Bhanu Prakash

About Bhanu Prakash

I am a network engineer supporting multi-tenant infrastructure and developing integrations with network solutions. I have a deep understanding of network protocols, such as TCP/IP, DNS, DHCP, and Wi-Fi technologies, and experience in configuring and deploying switches, routers, and firewalls. I have worked on complex network and switching systems, ensuring smooth transmission of data and security of the network. I have also been involved in troubleshooting VPNs, VLANs, and IPsec tunnels, and escalating potential security incidents. I have collaborated with other engineers and technicians to resolve technical issues, following policies and procedures and using internal and external resources. I am passionate about learning new technologies and skills, and I am motivated by the impact of my work on the healthcare industry. I can bring diverse perspectives and experiences to the team, as I have worked in different telecom and IT companies in the past

Experience

1. Senior Network Security Engineer

   T-Mobile

   Jun 2024 — Present · NJ, US

   I am a highly experienced Network and Security Engineer with a deep-rooted passion for architecting, securing, and automating complex enterprise networks. My career spans a decade of hands-on delivery and strategic planning across Fortune 500 enterprises, mid-market infrastructure, and cloud-native environments. My expertise bridges traditional networking with modern DevSecOps and Zero Trust principles, supporting resilient, scalable, and compliant infrastructures across multi-vendor ecosystems.I’ve engineered multi-layered architectures utilizing advanced firewalls, access control, SD-WAN overlays, and automation pipelines to reduce human error, enhance visibility, and enforce policy at scale.I’ve led major firewall and routing transformations using Fortinet FortiGate v7, where I architected policy control, implemented zone-based security, and configured SSL inspection and web filtering for regulatory compliance. I established IPSec v3 VPN tunnels based on RFC 6071, with Protocols 50/51, and enabled dual-WAN failover scenarios across SD-WAN (Silver Peak v9 and Viptela v9) overlays—providing resilient, low-latency paths for remote site communications.Using Cisco ASA 5525-X, I implemented granular VPN filters, split tunneling policies, and pre-shared key rotations. These setups were monitored using IKEv2 logs and ports 500/4500. I extended ASA deployments with VLANs (10–299), spanning-tree root guards, and MAC filtering on core switch layers, particularly using interface ranges Gig0/1–Gig0/48 on Juniper EX switches.In Checkpoint R80.30, I deployed High Availability clusters, managed NAT and access rules via SmartConsole, and performed optimization of rulebases to manage traffic across common ports (TCP 22, 80, 443). Additionally, I enforced advanced threat prevention modules such as IPS, anti-bot, and URL filtering—aligning them with Zero Trust v3 policy requirements across Layer 3 zones.