Shantanu Dorve
San Jose
Summary
Network Security Engineer with 10+ years of experience designing, securing, and troubleshooting large-scale enterprise and cloud network infrastructures. Deep expertise in TCP/IP, routing, firewall technologies, and packet-level analysis, with growing specialization in cloud security, Zero Trust architecture, and secure network design for distributed systems. Proven ability to lead high-impact incident investigations and design resilient, secure infrastructure.
Overview
14
14
years of professional experience
1
1
Certification
Work History
Senior Designated Network Security Engineer
Palo Alto Networks
Santa Clara, CA
01.2022 - Current
- Designed and optimized network security architectures for enterprise customers, ensuring secure traffic flow across hybrid and cloud environments
- Led deep packet-level troubleshooting (TCP/IP, NAT, SSL, routing, asymmetric flows) for high-impact production issues affecting large-scale deployments
- Identified and mitigated critical security vulnerabilities and network attack patterns, improving customer security posture
- Simulated and analyzed real-world failure and attack scenarios (traffic drops, session exhaustion, routing loops) to determine root cause and prevention strategies
- Provided architectural guidance on secure segmentation, firewall policy design, and access control mechanisms aligned with Zero Trust principles
- Built and maintained lab environments to validate network resiliency, failover behavior, and performance under stress conditions
- Collaborated with engineering teams to reproduce and resolve product-level defects, influencing improvements across multiple releases
- Led root cause analysis (RCA) for complex incidents and delivered actionable recommendations to prevent recurrence
- Mentored engineers and contributed to technical training, improving team capability in advanced networking and security domains
Network Engineer
Broadcom
San Jose, CA
10.2018 - 12.2021
- Designed and maintained network infrastructure across data center and cloud-integrated environments, supporting high availability applications
- Implemented secure routing and segmentation strategies using BGP, OSPF, and firewall policies
- Automated network compliance and operational workflows using Python, improving efficiency and reducing manual errors
- Troubleshot large-scale connectivity and performance issues involving TCP, DNS, HTTP, and application-layer traffic
- Strengthened system security by identifying and remediating vulnerabilities and misconfigurations, reducing risk exposure
- Participated in architecture planning and migration of network environments, improving scalability and reliability
- Collaborated with development teams to test production systems and validate network behavior under load
Network Engineer
Apple INC.
Newark, CA
01.2017 - 09.2018
- Supported 24/7 production data center network operations, ensuring secure and reliable connectivity
- Implemented and enforced network security policies and traffic filtering mechanisms
- Troubleshot complex multi-vendor environments including Cisco, Juniper, and Palo Alto firewalls
- Diagnosed and resolved issues related to routing, DNS, DHCP, VPN, and application connectivity
- Contributed to network performance improvements and system reliability through proactive monitoring and optimization
Network Administrator
Sachi Power System and Network Communication
02.2013 - 12.2014
- Worked interactively with customers to understand problems and develop network infrastructure solution in cloud environment.
- Assisted senior network test engineer in implementing network features and automated test cases.
- Handle responsibilities of applying testing methodologies for testing various networking platforms for automation purpose.
- Provided IPsec VPN based solutions to end customers for secure connectivity between end devices and data centers.
- Configured VLAN, OSPF, Sub-netting, EIGRP, BGP, VTP, spanning tree, IP
Network Associate
Coblence IT Solutions Pvt Ltd.
04.2012 - 01.2013
- Handling, installing, testing, troubleshooting and commissioning RF (2.4 GHz and 5.8 GHz) and OFC link.
- Worked on layer 3 and layer 2 CISCO switches to troubleshoot network issue.
- Responsible for handling network cables which includes termination and testing cables.
- Responsible for establishment of VPN tunnel and troubleshooting network issues regarding it.
- Identified technical problems and debugging hardware and software related to LAN and WAN.
- Monitored enterprise network security by reviewing alerts generated by IDS Applications and configuring Juniper firewall.
Education
Master of Science - Computer Science
NEW YORK INSTITUTE OF TECHNOLOGY
New York, NY08-2016
Electronics and Telecommunication
G H RAISONI COLLEGE OF ENGINEERING
Nagpur, India05-2012
Skills
Networking & Protocols:
TCP/IP, BGP, OSPF, MPLS, DNS, DHCP, HTTP/S, NAT, VLAN, STP/RSTP, VRRP
Network Security:
Firewall, ACLs, VPN (IPsec/SSL), IDS/IPS, Threat Prevention, URL Filtering, Decryption, DLP, Global Protect, Decryption
Advanced Security Concepts:
Network Security Architecture, Zero Trust Principles, Traffic Segmentation, Threat Detection, Vulnerability Mitigation
Traffic Analysis & Troubleshooting:
Wireshark, TCPDump, packet-level debugging, RCA, performance analysis
Cloud & Automation:
Python, Ansible, Linux (CentOS/Ubuntu), VMware, ESXi, AWS, Terraform
Certification
PCNSE, CCNP
Timeline
Senior Designated Network Security Engineer
Palo Alto Networks
01.2022 - Current
Network Engineer
Broadcom
10.2018 - 12.2021
Network Engineer
Apple INC.
01.2017 - 09.2018
Network Administrator
Sachi Power System and Network Communication
02.2013 - 12.2014
Network Associate
Coblence IT Solutions Pvt Ltd.
04.2012 - 01.2013
Electronics and Telecommunication
G H RAISONI COLLEGE OF ENGINEERING
Master of Science - Computer Science
NEW YORK INSTITUTE OF TECHNOLOGY