Senior Network Security Engineer

Naveen M

Senior Network Security Engineer

******.****@*****.***

+1-470-***-**** www.linkedin.com/in/naveen-muppidi

Professional Summary:

Senior Network Engineer with 12+ years of experience designing, implementing, and supporting secure, scalable, and highly available enterprise network infrastructures across ISP, healthcare, logistics, and managed services environments.

Strong experience implementing and supporting enterprise LAN, WAN, WLAN, SD-WAN, and data center networks with emphasis on high availability, scalability, and network security.

Hands-on expertise configuring and troubleshooting Cisco routing and switching technologies including Catalyst, Nexus, ISR, and ASR platforms running Cisco IOS and NX-OS.

Extensive experience implementing dynamic routing protocols including BGP, OSPF, EIGRP, MPLS, VLANs, VRFs, STP, EtherChannel, HSRP, and ECMP across enterprise environments.

Experience supporting Cisco ACI multi-tenant data center fabrics and Cisco DNA Center (DNAC) for network automation, assurance, software image management, and device lifecycle management.

Strong background administering Palo Alto NGFW, Cisco ASA, Cisco Firepower, and Fortinet FortiGate firewalls including security policies, NAT, ACLs, IPsec VPN, SSL VPN, and GlobalProtect remote access.

Hands-on experience supporting F5 BIG-IP (LTM/GTM) load balancing solutions for application delivery, traffic distribution, SSL offloading, and high availability.

Experience implementing secure wireless solutions using Cisco Catalyst Wireless, Cisco Meraki, Cisco Wireless LAN Controllers, and Aironet Access Points across enterprise campus environments.

Good understanding of cloud networking with AWS VPC, Azure Virtual Network, Direct Connect, ExpressRoute, VPN Gateway, and hybrid cloud connectivity.

Experience supporting enterprise SD-WAN deployments, WAN modernization initiatives, MPLS migrations, branch connectivity, and Internet edge solutions.

Skilled in network monitoring, fault isolation, and performance optimization using SolarWinds, Cisco DNA Center, Splunk, Wireshark, LogRhythm, and SNMP-based monitoring tools.

Experience automating routine network administration tasks using Python, Ansible, REST APIs, JSON, and YAML, improving operational efficiency and configuration consistency.

Strong knowledge of enterprise network security including network segmentation, VLAN isolation, HIPAA compliance, PKI, TACACS+, RADIUS, AAA, and Zero Trust security principles.

Experienced in disaster recovery planning, infrastructure upgrades, technology refresh, hardware lifecycle management, firmware upgrades, and production network migrations.

Adept at troubleshooting complex Layer 2, Layer 3, routing, switching, firewall, VPN, SD-WAN, wireless, and application connectivity issues within SLA-driven production environments.

Experienced working with cross-functional infrastructure, cloud, virtualization, security, application, and vendor support teams to deliver reliable enterprise network solutions.

Proven ability to support mission-critical enterprise environments by following ITIL-based incident, problem, change, and release management processes while maintaining high network availability.

Certifications:

Cisco Certified Network Professional (CCNP).

Cisco Certified Network Associate (CCNA).

Palo Alto Networks Certified Network Security Engineer (PCNSE).

CompTIA Security+.

Education:

Bachelors in Computer Science Engineering from Vignan institute of information technology (VIIT), 2012

Master of Science in Information Systems (MSIS) Georgia State University, Atlanta, GA. 2013

Technical Skills:

Routing & Switching

Cisco Catalyst 3560/3750/4500/6500/9000, Cisco Nexus 2000/3000/5000/7000/9000, Cisco ISR/ASR Routers, Cisco IOS, Cisco NX-OS

Routing Protocols

BGP, OSPF, EIGRP, MPLS, VLANs, VRFs, STP/RSTP, EtherChannel, HSRP, VRRP, ECMP

Network Technologies

LAN, WAN, WLAN, SD-WAN, Data Center Networking, Cisco ACI, Cisco DNA Center (DNAC), Inter-VLAN Routing, QoS

Network Security

Palo Alto NGFW, Panorama, GlobalProtect, Cisco ASA, Cisco Firepower, Fortinet FortiGate, ACLs, NAT, IPsec VPN, SSL VPN, TACACS+, RADIUS, AAA, PKI

Load Balancing

F5 BIG-IP LTM, F5 BIG-IP GTM, SSL Offloading, High Availability

Wireless

Cisco Catalyst Wireless, Cisco Meraki Wireless, Cisco Wireless LAN Controllers (WLC), Cisco Aironet Access Points

Cloud Networking

AWS VPC, Azure Virtual Network, AWS Direct Connect, Azure ExpressRoute, VPN Gateway, Hybrid Cloud Networking

Automation

Python, Ansible, REST APIs, JSON, YAML

Monitoring & Troubleshooting

SolarWinds, Cisco DNA Center, Splunk, LogRhythm, Wireshark, Cisco Works, SNMP

ITSM & Documentation

ServiceNow, Microsoft Visio, Change Management, Incident Management, Problem Management, Disaster Recovery

Virtualization

VMware

Networking Services

TCP/IP, DNS, DHCP

Professional Experience:

Client: GDT - Dallas, TX. April 2024 – Present

Role: Senior Network Engineer

Responsibilities:

Implement and support enterprise network infrastructure projects for customers, deploying Cisco Catalyst, Nexus, and ASR platforms across campus, branch, and data center environments.

Configure and troubleshoot Layer 2 and Layer 3 technologies including VLANs, STP, EtherChannel, HSRP, BGP, OSPF, and static routing to ensure stable network connectivity.

Participate in Cisco ACI fabric deployments by configuring tenants, VRFs, bridge domains, endpoint groups (EPGs), contracts, and policies under senior architecture guidance.

Support Cisco DNA Center (DNAC) for device onboarding, software image management, configuration templates, inventory management, and network assurance.

Perform routing and switching migrations, hardware refreshes, IOS/NX-OS upgrades, and network modernization activities with minimal business disruption.

Configure and maintain Palo Alto, Cisco ASA, and Fortinet firewalls, implementing security policies, NAT, VPN connectivity, and access control based on customer security requirements.

Deploy and troubleshoot IPsec Site-to-Site VPNs and Remote Access VPNs to provide secure connectivity for branch offices and remote users.

Support F5 BIG-IP load balancers by assisting with virtual servers, pools, monitors, SSL certificates, and application traffic distribution.

Configure Cisco wireless infrastructure including Catalyst and Meraki access points, wireless controllers, SSIDs, VLAN mapping, authentication, and roaming optimization.

Assist with cloud network connectivity by supporting AWS VPCs, Azure VNets, VPN Gateways, Direct Connect, and ExpressRoute integrations with on-premises networks.

Utilize Python and Ansible to automate repetitive network configuration, device validation, and operational tasks, improving deployment consistency.

Monitor network health using SolarWinds, Cisco DNA Center, Splunk, and Wireshark, proactively identifying performance issues and resolving network incidents.

Perform root cause analysis for routing, switching, firewall, VPN, wireless, and application connectivity issues, working closely with vendor TAC teams when required.

Implement infrastructure changes through established change management processes, validating network functionality before and after production implementation.

Collaborate with server, virtualization, cloud, and security teams to support customer infrastructure projects and maintain reliable enterprise network operations.

Provide technical guidance to junior engineers during deployments and complex troubleshooting activities while serving as a senior escalation resource for critical network issues.

Environment: Cisco Catalyst 9000 Series, Cisco Nexus 3000/5000/7000/9000, Cisco ASR Routers, Cisco ACI, Cisco DNA Center (DNAC), Cisco IOS, NX-OS, Palo Alto NGFW, Fortinet FortiGate, Cisco ASA, F5 BIG-IP (LTM), BGP, OSPF, MPLS, VLANs, STP, EtherChannel, HSRP, VRRP, IPsec VPN, SSL VPN, Cisco Meraki Wireless, Cisco Catalyst Wireless, TACACS+, RADIUS, SolarWinds, Splunk, Wireshark, Python, Ansible, AWS VPC, Azure Virtual Network, Direct Connect, ExpressRoute, ServiceNow.

Client: Wellstar Health System - Marietta, GA. Aug 2022 – Mar 2024

Role: Senior Network Engineer

Responsibilities:

Managed enterprise network infrastructure supporting hospitals, outpatient facilities, administrative offices, and data centers, ensuring secure and highly available connectivity for clinical and business applications.

Administered Palo Alto NGFW, Cisco Firepower, and Cisco ASA firewalls, implementing security policies, NAT, security zones, application-based filtering, and VPN connectivity across healthcare environments.

Designed and implemented network segmentation using VLANs, VRFs, and security zones to isolate clinical systems, medical devices, guest networks, and administrative environments in accordance with HIPAA security requirements.

Configured and maintained Cisco Nexus and Catalyst switching infrastructure, supporting high-performance Layer 2 and Layer 3 connectivity within enterprise data centers and hospital campuses.

Managed F5 BIG-IP (LTM and GTM) load balancers to provide high availability, traffic distribution, and application delivery for critical healthcare applications including EMR/EHR, patient portals, and clinical systems.

Built and maintained IPsec Site-to-Site VPN and GlobalProtect SSL VPN connectivity to securely support hospitals, remote clinics, physicians, and third-party healthcare partners.

Participated in disaster recovery planning, data center failover testing, and high-availability validation to ensure continuous operation of mission-critical healthcare services.

Collaborated with security, server, cloud, and application teams to deploy secure network connectivity for Epic, PACS, imaging systems, VoIP, and other healthcare applications.

Performed firewall migrations, network upgrades, and infrastructure refresh projects, validating configurations and minimizing downtime during scheduled maintenance windows.

Monitored network performance and security events using SolarWinds, LogRhythm, Wireshark, and enterprise monitoring tools to proactively identify and resolve performance and security issues.

Automated routine operational tasks using Python scripts to simplify configuration validation, log analysis, and network health reporting.

Investigated and resolved complex Layer 2, Layer 3, routing, switching, VPN, firewall, and load balancer issues, serving as the senior escalation point for critical production incidents.

Worked closely with compliance and cybersecurity teams to support HIPAA audits, security assessments, vulnerability remediation, and implementation of enterprise security best practices.

Participated in change management, implementation planning, and production deployments while maintaining high network availability across healthcare facilities.

Prepared network documentation, disaster recovery procedures, and technical implementation guides to support operational excellence and future infrastructure growth.

Environment: Palo Alto NGFW (Panorama, GlobalProtect), Cisco Firepower, Cisco ASA, Cisco Nexus 2000/5000/7000/9000, Cisco Catalyst Switches, F5 BIG-IP (LTM, GTM), Cisco Meraki SD-WAN (MX), Meraki Wireless (MR), Cisco IOS, NX-OS, BGP, OSPF, ECMP, vPC, VDC, VLANs, VRFs, IPsec VPN, SSL VPN, PKI, LogRhythm SIEM, SolarWinds, Wireshark, Python, VMware, AWS, Microsoft Azure, HIPAA Compliance, Disaster Recovery, High Availability.

Client: RXO – Atlanta, GA. Oct 2020 – July 2022

Role: Network Engineer

Responsibilities:

Supported enterprise WAN, LAN, and data center network infrastructure connecting corporate offices, distribution centers, warehouses, and remote logistics sites across multiple locations.

Implemented and maintained Cisco SD-WAN connectivity for branch offices, improving application performance, centralized management, and WAN resiliency.

Configured and supported Cisco Catalyst and Nexus switches, Cisco ISR/ASR routers, and routing protocols including BGP, OSPF, and EIGRP to ensure reliable network connectivity.

Managed MPLS, DIA, and Internet circuits, assisting with WAN modernization projects and migration of remote locations to SD-WAN architecture.

Configured and maintained Palo Alto and Cisco ASA firewalls, implementing security policies, NAT, ACLs, and VPN connectivity to secure enterprise applications and branch communications.

Built and supported IPsec Site-to-Site VPN and SSL VPN solutions for corporate offices, warehouse facilities, cloud environments, and remote users.

Collaborated with cloud and infrastructure teams to establish secure network connectivity between on-premises data centers and AWS/Azure environments using VPN and cloud networking services.

Supported warehouse wireless infrastructure by configuring Cisco Wireless LAN Controllers and access points to provide reliable connectivity for handheld scanners, inventory management systems, and logistics applications.

Performed network monitoring, capacity planning, and performance analysis using SolarWinds, Splunk, and Wireshark to proactively identify and resolve network issues.

Participated in network migration, hardware refresh, and branch deployment projects, ensuring minimal business disruption during implementation activities.

Executed software upgrades, firmware updates, configuration backups, and preventive maintenance for enterprise routers, switches, firewalls, and wireless infrastructure.

Investigated and resolved Layer 2, Layer 3, routing, switching, VPN, firewall, and SD-WAN connectivity issues while meeting operational SLAs.

Worked closely with server, cloud, security, and application teams to support logistics platforms, transportation management systems, and warehouse operations.

Participated in change management, disaster recovery testing, and production support activities while maintaining network availability and operational stability.

Prepared network documentation, implementation procedures, and topology diagrams to support daily operations and future infrastructure enhancements.

Environment: Cisco SD-WAN, Cisco Catalyst 9300/9500, Cisco Nexus 5000/7000, Cisco ISR/ASR Routers, Cisco IOS, NX-OS, Palo Alto NGFW (Panorama), Cisco ASA, BGP, OSPF, EIGRP, MPLS, VLANs, STP, HSRP, IPsec VPN, SSL VPN, Cisco Wireless LAN Controllers, Cisco Access Points, AWS VPC, Microsoft Azure Virtual Network, SolarWinds, Splunk, Wireshark, ServiceNow, VMware, Microsoft Visio.

Client: OneNeck IT Solutions - Madison, WI. Mar 2017 – Sept 2020

Role: Network Engineer

Responsibilities:

Supported enterprise LAN, WAN, and data center network infrastructure for healthcare customers, ensuring secure and reliable connectivity across hospitals, clinics, and corporate locations.

Configured and maintained Cisco Catalyst and Nexus switches, Cisco ISR/ASR routers, and enterprise routing protocols including BGP, OSPF, and EIGRP.

Implemented VLANs, Inter-VLAN Routing, EtherChannel, HSRP, and Spanning Tree Protocol (STP/RSTP) to provide highly available campus network connectivity.

Assisted with network expansion, technology refresh, and infrastructure migration projects, replacing legacy network equipment with minimal disruption to healthcare operations.

Configured and supported Cisco ASA and Palo Alto firewalls, implementing security policies, NAT, ACLs, and VPN connectivity for branch offices and remote users.

Built and maintained IPsec Site-to-Site VPNs and SSL VPN solutions to securely connect hospitals, physician offices, and remote workforce locations.

Supported Cisco Wireless LAN Controllers and enterprise wireless access points, performing RF optimization, firmware upgrades, and wireless troubleshooting.

Worked with server, virtualization, and application teams to provide network connectivity for VMware environments, storage infrastructure, and clinical applications.

Performed network monitoring, fault isolation, and performance analysis using SolarWinds and Wireshark, proactively identifying and resolving network issues.

Executed software upgrades, hardware replacements, configuration backups, and preventive maintenance activities for routers, switches, and firewalls.

Participated in change management, disaster recovery testing, and maintenance window implementations while maintaining compliance with operational procedures.

Resolved Layer 2, Layer 3, routing, switching, VPN, and firewall incidents, performing root cause analysis to improve network stability and availability.

Created and maintained network diagrams, implementation documentation, and standard operating procedures to support ongoing network operations.

Collaborated with vendors, telecom providers, and cross-functional infrastructure teams during network implementations and production support activities.

Provided Level 2/Level 3 network support for critical healthcare infrastructure, ensuring high network availability for clinical and business applications.

Environment: Cisco Catalyst 3560/3750/4500/6500, Cisco Nexus 5000/7000, Cisco ISR/ASR Routers, Cisco IOS, NX-OS, Cisco ASA, Palo Alto NGFW, BGP, OSPF, EIGRP, VLANs, Inter-VLAN Routing, STP, RSTP, EtherChannel, HSRP, ACLs, NAT, IPsec VPN, SSL VPN, Cisco Wireless LAN Controllers, Cisco Aironet Access Points, SolarWinds, Wireshark, VMware, ServiceNow, Microsoft Visio, Windows Server.

Client: EarthLink Business, Atlanta, GA. Mar 2014 – Jan 2017

Role: Network Engineer

Responsibilities:

Monitored and maintained a large-scale ISP backbone network supporting enterprise and business customers, ensuring high network availability and compliance with service level agreements (SLAs).

Configured and supported Cisco routers and switches for customer provisioning, network expansions, and infrastructure upgrades across access and distribution networks.

Assisted in the implementation and troubleshooting of Layer 2 and Layer 3 routing technologies, including VLANs, OSPF, EIGRP, and BGP, to maintain stable enterprise connectivity.

Performed MPLS circuit provisioning, WAN connectivity validation, and routing verification for new customer deployments and branch office activations.

Supported 24 7 Network Operations Center (NOC) activities by monitoring network alarms, responding to incidents, and escalating critical outages to senior engineering teams.

Troubleshot routing, switching, and WAN connectivity issues using packet analysis, routing tables, interface statistics, and network diagnostic tools to restore services within SLA targets.

Configured VLANs, trunk ports, EtherChannel, and Spanning Tree Protocol (STP/RSTP) to support campus and enterprise network deployments.

Assisted with BGP peering configuration, route advertisement, and routing policy verification for external service provider and enterprise customer connections.

Supported IP addressing, subnet allocation, DNS, DHCP, and network documentation to ensure accurate infrastructure records and efficient network operations.

Participated in planned maintenance activities, IOS upgrades, hardware replacements, and network migration projects while minimizing service disruption.

Coordinated with field engineers, data center teams, and service providers to provision circuits, validate connectivity, and resolve customer-facing network issues.

Maintained network performance using Cisco Works and monitoring tools, proactively identifying capacity constraints and recommending improvements.

Prepared operational documentation, network topology diagrams, implementation reports, and change records in accordance with organizational change management procedures.

Worked closely with cross-functional teams to support incident, problem, and change management activities while ensuring continuous network availability and operational excellence.

Environment: Cisco Catalyst Switches, Cisco ISR & ASR Routers, Cisco IOS, TCP/IP, BGP, OSPF, EIGRP, MPLS, VLANs, 802.1Q Trunking, EtherChannel (LACP), STP/RSTP, WAN, LAN, DNS, DHCP, QoS, ACLs, IP Addressing, Cisco Works, SNMP, Syslog, Wireshark, Microsoft Visio, Microsoft Office, NOC Operations, Incident, Problem & Change Management.

Contact this candidate