Rupesh

About Rupesh

I am a Network Automation Engineer with over 10 years of experience designing, deploying, and securing enterprise and data center networks. My background spans routing, switching, firewalls, load balancing, wireless, and cloud networking, with a strong focus on building scalable, high-availability solutions.I’ve led data center refreshes, campus redevelopment projects, firewall migrations, and SD-WAN deployments, ensuring seamless transitions and optimized performance. Skilled across Cisco, Juniper, Palo Alto, Fortinet, F5, SonicWall, Aruba, and Extreme, I bring deep expertise in both traditional and next-generation network technologies.In addition, I have hands-on experience with cloud and hybrid networking—including AWS, Azure, and GCP—implementing secure connectivity through VPCs, VNets, Direct Connect, ExpressRoute, Zscaler, and Aviatrix. My work often blends automation and orchestration (Terraform, Ansible, Python, Chef) to streamline deployments and enforce security/compliance standards.

Experience

1. Network Automation Engineer

   Mastercard

   Mar 2023 — Present · St. Louis, MO, US

   Migration of ASA firewalls to PA next gen Firewalls using migration tool in PA. Migrated all IPSEC tunnels, ACL’s, NAT rules and policies.Palo Alto design and installation (Application and URL filtering, SSL decryption, SSL Forward Proxy). Configured and maintained IPSEC and SSL VPNs on Palo Alto Firewalls. Successfully installed series firewalls in Data Center as perimeter Firewalls.Spec, design & configure all Fortinet firewalls.Designing and implementing AWS network architectures, including Virtual Private Clouds (VPCs), subnets, routing tables, and network security groups. This involves understanding AWS networking services such as Amazon VPC, Direct Connect, Transit Gateway, and VPN.Designing SD-WAN solutions involves understanding business requirements, network topology, and selecting appropriate technologies and vendors. This requires a deep understanding of networking principles and how SD-WAN fits into the broader network infrastructure.Implementing Aruba SD-Branch SD-WAN involves deploying Aruba gateways, controllers, and access points across distributed sites. Integration with existing network infrastructure, including switches and routers, is crucial for seamless operation.Designing and configuring Azure VNets to provide isolated network environments for Azure resources. This includes defining address spaces, subnetting, and configuring network security groups (NSGs) to control inbound and outbound traffic.Deploying and configuring Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) to secure internet-bound traffic and provide secure remote access to applications hosted in data centers or cloud environments. This includes configuring policies for web filtering, data loss prevention (DLP), and threat prevention.