Pramodh T

Experience

1. Senior Network Security Engineer

   American Airlines

   Dec 2023 — Present · TX, US

   Designed and implemented secure network architectures on Azure, utilizing Virtual Networks (VNets), Network Security Groups (NSGs), and Application Gateway for segmentation and traffic filtering.• Engineered secure hybrid connectivity using Azure VPN Gateway and ExpressRoute. Integrated Azure AD with third-party IdPs (Okta) using OAuth 2.0 for seamless SSO and secure access.• Implemented scalable and secure VPN architecture (AnyConnect, FortiClient) with certificate-based authentication, MFA, and split tunneling, reducing helpdesk tickets by 35%.• Implemented Azure Firewall, WAF, Azure DDoS Protection, and RBAC to safeguard applications and enforce least privilege access.• Built automated incident response workflows using Azure Logic Apps and Azure Automation, reducing mean time to respond (MTTR).• Enabled MFA and Managed Identities to enforce authentication and identity-based security.• Leveraged Azure Sentinel and Splunk for centralized log collection, threat correlation, and incident detection.• Automated network and security tasks using Python and PowerShell.• Used Ansible and Terraform for infrastructure-as-code (IaC), provisioning secure environments and standardizing firewall and SIEM configurations. Integrated tools via REST APIs to streamline security operations.• Deployed and managed Next-Generation Firewalls (NGFWs) with advanced features including Deep Packet Inspection (DPI), Application Control, and Intrusion Prevention Systems (IPS) using Cisco ASA/Firepower, Palo Alto Networks, Fortinet FortiGate, and Juniper SRX.• Implemented Cisco ISE, TACACS+, and RADIUS for network access control, policy enforcement, and device authentication.• Conducted regular internal and external scans using OpenVAS, Nessus, Qualys, Tenable.sc, and Rapid7 InsightVM.• Tuned Snort for customized IDS rule sets and managed Palo Alto Threat Prevention (AV, spyware, vuln protection) to block malicious traffic.