SUMMARY:

• 10+ years of experience in designing, capacity planning, upgrade/maintenance & implementing internet works using Cisco Products with deep understanding of application level security.
• Designing schemes for IP Addressing & Subnetting.
• Experience in configuration and troubleshooting IP Routing with BGP, OSPF and EIGRP.
• Implemented WAN/Core based on ATM & Frame Relay on Optical SONET infrastructure.
• Worked on VoIP on point - to-point & FR PVC’s with Traffic Shaping. Good experience in implementing MPLS-VPN’s.
• Experience in configuration and troubleshooting Cisco Call Manager, Cisco UCS Server, Cisco Prime.
• Experience with BIG-IP F5 load balancers, version 9.x, 10.x, 11.x, CitrixNetscalers and Web Accelerators.
• Experience in configuring and installing Cisco VoIP phones and trouble shooting and debugging rDNS, DHCP, TFTP and other routing issues related.
• Strong Trouble shooting experience on Cisco, Juniper/Netscreen, Nortel/Baystack, Fortinet, Arista, HP, Devices.
• Configured Intrusion Detection System and IPS for protecting the networks.
• Knowledge of Microsoft Visio Professional, Windows XP, 2003, 2008 Linux Red hat server and PERL scripting.
• Experience in configuring IP Multicast, STP, VTP, HSRP, GLBP and redistribution between routing protocols troubleshooting them.
• Experience in testing routers and line cards using Smart Bits and involved in performance analysis of these routers. IXIA Testing Tool experience.
• Adaptive to Cloud Strategies based on AWS (Amazon Web Services).
• Technical knowledge on EC2, IAM, S3, VPC.
• Excellent exposure on Provisioning Systems, Automated Build Platforms.
• Practical usage of Amazon Glacier for archiving data.
• Monitoring resources, such as Amazon DB Services, CPU Memory, EBS volumes.
• Monitor logs for better understanding the functioning of the system.
• Experience in configuring and installing Meraki access points and working on meraki dashboard.
• Experience in setting up and troubleshooting proxy servers for clients.
• Experience in deploying IWAN, SD-WAN.
• Configuring and installing Meraki MX VPN Concentrator HA pair as DC-DC failover for redundancy.
• Experience in configuring Cisco & Juniper router and working in multi-vendor environment.
• Experience in migrating Juniper Netscreen ISG 2000 to Palo Alto Firewalls in the datacenter. Configuring the Palo’s in HA pair for failover and troubleshooting customer incidents with the migration.
• Experience in replacing zscaler proxy servers to palo’s content filtering
• Experience in configuring and installing Cisco ISE appliance and using it to authenticate Meraki Wireless access points clients, and replacing the Cisco ACS server.
• Experience in configuring new and replacing Cisco switches at core and access networks.
• Router platforms include: 2600 Series, 2800 Series, 3700 Series, 3800 series, 7200 Series, 7500 Series and ASR9K, GSR12K Series, Cisco CRS series.
• Switch platforms include: 2900 Series, 3500 Series, 3750 Series(L2 and L3), 4000 Series, 4500 Series (L2 and L3), 5500 Series, 6500 Series(L2 and L3),Nexus (7k,5k,2k)

TECHNICAL SKILLS:

Routers: Juniper MX series and T series routers, SRX, Meraki MX’s, Arista, Cisco GSR

12000, 7600, 7200, 3800 and ASR 9000 Series, Cisco CRS series.:

Switches: Catalyst 6500’s, 3500’s, 2900’s, Meraki MS series, HP, nortel, Arista

LAN Protocols: Private VLAN’s, VTP, DTP, MLS, STP, RSTP, MST, Ether Channel, Inter VLAN routing, IPV6

IP Routing Protocols: BGP, OSPF, IGRP, EIGRP, RIP

MPLS: LDP/TDP, MPLS VPN, L2VPN

Wireless: 802.1 a/b/g/x WLANS, Cisco aero nets, Meraki AP.

WAN /Core: ATM, Frame Relay, MPLS ISDN PRI/BRI, PPP, HDLC, IWAN, SD-WAN

Firewalls: Cisco (PIX/ASA), Cisco FWSM, Cisco NAC, Juniper (SRX/Net screen), Palo Alto, Fortigate, Checkpoint

Quality of Service: Classification and Marking (CoS, ToS), Congestion, Management & Avoidance (CQ, PQ, WFQ, CB-WFQ, RED, WRED, LLQ).

PROFESSIONAL EXPERIENCE:

Confidential, Albany, NY

Sr Network Engineer

Responsibilities:

• Con gured and installed in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Nortel/Avaya to Cisco 3560/3650 switches. This project also involved in con guring and testing OSPF and BGP protocols
• Installed and Con gured Juniper Firewalls and Routers - SRX, ISG2000, 1000, SSG550,320, 140, SSG20, SSG5
• Designed and Implemented MPLS VPN (RFC 2547) Mechanisms on Cisco IOS and Juniper Platforms
• Worked on routing protocol related issues such as stack, RIP, EIGRP, BGP, OSPF
• Con gured policy statements, routing instances, rewall lters
• Con gured and installed the VoIP systems for the whole state of NY
• Worked and monitored with SNMP tools Zenoss, Solar Winds, NfSen, Observer, BlueCoat, Netdisco, to troubleshoot circuit issues.
• Experience in con guring Checkpoint Firewalls
• Con guring and Installing R75.20 (Secure Platform) & R77.10 (GAiA) version rmware.
• Upgrading and supporting Checkpoints of di erent rmware.
• Configuring and trouble shootingIPSec VPN software and policies on checkpoint firewall 5000 series.
• Experience in working and Staging VM’s for the Checkpoints across the customer.
• Proficient with F5 LTM and Cisco CSM load balancer in-between the servers inside the server farm and DMZ.
• Proficient in F5 ASM and APM and AFM modules, Worked extensively in each module.
• Switches standardization- Includes replacing old switches with standard Cisco 3500
• Switches, upgrading Cisco IOS/Cat OS on Cisco 3600, modifying switch con guring on, Adding authentication, logging and SNMP con guration parts
• Deployed BIG IP Enterprise manager to cluster all the F5 LTM, GTM, ASA, Netscreen devices for easier management and common configurations.
• Involved in the migration of F5 Local traffic managers of LTM 5100 series to LTM 6800 series for higher.
• Experience in migrating data centers of different agencies across different platforms.
• Experience in configuring and installing Palo Alto’s in the data center. And migrating all the policies from the Juniper ISG 2000 firewall.
• Experience in supporting and troubleshooting the Palo’s and replacing the proxy server to the Palo’s content filtering.
• Experience in configuring Cisco ISE appliance and authenticating deployed Cisco Meraki AP’s, troubleshooting clients
• Experience in the deployment of Arista Switches and routers and managing them on CloudVision.
• Experience in working with vendors with Arista Network Management.
• Experience in working and troubleshooting with Arista CloudVision Provisioning.
• Experience in deploying IWAN, SD-WAN.
• Design and develop PaaS layer to host cloud services for IWAN
• Experience in configuring Cisco APM to Improve traditional and existing VPNs with WAN acceleration and optimization services.
• Work Experience as a member of AWS Build Team.
• Setup and managed EBS Volumes and EIP to EC2 Instances.
• Designed AMI images of EC2 Instances by employing AWS CLI and GUI.
• Created and Managed User Accounts, Log Management, Shared Folders, Reporting, Group Policy Restrictions, etc.
• Responsible for Troubleshoot various network problems, system problems like Core Dump Analysis.
• Infrastructure Development on AWS by employing services such as EC2, RDS, Cloud Front, Cloud Watch, VPC, etc.
• Worked with Management frameworks and Cloud Administration tools.
• Configuring and installing Meraki MX VPN Concentrator HA pair as DC-DC failover for redundancy.
• Experience in configuring and installing Meraki MS switches and pairing them up in the meraki cloud using dashboard.
• Using the meraki app for managing on the go for the clients
• Integrate firewall with FortiManager and FortiAuthenticator. Installing policy packages on these firewalls.
• Integrate VPN access with FortiAuthenticator and install FSSO with Fortigate.
• Experience in configuration of Fortigate 5001E and using application control and web filtering.
• Creating policies and trouble shooting tickets on the fortigate 5001e firewall using GUI and cli.
• Experience in the upgrading of the firmware of fortigate firewall
• Configuring core SRX and troubleshooting using cli to upgrade and add new circuits.
• Con gured routing between the core SRX and remote sites to bring the tunnels up
• Hands-on experience with WAN (ATM/Frame Relay), IWAN, Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
• Experience in working on HP, Arista, Nortel switches and routers
• Design, implementation and operational support of routing/switching protocols in Complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Remediated remote sites and agencies to VoIP systems and Con gured VoIP routing to the core network
• Trouble shooting VoIP issues
• Working on the checking system for Firewall, Routing, Cisco, VoIP, Networking issues
• Designing and installing wireless network infrastructure like wlc cisco 5520.
• Performing regular maintenance of wireless network systems like periodic system testing and software upgrades
• Working and con guring Cisco wireless services in meraki dashboard at remote sites
• Installing and con guring wireless access points Cisco aero nets, meraki ap’s
• Working and con guring Cisco ACS servers
• Working and Con guring Cisco wireless control system
• Con gured and troubleshoot the DHCP server and and VoIP regarding issues.
• Pro cient in Layer 3 circuit troubleshooting

Confidential, Framingham, MA

Sr Network Engineer

Responsibilities:

• Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550. This project also involved in con guring and testing EIGRP and BGP protocols & implemented and Maintained IP Telephony Cisco 7940 and 7960 systems.
• Installed and Con gured ASA rewall.
• Installed and Con gured f5 BigIp to provide Load Balancing for server.
• Installed and Con gured Cisco ACE Module for Cisco Catalyst 6500 series switches and Cisco 7600 series routers.
• Installed and Con gured Juniper and Cisco Routers - GSR 12000, 7600series, 4500, 2800s.
• Migrated distribute on Switches 6509 to Nexus 7010.
• Design and deployment of Large scale SONET, ATM, and BGP network architecture design.
• Testing for Functionality and convergence of the network.
• Installed and Con gured Cisco wireless app. 1130's and Wireless LAN Controller 4400 series.
• Experience in TCL/TK automation scripting
• Migrating rewalls from Juniper Net screen 500 to SRX 650.
• Experience using IXIA-5.6 for network scalability and feature Testing.
• Provided Tier 3 support
• Implemented MPLS VPN (RFC 2547) Mechanisms on Cisco IOS and Juniper Platforms
• Con guring and troubleshooting MP-BGP Session Between PE Routers
• Troubleshoot multi area OSPF and OSPF scale issues
• Con gured and Worked on PIX(535,525)/ASA(5520,5550) rewalls
• Con gured policy statements, routing instances, rewall lters
• Involved in Replacement of FPCs, PICs on Juniper M320 and T640 routers
• Con gured CH-DS3, CH-E1, CH-T1, STM -1 Channelized ports, IQ2 10GE Uplinks, AS PIC
• Redundancy on M320 and T 640 routers
• Hands on experience on upgrading of JUNOS.
• Ability to work independently and also as part of a team, following established guidelines.
• Automated and manual testing experience in SIP and MGCP
• Switches standardize on- Includes replacing old switches with standard Cisco 3500 switches, upgrading Cisco IOS/Cat OS on Cisco 3500, modifying switch con guring on, adding authentication, logging and SNMP con guration parts.
• Pro cient in Layer 1 circuit troubleshooting
• Worked on troubleshooting customer issues related to MPLS VPN related issues involving PE
• Con guration issues, PE-CE link issues such as routing protocol con guration, Layer1 / Layer2 issues, BGP4 address-family related issues, MP-BGP.
• Worked on Route-Re ectors to troubleshoot BGP issues related to customer route pre xes, BGP route ltering policy problems, ORF etc.
• Worked on deploying Multi cast to various customers, that involved PIM- Sparse and Dense Modes.
• Worked on routing protocol related issues such as stack, RIP, EIGRP(Variance and un equal Cost load balancing)
• Worked on issues related to customer access-lists and various security feature
• Worked on Gigabit Ethernet service related issues troubleshooting Catalyst 6500, 3560 Switches, issues related to VLAN, VLAN Trucking, HSRP failovers, related issues

Confidential, Chandler, AZ

Network Engineer

Responsibilities:

• Worked as a member of NOC and involved in troubleshooting LAN/WAN issues.
• Determined cost e ective network modi cations, applied network and tra c engineering
• Principles and used database analysis systems to develop network architecture plans.
• Implemented BGP capabilities like ORF, Route refresh and Extended communities, for various customers.
• Con guring, managing and troubleshooting networks using routing protocols like RIP, EIGRP And OSPF (Single Area and Multi Area).
• Troubleshoot MPLS issues within the core and edge.
• Handle customer escalations related to Internet connectivity issues, VPN issues (OSPF sync issues), etc; work with various technical teams to nd a resolution in a timely fashion.
• Con gured policy maps, class maps and access lists on GSRs
• Worked with JTAC and Cisco to troubleshoot various problems
• Designed secure VPN architecture, including MPLS VPN platforms for various customers which includes ISP’s.
• Modi ed router con gurations programming with additional VLANs, port assignment.
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team.
• The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.
• Worked with telecom vendors in regards to network fault isolation.
• Created OSPF multi area summarization plan. Created stub, totally stub areas.
• Tested routers and Line Cards using Smart Bits and done Performance Analysis of both LAN/WAN infrastructure.
• Con gured Policy based routing to allow Lan User to access Internet on di erent links
• Experience in TCL/TK automation scripting
• Interacted with business users from a service delivery and service support perspective.
• Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing, design, implementation and operational support of routing/switching protocols in complex Environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Planned, tested and evaluated various equipment, systems, IOS’s and procedures for use within the network / security infrastructure.
• Proficient in IPv4/IPv6 subnetting.
• Implemented IP Telephony and Cisco 7960 phone systems in the company.
• Installed Cisco Call manager 8.02 version on Cisco UCS Server
• Worked in Multi vendor environment containing Juniper, Cisco and Nortel routers.

Confidential

Network Engineer

• Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client.
• Validate existing infrastructure and recommend new network designs.
• Installed and maintained Cisco and F5 Load Balancer and documentation.
• Manages network device con gurations, logical names and addresses, network design and implementa tion.
• Improving OSPF convergence by controlling SPF algorithm, LSA/SPF throttling.
• Participate in all technical aspects of LAN, WAN, VPN and security internetworking projects including, short and long term planning, implementation, project management and opera tions support as required.
• Extensively used TCP/IP tool TELNET for remote login to the routers & SSH for secure login.
• Estimated Project costs and created documentation for project funding approvals.
• Managed various teams involved in site surveys, cabling speci cations, Network equipment installa tion and con guration.
• Planned resources and presented project status to higher management.
• Deployed 7613 as PE and CE router and Con gured and troubleshooted the Edge Routers.
• Has exper tise in LAN/WAN technologies (fast Ethernet, Layer2 & 3 switched/routed LAN, and Frame Relay).
• Routing Protocols, Networking Layer1, 2, 3 Switching concepts, LAN/WAN technologies, Wireless Networking, TCP/IP concepts.
• Con gured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer 1 switching architecture and also for security.
• Enabled GSR RPR+ mode, installed Engine 5 SIP cards, Upgraded Cisco GSR routers GRP-Bs to PRPs ( RPP+), PRP 1 to PRP 2 and IOS levels as well.
• Tested various BGP features like local-preference, MED, Weight and replicated customer issue problems in the testing environment lab.
• Performed various Line card memory upgrades, PRP memory upgrades and fabric upgrades on Cisco 12000 series routers.