Shantanu Dorve
Summary
Network Security Engineer with 10+ years of experience designing, securing, and troubleshooting large-scale enterprise and cloud network infrastructures. Deep expertise in TCP/IP, routing, firewall technologies, and packet-level analysis, with growing specialization in cloud security, Zero Trust architecture, and secure network design for distributed systems. Proven ability to lead high-impact incident investigations and design resilient, secure infrastructure.
Overview
1
1
Certification
14
14
years of professional experience
Work History
Senior Designated Network Security Engineer
Palo Alto Networks
01.2022 - Current
- Designed and optimized network security architectures for enterprise customers, ensuring secure traffic flow across hybrid and cloud environments.
- Design and review Zero Trust network-security architectures using Palo Alto Networks NGFW, Panorama, Prisma Access, GlobalProtect, identity-based access controls, threat modeling, vulnerability assessment, network segmentation, and least-privilege security policies.
- Own complex firewall and SASE engagements involving security-policy architecture, NAT, URL filtering, SSL/TLS decryption, threat prevention, DLP, User-ID, application identification, routing, and secure traffic inspection.
- Architect and troubleshoot highly available remote-access solutions using GlobalProtect, Prisma Access, IPsec tunnels, SAML authentication, Microsoft Entra ID, certificates, and identity-aware access policies.
- Led high-severity production investigations to identify root causes of TCP retransmissions, asymmetric routing, NAT behavior, SSL decryption issues, session exhaustion, routing failures, application-layer resets, authentication failures, and performance degradation.
- Perform packet-level traffic analysis using Wireshark, tcpdump, firewall packet captures, session tables, routing information, and platform counters to isolate failures across clients, networks, security controls, and applications.
- Supported 802.1X and certificate-based Network Access Control initiatives for wired and wireless environments, helping validate authentication flows, certificate trust, identity mapping, access policies, and network segmentation requirements.
- Led cross-functional initiatives involving Product Engineering, Software engineering, SRE, IT, network teams, and security stakeholders, driving decisions from problem identification through design, implementation, validation, and operational handoff.
- Provided architectural guidance for securing AWS workloads, enhancing VPC segmentation, routing, private connectivity, firewall inspection, NAT, east-west traffic controls, and secure access between AWS and on-premises environments.
- Develop automation using Python, Terraform, Ansible, Jenkins, Netmiko, and Palo Alto Networks APIs to improve configuration consistency, security-policy deployment, validation workflows, and operational efficiency.
- Conducted proactive security and configuration reviews to identify policy gaps, routing risks, insecure configurations, product defects, capacity constraints, and opportunities for resiliency improvements.
- Lead root-cause analyses for major incidents and produce clear technical findings, remediation plans, preventive controls, and operational recommendations for engineering and executive stakeholders.
- Evaluated emerging automation and LLM-assisted workflows for incident summarization, configuration analysis, knowledge retrieval, and repetitive network-security operations.
- Mentor engineers on advanced network-security troubleshooting, packet analysis, GlobalProtect, Prisma Access, routing, firewall policy, automation, and systematic incident investigation.
Network Engineer
Broadcom
10.2018 - 12.2021
- Designed and maintained network infrastructure across data center and cloud-integrated environments, supporting high availability applications.
- Implemented network segmentation, firewall controls, VLAN architecture, VPN connectivity, BGP and OSPF routing, access policies, and secure connectivity between enterprise, data-center environments and AWS workloads.
- Automated network compliance and operational workflows using Python, improving efficiency and reducing manual errors.
- Troubleshot large-scale connectivity and performance issues involving TCP, DNS, HTTP, and application-layer traffic.
- Collaborated with network, endpoint, and identity teams to troubleshoot 802.1X authentication failures, certificate issues, RADIUS communication, supplicant configuration, and incorrect network-access assignments.
- Strengthened system security by identifying and remediating vulnerabilities and misconfigurations, reducing risk exposure.
- Participated in architecture planning and migration of network environments, improving scalability and reliability.
- Collaborated with development teams to test production systems and validate network behavior under load.
Network Engineer
Apple INC.
01.2017 - 09.2018
- Supported 24/7 production data center network operations, ensuring secure and reliable connectivity
- Implemented and enforced network security policies and traffic filtering mechanisms
- Troubleshot complex multi-vendor environments including Cisco, Juniper, and Palo Alto firewalls
- Diagnosed and resolved issues related to routing, DNS, DHCP, VPN, and application connectivity
- Contributed to network performance improvements and system reliability through proactive monitoring and optimization
Network Administrator
Sachi Power System and Network Communication
02.2013 - 12.2014
- Worked interactively with customers to understand problems and develop network infrastructure solution in cloud environment.
- Assisted senior network test engineer in implementing network features and automated test cases.
- Handle responsibilities of applying testing methodologies for testing various networking platforms for automation purpose.
- Provided IPsec VPN based solutions to end customers for secure connectivity between end devices and data centers.
- Configured VLAN, OSPF, Sub-netting, EIGRP, BGP, VTP, spanning tree, IP
Network Associate
Coblence IT Solutions Pvt Ltd.
04.2012 - 01.2013
- Handling, installing, testing, troubleshooting and commissioning RF (2.4 GHz and 5.8 GHz) and OFC link.
- Worked on layer 3 and layer 2 CISCO switches to troubleshoot network issue.
- Responsible for handling network cables which includes termination and testing cables.
- Responsible for establishment of VPN tunnel and troubleshooting network issues regarding it.
- Identified technical problems and debugging hardware and software related to LAN and WAN.
- Monitored enterprise network security by reviewing alerts generated by IDS Applications and configuring Juniper firewall.
Education
Master of Science - Computer Science
NEW YORK INSTITUTE OF TECHNOLOGY
New York, NY08-2016
Electronics and Telecommunication
G H RAISONI COLLEGE OF ENGINEERING
Nagpur, India05-2012
Skills
,,,,,,,,,
Python, Ansible, Linux, VMware, ESXi, AWS, Terraform, Jenkins
Cloud & Automation:
Wireshark, TCPDump, packet-level debugging, RCA, performance analysis, Sonic, Grafana, Splunk
Traffic Analysis & Troubleshooting:
Network Security Architecture, Zero Trust Principles, Traffic Segmentation, Threat Detection, Vulnerability Mitigation, SASE
Advanced Security Concepts:
Firewall, ACLs, VPN (IPsec/SSL), IDS/IPS, Threat Prevention, URL Filtering, Decryption, DLP, Global Protect, Decryption, DNS security
Network Security:
TCP/IP, BGP, OSPF, MPLS, DNS, DHCP, HTTP/S, NAT, VLAN, STP/RSTP, VRRP
Networking & Protocols:
Certification
PCNSE, CCNP
Timeline
Senior Designated Network Security Engineer
Palo Alto Networks
01.2022 - Current
Network Engineer
Broadcom
10.2018 - 12.2021
Network Engineer
Apple INC.
01.2017 - 09.2018
Network Administrator
Sachi Power System and Network Communication
02.2013 - 12.2014
Network Associate
Coblence IT Solutions Pvt Ltd.
04.2012 - 01.2013
Master of Science - Computer Science
NEW YORK INSTITUTE OF TECHNOLOGY
Electronics and Telecommunication
G H RAISONI COLLEGE OF ENGINEERING