Vamshi Krishna

• Configured policies in Palo Alto PA-5450, PA-5820 and PA-3220, and implemented User-Id, App-ID. • Implemented security policy automation using Dynamic Address Groups and Tags that automatically updated Palo Alto firewall rules. • Used Palo Alto Panorama to manage global shared policies, templates and device groups for centralized control across multi-site deployments. • Configured SSL/TLS decryption policies in Cisco Firepower FTD for encrypted traffic inspection, ensuring compliance with internal data security policies. • Managed Layer 2 and Layer 2 services on Arista switches, including routing, access control lists (ACLs), and virtual LANs (VLANs). • Supported team to implement M-LAG (Multi-Chassis Link Aggregation) on Arista 7300 switches for high availability between leaf switches and core network nodes. • Developed standardized security protocols, minimized risks on remote networks SD-WAN. • Involved in application-aware routing on VIPTELA vEdge devices to dynamically select optimal paths based on latency, loss, and jitter metrics. • Used Python libraries to automate pre and post validation checks for overlay tunnels routing adjacencies and interface health on VIPTELA vEdge routers. • Supported team on configure Cisco Meraki 802.1X, MAB for both wired and wireless endpoints. • Used RADIUS-based authentication for VPN users via AnyConnect, providing centralized user authentication and logging through ISE. • Maintained DNS services on INFOBLOX, managing domain names, records and resolving queries. • Set up AWS CloudTrail and AWS Config to continuously log, audit, and track changes in security groups, IAM roles, and VPC configurations for compliance. • Implemented dynamic routing protocols (BGP, OSPF) on Cisco Firepower FTD appliances. • Assisted in threat detection and mitigation by monitoring and analyzing security logs and alerts generated by vSmart controllers.

• Implemented security zones and interzone policies on Palo Alto PA-5410, PA-3430 and PA-1420 series firewalls. • Conducted UAT (User Acceptance Testing) and post-migration validation, ensuring traffic inspection, NAT, and VPN sessions were functioning as designed. • Troubleshot session drops, traffic asymmetry, and latency using ACC packet capture in Palo Alto. • Automated Palo Alto VM-Series firewall deployments using Terraform with PAN-OS. • Built customized dashboards and reports in Palo Alto Panorama M-500 for executives and compliance teams, including user activity, threat visibility and bandwidth utilization. • Involved in troubleshooting VPN connectivity issues and performance bottlenecks using Fortinet Firewall (FortiGate200F and FortiGate1000F) Logs. • Used FortiAnalyzer and FortiManager for centralized policy management, log analysis, and audit reporting across distributed FortiGate environments. • Configured Cisco Nexus 9k and 7k switches and created control plane policies. • Monitored fabric health scores, leaf-spine connectivity, and endpoint learning issues using APIC on Cisco ACI environments. • Implemented automation workflows within Cisco ACI to streamline the provisioning and management of L4-L7 Services. • Enhanced network segmentation and tenant isolation using VXLAN mapped to VRFs and enforced access control with ACLs and contracts. • Automated policy synchronization and firewall health monitoring using Palo Alto STRATA Cloud APIs. • Implemented TACACS+ authentication on network devices through ISE. • Defined and enforced security policies on the INFOBLOX Grid. • Coordinated with cloud security teams to integrate Prisma SD-WAN and Prisma Access (ZTP+ZIA).