Aasrita Veeragandham

About Aasrita Veeragandham

Senior Network Security Engineer with 6+ years of hands-on experience designing and…

Experience

1. Senior Network Security Engineer

   Tsys

   Dec 2023 — Present · Atlanta, GA, US

   Designed and deployed multi-layer network security architecture using Palo Alto, Fortinet, and Cisco Firepower, improving the company’s cyber defense posture.• Configured and maintained FortiGate 4800F and 3500F firewalls with IPS/IDS, SSL inspection, and VPN tunnels for secure WAN communications.• Automated network configuration management using Ansible and Netmiko, reducing manual provisioning time by 50%.• Administered ACI fabric operations, handling VLAN provisioning, endpoint automation, and fabric health validation.• Optimized Palo Alto PA-5410/7050 with content filtering, DoS protection, and policy tuning, enhancing edge security reliability.• Integrated Cisco ISE Profiler for dynamic NAC, enforcing device-based access policies across campus and datacenter networks.• Implemented F5 Viprion LTM/GTM load balancers for application availability and SSL offloading, ensuring high transaction throughput.• Deployed Infoblox DNS Firewall to block DNS-based attacks and prevent malicious outbound queries.• Designed and maintained dual-stack IPv4/IPv6 environment to support future-ready network scalability.• Configured MPLS backbone connectivity using Cisco ASR 9010/9006 routers for global site interconnects.• Deployed Firepower 4245/3140 appliances, optimizing access rules to minimize attack surface.• Integrated vSmart and vBond controllers for SD-WAN overlay orchestration, achieving 99.9% link uptime.• Implemented AWS CloudWatch alarms and Route 53 health checks for proactive incident response.• Developed Python scripts to analyze packet payloads and automate anomaly detection within traffic flows.• Streamlined configuration backups and compliance checks using Netmiko scripts integrated into Jenkins pipeline.• Collaborated with Linux, VMware, and storage teams to optimize VLANs, routing, and ACLs in Nexus series.• Performed FortiManager deployments for centralized configuration and reporting.