PROFESSIONAL SUMMARY:

• Network Engineer around 7+ years of experience in the industry, which includes expertise in the areas of Routing and Switching.
• Hands on experience of data center environment and implementation of VPC, VDC and Fabric path on Nexus 9K, 7K, 6K, & 2K Switches.
• Hands on Experience of almost 3 years with Cisco ASA 5500 series Firewalls.
• Implementation of HSRP, VRRP and GLBP for Default Gateway Redundancy.
• Excellent communication skills to interact with team members and support personnel and also can act as a mentor to less experienced personnel.
• Experience in working with Cisco Nexus 9k, 7k, 5k, 2k Switches and Virtual Port Channel configuration
• Experience in configuring IPSec VPN Tunnels, GRE Tunnels and DMVPN Tunnels.
• Experience in configuring MPLS VPN in the core.
• Implemented traffic filters on Cisco routes using Standard and Extended Access list.
• Experience in implementation of F5 GTM based on topology load balancing methods
• Worked on F5 LTM, GTM series like 6400 & 6800 remotely under the enterprise network.
• Worked on F5 LTM/GTM, Big - IP, load balancing, iRules, and WAN acceleration.
• Hands on experience creating iRules with Tickle Script and applying it on virtual servers to inspect and redirect service ports.
• Hands on experience with deployment of QKview files in iHealth and monitoring.
• Worked on troubleshooting issues on F5 LTM related to network, objects and servers.
• Experience in rectifying issues related to F5 LTMs using F5 support services
• Expert level knowledge of troubleshooting, implementing, optimizing and testing of static and dynamic routing protocols such as EIGRP, OSPF, BGP ability to interpret and resolve complex route table problems.
• Expert Level Knowledge about TCP/IP and OSI models.
• Ability to interpret and resolve complex route table problems.
• Experience in configuring router redistribution between routing protocols and troubleshooting them.
• Implementation of HSRP, VRRP and GLBP for Default Gateway Redundancy.
• In-depth knowledge and hands-on experience on IP Addressing, Sub-netting, VLSM and ARP, RARP and Ping Concepts.
• Review the client's Palo Alto configuration and map it to Cisco FirePOWER 9300 features.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.
• Experience in configuring HSRP and redistribution between routing protocols.
• Working Knowledge of WAPs, WLCs.
• Advanced knowledge on Internetworking, OSI model, TCP/IP, network architecture, system security and firewall infrastructure.
• In-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.
• Reporting the work done in Word/Excel format to superiors.
• Hands on experience installing and configuring Cisco ISE 1.3 and later upgrading to 1.4.
• Worked on PKI infrastructure and created timed CA certificates
• Experience setting up 802.1x wired and wireless networks in NAM (Network Access Manager)
• In-depth knowledge and hands-on experience on IP Addressing, Subnetting, VLSM and ARP, reverse & proxy ARP, DNS & DHCP, Ping and Traceroute concepts.

TECHNICAL SKILLS:

Routers: Cisco 1700, 1800, 2600, 2800, 3700, 3800, 3900, 7200, 7600 series, ASR9k

Switches: Cisco 3550, 3750, 4500, 6500 series & nexus 7k, 5k, 2k, 1000v, 1010

Load Balancer: Cisco CSS, F5 Networks (Big-IP)

WAN Optimization: Cisco WAAS, PPP Multilink, Riverbed

OSPF, EIGRP, BGP, RIP: 2, PBR, Route Filtering, Redistribution, Summarization, Static Routing

Switching: VLAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switching, Multicast Operations, Layer 3 Switches, Ether channels, Transparent Bridging

LAN: Ethernet, Fast Ethernet, Gigabit Ethernet, FDDI, CDDI, Token Ring, ATM LAN, Emulation

Leased lines 64k: 155Mb (PPP / HDLC), Channelized links (E1/T1/E3/T3), Fiber Optic Circuits, Frame Relay, ISDN, MPLS, Riverbed, DMVPN

Voice: Cisco call manager 8.x, 7.x

IP Telephony: VOIP, T1/T3, ISDN, PRI, Unified Call Manager

Wireless: Cisco 4400 Wireless Controller (WLC) and 1100, 1200 series Access Points

Firewalls: Cisco PIX, ASA, Juniper Netscreen, Palo Alto, SRX, Checkpoint

Features & Services: IOS and Features, HSRP, GLBP, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP Management

AAA Architecture: TACACS+, RADIUS, Cisco ACS

Network Monitor Tool: MRTG, Netbrain & Solarwinds & Cisco Prime Infrastructure

Protocol Analyzer: Wireshark

Ticketing tool & Data Center Tool: BMC Remedy 8 &Nlyte

Security: Cisco ASA, Check point, Juniper SRX, Palo Alto

Operating System: DOS, Windows (95, 98, NT/2000, XP, Vista/7/8/10), Cisco IOS, Pan-OS

PROFESSIONAL EXPERIENCE:

Confidential, New York, NY

Sr. Network Engineer

Responsibilities:

• Hands on experience of Nexus 9K, 7k, 6K, 5k and 2K FEXs and Cisco switch 3560.
• Configured datacenter technologies like VPC, VDC on Nexus 7010 Core Switches.
• Configured Layer 2 & Layer 3 interfaces and port channels on Nexus 9508
• Worked on F5 LTM/GTM, Big-IP, load balancing, iRules, and WAN acceleration.
• Creating and managing user accounts to all team members in partner environment.
• Experience in Cisco switches and routers: IP addressing, WAN configurations.
• LAN cabling in compliance with CAT6 standards; Installing new hardware and swap out hardware physically.
• Managed VPN, IPSec, Endpoint-Security, status policy, Application control, IPS, Monitoring, Anti-Spam, Smart Provisioning, DLP using Checkpoint Firewalls
• Management of IronPort Proxy, Riverbed Cascade profiler
• Maintenance and configuration of Cisco ASR1000 series and 7200VXR routers at data center and deployment of 3900, 3800, 2951 and 2821 for branch connectivity
• Upgrading code on Palo alto firewalls PA5050/3020 to meet company security policy.
• Support Panorama Centralized Management for Palo alto firewall PA-500, PA-200 and PA3060, to central manage the console, configure, maintain, monitor, and update firewall core, as well as back up configuration.
• Operate Riverbed Steelhead WAN Accelerators, troubleshooting peering issues and verifying traffic optimization.
• Knowledge of F5 Best Practices, used iHealth, SSL offloading, Route Domains, GTM Sync Group.
• Configuring and implementing F5 BIG-IP, LTM, GTM load balancers to maintain global and local traffic
• Monitoring Network infrastructure using SNMP tools HP NNM, Solar-winds and Opnet.
• Escalation of procedures and customer notifications.
• Experience in troubleshooting VLAN, STP (Spanning tree protocol), & Switch Trunk and IP subnet issues.
• Worked on Physical site; latency and slowness issues in transmitting results within internal quest network.
• Involved in complete LAN, WAN, Extranet redesign (including IP address planning, designing, installation, pre-configuration of network equipment, testing, and maintenance) in both Campus and Branch networks.
• Experience working with Nexus 7010, 5020, 2148, 2248 devices.
• Experience updating IOS on devices.
• Configure the FirePOWER chassis in clustered and then after HA mode to meet the clients ever changing design requirements
• Experience with using F5 Load balancer in providing worldwide data and file sharing, continuous internet connectivity, optimized web performance.
• Configuring and implementing F5 BIG-IP Load balancer.
• Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000.
• Installed, configured and set security policies on cisco and checkpoint firewalls, VPN
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.
• Design and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Worked on GRE tunnels for creating Guest and BYOD networks.
• Intergrade Cisco ISE with Cisco FirePOWER to enable automated remediation.
• Hands on experience installing and configuring Cisco ISE 1.4.
• Worked on PKI infrastructure and created timed CA certificates
• Experience setting up 802.1x wired and wireless networks in NAM profile editor and Anyconnectvpn’s
• Worked extensively in configuring, Monitoring and Troubleshooting Check Point R77.XX security appliance, Failover DMZ zoning & configuring VLANs / Routing / NATing with the firewalls as per the design.
• Provided technical support for full setup, debugged the problems of OSPF, switching and HSRP.
• Experience with configuring Virtual Server and Configuring Load balancing methods in F5 12.0 LTM.
• Network security involves web filtering on internet sites (User's restriction) using checkpoint Firewalls.
• Experience handling tickets with less or no supervision in troubleshooting checkpoint 77.30.

Confidential, Sacramento, CA

Sr. Network Engineer

Responsibilities:

• Maintained a lab environment that consists of various Routers and L2/L3 switches.
• Worked on Cisco 2500, 2600, 2800 series routers and 1900, 2900, 3560, 3750 series switches.
• Configuring STP (PVST, RSTP) for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to the switches.
• Configured routing protocol EIGRP on 2600, 2800 routers and static routing on 3750 switches.
• Worked on RA and L2L VPNs with IPsec and SSL Anyconnect and webvpn methods.
• Implementing QoS on PE and CE as per BTs templates and upgrading bandwidth and CoS as per client requirement.
• Worked on stacking and upgrading switches like 3550 and 3750 series.
• Handling Complaints for Intranet and Extranet over MPLS backbone. Checking the connectivity between different locations.
• Performed Configuration on ASR 9K Pairs includes HSRP, Bundle Ethernet Config, Assigning DHCP profiles
• Extensive Knowledge on the implementation of Cisco ASA 5500 series and checkpoint R 75 firewalls
• Configuring objects such as Load Balancer pools for local traffic management on F5 Load Balancers
• Configuring VLANs/routing/NATing with the firewalls as per the network design.
• Successfully installed Palo Alto PA 3060 Firewall to protect data center and provides L3 support for routers/switches/firewall.
• Extensive Knowledge on the implementation of Cisco ASA 5500 series and checkpoint R 75 firewalls
• Traced OSI layers and extracting the packet information at every layer. Worked on Wireshark, TCP/IP, and OSI Layers for packet tracking and Drafted & finalized progress reports, final report. Technologies: Java, JSP, Servlets, Wireshark, TCP/IP, JQuery
• Deploying and decommission of VLANs on core ASR 9K, Nexus 9K, 7K, 5K and its downstream devices and also configure 2k, 3k,7k series Routers
• Design and Implementation of F5 GTM based on topology load balancing methods.
• Implementing security Solutions using Palo alto PA 5000, Check Point Firewalls R75, R77.20 Gaia and Provider-1/MDM.
• Implemented F5 ASM for Internet Facing LTM virtual servers providing applications layer 7 firewall protection, configuring and managing F5 Web Accelerator module and Application Security Module (ASM) technology or with similar/competing ADC and Security product solutions
• Installed high availability Big IP F5 LTM and GTM load balancers to provide uninterrupted service to customers.
• Worked on configuring and troubleshooting Nodes, Pools, Profiles, Virtual Servers, SSL Certificates, iRules, and SNATs on the F5 Big IPs using the Web GUI and CLI.
• Configuring and resolving various OSPF issues in an OSPF multi area environment.
• Implemented, configured BGP WAN routing, converting OSPF routes to BGP (OSPF in local routing).
• Installed and maintained Cisco and F5 Load Balancer and documentation
• Configured VTP on Core and several access layer switches, implemented Layer2 Ether channel between various switches and hosts.
• Worked on updating the SSL certificates to the application URL using the F5 LTM and F5 GTM.
• Installation, configuration and maintenance of Palo Alto Firewalls, Cisco ASA firewalls.
• Deployed Palo Alto for web filtering and application control.
• Configured and monitored Firewall logging, DMZ’s and related security policies.
• Worked on creating policies in the network application through app-id’s and content-id’s for the internal hosts.
• Configure the FirePOWER chassis in clustered and then after HA mode to meet the clients ever changing design requirements
• Designed application mapping and application delivery using F5 BIG IP LTM.
• Used solarwinds for monitoring and troubleshooting network devices in different time zones.
• Assisted in troubleshooting LAN connectivity and hardware issues in the network.
• Good knowledge on Linktropy WAN simulator to analyze the consumed bandwidth between different sites.
• Worked on remedy ticketing tool for handling different priority level tickets.

Environment: Cisco catalyst switches 6500, 3750, 3560, 2900, 1900, Cisco 2500, 2600, 2800 & 3800 ISR branch routers, Solar winds, Palo alto 5060, SSL Anyconnect, WebVPN, QoS, MPLS, Netscout, MRTG.

Confidential, Raritan, New Jersey

Sr. Network Engineer

Responsibilities:

• Hand on experience of the configuration and implementation of various Cisco Routers & L2/L3 Switches.
• Configured Nexus 7010 switches and 5020, 2248 as access layer switches.
• Configured VPCs on Nexus 7010 switches of SUP 1 with multiple VDCs and VPCs, CFS
• Extensive experience in configuring and implementing OSPF and BGP
• Supported core network consisting of Cisco 7200 series routers running multi area OSPF
• Configuration of EIGRP and OSPF as interior gateway protocol with route filtering and route redistribution, installed and maintained Cisco 3600, 2600 and 7200 backbone routes with HSRP
• Implemented stub/Totally stub areas. Implemented various OSPF features like route-summarization and SPF throttling.
• Experience with CSM, F5 (LTM) Load balancers to provide efficient switching and routing for local and global traffic
• Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair
• Perform setup of test scenarios, both hardware and software components, and perform troubleshooting.
• Experience working in Datacenter environment, configuration changes as per the needs of company.
• Configuring, implementing and troubleshooting VLAN’s, VTP, STP, Trunking, Ether channels.
• Designing, implementing LAN/WAN configurations on Cisco 5K, catalyst 6500 switches.
• Understand OSPF configuration and authentication settings to migrate routing over to the FirePOWER platform
• Integrate FirePOWER with unsupported up and down stream switches so deep understanding of network concepts were required to driver project success
• Installing, configuring Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design.
• Experience in configuring, upgrading and verifying the NX-OS operation system.
• Experience working with Nexus 7010, 5020, 2148, 2248 switches.
• Experience configuring Virtual Device Context in Nexus 7k series switch.
• Designed, configured, implemented site-site VPN on Cisco ASA 5500 firewall.
• Implemented, configured redundancy protocols HSRP, VRRP, GLBP for Default Gateway Redundancy.
• Dealt with different models of ASA like 5505, 5510, 5515 and SRX like 220, 1400.
• Demonstrated the migration benefits from HSRP to GLBP. Successfully upgraded the existing network to GLBP for high availability and load balancing between distribution layer switches. Design, configure, and implement SSO for sup720 redundancy within the core
• Extensive knowledge in different networking protocols DHCP, DNS, FTP, VOIP (SIP, H.323, MGCP).
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support
• Providing daily network support for national wide area network consisting of MPLS VPN.
• Upgrading WAN link using PPP Multilink and by implementing Cisco WAAS
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.
• Load balance the HTTP traffic by installing the Cisco CSS 11000
• Worked on commissioning and decommissioning of the MPLS circuits for various field offices.

Environment: Cisco Nexus switches 7010, 5020, 2248, VPCs, VDCs, Cisco 7200, 3600, 2600 routers, ASA 5505, 5510, 5515, SRX 220, 1400 Firewalls, AAA servers, GLBP Load balancing, Cisco GSR 7600, MPLS, PPP Multilink, IPsec, Cisco WAAS, site-to-site VPN.

Confidential, Chicago, IL

Network Engineer

Responsibilities:

• Studied and analyzed client requirements to provide solutions for network design, configuration and administration.
• Replaced outdated Cisco switches and routers in existing data centers and installed new Cisco.
• Maintained redundancy on Cisco 2600, 2800 and 3600 Router with HSRP.
• Created a backup and recovery policy for software application and verified peripherals are working properly.
• Experience deploying & managing high availability CUCM/Unity environments, SRST, voice gateways and dial plans.
• Performed RIP & OSPF routing protocol administration. Interacted with support services to reduce the downtime on leased lines.
• Troubleshoot problems on a day to day basis & provide solutions that would fix the problems within their Network.
• Daily responsibilities included monitoring remote site using network management tools, assisted in design guidance for infrastructure upgrade & help LAN administrator with backbone connection and connectivity issues
• ISR 2900 series routers, Cisco 5520 ASA appliance, Wireless LAN upgrade project. Assisted infrastructure team with the installation of 60 cisco 3700 series AP, around the building.
• Configured Security policies including NAT, PAT, VPN's and Access Control Lists.
• Configured VDC's on NEXUS 7K for creating multiple logical switches and HSRP and VLAN trunking 802.1Q, VLAN Routing on Catalyst 6500 switches.
• Experience working with Cisco IOS-XR on the ASR9000 devices for MPLS deployments in data center.

Confidential, DE

Sr. Network Engineer

Responsibilities:

• Successfully Deployed Severs, Cisco Switches and Cisco Routers at Comcast datacenter.
• Strong Hands on experience of managing and troubleshooting Cisco ASR 9K, 7600 Routers, Cisco 4510, 4500-X, 4948, 3560 X, 3750X and 2960S Switches, Nexus 9k, 7k, 5k and 3k switches, Load Balancers and Cisco Firewalls for deployment on network.
• Deployed Layer-2 technologies like VLANS, VTP, STP, RSTP, Inter-VLAN routing, VLAN trunking, Ether Channels, VLAN access-maps, transport and remote services and port security.
• Configuration, Operation and Troubleshooting of BGP, OSPF, EIGRP, RIP, VPN routing protocol in Cisco Routers, L2 and L3 Switches.
• Configured and Troubleshooting on OSPF on the Core Switches and Cisco Routers.
• Involved in project for migration of VLANS & Configured VLANs with 802.1q tagging, Ether channels, and Spanning tree for creating Access/distribution and core layer switching.
• Deploy new POD when gets the request for large no of sever deployment.
• Devices worked on includes, Catalyst 3750, 4800, nexus 6001, 6004 ASR 9k, Arista 7280, Arista 7010.
• Layer 2 switching technology architecture, implementation and operations including L2 and L3 switching and related functionality. This includes the use of VLANS, STP, VTP and their functions as they relate to networking infrastructure requirements including internal and external configuration and security.
• Works on the Leaf and spine architecture.
• Solved tickets that include troubleshooting network issues, DHCP request fails, Issue related to IP not reachable. Layer 2 issues.
• Successfully configured requests for new resource allocations assigning new IPs, ports and subnets etc.
• Worked on decommission of servers and switches and migration of switches from one spine to another.
• Upgraded bandwidth of uplinks by adding additional links to existing links.
• Serve as part of a team of network engineers responsible for base wide network upgrade from Cisco Layer 3 Catalyst switches, routers, load balancers and firewall.
• Configured the Cisco ASR to use the VRF routing functions to completely split the traffic through the network. Also responsible for Cisco ASA firewall administration across our global networks
• Deployment of IPSLA devices throughout the datacenter.
• Worked with engineering team to resolve tickets and troubleshoot L3/L2 problems efficiently.

Network Engineer

Confidential, Richardson, TX

Responsibilities:

• Responsible for the installation, configuration, and integration of Vblock systems.
• Configured HSRP, VPC and VLAN trunking, VLAN routing on Nexus 9k, 7k, 5k, 3k and Catalyst 6500 Switches.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as Port Security, VLAN, Trunks, VTP, Ether channel, STP, RSTP.
• Involved in migration projects, which involves replacing legacy devices to new Nexus devices and introduced VPCs in the new architecture.
• Implement and Troubleshooting issues including but not limited to Series Routers, ISR and ASR routers (1Ks, 9Ks) Series Switches, Cisco Nexus 5000 and 7000 Series Switches and Nexus fabric extenders, Cisco UCS technologies, Cisco VSS/VPC, fabric path, OTV, VPLS technologies, WLAN controllers.
• Factory logical configuration and integration of Vblock networking components into customer environment.
• Installation of Vblock systems on-site at customer locations.
• Configuration of Vblock networking components, including but not limited to Cisco Nexus 5k, Nexus 9K, Nexus 3K, Nexus 1000V, 3750, 3560, and UCS.
• Performed Comprehensive backup and testing of all installed Vblock components.
• In-depth Knowledge Transfer of Vblock Systems to customers.
• Hardware, software and firmware upgrades of Vblock systems and components.
• Preparation and completion of required pre and post deployment documentation.
• Mentoring of VCE partners in Vblock technology and deployment.
• Implementing, administrating and troubleshooting common TCP/IP based services, including NTP, DNS, SSL, SSH, services, etc.
• Serve as subject matter expert for assigned customer accounts and take ownership of complex customer issues.
• Provide ongoing recommendations for continual service improvement for customer Networks and Systems.