Network Engineer Sd-Wan

SAI CHANDU ATTHINTI

Phone: +1-603-***-**** Email: *********************@*****.*** LinkedIn: atthinti-sai-chandu Professional Summary

Network Engineer with 4+ years of experience building secure LAN/WAN/SD-WAN infrastructures in enterprise networks.

Expert in BGP, OSPF, and MPLS, delivering scalable and fault-tolerant network topologies for large deployments.

Configured Cisco ASA, Palo Alto, and Fortinet firewalls for secure remote access and segmentation policies.

Automated provisioning, ACLs, and NAT rule changes using Python, Terraform, and Ansible scripting frameworks.

Designed hybrid cloud integrations using AWS Direct Connect, Azure VNet Peering, and VPN Gateway solutions.

Implemented Cisco ISE, ClearPass, and 802.1X NAC enforcing Zero Trust network segmentation across users.

Tuned enterprise-wide QoS policies to support voice, video, and real-time apps across MPLS and SD-WAN.

Monitored WAN and VPN traffic using SolarWinds, PRTG, NetFlow, and Wireshark for performance tuning.

Maintained documentation aligned with PCI-DSS, ISO 27001, DR/BCP plans, and security audit requirements.

Managed F5 BIG-IP LTM/GTM configurations for load balancing and multi-region traffic failover scenarios. Technical Skills

Routing & Switching: BGP, OSPF, EIGRP, MPLS, VLAN, VRF, STP, HSRP, EtherChannel

Firewalls & VPNs: Cisco ASA, Palo Alto, Fortinet, IPSec VPN, SSL VPN, DMVPN, ACL, NAT

Cloud Networking: AWS Direct Connect, Azure VNet Peering, VPN Gateway, ExpressRoute, SD-WAN, Zscaler ZIA/ZPA

Network Access & Security: Cisco ISE, ClearPass, 802.1X NAC, Zero Trust, AAA, RADIUS, TACACS+

Load Balancing & Optimization: F5 BIG-IP LTM/GTM, QoS, WRED, CBWFQ, Latency/Jitter Tuning

Monitoring & Logging: SolarWinds, PRTG, NetFlow, Wireshark, Cisco DNA Center, SNMP, Syslog

Automation & DevOps Tools: Ansible, Terraform, Python, Bash, Jira, Confluence, Git, Visio

Compliance & Documentation: PCI-DSS, ISO 27001, ITIL, LLD/HLD, DR/BCP, Firewall Baselines Professional Experience

Verizon Wireless Systems Sep 2024 – Present

Network Engineer

Designed hybrid cloud connectivity using AWS Direct Connect and Azure Peering across enterprise regions.

Automated router/firewall configurations using Ansible, Terraform, and Python for repeatable deployments.

Tuned MPLS, OSPF, and BGP to ensure high availability, reduced latency, and optimal route selection.

Deployed Cisco ASA, Palo Alto, and Fortinet firewalls for VPN tunnels and internal zone segmentation.

Integrated Zscaler ZIA/ZPA with Cisco SD-WAN to optimize SaaS traffic with enhanced inspection and logging.

Enforced 802.1X NAC policies using Cisco ISE to restrict unauthorized access across wired and wireless networks.

Created monitoring dashboards using Cisco DNA Center, SolarWinds, and PRTG for WAN link visibility.

Configured F5 BIG-IP GTM/LTM for DNS-based failover and traffic balancing across cloud and on-prem servers.

Tuned QoS rules to prioritize SIP, VoIP, and video traffic across high-speed MPLS backbones.

Documented firewall configurations and recovery procedures to meet internal DR and external audit requirements.

Reviewed BGP attributes and route maps to troubleshoot WAN routing inconsistencies across edge routers.

Validated failover paths for hybrid cloud routes during DR testing using Cisco DNA Center dashboards.

Integrated syslog and NetFlow with SIEM for compliance traceability and traffic analysis. Sundaram Finance May 2020 – Dec 2022

Network Engineer

Deployed PCI-DSS compliant MPLS WAN using BGP, QoS, and Fortinet firewalls with audit controls.

Automated policy updates across firewalls using Python, Terraform, and Ansible playbook orchestration.

Integrated ClearPass, Zscaler, and Cisco ISE to support Zero Trust network access controls at all sites.

Segmented VLANs for production, guest, and IoT traffic using dynamic assignment and 802.1X NAC enforcement.

Tuned QoS policies for VoIP, financial trading apps, and low-latency traffic using class-based queueing.

Enabled monitoring via PRTG, SolarWinds, and NetFlow, improving fault detection and incident visibility.

Configured IPsec/SSL VPNs and DMVPN tunnels for secure backup and site-to-site branch communication.

Authored recovery plans, HLD/LLD documents, and configuration baselines for internal and audit teams.

Conducted quarterly firewall audits to remove redundant rules and minimize unnecessary exposure.

Supported VPN issue resolution, routing escalations, and policy change approvals across WAN links.

Centralized NetFlow and syslog collectors for visibility and root cause identification of outage events. Coforge May 2019 – Apr 2020

Network Engineer

Built MPLS core routing using BGP and OSPF, optimized for low latency and fast path convergence.

Enforced traffic segmentation using Juniper SRX and Fortinet firewalls, including egress and east-west filters.

Used Ansible to automate routing updates and device provisioning with rollback and logging capabilities.

Configured Aruba APs, implemented 802.1X/WPA3 wireless policies for enterprise and guest network separation.

Integrated Zscaler cloud proxy with SD-WAN to offload branch internet traffic securely and efficiently.

Analyzed packet captures using Wireshark to troubleshoot latency, jitter, and application dropouts.

Built custom alert dashboards with SolarWinds, PRTG, and CLI-based tools to monitor branch performance.

Participated in DR planning, tested routing failover scenarios, and validated data path integrity post-failback.

Produced audit-ready documents covering firewalls, routing, and network segmentation policies.

Maintained static routing and PBR policies for dual WAN routing between MPLS and broadband providers.

Documented SD-WAN overlay/underlay architecture for onboarding and disaster recovery team training.

Analyzed multicast drops using Wireshark, resolved branch issues by tuning IGMP snooping and filters. Education

Master of Computer and Information Science

Rivier University, Nashua, NH (Jan 2023 – Dec 2024) Bachelor of Engineering, Electronics & Communication Muthayammal Engineering College, Rasipuram, India (Aug 2016 – Apr 2020) Certifications

Cisco Certified Network Associate (CCNA)

Zscaler ZIA & ZPA Certified

Contact this candidate