Mohan Gurram

Designed and deployed large-scale campus and warehouse LAN/WLAN architectures including VLAN segmentation, VRFs, VPC, MSTP, EtherChannel, BGP, OSPF, MPLS, and EVPN-VXLAN fabrics to support high-density enterprise and IoT connectivity. Led enterprise NAC strategy using Aruba ClearPass and Cisco ISE, enforcing 802.1X (EAP-TLS/PEAP), RADIUS, TACACS+, certificate-based authentication, and dynamic role-based access policies across wired, wireless, and IoT endpoints. Implemented Zero Trust Network Access (ZTNA) using Zscaler Private Access (ZPA), eliminating legacy VPN dependencies and integrating identity-aware, posture-based authentication with Azure AD, MFA, and device trust frameworks. Hardened enterprise security posture by deploying and migrating next-generation firewalls (Palo Alto, Fortinet, Cisco ASA), implementing App-ID, User-ID, SSL Decryption, IPS/IDS, URL filtering, GlobalProtect, Site-to-Site IPsec, and DMVPN solutions. Implemented Azure Application Gateway with WAF for SSL offloading, path-based routing, load balancing, and Layer 7 protection of enterprise web and IoT workloads. Built and optimized enterprise wireless networks (802.11 a/b/g/n/ac/ax) using Aruba and Cisco controllers, performing RF planning, roaming optimization, MU-MIMO/OFDMA validation, and high-density warehouse tuning. Designed and supported SD-WAN solutions (Cisco Viptela, Versa, SilverPeak) implementing application-aware routing, QoS policies, traffic shaping, and centralized orchestration for branch optimization. Deployed and managed F5 BIG-IP (LTM/GTM) and A10 load balancers for SSL offload, VIP/WIP configuration, iRules, traffic steering, and high-availability failover. Leveraged monitoring and analytics tools (SolarWinds, Splunk, NetFlow, Wireshark, Azure Monitor) to proactively detect anomalies, reduce MTTR, and maintain SLA-driven performance standards.

Led Azure enterprise landing zones utilizing a secure hub-and-spoke VNet topology, defining segmentation strategy with granular subnetting, NSGs, UDRs, and service endpoints. Integrated hybrid connectivity through Cisco ISR/ASR edge routers leveraging BGP for resilient, policy-controlled communication between on-prem State data centers and Azure workloads. Led the design and operationalization of Cisco ACI-based data center fabrics, implementing multi-tenant segmentation using Bridge Domains, EPGs, VLAN pools, and APIC-driven policy models. Standardized application-centric infrastructure to support inter-agency isolation, compliance mandates, and scalable east-west traffic control across mission-critical environments. Spearheaded the statewide implementation of Zscaler Private Access (ZPA) to transition agencies from legacy VPN architectures to a full Zero Trust Network Access (ZTNA) framework. Enabled identity-driven, application-level segmentation eliminating network-based exposure while improving secure remote access for distributed state workforce. Directed integration of ZPA with enterprise identity ecosystems including Azure AD, Active Directory, MFA, and device posture validation controls. Supported hybrid application access across on-prem, Azure, and SaaS platforms, strengthening compliance posture and audit readiness across multi-agency State of Missouri environments. Engineered ClearPass integrations with Cisco ISE, PKI, Active Directory, and enterprise MDM platforms (AirWatch, XenMobile) to enable secure BYOD onboarding, automated certificate provisioning, and posture-driven access decisions. Architected Azure Firewall deployments utilizing application rules, DNAT/SNAT policies, threat intelligence filtering, and centralized diagnostics logging. Integrated telemetry with Azure Monitor and Log Analytics to provide real-time traffic visibility, incident correlation, and compliance reporting for state security operations.

Designed and deployed Azure VNets and subnets with NSGs and route tables, integrating with Cisco Nexus and Palo Alto firewalls to ensure secure hybrid connectivity between on-prem and cloud workloads. Configured Azure Firewall policies with DNAT, application, and network rules, routing traffic through centralized inspection points and exporting flow logs to Azure Monitor for threat analysis. Established Azure Site-to-Site VPN gateways and ExpressRoute circuits to connect data centers and airline applications, implementing BGP routing and failover mechanisms for resilient connectivity. Implemented Azure Application Gateway with Web Application Firewall (WAF) to secure enterprise APIs and SAP services, enabling SSL termination and session-based load distribution. Automated route table propagation and NSG configuration through PowerShell and Azure CLI, enhancing network consistency and reducing operational overhead during environment scaling.

Designed and configured Azure VNets with subnet segmentation, NSGs, and custom route tables, integrating with Cisco ASA and Juniper SRX firewalls to secure inter-site and hybrid traffic. Implemented Azure Firewall and Application Gateway with WAF, enabling centralized inspection, SSL offload, and path-based routing for enterprise web and application workloads. Deployed Azure Site-to-Site VPN and ExpressRoute connections to extend on-prem data centers into Azure, leveraging BGP for dynamic route exchange and failover resiliency. Automated NSG and routing updates via PowerShell and Azure CLI, streamlining change management in alignment with ITIL processes and reducing configuration drift. Enabled Azure Network Watcher and NSG flow logs to monitor latency, packet drops, and policy compliance, integrating data with SolarWinds and PRTG for unified visibility across environments.

Delivered Tier 2/3 operational support for enterprise LAN, WAN, SD-WAN, and wireless infrastructures, diagnosing and resolving complex incidents to maintain optimal uptime and performance. Configured, upgraded, and supported Cisco routers (7600, ASR 1000, 2600 series) and switches (3850, 4500, 6509), ensuring backbone stability, IOS consistency, and seamless 802.1X integration with Cisco ISE. Designed and implemented campus LAN and data center networks leveraging Cisco Catalyst, Meraki, and Aruba infrastructure with VLAN segmentation, HSRP failover, and inter-VLAN routing for redundancy. Administered firewalls and VPN solutions using FortiGate, Cisco ASA, and Juniper SRX, integrating with Cisco ISE, Aruba ClearPass, and Zscaler to enforce secure remote access and NAC policies. Deployed and optimized Aruba wireless solutions with indoor/outdoor APs (225–535 series), conducted predictive and on-site surveys, and developed guest portal authentication for enterprise WLAN access.