Vivek Dasondhi

Google Cloud Network, Security & AI Security Lead

• Lead the design, implementation, and governance of Google Cloud networking, cybersecurity, and AI security solutions across enterprise environments.
• Define GCP network and security architecture, standards, policies, and best practices aligned with organizational security and business requirements.
• Design and manage VPC, Shared VPC, subnets, routes, firewall policies, Cloud NAT, Private Google Access, and VPC Service Controls.
• Implement security controls for GCP workloads, applications, APIs, data, and cloud infrastructure.
• Design secure architectures using Cloud Armor, Load Balancing, Private Service Connect, Cloud DNS, IAP, and other GCP security services.
• Lead AI/ML security initiatives, securing AI workloads, models, APIs, data pipelines, and AI platforms deployed on Google Cloud.
• Implement AI security and governance controls covering data protection, model access, identity, authorization, prompt/input security, output validation, and protection against AI-related threats.
• Establish security practices for Generative AI and LLM workloads, including protection against prompt injection, data leakage, unauthorized model access, and insecure AI integrations.
• Implement secure-by-design principles for AI applications and ensure appropriate controls across the AI/ML lifecycle.
• Lead security assessments, threat modeling, vulnerability management, risk remediation, and compliance initiatives across GCP environments.
• Automate network and security infrastructure using Terraform / Infrastructure as Code (IaC) and develop reusable security modules and templates.
• Troubleshoot complex networking, DNS, routing, firewall, IAM, VPN, security, and AI security issues, including root-cause analysis and remediation.
• Collaborate with Cloud Architects, DevOps, Application, Infrastructure, SOC, Cybersecurity, Data Science, and AI/ML teams to deliver secure and scalable solutions.

• Spearheaded design and implementation of GCP-based solutions aligned with business goals and scalability requirements.
• Assessed existing IT infrastructure, identifying migration opportunities to GCP for enhanced efficiency and cost reduction.
• Collaborated with cross-functional teams to gather requirements, translating them into effective cloud architectures.
• Implemented security best practices in identity and access management, encryption, and compliance to protect cloud assets.

• Implemented high-availability cloud interconnect and VPN to connect on-premises data centers with GCP.
• Designed scalable shared VPC and network peering architectures for multi-project connectivity.
• Configured global and regional cloud load balancing with customized URL maps to optimize traffic distribution.
• Deployed CDN for edge caching and DNS for managed resolution, enhancing access speed and reliability.
• Hardened environments using WAF policies, identity-aware proxy, and hierarchical firewall policies to strengthen security posture.

• Lead the Google Cloud Center of Excellence (COE), driving cloud adoption, standardization, governance, and best practices across the organization.
• Define and implement Google Cloud strategy, reference architectures, standards, and operating models aligned with business and technology objectives.
• Provide technical leadership for GCP cloud infrastructure, networking, security, IAM, compute, storage, and platform services.
• Establish and enforce cloud governance, security controls, policies, compliance standards, and cost-management practices across GCP environments.
• Design and review scalable, highly available, secure, and cost-optimized GCP architectures for enterprise workloads.
• Lead cloud migration, modernization, and transformation initiatives, including assessment, planning, architecture, implementation, and optimization.
• Drive Infrastructure as Code (IaC) and automation using tools such as Terraform and Google Cloud native services to improve consistency and operational efficiency.
• Establish CI/CD, DevOps, automation, monitoring, logging, and observability standards for GCP workloads.
• Work closely with application, security, DevOps, infrastructure, and business teams to ensure successful cloud adoption and delivery.
• Provide architecture reviews, technical guidance, design recommendations, and troubleshooting support for complex cloud environments.
• Define and monitor cloud KPIs, operational metrics, security posture, availability, performance, and cost optimization.
• Drive FinOps and cloud cost optimization, including resource utilization, rightsizing, budget monitoring, and identification of cost-saving opportunities.
• Develop and maintain GCP landing zones, organization/folder/project structures, IAM models, networking standards, and security baselines.
• Establish reusable cloud patterns, templates, automation frameworks, and best practices to accelerate project delivery.

• Resolved customer support cases from initiation to resolution, ensuring customer satisfaction.
• Review network device config files, server logs, and Redseal source code to find the root causes of customer issues.
• Liaised with developers to communicate and prioritize product code fix requests, enhancing product reliability.
• Cultivated relationships with product customers to understand and address their needs and use cases effectively.

• Led end-to-end transition of AWS and GCP hybrid cloud network security across global engagements.
• Managed transition planning, knowledge transfer, and operational readiness for post-transition stabilization.
• Provided comprehensive support for AWS and GCP infrastructure, ensuring hybrid connectivity and security operations in Europe, UK, US, and Germany.
• Designed and configured cloud and on-premises network connectivity, including VPC routing and secure VPNs.
• Supported cloud migration activities, encompassing VM/EC2 migrations and security policy implementation.
• Oversaw enterprise firewalls including Palo Alto, Check Point, and FortiGate, ensuring application load balancing with F5 Big-IP LTM.
• Coordinated new site implementations, collaborating with vendors and infrastructure teams for successful deployment.
• Proactively identified infrastructure issues, driving root cause analysis and remediation actions.

• Managed H1 trading operations, facilitating customer network interactions and supporting network issues.
• Executed multiple implementations and changes to enhance the network environment.
• Communicated with customers and teams to resolve real-time network issues.

• Configured and deployed firewalls in data center and LAN environments to enhance network security.
• Acquired hands-on experience with network firewalls, including Checkpoint, FortiGate, SRX, and Palo Alto, to support diverse security needs.
• Configured and troubleshot network systems, ensuring compliance with established processes to maintain operational integrity.

• Utilized Cisco hardware expertise to manage configurations for 1800, 2800, 3700, 3800, and 7200 series routers.
• Configured router settings for BT Channels to support connectivity across Europe, Australia, Asia-Pacific, US, and UK.
• Configured and troubleshot network processes and requirements to ensure optimal performance.