Network Engineer Resume Examples

Kiran Bhandari

(972) 555-0133 ◇ Dallas, TX

kiran.bhandari@example.com ◇ linkedin.com/in/kiran-bhandari ◇ kiranbhandari.com

Objective

Network engineer with 7 years designing and operating enterprise networks, currently the senior engineer for a healthcare system with 14 hospitals, 220 sites, and about 60,000 connected devices. Holds a 99.995% core network availability record over 3 years, led a software-defined wide area network migration across 220 sites that cut circuit costs 38%, and cut mean time to resolve network incidents from 4 hours to 55 minutes through automation and observability. Designs networks to be boring in production, because a hospital network that gets noticed is a network that failed.

Education

B.S. in Computer Networking and Telecommunications, Trinity River Crown University 2014 – 2018

Coursework in Routing and Switching, Network Security, Wireless Networks, Network Design, and Systems Administration.

Cisco Certified Network Professional Enterprise and Juniper Networks Certified Specialist, Cisco and Juniper Networks 2020 – 2023

Also holds a Cisco DevNet Associate certification earned in 2022 and completed an Aruba wireless design course in 2024.

Skills

Network Engineering

Enterprise routing and switching with BGP, OSPF, and EIGRP, software-defined wide area network design, campus and data centre switching, wireless design and survey, network segmentation, quality of service, IPv6

Operations and Reliability

Network monitoring and observability, incident response and root cause analysis, capacity planning, change management, high availability design, disaster recovery testing, vendor and circuit management

Automation and Security

Network automation with Python and Ansible, configuration management and compliance, firewall and access control policy, network access control, zero trust segmentation, documentation and standards

Tools & Platforms

Cisco Catalyst and Nexus, Cisco SD-WAN, Juniper, Aruba wireless and ClearPass, Palo Alto firewalls, SolarWinds, ThousandEyes, NetBox, Ansible, Python, ServiceNow, Wireshark

Experience

Senior Network Engineer 03/2021 – Present

Trinity River Crown Health System Dallas, TX

Senior engineer for a healthcare network spanning 14 hospitals, 220 sites, 2 data centres, and about 60,000 connected devices, on a network team of 12.
Hold a 99.995% core network availability record over 3 years and led a software-defined wide area network migration across 220 sites over 14 months that cut circuit costs 38%, about $2.6M a year, with 0 clinical outages.
Cut mean time to resolve network incidents from 4 hours to 55 minutes through a ThousandEyes and SolarWinds observability rollout and 40 Ansible automation playbooks.

Network Engineer 07/2018 – 02/2021

Lone Star Line Logistics Fort Worth, TX

Operated the network for a logistics company with 45 distribution centres and 8,000 users, handling about 900 tickets a year with a 95% resolution within target.
Designed and deployed wireless networks in 20 warehouses with 600 access points, raising handheld scanner connectivity from 91% to 99.7%.
Built a Python configuration compliance tool that audited 400 switches nightly and cut configuration drift incidents 80%.

Network Operations Intern 05/2017 – 08/2017

Lone Star Line Logistics Fort Worth, TX

Documented 45 site network topologies in NetBox during a 12-week internship and corrected 120 inventory records.
Resolved about 150 tier 1 network tickets under a senior engineer with a 92% first-contact resolution rate.
Received a full-time offer at the end of the 12-week internship based on the documentation work.

Projects

Software-Defined WAN Migration. Designed and led the migration of 220 sites from MPLS to Cisco SD-WAN over 14 months with a dual-circuit design, application-aware routing policies for 30 clinical applications, a 12-site pilot, and a cutover runbook with rollback, which cut circuit costs 38%, raised site availability from 99.9% to 99.98%, and delivered 0 clinical outages during migration.

Network Observability and Automation. Deployed ThousandEyes synthetic monitoring on 50 clinical application paths and SolarWinds across 3,000 devices, then built 40 Ansible playbooks for diagnostics, remediation, and standard changes, which cut mean time to resolve from 4 hours to 55 minutes and automated 60% of standard change tickets.

Clinical Device Segmentation. Led a network segmentation programme for 25,000 medical devices using Aruba ClearPass network access control, 40 device profiles, and 120 policy rules developed with the clinical engineering and security teams, which contained 100% of medical devices in dedicated segments, passed a security audit with 0 findings, and cut lateral movement risk findings 90%.

Extra-Curricular Activities

Member of a network engineering user group of about 400, presenting about once a year on automation.
Volunteer network engineer for a community clinic, maintaining the network of 3 sites since 2022.
Play in a recreational cricket league, about 20 matches a season.

Leadership

Technical lead for a network team of 12, owning design standards, change review, and the on-call escalation path.
Mentored 5 engineers through professional-level certifications with a 100% pass rate since 2021.
Present network availability, cost, and project status to the chief information officer monthly.

Sebastian Krauss

(703) 555-0198 ◇ Reston, VA

sebastian.krauss@example.com ◇ linkedin.com/in/sebastian-krauss ◇ sebastiankrauss.com

Objective

Network security engineer with 8 years securing enterprise and government contractor networks, currently the lead network security engineer for a defence contractor with 12,000 users, 30 sites, and 3 classified enclaves. Owns a perimeter and segmentation architecture of 60 firewalls and 200 security zones, holds a 0 successful network intrusion record across 4 years and 3 external penetration tests, and cut firewall rule sets 45% through a rule lifecycle programme that removed 8,000 stale rules. Passed 6 compliance audits with 0 network findings. Designs security controls that engineers can operate and auditors can verify.

Education

B.S. in Cybersecurity, Potomac Crown University 2013 – 2017

Coursework in Network Security, Cryptography, Secure Network Design, Intrusion Detection, Operating System Security, and Risk Management.

CISSP, Palo Alto Networks Certified Network Security Engineer, and CCNP Security, ISC2, Palo Alto Networks, and Cisco 2019 – 2023

Also holds a GIAC Certified Intrusion Analyst certification earned in 2021 and an active security clearance.

Skills

Network Security Engineering

Next-generation firewall design and policy, network segmentation and zero trust architecture, intrusion detection and prevention, virtual private network and remote access security, network access control, secure network design for classified environments, DDoS mitigation

Operations and Response

Firewall rule lifecycle management, security monitoring and alert tuning, incident response for network events, threat hunting on network telemetry, vulnerability management for network devices, penetration test remediation, change control

Compliance and Governance

NIST 800-53 and 800-171 control implementation, CMMC readiness, audit evidence and documentation, security architecture review, policy authorship, vendor security assessment, risk reporting to leadership

Tools & Platforms

Palo Alto Networks firewalls and Panorama, Cisco Firepower and ISE, Fortinet, Zscaler, Splunk, Zeek and Suricata, Tufin, Tenable, Wireshark, Python, ServiceNow, Ansible

Experience

Lead Network Security Engineer 04/2021 – Present

Potomac Crown Defense Systems Reston, VA

Lead network security for a defence contractor with 12,000 users, 30 sites, and 3 classified enclaves, owning 60 firewalls, 200 security zones, and a team of 6 engineers.
Hold a 0 successful network intrusion record across 4 years and 3 external penetration tests, and passed 6 compliance audits including CMMC and NIST 800-171 assessments with 0 network findings.
Cut firewall rule sets 45% by removing 8,000 stale rules through a rule lifecycle programme, and cut network security alert volume 70% while raising true positive rate from 12% to 58%.

Network Security Engineer 07/2017 – 03/2021

Dulles Line Technology Services Herndon, VA

Engineered network security for a managed services provider supporting 25 federal and commercial customers and 180 firewalls over 3.75 years.
Led the migration of 25 customers from legacy firewalls to Palo Alto Networks with 0 unplanned outages across 60 cutover windows.
Built a Splunk detection content library of 90 network rules that identified 14 confirmed intrusion attempts in 2 years.

Security Operations Intern 05/2016 – 08/2016

Dulles Line Technology Services Herndon, VA

Triaged about 2,000 network security alerts during a 12-week internship and documented 20 tuning recommendations that cut false positives 30%.
Audited 1,200 firewall rules for a customer and identified 340 unused rules removed in the next change window.
Received a full-time offer at the end of the 12-week internship based on the firewall audit.

Projects

Zero Trust Segmentation Programme. Designed and led an 18-month segmentation programme moving 12,000 users and 3,000 servers from a flat network into 200 security zones with Palo Alto Networks firewalls, Cisco ISE device posture, and application-level policy for 400 applications, which contained 100% of critical systems in dedicated zones, cut lateral movement paths found in penetration tests 90%, and passed a CMMC assessment with 0 network findings.

Firewall Rule Lifecycle Programme. Built a rule lifecycle process with Tufin analysis of 18,000 rules across 60 firewalls, an owner and expiry date on every rule, a 90-day recertification cycle, and automated removal of unused rules after review, which removed 8,000 stale rules, cut rule sets 45%, and cut firewall change lead time from 10 days to 2.

Network Detection Tuning. Rebuilt network security monitoring with Zeek and Suricata sensors at 12 points, 90 Splunk detection rules mapped to a threat framework, and a weekly tuning review with the security operations centre, which cut alert volume 70%, raised the true positive rate from 12% to 58%, and cut mean time to detect network threats from 3 days to 4 hours.

Extra-Curricular Activities

Member of an information systems security association chapter, presenting about once a year on segmentation.
Volunteer mentor for a cybersecurity scholarship programme, coaching about 4 students a year.
Compete in about 5 capture the flag events a year with a team that placed in the top 10 twice.

Leadership

Lead a network security team of 6 with design review, on-call escalation, and a certification development plan.
Chair the network security architecture review board that reviews about 150 changes a year.
Present network security posture, audit status, and risk to the chief information security officer monthly.

Network Engineer Resume Example

Cisco Network Engineer Resume Example

Fresher Network Engineer Resume Example

Network Security Engineer Resume Example

More Resume Examples

Recommended Articles

Ready to Transform Your Job Search?

Products

Free Tools

Resources

For

Company

Developers