Akhila A
Fort Lauderdale,FL
Summary
Experienced and CCNA-certified Network Engineer and Cybersecurity Specialist with over 4 years of expertise in Network Design, implementation, and security. Proficient in managing advanced switching technologies, VLANs, and inter-VLAN routing, as well as various routing protocols like OSPF, EIGRP, RIP, and BGP. Skilled in cloud-based network administration, AWS integration, and network security protocols, including VPNs and SSL. Experienced with tools like SolarWinds for monitoring and ensuring network security and performance. Demonstrates strong capabilities in cybersecurity program development, regulatory compliance, and risk management, with a solid background in disaster recovery and business continuity planning. Recognized for excellent leadership, project management, and communication skills, driving strategic and resilient technology solutions.
Overview
6
6
years of professional experience
1
1
Certification
Work History
Network Security Engineer
Verizon Wireless
01.2023 - Current
- Designs, tests, and deploys IT security systems and solutions, including e-commerce environments, to strengthen client security frameworks.
- Utilizes Secure Change and Remedy ticket management tools for efficient handling of client support, change requests, incident requests, and troubleshooting tasks.
- Configures Juniper and Palo Alto firewalls according to client-specific topologies, implementing features like application & URL filtering, security profiles, VPNs, data filtering, file blocking, and antivirus.
- Specializes in configuring Palo Alto Next-Generation Firewalls, leveraging features such as Content-ID, User-ID, and App-ID to enhance network security.
- Experienced in Cisco IPsec VPN, S5LYPN, and NAT configurations for robust network security and connectivity.
- Proficient in firewall technologies, including general configuration, optimization, security policy development, and rule creation/modification on Palo Alto and Juniper firewalls.
- Applies Qualys for policy compliance and to detect both internal and external threats and vulnerabilities.
- Skilled in IBM QRadar SIEM for network and log monitoring, with troubleshooting capabilities.
- Designs, installs, and troubleshoots Palo Alto firewalls to meet security standards.
- Creates policies, alerts, and configurations using SIEM tools such as Splunk and IBM QRadar.
- Developed and integrated CI/CD pipelines using Concourse/GitLab, automating SAST and DAST scan tasks to enhance security efficiency across the development lifecycle.
- Led threat modeling and security architecture reviews for both on-premises and cloud-based applications, proactively identifying risks and ensuring secure system design.
- Conducted thorough AWS configuration security checks ensuring compliance with industry standards and identifying vulnerabilities to enhance cloud security.
- Designed, developed, and deployed ARES a Dynamic Application Security Testing (DAST) tool, from conceptualization to deployment, significantly improving the organization's ability to detect and remediate web application vulnerabilities.
- Created "CatchIt-Secret," an open-source secret scanning tool, to prevent sensitive information leaks by identifying and mitigating exposure in code repositories and internal systems.
- Manages Palo Alto firewall installations, including web application filtering, threat prevention, and data filtering.
- Configures, manages, deploys, optimizes, and troubleshoots Juniper firewalls for enhanced client security.
- Performed upgrades from older to newer Palo Alto firewall platforms (e.g., 6.1.5 to 6.1.10).
- Implements zone-based firewalling and security rules on Palo Alto firewalls.
- Utilizes network packet analyzer tools like Wireshark, Microsoft Network Monitor, Snort, and Tcpdump for traffic analysis.
- Experienced with Palo Alto centralized management via the PANORAMA GUI.
- Proficient with Palo Alto Next-Generation firewall security profiles and Cisco ASA VPN.
- Skilled in Cisco 5500-X Firepower, Cisco Surefire IPS, and FireEye for layered security management.
- Conducted migration projects involving both Juniper and Palo Alto Next-Generation firewalls.
- Uses various security tools such as Cisco WSA, Qualys, Splunk, Symantec Endpoint Protection, and QRadar.
- Upgrades Imperva WAF with hotfixes and patches to ensure robust web application security.
- Familiar with WildFire advanced malware detection using IPS features on Palo Alto firewalls.
- Experienced in data center operations and console access across various network devices.
- Maintains a deep understanding of internet fundamentals, including DNS, IP routing, HTTP, VPN, and security protocols.
- Configures site-to-site IPsec VPN tunnels and split tunneling for client connectivity, with expertise in routing and switching protocols like BGP, OSPF, VLAN, VTP, STP, RIP, and RSTP.
- Reduced cyber threats by conducting vulnerability assessments and recommending appropriate mitigation strategies.
- Minimized financial losses due to cyber incidents, implementing cost-effective security measures without compromising on protection.
- Streamlined patch management processes, ensuring timely updates to critical systems and applications.
- Coordinated with third-party security information and event management (SIEM) providers to maintain protections and predict threats.
- Enhanced network security by implementing advanced firewall configurations and intrusion detection systems.
Network Engineer
American Express
07.2022 - 12.2022
- Monitored network capacity and performance to diagnose and resolve complex network problems.
- Reduced downtime with proactive monitoring of network devices and rapid troubleshooting.
- Led implementation, troubleshooting, and maintenance of Local Area Networks (LAN) to ensure optimal network performance and security.
Led implementation, troubleshooting, and maintenance of Local Area Networks (LAN) to ensure optimal network performance and security. - Played a key role in migrating from Cisco ASA to Palo Alto 5500 and 7200 series firewalls.
- Configured Palo Alto firewalls, setting up zones, App-ID, Threat-ID, and device groups for enhanced security management.
- Set up HSRP and VLAN trunking (802.1Q) on Catalyst 6500 switches, supporting VLAN routing and redundancy.
- Configured Virtual LANs (VLANs), VLAN trunking, inter-VLAN routing, port security, and LAN security on Cisco switches.
- Performed VLAN misconfigurations troubleshooting and resolved port security issues to maintain LAN stability.
- Implemented STP, RSTP, and MSTP to prevent network loops and improve convergence and scalability.
- Resolved OSPF issues in a multi-area OSPF environment across multiple branch routers.
- Diagnosed and resolved DNS, DHCP, and IP conflict issues to maintain seamless connectivity.
- Configured inter-VLAN routing, route redistribution, ACLs, and dynamic routing for streamlined network traffic.
- Experienced with Cisco Meraki monitoring and analytics for traffic pattern analysis and network optimization.
- Configured and maintained IPsec and SSL VPNs on Palo Alto firewalls to secure remote connections.
- Skilled in using Cisco Meraki tools for network issue diagnosis and troubleshooting.
- Proficient in network monitoring tools such as SolarWinds and Wireshark to identify and resolve network issues efficiently.
- Reduced downtime with proactive monitoring of network devices and rapid troubleshooting.
Network Engineer
Sundaram Finance
02.2019 - 07.2021
- Skilled in implementing and troubleshooting network protocols such as STP, RSTP, PVST, HSRP, and VRRP.
- Expertise in VPNs, routing, NAT, access-lists, security contexts, and failover on ASA firewalls.
- Hands-on experience with Juniper JUNOS on M and MX series routers.
- Proficient in routing protocols like Static, EIGRP, OSPF, and BGP with strong configuration and troubleshooting skills.
- Experienced with Citrix NetScaler Access Gateway for secure remote access.
- Proficient in Nexus 9k, 7k, 5k, 2k, Checkpoint firewalls, and Cisco ASA for network optimization and security.
- Strong background in Windows Server, Linux, Ubuntu, UNIX, Cisco IOS XR, and Junos.
- Skilled in SDN, TCP/IP, OSPF, EIGRP, MPLS, BGP, routing, and switching.
- Configured Cisco ISE for 802.1x Authentication across Cisco LAN Controllers, Catalyst Switches, and ASA Firewalls.
- Configured ASA 5520 with ACLs and firewall settings for enhanced security.
- Configured IPS/IDS in ASR routers to strengthen network security.
- Managed Nexus data center infrastructure (7k, 6k, 5k, 2k, UCS) using VDC, VPC, VRF, and FabricPath.
- Configured Bluecoat proxies for URL/content filtering.
- Upgraded NX-OS on Nexus devices to ensure network stability.
- Configured Cisco routers and switches with route redistribution, route-maps, and administrative distance settings.
- Implemented spanning tree features like BPDU Guard and PortFast for loop prevention.
- Configured Cisco VPN client for IPsec connections.
- Provisioned VoIP phones through company servers.
- Performed upgrades on Cisco 5508 Wireless LAN Controllers for Cisco ISE integration.
- Managed IP addressing schemes across TCP/IP networks.
- Configured BGP, OSPF, and VRF for segmented and secure network design.
- Set up F5 BIG-IP load balancers with VIPs, SSL certificates, and pools.
- Integrated Cisco Catalyst switches (6500, 3750, 4500) with Cisco ISE on VMware and physical appliances.
- Troubleshot VLAN, OSPF, and QoS connectivity issues and managed IP networks.
- Configured RIP, EIGRP, and IP subnetting for network optimization.
- Installed and managed Cisco Layer 2/3 switches and routers, solving performance issues.
- Developed Windows, Unix, and Python scripts for automation.
- Worked with Nexus 7010, 5548, 5020, 2148, and 2248 devices.
- Deployed Juniper EX 2500, 4200, 4500 switches, MX 960, and 2010 routers for new sites.
- Redesigned networks based on hardware guidelines and site-specific requirements.
- Configured VLANs, 802.1q trunks, VTP, and security policies.
- Managed Cisco switches (2900x, 3500x, 4500x, 6500x) for connectivity and redundancy.
- Configured VLANs, STP, EtherChannel, port security, and inter-VLAN routing.
- Installed Cisco routers (500, 1800, 1900, 2600, 2800, 3600, 3800, 3900 series).
- Designed networks using dynamic routing (EIGRP, OSPF, BGP-4, RIP).
- Performed network and software installations, upgrades, and maintenance.
Education
Master of Science - Computer Information Systems
New England College
Henniker, NH03-2023
Bachelor of Science - Computer Science
KL University
India06-2019
Skills
Firewalls: Juniper SRX, Cisco ASA, Palo Alto, Checkpoint
- Juniper Routers: 40, 50, 240, 480, 950
- Cisco Switches: Catalyst 6500, 4510, 4500-X, 3800, 3750X, 3550, 2960S, Nexus 2K, 5K, 7K
- Juniper Switches: 2200, 2500, 3300, 4200, 4500, 5200
- Nexus Switches: 7000, 5500, 5000, 2000
- Other Hardware: F5 BIG-IP LTM Load Balancer, Cisco 7960 IP Phone
- Networking: TCP/IP, UDP, ICMP, LAN, WAN, DHCP, DNS, FTP, TFTP, SNAP, ARP
- Other Protocols: HSRP, GLBP, VRRP, QoS/CoS, VoIP, IPv4, IPv6, IP SLA
- Security: ACL, NAT/PAT, ASA (5505, 5510) Firewall
- Load Balancer: F5 Networks (BIG-IP) LTM 6400, 1600
- Routing: EIGRP, OSPF, RIP, BGP, MPLS, PPP
- Switching: VLAN, VTP, STP/RSTP, Ether Channel (PAgP, LACP), CEF
- Operating Systems: Windows XP, Windows 7, Windows 8, Windows Server 2003; working knowledge of Mac OS X and Linux
- Cloud: AWS
- Network Monitoring Tools: Cisco Works, SolarWinds, Cisco WAN Manager, Wireshark, Infoblox
- Applications: Wireshark, PRTG, VMware, MS Visio, MS Office, Adobe Photoshop, Adobe Illustrator
Certification
- (CCNA) – Cisco Certified Network Associate Routing and Switching
Timeline
Network Security Engineer
Verizon Wireless
01.2023 - Current
Network Engineer
American Express
07.2022 - 12.2022
Network Engineer
Sundaram Finance
02.2019 - 07.2021
Master of Science - Computer Information Systems
New England College
Bachelor of Science - Computer Science
KL University