Senior Network Engineer

Akhila Kunta

Senior Network Engineer

Email: **************@*****.***

Ph No: +1-512-***-****

Location, Austin, TX

PROFESSIONAL SUMMARY:

CCNA Certified Network Engineer with 9 years of Experience in Cisco/Juniper Networking, and Security which includes designing, Deployment, and providing network support, installation, and analysis.

Proficiently designed, implemented, and managed network security solutions utilizing Palo Alto Networks, Checkpoint, and Fortinet technologies, deploying advanced features like SSL inspection, intrusion detection, and micro-segmentation strategies for robust threat prevention.

Demonstrated mastery in architecting and deploying secure multi-tier applications on AWS and Azure, leveraging services like VPC, EC2, Route 53, and CloudFormation for highly scalable, available, and cost-efficient cloud solutions.

Successful deployments and optimizations of Viptela SDWAN solutions across global branches, integrating intelligent traffic steering, dynamic path selection, and application-aware routing for enhanced performance and reliability.

Engineered high-availability architectures using F5 load balancers, implementing GSLB and disaster recovery solutions, ensuring seamless failover and traffic distribution across multiple data centers for uninterrupted services.

Regarding Cloud Vision, I have worked with Arista's CVP, leveraging its capabilities for network-wide workflow automation, real-time telemetry, and state streaming for network operations and visibility.

Proficiently deployed and managed wireless LANs across diverse environments using Cisco, Aruba, and Meraki access points, conducting site surveys and configuring robust security protocols for secure wireless access.

Demonstrated expertise in network automation using Ansible playbooks and Python scripts, streamlining configurations, updates, and deployments across diverse network devices and services, reducing operational overhead significantly.

Strong background in secure remote access technologies including VPN, firewall security, and identity-based access control.

Experienced in troubleshooting connectivity issues, supporting enterprise users, managing security policies, and working closely with security and infrastructure teams in high-availability environments. Skilled in incident management, change control, and operational support with a strong focus on reliability, responsiveness, and customer service.

Experience performing phased migrations of traditional data centers to ACI model.

Successfully integrated multiple technologies, including Zscaler, Cisco Meraki, and Viptela SD-WAN solutions, leveraging APIs for cross-platform functionality, enhanced network orchestration, and automation.

Expertly addressed complex network issues across Layer 2 and Layer 3 environments, utilizing various tools like Wireshark, Splunk, and network analysis tools, ensuring rapid identification and resolution of issues.

Managed and configured diverse infrastructure elements including Cisco Nexus switches, Arista networking solutions, and structured cabling systems compliant with CAT6 and fiber optics, ensuring high reliability and performance.

Spearheaded migration processes from legacy firewall infrastructures like Checkpoint to modern Palo Alto Networks, implementing advanced security features like Zero Trust Network Access (ZTNA) and granular access policies, strengthening overall security posture.

EDUCATION:

Bachelor in Computer Science, Osmania University, INDIA.

Masters in Information Studies (MSIS), Trine University, Allen Park, MI

CERTIFICATIONS:

Cisco Certified Network Associate (CCNA).

TECHNICAL SKILLS:

Routers

ISR 4000 Series, 1000 Series, 900 Series, 800 Series, Catalyst 8300,8200 Series Edge Platforms, ASR 1000 Series, Asr 1013 Router, ASR 901 Series, ASR 9000 Series, 1013 Router. Juniper MX304, MX10004 and MX10008, SDN-enabled MX10003, SDN-enabled MX2020.

Routing Fundamentals and Protocols

Routed and Routing protocols RIP, EIGRP, IS-IS, OSPF, BGP, IPX; MPLS, IPv4, and IPv6 addressing, subnetting, VLSM, Static routing, ICMP, ARP, HSRP, VRRP, Route Filtering, Multicast, 802.11, Policy-Based Routing, Redistribution, Port forwarding.

Switch Platforms

Arista 7280QR-C36, Cisco Catalyst series 2960, series 3560, 3850, 4500, 6500, 7000; CISCO Nexus series 2K, 5K, 7K and 9K

Switching Fundamentals and Protocols

Ethernet technologies, LAN networks, Stacking, Aruba VSF, VLAN and VTP, STP, PVST+, Multicast, RSTP, Multi-Layer Switching, 802.1Q, EtherChannel, PAgP, LACP, CDP, HDLC, RARP.

Firewall Platforms

Checkpoint (NGX R65, 3100, 5100, 5900), Cisco Firewalls (ASA 5505, 5506-X, 5585), Palo Alto Networks (PA series 2K, 3K and 5K) with panorama 8.0, WAF, FortiGate, Forti Manger.

Security Protocols

Standard and Extended ACLs, IPsec, VPN, Port-security, SSH, SSL, IKE, AAA, Prefix-lists, Zone-Based Firewalls, NAT/PAT, HIPAA standards, Ingress & Egress Firewall Design, Content Filtering, Load Balancing, IDS/IPS, URL Filtering, L2F, IDS, TCP Intercept, Router Security, SNMP trap.

Network Management and Monitoring

Wireshark, Infoblox, HP Niew, Cisco Prime, Splunk, Security Device Manager (SDM), Cisco Works, TCP Dump and Sniffer, SolarWinds Net Flow Traffic Analyzer, NetScout, Network Performance Monitor (NPM), Network Configuration Manager (NCM), SAM, IP Address Manager, Clear Pass 6.0,6.2,6.5, Additional Polling Engine.

Load Balancers

F5 (BIG-IP) LTM 2000, 3900Viprion, Cisco ACE, Citrix NetScaler

Networking Protocols and Fundamentals

DHCP and DNS server, Active Directory Management, NTP, NDP, TCP, UDP, FCP, Network Implementation, Troubleshooting techniques, NHRP, NetBIOS, NFS, FTP, TFTP, HTTP, PAP, PPTP, SIP Trunking, SNMP logging, SMTP, RADIUS and TACAS+, PBX servers, SDN, SAN.

Operating Systems

Windows 10/7/XP, MAC OS, Windows Server, Nexus OS, Cisco IOS XR, Linux, UNIX, Cumulus.

Wireless Technologies

Deploying Wireless Infra on Canopy Wireless Devices, D-Link Point-to-point Wireless, D-Link APs, CISCO 1200 series APs, Aruba wireless and APs, Cisco Meraki, Linksys Wireless/Wi-Fi Routers, Prime Infrastructure, Ekahau, Air Magnet, AirWatch and WLC’s (8510, 5508, 5706), Cisco Aironet AP’s (2600, 3600, 3700), MSE, Aruba 225, Aruba 3000 controller & Airwave,

Scripting

Shell Scripting, Python, Node-Red and Ansible

PROFESSIONAL EXPERIENCE:

Client: Morgan Stanley, Alpharetta, GA FEB 2025 - Present

Role: Senior Network Engineer

Responsibilities:

Installed and configured Arista 7280QR-C36, Aruba 6100 switches, Juniper MX204 and QFX10002 routers, as well as Meraki, Cisco Nexus 9K Series and Catalyst 3K switches in high-availability environments.

Migrated firewall infrastructure from OPN sense to Fortinet FortiGate 100F, ensuring enhanced network security and performance.

Configured DHCP scopes and options on Cisco Nexus and Arista to support multiple VLANs and subnets, ensuring efficient and flexible IP address allocation

Deployed and maintained Windows Servers and Windows 10/11 desktops, providing troubleshooting, patch management, and performance tuning for enterprise IT operations.

Deployed, maintained, and troubleshot Windows Servers handling Active Directory, Group Policy, DNS, DHCP, and file servers for enterprise environments and Data center.

Designed, implemented, and managed Blue Cat Address Manager (BAM) and Blue Cat DNS/DHCP Server (BDDS) for enterprise-grade IP address management (IPAM), DNS, and DHCP solutions.

Process and resolve ServiceNow tickets related to secure remote access and user connectivity.

Assist with the rollout and adoption of new Zscaler capabilities and platform enhancements.

Collaborate with security, infrastructure, and application teams to ensure secure access requirements are met.

Configured and optimized Blue Cat DNS and DHCP services to ensure high availability and fault tolerance across multiple data centers.

Integrated Blue Cat with AWS and Azure environments for dynamic cloud-based IP management and automated DNS provisioning.

Developed automation scripts using Python and Blue Cat APIs to streamline IP allocation, DNS record updates, and DHCP lease management.

Designed and implemented network fabric using DNAC, simplifying policy enforcement, segmentation, and secure access control.

Configured and deployed Fortinet FortiGate 100F firewalls, implementing advanced security policies and protocols.

Monitor the performance and health of the network infrastructure, including SD-WAN devices, routers, switches, firewalls, and other network components.

Provided remote and on-site consulting for wireless network design and optimization, collaborating with IT teams and stakeholders to implement best practices for Wi-Fi performance and reliability.

Configured and managed BGP, OSPF, and other routing protocols on Cumulus devices to ensure efficient and reliable network routing.

Application Centric Infrastructure (ACI), Application Policy Infrastructure Controller (APIC) - Cisco's Software Defined Network (SDN).

Used Cisco ACI (Application Centric Infrastructure) SDN architecture to reduce operating costs, automate IT tasks, for greater scalability.

Automated Azure environment using Terraform, Ansible, Chef, and Puppet, streamlining deployment and management processes. Working Azure Automation including Runbooks and Terraform scripts.

Configured and troubleshooted routing and switching protocols, including OSPF, BGP, EIGRP, VLANs, STP, and LACP, to ensure seamless network operations.

Implemented network automation and orchestration workflows using Cisco ACI APIs and Python scripting, streamlining provisioning and configuration tasks.

Administered IT service management (ITSM) processes for incident, problem, and change management.

Deployed zero-touch provisioning (ZTP) for branch offices, reducing deployment time and operational costs.

Diagnosed and resolved hardware and network issues for routers, switches, and servers, minimizing downtime.

Created detailed documentation for switch/router configurations, firewall rules, and server setups.

Developed network topology diagrams and deployment plans Client.

Created detailed network documentation using Microsoft Visio, including topology diagrams, network flowcharts, and infrastructure layouts for enterprise environments.

Developed technical reports and process documentation in Microsoft Word, ensuring clear and structured communication of network configurations, troubleshooting steps, and best practices.

Utilized Microsoft Excel for data analysis, including IP address management, capacity planning, and network performance metrics tracking.

Client: Cummins - Columbus, IN JAN 2024 – FEB 2025

Role: Network Engineer

Responsibilities:

Implemented fabric technologies like VXLAN, VPC (Virtual Port Channel), and MLAG (Multi-chassis Link Aggregation) in Arista and Cisco Nexus switches for scalable and resilient data center architectures.

Migrated Nexus 7Ks, Nexus 5Ks to an ACI Fabric consisting of 9336PQ Spines & Leaf’s in a brownfield Datacenter.

Design, deployment, and management of Palo Alto Networks firewalls across global networks, establishing secure perimeters and enforcing granular application-based security policies.

Implemented BGP route optimization strategies to enhance network performance, reduce latency, and ensure efficient use of available bandwidth across the global network.

Maintain a high level of responsiveness and ownership for incoming requests to ensure consistent service delivery.

Document procedures, recurring issues, and operational best practices to improve support efficiency.

Configured BGP peering with multiple ISPs to ensure redundancy and high availability, providing continuous network connectivity even during ISP outages.

Deployed FortiGate firewalls across multiple sites, establishing secure perimeters and ensuring comprehensive threat protection through advanced security features.

Configured and managed site-to-site and remote access VPNs on FortiGate devices, enabling secure communication and data transfer between remote offices and users.

Configured high-availability configurations, VPNs, threat prevention, and intrusion detection/prevention systems (IDS/IPS) within Palo Alto firewalls for comprehensive network protection.

Implemented effective log forwarding from firewalls to Panorama for log management.

Work with Cloud Vision includes setting up Cloud Vision Portal (CVP) for centralized management, enabling network-wide visibility, and automating config push to multiple Arista devices.

Deploying and maintaining Arista's Network Packet Broker (NPB) solutions & deploying Arista's 720XP Series switches as packet brokers in various environments.

Implemented EIGRP route summarization to reduce the size of routing updates and improve network scalability, particularly in large-scale environments with multiple branch offices.

Work with software defined network solutions such as OpenFlow, OpenStack, Cisco SD-WAN (Viptela), Cisco ACI, DDI Implementation (e.g. Infoblox), Cisco Meraki, VMware NSX, etc.

Worked on deployment and configuration of Viptela SD-WAN solutions, leveraging intelligent traffic steering and dynamic path selection to optimize network performance across distributed branches.

Designed and implemented SD-WAN policies, including QoS, application-aware routing, and secure connectivity over various transport mediums, ensuring enhanced application performance and reliability.

Utilized Viptela centralized management and platform for simplified provisioning, monitoring, and troubleshooting of SDWAN infrastructure.

Integrated Cisco Meraki with third-party solutions using APIs, enabling cross-platform functionality and data exchange for enhanced network orchestration and automation.

Utilized SolarWinds Network Configuration Manager (NCM) to automate configuration management, compliance auditing, and backup for multi-vendor network devices, improving operational efficiency and security.

Configured SolarWinds Server & Application Monitor (SAM) to monitor the health and performance of network services and applications, providing detailed insights and proactive alerts

Engineered and managed F5 load balancers, architecting solutions for load distribution, traffic optimization, and high availability across complex application environments.

Collaborated with the Load Balancing team to establish connectivity to production and disaster recovery servers through F5 Big IP LTM load balancers.

Worked with F5 BIG-IP LTM 8900 and Citrix NetScaler, configuring profiles and ensuring high availability.

Conducted performance tuning, load testing, and regular maintenance of F5 load balancers to optimize application delivery and mitigate potential performance bottlenecks.

Engineered scalable and fault-tolerant AWS architectures, leveraging services like vPC, EC2, S3, RDS, IAM, Route 53, and CloudFormation to design and deploy robust cloud solutions.

Performed Linux server troubleshooting on AWS using tools like Zabbix, Nagios, and Splunk.

Supported Splunk on Unix, Linux, and Windows platforms and adapted to AWS cloud strategies.

Implementation of SDN technologies, including OpenFlow, Open Daylight, or ONOS to centralize network control and programmatically manage network behavior through software applications.

Implemented advanced networking features on Cumulus devices, including VXLAN, EVPN, and Layer 2/3 protocols to optimize network performance.

Deployed Cisco ACI in data centers, enabling policy-driven automation, simplified network provisioning, and improved application performance through centralized management.

Designed and implemented micro-segmentation strategies within Cisco ACI to enhance security by enforcing granular security policies and isolating sensitive workloads.

Deployment and management of Cisco DNA Center (DNAC), providing end-to-end network visibility, automation, and assurance across the enterprise network.

Utilized Google Cloud Load Balancing to distribute traffic across multiple instances, ensuring high availability and reliability for web applications and services. Configured global load balancing for multi-region deployments and optimized performance.

Working closely with senior security engineers, you will contribute to ongoing platform enhancements while ensuring users receive prompt and reliable support.

In corporate use of containers in ACI fabric using Contrive to ensure polices are applied at container level.

Proficient in Palo Alto Next-Generation Firewalls, HP ArcSight, Splunk Enterprise, Wireshark, FireEye and various network analysis tools.

Client: Qualcomm, INDIA NOV 2021 – AUG 2023

Role: Senior Network Engineer

Responsibilities:

Involved in the Configuration of Access lists (ACL) on checkpoint firewalls for the proper network routing for the B2B network connectivity.

Configured extended ACLs on Cisco Catalyst 9500 Series switches to control traffic based on IP address, protocol, and port number, enhancing network security by enforcing granular access policies.

Utilized ACLs on Arista 7000 Series switches to segment network traffic and enforce security policies, protecting critical assets and sensitive data from unauthorized access.

Configure and manage LDAP User management with Checkpoint Smart Directory. Implemented the policy rules and DMZ for multiple clients of the state on the Checkpoint firewall.

Spearheaded the migration process from Checkpoint firewall infrastructure to Palo Alto Networks, ensuring a seamless transition while mitigating potential risks and service disruptions.

Implemented advanced security features and policies on Palo Alto firewalls, such as App-ID, User-ID, and decryption capabilities, to bolster threat prevention and application visibility.

Managed ASA firewall firmware upgrades and patch deployments, ensuring the timely installation of security updates and software patches to mitigate vulnerabilities and enhance firewall reliability.

Designed and managed Leaf-Spine network architectures using Juniper QFX series switches to support high-density data center environments.

Deployed IPsec VPNs on Juniper SRX Series firewalls integrating with Junos Space Security Director for centralized policy management and monitoring.

Configured IPsec VPN failover on Cisco ASR 1000 Series routers to ensure high availability and seamless connectivity in case of link failures.

Configured DHCP scopes and options on Cisco Catalyst 9500 Series switches to support multiple VLANs and subnets, ensuring efficient and flexible IP address allocation.

Applied BGP traffic engineering techniques, such as manipulating BGP attributes (e.g., MED, AS-PATH), to influence inbound and outbound traffic paths for optimal network performance.

Integrated BGP with MPLS to provide scalable and efficient Layer 3 VPN services, ensuring secure and isolated communication for different customer and internal segments.

Implementation and management of F5 Global Traffic Manager (GTM) and Local Traffic Manager (LTM) solutions, architecting highly available and scalable network infrastructures.

Engineered disaster recovery solutions using F5's GTM functionalities, enabling seamless failover and load distribution across multiple data centers.

Designed, developed, and tested scalable cloud-based solution architectures and infrastructure AWS and Azure Such as Route 53, ELB, Security group, VPC, VPN, NACL, NSG and VNET.

Integrated Palo Alto next-gen firewalls with overlay VMware NSX SDN.

Configured VMware NSX for micro-segmentation and network security within the virtual environment.

Integrated Puppet with version control systems like Git to manage and track configuration changes, enabling collaboration and versioning for network configurations.

Implemented EIGRP authentication using key chains and cryptographic algorithms to prevent unauthorized access and ensure data integrity within EIGRP routing domains.

Monitored EIGRP network performance using SNMP (Simple Network Management Protocol) tools and conducted performance tuning to optimize EIGRP convergence times, minimize network latency, and improve overall application responsiveness.

Enhanced network security and connectivity by integrating Palo Alto Next-Gen firewalls with overlay VMware NSX SDN technology, allowing firewall traffic inspection and secure communication between VPCs and on-premises data centers.

Implemented and managed Blue Coat proxy servers to replace existing ISA Proxy servers, layered with Websense content filtering. Configured Bluecoat proxies for content and URL filtering and ensured data loss prevention and zero-day exploit prevention.

Conducted migrations to CISCO ACI from traditional networking, ensuring seamless transitions, L2/L3 connectivity, and traffic flow mapping.

Client: Amazon, INDIA JULY 2019 – OCT 2020

Role: Network Engineer

Responsibilities:

Proficient with F5 LTM and Cisco CSM load balancer in between the servers inside the server farm and DMZ.

Configured and performed software upgrades on Cisco Wireless LAN Controllers 2504, 4404,5508 for Wireless Network Access Control integration.

Integrated OSPF with MPLS (Multiprotocol Label Switching) VPNs to provide secure and scalable connectivity between branch offices, ensuring seamless communication for distributed applications

Utilized ITIL framework to standardize IT service management processes, improving efficiency, consistency, and quality of service delivery across network operations.

Integrated Citrix NetScaler with Citrix Virtual Apps and Desktops to provide secure and high-performance access to virtualized applications and desktops, improving user experience.

Configured WLAN security protocols such as WPA2-Enterprise, 802.1X authentication, and captive portals on Cisco, Aruba, and Meraki controllers for secure wireless access.

Assigned a project to set up LAN. Worked on the entire project from cabling to IP addressing assignment.

Supporting a wide range of products from Cisco Systems, Troubleshooting of Routers and Switches.

Configuration and installation of Cisco Routers and Switches.

Configuring and working with Cisco Routers and Switches using protocols like RIP, EIGRP, and OSPF.

Manage the Routing Protocol and Encapsulation Protocol. Troubleshooting of WAN connectivity problems.

Configured STP for loop prevention and VTP for Inter-VLAN Routing.

Sonata Software, India JAN 2017 – JUNE 2019

Role: Network Engineer

Responsibilities:

Monitored the performance of the network devices. Performed Troubleshooting and observed directing conventions such as OSPF, EIGRP & BGP.

Installation and configuration of the Network of Cisco Router and Switches for EIGRP and VLANs etc.

Worked on the Cisco switches 2950, 3560 and the Cisco routers 2500, 2600, 2800

Initially involved in installations, technical support, troubleshooting and maintenance of network equipment.

Good knowledge in Configuring Access Control List (ACL).

Providing On call support after hours for public safety impacting network gear

Configured IPv4 VPNs using IPSec VPNs.

Worked on WAN and LAN infrastructure. Worked on Cabling in IDF/MDF and in Data centers with Copper and Fiber.

Managed system backup and restoration protocols and escalated issues to higher network teams.

Contact this candidate