We provide IT Staff Augmentation Services!

Cloud Network Security Engineer Resume

2.00/5 (Submit Your Rating)

Philadelphia, PA

PROFESSIONAL SUMMARY:

  • Cisco Certified Network Associate (CCNA) with 8+years of professional experience in Network Planning, Implementing, Configuring, Troubleshooting and Testing of networking system
  • Experience in working with number of public and private cloud platforms like Amazon Web Services (AWS), Rackspace Cloud and Openstack .
  • Expertise in architecting, managing and deployment of cloud "applications" in number of public as well as private clouds.
  • Proficient in using all AWS offerings including EC2 , Block Storage (EBS), Load - balancers (ELB), Auto scaling groups, Cloud Formation Templates , EMR , Route53 and others.
  • Expertise in architecting secure VPC solutions in AWS with the help of Network ACLs, security groups, public and private network configurations.
  • Hands on experience in setting up databases in AWS using RDS , storage using S3 bucket and configuring instance backups to S3 bucket to ensure fault tolerance and high availability.
  • Excellent working knowledge of TCP/IP protocol suite and OSI layers
  • Good knowledge and experience in FTP, DNS, DHCP, TFTP, LAN, LINUX and WAN environments
  • Proficiency in supporting Enterprise Level LAN, MAN and WAN Networks
  • All-encompassing execution& configuration proficiency of Firewalls as Cisco PIX (515/535/525), Cisco ASA Appliance ASA 5510 and Pala Alto Security devices
  • Experienced with Juniper JUNOS device configuration like Juniper Router and Juniper switches
  • Experience in LAN networking technologies (Spanning-Tree, VLAN, DTP, HSRP, VRRP, GLBP) and Experience in Routing Protocols (EIGRP, OSPF and BGP)
  • Configured Checkpoint Firewalls and installed it into enterprise network. Also F5 Load balancer LTMs and GTMs to divide traffic from the web servers
  • Configuring rules and Maintaining Palo Alto Firewalls & Analysis of Firewall logs using SecureCRT, ASDM, QRadar
  • Hands on experience working with DNS Infoblox DNS server, Checkpoint Firewall Administration and Troubleshooting
  • Implementation and Support of Nexus 7000, Nexus 5000, 6500, virtualization, ACE and Data Center Project implementation
  • Having advanced knowledge in Cisco ASA 5000 series and PIX installation, configuration and maintenance
  • Proficiency in supporting Enterprise Level LAN, MAN and WAN Networks
  • Experienced in CTIOS , Call Manager Express (CME) , Cisco Unity Express (CUE), voice gateways, H323 ), and voice applications
  • Expert in Cisco IOS and Nexus-OS upgrades, VDC, VPC/VPC+, VRFs and Fabric Path support and configuration
  • Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS) and deploying GRE Tunnel
  • Experience in Network Management Tools and sniffers like SNMP, Wire shark and Cisco works to support 24 x 7 Network Operation Center
  • Experience in switch security and network security firewalls technologies . And LAN/WAN Network Support for TCP/IP based devices
  • Well versed with all the Openstack components like keystone , Swift, nova, cinder, glance.
  • Excellent understanding modern cloud ( compute, storage, networking ) application architectures on Openstack to ensure easy monitoring and high availability.
  • Experience in creating and managing new Users, roles and projects through Keystone.
  • Setup public networks and configured VPCs with SDN using neutron, Worked on Openshift like development, peer/review testing, deploy and production.
  • In production we can used similar configuration and deployment by using openshift
  • Integrated puppet deployment with GIT and gerritt with automated Jenkins ci, Familiar with multiple data stores.

TECHNICAL SKILLS:

Networking Equipment: Cisco 2500,2600,2800,3600,3800,7200,7600 series routers, Cisco 1900,2900,3550,3750,4900,6500 series catalyst switches, ACE load balancer 4700, F5 Load Balancer

SAN: VSAN, LAN free Backup, FCoE

Infrastructure services: DHCP, DNS, SMTP, FTP, TFTP, POP3

Network Security: IPsec, VPN Configuration,, ASA 5505, 5510 Firewalls, NAT/PAT, IDS/IPS, Ethereal, Internet Content Filtering, DHCP SNOOPING, IDS/IPS, URL Filtering -Web-sense,, SSL, IPSEC, IKE, Static, Dynamic, Reflexive ACL, and authentication AAA (TACACS+ & RADIUS)

Communication Protocols: TCP/IP, IPv6, ARP, VLAN (802.1q, ATM), PPP, HTTP, SSH, Frame Relay, MPLS, 802.11.

Technologies: Openstack, AWS, Rackspace-Cloud, Networking, VMware, System Administrator

Routing Protocols: RIP v1 & v2, EIGRP, IGRP, OSPF, BGP, IS-IS, HSRP, ipv6 addressing, VRRP and GLBP.

LAN technologies: Ethernet/ Fast Ethernet/ Gigabit Ethernet networks, VLANS, VTP, STP,RSTP, 802.1q

WLAN Technology: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1/T3 & SONET

LOAD BALANCERS: BIG IP F5 LOAD BALANCER,INFLOBOX,CISCO ACE

PROFESSIONAL EXPERIENCE:

Confidential, Philadelphia, PA

Cloud Network Security Engineer

Responsibilities:

  • Creating Instances like different locations for the use of Openstack and AWS Clouds
  • Instances are running for the use of KAFKA & ZOOKEEPER
  • We were creating the Brokers for the use of Kubernates, kafka, zookeeper
  • Checking and pinging for the public and private clouds for the VCMTS VIRTUALIZATION Project
  • In Virtualization we were creating multiple VM’s for single Moonshoot
  • Creating Network seetings and Network configuration settings for every cartridges and every moonshoot
  • Cloud bases we were using Openstack Compute, For compute the instances were creating for different sizes and different GB’s
  • For Images storing we were using Docker and Docker Conatiners for VCMTS Project
  • Cisco ASA Firewall Policy Provisioning and troubleshoot connectivity issues through firewall
  • Configuring and Troubleshooting of Various Firewall ACL, NAT rules, policy and protocols like OSPF and Switching protocols like STP, VLAN, VTP Using CLI, SecureCRT, Skybox and Cisco ASDM
  • Creating and Testing Cisco Firewall and Switch operations using security protocol, IPS, ASA Firewalls, and MPLS switching for stable VPNs using WAN backbone
  • Migrating Virtual Firewalls to Physical Firewall and Cisco ASA to Palo Alto Firewalls
  • Migration of Cisco ASA to Palo Alto using Palo Alto Migration Tools.
  • Provide Service Support to Clients regarding LAN/WAN connectivity Configuring and Modification of ACL, NAT Rules and Port numbers in ASA Firewalls using CLI, SecureCRT, and ASDM
  • Firewall Clustering and High Availability Services using Cisco ASA. Troubleshooting User connectivity issues on Cisco ASA using CLI utilities
  • Worked on BIOS upgrde for moonshoots, using on HP and HARMONIC servers for 12 core and 16 core cartridges
  • Creating public IP’s and private IP’s for HP and HARMONIC servers
  • HP servers for Ubuntu 16.04 Image we were using and installation for all 12 core cartridges
  • Confidential we were using and creating licenses for HP EL 4000 series
  • Checking on system health for all rack space in the SIT LAB
  • Configuration on Juniper switches and cisco switches for network configuration
  • Network configuration settings are changing for MDC to Central data center
  • Creating NETMASK, SUBNETMASKS, for every cartridges
  • Checking on Network issues for routing switches and security levels for CICD Servers.
  • Packet capture on firewalls and analyzing the traffic using CLI, Cisco ASDM, Wire shark utilities
  • Troubleshoot Clustering issues on ASA and Sync issues monitoring and fix. Implemented Active/ Standby configuration on Cisco ASA Firewalls
  • Configuring Cisco ASA firewalls in Single and Multiple Context Mode firewalls. Upgrade of Cisco ASA Firewall in Active/Standby mode
  • Firewall Compliance and Rule remediation for compliance such as PCI Audit
  • VLAN implementation, Spanning Tree Implementation and support using PVST, R-PVST and MSTP to avoid loops in the network. Trunking and port channels creation
  • Working with OSPF as internal routing protocol and BGP as exterior gateway routing protocol
  • Configuring static NAT, dynamic NAT, Inside Global Address Overloading, TCP overload distribution, Overlapping Address Translation on Cisco ASA Firewalls
  • Implemented VLANS between different departments and connected them using trunk by keeping one VLAN under server mode and rest falling under client modes
  • Network Router and Switch protocol configuration for firewall access
  • Network IDS/ IPS Signature tuning. Escalating IDS and Firewall handling requests to third party vendors
  • Generate and maintain platform-specific security baselines
  • Firewall security Protocols, Access-list, Network address translation, Network Policy, object list, ISAKMP and IPSec for Site to site VPN and Firemon, Vendor / Managed Service Provider escalations

Environment: Openstack, Kubernates, Networking, Cisco Catalyst 2960/3750/4500/6500 Series Switches, Cisco 2800/2900/3000 Series ISR’s and Cisco 3640/ 0/3845/3600/2800 routers, Cisco Nexus 7K, Cisco ASA 5500, Checkpoint, windows server 2003/2008, F5 BIGIP LTM/GTM, ACL, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.

Confidential, Richardson, TX

RAN Staff Engineer

Responsibilities:

  • Responsible for the operations, Maintenance, Troubleshooting, Re-integration and support of the MDC Centers (5G Network).
  • Solid understanding about fiber interfaces and optical levels.
  • Performs all components of cell site maintenance including: Automatic/Manual optimization Antenna testing and result analysis.
  • Ensure power systems are functional which includes performing and analyzing battery routines.
  • Performs inspection of routine preventive maintenance, equipment alarm analysis, inspection wave guide pressure and desiccant annual preventive maintenance on all Radio types
  • Advanced Trouble Shooting, Basic Installation and acceptance of radio and path alignment with Tower crew.
  • Assists more experienced Site/ Field Engineers and RF support team in testing and repairing Network Equipment.
  • Operations of DELL in IDRAC, BIOS, VRAN, VCORE.
  • Ensure the VRAN on Boarding, VRAN Instantiation, we were used Openstack process IP instead of EMS-GUI.
  • Performs all VM’ s is installed successfully, active and running.
  • Ping between the SSH and VM’ s is successfully through the External IP’ s and Internal IP’s.
  • Analysis of Intelligent multi-user interferences reduction schemes to quadruple capacity grains in Optical CDMA.
  • Worked on FUPC, FNMC, FCPC Hosts. Creating IP V6, IP v4, and MAC address like sit lab and Market Data Centers, Central Data Centers.
  • Through understanding LTE Users, UMTS users. Good understanding on 4G, LTE, 5G Networks layers.
  • Testing on validating handset performance in Live Network environment.
  • Worked on MDC and CDC Centers like connections between Firewalls open, testing, troubleshooting.
  • Perform technical planning, system integration, verification and validation, cost, risk analysis and effectiveness studies for systems of system integration.
  • Independent problem solver with troubleshooting, design making and analytical skills.
  • Requires limited supervision, self-starter, strong time management skills.
  • Virtual Desktop Administration preferably using VMware Horizon View.
  • Deploy, test and document development, Pre-production and production.
  • Diagnoses and troubleshoots problems with PCs, software, Communication devices with in established procedures, responds to End Users requests for technical support and assistance.
  • Developed and documented IT and network support procedures, process improvements and best practices for internal IT customers and business partners.

Environment: VRAN, VCORE, BIOS, IDRAC, virtualization, IP configuration, Trouble shooting, Connections, Deploy, Testing, VM Horizon, FNMC, FUPC, FCPC, SSH, GUI, External - Internal Configuration, CDMA, 5G Network, Wireshark, Netflow Analyzer, Cisco Works, SNMP, HP open view, Ethereal,SNMP, SSH, Telnet, ICMP, SSL

Confidential, Jersey City, NJ

Network Engineer

Responsibilities:

  • Comprehensive elementary configurations on the F5 Big-IP LTMs and GTM load balancer on prevailing network to divide traffic on web-servers
  • Analyze equipment’s and perform repair as per requirement in Data Centre
  • Setting VLANS and configuring ISL trunk on Fast-Ethernet channel between switches
  • Product analysis and support for Access-layer switches such as Cisco 4510, 4948, 4507, distribution layer switches such as 6513, 6509, 6504 and a routed core
  • Configured site to site VPN for connecting student lab to training and development centers
  • Worked on IP control for management and optimal allocation of IP addresses
  • Configured and deployed Checkpoint, Cisco ASA and Juniper SRX firewalls for various Missouri Information Service Centers
  • Installed and configured Foundry Load Balancer and ASA firewall for a customer web site
  • Experience with Juniper Net screen 520M Firewall and Palo Alto network firewall
  • Implementation and Support of Nexus 7000, Nexus 5000, 6500, virtualization, ACE and Data Center Project implementation
  • Configuring F5 Big-IP LTM and GTM. Responsible for troubleshooting of F5 load balancers
  • Securing network access with Cisco Secure (RADIUS/ TACACS+)
  • Troubleshoot Data center network issues, Cross connectivity and WAN Backbone issues between Data centers
  • Systems monitoring and maintenance, resolution and troubleshooting using Infoblox
  • Managed Cisco firewalls from both the Command line and ASDM
  • Worked with HP engineers for issues pertaining to the new environment and the application
  • Test plan development for quality improvement of development phase
  • Advanced Knowledge in IPSEC VPN design connection and protocols, IPSEC tunnel configuration, encryption and integrity protocols
  • Successfully installed Palo Alto PA 3060 firewalls to Protects Data Center and provided L3 support for routers/switches/firewalls
  • Expertise in maintenance of layer2 switching tasks - VLAN, VTP, RSTP, configuration of ether channel with LACP and PAGP along with troubleshooting of inter-VLAN routing.
  • Experience working in Datacenter environment, configuration changes as per the needs of company.
  • Manage project task to migrate from Cisco ASA firewalls to Check Point firewalls
  • Redesigned Internet connectivity infrastructure for meeting bandwidth requirements.
  • Configuring, implementing and troubleshooting VLAN’s, VTP, STP, Trunking, Ether channels.
  • Configuring, administering and troubleshooting the Check Point, Palo Alto and ASA Firewall
  • Responsible for Configuring Frame Relay, ATM Switches, ISDN, X.25 network
  • Ensure that Firewall Rules are reviewed in accordance with Risk management Framework
  • Configured MPLS L3 & L2 VPNS for research departments using cisco ASR 9004 and 9010
  • Configured ASA 5510 appliance as a Firewall and as a VPN server. Troubleshoot TCP/IP problems; troubleshoot connectivity issues
  • Responsible for Configuring Frame Relay, ATM Switches, ISDN, X.25 network
  • Configuration, implementation, and problem determination across the major firewall platforms and understanding each customer environment at a detailed level. Responsibilities include rule implementations, VPN setups, upgrades, new builds.

Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/ switches and Cisco / 7200/ 3845/3600/2800 routers, Cisco Nexus 7K/5K, Cisco ASA 500, F5 BIGIP LTM, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.

Confidential, Union, NJ

Network Support Engineer

Responsibilities:

  • Configured, tested, implemented and maintained telecommunication and LAN operational support activities of Radio Access Network
  • Worked on installation, maintenance, and troubleshooting of LAN/WAN (ISDN, Frame relay, NAT, DHCP, TCP/IP)
  • Configured Access List (Standard, Extended, and Named) to allow users all over the company to access different applications and blocking others
  • Responsible for design, configuration and maintenance of numerous telecom systems, hardware systems
  • Configuring and installing client and server network software for upgrading and maintaining network and telecommunication systems
  • Experience in Troubleshoot Data center network issues, Cross connectivity and WAN Backbone issues between Data center
  • Hands-on experience with WAN technologies like T1/T3, DS3, STM1 and STM4 circuit types
  • Implemented Cisco Secure Access Control Server (ACS 3.0) for TACACS+/RADIUS
  • Knowledge with redistribution of routing protocols and Frame-Relay configuration
  • Handled Network Migration from RIP to OSPF
  • Implementation of TCP/IP and related Services-DHCP/ DNS/ WINS
  • Configured, maintained and troubleshot routing protocols such as OSPF, EIGRP and BGP.
  • Engaged in office moves, helped in identifying network requirements of new building, installed new networking hardware, and coordinated with vendors for cabling/wiring
  • Performed scheduled Virus checks and updates on all servers and desktops
  • Got Hands-on experience in maintaining and troubleshooting RIP, OSPF and EIGRP routing protocols
  • Configured RIP and EIGRP on 2600, 2900 and 3600 series Cisco routers
  • Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 4500 series Cisco Catalyst switches
  • Performed IOS upgrades on 2900, 3500 series Cisco Catalyst switches and 1800, 2600, 3600 series Cisco routers using TFTP. Provided network connections for new workstations
  • Configured STP for loop prevention and VTP for Inter-VLAN Routing
  • Done troubleshooting of TCP/IP problems and connectivity issues in multi-protocol Ethernet environment
  • Configured Cisco Routers (2621, 2621XM, 2620, 2800) using EIGRP and Configured Cisco Switches (Catalyst 6500, 4500, 3750)

Environment: Cisco 2600/2800/3600 Cisco 2950/2960 series switches, Cisco Routers 7000, 5300, 4000,2500, 3000, 2600, NAT, PAT, DHCP, DNS, OSPF, EIGRP, ASR, TCP/IP, LAN, WAN.

Confidential, Raleigh, NC

Network & Linux Administrator

Responsibilities:

  • Configured routing protocols like EIGRP, OSPF & BGP and troubleshooting layer3 issues
  • Involved in the troubleshooting aspects of complex network infrastructure using the routing protocols like EIGRP, OSPF& BGP
  • Experience in Network security, Security Controls (firewalls, IDS/IPS, authentication, etc.), TCP/IP
  • Involved in configuration and implementation of the MPLS with BGP protocol
  • Configured and deploying Cisco catalyst 6506, 4948E, 4510 switches and Cisco 3660, 3845, and 7609 series Routers
  • Migrating firewalls from Juniper Net screen 500 to PA3020
  • Applied ACLs for Internet access to the servers using Cisco 5520 ASA firewall, performed NAT
  • Configuring security services for protecting the perimeter of the network, Cisco IOS Firewall features, PIX Firewall.
  • Involved in design, implementation and configuration of HSRP for load balancing on L3 switches on different location of office on the switched network
  • Provided support/troubleshooting for Intel, UNIX, and Network environments
  • Had a good hands-on experience with cisco 6509 Series Cisco Switch with VLAN’s for different departments
  • Supporting wide range of products from Cisco Systems, Troubleshooting of Routers, Switches, Leased line
  • Built and configured Virtual Linux Servers using VMware ESXi and RHEL KVM, Performance monitoring and capacity planning on UNIX and LINIX servers
  • Hardening systems using SE Linux and other security measures &Created and configured LVM partitions
  • Completed numerous installations and configurations of multiple SP ARC servers
  • Management of file systems on ZFS pools LVm2, - creating and adding space, Established server network connectivity on appropriate VLAN and to SAN network
  • Completed numerous server patching activities using Live Upgrade and firmware updates.
  • Open ports for applications and process that require special ports, Backup MySQL database by creating script to run the MYSQL dump and package it in a gzip file.
  • Document process and procedures for system and database usage, Maintain team wiki and making sure all documents are in the correct format.

Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/ switches and Cisco / 7200/ 3845/3600/2800 routers, Cisco Nexus 7K/5K, Cisco ASA 500, F5 BIGIP LTM, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.

Confidential

Network Administrator

Responsibilities:

  • Experienced in CTIOS, Call Manager Express (CME), Cisco Unity Express (CUE), voice gateways, H323), and voice applications
  • Expert in Cisco IOS and Nexus-OS upgrades, VDC, VPC/VPC+, VRFs and Fabric Path support and configuration
  • Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS) and deploying GRE Tunnel
  • Experience in Network Management Tools and sniffers like SNMP, Wire shark and Cisco works to support 24 x 7 Network Operation Center
  • Configured and managed VMware ESX server 3.x and Virtual Center 2.5.
  • Designed and implemented multi node ESX environment using multiple clusters.
  • Worked with active Directory issues such as, logon failures, accounts, lockouts, networks, connectivity, DNS, DHCP, WINS, name resolution, authentication problems, DFS links and replication issues, folder and printer permission, etc.
  • Advanced trouble shooting of issues such as active directory and FRS/DFS replication issues, application memory leaks etc.
  • Administrating DNS, DHCP, and exchange and ISA servers.
  • Created and managed user and group accounts in user manager and in MS exchange administration.
  • Worked on VMware NSX for vSPHERE like logical switching, routing, firewall, load balancer, VPN, NSX API.s
  • In tenants like A, B, C controls on mac table, ARP table, VTEP table.
  • Update the patches for ESX server using VMware update manager in virtual center.
  • Build and troubleshooting experience with VMware ESX 3.x, V-center server 2.5 and VMware V-Sphere suite.
  • Expertise in migration from ESX 3.0.1 to 3.5 to V-Sphere 4.0.
  • Monitoring and managing performance of ESX servers and virtual machines.
  • Worked closely with storage and networking team to ensure allocated SAN, fiber and networking infrastructure reflects specifications laid out in the initial VMware firm design to ensure successful deployment.
  • Experience on host profiles, distributed switch, DRS, V-Motion, SV-motion,
  • Resource pools, permission, patches, snapshot, tools upgrade, disk expansions, templates.
  • Building windows 2008 servers and upgrading windows 2003 on both physical and virtual machines.

Environment: Cisco 2600/2800/3600 Cisco 2950/2960 series switches, Cisco Routers 7000, 5300, 4000,2500, 3000, 2600, NAT, PAT, DHCP, DNS, OSPF, EIGRP, ASR, TCP/IP, LAN, WAN, Cisco 7609S series routers, Cisco 2900 routers, 6513E switches, Check point firewall, Radware Appdirector.

We'd love your feedback!