Neeraj Madasu

About Neeraj Madasu

I am a Senior Network and Cloud Security Engineer with over 10+ years of experience designing, implementing, and supporting enterprise network and security solutions across financial services, telecommunications, government, and consulting environments. I have worked across the full infrastructure lifecycle—from requirements gathering and architecture design to implementation, optimization, and production support—collaborating closely with application, cloud, security, and operations teams. I have extensive experience working in enterprise and Agile-driven environments and value clear communication, teamwork, and operational excellence.My core strength is network and security architecture, where I design and implement secure, scalable hybrid and multi-cloud environments spanning AWS, Azure, and on-premises data centers. I have deep hands-on experience with routing, switching, and WAN technologies, including BGP, OSPF, MPLS, EVPN, VXLAN, and SD-WAN, ensuring high availability, performance, and resilience. I specialize in implementing Zero Trust and modern perimeter security models, securing user access, applications, and critical infrastructure.I have extensive experience deploying and managing next-generation firewalls and security platforms, including Fortinet, Palo Alto Networks, Cisco Firepower, and F5 BIG-IP, focusing on policy design, threat prevention, VPN connectivity, and application security. I have implemented site-to-site and remote access VPNs, enforced segmentation and least-privilege access, and supported secure connectivity between cloud and on-prem environments. I also have hands-on experience with load balancers, WAFs, DDoS protection, and secure web gateways to protect internet-facing applications.I am comfortable working with automation and infrastructure as code, using tools such as Terraform, Ansible, and Python to streamline deployments, reduce manual effort, and improve consistency. I have supported monitoring, logging, and incident response using enterprise tools and cloud-native services, and I am experienced in troubleshooting complex production issues and providing Tier-3 escalation support.Beyond hands-on engineering, I enjoy mentoring junior engineers, participating in design reviews, documenting architectures, and taking ownership of platform stability and security. I am dependable, adaptable, and motivated by building secure, resilient networks and security solutions that enable business growth and protect critical systems.

Experience

1. Senior Cloud Network Security Engineer

   Fiserv

   May 2021 — Present · Brookfield, WI, US

   Designed and secured large-scale hybrid cloud environments across AWS and Azure, applying Zero Trust, enterprise security standards, and least-privilege access to protect sensitive financial data. Led deployment of F5 Advanced WAF, Azure/F5 Load Balancers, and DDoS protection (FortiDDoS, Azure DDoS Protection) to defend client-facing applications from OWASP Top 10 threats while ensuring high availability and performance.Engineered and operated high-performance networks using Juniper MX304 (MPLS, EVPN, SR, L3VPN), Juniper EX switches, and SRX firewall clusters, enabling secure segmentation with VRF, VXLAN, and micro-segmentation. Implemented next-generation firewall security using FortiGate, FortiManager, FortiWeb, FortiSandbox, FortiEMS, FortiSIEM, including IPS/IDS, NAT, SSL/TLS inspection, and DDoS mitigation.Automated firewall provisioning, Junos changes, log correlation, and compliance workflows using Python, Terraform, Ansible, and enforced IaC governance with Driftctl, TFLint, Terrascan. Integrated security testing into CI/CD pipelines using Checkov, Snyk, Open Policy Agent, Jenkins, GitLab CI, and Azure DevOps.Built SIEM/SOAR integrations with Splunk, FortiSIEM, Azure Security Center, AWS GuardDuty, Security Hub, enabling automated alerting, incident response, and audit-ready reporting. Secured hybrid connectivity via site-to-site VPN, ExpressRoute, BGP/OSPF, and implemented ZTNA, NAC, DLP, PKI, and secure web gateway solutions.Conducted vulnerability assessments and penetration testing using Nessus, Burp Suite, Metasploit, supported PCI DSS, SOX, GLBA, and delivered Tier-3 incident response, architecture documentation, and security workshops to strengthen SOC and engineering teams.

Education

• University of Madras

  Bachelor of Technology - BTech, Electrical, Electronics and Communications Engineering

  2008 — 2012