Network Engineer Palo Alto

Network Engineer with *+ years of experience designing and automating hybrid network infrastructures across AWS, Azure, and on-prem data centers.

Strong command of routing and switching protocols including BGP, OSPF, EIGRP, MPLS, VRF, VLAN, HSRP, and ECMP for scalable and resilient connectivity.

Skilled in configuring and managing Cisco Catalyst/Nexus/ISR, Juniper MX/SRX, F5 BIG-IP LTM, Meraki, Aruba Wireless, and Arista platforms.

Hands-on expertise in firewall administration and security policy enforcement using Palo Alto (PCNSA/PCNSE), Cisco ASA/FTD, FortiGate, Cisco ISE, and Zero Trust architectures.

Proficient in automating network tasks using Python (Netmiko, NAPALM, Paramiko), Ansible, and REST APIs, with IaC frameworks like Terraform and CloudFormation.

Built CI/CD pipelines for infrastructure provisioning and drift detection using Jenkins, GitLab CI, Git, and YAML across DevOps- driven environments.

Experienced in network observability using Zabbix, Prometheus, ELK, Wireshark, and SNMP; with strong documentation and compliance knowledge aligned to NIST, CIS, and PCI-DSS.

Led cross-functional initiatives to modernize hybrid cloud networks, integrating AWS/Azure environments with on-prem infrastructure through automated provisioning, secure tunneling, and dynamic routing solutions. TECHNICAL SKILLS

Core Networking: BGP, OSPF, EIGRP, MPLS, VRF, VLAN, HSRP, VRRP, STP, ECMP, Route Prepending, SIP, QoS

Network Devices: Cisco Catalyst, Nexus, ASR/ISR, Juniper MX/SRX, Aruba Controllers, F5 BIG-IP LTM, Meraki, Arista

Cloud & Hybrid Networking: AWS VPC, Transit Gateway, Direct Connect, Route 53, Azure VNet, ExpressRoute, SD-WAN (Cisco Viptela, Fortinet)

Firewalls & Security: Cisco ASA, FTD, Palo Alto (PCNSA/PCNSE), FortiGate, IPSec VPN, DMVPN, SSL VPN, ACLs, NAT, Cisco ISE, NAC, 802.1X, Zero Trust Architecture

Infrastructure as Code (IaC): Terraform, AWS CloudFormation, Azure ARM Templates

Network Automation & Scripting: Python (Netmiko, NAPALM, Paramiko), Ansible, Bash, REST APIs, YAML

CI/CD & DevOps Integration: Jenkins, GitLab CI, Ansible, Git, Configuration Drift Detection

Monitoring & Observability: Zabbix, Prometheus, ELK Stack, SolarWinds, PRTG, SNMP, Wireshark, TCPDump

Wireless & Access Networks: Wi-Fi 6, Cisco WLC 9800, Aruba Wireless, RF Optimization

Virtualization & SDN: VMware vSphere, Cisco ACI, VXLAN, GRE, EVPN

Compliance & Documentation: CIS, NIST, HIPAA, PCI-DSS, Audit Reports, HLD, LLD, Visio, SharePoint, Confluence

ITSM & Agile Tools: ServiceNow, Jira, Agile/Scrum Frameworks PROFESSIONAL EXPERIENCE

Verizon Wireless Systems May 2023 – Current

Network Engineer II

Engineered high-availability hybrid network infrastructure across AWS and on-prem using VPC, Transit Gateway, Direct Connect, and MPLS with dynamic BGP routing.

Automated end-to-end provisioning of cloud-native network components using Terraform, CloudFormation, and custom Python scripts for scalable deployment.

Implemented multi-region VPNs, Direct Connect redundancy, and dynamic IPSec tunnels for secure cross-site communication and business continuity.

Designed and enforced Zero Trust principles with Cisco ISE, NAC, and Palo Alto firewalls, enabling role-based segmentation and real-time threat containment.

Orchestrated traffic load balancing and SSL termination using F5 BIG-IP LTM and HAProxy to ensure seamless user experiences across telecom platforms.

Enabled intelligent RF optimization and Wi-Fi 6 deployment using Cisco Catalyst 9800 and Aruba controllers for large-scale enterprise mobility.

Automated backup, compliance audits, and firmware upgrades of routers, switches, and firewalls using Netmiko, Paramiko, and REST API integrations.

Integrated telemetry and anomaly detection into the observability stack using Zabbix API, Prometheus, and ELK, aligned with telecom SLAs.

Deployed CI/CD pipelines (Jenkins, GitLab CI, Ansible) for network changes with built-in rollback, diff-check, and drift detection across cloud and core networks.

Collaborated cross-functionally with DevOps, app teams, and cybersecurity to embed network automation into CI pipelines and incident triage systems.

Chandrakanth Gangoni

Phone: +1-405-***-**** Email: ***********************@*****.*** SUMMARY

Coforge Apr 2018 – Jul 2021

Network Engineer

Provisioned and managed Cisco ISR/ASR and Juniper MX routing environments using Ansible and Python (Netmiko, NAPALM), reducing manual errors and speeding deployment.

Designed and supported core/edge routing with BGP, OSPF, and EIGRP, implementing route redistribution and prefix filtering across enterprise networks.

Deployed and maintained secure firewall policies (ACLs, NAT, VPNs) on Cisco ASA, Palo Alto, and Fortinet devices for banking and insurance clients.

Integrated Cisco ISE-based 802.1X NAC and posture validation across enterprise environments to meet regulatory and compliance requirements.

Led the SD-WAN rollout using Cisco Viptela, configuring data/control policies, DIA underlays, and redundant overlay tunnels for remote site connectivity.

Automated configuration compliance and inventory audits using Python, Git, and YAML, reducing security misconfigurations and ensuring audit readiness.

Conducted VoIP readiness assessments and configured QoS policies for SIP traffic over MPLS, improving voice clarity in customer support centers.

Built reusable Terraform modules to provision secure hybrid cloud connections for clients migrating legacy workloads to AWS and Azure.

Configured and managed enterprise-grade monitoring using SolarWinds, PRTG, and SNMP-based health checks for infrastructure visibility.

Maintained detailed LLD/HLD documentation, operational runbooks, and participated in Agile ceremonies for managed service delivery projects.

EDUCATION

Master of Science- MS, Computer Software Engineering 2023 Oklahoma Christian University, 2501 E Memorial Rd, Edmond, Ok

B.Tech 2019

Malla Reddy Engineering College

CERTIFICATION

Cisco Certified Network Associate (CCNA): CSC014914740 https://www.certmetrics.com/cisco/

Contact this candidate