Zero Trust & SASE
End-to-end design and phased rollout of Zscaler ZIA, ZPA, ZDX and Palo Alto Prisma Access, with local internet offload over SD-WAN for low-latency, policy-controlled access.
ZIAZPAZDXPrisma AccessZAB / AD sync
ZERO TRUST · SASE · CLOUD SECURITY
Harish KondreddyCybersecurity Engineer
Zero Trust, SASE and cloud security engineering — designing and rolling out enterprise-grade protection across IT, OT, cloud and web applications.
- 10+
- Years in network & security engineering
- 10
- Industry certifications
- 3
- Clouds secured: AWS, Azure, GCP
- CISM
- Certified Information Security Manager
Core expertise
Security programs built to hold up in production
Perimeter & Firewall Engineering
Deployment, hardening, clustering and migration of Palo Alto, Check Point and Cisco ASA/Firepower estates, including IDS/IPS tuning and VPN troubleshooting.
Palo AltoCheck PointCisco ASAFirepowerPanorama
Cloud Security Posture
Led CSPM programs for AWS, Azure and GCP workloads — Prisma Cloud, Wiz and Dome9 — from proof of concept through enterprise enforcement and alert remediation.
Prisma CloudWizDome9GuardDutyDefender
Data Protection & Web Defense
DLP for data in motion and at rest, holistic SSL inspection, CASB and sandboxing, plus WAF and bot management on CloudFront, API Gateway and load balancers.
Zscaler DLPNetskope DLPCASBAkamai KonaAWS WAF
OT / IoT Security
Developed and enforced OT security policy, adopting IEC 62443 and the NIST Cybersecurity Framework to raise OT security without adding production risk.
IEC 62443NIST CSFMicro-segmentation
Detection, Compliance & RCA
SIEM dashboards and alerting for proactive operations, vulnerability management with Tenable, and root cause analysis on break/fix bridges.
SIEMTenableHIPAAPCI-DSSGDPRISO / CIS
Professional experience
A decade across enterprise networks and security
Cybersecurity Engineer
Majestic IT · Dallas, TX
Jun 2023 — Present
- Implement and operate firewalls, IDS/IPS, anti-malware, web proxies, DDoS mitigation, EDR, SASE and micro-segmentation across the enterprise.
- Design and roll out Zscaler ZIA, ZPA and ZDX in phases across departments following successful proofs of concept.
- Run holistic SSL inspection, DLP, CASB, cloud app control, advanced threat prevention and sandbox policy to use the full security stack.
- Secure AWS and Azure workloads with GuardDuty, Inspector and Security Center, consolidating overlapping tooling.
- Build dashboards and queries over cyber operations data, triage alerts and drive incident response procedures.
Senior Cybersecurity Consultant
Ernst & Young · Dallas, TX
Nov 2022 — Jun 2023
- Co-led client engagement delivery with senior managers, defining process, workflow design and network diagrams.
- Planned and executed branch internet offload directly to Zscaler edges, cutting MPLS overhead to central data centers.
- Deployed ZPA App Connectors across on-prem data centers, AWS and Azure sized to application and throughput needs.
- Built identity-aware ZPA policies and configured Zscaler Authentication Bridge against Active Directory.
- Deployed WAF for internet-facing CloudFront, API Gateway and ELB resources; remediated high-severity Tenable findings.
Network Engineer
Cira Infotech Inc · Atlanta, GA
2018 — 2020, 2021, 2022
- Deployed data center and perimeter firewalls — Check Point, Palo Alto, Cisco ASA — plus ZIA, ZPA and Prisma Access over SD-WAN.
- Maintained Akamai Kona WAF policy and bot management for APIs, adapting rules to evolving threats.
- Reviewed firewall rulebases with AlgoSec and integrated firewalls and SASE proxies with identity providers for least privilege.
- Secured cloud networks with security groups and virtual networks; streamed VPC flow logs to S3 via Firehose and Kinesis.
- Authored runbooks for WAF deployment and Tenable vulnerability remediation.
Network Engineer
Worldwide Technology Exchange · Atlanta, GA
May 2020 — Jan 2021
- Installed, hardened and upgraded Check Point gateways and Smart Center; tuned CoreXL and SecureXL with URL filtering, IPS and AMP blades.
- Deployed Cisco ASA and Firepower appliances with high availability, managed via FMC and CSM.
- Delivered firewall migrations from Cisco ASA to Check Point and Palo Alto using automated policy conversion.
- Built site-to-site and AnyConnect SSL VPNs, and worked OSPF/BGP routing and NAT on firewalls.
Associate Software Engineer
Tech Mahindra · Bengaluru, India
Jun 2013 — Dec 2015
- Developed and reviewed application code against customer specifications and quality processes.
- Provided production support per the RACI matrix and tracked incident queues to resolution.
Certifications
Credentials and education
- 2026
ZDTA
Zscaler Digital Transformation Administrator
Zscaler
- 2022
CISM
Certified Information Security Manager
ISACA
- 2023
ZTCA
Zero Trust Certified Architect
Zscaler
- 2023
ZIA
Zscaler Certified Internet Access
Zscaler
- 2023
ZPA
Zscaler Certified Private Access
Zscaler
- 2023
ZDX
Zscaler Digital Experience Administrator
Zscaler
- 2020
ZCCA-IA
Zscaler Certified Cloud Administrator
Zscaler
- 2020
SAA
AWS Certified Solutions Architect
Amazon Web Services
- R80
CCSA
Check Point Certified Security Associate
Check Point
- 2018
CCNA
Cisco Certified Network Associate
Cisco
2016 — 2017
Master of Science, Computer Science
Fitchburg State University
2009 — 2013
Bachelor of Engineering, Electronics & Communications
GITAM University
Technology stack
Tools and frameworks in daily use
Zero Trust / SASE
Zscaler ZIAZscaler ZPAZscaler ZDXPrisma AccessNetskopeMicro-segmentation
Network Security
Palo AltoCheck PointCisco ASA / FirepowerPanoramaIDS / IPSIPSec & SSL VPNAlgoSec
Cloud
AWSAzureGCPPrisma CloudWizDome9GuardDutyDefenderFront Door WAF
AppSec & Edge
AWS WAFAkamai KonaBot managementCloudFrontAPI GatewayTLS / certificates
Operations
SIEM dashboardsTenableWiresharkTCPDUMPFW MonitorRCA reportingBackbox
Frameworks
NIST CSFIEC 62443ISO 27001CIS BenchmarksHIPAAPCI-DSSGDPR
Contact
Let's talk about securing your environment
Available for cybersecurity engineering, Zero Trust and SASE rollouts, and cloud security posture work.