[ Hello, I'm ]

Tinku Ghosh_

Securing networks · Automating operations · Building resilient infrastructure

Network · Cyber Security · Automation
|

Network Security Engineer with 5 years building and securing enterprise infrastructure — from SD-WAN deployments to automated threat response.

5+ Years Experience
20K+ Endpoints
25% Ops Reduction
Tinku Ghosh
Vibe Coder
Speed Cuber
Technoholic
Available for Opportunities

About Me

Tinku Ghosh
Tinku Ghosh Tech Lead @ Cognizant

Experienced Network Security Engineer with 5 years of expertise in network administration, security operations, and automation across enterprise environments.

Proven track record in managing 20,000+ endpoints, achieving 99.5% SLA compliance, and reducing operational workload by 25% through automation. Skilled in incident management, vulnerability remediation, and leading infrastructure projects.

Kolkata, India Open to Opportunities Network Automation
5+ Years Experience
20K+ Endpoints Managed
99.5% SLA Compliance
25% Workload Reduction

Technical Skills

Network Devices & Platforms

Cisco CatalystCisco MerakiCisco DNAC JuniperFortinet FortiGatePalo Alto Aruba CentralHP/HPECisco WLC 802.11ac/ax APsInfoblox

Security Tools

Fortinet FirewallPalo Alto FirewallNessus QualysPRTGServiceNowSolarWinds

Protocols & Technologies

MPLSBGPOSPFSD-WAN VLANLAN/WANWireless 802.11 VPNIPsecHSRP/VRRPEtherChannel

Automation & Scripting

PythonAnsibleAPI Integration Jenkins CI/CDPostmanGenAI Scripting

Core Competencies

Network SecurityIncident Management Vulnerability RemediationSD-WAN Zero Trust ArchitectureChange Management Root Cause AnalysisSLA Management

Operating Systems

Cisco IOSJunosFortiOSPalo Alto PAN-OS

Work Experience

Tech Lead

Cognizant Technology Solutions

Oct 2022 – Present
  • Handle P1/P2 tickets for LAN/WAN/Wireless issues — VLANs, trunks, STP, OSPF/BGP, interface errors on Cisco routers and switches
  • Diagnose connectivity problems using Wireshark, NetFlow, syslog, and SNMP; restore services within SLA
  • Implement changes — new VLANs, inter-VLAN routing, OSPF/BGP policies, IPsec site-to-site VPNs, wireless SSIDs, firewall rules
  • Design network segments for branch expansions including IP addressing, HSRP/VRRP, EtherChannel, and SD-WAN/SD-Access policies
  • Review and test firewall policy/ACL changes, remote-access VPN profiles, IDS/IPS, and NAT rules
  • Perform vulnerability checks, firmware updates, cipher suite audits, and misconfiguration remediation
  • Use Python/Ansible/APIs to automate config backups, ACL/VLAN pushes, and ticket creation from alerts
  • Maintain HLD/LLD diagrams, change records, and incident post-mortems

Network Engineer

Allied Digital Services Ltd

Nov 2021 – Oct 2022
  • Managed 40+ branch offices connected via MPLS, BGP, and OSPF from headquarters
  • Administered complete wireless network infrastructure including WLC and Access Points
  • Monitored network traffic and implemented firewall policies for security compliance
  • Performed firmware upgrades across various network devices
  • Identified, tested, and resolved network loops and vulnerabilities
  • Handled escalated P1/P2 tickets from L1 support; utilized PRTG for monitoring

Onsite Network Support Engineer

InterTouch Hospitality Technology

Jan 2021 – Nov 2021
  • Managed and monitored routers, switches, firewalls, gateways, Zone Directors, and Access Points
  • Ensured maximum network uptime through proactive monitoring and maintenance
  • Configured VLANs, port configurations, and switch settings for hospitality environments
  • Expanded network infrastructure based on client requirements; resolved guest network issues

Automation Projects

CLI Automation

Config Backup & Audit System

Eliminated hours of manual device auditing per week — automated config backups and baseline compliance checks across the entire fleet, cutting audit labour costs by ~70% and catching misconfigurations before they cause outages.

PythonAnsibleCisco IOS
CLI Automation

Password Rotation Automation

Replaced a full day of manual quarterly work across hundreds of devices with a single scheduled script — saving the team 8+ engineer-hours per cycle while enforcing zero-gap compliance with security policy.

PythonNetmikoParamiko
CLI Automation

Pre/Post Change Verification

Automated state snapshots before and after every change window, reducing post-change validation time by 60% and enabling faster rollback decisions — directly protecting SLA and minimising costly unplanned downtime.

PythonAnsibleNAPALM
API Automation

Meraki-ServiceNow Integration

Wired Meraki MX uplink failures directly into ServiceNow ticket creation — removing manual L1 monitoring shifts and cutting mean-time-to-ticket from 15+ minutes to under 60 seconds, saving on-call overhead and accelerating resolution.

Meraki APIServiceNow APIPython
API Automation

IoC EDL for Meraki

Automated threat-intel feed ingestion into Meraki security policies — blocking known malicious IPs organisation-wide in real time, eliminating manual firewall rule updates and reducing potential breach exposure cost significantly.

Meraki APIPythonThreat Intel
API Automation

Automated Firmware Management

Centralised firmware tracking and upgrade orchestration across the entire device estate — cutting per-device upgrade effort by 80%, eliminating version-drift risk, and freeing engineers from repetitive maintenance to focus on higher-value work.

REST APIPostmanJenkins

Education & Interests

Masters in Network Administration

Jetking Infotrain Ltd

Advanced networking, security architectures, and enterprise infrastructure management.

Bachelor of Commerce

University of Calcutta

Foundation in analytical thinking, business processes, and quantitative reasoning.

Hobbies & Interests

Ethical Hacking
Vibe Coding
Speed Cubing
Automation

Get In Touch

I'm always open to discussing new opportunities, automation challenges, or network security topics.