Network Engineer Security

KARTHIK GUDI

Phone: +1-973-***-**** Email: ************@*****.***

PROFESSIONAL SUMMARY

Results-driven and Cisco Certified Network Engineer with 5+ years of hands-on experience in designing, implementing, and maintaining complex, high-performance networks for both enterprise and data center environments.

Skilled in configuring and troubleshooting a wide array of networking technologies, including Cisco Nexus switches, ASR/ISR routers, Fortinet, Palo Alto firewalls, and Juniper MX routers.

Proficient in routing protocols (BGP, OSPF, EIGRP), VLANs, STP, and network security technologies such as VPNs, IPsec, IDS/IPS, and ACLs.

Expertise in firewall management, network segmentation, and performance optimization to ensure robust network security and high availability.

Experienced in AWS cloud technologies (EC2, VPC, VPN), cloud networking, and SDN with hands-on experience in implementing and managing scalable network architectures.

Proven ability to analyze complex network challenges, troubleshoot performance issues, and implement effective solutions with minimal user disruption, adhering to ITIL processes.

Proficient in utilizing network monitoring tools such as SolarWinds, Cisco Packet Tracer, Nagios, and Wireshark to proactively monitor and optimize network health and performance. CERTIFICATIONS

CCNA – Cisco Certified Network Associate-CSCO14552990

CCNP – Cisco Certified Network Professional-In Progress

PNCSE – Palo Alto Network Certified Security Engineer-PANW00113189

SKILLS

Networking Fundamentals: OSI Model, TCP/IP, Routing, Switching, VLANs, Subnetting, Network Troubleshooting, Mesh Wi-Fi, Network Capacity Planning, Micro-Segmentation. Network Hardware & Software: Routers, Switches, Firewalls (Palo Alto, Cisco ASA, Fortinet, Checkpoint), Wireless APs, Network Management Software, Cisco Catalyst Series (2900XL, 3500XL, 2950, 3550, 3750). Routing Protocols: OSPF, EIGRP, BGP, RIP, HSRP, VRRP, Static Routing, MPLS(LDP, TDP). Switching Protocols: LAN, VTP, STP, PVST, MST, Inter-VLAN Routing, Multi-Layer Switching, VPC, VSS, VXLAN. Network Protocols: DNS, DHCP, HTTP, SMTP, FTP, RTP, RTSP, NAT/PAT. Network Security: Access Control, Authentication, Encryption, ACLs, IDS/IPS, SSL/TLS, VPNs(IPsec, Site-to-Site), Log Management, PCI DSS, HIPAA, GDPR Compliance.

Monitoring Tools: Wireshark, Ethereal, SolarWinds, Nagios, PRTG, Cisco Packet Tracer, SNMP-based Monitoring. Virtualization & Cloud: VMware, Hyper-V, VXLAN, NVGRE, AWS, Azure, Hybrid Networking, SDN. Container Technologies : Docker, Kubernetes.

Version Control : Git, Subversion.

Change Management: ITIL-based Change Management, ServiceNow, Jira, Risk Assessment, Impact Analysis, Network Documentation(Visio).

Programming & Automation: Python, Java, Ansible, API Integration. Productivity Tools: Microsoft Visio, Excel, PowerPoint, Word. EDUCATION

SAINT LEO UNIVERSITY, THE PRIVATE UNIVERSITY OF FLORIDA Master of Science in Computer Science, GPA: 3.7/4.0 PRIST UNIVERSITY, NAAC ACCREDITED

Bachelor of Engineering in Electronics & Communication Engineering; CGPA: 7.08/10 PROFESSIONAL EXPERIENCE

NETWORK ENGINEER VERIZON WIRELESS SYSTEMS JUNE 2023-PRESENT

Engineered and deployed Cisco routers and Layer 3 switches, implementing dynamic routing protocols (OSPF, EIGRP, BGP) for optimal path selection and high network availability.

Configured Layer 2 switches with VLANs, STP, VTP, DTP, port security, and link aggregation to enhance network segmentation and redundancy.

Designed and implemented mesh Wi-Fi architectures to provide seamless wireless coverage in challenging physical environments.

Deployed advanced network security solutions including firewalls (Cisco ASA, Palo Alto), VPNs (IPsec, SSL), and IDS/IPS systems to strengthen perimeter defenses.

Created and enforced security policies and ACLs to ensure compliance with organizational and regulatory standards such

as PCI DSS, HIPAA, and GDPR.

Managed AWS networking components including EC2 instances, VPCs, VPC peering, Direct Connect, VPN gateways, and elastic load balancing for hybrid cloud environments.

Performed system maintenance, including IOS upgrades, configuration backups, and device restorations across routers and switches.

Maintained comprehensive documentation of network changes, upgrades, and configurations to support ITIL – based change management and user acceptance testing.

Configured and managed next-generation firewalls to provide advanced threat protection and improve network security posture.

Diagnosed and resolved LAN/WAN performance issues, conducted proactive maintenance, and led disaster recovery exercises to minimize downtime.

Secured networks using NAT/PAT, site-to-site VPNs, and encryption technologies such as IPsec.

Configured application-layer gateways and services including DNS, DHCP, FTP, HTTP, RTP, and RTSP to ensure reliable service delivery.

Integrated network monitoring tools such as Nagios and PRTG to provide real-time visibility, performance metrics, and fault alerts.

Environment Cisco Routers (2900, 3900 Series), Cisco Layer 2/3 Switches (Catalyst 2960, 3750), Cisco ASA Firewalls, Palo Alto Next-Gen Firewalls, AWS(EC2, VPC, Direct Connect, VPN, ELB), VLANs, STP, VTP, DTP, IPsec, SSL VPN, IDS/IPS, NAT/PAT, DNS, DHCP, FTP, HTTP, RTP, RTSP, Nagios, PRTG, ITIL-based Change Management.

NETWORK ENGINEER SUNDARAM FINANCE JAN 2018-JULY 2021

Configured and troubleshot dynamic routing protocols including EIGRP, OSPF, and BGP across enterprise WAN environments.

Collaborated with regional IT teams to diagnose and resolve bandwidth and performance issues, improving application response times through traffic prioritization.

Planned and executed network infrastructure installations and relocations, including switch and router deployments.

Installed and maintained LAN switching and wireless infrastructure, managing cable uplinks, access ports, and end-user connectivity.

Managed Cisco ASA 5525 firewalls and implemented ACLs in multi-VLAN environments for secure network segmentation.

Utilized Wireshark and packet capture tools for advanced network troubleshooting and protocol analysis.

Performed IOS upgrades, image backups, and configuration restores via TFTP for Cisco routers and switches.

Monitored network devices using SNMP-based tools and implemented alerting for proactive fault management.

Analyzed traffic patterns and implemented network optimizations to enhance reliability and throughput.

Developed and maintained IP addressing schemes, VLAN configurations, and Visio-based network documentation.

Implemented and monitored VPN tunnels, SSL/TLS, and IPsec protocols to support secure remote access.

Administered NMS/NPS systems for managing device health and ensuring compliance with security policies.

Hands-on experience with subnetting, VLSM, VLAN trunking (802.1Q), MPLS LDP/TDP, and Cisco VTP configurations.

Designed and implemented scalable, fault-tolerant network architectures with HSRP for gateway redundancy.

Supported centralized log management systems for event correlation and incident investigation.

Conducted end-to-end connectivity testing and led user acceptance testing (UAT) for network rollouts. Environment Cisco 3925, 2620, 1900 routers, Cisco 3750, 2950 Switches, Routing protocols: EIGRP, RIP, OSPF, BGP, FHRP: HSRP, Sniffing Tools: Ethereal, Wireshark, Port Security, SRX Firewall, VLAN, 802.1Q Trunking, Cisco ASA 5500. Mentorship Academic Mentorship: Seek guidance from professors, teachers, or senior students in academic institution. Take the initiative to follow up on tasks or goals discussed during mentorship sessions. Attend local or virtual networking events, conferences, and meetups to meet industry experts and potential mentors. Others Bronze Award: Won 4th prize for the development of action game.

Contact this candidate