SUMMARY:

• Over 8 years of extensive experience in Cisco Routing, Switch, Security and load balancers, Network Architecture, Engineering, Firewalls, Systems Analysis and Design, Implementation, Deployment and Maintenance.
• Experienced in Network deployments and Network security designs.
• Experienced with Installing, Configuring and Deploying Firewalls.
• Extensive experience with Check Point, Juniper SRX and Cisco ASA firewalls, Fortinet.
• Extensive experience with Check Point and CISCO Security Firewall Configurations and network configurations
• Performed trouble shooting of Check point provider - Version R62, R65, R71 and R75.
• Production support for major firewall platforms to include Cisco ASA, Juniper SSG,SRX and ISG products, Check Point NGX implemented on Secure Platform (SPLAT) and expert-level network
• Experience with configuring, supporting, and troubleshooting Firewall including Check Point, Juniper, Cisco ASA.
• Monitor, identify, report, and mitigate security weaknesses
• Perform risk assessments for clients and provide the findings and recommendations
• Communicate and manage client needs and expectations in all phases of their information security solutions
• Develop detailed technical recommendations to solve security issues
• Enforce Information Security policies and procedures
• Troubleshoots network access problems and implements network security policies and procedures.
• Ensures network (LAN/WAN, telecommunications, and voice) security access and protects against unauthorized access, modification, or destruction).
• Experience in Identifying and evaluating implementations of specific and general security tools (Secure Works, SharePoint, IDS, ASA, etc.)
• Expertise in F5 LTM and GTM Management
• Expertise in F5 BIG-IP LTM and Cisco CSS load balancers.
• Experience with Citrix Netscaler, F5 GTM Loadbalancer
• Maintenance of network servers such as file servers, VPN gateways, intrusion detection systems, etc.
• Experience in delivery of our proposed Wireless and Route Switch solutions centered on Cisco products
• Experience in managing cisco call manager and unity express.
• Experience of security product
• Accountable for the performance of direct reports on a daily basis.
• Assist in testing, troubleshooting and resolution efforts when systems failures occur and interface with network operation teams.
• Assists in the development, management, and enforcement of company's network security policy.
• Proactively monitor network utilization and gather trend data for reporting as well as capacity planning purposes.
• Research and evaluate new networking technologies to improve existing infrastructure.
• Cross-train and provide backup to other Network Engineers.
• Experienced with Enterprise class data center network design and implementation.
• Experienced in Routing protocols (OSPF, EIGRP and BGP) and IPSEC VPN in a multi-site environment
• Database monitoring
• Worked on Nexus 5K and 7K
• Experienced in Various WAN technologies such as DSL, cable, T1, and MPLS
• Experience with RFC 1918 private networks, firewalls, routers, and switches.
• Adept in Modeling Business Process using MS Visio and generatingWorkflows, Process Flows and other UML diagrams to refine and automate business process.
• Goal-oriented individual with people management skills and strong leadership capabilities.
• Avaya VOIP experience.
• Working knowledge and understanding of Active Directory.

SKILL:

Hardware: Cisco 800, 1700, 2500, 2600, 2800, 3600, 7200, series routers,Cisco 500, 1900, 2960, 3560, 3750, 6500 series switches,Cisco PIX 500, VPN 3000, ASA 5500 series security appliances

Protocols: RIP, OSPF, IGRP, EIGRP, BGP, ISIS, HSRP, VRRP, RSVP, MPLS, DHCP, DNS, TCP/IP, SNMP, Frame Relay, ISDN

Firewalls: Cisco Pix Firewall 520/515, ASA 5500 series, Check Point firewall, Netscreen/Juniper, Fortigate, TACASA/RADIUS, Tipping Point. Fortinet.

PROFESSIONAL SUMMARY:

Confidential, Chicago, IL

Network Engineer

Responsibilities:

• Architect, implement and manage LAN and WAN development leading to a scalable and flexible infrastructure that minimizes the reliance on consultants.
• Source, recommend vendors and negotiate terms for all infrastructure needs including data, voice and internet telecommunications, networking hardware and service agreements.
• Standardize network and server hardware configurations resulting in significant savings in support expenses.
• Act as primary technical contact for all client, vendor and exchange connectivity.
• Design and implement corporate solutions for email, internet, virus protection, disaster recovery, data storage and backup, system and bandwidth monitoring, resulting in an improved level of professionalism and data integrity.
• Monitor perimeter and internal networks for intrusion and hacks (DoS, DDoS, attack signatures, etc).
• Perform upgrades on existing network equipment to resolve various network problems.
• Guided several move and network infrastructure migration projects at different clients.
• Deployed Nexus 5k pair w/ L3 modules for Valet garage VPCs in a collapsed core
• Datacenter upgrades from C6500s to Nexus 7k/5k/2k, double-VPC between distribution and access, single-VPC to servers
• Replace core and distribution layer switching with Cisco Nexus 7000 utilizing VDCs and 10g VPCs to server and user access
• Configured over 200+ Site-to-Site & Remote Access VPNs on PIXs, VPN Concentrators, IOS routers and ASAs
• Experience in managing and Maintaining Nexus 5000 and 7000 series.
• Migrate cisco series voice gateway.
• Configure phone using cisco call manger.
• Implemented and administered Websense Web Security Gateway for web content filtering and DLP.
• Performed AnyConnect VPN client upgrades for over 4000+ VPN users.
• Hands on experience with Cisco ACS 4.x servers.
• Very Good Experience with Check Point Provider - Version R70 and R75.
• Strong TCP/IP understanding. Knowledge of debugging Check Point Firewall.
• Extensive experience with Check Point and CISCO Security, Fortinet Firewall Configurations and network configurations.
• Experience migrating from checkpoint R70 to R75 from splat to Gaia version.
• Managed over 500 networks devices for AAA using Cisco ACS 4.x
• Upgraded IOS on over 40 Cisco ASA 5500 firewalls and FWSM modules.
• Configured with F5, Citrix Load balancers in Failover for Load balancing and SSL handling
• Hardware migration from Citrix Netscaler NS 7000 to MPX 9500
• Involved in setting up new Citrix Netscaler SDX 15000
• Configured F5 BiGip to provide Load Balancing for server farm.
• Experience with configuring VIPs on F5 and Citrix load balancer which include creating policies and creating redirection rules. iRule creation on F5 BIG-IP load balancers.
• Installed Cisco routers and redundant BigIP F5 load balancers to provide uninterrupted service to customers
• Experience configuringfirewall rule sets
• Experienced in Web gateways, firewall, IPS/IDS, VPN, DMZ and proxies
• Experience working on Nortel Switches.
• Configure, deployment of Nortel Switches
• Implemented and managed network monitoring tools like Nagios and Solarwinds Orion NPM, NCM, APM and other modules.
• Configured multi-homed BGP with HSRP, to provide full fault tolerance and automatic failover capabilities, for several clients.
• Good knowledge of standards and compliance such as ISO 27001, COBIT, SOX, SSAE16, ISAE 3402
• Experience modifying firewall rule sets
• Configured/ Administered/ Deployed several Cisco 6500 series switches.
• Implementation of Checkpoint Firewall 4.1 to protect and authenticate local-net and DMZ. Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.
• Performed network, LAN, server and desktop support at all levels.
• Maintained and supported daily, weekly and monthly backups for servers & network configurations.
• Configured and maintained email spam firewalls.
• Designed highly redundant and fault tolerant networks for the financial industry clients.
• Provide 24/7 on call support and Document the environment.
• Provided Network operations support using People Soft CRM.
• Assisted with establishing Network Operations Center (NOC) to proactively monitor the network resulted in better SLA and network performance.
• Created business cases for supporting network infrastructure upgrades and changes.
• Coordinated with change management team for all changes that would likely interface with the Network.
• Designed and configured HSRP for redundancy.
• IOS upgrade and router hardening for 2600, 3600, 7200 routers and 6500, 2900, and 3500 series of switches.
• Created Visio diagrams and other documentation. Updated existing documentation.
• Investigated & resolved network issues using troubleshooting skills & network sniffers.
• Configured Cisco VPN 3000 Concentrator to allow VPN clients.

Confidential, West Plam, FL

Network Engineer

Responsibilities:

• Configuring and install hardware and software required to conduct network penetration testing.
• Experience in infrastructure strategies, hardware/software, security and networking products
• Experienced in Advising management of options, risk vs. cost, benefits and other impacts of infrastructure solutions
• Experience in setting technical standards for network infrastructure, security baselines, policies and procedures..
• Strong TCP/IP understanding. Knowledge of debugging Cisco ASA Firewall.
• Experience with configuring, supporting, and troubleshooting security products including Cisco ASA, Juniper, Cisco, IDS solutions, and others
• Implementation of Checkpoint Firewall 4.1 to protect and authenticate local-net and DMZ. Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.
• Experienced in Providing Security solutions using Checking Point and CISCO for the network.
• .Ability to access Information Security Risks, understand business needs, and apply defined information security policies and architectures in order to develop effective solutions
• In-depth knowledge of IP routing, virtual routing and forwarding (VRF) and routing protocols
• Well versed in different vendors L2/3 switch hardware architectures
• Detailed knowledge and hands-on experience of Layer 2 protocols includes Spanning Tree Protocols, VLAN Tagging (802.1Q), Link aggregation (IEEE 802.1AX)
• Hands-on experience with design and implementation of large IP networks
• Hands-on experience with design and implementation of network security infrastructure (firewalls, IPS)
• Hands-on experience in datacenter environment (LAN/WAN/security/application)
• Experienced with Firewall administration such as Juniper, Check Point or Cisco
• Experience with security as a discipline, with focus on IPSec, Access Control, Firewalling, IDS/IDP
• Hands-on experience with Cisco equipment, Juniper equipment, CDN platforms; test platforms: Spirent
• Implementation and administration of Check Point Firewalls & network Management
• Implementation and maintenance of Backup Exec 8.0 on departmental server.
• Diagnose and solve Frame relay / T1 lines, CSU/DSU and routers connectivity problems.
• Configuring and managing network traffic using 3COM SNMP and access list.
• Manage Cisco Router, 2900xl switches and 3Com hubs configuration for WAN and LAN interfaces.
• Provide 24/7 on call support and Document the environment.

Confidential

Network Engineer

Responsibilities:

• Source, recommend vendors and negotiate terms for all infrastructure needs including data, voice and internet telecommunications, networking hardware and service agreements.
• Standardize network and server hardware configurations resulting in significant savings in support expenses.
• Configure and install new load balancers on clients network
• Rebuilding data centers and redundant sites for failover, F5 load balancers
• Act as primary technical contact for all client, vendor and exchange connectivity.
• Design and implement corporate solutions for email, internet, virus protection, disaster recovery, data storage and backup, system and bandwidth monitoring, resulting in an improved level of professionalism and data integrity.
• Monitor perimeter and internal networks for intrusion and hacks (DoS, DDoS, attack signatures, etc).
• Perform upgrades on existing network equipment to resolve various network problems.
• Guided several move and network infrastructure migration projects at different clients.
• Configured/ Administered/ Deployed several Cisco 6500 series switches.
• Created support procedures, written documentation and Visio network diagrams
• Designed, Implemented and support several Cisco Call Manager Express solutions.
• Performed network, LAN, server and desktop support at all levels.
• Maintained and supported daily, weekly and monthly backups for servers & network configurations.
• Configured and maintained email spam firewalls.
• Designed highly redundant and fault tolerant networks for the financial industry clients