Sai Vikas Diddi

About Sai Vikas Diddi

I bring over 6 years of hands-on experience in routing, switching, firewall technologies, and the design, implementation, and troubleshooting of complex enterprise network infrastructures. My expertise includes managing next-generation firewalls such as Palo Alto and series), Fortinet (60E, 100D, and and Cisco Firepower FTD, along with deploying Palo Alto VM-Series firewalls in AWS to secure cloud-native applications and workloads. I have strong Infrastructure as Code experience using Terraform and Ansible to deliver version-controlled, repeatable network deployments, and I apply DevOps and CI/CD principles to reduce manual errors and improve deployment consistency. I have supported HIPAA-compliant environments, ensuring network security controls align with regulatory requirements, and I am experienced in advanced network monitoring, proactive health checks, and alerting to maximize uptime and performance. My background also includes integrating FortiGate series firewalls with FortiAnalyzer for centralized logging and real-time visibility, specializing in data center networking with Cisco Nexus switches (9K, 7K, 5K, and 3K) and Aruba ClearPass appliances (500, 5K, and 25K), performing traffic analysis using Amazon VPC Flow Logs and AWS CloudWatch, designing and deploying Cisco Viptela SD-WAN architectures, and configuring Juniper MX series and a broad range of Cisco routers across enterprise and service provider environments.

Experience

1. Network Security Engineer

   Comcast

   Jan 2024 — Present · Kennedy Township, PA, US

   Migrated security policies, NAT rules, and VPN configurations from series to series firewalls while ensuring policy consistency.• Implemented adaptive security rules within Akamai WAF, automatically adjusting protection based on traffic patterns and threat intelligence.• Deployed Cisco FTD with advanced IPS features on Firepower 4140 to prevent and detect malicious activity.• Developed and enforced security policies aligned with NIST and CIS standards, ensuring compliance across on-premises and cloud networks.• Worked with other teams to implement role-based access control (RBAC) and security policies within Cisco ACI using the APIC, governing user access and enhancing data center security.• Implemented scaling strategies and optimizations within Prisma SD-WAN Access and Panorama.• Successfully deployed and configured Cisco Nexus switches, including Nexus 9k, 7k, and 5k series.• Deployed DNS Security Extensions (DNSSEC) using INFOBLOX to add a layer of security to DNS, preventing DNS spoofing and data tampering.• Integrated F5 BIG-IP APM with Azure Active Directory, enforcing Zero Trust authentication for enterprise applications.• Setting up and optimizing Azure EXPRESSROUTE and VPN Gateways for secure and reliable connectivity.

Education

• Aditya College Of Engineering & Technology

  Bachelor's degree

  2017 — 2021

• Rowan University

  Master of Science - MS, Cybersecurity