Built a fault-tolerant Go microservice to migrate enterprise firewall policies from AWS and Azure to Palo Alto Networks Strata Cloud Manager, implementing a 4-stage parallel pipeline with bounded worker pools, real-time progress tracking, and exponential backoff retry logic for reliable third-party API interactions

Designed and implemented Data Loss Prevention (DLP) capabilities for a cloud-native firewall on Azure, enabling detection and prevention of sensitive data exfiltration (e.g., credit card numbers, PII) using deep packet inspection and policy enforcement.

Designed and implemented the Egress NAT feature for Cloud NGFW, enabling source NAT on outbound traffic while exempting sessions targeting private IP ranges, optimizing traffic flow by routing inspected egress traffic directly to the internet—reducing AWS NAT Gateway costs and leveraging Palo Alto Networks' managed data transfer with configurable public IP associations.

Designed and implemented a scalable traffic inspection architecture using AWS Gateway

Load Balancer (GWLB) and Palo Alto VM-Series firewalls, enabling automated threat

detection for inbound, outbound, and east-west traffic across multi-VPC environments.

Designed and implemented Link Aggregation support in VM-Series firewalls for ESXi and

KVM environments, enabling high-throughput, fault-tolerant traffic handling via bonded

interfaces with shared MAC addressing

Designed and developed the CN-Series Kubernetes plugin for Panorama, enabling

seamless integration of Palo Alto's containerized firewalls with Kubernetes clusters by

leveraging real-time discovery of native Kubernetes objects (pods, namespaces, labels) to

deliver Layer 7 visibility, application-level segmentation, and dynamic policy

enforcement based on Kubernetes metadata.

Designed and implemented VLAN access mode for VM-Series firewalls on KVM and ESXi,

enabling the firewall to operate as a virtual network function (VNF) in multi-tenant cloud

and data center environments by providing dedicated virtual network interfaces (VNIs) with

untagged traffic handling via SR-IOV virtual functions.

Contributed to the platform bring-up of Palo Alto Networks CN-Series containerized firewall,

enabling robust Layer 7 visibility, dynamic scaling, and Kubernetes-native security features

to protect containerized applications from modern threats while supporting DevOps agility

GTP( GPRS tunneling protocol) Traffic Generator (Proof of concept )

• > Designed and Developed an in house GTP traffic generator to test the GTP firewall.

• > Designed the GTP traffic generator to act as both service gateway and packet gateway.

• > Developed a stateful way of processing traffic generating 2 million sessions(Tunnels) varying L3, L4 , GTP header fields.

• > Stored the session (tunnel) related information in an efficient data structure to enable fast lookups for generating user traffic

DNS traffic generator ( Proof of concept)

• >Enhanced the A10 DNS traffic generator with zone file parser functionality and support for Non-FPGA platform.

• >Developed wrapper modules to use the relevant API of zone file parser to create DNS query packets as input to DNS traffic generator.

• >Developed modules to validate the response received from the DNS cache server(DUT) to test its performance and correctness.

• >Developed modules for detailed verification of header fields , answer, authority and additional sections of DNS response.