Network Engineer Security

T S Subrahmanyam

************************@*****.*** +1-913-***-**** USA LinkedIn

Summary

Network Engineer with 4+ years of experience designing, implementing, and optimizing secure network infrastructures. Proficient in managing complex enterprise networks, leveraging in-depth knowledge of routing, switching, and firewall technologies. Adept at troubleshooting and resolving network issues, ensuring minimal downtime and maximum operational efficiency. Experienced in configuring and maintaining Cisco, Juniper, and Palo Alto network devices, and skilled in network monitoring tools like Wireshark and SolarWinds. Strong understanding of network protocols (TCP/IP, BGP, OSPF, EIGRP) and network security best practices, including VPNs and IDS/IPS systems. Demonstrated expertise in implementing network automation using Python and Ansible, reducing manual efforts and enhancing consistency. Technical Skills

Networking Fundamentals: OSI model, TCP/IP Protocol Suite, VLANs, Subnetting, and Network Troubleshooting, LAN, WAN, MAN, SD-WAN, MPLS

Network Hardware and Software: Cisco, Juniper, and Arista, Routers, Switches, Firewalls (Palo Alto, Checkpoint), Wireless Access Points, and network management software, Load Balancers, and SDN (Software-Defined Networking), Network Automation using Ansible, Python (Netmiko, NAPALM), and REST APIs

Switching Equipment: Cisco Catalyst switches like 2900XL/3500XL/2950/3550/3750 Routing Equipment: Cisco Routerslike - ISR 921, ISR 4431, 1120, 8200 Routing Protocols: OSPF, EIGRP, BGP, RIP, HSRP, VRRP, Static Routing Switching Protocols: LAN, VTP, STP, PVST, MST, Inter VLAN routing & Multi-Layer Switch, VPC, VSS, VXLAN Tunneling Network Protocols: DNS, DHCP, HTTP, SMTP, and FTP, Access Control, Authentication (RADIUS, TACACS+), Encryption (SSL, TLS, IPsec), IDS/IPS, and Firewalls (Checkpoint, Palo Alto, Cisco ASA, Fortinet) Monitoring Tools: Wireshark, SolarWinds, Nagios, PRTG, Zabbix, SNMP, and NetFlow Network Security Technologies: Access control, Authentication, encryption, firewalls, IDS/IPS, SSL and VPNs Documentation and Reporting: Ability to create and maintain network documentation, including network diagrams, standard operating procedures, and incident reports

Cloud & DevOps: AWS, Microsoft Azure, Docker, Kubernetes Version Control Git, Subversion, Jenkins Professional Experience

Network Engineer, Secure Technical Support LLC 07/2024 – Present Remote, USA

• Designed and deployed an enterprise-grade, multi-layered network security architecture, integrating next-gen firewalls

(Cisco ASA, Palo Alto), IDS/IPS (Snort, Suricata), and VPN solutions, reducing cyber threats by 45% while ensuring compliance with NIST and ISO 27001 standards.

• Engineered a high-availability SD-WAN and cloud-hybrid network, optimizing BGP, OSPF, and VLAN segmentation to enhance performance, resilience, and secure multi-site connectivity across AWS and Azure environments.

• Automated real-time threat detection and response by integrating SIEM solutions (Splunk, ELK Stack) with AI-driven anomaly detection, reducing incident response time by 60% and proactively mitigating zero-day attacks.

• Executed advanced penetration testing and forensic analysis, leveraging Kali Linux, Nessus, and Wireshark to identify and patch critical vulnerabilities, strengthening network security posture and minimizing breach risks.

• Led the implementation of Zero-Trust Network Access (ZTNA) and identity-based segmentation, deploying Cisco ISE, FortiNAC, and IAM best practices to eliminate lateral movement threats and enforce least-privilege access.

• Developed and enforced enterprise-wide cybersecurity policies and incident response protocols, conducting security training and risk assessments that enhanced compliance, reduced phishing incidents by 30%, and ensured 99.99% network uptime. Network Engineer, Capgemini 03/2020 – 07/2022 Bangalore, India

• Architected and deployed a high-performance, low-latency network supporting 100,000+ concurrent users, achieving 99.999% uptime through resilient BGP, OSPF, and EIGRP routing strategies.

• Engineered a cutting-edge SD-WAN solution, optimizing multi-site connectivity and reducing WAN costs by 50%, leveraging Cisco Viptela and Fortinet SD-WAN.

• Strengthened cybersecurity posture by implementing Next-Generation Firewalls (NGFW), Zero Trust Network Access (ZTNA), IDS/IPS, and AI-driven threat detection, reducing security incidents by 65%.

• Automated network operations with Python-based scripting, Ansible, and Terraform, accelerating provisioning and configuration management by 80% and ensuring compliance with NIST and ISO 27001 standards.

• Designed and optimized hybrid cloud networking architectures with AWS Direct Connect, Azure ExpressRoute, and Google Cloud Interconnect, enhancing cloud workload performance by 45%.

• Led the migration of legacy on-premise networks to a software-defined data center (SDDC), deploying VMware NSX for micro-segmentation, reducing lateral attack surface by 70%.

• Integrated AI-driven network monitoring and predictive analytics with Cisco DNA Center, ThousandEyes, and SolarWinds, proactively identifying and mitigating performance bottlenecks.

• Implemented high-availability architectures using HSRP, VRRP, and MPLS failover mechanisms, ensuring seamless failover and disaster recovery readiness.

• Developed comprehensive network topology documentation, incident response playbooks, and security policies using Visio, Confluence, and Git, enhancing cross-team collaboration and audit readiness.

• Optimized VoIP, wireless, and data center networks, ensuring ultra-low latency for mission-critical applications across enterprise environments.

Network Engineer, Magna Info Tech 03/2019-03/2020 India

• Designed and implemented scalable network architectures, improving data transmission speed and reducing downtime by 30% using Cisco routers, switches, and firewalls.

• Managed and maintained network devices and systems, including VPNs, LAN/WAN, and IP addressing, ensuring optimal network performance and security.

• Monitored network traffic and performance using tools like Wireshark, SolarWinds, and Nagios, diagnosing issues and implementing proactive solutions to minimize disruptions.

• Collaborated with cross-functional teams to integrate cloud services (AWS, Azure) into the network infrastructure, enhancing scalability and resilience.

• Ensured network security by implementing firewall rules, intrusion detection/prevention systems (IDS/IPS), and VPN solutions to protect sensitive data from external threats. 1 Million 1 Billion Foundation (1M1B): Startup Gurukool Internship 08/2017-08/2018 India

• Drove strategic collaborations with startups to expand access to rural markets in Andhra Pradesh, aligning initiatives with United Nations Sustainable Development Goals (UN SDGs) to foster socio-economic growth.

• Designed and implemented scalable models leveraging indigenous technologies to enhance rural employment, integrating IoT-based smart solutions for sustainable infrastructure development.

• Partnered with key stakeholders, including the Department of Science & Technology (Govt. of India), Tata Trusts, and UN Habitat, to develop and deploy innovative engineering solutions for rural communities.

• Applied computer networking principles to establish rural connectivity infrastructure, ensuring access to digital resources and enhancing communication networks for remote enterprises.

• Gained hands-on experience in social entrepreneurship, project management, and technology-driven rural development, demonstrating a proactive, problem-solving mindset and technical adaptability. Education

Masters of Science in Computer Science 05/2024 MO, USA University of Central Missouri

Bachelors of Technology in Electrical and Electronics Engineering 03/2019 Visakhapatnam, India Andhra University

PROJECTS

Fine-Tuning Large Language Models (LLMs) with AWS and TorchTune Fall 2024

• Fine-tuned the LLaMA 3 model using TorchTune on a custom dataset, optimizing its performance for specialized tasks in AI- driven applications.

• Managed dataset integration through AWS S3 and Deep Lake, enabling efficient data preprocessing and model training at scale.

• Deployed the fine-tuned model via Hugging Face, ensuring optimized deployment for real-time AI inference. Improving Trained Models with RLHF Fall 2024

• Supervised Fine-Tuning (SFT): Fine-tuned the OPT-1.3B model using the OpenOrca dataset, enhancing conversational abilities through QLoRA for efficient memory usage.

• Reward Model Development: Trained a DeBERTa model using the Anthropic "helpfulness/harmless" dataset to evaluate outputs based on human feedback.

• Resource Optimization: Leveraged Lambda GPU cloud services for cost-effective training and monitored performance metrics in real-time using Weights & Biases.

Certifications & Achievements

AWS Certified Solution Architect Associate

Azure AZ-900 Certified, Azure AI-900 Certified

Machine Learning Specialization – Coursera

Leadership: Worked as Vice President of the student council consisting of over 4000 students.

Volunteered in a meal packing event that provided over 18,000 nutritious meal packets which were distributed to children worldwide.

Contact this candidate