Kalpana K

As a Network Security Engineer at LTI Mindtree, I work with multi-vendor technologies like Palo Alto, Cisco ASA, and Checkpoint firewalls to manage and secure enterprise-level networks in global environments. My expertise lies in designing, configuring, and troubleshooting secure network systems while ensuring scalability, performance, and compliance. Key Responsibilities & Achievements: Optimized uptime and performance by designing and implementing LAN, WAN, and cloud network solutions. Configured and managed Palo Alto firewalls (PA-7000, PA-5000, PA-4000 series) using Panorama for centralized management, Threat Prevention, App-ID, and URL filtering. Managed Cisco ASA and Checkpoint firewalls with Tufin SecureChange and SecureTrack for rule provisioning, policy reviews, and migrations. Implemented NAT, VPN, and access control policies to secure hybrid environments and remote users. Integrated Cisco ISE for secure authentication and access control across wired and wireless networks. Configured and maintained F5 Load Balancers (LTM/GTM) with iRules scripting for redundancy and optimized traffic distribution. Performed firewall migrations from Cisco ASA to Palo Alto using the Palo Alto Migration Tool with zero downtime. Conducted log analysis and packet captures using Wireshark and Splunk for threat identification and troubleshooting. Created detailed network documentation and architecture diagrams using Visio for operational transparency. This role has strengthened my ability to collaborate with global teams, build scalable, secure network architectures, and leverage automation and monitoring tools to ensure network security, availability, and performance.

I was responsible for creating and managing secure, efficient global networks as a Network Security Engineer at Philips. I worked extensively with Palo Alto, Cisco ASA, and Checkpoint firewalls, focusing on rule migration, security policy management, and threat prevention. My contributions ensured that the enterprise network infrastructure remained scalable, reliable, and compliant. Key Responsibilities & Achievements: Implemented high-availability features, URL filtering, SSL decryption, and App-ID, and managed Palo Alto firewalls (PA-3000, PA-5000, and PA-7000 series). Oversaw firewall rule-set migrations from Cisco ASA to Palo Alto using advanced configuration and automation tools. Configured Cisco Nexus switches (7K/5K) and F5 LTM/GTM load balancers to ensure redundancy and optimize traffic flow. Designed and deployed VPNs, encryption protocols, and SSL decryption for secure remote connectivity. Created proactive threat visibility dashboards in Splunk and managed Infoblox DNS/DHCP systems for better monitoring and control. Collaborated with cross-functional teams to enhance global data protection, minimize downtime, and strengthen network resilience. This position enhanced my expertise in firewall migrations, network optimization, and multi-vendor security environments, while promoting secure, compliant, and scalable connectivity across enterprise operations.

As a Firewall Engineer at BNSF Railway, I was responsible for deploying, configuring, and managing Checkpoint, Cisco ASA, and Palo Alto firewalls across enterprise data centers. I ensured network security, maintained dependable VPN connectivity across multiple regions (US, EMEA, and APAC), and optimized overall firewall performance. Key Responsibilities & Achievements: Installed and configured Cisco ASA 5540 and Checkpoint R77.30 Gaia firewalls in large-scale data center environments. Designed and implemented security rules, site-to-site VPNs, and firewall policies across Checkpoint, Cisco ASA, and Palo Alto platforms. Managed Checkpoint VSX environments using Multi-Domain Security Management (Provider-1/MDM/MDS) for global operations. Utilized Tufin SecureApp, SecureChange, and SecureTrack for rule optimization and monitored logs through Splunk. Configured and troubleshot IKEv1/IKEv2 IPSec VPNs, AnyConnect SSL VPNs, and integrated RADIUS/LDAP for multi-factor authentication. Performed LAN/WAN performance analysis, vendor coordination, and Wireshark-based connectivity troubleshooting. Migrated IPSec VPN tunnels from pre-shared key to certificate-based authentication to enhance scalability and security. Configured and maintained F5 Viprion chassis, LTM/GTM load balancers, and DNS to ensure high application availability. Collaborated with ISPs worldwide to resolve BGP routing, WAN circuit, and Riverbed optimizer issues. This position enhanced my ability to manage enterprise-scale firewall infrastructures, troubleshoot multi-layer network issues, and ensure secure, reliable connectivity across distributed global environments.

As a Security Engineer at South Jersey Industries, I was responsible for maintaining and protecting network infrastructure across multiple client environments. I supported complex enterprise network security operations, deployed firewall and VPN solutions, and ensured 99.9% system uptime through proactive monitoring and troubleshooting. Key Responsibilities & Achievements: Configured and maintained Palo Alto, Cisco ASA, and Checkpoint firewalls to ensure secure and reliable network connectivity. Designed and implemented Site-to-Site, Remote Access, and AnyConnect VPNs for secure client communications. Performed packet analysis and firewall troubleshooting using tools such as Wireshark, TCPDump, and SmartView Tracker. Managed the full firewall lifecycle, including configuration, change control, incident response, and rule optimization. Utilized Splunk, FireMon, and SmartDashboard to analyze logs, identify risks, and enhance performance and security. Configured Juniper SRX and Netscreen SSG firewalls using NSM and CLI to implement advanced zone-based security policies. Designed and deployed VLANs, HSRP, and VTP to ensure network redundancy and stability. Collaborated with internal and external teams to enhance IT security posture and maintain regulatory compliance across environments. This role expanded my expertise in multi-vendor firewall administration, VPN architecture, and network security analysis, enabling me to deliver robust, scalable, and high-performing security solutions.

As a Network Engineer at AAA, I was responsible for designing, implementing, and maintaining secure enterprise network systems. I configured Cisco routers, Catalyst switches, and ASA firewalls, ensuring reliable connectivity and data protection across corporate environments. My work focused on LAN/WAN design, routing protocols, firewall configuration, and high-availability solutions. Key Responsibilities & Achievements: Configured and managed Cisco ASA 5505 / 5510 firewalls, including VPN setup, access lists, and security rule management. Planned and implemented corporate firewall architecture and maintained Checkpoint firewalls using SmartDashboard and SmartView Tracker. Installed, configured, and maintained Cisco routers and Catalyst switches for enterprise LAN/WAN connectivity. Troubleshot and optimized routing protocols such as OSPF, EIGRP, and BGP to improve performance and network reliability. Designed and implemented VLANs, Trunking, and Inter-VLAN routing to segment and secure network traffic. Resolved customer escalations related to STP, VLAN, and Layer 2/3 switching and developed troubleshooting guidelines for MPLS VPN networks. Monitored network health using tools such as SolarWinds and Wireshark for proactive issue detection and resolution. This role strengthened my ability to build and maintain secure, high-availability network infrastructures, enhance routing efficiency, and deliver consistent network performance across enterprise environments.