Ushasri Kallepu

Senior Network Security Engineer @CVS Health

Providence, RI, US

Deployed & managed 100+ FortiGate NGFWs (60–1800 series) across nationwide clinics using FortiManager & FortiAnalyzer for centralized policy and logging.• Tuned FortiGuard IPS, AV, DLP profiles, reducing false positives by 30% and improving threat block efficiency.• Upgraded multiple Palo Alto clusters (PA-7050, 7080) with zero downtime; managed Panorama M-200 for multi-tenant security posture.• Migrated legacy VPNs to SSL VPN with MFA for remote users.• Integrated Zscaler ZIA/ZPA for secure cloud browsing and app access for mobile workforce.• Designed AWS/Azure hub-spoke architectures, Transit Gateway routing, WAF policies, and VPN tunnels.• Automated VPN provisioning for branch sites using Ansible playbooks & Terraform templates.• Implemented Akamai WAF/CDN with dynamic rulesets; blocked OWASP Top 10 attacks proactively.• Managed Cisco ASA & Firepower with smart licensing, advanced logging, and event correlation to SIEM.• Tuned QRadar & Splunk SIEM dashboards for threat hunting and PCI audits.• Built Illumio ASP policy groups to restrict east-west traffic; cut lateral threat movement by 50%.• Deployed Viptela SD-WAN overlays, integrated broadband/MPLS/4G links for active-active failover.• Designed F5 BIG-IP iRules for SSL offloading and header rewrites; reduced latency by 25%.• Integrated Cisco ISE for dynamic VLAN assignment, device profiling for IoT endpoints.• Managed Infoblox DNS/DHCP redundancy; hardened admin interfaces per CIS controls.• Led DR drills simulating site failovers; documented recovery runbooks for audit readiness.• Coordinated daily firewall change reviews, peer approvals, and CAB submissions.• Provided Tier-3 support during P1/P2 incidents; led RCA calls with operations and vendor TAC.• Conducted knowledge sharing sessions for junior engineers on Panorama & FortiManager workflows.• Prepared cost-benefit analysis for cloud proxy migration; influenced CTO-level decision.