Navraj S.

🌐 Navraj Singh – Senior Network & Cloud Security Architect & Consultant 🌐 About Me Network & Cloud Security Architect with 11+ years delivering zero-trust, high-availability solutions for global enterprises. Expert in designing, deploying, and optimizing complex hybrid networks—leveraging advanced routing (BGP, OSPF, EIGRP), enterprise firewalls, SD-WAN, SASE/CASB and Infrastructure as Code—to reduce risk and accelerate performance. 🛠 Core Expertise Network & Cloud Design: Campus/DC (ACI, VXLAN/EVPN), AWS (VPC/Transit Gateway/Direct Connect), Azure (vWAN, ExpressRoute) Zero Trust & SASE: Palo Alto Prisma Access, Cloudflare Zero Trust, Zscaler ZIA/ZPA/ZDX, RBI/SSL proxy Next-Gen Firewalls & Migration: Palo Alto (PAN-OS, Panorama, CN-Series), FortiGate SD-WAN (NSE4), Cisco Firepower/ASA; policy consolidations SD-WAN: FortiGate, PAN OS & CloudGenix, Meraki, Velocloud Cloud Security & CASB: Prisma CASB, Microsoft Defender for Cloud Apps, AWS GuardDuty, Azure Security Center Policy & Optimization: AlgoSec & FireMon audits, segmentation, rule-base rationalization IAM & NAC: Cisco ISE, Aruba ClearPass, MFA, RBAC Automation & DevSecOps: Terraform, Ansible, Python, CI/CD pipelines Container Security: NSX-T, Calico/Cilium, Istio mTLS, CN-Series on EKS/AKS Load Balancing: F5 LTM/ASM, Azure ALB, AWS ALB/NLB Monitoring & Hunting: NetFlow, Splunk, ELK, CloudWatch, SOAR integration 💼 Career Highlights SASE & Zero-Trust Lead: Deployed Prisma Access & Cloudflare for 10 K users—cut branch firewalls by 60%, MTTR by 40% Cloud Network Modernization: Architected AWS Transit Gateway & Azure vWAN/ALB with Palo Alto & FortiGate SD-WAN—achieved 99.99% uptime Firewall Consolidation: Migrated 100,000+ policies in a large financial institution; pruned 45% of stale rules via AlgoSec/FireMon, boosting throughput 30% IaC Automation: Built Terraform/Ansible pipelines enforcing CIS benchmarks—40% faster deployments Micro-Segmentation: Enforced Calico/Cilium policies & Istio mTLS on clusters; integrated CN-Series firewalls for granular segmentation 🎯 Certifications & Clearances AZ-700: Azure Network Engineer | AWS Advanced Networking – Specialty | Fortinet NSE4 | PCNSE | CCNP | CCNA | Certified Kubernetes Security Specialist (CKS) – in progress Reliability Security Clearance | Controlled Goods Program (CGP) 📢 Let’s Connect Seeking contract roles in network security architecture, SASE, and cloud networking. I combine deep hands-on expertise, automation mastery, and strategic vision to build resilient, secure networks—on time and within budget.