Chandrakanth Konduru
Senior Network Engineer (Cloud, SDWAN, Palo Alto)
Hire this person
Send a job offer directly to this candidate
About
Network Engineering with experience in the areas of switching and routing, bearing comprehensive Networking devices, Servers, Firewalls, VMs, WAN, and LAN seeks to work as a network engineer. Designed, deployed, and supported complex network infrastructures using Cisco and Juniper technologies, including installation and analysis of LAN/WAN protocols. Standardized MOP templates for complex upgrades, ensuring consistency, audit-readiness, and compliance across multiple change management cycles.
Cisco Catalyst
Center / DNA Center, SD-Access, Cisco ISE, Catalyst 9K, Network Automation & Telemetry. Managed structured cabling in IDF and MDF environments, ensuring optimal network performance with patch panels, fiber optics, and copper cabling. Hands-on experience with Cisco Catalyst (9200, 9300, 9400, 9600), Cisco Nexus (9K), Cisco Routers (ASR 1000, ISR 4221, ASR 9000), and ASA Firewall (5550-X), including configuration and management of network hardware.
Experience
Senior Network Engineer - Visa - Ashburn, Virginia
(2024-07)
- Developed extensive network maps and visualizations in SolarWinds to depict OSPF routing topologies, which aided in network design and troubleshooting.
- Implemented ACLs on Palo Alto Networks firewalls to enforce security policies based on user identity and application, enhancing context-aware security and reducing attack surfaces.
- Developed Python scripts to collect and analyze network performance data, generating detailed reports and visualizations to identify and address issues.
- Worked on Cisco Data - center platforms such as Cisco ACI, APIC and Cisco Nexus 9k switches.
- Automated routine operational tasks software image management, config backups, compliance checks through Catalyst Center, cutting manual effort and human error.
- Implemented SLA-based path conditioning and dynamic path control within BIO overlays to maintain application performance and network resiliency on Aruba SD-WAN.
- Monitored network performance, latency, jitter, and packet loss using Aruba Central analytics and reporting tools for SD-WAN.
- Created site to site IPSEC VPN tunnel with CheckPoint and Cisco ASA firewalls.
- Configured Business Intent Overlays (BIO) in Aruba EdgeConnect SD-WAN to define application-based traffic policies, ensuring optimal routing and performance across WAN links.
- Analyzed network issues related to MAC/IP route propagation, ARP suppression, and overlay/underlay interactions.
- Leveraged Arista CloudVision Portal for centralized management, provisioning, and monitoring of large-scale leaf-spine VXLAN fabrics.
- Configured and optimized EPG-to-EPG contracts, filters, and bridge domains within Cisco ACI, enabling secure communication between application tiers and reducing manual network provisioning efforts.
- Actively involved in design & deployment of a new datacenter using Cisco Nexus 9000 platform in spine & leaf architecture utilizing VXLAN fabric & BGP-EVPN overlay technologies.
- Configuring Juniper SRX Series firewalls with Junos OS 23.4, implementing advanced security policies, intrusion prevention, and VPN services for secure network access.
- Configuring Palo Alto firewalls from PAN-OS 8.1 to PAN-OS 11.0.X for comprehensive security, including application and URL filtering, SSL decryption, and VPNs.
- Built a network using Core switches, Nexus 5696, 9336 series switches, distribution layer switches Cisco Nexus 93180 series switches. Access layer switches N2K-C2248TP and N9K-C9348GC-FXP series switches.
- Designed and implemented interoperability testing between Cisco IOS and Junos OS platforms to validate call signaling, QoS, and routing stability during migration.
- Enabled continuous testing and validation of network changes in staging environments prior to production rollout.
- Documented POC results, test method logies, and recommendations to guide production deployment decisions.
- Configured Site to Site IPsec VPN tunnels to peer with different clients and each of the client has different specifications of Phase 1 and Phase 2 policies using Cisco ASA firewalls.
- Collaborated with TAC to analyze escalations involving EVPN-VXLAN fabrics, switching, routing protocols, and automation workflows.
- Install & Upgrade Cisco On-prem server and Synchronize with the Cloud server for license installations.
- Performed Junos OS upgrades on EX9250 and EX4400 switches with zero downtime using Non-Stop Routing (NSR) and Graceful Restart features.
- Configured dynamic path selection, WAN health monitoring, and application-aware routing to ensure high availability and optimal traffic flow Aruba SDWAN.
- Administrated Nautobot as a Network Source of Truth (NSoT) and automation platform and managed network inventory including Devices, IPAM, VLANs, and circuits.
- Upgrade Nautobot from v1.1 to v2.4 and backup of database management.
- Device Base Configuration to automate the device Installation and Configuration using Nautobot.
- Engineered BGP routing policies for enterprise and carrier-grade networks, optimizing path selection, route filtering, and traffic engineering.
- Implemented advanced BGP features including route reflectors, communities, and policy-based routing to support voice and data convergence.
- Automated monitoring and configuration of IPsec, GRE, and VXLAN tunnels for remote sites.
Education
Master's - Computer Science - Southern University and A&M College (2023)
Bachelors - Computer Science - JNTU (2015)

