Vivek Gunda
Professional Summary
Senior Network Security Engineer with 5+ years of experience designing, deploying, and hardening enterprise network and security architectures across healthcare, higher-education, and corporate environments. Strong hands-on expertise with Palo Alto NGFWs and Panorama, FortiGate platforms, and Check Point firewalls for perimeter and east-west threat prevention. Experienced in Zero Trust segmentation using Cisco ACI and Illumio, and in secure branch connectivity with Cisco SD-WAN Viptela. Skilled in application delivery and SSL offload with F5 BIG-IP, and in building multi-cloud network security controls in AWS and Azure. Proficient in automating network operations with Python, Netmiko, Ansible, and Terraform to deliver repeatable IaC and configuration hygiene. Integrated Splunk and FortiAnalyzer for centralized logging and SOC workflows. Actively own network security design, incident triage integrations, and compliance-aligned audits (HIPAA, NIST CSF).
Technical Skills
Work Experience
- Architected Zero Trust segmentation using Cisco ACI and Illumio to enforce micro-segmentation and reduce lateral attack vectors across hospital data center environments.
- Managed Palo Alto PA-5450/PA-5250 NGFW clusters via Panorama, authoring App-ID/User-ID policies, SSL decryption, and IPS rules to protect patient-facing and backend systems.
- Administered FortiGate 1800F/1000F clusters with FortiManager and integrated FortiAnalyzer for centralized policy deployment and consolidated threat logging.
- Engineered Cisco SD-WAN Viptela overlays with dual MPLS/broadband transports and IPsec encryption to secure branch connectivity for distributed clinical sites.
- Built and enforced AWS and Azure network security controls including VPC security groups, CloudTrail/CloudWatch monitoring, NSG policies, and VPN gateways for hybrid workloads.
- Developed Python automation using Netmiko and REST APIs to ingest CloudWatch/CloudTrail logs and perform infrastructure configuration audits.
- Deployed Ansible playbooks to standardize router and switch configurations, automate firmware patching, and validate ACLs across Cisco ISR and Nexus platforms.
- Configured F5 BIG-IP virtual servers and iRules for SSL offloading and traffic steering to maintain high-availability delivery of critical healthcare applications.
- Deployed and managed Palo Alto PA-3430 and PA-850 NGFWs with App-ID/User-ID, URL filtering, SSL decryption, and WildFire integration to protect campus networks.
- Upgraded and hardened Cisco Secure Firewall FTD 3110/3105 via FMC, implementing IPsec VPNs and AAA policies for campus perimeter resilience.
- Engineered BGP peering on Cisco 4000 Series routers and optimized OSPF area design on ISR platforms to improve WAN resilience and convergence.
- Provisioned Azure VPN Gateway and ExpressRoute to deliver redundant, BGP-enabled transit for cloud-hosted academic services.
- Built Cisco ACI fabric on Nexus 9000 switches, defining Bridge Domains, EPGs, and Contracts to enforce tiered micro-segmentation in the data center.
- Configured F5 LTM/GTM virtual servers and iRules for SSL offload and application failover during maintenance windows.
- Implemented Aruba ClearPass for 802.1x NAC with certificate-based MFA and device profiling to secure wired and wireless campus access.
- Automated bulk interface configuration and firmware deployment using Ansible playbooks across Cisco ISR and Nexus devices.
- Deployed and maintained Check Point 3000 firewalls, managing rulebase, object groups, and firmware lifecycle to enforce perimeter security.
- Administered Cisco ASA devices and validated IPsec site-to-site VPN tunnels, rekey schedules, and failover behavior during maintenance windows.
- Optimized MPLS provisioning and QoS policies across regional links to prioritize latency-sensitive application traffic.
- Configured BGP and OSPF on Cisco routers to provide resilient inter-site routing and automatic failover between data centers.
- Provisioned AWS VPC networking including route tables and security groups to segment and protect cloud-hosted workloads.
- Monitored network health and investigated anomalies using SolarWinds and packet captures to resolve Layer 2/Layer 3 faults.
- Maintained ServiceNow ITSM workflows for security change requests, incident triage, and audit documentation.
Education
Certifications
Powered by Drivetube · Create your own profile at drivetube.ai
Everything on Drivetube
Six products, two of them free forever. Start wherever you are.
Your free digital resume
at drivetube.ai/in/your-name: one true standard resume with a Hiring Snapshot (visa status, expected salary, notice period, work preference, relocation), an ATS-ready PDF download and a single shareable link. Free forever; interview requests come from verified employers and your contact details stay masked until you accept.
Documentation- Free Job BoardFree
Verified jobs, posted in the last 3 days
verified openings crawled ATS-by-ATS from 100,000+ real company career pages across 35 ATS platforms. Shows the true posting date from the source ATS — not when a listing was indexed — and deletes every general listing 3 days after it was actually posted. No ghost jobs, no ad-sponsored listings, no staffing reposts, no account needed.
Documentation - Job Hunt ProgramFrom $199.99
We run your job hunt for you
managed job hunting, a one-time purchase from $199.99. JobScout matches verified roles to your real experience band, Blend AI writes a uniquely tailored resume and cover letter for every application, and the Autofill extension fills the form — or Let Us Apply submits it for you.
Documentation - Resume Writing ServicesFrom $25.99
Written by senior career writers
human-written, ATS-optimised resumes by senior career writers, from ₹499.99 / $25.99. Available in every country, written to the destination country's own standard — a US resume, UK CV, German Lebenslauf and Indian resume are genuinely different documents. A paid service, separate from the free Drivetube Profile.
Documentation - Community MembershipFrom $49.99/yr
AI tools, gated filters and a $10,000+ library
from $49.99/year (₹1,999/year in India), or $4.99/month in the iOS app. Unlocks the gated job-board filters — visa sponsorship, security clearance, workplace and application time — plus Job-Scout AI matching, Resume Report AI, Interview AI prep sheets, Recruiter Outreach AI sent from your own Gmail, Apply or Skip triage, a daily market feed and a $10,000+ library including 23 ATS-validated resume templates.
Documentation - Drivetube HireFree tier
For employers — no job postings, no applications
hiring with no job postings and no applications. Paste your real job description and AI matches it against candidates' true standard resumes, returning ranked candidates with a match %, matched and missing skills and written reasoning. Free tier included; employers pay, candidates never do.
Documentation
- Documentation
every product explained in full, with feature-by-feature comparisons against the job boards, AI apply tools, resume services and hiring platforms people actually use.
- Playbooks
tactical job-search guides. Each post is one named tactic with the situation it applies to, the exact steps, a copy-paste message and honest failure modes. Free, no account.
The job board covers the United States, India, United Kingdom, Canada, Europe and Australia, and Resume Writing Services are available in every country.
Pricing is identical on the web, iOS and Android — no app-store markup. Monthly Community membership is purchased in the iOS app only; the website sells annual plans. The Android app has no in-app purchase, so Android members subscribe on drivetube.ai and then sign in to the app with full access. Membership follows your account, not your device.