SUMMARY:

• Over 8 years of experience in the design, implementation, troubleshooting and documentation of LAN/WAN networking systems in Branch, telecommunication and Data Center environments
• Proficient with network hardware and technologies including routers, switches, firewalls, Ethernet, Fast Ethernet, Gigabit Ethernet.
• In depth expertise in routing protocols ( BGP, OSPF, EIGRP, RIPv1&2 ), Switching architecture and protocols ( VLAN’s, Truncking and Spanning Tree )
• Hands - on experience in configuring Cisco routers/ Switches to perform functions at the Access, Distribution, and Core layers.
• Installation, configuration and maintenance of Palo Alto Firewalls.
• Working experience in wireless environment like cisco ASR and CSR system.
• Solving issues in intra wireless n/w like dealing with access controllers and access points.
• Experience in working with Nexus.
• Excellent working knowledge of TCP/IP protocol suite and OSI layers.
• Experience with Firewall Administration, Rule Analysis, Rule Modification.
• Implemented traffic filters using Standard, Extended and Named access-lists.
• Experience in configuring and troubleshooting IPSEC site to site VPN solutions.
• Working experience with Datacenter Switches such as Nexus 2K, 5K and 7K.
• Solid understanding of GSM, UMTS & LTE Network architecture, Call flow and Traffic Engineering
• Working knowledge of transport connectivity such as T1, CAT5&6 Ethernet, DS1, DS3, Fiber, OC3 and OC12, OC48
• Responsible for Checkpoint and Cisco ASA firewall administration across our global networks.
• Expertise in telecom OSS support and integration of new network elements through OSS
• Experience in Tier- 2 support, BMC Remedy tool, NMS ticketing system, network troubleshooting, handling escalation, Root cause analysis (RCA) and SLA’s
• Understanding of latest security trends, vulnerability assessment techniques and attacks like DOS and Man in the middle attack
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN, Trunks, VTP, Ether channel, STP, RSTP and MST
• Proficiency in configuration of VLAN setup on various Cisco Routers and Switches
• Implementation of HSRP, VRRP and GLBP for Default Gateway Redundancy
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools
• Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, AAA (TACACS and LDAP)
• Experience in trouble-shooting both connectivity issues and hardware problems on Cisco based networks
• Proven ability in problem-solving, decision analysis, Prioritizing work flow, multitasking and team collaboration and Demonstrated leaderships skills and have ability to lead team if necessary
• Team player with excellent verbal and communication skills with ability to lead varied team sizes and capable of working with minimum supervision.
• Experience with F5 Load Balancing.
• Strong hands on experience on PIX, Firewalls, ASA (5540/5550) Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ &RADIUS).
• Expertise in VOIP protocols like H.323, MGCP, SIP, and SCCP.
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.
• Working Knowledge with monitoring tools like Solar Winds and Network packet capture tools like Wire-shark.
• Provided 24x7x365 availability and on-call support as required by the projects.
• Excellent working knowledge of TCP/IP protocol suite and OSI layers.
• Experience of communicating with customers, solving complex problems in a timely productive manner.

TECHNICAL SKILLS:

LAN Technologies: VLAN, VTP, Inter-Vlan routing, STP, RSTP, PVST, IGMP, 802.1x

WAN Technologies: Frame Relay, ISDN, PPP, ATM, MPLS, Channel & Leased lines, SES

WLAN: Autonomous AP s, Lightweight AP s, WLC, WDS, WLSE, Standards - 802.11a, 802.11b, 802.11G

Network Securities: NAT/PAT, VPN, Filtering, Load Balancing, IDS/IPS, IPSec, ACL

Firewall: Cisco ASA5585X, ASA5525, ASA5510, Pix525, 535, Juniper SRX series, Palo Alto, Check Point R6X, R7X

Devices: Routers (1700, 1800, 2500, 2600, 2800, 3200, 3600, 3700, 3800, and 7200), Cisco L2 & L3 Switches (3750, 3560, 4500 & 6500) Series, Nexus 2k, 5k and 7k s, Cisco FWSM s, ASA Firewalls (5510, 5520, 5540 & 5585), Juniper Ex switches, Mx Routers, Aruba equipment

Routing Protocols: RIP, EIGRP, OSPF, BGP

Routed Protocols: TCP/IP, IPX/SPX

Infrastructure Services: DHCP, DNS, SMTP, POP3, FTP, TFTP

Network Managements: SNMP, SSH, Telnet, ICMP, Cisco Works, HP Open-view, Solar Winds, Cyber Ark, Wireshark, NetMRI, VSphere5.0

IP Telephony: VOIP, T1/ISDN/ PRI, Call manager Express, SIP, H.323

Documentation: MS Office, MS VISIO

Scripting Language: Shell scripting, Python

Operating Systems: Windows 10/8.1/ 7 /Vista/XP/NT/2003, UNIX, Ubuntu Linux

PROFESSIONAL EXPERIENCE:

Confidential, Raleigh, NC

Sr. Network Engineer

Responsibilities:

• Strong experience in Networking, including hands-on experience in providing network support, installation and analysis for a broad range of LAN/WAN communication systems.
• Expertise in installing, configuring and troubleshooting Juniper EX Switches (EX2200, EX2500, EX3200, EX4200, EX4500, EX8200 series) and QFX 3500s as Layer 3 switches to enable routing between VLANs.
• Managed corporate Checkpoint smart console R77, R75.20 and R75.40 implementing security rules, experience on using Smart Dashboard, Smart view Tracker to mitigate network attacks.
• Writing MOPS for Decommissioning Ports, adding new Firewall rules, adding Vlan Trunks.
• Configuration of Palo Alto firewalls for remote site implementation.
• Migration of servers from one datacenter to another, providing switch connections to the new servers, updating Check Point Firewall rules for the new servers, A10 to F5 load balancers Migration.
• Strong knowledge of Cisco and Juniper software, Nortel (IOS/XR and JunOS) and hardware
• Creating new nodes and Pools in F5 load balancers to support newly added servers in Layer 3 environment.
• Expert Level Knowledge about TCP/IP, Spanning-tree, and OSI models.
• Involved in the Team of Data Center Operations to perform duties like administration and monitoring of Cisco Routers and Switches according to the organization requirements.
• Configuring and implementing Remote Access Solution: IPsec VPN, AnyConnect VPN and SSL VPN.
• Deployed and configured Cisco ASR 1000, 7000, 9000 series routers.
• Planned and implemented network designs, including WAN, LAN, MPLS.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.
• Relocated and reconfigured Cisco routers, Wireless AP's and HP Procurve switches as needed.
• Daily work involved supporting local LAN HP ProCurve switches and Cisco WLAN.
• Troubleshooting issues related to L2 protocols - VLAN, STP, RSTP and IGMP Snooping. L3 protocols - RIP, OSPF, BGP, IPv4, IPv6, TCP/IP, DHCP, DNS, Multicast, 1/10 GB, Ethernet & SNMP.
• Cisco Nexus 7000, 5000 series installation and configuration, implementation with Port channel And troubleshooting in a TCP/IP OSPF environment.
• Assisted in creating network design standards for hardware and software. Experience with various Ticketing systems such as Remedy, USD and creating work orders with citrix web applications
• Involved in Network Designing, Routing, DNS, and IP Subnetting, TCP/IP protocol.
• Experience in implementing LDAP security models. Utilized Resource Analyzer and og analyzer for performance testing and troubleshooting and Knowledge on managing LDAP Policy store
• In-depth knowledge and hands-on experience on IP Addressing, Subnetting, VLSM and ARP, reverse & proxy ARP, Ping Concepts
• Worked with Cisco Catalyst 6500, 4500, 3750, and 3560, 2960 switches and Cisco 2800, 3600, 3800, 7200, 7600 and ASR series Routers.
• Worked on migrating the F5 LTM 5100 version 9.2 to 5100 LTM version 9.4 and F5 GTM configurations.
• Involved in the team for designing and Configured Nexus 7000/5000/2000 in Top of Rack & End of Row Architecture for a Scalable Production Network that supports Rack & Blade server architecture in a Multi-Tenancy environment using VPC, VDC & VRF
• Experienced in Configuring/Troubleshooting Routing Protocols EIGRP/OSPF/BGP/RIP.

Confidential, Boston, MA

Sr. Network Engineer

Responsibilities:

• Installation, configuration and maintenance of Palo Alto Firewalls, Cisco ASA firewalls.
• Deployed and managed Varonis specifically Data Governance, Data Advantage and Data Alert modules in complex environments.
• Dealing with intra wireless n/w system like ACL’s and access points.
• Demonstrate the features and benefits of Varonis software to the staff and documented the operations.
• Used Varonis Data advantage and Data Alert to monitor and analyze and alert file system activities on NAS.
• Solving the issues of wireless devices and maintaining the hardware.
• Switch experience includes Cisco Catalyst switches: CISCO 3750, 4500, 6500 series switches and Cisco Nexus switches 7000 and 7700 series.
• Performed Checkpoint firewall upgrade of 50 firewalls from R55 to R65. Administered Juniper 50, 200, 500, and SSG 520 firewalls.
• Troubleshoot and hands on experience on security related issues on Cisco ASA/PIX, Checkpoint, IDS/IPS, Palo Alto and Juniper Net screen firewalls.
• Configuration and maintenance of Juniper Net Screen SSG-550.
• Configured Routers for OSPF, EIGRP, BGP protocols.
• Hands on experience and Good Understanding of OSPF, BGP, MP-BGP, MPLS-VPN.
• Configuration and maintenance of OSPF protocol which was the enterprise IGP. Configuration included deploying of new branch locations or new network devices in the existing infrastructure. Creating Stub Areas & configuring Summarization for effective Routing.
• Using PBR with Route Maps for route manipulation/filtering. Troubleshooting routing issues like suboptimal routing and asymmetric routing.
• Configured Object Grouping on Palo Alto Firewalls.
• Provided technical support for full setup, debugged the problems of OSPF, switching and HSRP.
• Switching related tasks included implementing VLANs, VTP and configuring and maintaining multi VLAN environment and inter-VLAN routing on Fast-Ethernet channel.
• Protocol Handling and Code up gradation on Palo Alto Firewalls.
• Conducted vulnerability assessments and generic security scans of both systems and networks to identify and mitigate security vulnerabilities using Nessus Vulnerability Scanner.
• Design, implement and provide second level support for host load-balancing solutions at SWA.
• Working knowledge of the UNIX and CLI based command to implement the networking tools.
• Configured and monitored Firewall logging, DMZ’s and related security policies.
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches, fixes, and all around technical support.
• Configuration of ACLs in Cisco 5540 series ASA firewall for Internet Access requests for servers in LAN and DMZ and also for special user requests as authorized by management.

Confidential, O’Fallon, MO

Sr. Network Engineer

Responsibilities:

• Worked on Network design and support, implementation related internal projects for establishing connectivity between the various field offices and data centers.
• Responsible for the installation, configuration, maintenance and troubleshooting of the company network. Duties included monitoring network performance using various network tools to ensure the availability, integrity and confidentiality of application and equipment and to provide support for Cisco network.
• Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers and Cisco ASR 9K routers
• Upgrading system images on Nexus 5 and 7 multi-layers’ switches using kick start and FTP server.
• Data center fabric migration from legacy catalyst to nexus.
• Used 7000 series switches with 10 and 18 slot chassis with F series module. Used VPC as the multi chassis port-channel solution for Nexus switches.
• Configuring RIP, OSPF and Static routing on Juniper M and MX series Routers
• Configuring VLAN, spanning tree, VSTP, SNMP on EX series switches
• Design and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Performing the daily health Check in Telecomm and Networking.
• Worked on cisco policy trace, Access policies, and URL categories to either give or block the
• Access to particular websites using Iron Port Proxies.
• Worked on CLI to enable the ports and configuration of switches and routers.
• Upgrading the IOS to the newest version using the console, TFTP server on Firewalls, switches and Routers.
• Physically connecting the ports between the switches and the servers on to the racks.
• Setting up the WIFI connections whenever needed as per the users requests.
• Enabling the TCP, UDP, SMTP ports to allow the traffic from one server to another server by
• Performing the trace route to find out where the traffic is blocked by the firewall.
• Setting up the Agents in Cisco Unified Call Manager (UCM), unity, ICM.
• Performed testing of agent Extension mobility phones.
• Assigning the Channels to each agent on VOIP ULTRAVAM devices.
• Troubleshooting the VAM and HUB servers when an issue arises.
• Troubleshooting issues with vendors in case of failures in call recording.
• Troubleshooting connectivity issues to web links on both internal and external domains
• Worked on configuring internet connection within the organization by consulting with different Vendors
• Configured Juniper MX480s, EX8200s, EX4500s, EX4200s, and SRX5800s from scratch to match design.
• Troubleshoot the BIG-F5 1600 LTM through constant contact with the vendor.
• Configuring and troubleshooting site-to-site IPSEC VPN tunnels on VPN concentrators and ASA firewalls with private vendors.
• Deploying and decommissioning the VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices.
• Experienced with Juniper: EX-2200, EX-4200, EX-4500, MX-480 and M Series, SRX210 and SRX240.
• Worked on commissioning and decommissioning of the MPLS circuits for various field offices.
• Network Cabling, dressing, labeling and troubleshooting various network drops onsite.
• Worked on Organization’s cell phones issues.
• Weekly documentation of updates on our technical work.

Confidential

Network Engineer

Responsibilities:

• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, and BGP v4. Configured IP access filter policies
• Configured CIDR, IP, RIP, PPP, BGP and OSPF routing.
• Identify, design and implement flexible, responsive, and secure technology services.
• Experience with Firewall Administration, Rule Analysis, Rule Modification.
• Troubleshoot traffic passing managed firewalls via logs and packet captures.
• Configured and resolved various OSPF issues in an OSPF multi area environment.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO.
• Configuring IPSEC VPN on SRX series firewalls.
• Configuring Virtual Chassis for Juniper switches EX-4200, Firewalls SRX-210.
• Worked on Extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series, CHECKPOINT AI, NGX, Nokia IP 740/530/340 Appliances on IPSO platform.
• Design, implementation and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Estimated Project costs and created documentation for project funding approvals.
• Planned resources and presented project status to higher management.
• Deployed 7613 as PE and CE router and Configured and troubleshoot the Edge Routers.
• Excellent troubleshooting knowledge on T1, T3, OC-3 and OC-12.
• Created and delivered internal trainings for BGP.
• Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
• Installed different software on the systems. Install and managing network devices including Hubs, Switches.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost effective network solutions to accommodate customer requirements and project scope
• Configured egress and ingress queues for ISP facing routers using CBWFQ.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Ability to analyze, configure and troubleshoot networks.
• Worked on Unix, Linux, Windows Platforms and also involved in capacity planning of Network maintenance.