Ramani M

Sr Network Engineer @Fidelity Investments

Boston, MA, US

Designed and deployed multi-tenant firewall infrastructure using Palo Alto PA-5250 clusters with active-active HA, threat prevention, URL filtering, and DNS security integrated with Panorama and SIEM (Splunk/QRadar) for full telemetry.• Defined and enforced Zero Trust policies using Cisco ISE (posture, profiling, Radius) across wired/wireless segments segmented user/device traffic using SGTs and TrustSec tagging.• Automated firewall rulebase lifecycle (creation, review, removal) using Terraform, Ansible, and GitLab pipelines reduced change cycles and minimized rule bloat across over 200 zones.• Integrated Prisma Cloud for real-time visibility into cloud misconfigurations, container risks, and IAM policies automated remediation with Python and Sentinel policies.• Built SD-WAN overlays with Fortinet Secure SD-WAN (FG-100F to configuring path selection, SLA-based routing, and IPSec tunnels to branch offices and Azure edge zones.• Led the migration of legacy firewalls (Checkpoint R80, Cisco ASA) to next-gen platforms, consolidating rules, NATs, and interfaces while preserving operational uptime.• Tuned alert rules in Splunk and QRadar by correlating Palo Alto logs, ISE events, and VPN activity contributed to SOAR integration workflows.• Authored network security standards (naming, tagging, ACL baselines) and enforced policy adherence during reviews and audits.• Deployed F5 BIG-IP LTM and DNS (GTM) for internal/external app traffic configured SSL offload, cookie persistence, and global load balancing. Environment: FortiGate 40F–3200F, Palo Alto PA-3k/7k, Cisco ASA/FTD 4100, Zscaler ZIA/ZPA, Cisco ACI, Panorama, vEdge F5 GTM/LTM/VIPRION, Cisco ISE, Infoblox, AWS (SG, NACL, TGW, WAF), Terraform, Ansible, Python, Git, Splunk, QRadar, ServiceNow, SolarWinds

University of South Alabama

Master's degree

GITAM Deemed University

Bachelor's degree