Cloud Network Security Engineer Resume
Philadelphia, PA
PROFESSIONAL SUMMARY:
- Cisco Certified Network Associate (CCNA) with 8+years of professional experience in Network Planning, Implementing, Configuring, Troubleshooting and Testing of networking system
- Experience in working with number of public and private cloud platforms like Amazon Web Services (AWS), Rackspace Cloud and Openstack .
- Expertise in architecting, managing and deployment of cloud "applications" in number of public as well as private clouds.
- Proficient in using all AWS offerings including EC2 , Block Storage (EBS), Load - balancers (ELB), Auto scaling groups, Cloud Formation Templates , EMR , Route53 and others.
- Expertise in architecting secure VPC solutions in AWS with the help of Network ACLs, security groups, public and private network configurations.
- Hands on experience in setting up databases in AWS using RDS , storage using S3 bucket and configuring instance backups to S3 bucket to ensure fault tolerance and high availability.
- Excellent working knowledge of TCP/IP protocol suite and OSI layers
- Good knowledge and experience in FTP, DNS, DHCP, TFTP, LAN, LINUX and WAN environments
- Proficiency in supporting Enterprise Level LAN, MAN and WAN Networks
- All-encompassing execution& configuration proficiency of Firewalls as Cisco PIX (515/535/525), Cisco ASA Appliance ASA 5510 and Pala Alto Security devices
- Experienced with Juniper JUNOS device configuration like Juniper Router and Juniper switches
- Experience in LAN networking technologies (Spanning-Tree, VLAN, DTP, HSRP, VRRP, GLBP) and Experience in Routing Protocols (EIGRP, OSPF and BGP)
- Configured Checkpoint Firewalls and installed it into enterprise network. Also F5 Load balancer LTMs and GTMs to divide traffic from the web servers
- Configuring rules and Maintaining Palo Alto Firewalls & Analysis of Firewall logs using SecureCRT, ASDM, QRadar
- Hands on experience working with DNS Infoblox DNS server, Checkpoint Firewall Administration and Troubleshooting
- Implementation and Support of Nexus 7000, Nexus 5000, 6500, virtualization, ACE and Data Center Project implementation
- Having advanced knowledge in Cisco ASA 5000 series and PIX installation, configuration and maintenance
- Proficiency in supporting Enterprise Level LAN, MAN and WAN Networks
- Experienced in CTIOS , Call Manager Express (CME) , Cisco Unity Express (CUE), voice gateways, H323 ), and voice applications
- Expert in Cisco IOS and Nexus-OS upgrades, VDC, VPC/VPC+, VRFs and Fabric Path support and configuration
- Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS) and deploying GRE Tunnel
- Experience in Network Management Tools and sniffers like SNMP, Wire shark and Cisco works to support 24 x 7 Network Operation Center
- Experience in switch security and network security firewalls technologies . And LAN/WAN Network Support for TCP/IP based devices
- Well versed with all the Openstack components like keystone , Swift, nova, cinder, glance.
- Excellent understanding modern cloud ( compute, storage, networking ) application architectures on Openstack to ensure easy monitoring and high availability.
- Experience in creating and managing new Users, roles and projects through Keystone.
- Setup public networks and configured VPCs with SDN using neutron, Worked on Openshift like development, peer/review testing, deploy and production.
- In production we can used similar configuration and deployment by using openshift
- Integrated puppet deployment with GIT and gerritt with automated Jenkins ci, Familiar with multiple data stores.
TECHNICAL SKILLS:
Networking Equipment: Cisco 2500,2600,2800,3600,3800,7200,7600 series routers, Cisco 1900,2900,3550,3750,4900,6500 series catalyst switches, ACE load balancer 4700, F5 Load Balancer
SAN: VSAN, LAN free Backup, FCoE
Infrastructure services: DHCP, DNS, SMTP, FTP, TFTP, POP3
Network Security: IPsec, VPN Configuration,, ASA 5505, 5510 Firewalls, NAT/PAT, IDS/IPS, Ethereal, Internet Content Filtering, DHCP SNOOPING, IDS/IPS, URL Filtering -Web-sense,, SSL, IPSEC, IKE, Static, Dynamic, Reflexive ACL, and authentication AAA (TACACS+ & RADIUS)
Communication Protocols: TCP/IP, IPv6, ARP, VLAN (802.1q, ATM), PPP, HTTP, SSH, Frame Relay, MPLS, 802.11.
Technologies: Openstack, AWS, Rackspace-Cloud, Networking, VMware, System Administrator
Routing Protocols: RIP v1 & v2, EIGRP, IGRP, OSPF, BGP, IS-IS, HSRP, ipv6 addressing, VRRP and GLBP.
LAN technologies: Ethernet/ Fast Ethernet/ Gigabit Ethernet networks, VLANS, VTP, STP,RSTP, 802.1q
WLAN Technology: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1/T3 & SONET
LOAD BALANCERS: BIG IP F5 LOAD BALANCER,INFLOBOX,CISCO ACE
PROFESSIONAL EXPERIENCE:
Confidential, Philadelphia, PA
Cloud Network Security Engineer
Responsibilities:
- Creating Instances like different locations for the use of Openstack and AWS Clouds
- Instances are running for the use of KAFKA & ZOOKEEPER
- We were creating the Brokers for the use of Kubernates, kafka, zookeeper
- Checking and pinging for the public and private clouds for the VCMTS VIRTUALIZATION Project
- In Virtualization we were creating multiple VM’s for single Moonshoot
- Creating Network seetings and Network configuration settings for every cartridges and every moonshoot
- Cloud bases we were using Openstack Compute, For compute the instances were creating for different sizes and different GB’s
- For Images storing we were using Docker and Docker Conatiners for VCMTS Project
- Cisco ASA Firewall Policy Provisioning and troubleshoot connectivity issues through firewall
- Configuring and Troubleshooting of Various Firewall ACL, NAT rules, policy and protocols like OSPF and Switching protocols like STP, VLAN, VTP Using CLI, SecureCRT, Skybox and Cisco ASDM
- Creating and Testing Cisco Firewall and Switch operations using security protocol, IPS, ASA Firewalls, and MPLS switching for stable VPNs using WAN backbone
- Migrating Virtual Firewalls to Physical Firewall and Cisco ASA to Palo Alto Firewalls
- Migration of Cisco ASA to Palo Alto using Palo Alto Migration Tools.
- Provide Service Support to Clients regarding LAN/WAN connectivity Configuring and Modification of ACL, NAT Rules and Port numbers in ASA Firewalls using CLI, SecureCRT, and ASDM
- Firewall Clustering and High Availability Services using Cisco ASA. Troubleshooting User connectivity issues on Cisco ASA using CLI utilities
- Worked on BIOS upgrde for moonshoots, using on HP and HARMONIC servers for 12 core and 16 core cartridges
- Creating public IP’s and private IP’s for HP and HARMONIC servers
- HP servers for Ubuntu 16.04 Image we were using and installation for all 12 core cartridges
- Confidential we were using and creating licenses for HP EL 4000 series
- Checking on system health for all rack space in the SIT LAB
- Configuration on Juniper switches and cisco switches for network configuration
- Network configuration settings are changing for MDC to Central data center
- Creating NETMASK, SUBNETMASKS, for every cartridges
- Checking on Network issues for routing switches and security levels for CICD Servers.
- Packet capture on firewalls and analyzing the traffic using CLI, Cisco ASDM, Wire shark utilities
- Troubleshoot Clustering issues on ASA and Sync issues monitoring and fix. Implemented Active/ Standby configuration on Cisco ASA Firewalls
- Configuring Cisco ASA firewalls in Single and Multiple Context Mode firewalls. Upgrade of Cisco ASA Firewall in Active/Standby mode
- Firewall Compliance and Rule remediation for compliance such as PCI Audit
- VLAN implementation, Spanning Tree Implementation and support using PVST, R-PVST and MSTP to avoid loops in the network. Trunking and port channels creation
- Working with OSPF as internal routing protocol and BGP as exterior gateway routing protocol
- Configuring static NAT, dynamic NAT, Inside Global Address Overloading, TCP overload distribution, Overlapping Address Translation on Cisco ASA Firewalls
- Implemented VLANS between different departments and connected them using trunk by keeping one VLAN under server mode and rest falling under client modes
- Network Router and Switch protocol configuration for firewall access
- Network IDS/ IPS Signature tuning. Escalating IDS and Firewall handling requests to third party vendors
- Generate and maintain platform-specific security baselines
- Firewall security Protocols, Access-list, Network address translation, Network Policy, object list, ISAKMP and IPSec for Site to site VPN and Firemon, Vendor / Managed Service Provider escalations
Environment: Openstack, Kubernates, Networking, Cisco Catalyst 2960/3750/4500/6500 Series Switches, Cisco 2800/2900/3000 Series ISR’s and Cisco 3640/ 0/3845/3600/2800 routers, Cisco Nexus 7K, Cisco ASA 5500, Checkpoint, windows server 2003/2008, F5 BIGIP LTM/GTM, ACL, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.
Confidential, Richardson, TX
RAN Staff Engineer
Responsibilities:
- Responsible for the operations, Maintenance, Troubleshooting, Re-integration and support of the MDC Centers (5G Network).
- Solid understanding about fiber interfaces and optical levels.
- Performs all components of cell site maintenance including: Automatic/Manual optimization Antenna testing and result analysis.
- Ensure power systems are functional which includes performing and analyzing battery routines.
- Performs inspection of routine preventive maintenance, equipment alarm analysis, inspection wave guide pressure and desiccant annual preventive maintenance on all Radio types
- Advanced Trouble Shooting, Basic Installation and acceptance of radio and path alignment with Tower crew.
- Assists more experienced Site/ Field Engineers and RF support team in testing and repairing Network Equipment.
- Operations of DELL in IDRAC, BIOS, VRAN, VCORE.
- Ensure the VRAN on Boarding, VRAN Instantiation, we were used Openstack process IP instead of EMS-GUI.
- Performs all VM’ s is installed successfully, active and running.
- Ping between the SSH and VM’ s is successfully through the External IP’ s and Internal IP’s.
- Analysis of Intelligent multi-user interferences reduction schemes to quadruple capacity grains in Optical CDMA.
- Worked on FUPC, FNMC, FCPC Hosts. Creating IP V6, IP v4, and MAC address like sit lab and Market Data Centers, Central Data Centers.
- Through understanding LTE Users, UMTS users. Good understanding on 4G, LTE, 5G Networks layers.
- Testing on validating handset performance in Live Network environment.
- Worked on MDC and CDC Centers like connections between Firewalls open, testing, troubleshooting.
- Perform technical planning, system integration, verification and validation, cost, risk analysis and effectiveness studies for systems of system integration.
- Independent problem solver with troubleshooting, design making and analytical skills.
- Requires limited supervision, self-starter, strong time management skills.
- Virtual Desktop Administration preferably using VMware Horizon View.
- Deploy, test and document development, Pre-production and production.
- Diagnoses and troubleshoots problems with PCs, software, Communication devices with in established procedures, responds to End Users requests for technical support and assistance.
- Developed and documented IT and network support procedures, process improvements and best practices for internal IT customers and business partners.
Environment: VRAN, VCORE, BIOS, IDRAC, virtualization, IP configuration, Trouble shooting, Connections, Deploy, Testing, VM Horizon, FNMC, FUPC, FCPC, SSH, GUI, External - Internal Configuration, CDMA, 5G Network, Wireshark, Netflow Analyzer, Cisco Works, SNMP, HP open view, Ethereal,SNMP, SSH, Telnet, ICMP, SSL
Confidential, Jersey City, NJ
Network Engineer
Responsibilities:
- Comprehensive elementary configurations on the F5 Big-IP LTMs and GTM load balancer on prevailing network to divide traffic on web-servers
- Analyze equipment’s and perform repair as per requirement in Data Centre
- Setting VLANS and configuring ISL trunk on Fast-Ethernet channel between switches
- Product analysis and support for Access-layer switches such as Cisco 4510, 4948, 4507, distribution layer switches such as 6513, 6509, 6504 and a routed core
- Configured site to site VPN for connecting student lab to training and development centers
- Worked on IP control for management and optimal allocation of IP addresses
- Configured and deployed Checkpoint, Cisco ASA and Juniper SRX firewalls for various Missouri Information Service Centers
- Installed and configured Foundry Load Balancer and ASA firewall for a customer web site
- Experience with Juniper Net screen 520M Firewall and Palo Alto network firewall
- Implementation and Support of Nexus 7000, Nexus 5000, 6500, virtualization, ACE and Data Center Project implementation
- Configuring F5 Big-IP LTM and GTM. Responsible for troubleshooting of F5 load balancers
- Securing network access with Cisco Secure (RADIUS/ TACACS+)
- Troubleshoot Data center network issues, Cross connectivity and WAN Backbone issues between Data centers
- Systems monitoring and maintenance, resolution and troubleshooting using Infoblox
- Managed Cisco firewalls from both the Command line and ASDM
- Worked with HP engineers for issues pertaining to the new environment and the application
- Test plan development for quality improvement of development phase
- Advanced Knowledge in IPSEC VPN design connection and protocols, IPSEC tunnel configuration, encryption and integrity protocols
- Successfully installed Palo Alto PA 3060 firewalls to Protects Data Center and provided L3 support for routers/switches/firewalls
- Expertise in maintenance of layer2 switching tasks - VLAN, VTP, RSTP, configuration of ether channel with LACP and PAGP along with troubleshooting of inter-VLAN routing.
- Experience working in Datacenter environment, configuration changes as per the needs of company.
- Manage project task to migrate from Cisco ASA firewalls to Check Point firewalls
- Redesigned Internet connectivity infrastructure for meeting bandwidth requirements.
- Configuring, implementing and troubleshooting VLAN’s, VTP, STP, Trunking, Ether channels.
- Configuring, administering and troubleshooting the Check Point, Palo Alto and ASA Firewall
- Responsible for Configuring Frame Relay, ATM Switches, ISDN, X.25 network
- Ensure that Firewall Rules are reviewed in accordance with Risk management Framework
- Configured MPLS L3 & L2 VPNS for research departments using cisco ASR 9004 and 9010
- Configured ASA 5510 appliance as a Firewall and as a VPN server. Troubleshoot TCP/IP problems; troubleshoot connectivity issues
- Responsible for Configuring Frame Relay, ATM Switches, ISDN, X.25 network
- Configuration, implementation, and problem determination across the major firewall platforms and understanding each customer environment at a detailed level. Responsibilities include rule implementations, VPN setups, upgrades, new builds.
Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/ switches and Cisco / 7200/ 3845/3600/2800 routers, Cisco Nexus 7K/5K, Cisco ASA 500, F5 BIGIP LTM, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.
Confidential, Union, NJ
Network Support Engineer
Responsibilities:
- Configured, tested, implemented and maintained telecommunication and LAN operational support activities of Radio Access Network
- Worked on installation, maintenance, and troubleshooting of LAN/WAN (ISDN, Frame relay, NAT, DHCP, TCP/IP)
- Configured Access List (Standard, Extended, and Named) to allow users all over the company to access different applications and blocking others
- Responsible for design, configuration and maintenance of numerous telecom systems, hardware systems
- Configuring and installing client and server network software for upgrading and maintaining network and telecommunication systems
- Experience in Troubleshoot Data center network issues, Cross connectivity and WAN Backbone issues between Data center
- Hands-on experience with WAN technologies like T1/T3, DS3, STM1 and STM4 circuit types
- Implemented Cisco Secure Access Control Server (ACS 3.0) for TACACS+/RADIUS
- Knowledge with redistribution of routing protocols and Frame-Relay configuration
- Handled Network Migration from RIP to OSPF
- Implementation of TCP/IP and related Services-DHCP/ DNS/ WINS
- Configured, maintained and troubleshot routing protocols such as OSPF, EIGRP and BGP.
- Engaged in office moves, helped in identifying network requirements of new building, installed new networking hardware, and coordinated with vendors for cabling/wiring
- Performed scheduled Virus checks and updates on all servers and desktops
- Got Hands-on experience in maintaining and troubleshooting RIP, OSPF and EIGRP routing protocols
- Configured RIP and EIGRP on 2600, 2900 and 3600 series Cisco routers
- Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 4500 series Cisco Catalyst switches
- Performed IOS upgrades on 2900, 3500 series Cisco Catalyst switches and 1800, 2600, 3600 series Cisco routers using TFTP. Provided network connections for new workstations
- Configured STP for loop prevention and VTP for Inter-VLAN Routing
- Done troubleshooting of TCP/IP problems and connectivity issues in multi-protocol Ethernet environment
- Configured Cisco Routers (2621, 2621XM, 2620, 2800) using EIGRP and Configured Cisco Switches (Catalyst 6500, 4500, 3750)
Environment: Cisco 2600/2800/3600 Cisco 2950/2960 series switches, Cisco Routers 7000, 5300, 4000,2500, 3000, 2600, NAT, PAT, DHCP, DNS, OSPF, EIGRP, ASR, TCP/IP, LAN, WAN.
Confidential, Raleigh, NC
Network & Linux Administrator
Responsibilities:
- Configured routing protocols like EIGRP, OSPF & BGP and troubleshooting layer3 issues
- Involved in the troubleshooting aspects of complex network infrastructure using the routing protocols like EIGRP, OSPF& BGP
- Experience in Network security, Security Controls (firewalls, IDS/IPS, authentication, etc.), TCP/IP
- Involved in configuration and implementation of the MPLS with BGP protocol
- Configured and deploying Cisco catalyst 6506, 4948E, 4510 switches and Cisco 3660, 3845, and 7609 series Routers
- Migrating firewalls from Juniper Net screen 500 to PA3020
- Applied ACLs for Internet access to the servers using Cisco 5520 ASA firewall, performed NAT
- Configuring security services for protecting the perimeter of the network, Cisco IOS Firewall features, PIX Firewall.
- Involved in design, implementation and configuration of HSRP for load balancing on L3 switches on different location of office on the switched network
- Provided support/troubleshooting for Intel, UNIX, and Network environments
- Had a good hands-on experience with cisco 6509 Series Cisco Switch with VLAN’s for different departments
- Supporting wide range of products from Cisco Systems, Troubleshooting of Routers, Switches, Leased line
- Built and configured Virtual Linux Servers using VMware ESXi and RHEL KVM, Performance monitoring and capacity planning on UNIX and LINIX servers
- Hardening systems using SE Linux and other security measures &Created and configured LVM partitions
- Completed numerous installations and configurations of multiple SP ARC servers
- Management of file systems on ZFS pools LVm2, - creating and adding space, Established server network connectivity on appropriate VLAN and to SAN network
- Completed numerous server patching activities using Live Upgrade and firmware updates.
- Open ports for applications and process that require special ports, Backup MySQL database by creating script to run the MYSQL dump and package it in a gzip file.
- Document process and procedures for system and database usage, Maintain team wiki and making sure all documents are in the correct format.
Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/ switches and Cisco / 7200/ 3845/3600/2800 routers, Cisco Nexus 7K/5K, Cisco ASA 500, F5 BIGIP LTM, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.
Confidential
Network Administrator
Responsibilities:
- Experienced in CTIOS, Call Manager Express (CME), Cisco Unity Express (CUE), voice gateways, H323), and voice applications
- Expert in Cisco IOS and Nexus-OS upgrades, VDC, VPC/VPC+, VRFs and Fabric Path support and configuration
- Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS) and deploying GRE Tunnel
- Experience in Network Management Tools and sniffers like SNMP, Wire shark and Cisco works to support 24 x 7 Network Operation Center
- Configured and managed VMware ESX server 3.x and Virtual Center 2.5.
- Designed and implemented multi node ESX environment using multiple clusters.
- Worked with active Directory issues such as, logon failures, accounts, lockouts, networks, connectivity, DNS, DHCP, WINS, name resolution, authentication problems, DFS links and replication issues, folder and printer permission, etc.
- Advanced trouble shooting of issues such as active directory and FRS/DFS replication issues, application memory leaks etc.
- Administrating DNS, DHCP, and exchange and ISA servers.
- Created and managed user and group accounts in user manager and in MS exchange administration.
- Worked on VMware NSX for vSPHERE like logical switching, routing, firewall, load balancer, VPN, NSX API.s
- In tenants like A, B, C controls on mac table, ARP table, VTEP table.
- Update the patches for ESX server using VMware update manager in virtual center.
- Build and troubleshooting experience with VMware ESX 3.x, V-center server 2.5 and VMware V-Sphere suite.
- Expertise in migration from ESX 3.0.1 to 3.5 to V-Sphere 4.0.
- Monitoring and managing performance of ESX servers and virtual machines.
- Worked closely with storage and networking team to ensure allocated SAN, fiber and networking infrastructure reflects specifications laid out in the initial VMware firm design to ensure successful deployment.
- Experience on host profiles, distributed switch, DRS, V-Motion, SV-motion,
- Resource pools, permission, patches, snapshot, tools upgrade, disk expansions, templates.
- Building windows 2008 servers and upgrading windows 2003 on both physical and virtual machines.
Environment: Cisco 2600/2800/3600 Cisco 2950/2960 series switches, Cisco Routers 7000, 5300, 4000,2500, 3000, 2600, NAT, PAT, DHCP, DNS, OSPF, EIGRP, ASR, TCP/IP, LAN, WAN, Cisco 7609S series routers, Cisco 2900 routers, 6513E switches, Check point firewall, Radware Appdirector.