Network Engineer Sd-Wan

RAM SAI K NETWORK ENGINEER

Email: ***********@*****.*** Mobile: +1-720-***-****

Professional Summary:

Highly skilled Network Engineer with 5 years of hands-on experience in designing, implementing, and maintaining secure and high-performance network infrastructures across healthcare, insurance, and IT sectors.

Proficient with Cisco Viptela, Palo Alto, Juniper EX, Cisco ASA, and Fortinet FortiGate firewalls.

Expertise in SD-WAN deployment, network automation using Python and Ansible.

Skilled in ensuring compliance with HIPAA, PCI-DSS, and other regulatory standards.

Strong troubleshooting capabilities in complex Layer 2/Layer 3 network environments.

Optimized VPN connectivity and network performance for hybrid and cloud-based infrastructures.

Hands-on experience with AWS VPC and Azure Virtual Networks integration.

Conducted effective root cause analysis (RCA) to resolve critical network issues.

Experience of routing protocols like EIGRP, OSPF, RIP, and BGP, MPLS/VPN

Collaborated closely with cybersecurity and IT teams to enhance network security posture.

Continuously improved operational workflows and implemented proactive network monitoring.

Working knowledge of Firewall, LDAP, AAA, TACACS/RADIUS, and IPSEC

Implementation, working analysis, troubleshooting and documentation of LAN, WAN WLAN architecture with excellent work experience on IP series

Proficient with TCP/IP and relative OSI models

Strong fundamental knowledge in implementing Layer-2 level technologies including VLAN's, VTP, STP, RSTP and Trunking.

Expertise in CCNA, CCNA Security, CCNA Voice, CCNA Wireless, CCNA Service Provider and Working knowledge of CCNP, CCNP Security.

Key Skills & Tools:

Network Security: Cisco ASA, Palo Alto, Fortinet, Check Point Firewalls, IDS/IPS

Network Monitoring & Management: Solar Winds, PRTG, Nagios, Wireshark, Net Flow, Zabbix

Cloud & Virtualization: AWS VPC, Azure Virtual Network, VMware NSX, Cisco ACI

Routing & Switching: Cisco Catalyst/Nexus, Juniper EX/QFX Series, Aruba Switches

SDN/SD-WAN: Cisco SD-WAN (Viptela), VMware SD-WAN (Velocloud), Meraki SD-WAN

Automation & Scripting: Python, Ansible, Bash, REST APIs

Load Balancers & Proxies: F5 BIG-IP, Citrix ADC, HAProxy, Squid Proxy

Network Authentication: RADIUS, TACACS+, 802.1X

Compliance & Security Standards: HIPAA, PCI-DSS, ISO 27001

Professional Experience:

West Point Insurance Underwriters

Network Engineer / Mar 2025 – present

Designed and implemented highly secure and redundant network infrastructure for hospitals and healthcare centres, ensuring HIPAA compliance.

Built and maintained CI/CD pipelines for network automation scripts using Git, Bitbucket, and Ansible Tower.

Participated in network infrastructure projects alongside operational tasks, aligning with infrastructure-as-code practices using Python and Ansible.

Deployed and managed SD-WAN solutions using Cisco Viptela, enhancing telemedicine services and reducing WAN costs by 30%.

Configured and monitored IPsec VPN tunnels using Cisco and Juniper solutions to ensure secure multi-site connectivity.

Deployed and managed Juniper Mist and Meraki dashboard-based infrastructures, enhancing visibility and reducing MTTR.

Created detailed network diagrams and documented operational procedures including Go/No-Go criteria.

Configured and maintained Palo Alto firewalls and Cisco ASA for advanced threat protection and secure data exchange between EHR/EMR systems.

Automated routine network management tasks using Python and Ansible, increasing operational efficiency by 25%.

Collaborated with software-defined networking (SDN) initiatives for next-gen infrastructure provisioning

Documented procedures and knowledge base articles for network change management and troubleshooting playbooks.

Integrated AWS VPC and Azure Virtual Networks with on-premises infrastructure, supporting scalable and secure cloud networking architectures.

Designed, implemented, and maintained scalable network infrastructure tools to support corporate data centers and remote sites.

Managed enterprise LAN and WLAN infrastructures using Cisco Meraki and Juniper Mist platforms, including end-to-end deployment, configuration, and troubleshooting via cloud-based dashboards.

Monitored and analysed network performance using Solar Winds and Net Flow to ensure optimal connectivity for critical healthcare applications.

Monitored and diagnosed network performance issues using SolarWinds, PRTG, NetFlow, Wireshark, and executed corrective actions for sustained service uptime (99.9%+).

Integrated AWS VPC and Azure Virtual Network with on-premises environments for seamless hybrid cloud connectivity.

Proactively monitored network devices and services using Prometheus, Grafana, and existing monitoring stacks to meet high availability SLAs.

Strong command of IP addressing, subnetting, VLANs, DHCP, DNS, and NAT, used to design and segment scalable enterprise network topologies.

Collaborated with security and operations teams to implement firewall, IDS/IPS, VLAN, and ACL rules, maintaining compliance with HIPAA, PCI-DSS, and ISO 27001.

Developed robust Python and shell scripts for syncing and maintaining business rules across disparate network and infrastructure databases.

Configured VLANs and ACLs to protect patient data and maintain network segmentation.

Deployed and optimized F5 BIG-IP load balancers to manage high-volume traffic for healthcare portals.

Ensured high availability and network redundancy using HSRP and VRRP, guaranteeing 99.9% uptime for critical healthcare services.

Configured and troubleshot network routing protocols (OSPF, BGP) and VPN technologies to ensure secure and resilient connectivity for hybrid cloud and on-prem environments.

Provided Level 3 support and conducted root cause analysis (RCA) for major incidents impacting healthcare operations.

Progressive

Network engineer / Sep 2023 – Mar 2025

Configured and managed Cisco Catalyst switches and Juniper EX Series routers to support secure and scalable insurance network infrastructure.

Performed L3 routing protocol design and implementation using BGP, OSPF, IS-IS; optimized convergence for core backbone environments.

Deployed and maintained Fortinet FortiGate firewalls to safeguard sensitive financial and customer data, ensuring PCI-DSS compliance.

Implemented SD-WAN using Meraki to enhance bandwidth utilization and optimize branch office connectivity.

Monitored and analysed network traffic using PRTG and Wireshark to proactively identify and mitigate performance issues.

Designed, deployed, and maintained enterprise LAN, WAN, WLAN, and VoIP networks across multiple geographic regions, ensuring high availability and performance.

Led installation and configuration of Cisco Viptela SD-WAN, Palo Alto Firewalls, and Juniper switches, aligning with corporate standards and compliance frameworks (HIPAA, PCI-DSS).

Configured and maintained VPN tunnels for secure communication between branch offices and data centers.

Automated configuration management and network backups using Ansible and Python scripts.

Applied QoS policies to prioritize critical insurance application traffic and improve overall network performance.

Supported public and hybrid cloud connectivity projects using AWS and Azure, bridging cloud and on-premises data center infrastructure.

Worked in production environments to troubleshoot complex LAN/WAN issues using proven escalation and resolution methods.

Demonstrated operational understanding of protocols like EVPN, VXLAN, BGP, and OSPF to maintain scalable Layer 2/Layer 3 network designs.

Monitored and optimized network resources using tools like SolarWinds, NetFlow, and Wireshark, proactively identifying and resolving performance bottlenecks.

Supported infrastructure rollouts and technology refreshes by coordinating across cross-functional teams, leading PoP expansion planning (space, power, routing).

Collaborated with cybersecurity teams to implement IDS/IPS solutions to prevent malicious activities.

Conducted network audits and ensured compliance with industry security standards.

HDFC Life Insurance

Jr. Network Engineer / Jan 2018 – Dec 2021

Deployed and configured Juniper EX switches and Cisco ASA firewalls to establish a robust and secure network environment.

Deployed and configured access layer switches, VLANs, and ACLs to enforce security and segmentation.

Conducted equipment testing, recorded installation data, and documented configuration standards.

Provided operational support during major rollouts and network transitions; created written summary reports for RCA.

Supported multi-vendor environments (Cisco, Juniper, Dell) by upgrading firmware and configuring devices as per industry standards.

Implemented network access control policies using 802.1X and TACACS+, ensuring authorized access and reducing potential security breaches.

Managed and fine-tuned VPN connections between branch offices and data centers, ensuring secure and seamless remote access.

Actively engaged in 24/7 on-call rotation to maintain production network stability and incident response.

Drove continuous improvement by identifying gaps in network monitoring, tooling, and automation processes and proposing scalable solutions.

Troubleshot Layer 2/Layer 3 connectivity problems, minimizing downtime and maintaining uninterrupted network performance.

Integrated Azure Virtual Network with on-premises infrastructure to enable secure and scalable hybrid cloud connectivity.

Configured VLANs and port security to prevent unauthorized access and ensure data confidentiality.

Participated in network capacity planning and performance assessments, ensuring system scalability and stability.

Conducted periodic disaster recovery tests to verify failover capabilities and maintain business continuity.

Provided comprehensive end-user support and resolved network-related service requests, enhancing overall user experience.

Ensured consistent network performance by monitoring, diagnosing, and resolving potential issues proactively.

Education:

Masters in Information Technology – University of Colorado

Contact this candidate