Software Engineer
Current***Cloud-Native ZTNA for SASE***Actively involved in the design discussions of the Linux based IPSec Concentrator.Hands-on experience on setting up Strong swan with Route based VPN using XFRM.Demonstrated Site-Site VPN, and Road warrior scenarios using EAPMSCHAPv2.Working knowledge of GENEVE, and GRE protocols.Proved Multi Tenancy using VRF based routing, IP Tables, and Rules.Tenant Identification with overlapping IPs in XFRM based IPSec Tunnels, and EAP_ID in Remote clients.Got hold of the source code and containerized Strongswan and Envoy.Understanding of Envoy Proxy setup and configurations.Containerized and Automated the Routes and IP Tables using Python and Shell scripts.Orchestrated the IP Sec Concentrator Container on K8s from scratch.Comprehensive understanding and hands-on knowledge of Kubernetes architecture and open-source add-ons like, Metal LB, Calico..etc.Developed a Golang based GUI application acting as a windows VPN Client with oAuth based authentication.