Network Security Engineer

Gayathri Nandyala

Network Engineer Network Security Engineer

************@*****.***

+1 732-334- 8744

Professional Summary

•5 years of experience in Network Security Engineering, specializing in perimeter defense, data center connectivity, and automated infrastructure management.

•Architecting and securing the infrastructure on AWS using IAM, API gateway, CloudTrail, cloud watch and security groups.

•Experience in F5 installation and monitoring it on F5 load balancer, centrally manage F5 configurations, backups and software images using BIG-IQ.

•Addressing Cisco infrastructure issues, monitoring, debugging like routing, WAN outages and network hardware and software failure

•Experienced in configuring and troubleshooting firewall Palo Alto, Cisco and Fortinet firewalls implementing VPN technologies, NAT/PAT as well as protocols.

•Implemented BGP, OSPF, and EIGRP routing protocols across enterprise WAN and data center environments to ensure high-speed traffic pathing.

•Strong knowledge in monitoring and supporting network protocols and services including TCP/IP, VPN, DHCP and DNS.

•Experienced supporting Cisco Catalyst switches, Cisco Meraki networking solutions, wireless LAN infrastructure, and enterprise connectivity across distributed environments.

•Security Management Systems (IT) including Enterprise system administration and Enterprise networking - leading a bleeding edge team into Azure CD/CI.

•Installed F5 BIG-IP LTM and GTM solutions to manage application traffic, load balancing, and high availability.

•Designed cloud connectivity within AWS and Azure environments using Virtual Networks (VNets), Network Security Groups (NSGs), VPN Gateway, native networking services, and virtual firewalls to enable secure hybrid connectivity.

•Built Cisco ACI spine-leaf architectures with Nexus 9000 switches, configuring tenants, VRFs, and EPGs for granular micro-segmentation.

•Orchestrated VIPTELA SD-WAN environments through vManage and vBond controllers to control branch connectivity and application steering.

•Automated network configuration backups and compliance audits using Python scripts, Ansible playbooks, and Terraform providers.

•Profound understanding of wireless client device behavior that enables prevention of accommodation, non - standard devices through inclusion, testing and validation as part of design process.

Signature Skills & Technical Capabilities

Firewalls

PA-5450, PAN-PA-5400-DPC-A, PA-3420, PA-3440, PA-3430, PA-5260, Cisco Secure Firewall 3110, Cisco Secure Firewall 3105, FortiGate 1000F, BlueCoat

Switching & Fabric

Cisco Catalyst Switches, Cisco Nexus 9000, Cisco ACI, Arista 7300 series, Arista Switches, Cisco 9400, Cisco 8100, Cisco 8300, Cisco ISR 1000, VLANs, VLAN Trunking, STP/RSTP/MST, EtherChannel, Port Channeling, Campus Networking

Routing & SD-WAN

BGP, OSPF, EIGRP, MPLS, VIPTELA, vBond Orchestrator, vManage, Cisco Meraki

Load Balancers

F5 BIG-IP rSeries, F5 LTM, F5 GTM, F5 POOL

Cloud

AWS, Azure, Azure VNets, Azure Network Security Groups (NSGs), Azure VPN Gateway, Palo Alto with AWS, Linux Administration

Identity & Access

Cisco ISE, 802.1X, Aruba ClearPass, Cisco Meraki, Identity Management, Active Directory, ZTNA, Network Administration

Automation & Tools

Terraform, Ansible, Python, Splunk, Infoblox, SolarWinds, Akamai, ServiceNow, FortiAnalyzer, FortiManager, Aruba Wireless, Enterprise Wireless, Incident Response, Operational Support, Network Documentation, Zero Touch Provisioning

Professional Experience Timeline

Terumo Medical Corporation, Somerset, NJ Aug 2025 - Present

Network Security Engineer

Responsibilities:

•Implemented zone-based segmentation in Palo Alto PA-7000 and PA-5000 during migration, replacing flat Check Point policy structures with granular zone-to-zone policies.

•Used FortiGate's integrated intrusion prevention capabilities to detect and block unauthorized lateral movement attempts within segmented network zones.

•Led end-to-end lifecycle management of enterprise WAN/LAN infrastructure including design, deployment, capacity planning, and decommissioning across multi-region environments.

•Supported ECMP-based routing to optimize traffic distribution, path resiliency, and high availability across data center networks.

•Developed VIPTELA SD-WAN policies within vManage to direct application traffic over defined WAN paths.

•Performed vBond Orchestrator configuration tasks to facilitate branch edge device registration.

•Supported VMware vSphere environments by validating virtual machine connectivity, virtual switch configurations, resource utilization, and infrastructure availability across enterprise data centers.

•Performed network capacity planning and performance analysis to support bandwidth forecasting, SLA compliance, and infrastructure scalability across enterprise WAN/LAN environments.

•Troubleshot complex Layer 2/Layer 3 issues including routing convergence, MTU mismatches, asymmetric routing, and traffic-flow optimization across enterprise networks.

•Configured and troubleshot HSRP/VRRP high-availability gateway solutions for enterprise LAN environments to ensure network resiliency and uninterrupted connectivity.

•Managed Cisco Secure Firewall 3110 and 3105 deployments to protect data center traffic while updating decryption policies.

•Performed packet capture and protocol analysis using Wireshark and tcpdump to diagnose latency, routing, MTU/MSS, and application connectivity issues.

•Participated in major incident bridge calls, performed root-cause analysis, and restored critical production network services within SLA targets.

•Optimized F5 BIG-IP rSeries virtual servers and health monitors to distribute traffic across redundant application pools.

•Developed network standards, reference architectures, implementation procedures, and operational runbooks supporting enterprise infrastructure and change management.

•Configured routing protocols: BGP, OSPF, EIGRP, IS-IS, RIPv2, with route redistribution and summarization.

•Designed and supported enterprise LAN/WAN, wireless, VPN, Azure Virtual Networks (VNets), Network Security Groups (NSGs), VPN Gateway, and network security infrastructure to maintain secure hybrid connectivity and high availability.

•Configured and monitored F5 Big-IP LTM 7000 load balancers.

•Integrated SD-WAN with existing MPLS and Internet circuits, optimizing routing decisions for cost and performance.

•Configured ACI EPGs, contracts, and tenants to enforce Layer 2/3 security and VLAN policies

•Supported enterprise wired and wireless infrastructure, Cisco ISE authentication, network access control, and secure connectivity across multiple locations.

•Managed Infoblox DDI appliances for DNS and DHCP service integration.

•Automated recurring configuration tasks using Ansible playbooks to ensure consistency across the Cisco Nexus estate.

•Implemented Akamai traffic management rules to optimize content delivery to end users.

•Administered Cisco Meraki cloud-managed networking features to support remote site connectivity.

Rakuten, San Mateo, CA Jan 2024 – July 2025

Network Engineer

Responsibilities:

•Administered, managed and troubleshooted Palo Alto, Fortinet firewalls, F5 load balancer, SD-WAN devices and network related issues.

•Configured Palo Alto PA-3420 and PA-3430 firewalls to secure enterprise segments using decryption policies.

•Managed PA-5260 hardware in high-availability clusters to maintain perimeter security without service disruption.

•Mentored junior engineers during troubleshooting sessions, change implementations, and network deployment activities while sharing technical best practices.

•Supported Windows/Linux systems, DNS/DHCP services, and network administration activities to maintain enterprise application connectivity.

•Executed FortiGate 1000F security policy updates through FortiManager for centralized orchestration.

•Analyzed traffic patterns and threat logs using FortiAnalyzer to refine security posture on the perimeter.

•Implemented Arista 7300 series switches to build high-density distribution layers.

•Optimized L2/L3 settings on Arista switches to support data center connectivity requirements.

•Upgraded Cisco 9400 and ISR 1000 series branch routers to align with current routing standards.

•Managed OSPF and EIGRP routing metrics on Cisco 1800 routers to control path selection across the WAN.

•Experienced in deploying SD-WAN infrastructure which includes commissioning of vBond, vManage, and vSmart controllers along with Viptela.

•Supported enterprise VoIP/SIP-based communication infrastructure and ensured QoS for voice traffic across WAN environments.

•Executed Aruba ClearPass for identity management and network access control across wired and wireless segments.

•Automated Python to script automated interface status monitoring for Arista hardware.

•Implemented ZTNA principles to verify and authenticate users and devices.

•Collaborated with cross-functional teams and vendors to resolve routing, switching, firewall, wireless, and incident management issues while maintaining SLA compliance.

•Created SSL on F5 LTM, Configuration of wide IP & wide IP Pool on F5 GTM, troubleshooting of advanced load balancers.

Value Point Systems, India Feb 2021 – July 2023

Network Engineer

Responsibilities:

•Expert in switching technologies including VTP, ISL/802.1Q, VLANs, EtherChannel, Trunking, GRE, Port Security, STP, RSTP, and MST.

•Communicating and escalating tickets with service providers for network outrage issues.

•Experienced in physical cabling, IP addressing and Subnetting with VSLM, configuring and supporting TCP/IP, DNS, installing and configuring proxies.

•Worked on cisco routers 1000 and 4000 series routers and implemented routing protocols OSPF, BGP and EIGRP.

•Maintained other tools SolarWinds, ServiceNow, Active Directory and Azure Services.

•Good Knowledge on TCP/IP protocol suite and OSI layers.

•Resolved BlueCoat proxy configuration issues to restore filtered web access for internal users.

•Escalated critical network incidents to senior engineering teams and service providers, providing continuous status updates until issue resolution.

•Monitored enterprise network infrastructure using SolarWinds and Splunk, investigating alerts, isolating root causes, and restoring service availability within SLA targets.

•Configured the routing network on the SilverPeak SDWAN for the organization.

•CDN setup and monitoring traffic flow using Akamai for internal DC.

•Supported IT systems security needs including monitoring, risk analysis, system updates, documentation and regulatory compliance to ensure HIPAA security requirement and standards were met.

•Understanding of Akamai CDN, involved in creating the policies for static content redirection onto Akamai.

•Rigorous application of information security policies, principles and practices on the network.

•Implementation CI/CD pipeline with Ansible and AWS in Linux environment.

•Configuration, Solution Managing F5 BIG IP LTM Load Balancer, creating VIPs, Creating Pools, and Associating Pools with VIPs.

•Creating Persistence Profile, SSL Profile, SSL Offloading, creating iRules health Monitor, SNAT with High Availability solution with Network Failover.

•Performed rack-and-stack activities, cable management, hardware replacements, and physical troubleshooting of network devices within datacenter environments.

•Automated AWS infrastructure through infrastructure as code by writing various Terraform modules, scripts by creating AWS, IAM users, policies, EC2, S3 buckets.

•Support Splunk infrastructure, install, test and deploy Splunk services.

•Troubleshot and deployed Python bugs fixes of the two main applications that were a main source of data for both customers and internal customer service team.

•Supporting EIGRP and BGP based network by resolving L2 and L3 problems of internal teams & external customers of all location.

Certifications

• CCNA – Cisco Certified Network Associate

Contact this candidate