more than 70 client office 365 security.
• Configuration of 2FA for all clients.
• Working on various on-demand clients for the investigation of cyberattacks held on them.
• Working on server security configuration for all clients.
• Working on Nessus, Rapid 7, mobile app security, website testing and all security stuffs.
• Taking out various penetration tests of devices, networks, and whole infrastructure to make sure no loopholes in the network.
• Testing different tools for any on-demand requirement.
• Worked with different backups: Acronis, veeam, Datto, Axcient.

• Experience in windows product, Installation, Configuration and its troubleshooting. Hands on experience for windows-xp, vista, 8 and 10, server 2008, 2012, 2016 etc, installation and troubleshooting for the more than 350+ softwares, network troubleshooting, working on firewall, working on Azure live AD, SCCM troubleshooting and its deployment, cyber security, penetration testing and other.
• Installations, administration and configuration of windows operating system manually or by server or by cloning.
• Upgradation of OS and all of its features without formatting.
• Upgradation through SCCM.
• Assigning IP address for desktop and laptop or on DHCP.
• Users and group management.
• Management of desktop security.
• Sharing and securing files and folder using NTFS permission.
• Installation of service packs, patches and software peripherals.
• Securing desktop and laptops from various kinds of virus threats using different platforms.
• Backup and restoring data.
• SCCM deployment in domain and workgroup.
• Scope for the SCCM across Baroda location.
• As a TL working with more than team of 8+ and arranging for the support for onsite with the best resolution without intervention in their work with 24
• 7 support.
• Troubleshooting of hardware issue in desktops, workstation, laptops, workstation laptops, notebooks, business class notebook.
• Also Managing helpdesk and its calls with best resolution of problems and support to users.
• Supporting for the troubleshooting of various problems to onsite users.
• Managing network printers and scanners.
• Configuring and installing bulk desktop and laptop using clone image.
• Configuring and troubleshooting tabs.
• Windows activation key management.
• Desktop and laptop asset management.
• Configuration and troubleshooting of CCTV and different security systems.
• Configuration of fire burglar alarm and troubleshooting.
• Working with live AD for the user creation.
• Working with the VM Ware for the VDI for the specific end user requirements.
• Working with the users in different location like US, UK, Germany, Japan etc for their problem resolution.
• Hands on knowledge for the installation of 150+ softwares, CAD softwares, graphics softwares, Standalone licensing, Network licensing etc.

• Company Overview: Burundi, East Africa
• Installations, administration and configuration of windows operating system.
• Formatting, installing and updating of all operating system.
• Assigning IP address for desktop and laptop.
• Users and group management.
• Management of desktop security.
• Sharing and securing files and folder using NTFS permission.
• Installation of service packs, patches and software peripherals.
• Securing desktop and laptops from various kinds of virus threats using different platforms.
• Backup and restoring data.
• Troubleshooting of hardware issue in desktop and laptops.
• Managing helpdesk calls and close with priority wise with resolution.
• Supporting and troubleshooting direct calls over phone by users.
• Managing network printers and scanners.
• Configuring and installing bulk desktop and laptop using clone image.
• Configuring and troubleshooting tabs.
• Windows activation key management.
• Desktop and laptop asset management.
• Configuration and troubleshooting of CCTV and different security systems.
• Configuration of fire burglar alarm and troubleshooting.
• Burundi, East Africa

• Installations, administration and configuration of windows operating system.
• Formatting, installing and updating of all operating system.
• Assigning IP address for desktop and laptop.
• Users and group management.
• Management of desktop security.
• Sharing and securing files and folder using NTFS permission.
• Installation of service packs, patches and software peripherals.
• Securing desktop and laptops from various kinds of virus threats using different platforms.
• Backup and restoring data.
• Troubleshooting of hardware issue in desktop and laptops.
• Configuration and troubleshooting of CCTV and different security systems.
• Configuration of fire burglar alarm and troubleshooting.

• Installations, administration and configuration of windows operating system.
• Formatting, installing and updating of all operating system.
• Assigning IP address for desktop and laptop.
• Users and group management.
• Management of desktop security.
• Sharing and securing files and folder using NTFS permission.
• Installation of service packs, patches and software peripherals.
• Securing desktop and laptops from various kinds of virus threats using different platforms.
• Backup and restoring data.
• Troubleshooting of hardware issue in desktop and laptops.
• Managing helpdesk calls and close with priority wise with resolution.
• Supporting and troubleshooting direct calls over phone by users.
• Managing network printers and scanners.
• Configuring and installing bulk desktop and laptop using clone image.
• Configuring and troubleshooting tabs.
• Windows activation key management.
• Desktop and laptop asset management.
• Configuration and troubleshooting of CCTV and different security systems.
• Configuration of fire burglar alarm and troubleshooting.

• Configuring and installation of network printers and scanners.
• Troubleshooting and repairing and maintenance of Printers at customer site.

• Giving live training to the employees of ONGC Gujarat region at their different Corporate offices regarding hardware, network, basic troubleshooting, ONGC different software’s, TABLETS and Smartphone configuration, MS-Office pack and many.