U01
Zscaler ZIA
Zero Trust 95%Cloud edge security — URL filtering, SSL inspection & policy inheritance across all ZIA locations.
ZERO TRUST ARCHITECT • INDIA
Hey, I'm Sujit R. Vishwakarma
>
|
Senior Network Security Engineer specialising in Zero Trust architecture, Zscaler ZIA/ZPA deployment, Palo Alto NGFW (PCNSE), Cisco ASA/FTD firewall engineering, and F5 application delivery.
$ cert-monitor --source cisa-kev --top 3
CISA KEV
CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection — Mitigated via Threat ID 95187 & Zero Trust isolation
CRITICAL
CVE-2024-20353: Cisco ASA/FTD Web Services Remote Code Execution — Patched via FMC rulebase policy
CISA KEV
CVE-2023-3519: Citrix NetScaler ADC & Gateway Pre-Auth RCE — Isolated via Zero Trust micro-segmentation
PCNSE
Zero Trust
Encrypted
Threat Hunter
Scroll to explore
<about>
About Me
Senior Network Security Engineer
I'm Sujit R. Vishwakarma, a seasoned Network Security Engineer based in Maharashtra, India, with 10+ years securing enterprise networks across Zero Trust, SASE, and next-generation firewall architectures.
My core expertise spans Zscaler ZIA/ZPA cloud security platform management, Palo Alto Networks (PCNSE certified) NGFW deployment, Cisco ASA/FTD perimeter defence, and F5 LTM/GTM application delivery.
10+Years Experience
07Technical Blogs
03Certifications
IDENTITY VERIFIED // SEC-ENG
SEC-ID #4829
<skills>
Technical Arsenal
Twelve units, racked by discipline. Scroll and the rack turns while each unit unlatches, swings clear of its bay and squares up to you — or click or tab straight to one to pull it forward.
RACK 01
MAHARASHTRA · DC-1
U02
Zscaler ZPA
Zero Trust 93%Zero Trust Private Access — identity-aware micro-segmentation for internal app access without VPN.
U03
Zero Trust Exchange
Zero Trust 90%Continuous verification — device posture & least-privilege policy enforcement on every session.
U04
SD-WAN & Steering
SASE 80%Secure branch-to-cloud steering — optimising application traffic into Zscaler cloud edge nodes.
U05
Palo Alto (PCNSE)
NGFW 92%Panorama centralised mgmt, App-ID rules, HA clustering & advanced threat prevention.
U06
Cisco ASA / FTD
Perimeter 88%Stateful inspection, IPsec VPN & Snort IPS policies managed via Firepower Management Center.
U07
SSL/TLS Decryption
Inspection 87%Inbound & outbound SSL/TLS decryption, CA PKI management & bypass profile configuration.
U08
Policy Hardening
Hardening 90%Least-privilege rulebase audits, NAT zone isolation & network access control enforcement.
U09
F5 BIG-IP LTM
App Delivery 82%Virtual server management, SSL offloading & custom iRules traffic steering for enterprise apps.
U10
F5 BIG-IP GTM
DNS / GTM 78%Global DNS traffic management, wide-IPs & multi-datacenter health monitoring for 99.9% uptime.
U11
Wireshark / PCAP
Analysis 95%Deep packet capture, TLS handshake analysis & rapid root-cause network troubleshooting.
U12
Python / Automation
Automation 75%Network scripting, Playwright test automation & Excel reporting via openpyxl.
ACTIVE UNIT
U01 · ZSCALER ZIA
01 / 12
Tools & Technologies
Zscaler ZIAZscaler ZPAPalo Alto PCNSECisco ASACisco FTDF5 LTMF5 GTMWiresharkSSL InspectionZero Trust ExchangePythonPlaywrightReactopenpyxl
Zscaler ZIAZscaler ZPAPalo Alto PCNSECisco ASACisco FTDF5 LTMF5 GTMWiresharkSSL InspectionZero Trust ExchangePythonPlaywrightReactopenpyxl
<career_telemetry>
Career Log
Interactive dossier of enterprise network security architectures, mission operations, and perimeter engineering milestones.
Navigate with ← → arrow keys
Senior Network Security Engineer
Safran India Pvt Ltd
·
Mumbai, Maharashtra
TIMEFRAME
Feb 2024 — Present
ZERO TRUST ARCHITECTURE
Zscaler ZIA + ZPA
NGFW CLUSTERING
Palo Alto HA Clusters
CENTRAL ORCHESTRATION
Panorama Hardened
APPLICATION DELIVERY
F5 BIG-IP LTM
ENGINEERING RESPONSIBILITIES & SCOPE
- ZTNA ARCHITECTURE Mapped HTTPS and application-based traffic flows and designed secure access architecture (user-to-internet, user-to-SaaS, user-to-private-app) using Zscaler.
- SASE ADMINISTRATION Administered and supported Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise environments for secure internet and private application access.
- ZERO TRUST POLICIES Implemented Zero Trust Network Access (ZTNA) policies using ZPA to provide secure access to internal applications without exposing the corporate network.
- PANORAMA & NGFW Managing high-availability Palo Alto Networks NGFW clusters with Panorama centralized orchestration, App-ID hardening, and outbound SSL/TLS decryption.
- PERIMETER DEFENSE Administering Cisco ASA/FTD firewall security policies, Site-to-Site IPsec VPN tunnels, and F5 BIG-IP Local Traffic Manager (LTM) load balancing.
VERIFIED DEPLOYMENT STACK:
Senior Network Engineer
Teleperformance Global Services Pvt Ltd
·
Thane, Maharashtra
TIMEFRAME
Mar 2023 — Feb 2024
PRODUCTION SLA
99.99% Network Uptime
ROUTING FABRICS
Dynamic BGP & OSPF
VPN GATEWAYS
Multi-Region IPsec
SECURITY COMPLIANCE
Enterprise Audits Led
ENGINEERING RESPONSIBILITIES & SCOPE
- HIGH AVAILABILITY Engineered high-availability enterprise network infrastructure supporting mission-critical operations and global contact center environments.
- PERIMETER DEFENSE Administered perimeter firewall rulebases, multi-region IPsec VPN tunnels, and secure remote access gateways.
- L3 CORE ROUTING Configured dynamic L3 routing protocols (BGP, OSPF) and enterprise switching fabric to ensure 99.99% network uptime.
- AUDITS & HARDENING Led network security audits, vulnerability remediation, and scheduled infrastructure change requests.
VERIFIED DEPLOYMENT STACK:
Senior Network Engineer
IMSI Staffing Pvt Ltd
·
Mumbai, Maharashtra
TIMEFRAME
May 2022 — Feb 2023
FIREWALL MIGRATION
Cisco ASA & FTD
PACKET TELEMETRY
Wireshark Diagnostics
SECURE REMOTE ACCESS
Client SSL VPN
POLICY HARDENING
NAT & Granular ACLs
ENGINEERING RESPONSIBILITIES & SCOPE
- DEFENSE HARDENING Delivered enterprise client network security solutions, firewall migrations, and perimeter defense hardening.
- CISCO FIREWALLS Configured and troubleshot Cisco ASA/FTD firewalls, NAT policies, ACLs, and client-to-site SSL VPN configurations.
- PACKET INSPECTION Performed deep packet analysis and network diagnostics using Wireshark to resolve complex routing and latency bottlenecks.
- LIFECYCLE & PATCHING Managed network hardware lifecycles, firmware patching, and security compliance baseline enforcement.
VERIFIED DEPLOYMENT STACK:
Network Engineer
Nirmal Datacom Pvt Ltd
·
Mumbai, Maharashtra
TIMEFRAME
Jan 2016 — May 2022
TENURE SERVICE
6+ Years Infrastructure
SWITCHING FABRIC
Cisco Catalyst Core
WAN CIRCUITS
Leased Lines & Failover
OPERATIONAL SUPPORT
Tier-2/3 Incident SLA
ENGINEERING RESPONSIBILITIES & SCOPE
- LAN / WAN DEPLOYMENT Designed, deployed, and maintained enterprise LAN/WAN network infrastructure for multi-site commercial clients.
- VLAN & STP SWITCHING Provisioned Cisco Catalyst switches, routers, VLAN segmentation, inter-VLAN routing, and Spanning Tree Protocol (STP).
- WAN & LEASED CIRCUITS Installed and maintained site-to-site WAN connectivity, leased lines, and redundant failover circuits.
- TIER-2/3 ESCALATION Delivered Tier-2/3 incident response, network monitoring, troubleshooting, and hardware commissioning.
VERIFIED DEPLOYMENT STACK:
<certifications>
Certified Credentials
PCNSE
Palo Alto Networks Certified Network Security Engineer
Palo Alto NetworksCERTIFIED
ZDTE
Zscaler Digital Transformation Expert
ZscalerEXPERT
ZDTA
Zscaler Digital Transformation Administrator
ZscalerADMIN
<blogs>
Security Insights & Articles
Technical deep-dives on Zero Trust architecture, Zscaler ZIA/ZPA migration, Palo Alto NGFW rulebase hardening, and F5 ADC application delivery.
SEC-INTEL DECLASSIFIED ARCHIVE
DISPATCH
01 / 07
INTERACTIVE SIMULATOR
⏲ 9 min read · Aug 23, 2026
Demystifying Zscaler SSL Inspection: The Dual-Handshake Architecture
Interactive visual simulator walking through how Zscaler terminates two distinct TLS sessions to decrypt, inspect DLP/malware payloads, and re-encrypt enterprise traffic.
INTERACTIVE SIMULATOR
⏲ 12 min read · Aug 30, 2026
Mastering Zscaler URL Filtering: Rule Waterfall, Real-Time Categorization & User-Agent Control
Interactive 4-mode simulator exploring how Zscaler inspects outbound HTTP/S flows, evaluates sequential waterfall policies, classifies domains across 200+ categories, and parses client User-Agent headers.
INTERACTIVE SIMULATOR
⏲ 14 min read · Sep 04, 2026
Zscaler ZIA vs ZPA: Comprehensive Architectural Deep Dive & Interactive Simulator
Two pillars of the Zscaler Zero Trust Exchange — one secures outbound internet access, one secures brokered private app access. Step through packet flows, App Connectors, and 14-dimension comparative matrices.
INTERACTIVE SIMULATOR
⏲ 8 min read · Aug 23, 2026
Mastering F5 BIG-IP SSL Handshake Architecture: Offload, Bridging & Passthrough
Interactive multi-mode simulator exploring how F5 BIG-IP handles SSL Offloading, SSL Bridging (re-encryption), and Layer 4 SSL Passthrough at enterprise scale.
NGFW & PAN-OS
⏲ 8 min read · Aug 23, 2026
Palo Alto PAN-OS Rulebase Hardening & Panorama Best Practices
Eliminating overly permissive 'Any/Any' rules using App-ID policy optimizer, configuring HA Active/Passive failover timers, and implementing outbound SSL decryption bypass profiles safely.
F5 & ADC
⏲ 5 min read · Aug 23, 2026
Optimising Enterprise App Delivery with F5 BIG-IP iRules & SSL Offloading
Writing production-ready TCL iRules for header manipulation and path-based traffic routing while offloading TLS handshakes to BIG-IP hardware for a 40% speed boost.
INTERACTIVE SIMULATOR
⏲ 11 min read · Sep 14, 2026
Zscaler Tunnel 1.0 vs Z-Tunnel 2.0: Transport Schematic, Architecture & Protocol Simulator
Comprehensive transport schematic and multi-mode interactive simulator comparing HTTP CONNECT proxy forwarding against DTLS/TLS packet tunneling across SSH, DNS, RDP, and VoIP.
<contact>
Secure Channel
Direct communication channel. Connect directly via Email or LinkedIn.
ENCRYPTED SECURE CHANNEL · ACTIVE
Let's Connect & Collaborate
Available for senior network security engineering roles, Zero Trust architecture consulting, Zscaler / Palo Alto enterprise implementations, and F5 ADC deployments.
DIRECT EMAIL
contact@securebysujit.com
PROFESSIONAL NETWORK
Sujit R. Vishwakarma
Maharashtra, India
Zero Trust · Zscaler · PAN-OS · F5
Response SLA < 24 hrs
Done!
