Network Engineer Palo Alto

Venkata Sai Chowdary

Network Engineer

*****************@*****.*** +1-814-***-**** Austin, TX

Summary

Results-driven Network Engineer with 4 years of experience designing, securing, and optimizing high-performance enterprise networks for global financial institutions and hybrid cloud environments. Expertise in Cisco/Palo Alto infrastructures, zero-trust security, BGP/OSPF routing, and SDN/automation (Python, Ansible). Proven ability to reduce latency, cut costs, and enhance reliability for mission-critical systems (e.g., high-frequency trading). Adept at leading cross-functional teams, resolving outages under tight SLAs, and ensuring compliance with NIST, FINRA, and ISO 27001.

Key Achievements:

Automated network device configurations using Python and Ansible, reducing provisioning time by 40% and managing numerous devices across global data centers.

Optimized cloud connectivity, reducing Azure ExpressRoute latency by 30% and cutting cloud costs by 25% through efficient routing and security policies.

Deployed zero-trust security with Cisco ISE and 802.1X, reducing unauthorized access incidents by 90% and achieving 100% compliance in FINRA/SEC audits.

Improved VoIP call quality by 35% by implementing QoS policies, reducing packet loss to less than 0.5% across MPLS/WAN links. Skills

Networking Protocols & Technologies: TCP/IP, UDP, IPv4/IPv6, Subnetting, VLSM, ARP, ICMP, SNMP, NAT/PAT, DHCP, DNS, NTP, QoS, STP, RSTP, VLAN, 802.1q Trunking, EtherChannel (LACP, PAgP), HSRP, VRRP, GLBP, OSI Model, Routing (Static, Dynamic), BGP, OSPF, EIGRP, RIP Enterprise Networking & Infrastructure: Cisco Routers (2600–7600 series), Catalyst Switches (2960, 3750, 4500, 6500), Cisco Nexus (3k, 5k, 7k, 9k), Cisco ASA Firewalls, Aruba Wireless Controllers, WAN/Metro Ethernet, MPLS, DOCSIS, EPON, IPAM (Infoblox), Load Balancers (F5

– basic), Structured Cabling & Rack Layouts

Network Security & Access Control: Cisco ASA, Cisco ISE, Palo Alto Firewalls, GlobalProtect VPN, VPN Tunnels (IPsec, SSL), ACLs, Stateful Inspection, Zero Trust Architecture, AAA (TACACS+, RADIUS), 802.1X Authentication, Azure AD / Entra ID, Role-Based Access Control (RBAC), Security Group Policies

Cloud & Virtual Networking: AWS Networking (VPC, IGW, Security Groups, Route Tables, EC2 Interfaces), Microsoft Azure (NSGs, VPN Gateway, ExpressRoute), VMware NSX, Hybrid Cloud Connectivity, SD-WAN (basic), Cloud Network Segmentation, Network Peering Monitoring, Troubleshooting & Performance Tools: SolarWinds, PRTG, Wireshark, TCPDump, NetDisco, SNMP Monitoring, Splunk

(Network Logs), Cisco DNA Center, HP Network Automation (HPNA), TSN Workstation, Latency & Packet Loss Diagnosis, Network Baseline

& Utilization Reporting

Automation & Scripting: Python (basic scripting for config automation & parsing), Bash, PowerShell, REST APIs for network/cloud automation, Automation of DNS/IPAM/Firewall tasks, CLI & SSH-based Device Scripting Compliance & Standards: NIST 800-171, ISO/IEC 27001 & 27002, Network Security Audits, Policy Enforcement, Patch Management Support, Configuration Hardening, Change Control Documentation Professional Experience

Network Design Engineer, Goldman Sachs Group Limited 08/2024 – Present Austin, TX Designed and deployed enterprise network infrastructure supporting trading systems, achieving conciderable uptime through redundant architectures using Cisco Nexus switches, Palo Alto firewalls, and advanced routing protocols (BGP/OSPF with 50ms failover). Reduced network provisioning time by 40% by automating configurations via Python and Ansible, managing numerous devices across global data centers while maintaining 100% compliance with NIST 800-171 security standards. Optimized cloud connectivity by reducing Azure ExpressRoute latency by 30% through route optimization and AWS VPC peering, while cutting costs by 25% via right-sized NSG and security group policies. Enhanced network security by deploying zero-trust policies with Cisco ISE and 802.1X, reducing unauthorized access incidents by 90% and achieving 100% audit compliance for FINRA/SEC requirements. Resolved critical network outages within 15-minute SLAs using SolarWinds and Wireshark, improving mean time to resolution (MTTR) by 35% for high-frequency trading environments.

Led a cross-functional team to modernize legacy infrastructure, migrating Catalyst switches to Cisco DNA Center-managed devices, resulting in reduction in manual troubleshooting efforts. Implemented high-performance trading network infrastructure using QoS prioritization and VXLAN overlays, reducing trading system jitter by 45% while maintaining sub-100µs latency for 500+ algorithmic trading servers. Streamlined global IP address management by automating IP allocation and DNS records using Infoblox and REST APIs, reducing I P conflicts and cutting provisioning time to 30 minutes across multiple offices. Associate Network Engineer, Sigma Infosolutions Ltd. 07/2019 – 08/2022 Indore, India (hybrid) Deployed and managed enterprise networks using Cisco routers (2600-7600 series) and Catalyst switches (2960-6500), configuring VLANs, STP/RSTP, and HSRP/VRRP to improve network redundancy, reducing downtime by 30% across client infrastructures. Implemented secure network architectures utilizing Cisco ASA/Palo Alto firewalls with IPsec VPN tunnels and 802.1X authentication, achieving 100% compliance with client security policies and NIST 800-171 standards for multiple managed endpoints. Automated routine network tasks using Python and Bash scripts, reducing configuration time by 25% for DHCP/DNS (Infoblox) and firewall policy updates across multiple client environments. Troubleshot complex network issues using Wireshark and SolarWinds, improving mean resolution time by 40% for latency/packet loss cases in MPLS/WAN environments serving almost 200 users. Assisted in hybrid cloud deployments by configuring AWS VPC peering and Azure NSGs, successfully migrating workloads to cloud with zero service disruption during business hours.

Documented all network topologies in Visio and maintained change records in ServiceNow, improving audit readiness by 100% while supporting concurrent client projects with structured cabling and rack layouts. Optimized WAN performance by deploying QoS policies and traffic shaping for MPLS networks, improving VoIP call quality by 35% and reducing packet loss to less then 0.5% across Various client sites using Metro Ethernet and DOCSIS backhaul links. Enhanced wireless connectivity by configuring Aruba Wireless Controllers with 802.1q trunking and role-based VLAN assignments, increasing Wi-Fi coverage efficiency by 40% for high-density office environments supporting concurrent users. Projects

Automated Campus Network Using SDN

Designed and implemented an SDN-based campus network using Mininet and Python, automating traffic flow and VLAN configurations to improve network efficiency while gaining practical experience in software-defined networking principles, OpenFlow protocols, and network traffic analysis using Wireshark.

Enterprise Trading Network Modernization

Led the design and implementation of a secure, high-performance network infrastructure for financial trading systems, integrating software-defined networking principles with automated configuration management and zero-trust security controls to enhance reliability and reduce operational overhead across global data centers. Education

Gannon University, Masters in Information Technology 05/2024 Erie, PA, USA Bachelors in Computer Science and Engineering 05/2021 Guntur, AP, India Certificates

Cisco Certified Network Associate (CCNA)

CompTIA Network+

Contact this candidate