Network Security Palo Alto

Bhavani Prasad

Tel:603-***-**** Email: *****************@*****.***

LinkedIn: https://www.linkedin.com/in/bhavani-p-b9b197342/ SUMMARY

Over 4+ years of experience in architecting and managing enterprise network infrastructure across hybrid cloud environments (AWS & Azure) and on-premise data centers

Expertise in configuring and troubleshooting advanced routing and switching protocols including BGP, OSPF, VRRP, STP, EtherChannel, and VLAN segmentation

Proficient in deploying and managing Cisco Catalyst/Nexus, Juniper, and Aruba network devices, along with firewalls like Palo Alto, Check Point, and Fortinet

Designed and implemented hybrid connectivity using AWS VPC, Direct Connect, Transit Gateway, and Azure VNets, ExpressRoute, and Application Gateway

Automated network operations using Ansible, Python (Netmiko, PyShark), and integrated workflows with Terraform for infrastructure as code (IaC) practices

Strengthened network security with NGFWs, ACLs, VPNs (IPsec/SSL), MFA, RADIUS, 802.1X, and cloud-native security tools like AWS WAF and Azure NSG

Monitored and optimized network performance using tools such as SolarWinds, PRTG, Wireshark, Azure Network Watcher, and AWS CloudWatch

Collaborated in Agile/DevOps environments, integrating with ITSM tools (ServiceNow, Jira) to support incident resolution and infrastructure upgrades

SKILLS

Networking Fundamentals: OSI Model, TCP/IP Stack, VLANs, Subnetting, NAT/PAT, IP Addressing (IPv4/IPv6), Network Troubleshooting, Packet Analysis

Routing & Switching Protocols: OSPF, EIGRP, BGP, RIP, HSRP, VRRP, Static Routing, VTP, STP, PVST+, RSTP, MST, EtherChannel, Inter-VLAN Routing, VXLAN, VPC, VSS

Network Devices & Platforms: Cisco Catalyst/Nexus Switches, Cisco ISR/ASR Routers, Cisco Meraki, Juniper MX/SRX/EX Series, Aruba Switches & Controllers, Palo Alto Firewalls, Check Point Firewalls, Fortinet FortiGate, F5 Load Balancer, Citrix NetScaler Network Protocols & Services: TCP, UDP, ICMP, DHCP, DNS, SNMP, NTP, HTTP/HTTPS, FTP/SFTP, SSH, Telnet, VPN (SSL/IPSec), MPLS, QoS, ACLs

Network Security: NGFW, IDS/IPS, IPsec/SSL VPNs, ACLs, 802.1X, RADIUS, TACACS+, AAA, NAC, MFA, WPA2/WPA3, SIEM

(Splunk, FortiSIEM)

Monitoring & Troubleshooting Tools: SolarWinds, PRTG, NetFlow Analyzer, Wireshark, Nmap, PyShark, Cisco Prime, Cisco DNA Center, Juniper Network Director

Cloud Platforms & Networking: AWS (VPC, Direct Connect, Transit Gateway, Route 53), Azure (VNet, NSG, ExpressRoute, Azure Firewall)

Containerization & Orchestration: Docker, Kubernetes, Istio, Linkerd, Ingress Controllers, Network Policies Automation & Scripting: Python (Netmiko, PySNMP, PyShark), Ansible, Bash, Shell Scripting, Terraform Version Control: Git, GitHub, GitLab, Bitbucket, Subversion (SVN) Operating Systems: Cisco IOS, Cisco NX-OS, Junos OS, PAN-OS, Windows Server, Red Hat, CentOS, Ubuntu, SuSE ITSM & Ticketing Tools: ServiceNow, Jira, BMC Remedy, Zendesk EXPERIENCE

Hartford Financial Service Group June 2023 - Current Network Engineer

Architected and deployed secure, scalable AWS networking solutions using VPC, Subnets, Route Tables, NAT Gateways, and Transit Gateways across multi-account environments.

Engineered high-availability hybrid connectivity solutions using AWS Direct Connect, Site-to-Site VPN, and dynamic routing protocols (BGP, OSPF), ensuring 99.99% uptime for critical workloads.

Automated network infrastructure provisioning using Ansible, Python (Netmiko, Boto3), and AWS CloudFormation, reducing deployment times by 60%.

Monitored and optimized network health using AWS CloudWatch, VPC Flow Logs, and custom CloudWatch dashboards to proactively identify and resolve anomalies.

Enforced security best practices with IAM policies, AWS WAF, Security Groups, and NACLs, achieving zero security incidents across cloud environments.

Performed deep packet inspection and traffic analysis with Wireshark and PyShark, enhancing threat detection and minimizing downtime by 40%.

Integrated centralized logging with AWS CloudTrail, ELK Stack, and Splunk to support real-time alerting and incident response.

Collaborated cross-functionally with DevOps and Security teams to design AWS multi-region architectures with disaster recovery and fault-tolerant routing.

Coforge Jan 2019 - Dec 2021

Network Engineer

Designed and implemented enterprise-grade virtual networks in Azure using VNets, NSGs, UDRs, and ExpressRoute for secure hybrid cloud connectivity.

Configured Azure Firewall, Application Gateway, and Load Balancer to ensure secure and reliable application delivery across distributed environments.

Automated network deployment pipelines using Azure ARM Templates and Azure DevOps CI/CD, reducing manual errors and provisioning delays by 70%.

Diagnosed complex connectivity issues using Azure Network Watcher, Connection Monitor, and built-in traffic analytics, improving resolution times by 50%.

Established secure remote access with Azure VPN Gateway and Point-to-Site tunnels using certificate-based authentication and conditional access.

Integrated Azure Monitor and Log Analytics with SolarWinds and PRTG for unified infrastructure visibility and alerting.

Supported configuration and maintenance of Cisco ISR, Juniper SRX, and Check Point firewalls interfacing with Azure VNets via BGP peering and static routing.

Hardened network security by implementing Private Link, custom DNS zones, and Azure Bastion for secure jump-host access and isolation of sensitive workloads.

EDUCATION

Masters in Computer Science

Rivier University NH USA

Bachelors in civil

Sri indu college of engineering India

CERTIFICATION

AWS - AWS certified Associate Solutions Architect

CCNA - Cisco Certified Network Associate - CSCO14677209

CCNP - Cisco Certified Network Professional

Contact this candidate