Sr. Network Engineer Resume
Manhattan Beach, CA
PROFESSIONAL SUMMARY:
- Sr. Network Engineer with around 7 years of experience in Planning, designing, implementing, Security, Install, Support, Troubleshooting, Configuring, managing WAN and LAN networks
- Extensive experience in administration, engineering, and supporting for various technologies including proficiency in LAN/WAN, routing, switching application load balancing and wireless.
- Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.
- Designed and implemented router and layer 2 and 3 switches.
- Responsible for Firewall, Load Balancing and Wireless Infrastructure.
- Experience with Checkpoint VSX, including virtual systems, routers and switches.
- Supported in troubleshooting and directing end users on issues ranging from database security, backup/restoration, to erroneous data issues, detailed networking issues, software change request/bug discovery and reporting.
- Experience working with Nexus 7K, 5K and 2K.
- Experience with DNS/DFS/DHCP/WINS Standardizations and Implementations.
- Configuration of Network and Security devices such as Cisco routers and switches (Cisco ASR 1K, 9K, … 7K/5K).
- Execute DHCP, DNS, IPAM configure on the servers to allocate
- Expertise in installing, configuring, and maintaining Cisco Switches (2900, 3500, 7600, 3700 series, 6500 series) Cisco Routers (4800, 3800, 3600, 2800, 2600, 2900, 1800, 1700, 800)
- Strong hands on experience on Cisco Catalyst (3550, 3750, 6500) series switches, Cisco (2500, 2600, 2800, 3600, 3800, 7200) series Routers, ASA Firewall (5505/5510), Load Balancers using Cisco ACE, F5LTM/GTM, Bluecoat, Citrix NetScaler’s, Security Device Manager (SDM), Cisco Works, HP OpenView, Solar Winds, Sniffer, Palo Alto(2k,3K and 5K).
- Worked as part of Data Services team on Disaster recovery planning, implementation, and testing.
- Extensive experience in Implementing, Configuration, Upgrades and Support of Checkpoint (NGX R65, R70 and R71), Juniper Firewalls (SRX5400, SRX5600, and SRX5800), Cisco Firewalls (ASA5525, ASA 5505, 5506 - X, 5585), Palo Alto Networks Firewall models (PA-2k, PA-3k, and PA-5 k).
- Installed and configured Meraki (MS250, MS210) and MR84, MR250.
- Cisco Identity Services Engine (ISE) to simplify identity management across diverse devices and applications.
- Implemented Site to Site, Upgraded Wireless LAN Controllers.
- Designed and implemented SSL Portal for outside customers.
- Installed, configured and monitoring of Checkpoint Firewall.
- Implemented All Firewalls for building accessing the internet.
- Streamlined server architecture and maximize usability for company and clients.
- Controlled costs by investigating upgrades and new technology before implementation.
- Managed multiple simultaneous customer design and risk avoidance projects.
- Repaired and restructured current servers as needed.
- Prepared reports on data center efficiency to improve function and reduce costs.
- Ensured that data center stays as immaculate as possible to prevent unnecessary damage to computer systems.
- Knowledge and hands-on experience on IP Addressing, Sub netting, VLSM and ARP, reverse and proxy ARP, Ping Concepts
- Experience of routing protocols like RIP, EIGRP, OSPF, BGP and TCP/IP.
- Network Security, NAT, PAT, STP, VPN, Traffic Filtering
- Excellent knowledge in IP addressing on iPv4 and iPv6
- Completes logical and physical setup and configuration of routers, switches and access points.
- Kept all systems as updates as possible implementing any new technology where possible.
- Set up CAT5/6 & FC structured cabling - Cable trace, Crimp, FC testing, cable management.
- Knowledge or experience with Palo Alto, Tipping Point, Iron Port, Mobile Iron and other Firewall technologies.
- Highly experienced in preparing technical documentation.
TECHNICAL SKILLS:
WAN Technologies: PPP, CHAP, PAP, GRE, Frame Relay, MPLS
Routers: Routers, Cisco ASR
Switches: Cisco L2 & L3 Switches, Nexus, Cisco, ASA, PIX, FWSM, Netscreen, Meraki
JUNIPER Platforms: SRX, MX, EX Series Routers and Switches
LAN Technologies: Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q
WAN Technologies: Frame Relay, ATM, ISDN, PPP, HDLC, MPLS, DS1, DS3, OC3, T1 / T3 & SONET, Riverbed Steelhead
Protocols/Services: Routing Protocols (RIP v1 & v2, IGRP, OSPF, EIGRP, BGP), QoS, HSRP, VRRP, TCP/IP, load balancer, Proxy servers, IPSec, MPLS, PPP, VoIP, SIP, H.323
Network Management Tools: Wireshark, Netflow Analyzer, HP OpenView, OPNET, Solarwinds, Cisco ISE, NetSight
Security Server Protocols: TACACS+, RADIUS
Networ k Security Too l s/Load Balancers: Wire s h ark, Fire w a ll. Cisco ASA, Checkpoint, Juniper Firewalls Cisco Firewalls and Palo Alto, Cisco ISE.
LAN Technologies: SDWAN, Vlan, vtp, inter-vlan routing, stp, rstp, pvst, 802.1x
Network Securities: Nat/pat, vpn, l2/l3vpn, filtering, load balancing f5, ids/ips, IPSec, acl.
Web servers: Apache, Nginx and IIS.
Operating Systems: Windows NT 4.0 (Desktop/Server), Windows 2000/2003/2008 server, Windows XP/7, LINUX-1, Solaris, Red Hat-1, UNIX, JUNOS, Microsoft Office 2007, 2010, 2013.
PROFESSIONAL EXPERIENCE:
Confidential, Manhattan Beach, CA
Sr. Network Engineer
Responsibilities:
- Configured, troubleshooted, and upgraded Checkpoint Firewalls for Managing clients, which included network and/or resource access.
- Maintained complex LAN/WAN networks with several VLANS and provided support for routing protocols and also providing secure sessions over internet using IPSec and SSL encryption.
- Worked closely with Service providers for maintaining circuits based on MPLS technology.
- Worked on MAC filtering using Cisco Prime Infrastructure for wireless Controllers 5520 series.
- Responsible for Firewall Change Request and troubleshooting using ASDM and Firepower as per requirement on daily basis.
- Configured and monitored APC UPS’s through CLI and GUI using StruxtureWare Data Center Expert .
- Closely worked on Firewall change requests using ASDM and Firepower .
- Replacing HP switches with Cisco 2960 series switches
- Configuring new Cisco routers and switches, migrating and upgrading LAN & WAN
- Implementing security Solutions using Palo Alto Pa-5000/3000, Cisco ASA, Checkpoint firewalls R75, R77.20Gaia, Juniper SRX 5600/5800 and Provider-1/MDM
- Configuring the check for monitoring the devices like web servers, routers, modems, switches, firewalls, application servers, load balancers and other servers
- Configuring, implementing and maintaining of Cisco firewalls (ASA 5505, 5510), Cisco Routers, Cisco Switches
- Configuring, troubleshooting and maintaining the SOPHOS firewalls in various locations
- Performing PCI compliant scans for every quarter
- Good Knowledge on Juniper SRX configurations on various platforms of Junos.
- Installed and configured firewalls, IPS, IPsec VPNs and various screens for intrusion prevention on Juniper SRX equipment.
- Write MoPs to configure Juniper and interfaces 10Ge Trunks, OSPF, CoS, QoS, VPLS, EVPL, RSVP Juniper hardware support of MX960e, MX480e, M10, M120, M320, T1600, T640, and T8860.
- Managed Datacenter of F5 load balancers, Cisco 4500, Juniper M120 and Extreme switches.
- Support for Juniper M120 & J series, Cisco 3745, 6500, GPRS CGSN
- Revised and Implemented procedures for configuration and management up to 400 Juniper Ex3300 access switches, including planning and development of a standard configuration template.
- Upgrade network equipment (Cisco & Juniper), software and hardware components and system configuration.
- Migration of MPLS environment to Cisco Meraki based on SD-WAN IPSEC VPN solution
- Installed and configured Meraki (MS250,MS210) and MR84, MR250.
- Worked on Meraki firewalls, switching and wireless, including support for ISE, QOS, and SDWAN on these devices.
- Hand on Experience and Knowledge in SDWAN enterprise network.
- Prepared network diagrams, documenting on confluence about issues and solutions
- Maintain technical detailed documentation of LAN and WAN systems and applications.
- Utilized Cisco ISE to authenticate Endpoints onto the network.
- Automated active directory operations of the organization like adding, removing, updating users using python.
Confidential, Wilmington, DE
Sr. Network Engineer
Responsibilities:
- Install and configure two new Juniper switch environments. The new models; Juniper EX4200 & EX4550 switches.
- The EX4200s to become there new CORE switches and the EX4550 for customer's new Storage environment.
- This also involved Virtual Chassis and OSPF configuration for EX4200 Cores and bonded twinax for EX4550's for their storage environment.
- Configured Multi homing BGP routing on customer's Juniper SRX firewall infrastructure.
- Setup and configured multiple Juniper ISG-2000 firewalls and Juniper SSG-20 firewalls for partner locations.
- Configured multiple site-to-sites VPN on Cisco PIX FW and Cisco routers to connect too many customers and partner locations.
- Configured Juniper M10i, M7i, and Juniper EX switches for new data center.
- Configuring HSRP between the Cisco 3845 router pairs of Gateway redundancy for the client desktops.
- Configuring GLBP, VLAN Trunking 802.1Q, STP, Port security on Catalyst 6500 switches.
- Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support.
- Worked on L2/L3 Switching technology administration including creating and maintaining VLANs, Port security, Trunking, STP, Inter Vlan Routing, LAN security.
- Configured CIDR IP RIP, PPP, BGP and OSPF routing.
- Worked in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
- Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
- Configuring STP for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to the switches.
- Worked on OSI Model, TCP/IP protocol suite (IP, ARP, ICMP, TCP, UDP, SMTP, FTP and TFTP).
- Basic Configuration and VLAN/VTP/Spanning-tree setup on Cisco 3800, 6500, WDN 6K Nexus Switches.
- LAN/WAN design and implementation using Cisco routers, hubs and switches.
- Replaced NAC for wired and ACS for wireless with Cisco ISE
- Securing network resources with shared folder permissions, Implementing file security system.
- Configure Switches (layer 2, 3 and 4 switching).
- Configured Cisco Routers using Bundle Ethernet, RIP, IGRP, OSPF and EIGRP.
- Worked on connecting to Oracle database and fetch the data with Python.
Confidential, Denver, CO
Network Engineer
Responsibilities:
- Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 Catalyst
- Experience with IP Subnetting, Telnet/SSH Clients, Terminal Server Remote Access, ServiceNow, COS, VoIP and MPLS technologies.
- Cisco network software (COS/IOS), inventory/maintenance tracking and vendor support. Case handling; as well as with Cisco routers and Catalyst/Nexus switches, F5 load balancers and Infoblox DHCP/DNS.
- Administration Big IP F5 LTM for all Local Load balancing and use GTM for load balancing across Data Centers.
- Worked with Cisco Nexus Switches and Virtual Port Channel configuration.
- Worked with Checkpoint VSX, including virtual systems, routers and switches.
- Worked with DNS/DFS/DHCP/WINS Standardizations and Implementations.
- Configuration of Network and Security devices such as Cisco routers and switches (Cisco ASR 1K, 9K, … 7K/5K).
- Supported, troubleshot and directed end users on issues ranging from MS SQL database security, backup/restoration, to erroneous data issues, detailed networking issues, software change request/bug discovery and reporting.
- Used Cisco ISE to grant authenticated users with access to specific segments of the network, or specific applications and services, or both, based on authentication results
- Configuring Cisco and Juniper devices (Router & Switches).
- Dynamic routing protocol configuration (RIP, RIP V2).
- Nat and IPsec configuration on Cisco Routers.
- Managing DNS, FTP, Send mail, NIS, HTTP, Account management, NFS, Auto mount, VNC, Disk management, NTP, NFS cron, package update, data.
- Using DRAC, DELL Remote console to manage server.
- Handling server down issues and analyzing the root cause for the issue by checking system logs.
Confidential
Network Engineer
Responsibilities:
- Network Engineer responsible for Firewall, Load Balancing and Wireless Infrastructure.
- Worked for Data Services Team, leading on the Disaster recovery planning, implementation and testing.
- Part of multiple acquisition teams requiring migration to Compass data center.
- Replaced Checkpoint NG Firewalls with Cisco FWSM.
- Replaced Nortel Connectivity IPSEC VPN with Cisco ASA SSL Client and Clientless VPN.
- Designed and Implemented Wireless Infrastructure with Secure Intranet and Guest Access.
- Implemented Cisco Optimized Edge Routing (OER) to utilize multiple ISPs with single public address Space.
- Designed and Implemented Cisco GSS. DNS based load balancing with health checking and proximity detection.
- Used to load outbound vendor connections across multiple paths.
- Deploying and decommission of VLANs on core ASR 9K, MIX routers, Nexus 7K, 5K, HP switches and its downstream devices.
- Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
- Configured CIDR, RIP, PPP, BGP, MPLS and OSPF routing on Cisco routers and Juniper routers.
- Assisted in MPLS migrations, implemented a backup for the existing WAN connection using site-to-site IP sec VPN tunnels.
- Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
- Worked on designing and troubleshooting of OSPF routing problems
- Worked in Proxy servers, Solarwind network installation and monitoring billing system, Network performance for one year time.
- Configuring and maintaining web server and mail server.
- Handled Procurement of B/W, Servers, Microsoft License, renewal AMC like, Servers and Desktop Maintenance, Recording Machine, Firewall, MPLS and Lease line, Routers and Switches.
Confidential
Jr. Network Engineer
Responsibilities:
- Configured OSPF on CISCO devices with multiple routing processes and redistributed them. Tested and hands on experience in multi area OSPF topologies.
- Monitor, troubleshoot, test and resolve Frame Relay, ATM, MLPPP, PPP, and Dial-up.
- Routing protocol use EIGRP, OSFP, Static, Static Routes.
- Design and implement data cloud solutions.
- Design and implement EIGRP, OSFP, VPN, and Site to site VPN.
- Perform upgrades to Cisco Switches from 5000, 6500.
- Configuring/Troubleshoot issues with the following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 series), to include: bridging, switching, routing, Ethernet, NAT, and DHCP, as well as assisting with customer LAN /MAN.
- Scripting/programming (Perl / Shell Scripting, C, C++).
- Work with Active Directory, as well as utilizing VI for IP/hostname updates.
- Significant work and knowledge of VitalQIP and usage of QIP GUI.