Shankar Maheswaran

About Shankar Maheswaran

Cloud/Network solutions architect in Deloitte’s Advisory service line to help design and implement multi-cloud solutions on AWS, GCP, and Azure platforms- Develop Cloud Solution to support Application and client requirements across multiple service areas- Key contributor within HealthCare service line for MGW-VPN, GWLB active/active – Palo Alto and drive multiple external/internal Cloud deals- Managing several deliverables and working with Consulting, FMS, Internal GPS, Cyber Security needs and US Delivery Center, California as well as US India resources- Develop Cost estimates for Cloud Managed Services which includes gathering business and technical requirements, developing AWS based solution architecture, putting together cost estimates for one-time build and monthly recurring fees- Review compliance and security requirements, SLA, and SOW- Led the team responsible for onboarding a client to migrate the organization’s reporting systems from On-premises to AWS Cloud- Design and Implement Network Configurations across Data Center and Cloud platforms- Design and Implement Infrastructure Security Solutions across using Palo Alto in Production for multiple clients- On-perm to AWS complete migration (government project - USA)- AWS - EC2, iAM, VM-300,700 (Palo Alto)- AWS - VPC, VPC peering, Transit Gateway, Transit gateway attachment, VPN, Route 53- AWS - Cloud front template, WAF, Network load balancer (TCP/UDP), Application load balancer (Http/Https)- AWS - API gateway, Lambda functions scripting (python), NAT gateway, iGateway, SG, Rules, S3- AWS flow architecture, Design work flow- Certified in AWS advanced network specialty and solution architect professional - Win server 2012 R2 - LDAP, User-id agent setup- Apache tomcat server and Nginx server (Cert CA creation/revocation PKCS12, PEM)- Prisma SASE- Cortex data lake- Network Automation - Ansible | Python- Firewall concepts and Palo Alto Networks Internal Architecture- VPN: IPSec and SSL- High Availability: Active-Passive and Active-Active- User Identification: Agent and Agentless, XML API- Certificate Management, Threat Prevention, URL Filtering, Data Filtering, QoS- Log Forwarding to external servers- Decryption: Forward proxy and Inbound Decryption- Authentication: LDAP, Radius- Protocols: TCP, IP, HTTP, SSL, DNS, DHCP, OSPF- GCPProject implemented:Georgia, USACalifornia, USASingaporeEurope (Scandinavian countries)Miami, USAVictoria, CanadaFreeport, BahamasVancouver, C••••••••@gmail.com

Experience

1. Specialist Master (Manager) Gps Practice Cyber Infra

   Deloitte

   Jun 2024 — Present · Sacramento, CA, US

   An experienced network security professional with network and multi-cloud security architecture and consulting / advisory experience. Highly proficient in architecting solutions to mitigate cyber security risks, reduce attack surface and ensure compliance to the legal and regulatory frameworks. Very good knowledge of Multi-Cloud Network connectivity, Cloud Security products, Native Cloud Controls, on-premises security stack. Deep technical know-how and experience in designingand implementing Cloud Security solutions, Microsoft Azure, Amazon AWS, and Google Cloud technologies, including the broader areas of Enterprise, Mobility and Security suite. Experience in performing reviews of cloud services, cloud-based applications, and data security to ensure strong security posture, compliance with policies and standards. Technical expertise in providing Security Architecture functions during the full lifecycle of cloud security solution evaluation,recommendation, testing, installation, and rollout. Good understanding of security architecture frameworks, security compliance standards and benchmarks – ISO 27001, NIST, CMS, IRS, GDPR, etc.

Education

• Paavai Engineering College

  Master of Science - MS, Software Engineering

• Anna University Chennai

  Master of Science - MS, Software Engineering