Senior Network Security Engineer Palo Alto

SRIKANTH BANDARUPALLI

Senior Network Security Engineer Palo Alto Firewalls NAC & Micro-Segmentation VPN & SD-WAN

*****************@*****.*** 512-***-**** https://www.linkedin.com/in/srikanth-bandarupalli-95b715165/

PROFESSIONAL SUMMARY

Senior Network Security Engineer with 8+ years of hands-on firewall engineering, including Palo Alto hardware and VM-Series (PA-3260, PA-5280, PA-5410, PA-5450) in enterprise data center environments at Wells Fargo and Kaseya, alongside FortiGate, Cisco FTD, and Check Point. Strong in Cisco ISE network access control, micro-segmentation with Cisco ACI, Tetration, and TrustSec, IPsec VPN and Zscaler tunnel troubleshooting, and Cisco Viptela SD-WAN. Comfortable with change-controlled production work, on-call rotations, and firewall logging and SIEM/SOAR integration, in regulated financial and technology environments aligned with NIST and CIS benchmarks.

TECHNICAL SKILLS

Firewalls & Security: Palo Alto (PA-3260, PA-5280, PA-5410, PA-5450, VM-Series), Fortinet (FortiGate 1800F, 3200F, 500E, 200E, FortiManager, FortiAnalyzer), Cisco Firepower/FTD, Cisco ASA, Check Point (12k/21k), Juniper SRX, Radware DefensePro

Network Security: Network Access Control, Micro-segmentation (Cisco ACI, Tetration, TrustSec SGT/SXP), IPsec/GRE VPN, IDS/IPS, SIEM/SOAR Integration, Zero Trust (ZTNA), Zscaler ZIA/ZPA, Cloudflare Access, WAF, DLP, EDR/EPP, DNS Security (Infoblox), DDoS Mitigation

Cisco ISE & AAA: Cisco ISE (802.1X, RADIUS, TACACS+, Posture Assessment, RBAC, MFA, Guest Access), CyberArk (privileged access), AAA Configuration, Device Administration, Network Access Control, TrustSec SGT/SXP

Data Center: Cisco ACI (APIC, EPG, Contracts, Multi-Pod), Cisco UCS, Leaf-Spine Architecture, Cisco Tetration

SD-WAN & WAN: Cisco Viptela (vManage, vSmart, vBond, vEdge/cEdge), Application-Aware Routing, QoS Policies, VPN Segmentation, OMP, Zero-Touch Provisioning (ZTP), Template Management, WAN Optimization

Routing & Switching: BGP, OSPF, EIGRP, VRF, VLAN, VXLAN, Spanning Tree, Cisco Nexus (7010/7018/5600/9300/9400/9500), Cisco Catalyst, Arista (7060X/7135/7132)

Wireless: Cisco WLC (5520/9800), Cisco Aironet/Catalyst APs (Wi-Fi 6/6E), Cisco Meraki Wireless, 802.1X, WPA2/WPA3, RF Site Surveys

Cloud & Hybrid: AWS (VPC, VPN, CloudWatch), Azure (VNETs, ExpressRoute), GCP, Zscaler ZIA/ZPA, Radware DDoS, Infoblox DDI, Cisco Stealthwatch

Automation & Tools: Terraform, Ansible, REST APIs, Python, Splunk, Wireshark, Packet Captures

Monitoring & Tools: Splunk, SolarWinds NPM/NCM, Netscout, Gigamon, NNMi, Cisco Prime, DNA Center, Wireshark, SNMP (v2c/v3), Syslog, NetFlow, Packet Captures

Frameworks: NIST, CIS Benchmarks, Zero Trust Architecture

Load Balancing: F5 BIG-IP LTM/GTM, F5 rSeries, F5 BIG-IQ, VMware AVI (NSX ALB), AppViewX, Venafi, Citrix NetScaler, iControl REST API

Certificate & PKI Management: SSL/TLS Certificate Lifecycle (Renewals, Deployments, Chain Validation, Rollover), Venafi, AppViewX, F5 SSL Profiles, Certificate Automation Workflows

Documentation: Network Diagrams, Runbooks, Change Management, Root Cause Analysis Reports, Technical Presentations, Configuration Standards

PROFESSIONAL EXPERIENCE

F5 Network Engineer (OPS-SRF) June 2026 – Present

Bank of America (Contract) Arizona

•Execute changes through BMC Remedy ITSM following ITIL processes, peer reviews, change controls, rollback procedures, and post-implementation validation.

•Troubleshoot VIP availability, pool health, SSL handshake failures, DNS issues, TCP/IP connectivity, and application traffic distribution.

•Use NDC and CyberArk for network configuration analysis, infrastructure validation, troubleshooting, and secure privileged access.

•Collaborate with application, network, security, and infrastructure teams on design validation, incident resolution, and production deployments.

•Manage SSL/TLS certificate lifecycle operations for F5 and VMware AVI load balancers using Venafi, AppViewX, and F5, including renewals, deployments, certificate chain validation, and rollover.

•Leverage AppViewX for certificate and load balancing automation, configuration validation, change implementation, and pre/post-deployment verification.

•Support enterprise application delivery and load balancing infrastructure using F5 BIG-IP LTM/GTM and VMware AVI (NSX Advanced Load Balancer).

•Manage Service Request Fulfillment (SRF) activities, including creation, modification, and decommissioning of VIPs, pools, pool members, health monitors, persistence, SNAT, and SSL profiles.

•Support GTM/GSLB operations, including Wide IPs, GTM pools, DNS resolution, health monitoring, and global traffic distribution.

•Coordinate DNS/DDI requests for record creation, modification, and validation to ensure application connectivity and availability.

Senior Network Security Engineer September 2024 – May 2026

Wells Fargo California

•Designed and optimized Palo Alto VM-Series and hardware firewalls (PA-3260, PA-5280, PA-5410) across multi-region environments, performing health checks and performance tuning to identify resource bottlenecks and improve throughput.

•Integrated Palo Alto and Cisco FTD firewalls with SIEM and SOAR platforms, enabling automated threat detection, real-time correlation, and multi-layered security controls that improved incident response efficiency.

•Configured Cisco ACI components (APIC, contracts, filters, EPG) to enforce micro-segmentation policies and secure east-west traffic. Implemented Multi-Pod architecture to expand data center scalability and inter-pod resiliency.

•Configured Cisco ISE policies to strengthen network access control, monitor device behavior, and reduce identity-based risks.

•Administered Zscaler ZIA/ZPA for secure internet breakout and Zero Trust remote access, troubleshooting GRE/IPsec tunnels and proxy authentication issues for branch and remote users.

•Integrated SD-WAN with firewall security policies and Zscaler cloud enforcement nodes, enabling policy-based traffic steering and secure branch connectivity.

•Led enterprise firewall migration from Check Point to FortiGate, including rule-base conversion, NAT policy redesign, traffic validation, and post-migration optimization to reduce rule sprawl and improve performance.

•Centralized FortiGate management using FortiAnalyzer and FortiManager, improving visibility, reporting accuracy, and policy enforcement consistency across distributed firewall fleet.

•Configured IPS, anti-malware, and advanced threat prevention on FortiGate 1800F, 3200F, 500E, and 200E firewalls, strengthening perimeter defenses and reducing false positives.

•Enforced application-aware security policies using Juniper SRX AppSecure, improving traffic visibility and reducing unauthorized access.

•Configured and maintained Radware DDoS mitigation platform, tuning mitigation thresholds and analyzing attack signatures to protect against volumetric and Layer 7 attacks.

•Implemented firewall policies aligned with industrial security best practices (NIST, IEC 62443 concepts)

•Participate in change management, on call rotations, and audit/compliance processes. Designed network segmentation strategies separating IT and OT environments to protect critical infrastructure systems.

•Supported secure connectivity for distributed environments including remote sites and critical infrastructure networks.

•Configured AWS VPNs, CloudFront distributions, and audit tools (AWS Config) to enhance cloud security, performance, and compliance readiness.

•Managed Cisco Viptela SD-WAN deployments (vManage, vSmart, vEdge), improving WAN efficiency and simplifying management for global branch connectivity. Created operational documentation to standardize deployment and monitoring practices.

•Built custom Cisco FMC-based dashboards and reports to improve visibility into security events and traffic utilization trends.

•Integrated Infoblox with security platforms to improve DNS-based threat detection and automated remediation capabilities.

•Developed and deployed Terraform-based automation for network configurations, reducing manual effort and improving deployment consistency.

•Administered Infoblox Grid for DNS, DHCP, and IPAM across large enterprise environments, covering lifecycle upgrades, patching, capacity planning, DNSSEC, RBAC, and accurate IP allocation and subnet records.

•Troubleshot complex DDI issues including DNS resolution failures, DHCP conflicts, and IPAM inconsistencies, and integrated DNS/IPAM with AWS and Azure for hybrid workloads.

•Built Python and Ansible automation and proactive monitoring and alerting for DDI workflows and configuration consistency.

•Managed F5 rSeries and BIG-IQ integrations, streamlining policy updates and improving centralized load balancer management.

•Performed upgrades and maintenance on Nexus 7010/7018/5600 series switches and UCS components to support stable, modernized data center operations.

•Implemented leaf-spine network designs using Arista 7060X/7135/7132 series switches to increase scalability and reduce latency.

•Collaborated with network, cloud, and security teams to support enterprise initiatives.

•Participate in change management, on call rotations, and audit/compliance processes. Participated in change management, on-call rotations, and audit/compliance processes.

Network Security Engineer April 2019 – November 2022

Kaseya Florida (Offshore)

•Managed Palo Alto PA-5450 and PA-5410 firewalls supporting data center environments, ensuring stable and secure connectivity. Analyzed VM-Series M500 firewall logs to identify security gaps and optimize rule efficiency.

•Collaborated with cross-functional teams to troubleshoot complex network and security incidents using deep packet inspection, log correlation, and protocol analysis.

•Implemented Zero Trust application access using Cloudflare Access, enforcing identity-based controls for internal resources.

•Supported incident response efforts by investigating WAF logs, identifying attack vectors, and applying targeted mitigations.

•Managed Palo Alto PA-5450 and PA-5410 firewalls supporting data center environments, ensuring stable and secure connectivity. Analyzed VM-Series M500 firewall logs to identify security gaps and optimize rule efficiency.

•Collaborated with cross-functional teams to troubleshoot complex network and security incidents using deep packet inspection, log correlation, and protocol analysis.

•Secured Cisco Viptela SD-WAN architecture using IPsec and MFA, strengthening protection for MPLS, internet, and LTE circuits. Integrated SD-WAN with cloud resources to improve performance and provide consistent access to cloud-hosted services.

•Expanded ACI and VMM domains to support hybrid workloads and maintain consistent micro-segmentation policies across on-premises and cloud environments.

•Supported incident response efforts by investigating WAF logs, identifying attack vectors, and applying targeted mitigations.

•Implemented Zero Trust application access using Cloudflare Access, enforcing identity-based controls for internal resources.

•Maintained EPP/EDR platforms to detect, contain, and remediate endpoint threats across distributed environments.

•Managed enterprise DLP policies to prevent sensitive data leakage across endpoints, email platforms, and cloud applications.

•Performed ISSU and planned upgrades on Nexus 9300/9400/9500 switches to maintain uptime during maintenance windows.

•Automated F5 LTM/GTM configuration deployments using Ansible and iControl REST API, reducing manual effort and configuration drift.

•Built and customized Splunk dashboards to support log analysis, security monitoring, and operational visibility.

•Diagnosed connectivity and performance issues using packet captures, traceroutes, and protocol analysis tools (Wireshark).

•Managed Check Point 12k/21k firewalls with IPS, VPN, and antivirus blades to strengthen perimeter protection for enterprise clients.

•Configured and troubleshot Cisco ASA multi-context firewalls, optimizing ACLs, NAT rules, and failover configurations.

•Implemented Cisco TrustSec (SGT/SXP) to enforce scalable, identity-based segmentation across network devices.

•Worked with Cisco Tetration to create segmentation policies and support zero-trust controls across hybrid workloads.

•Diagnosed connectivity and performance issues using packet captures, traceroutes, and protocol analysis tools (Wireshark).

•Optimized Silver Peak SD-WAN traffic policies to improve application performance and WAN efficiency.

•Configured VLANs, trunking, and VXLANs on NX-OS platforms to support flexible, scalable Layer 2/Layer 3 network designs.

•Built and customized Splunk dashboards to support log analysis, security monitoring, and operational visibility.

•Automated network configuration tasks using Terraform, improving deployment consistency and reducing manual overhead.

•Configured Citrix NetScaler to support secure and compliant application delivery in regulated environments.

Bachelor of Pharmacy (B.Pharm) 2017

Rajiv Gandhi University of Health Sciences, Bengaluru, India

CERTIFICATIONS

•CCNA

Contact this candidate