Vandana Nagarjunapu

AWS Cloud Network & Network Security Engineer with 6+ years of experience designing, implementing, securing, monitoring, and troubleshooting enterprise and cloud network infrastructure across Healthcare, Banking & Financial Services, and Telecom environments. Strong expertise in AWS networking, including VPC, subnets, route tables, Internet/NAT Gateways, Transit Gateway, VPC Peering, VPC Endpoints, Route 53, ALB/NLB, VPN, and Direct Connect. Experienced in designing secure multi-account AWS network architectures, landing zones, hub-and-spoke models, shared-services and inspection VPCs, network segmentation, and highly available multi-AZ environments.

Hands-on experience with AWS Direct Connect, Site-to-Site VPN, BGP, hybrid routing, DNS integration, and troubleshooting complex AWS-to-on-premises and AWS-to-AWS connectivity. Strong enterprise networking background across Cisco routers/switches, LAN/WAN, VLAN, STP, EtherChannel, OSPF, BGP, EIGRP, HSRP/VRRP, MPLS, QoS, NAT, DNS, DHCP, and IPv4/IPv6. Experienced in network security using Palo Alto, Fortinet FortiGate, Cisco ASA/Firepower, AWS Network Firewall, IPS/IDS, IPSec VPN, SSL VPN, firewall policies, NAT, URL filtering, SSL inspection, and network segmentation.

Strong monitoring and troubleshooting experience using CloudWatch, VPC Flow Logs, CloudTrail, AWS Config, Splunk, SolarWinds, Cisco DNA Center, PRTG, ThousandEyes, Wireshark, and ServiceNow. Experienced in network automation and Infrastructure as Code using Terraform, Ansible, Python, REST APIs, AWS CLI, Git, YAML, and JSON, with strong production support, incident management, RCA, disaster recovery, capacity planning, and high-availability experience.

Senior AWS Cloud Network & Security Engineer at Breezeline (2025-02 – Present)

Designed, implemented, and supported AWS-centric hybrid network architecture for telecom applications and business-critical services. Led secure cloud connectivity, centralized routing, network segmentation, VPN/Direct Connect, cloud security, monitoring, automation, SD-WAN integration, and senior-level production operations.

• Designed and implemented AWS VPC architectures using public/private subnets, route tables, Internet/NAT Gateways, VPC endpoints, security groups, and NACLs.
• Built centralized AWS networking using Transit Gateway and hub-and-spoke architecture across multiple VPCs and on-premises environments.
• Implemented AWS Direct Connect and redundant Site-to-Site VPN connectivity for telecom data centers, branches, and enterprise networks.
• Configured and troubleshot BGP routing across Direct Connect, Transit Gateway, hybrid cloud, and enterprise WAN environments.
• Designed network segmentation for application, database, management, shared-services, and restricted workloads.
• Integrated AWS Network Firewall, Palo Alto, and Fortinet security controls for inspection, NAT, segmentation, and threat prevention.
• Designed Route 53 DNS architecture and supported hybrid DNS resolution.
• Configured AWS ALB/NLB and F5 BIG-IP for traffic distribution, health monitoring, SSL offloading, and high availability.
• Monitored cloud and enterprise networks using CloudWatch, VPC Flow Logs, CloudTrail, AWS Config, Splunk, SolarWinds, and ThousandEyes.
• Troubleshot complex AWS connectivity issues involving Transit Gateway, VPN, Direct Connect, BGP, DNS, MTU, routing, and application reachability.
• Performed packet-level troubleshooting using Wireshark, TCPDump, AWS CLI, ping, traceroute, nslookup, and dig.
• Automated AWS and network configurations using Terraform, Ansible, Python, REST APIs, and Git.
• Maintained Infrastructure-as-Code for AWS networking and implemented controlled changes through peer-review processes.
• Supported Cisco SD-WAN/Viptela integration with AWS and optimized WAN connectivity using BGP, QoS, IPSec, and redundant paths.
• Administered Palo Alto and Fortinet firewalls including security policies, NAT, application control, URL filtering, and VPN configurations.
• Led critical incident response, RCA, change management, disaster recovery testing, capacity planning, and production implementations.

AWS Cloud Network & Security Engineer at ICICI BANK (2021-09 – 2023-05)

Designed and supported secure AWS networking for banking applications, focusing on hybrid connectivity, network segmentation, high availability, security controls, and resilient production connectivity. Implemented VPC and Transit Gateway architectures, Direct Connect/VPN connectivity, firewall integration, monitoring, and compliance-oriented network controls.

• Designed AWS VPC architectures using public/private subnets, route tables, security groups, NACLs, VPC endpoints, and multi-AZ designs.
• Implemented AWS Transit Gateway for centralized connectivity across application, shared-services, security, and on-premises environments.
• Configured AWS Direct Connect and redundant IPSec VPN connections between AWS and financial-services data centers.
• Managed BGP routing across Direct Connect, enterprise WAN, and Transit Gateway environments.
• Implemented network segmentation for application, database, DMZ, management, and PCI-related environments.
• Configured AWS Network Firewall, Palo Alto, and Fortinet firewall policies for traffic control, NAT, and security enforcement.
• Supported Route 53 and hybrid DNS resolution for AWS and on-premises applications.
• Configured AWS ALB/NLB and F5 BIG-IP for highly available application delivery and SSL offloading.
• Monitored AWS networking through CloudWatch, VPC Flow Logs, CloudTrail, AWS Config, and Splunk.
• Investigated complex connectivity issues involving routes, security groups, NACLs, firewalls, DNS, and packet flows.
• Supported PCI/security compliance by maintaining network segmentation, access controls, logging, and firewall documentation.
• Automated network configuration and validation using Terraform, Ansible, Python, AWS CLI, and REST APIs.
• Performed disaster-recovery validation for Direct Connect/VPN failover, Transit Gateway routing, firewall redundancy, and application connectivity.
• Managed production incidents, problems, and changes through ServiceNow following ITIL processes.

AWS Cloud Network & Infrastructure Operations Engineer at APOLLO Hospitals (2019-01 – 2021-09)

Supported the migration and day-to-day operation of healthcare applications across AWS and enterprise network environments. Built foundational AWS VPC networking, secure hybrid connectivity, network segmentation, monitoring, and production support while maintaining Cisco infrastructure and enterprise firewalls for business-critical healthcare workloads.

• Supported AWS VPC environments using public/private subnets, route tables, Internet/NAT Gateways, security groups, and NACLs.
• Supported AWS workload migrations by validating subnet architecture, routing, DNS, security controls, VPN connectivity, and application reachability.
• Implemented and troubleshot AWS-to-on-premises connectivity using Site-to-Site IPSec VPN.
• Configured security groups and NACLs to segment clinical, administrative, server, and restricted workloads.
• Supported Route 53 and hybrid DNS troubleshooting across AWS and on-premises environments.
• Monitored AWS networking using CloudWatch and VPC Flow Logs and investigated dropped traffic and connectivity issues.
• Managed Cisco routers, switches, wireless infrastructure, and enterprise network services.
• Configured VLANs, trunking, STP, EtherChannel, HSRP, DHCP, DNS, ACLs, OSPF, EIGRP, and BGP.
• Supported Cisco ASA/Firepower and Fortinet FortiGate firewall environments.
• Performed packet-level troubleshooting using Wireshark, ping, traceroute, TCP/IP diagnostics, and Cisco IOS commands.
• Managed incidents and service requests through ServiceNow while supporting 24x7 production operations.
• Maintained network diagrams