Securing Salesforce workloads on public clouds as part of the Network Security organization.

• Building a Network Observability Platform for Salesforce workloads on Public Clouds.

• Defined and Implemented the network security architecture for Salesforce workloads on GCP. Built a self-service framework for service owners to manage their security and network segmentation policy

• Efficacy evaluation and deployment of Web Application Firewall(WAF) for securing Kubernetes

workloads. Developed control plane components for policy orchestration

Building and Scaling critical components of Zscaler’s SASE platform securing 200+ Billion web transactions/day(as of 2021) doubling every 20 months. Specifically:

• SSL/TLS including MITM proxy, Cloud HSM integration for MITM, policy enforcement, traffic visibility, protocol stack and hardware offload

• Traffic forwarding to cloud including a fully multi-tenant IPSec-as-a-Service stack, DTLS based proprietary tunneling solution and DNS based traffic forwarding; Won Excellence Award for building fully multi-tenant IPSec stack

• Forward proxy supporting both transparent and explicit proxy modes; Won Excellence Award for building a policy framework to enforce policy during network and node failures

• Overall reliability and scalability of customer traffic processing nodes contributing to 99.999% service availability; Won award for solving problems affecting cloud manageability/stability

• Collaborate with Product Management to translate strategy/requirements into actionable tasks

• Work with Customers and Support to resolve product deployment/customization challenges

Architected and Delivered critical IPSec modules for multiple Juniper platforms with varying capabilities. Developed clean interfaces for maximum code reusability across platforms.

• Lead developer for the High Availability(HA), PKI and Config Management modules for IPSec. Implemented scalable light-weight designs for distributed platforms

• Developed a distributed IPSec VPN solution to improve IKE session scaling and ramp-up by moving IKE from a centralized control plane daemon to linecards

• Developed IKEv2 to help position SRX5800 as security gateway in the LTE market