Terraform module to create vSRX instances in AWS

Kumar Muthuswamy
Sr. Principal Cloud Network Engineer at Aviatrix
Cloud Networking & Data Center Technology Leader · Ex-Juniper Networks
Bengaluru, Karnataka, India
I bridge technology strategy and business outcomes through enterprise and data center solutions architecture, multi-cloud transformation, strategic customer engagement, and AI-driven innovation.
01 About
Networks that serve the business
I’m a cloud networking and technology leader with 15+ years of experience across enterprise and data center solutions architecture, multi-cloud strategy, network security, and infrastructure modernization. I enjoy turning complex challenges into seamless solutions for global enterprises.
My background spans solutions architecture, technical sales, and strategic customer advisory. I translate enterprise requirements into business-aligned solutions and work closely with executive stakeholders. Along the way, I delivered a $250 million multi-year RFP-winning proposal and exceeded sales projections by 600%.
Today I focus on AI-native innovation: Agentic AI, intelligent automation, and next-generation network operations. Let’s connect to explore how my expertise can contribute to your strategic goals.
- years in cloud, data networking & security
- 15+years in cloud, data networking & security
- multi-year RFP-winning proposal delivered
- $250Mmulti-year RFP-winning proposal delivered
- above sales projections
- 600%above sales projections
- success rate in seamless upgrades
- 90%success rate in seamless upgrades
02 Experience
Where I’ve worked
15+ years across cloud networking, data center, and security — from support engineering to solutions architecture.
Sr. Principal Cloud Network Engineer · Aviatrix
Oct 2021 – Present
Bengaluru, Karnataka, India
I design and architect secure multi-cloud and on-prem (data center) connectivity for enterprise customers across the US, EU, and APAC, migrating applications from native and on-prem networking to Aviatrix-based connectivity and cloud security.
- Led the upgrade transformation project, achieving a 90% success rate in seamless upgrades by automating proactive detection of known issues.
- Implemented an AI chatbot in production, achieving a ~10% reduction in support tickets.
- Engineered an automated workflow that converts customer queries and tickets into knowledge base articles, integrated with the AI chatbot to speed up resolution.
- Designed and presented an Agentic AI solution to executive leadership to further enhance customer experience.
Selected customer use cases
- Secured cloud-to-Internet egress with FQDN Layer 7 filtering and distributed cloud firewall solutions.
- Built high-speed encrypted connectivity from on-prem data centers and remote offices to the cloud with Aviatrix Edge, as a secure overlay on Direct Connect and ExpressRoute.
- Interconnected existing customer SD-WAN solutions to cloud applications using Aviatrix BGP over LAN and Azure Route Server.
- Orchestrated TGW for customers who wanted native VNET connectivity with more policy flexibility.
- Inserted centralized firewalls with FireNet, deploying Palo Alto, Check Point, and Fortinet to secure east-west and north-south traffic.
AWSAzureGCPOCIAviatrixAgentic AICustomer Service Manager · Juniper Networks
Jun 2020 – Oct 2021
Bengaluru, Karnataka, India
Coordinated cross-functional teams to oversee operations for the largest cable provider in the USA (Comcast), focused on Juniper QFX switches and MX and PTX routers.
- Orchestrated the migration of headend SRX capabilities to AWS using vSRX and ELB.
- Led stabilization of a Remote-PHY deployment using DOCSIS 3.1, optimizing Kubernetes (K8s) clusters for vCMTS and integrating Juniper switches into the network underlay.
- Directed the implementation of BGP-RPKI, strengthening network security through accurate route validation.
QFXMXPTXvSRXAWSKubernetesBGP-RPKIConsulting Systems Engineer (Architect) · Juniper Networks
Aug 2012 – Aug 2018
Dallas–Fort Worth Metroplex, USA
As a technical sales engineer, delivered product presentations and routing, data center, and security solutions to network architects and executives at a Tier 1 ISP in the USA (Verizon), and responded to RFPs and RFIs.
- Secured a multi-million-dollar, multi-year deal by showcasing MX router node-slicing technology for the customer’s next-gen edge network.
- Exceeded sales projections by 600%; earned two promotions and progressed to lead sales engineering for the account.
- Led the first phase of certification using agile methodologies, achieving a 50% reduction in certification time.
- Designed VPLS-to-EVPN-MPLS migration for multiple edge networks, and advised on automation and telemetry using YANG, NETCONF, gRPC, MQTT, and OpenDaylight.
MXEVPN-MPLSVPLSSRXNETCONFYANGgRPCSenior Consultant · Integralis (an NTT company)
Oct 2011 – Jul 2012
Sunnyvale, California, USA
Supported accounts across the USA as a senior consultant focused on technical pre-sales engineering.
- Delivered technical presentations and competitive analyses to secure contracts.
- Developed Statements of Work and implemented Juniper and Palo Alto Networks solutions.
- Created new business opportunities through routing expertise, driving growth beyond security solutions.
JuniperPalo Alto NetworksPre-salesCustomer Focused Technical Support Engineer · Juniper Networks
Jun 2009 – Oct 2011
San Francisco Bay Area, USA
Delivered technical support for major ISPs and content providers.
- Diagnosed and resolved complex software and hardware issues across network deployments of over 1,000 devices.
- Collaborated with development teams to replicate customer environments, leading to effective bug fixes.
- Earned multiple Customer Satisfaction (CSAT) awards and resolved a critical network-wide outage that strengthened customer trust.
JunosBGPMPLSOSPFIS-ISL3VPNVPLSCustomer Service Intern · Juniper Networks
Aug 2008 – May 2009
Herndon, Virginia, USA
Supported critical customers through lab design, relocation, and maintenance.
- Managed the design and relocation of a customer lab with 200 devices, with only two days of downtime.
- Worked with the facilities team to optimize power and connectivity, and maintained Juniper MX, EX, and T-series routers and switches.
College Intern – IT · Office Depot
May 2008 – Aug 2008
Boca Raton, Florida, USA
Supported the IT team on a desktop-to-thin-client replacement effort.
- Tested and implemented VoIP soft phones using Citrix remote app publishing to thin clients.
- Assisted with regular server maintenance.
More notable accomplishments
- Influenced strategic enterprise cloud networking deals through differentiated proof-of-concept (POC) solutions and customer-specific architecture, improving deal-conversion rates by 15%.
- Designed VPLS-to-EVPN-MPLS migration strategies for global edge networks, enabling potential OPEX savings of 30%.
- Resolved a network-wide outage in a multi-vendor VPLS environment, contributing to Juniper securing subsequent deployment contracts.
03 Projects
Open source on GitHub
Terraform modules, network tooling, and GenAI experiments — pulled live from my public GitHub repositories.
[ADD: project description]
Distributed Firewalling Terraform module
Simple shell script to collect some outputs to troubleshoot packet drop on a linux system acting as a router
Terraform modules
[ADD: project description]
Notes on randome stuff
Generative AI week4 content
GenAI Agent MCP - Try
04 Skills
What I work with
Cloud & Infrastructure
- AWS
- Azure
- GCP
- Multi-Cloud & Hybrid-Cloud Architecture
- Data Center Architecture
- Virtualization
- Linux
Network Architecture & Protocols
- BGP
- MP-BGP
- OSPF
- IS-IS
- MPLS
- VPLS
- EVPN
- VXLAN
- L2/L3 VPNs
- IPv6
- TCP/IP
- DNS
- GRE
- UDP
- VRRP
- MC-LAG
- NetFlow
- IPFIX
Network Security
- IPsec
- NAT
- Stateful Firewalls
- NGFW
- Application Firewalls
- vSRX
- Layer 7 Filtering
- FQDN Filtering
- DDoS Mitigation
- BGP FlowSpec
- IAM
- PKI
- TLS/HTTPS
- DNSSEC
- OAuth 2.0
- SAML
- SPIFFE/SPIRE
- Aviatrix FireNet
- Linux Firewalls
- iptables
Platforms
- Aviatrix
- Juniper Networks
- Cisco
- Palo Alto Networks
- eBPF
Automation & Infrastructure as Code
- Python
- Terraform
- Ansible
- Pulumi
- Shell Scripting
- NETCONF
- YANG
- gNMI
- gRPC
- Git
- GitHub
Observability & Data
- Prometheus
- Grafana
- ELK Stack
- SQL
- Pandas
- Matplotlib
- MQTT
Containers
- Kubernetes
- Docker
AI & GenAI
- LLMs
- Agentic AI
- RAG
- LangChain
- CrewAI
- Model Context Protocol (MCP)
- Prompt Engineering
- Context Engineering
- Vector Databases
- AI/ML
- Harness Engineering
Core competencies
- Multi-Cloud & Hybrid-Cloud Strategy
- Enterprise & Data Center Solutions Architecture
- Technical Sales & Strategic Solution Consulting
- Cloud Networking & Infrastructure Modernization
- Data-Driven Product Strategy & Technology Roadmapping
- Executive Stakeholder Management & Advisory
- Strategic Account Management & Customer Engagement
- Cross-Functional Technology Leadership
- AI-Native Innovation & Intelligent Automation
- Network & Cloud Security Transformation
05 Education & Certifications
Learning, formal and ongoing
Education
Master’s in Telecommunications
George Mason University · Fairfax, Virginia, USA · 2007 – 2009
Bachelor of Engineering, Electrical and Electronics Engineering
University of Mumbai · Mumbai, India · June 2006
Certifications
- Mar 2025
Hands-on AI Masterclass I: Fundamentals
You.com
- Oct 2021
Aviatrix Certified Engineer – Multi-Cloud Networking Professional
Aviatrix
- Oct 2021
ACE Multi-Cloud Networking Associate
Aviatrix
HashiCorp Certified Terraform Associate
HashiCorp
- Dec 2007
Cisco Certified Network Associate (CCNA)
Cisco Systems
06 Ask
Ask about my experience
Short on time? Ask a question and get an answer drawn from my résumé.
Answers are AI-generated from my résumé and LinkedIn profile and may contain mistakes.
07 Contact
Let’s Work Together
Have a multi-cloud networking challenge, a security architecture question, or an idea for applying AI to network operations? I’d like to hear about it.
- [email protected]
- linkedin.com/in/kumarmuthuswamy
- github.com/qmar1
- Bengaluru, Karnataka, India