Senior Network Security Engineer Resume
East Peoria, IL
PROFESSIONAL SUMMARY:
- Around 9 years of experience in IP network design, network integration, deployment, automation and troubleshooting.
- Extensive knowledge in configuring and troubleshooting Layer 3 Interior Gateway Routing protocols such as Link - State routing protocols OSPF and Distance Vector routing protocols (RIPv1, RIPv2, and EIGRP). Wide exposure to LAN/WAN setup, installation, configuration and commissioning of network devices.
- Thorough understanding and experience in IDF/MDF Architecture, Data center Architecture and Spine Leaf Architecture.
- Good knowledge in configuring and troubleshooting Exterior Gateway protocols such as BGPv4 including internal BGP (iBGP) and external BGP (eBGP). Routers, load balancers, VoIP and wireless technologies of different vendors.
- Strong hands-on experience on Cisco Catalyst (series 3850, 3560, 4500, 6500), Cisco Nexus (series 2K, 5K, 7K), Cisco Routers (series 7300, 4000, 3800, ASR 9000), Firepower (4100), Load Balancers (Citrix NetScaler, Cisco ACE, F5 BIG-IP LTM/GTM, Virpion), IDS/IPS (HIDS, NIDS, NIPS, HIPS), Fire eye, Splunk, Palo Alto Networks Firewalls (PA-820, series PA-3K, 5K), Checkpoint IP Appliances (NXG R60, R70, 3100, 5900), FortiGate (7060E and 7030E)
- Hands on experience in configuring high-end routers like GSR 12000 series, 7500 series and Catalyst Switches like 6500, 4500 series. Extensive experience in the upgrade, backup and password recovery of Cisco IOS and IOS XR.
- Experience in working with Cisco Nexus Switches like 5000 and 7000 series and Virtual Port-Channel configuration. Implemented VDC, VPC, VRF, and OTV on the Nexus 5505 and 7009 switches.
- Migration from local cloud to hybrid cloud architecture with AWS, Azure . Exposure to Cloud Migration experience to Azure, AWS. Experience with EC2 instances, Security policies. Experience in Python Scripting for Network Automation.
- Migration Experience from Cisco ACS to Cisco ISE.
- Experience with SDN technology and Deployed Cisco ACI. Implemented Spine Leaf Architecture with Nexus 9k and ACI Fabric. Basic knowledge in Cumulus software and linux commands. Lab exposure to Ansible Playbooks for Spine Leaf Architecture. Knowledge in python and Ansible scripting for Automation.
- Experience on EVPN, MLAG, Symmetric and Asymmetric routing in Spine Leaf, VXLAN, VTEPS, VNI, MAC flood lists updates using BGP Route distinguishers, RT1,2,3 and 5 updates.
- Installed, configured, deployed Network Virtualization (NSX) VMware platform for the software defined data center.
- Proficient in monitoring and managing networks using SolarWinds NetFlow Traffic Analyzer, Network Performance Monitor (NPM), Network Configuration Manager (NCM); SAM, IP Address Manager, Additional Polling Engine, Cisco Prime, Security Device Manager (SDM), Cisco Works; Infoblox, HP OpenView, and Wireshark.
- Knowledge and configuration of redundant router protocols like HSRP, VRRP, and GLBP.
- Thorough experience in configuring Virtual Local Area Networks (VLAN) with IEEE 802.1Q, VLAN trunking protocol (VTP), shortest path bridging, Multiple VLAN Registration Protocol and VLAN Cross Connect (CC).
- Experience in troubleshooting both connectivity issues and hardware problems on Cisco-based networks.
- Experience in testing Cisco routers and switches in lab scenarios and deploy on site for production.
- Good knowledge of IPv4 and IPv6 Addressing, IP Subnetting, Fixed Length and Variable Length Subnet Masking (VLSM), OSI and TCP/IP models. Experience in migration of IPv4 addresses to IPv6 addresses using mechanisms like Tunnel Broker, Transport Relay Translation (TRT), In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, NAT, DHCP, DNS.
- Experience in migrating from metro ethernet to MPLS circuit for the remote site connectivity.
- Configured and maintained Quality of Service (QoS) protocols (SIP, BroadSoft, SRTP, SDP, IAX) on VoIP along with PBX servers, VoIP Gateways and Cloud-based PBX servers, Active Directory Database.
- Experience in configuration of LAN protocols such as Ethernet and Fiber Distributed Data Interface (FDDI) on Cisco Switches. Experience in documenting and preparing the process related operational manuals.
- In-Depth Knowledge and experience of various wireless 802.11 standards, controllers, Access Points, Wi-Fi analytics from various vendors (Cisco Meraki, HPE, D-Link and Net gear).
- Implemented and maintained Sourcefire intrusion detection/ prevention (IDS/IPS) system and hardened protection standards, IDS/IPS signatures on Firewall for Fine-tuning of TCP and UDP services.
- Worked on Cisco Firewalls Cisco ASA 5500(5510/5540) Series. Migrated from ASA to Palo Alto 5000 Series. Experience in NAT/PAT, Policies, SSL Forward proxy, Decryption, Url Filtering on PA firewalls.
- Implemented traffic filters using standard and extended access-lists, distribute-lists and route maps.
- Provided support that included resolving day-to-day operational issues with tickets generated by a server.
- Good understanding of SNMP, IP SLA and Network Monitoring with experience in tools like PRTG.
- Deployed, Managed, monitored and supported Bluecoat Proxy for content filtering, internet access between sites and VPN client users, forward proxy scenario and reverse proxy scenario for security and worked on adding URLs in Bluecoat Proxy SG's for URL filtering.
TECHNICAL SKILLS:
Router and VoIP Platforms: Cisco Routers series 9k, 7300, 4000, 3800, 2000, 1900; Avaya products, cisco IP phones.
Routing Fundamentals and Protocols: Routed and Routing protocols RIP, EIGRP, IS-IS, OSPF, BGP, IPX; MPLS, IPv4, and IPv6 addressing, subnetting, VLSM, Static routing, ICMP, ARP, HSRP, VRRP, Route Filtering, Multicast, 802.11, Policy-Based Routing, Redistribution, Port forwarding.
Switch Platforms: Cisco Catalyst series 2960, series 3560, 3850, 4500, 6500, 7000; Nexus series 2K, 5K, 7K; Nortel/Avaya 5510, 5520.
Switching Fundamentals and Protocols: Ethernet technologies, LAN networks, MAC, VLAN and VTP, STP, PVST+, Multicast, RSTP, Multi-Layer Switching, 802.1Q, EtherChannel, PAgP, LACP, CDP, HDLC, RARP .
Firewall Platforms: Checkpoint (NGX R65, 3100, 5100, 5900), Cisco Firewalls (ASA 5505, 5506-X, 5585), Palo Alto Networks (PA series 2K, 3K and 5K) with panorama 8.0, WAF
Security Protocols: Standard and Extended ACLs, IPsec, VPN, Port-security, SSH, SSL, IKE, AAA, Prefix-lists, Zone-Based Firewalls, NAT/PAT, HIPAA standards, Ingress & Egress Firewall Design, Content Filtering, Load Balancing, IDS/IPS, URL Filtering, L2F, IDS, TCP Intercept, Router Security, SNMP trap .
Network Management and Monitoring: Wireshark, Infoblox, HP NView, Cisco Prime, Splunk, Security Device Manager (SDM), Cisco Works, TCP Dump and Sniffer, SolarWinds Net Flow Traffic Analyzer, NetScout, Network Performance Monitor (NPM), Network Configuration Manager (NCM), SAM, IP Address Manager, Additional Polling Engine.
Load Balancers: F5 (BIG-IP) LTM 2000, 3900Viprion, Cisco ACE, Citrix NetScaler
WAN technologies: ISDN, ATM, MPLS, DS1, DS3, OC3, T1 /T3 lines, SONET OC3-OC192, SDH, POS, PDH .
Other Networking Protocols and Fundamentals: DHCP and DNS server, Active Directory Management, NTP, NDP, TCP, UDP, FCP, Network Implementation, Troubleshooting techniques, NHRP, NetBIOS, NFS, FTP, TFTP, HTTP, PAP, PPTP, SIP Trunking, SNMP logging, SMTP, RADIUS and TACAS+, PBX servers, SDN, SAN .
Operating Systems: Windows 10/7/XP, MAC OS, Windows Server, Nexus OS, Cisco IOS XR, Linux, UNIX, Cumulus.
Wireless Technologies: Canopy Wireless Devices, DLink Point: to-point Wireless, D-Link APs, CISCO 1200 series APs, Aruba wireless and APs, Cisco Meraki, Linksys Wireless/Wi-Fi Routers, Prime Infrastructure, Ekahau, Air Magnet, AirWatch and WLC s (8510, 5508, 5706), Cisco AironetAP s (2600, 3600, 3700), ISE, MSE, Aruba 225, Aruba 3000 controller & Airwave, ISE, Clear Pass 6.0,6.2,6.5
Scripting: Python and Ansible
PROFESSIONAL EXPERIENCE:
Confidential, East Peoria, IL
Senior Network Security Engineer
Responsibilities:
- Worked in Confidential ’s Global Deployment and operations team to support multiple migrations in switching, routing, firewalls, LB and Proxies.
- Palo Alto design and installation (Application and URL filtering, SSL decryption, SSL Forward Proxy). Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls. Successfully installed PA-5000 series firewalls in Data Center as perimeter Firewalls.
- Migration of ASA firewalls to PA next gen Firewalls using migration tool in PA. Migrated all IPSEC tunnels, ACL’s, NAT rules and policies.
- Experience working on Cisco ASR 9K, Nexus 7k and 9K. Configured and designed OSPF, EIGRP and BGP at Distribution and Core layers. Configured OTV layer 2 connection between Data centers on Nexus.
- Worked on Juniper devices like M, MX, T routers on advanced technologies like MPLS VPNs, TE and other service provider technologies.
- Experience with configuring BGP, OSPF in Juniper M and MX series routers. Worked on several BGP attributes like MED, AS-PATH, Local P for route optimization. Worked on Route-Reflector, Route-Redistribution among routing protocols.
- Experience working with Juniper devices like EX-2200, EX-4200, EX-4500, MX-480, M Series, SRX650, SRX240
- Managed AD Domain Controller, DNS and DHCP Servers and configurations.
- Worked on Cisco ISE for user Authentication, Security Group Tags, MAC based authentication for Wireless and Wired users, 802.1X, EAP, PEAP etc.
- Responsible for the IPAM (IP Address management) system for a very large WAN/LAN network (QIP) using Solarwinds IPAM and Infoblox DNS and DHCP servers. Experience with DHCP scopes, IP reservations, DNS host entries, pointers, delegations, Zones, DNSSec etc.
- Provides expert level security and networking knowledge in the planning, researching, designing, and testing of new networking technologies for perimeter firewall security, Intrusion Prevention/Protection System (IPS), DNS and DMZ security, and Internet Security in support of established Info Security program initiatives for the next 3 years.
- Regular upgrade and maintenance of Infrastructure, Installing, configuring, and maintaining Cisco Switches (2960, 3500, 7600, 3750, 3850 series, 6500 series) Cisco Routers (4800, ASR 9K, 800), Juniper Routers and Firewalls, Nexus 7k,5k & 2k, f5 BIG IP, Palo Alto Firewalls, Zscaler Proxy and Versa SD-WAN appliances.
- Conducted a POC on Versa and Viptella SD-WAN solution as a team and worked on evaluating the solutions.
- Migrated Nexus 7Ks & Nexus 5Ks to an ACI Fabric consisting of 9336PQ Spines & 9332PQLeafs in a brownfield Datacenter.
- Worked on Bridge Domains, VXLANs, VTEPS, VNID. configuration of routing using BGP among multiple Leaf to spine switches. Thorough understanding of Application Profile, Tenants, End Point Group, Inter Subnet Tenant Routing, Routing within Tenants, Router Peering and Redistribution. Worked on Migration project from traditional Data Center Architecture to Spine Leaf.
- Worked on connections handoff using Bridged Interface to an External Route. L3- EPG configurations, AEP configurations. Expert in GUI of ACI.
- Worked on integrating existing Layer 2 and Layer-3 networks with ACI.
- Play a key role in the company’s direction towards Cloud Computing platforms by creating a strategy for transition plans. Azure AD and AWS, Office 365.
- Analyze and provide courses of action on current as well as emerging security threats like ransomware attacks by research and recommendation of other security solutions to help mitigate network security threats while preventing their outbreak across the network.
- Worked on network design improvements involving BGP, EIGRP, OSPF, IP metric tweaking and load balancing.
- Worked on Checkpoint Firewall to create new rules and allow connectivity for various Applications. Checkpoint is used as an internal firewall for application security in Kodiak network.
- Implemented Firewall rules and Nat rules by generating precise methods of procedure (MOPs). Responsible for packet capture analysis, syslog and firewall log analysis.
- Experience with F5 load balancers LTM and GTM and reverse proxy design and setup. Migration from ACE to F5.
- Experience in F5, Cisco ACE 4710 Load balancers. Migration Experience from ACE to F5 and NetScaler’s to F5. Worked on critical applications on Layer 4 and layer 7 load balancing. Experience with Virtual server, Pool, Node, Profiles - TCP, http, https, ftp, fastl4, Persistence - Source IP, SSL, Cookie, SNAT, iRules, iAPP, SSL offloading.
- Experience with F5 GTM and in-depth knowledge of DNS, Global level load balancing, Wide IP’s, Zones, Prober pools, Delegation from Windows DNS server to listener IP.
- Troubleshooting of Linux and Unix servers for application delivery servers. Install Dockers, Cisco and HP servers.
- High-level network troubleshooting and diagnostic experience using Packet capture tools like Wireshark.
- Configured network using routing protocols such as EIGRP, BGP and OSPF and troubleshooting L2/L3 issues.
- Designing, configuring, and troubleshooting QoS, SIP, H.323, RTP, SCCP, Session Border Controllers, Voice Gateways, Voice circuits IP /TDM, Cisco Telepresence Infrastructure, QoS, NAT, PAT, and multicast.
- Worked on Riverbed steelhead appliance to troubleshoot delay, jitter issues. Captured traffic and analyzed for root cause. Wrote policies and rules in steelhead.
- Assist in creating network design standards for hardware and software. Developing and maintain Network Documentation (Visio diagrams, Excel spreadsheets, Word documents, etc.) Configure and troubleshoot network elements in a test/dev environment.
- Worked on Orion (Solar Winds) for mapping network diagrams, updated Orion with commissioned and decommissioned network devices
Environment: Cisco Cat 2960, 3750, 3850, Cat 9300, 9500, 6500, 4500X, Nexus 2k,3k,5k,7k,9k, F5 Viprion, BIG IP 5000, PA 5000 series, Panorama, Cisco Versa, Cisco Wireless LAN 5508, Cisco ACI, Juniper EX-2200, EX-4200, EX-4500, MX-480, M Series, SRX650, SRX240, Zscaler proxies, Solarwinds, Cisco VOIP, Cisco ASR 9k, 1K
Confidential, Seattle, WA
Sr Network Engineer
Responsibilities:
- Involved in complete LAN, WAN development (including IP address planning, designing, installation, configuration, testing, maintenance etc.). Design of DMZ in primary and redundant data centers with Next Gen Firewalls, IPS/IDS sensors, Switching and routing.
- Experience in deployment of Nexus 7010, 5548, 2148T, 2248 devices
- Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a Flexible Access Solution for datacenter access architecture.
- Experience configuring Virtual Device Context in Nexus 7010
- Installation and maintenance of Cisco Layer 3 switches 3750, 4500X, 6500 in multi VLAN environment.
- Maintenance and configuration of Cisco ASR1000 series and 7200VXR routers at data center and deployment of 3900, 3800, 2951 and 2821 for branch connectivity.
- Involved in migration from Site-to-sire GRE tunnels network to MPLS-based VPN for customer’s WAN infrastructure.
- Implementing security Solutions using Palo Alto PA-5000/3000, Cisco 5580/5540/5520 , .
- Migration experience from Cisco ASA 5500 to PA. Experience with migration tool in PA for Policies from ASA to PA. Experience with SSL forward proxy and URL filtering.
- Configuration and administration of firewalls, which includes Checkpoint, Juniper, and Cisco ASA firewalls.
- Experience with RIVERBED Steelhead appliance for WAN optimization.
- Configuring High Availability using Cluster XL on Checkpoint as well as VRRP and monitor the Sync status for tasteful replication of traffic between active and standby member.
- Acquitted with Cisco Meraki for Cisco Wireless Devices Monitoring, managing and troubleshooting Cisco Wireless devices using Cisco Meraki.
- Researched, designed, and replaced Checkpoint firewall architecture with new next generation Palo Alto PA3000 and PA5000 appliances serving as firewalls and URL and application inspection.
- Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using Panorama.
- Successfully installed Palo Alto PA-3000/PA-5000 firewalls to protect Data Center and provided L3 support for routers/switches/firewalls.
- Involved in originating VoIP telephone calls are similar to traditional digital telephony, Call manager Express v4.x and involve signaling, channel setup.
- Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls and also implemented Zone Based Firewall and Security Rules on the Palo Alto Firewall. Exposure to Palo Alto Wildfire.
- Involved in Switching Technology Administration including creating and managing VLANS’s, Port security, Trunking, STP, Inter VLAN routing, LAN security etc.
- Configured BGP, EIGRP and OSPF and Policy based Routing.
- Configuring OSPF and Static routing on Juniper M and MX series Routers
- Provide Tier II Load Balancer expertise on F5 BigIP Local Traffic Managers (LTM). Designing F5 solutions/support for migration work of applications and websites from Cisco ACE Load Balancers to the F5 BigIP Load Balancers.
- Configuring VLAN, Spanning tree, VSTP, SNMP on EX series switches
- Configured Cisco 7200 routers which were also connected to Cisco ASA 5550 security appliances providing perimeter-based firewall security.
- Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.
- Configuring ASA 5510 Firewall and accept/reject rules for network traffic.
- Extensive knowledge and troubleshooting in data communication protocols and standards including TCP/IP, UDP, IEEE 802.3, Token Ring, Cable Modem, PPPOE, ADSL, Multilayer Switching, DoD standards.
- Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs
Environment: - Cisco ASA 5500 series, F5 BIGIP, LTM, GTM, APM modules, Juniper M and MX routers, PA 5000, 3000 series Firewalls, Nexus @k,3K, 5K, 7K, 9K, 6500,4500, Checkpoint R75 series, cisco ACE, Riverbed, Meraki
Confidential, Boston, MA
Senior Network Engineer
Responsibilities:
- Installation and configuration of Cisco Routers 3600, 3900 and Switches3550, 3560, 3560E, 3750, 6500, 7200 routers for VLANs, Routing Protocols (OSPF, BGP), VPNs etc.
- Implemented Cisco ACS for wired and wireless user authentication utilizing s and MAB for all known company assets.
- Installed WAN and LAN access for internet and intranet access.
- Configured Ether channels, Trunks, VLANs, HSRP in a LAN environment. Worked on Access, Core and Distribution layers.
- Implemented route redistribution between OSPF and EIGRP.
- Provided end-user technical support for LAN and remote users in a 24/7 environment.
- Assisting in deploying WAN projects. Connectivity and configuration of routers, switches, end to end monitoring in new campuses.
- Provided WAN/LAN Cisco router/switch configuration, implementation, and support to internal customer tickets involving BGP, OSPF, EIGRP..
- Configuration and Maintenance of ASA 5585 firewalls with firepower, 5540, 5525 Firewalls using Cisco Security Manager (CSM).
- Troubleshoot and Worked with Security issues related to Cisco ASA/ PIX, Checkpoint, IDS/IPS and Juniper Netscreen firewalls.
- Implement and modify DNS entries and managing IP Addresses using Windows DNS and DHCP.
- Experience configuring and troubleshooting on Citrix NetScaler Load Balancer.
- Performed Access Control Lists(ACLs) to setup usage for the intended users.
- Responsible for IOS installations and upgradations using TFTP Server.
- Troubleshooted Routing/Switching/Security Configuration problems/errors encountered to Clients in Head/Remote Campuses.
- Performed subnetting of the IP addresses. Configuration and allocating IP and network resources to Storage, Virtualization, Server and Application teams.
- Responsible for design/implementation/maintenance of Site to Site VPNs, and remote access VPN's using Cisco solutions (ASA 5520 and 5540), including head-end and remote client side connections.
- Performed network monitoring using tools like Netcool. Log collectors using Splunk. SNMP V2C configurations.
Environment: - of Cisco Routers 3600, 3900 and Switches3550, 3560, 3560E, 3750, 6500, 7200, Ciisco ASA 5500 series, Cisco PIX, Cisco Wireless 5508 WLAN, Citrix Netscaler, Windows DNS, DHCP, Infoblox, Solarwinds
Confidential, Richmond, VA
Senior Network Engineer
Responsibilities:
- Assisted in troubleshooting LAN connectivity and hardware issues in the network of 500 hosts.
- Performed client requirements to provide solutions for network design, configuration, administration, and security.
- Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.
- Maintained redundancy on Cisco 2600, 2800 and 3600 routers with HSRP.
- Created a backup and recovery policy for software application and verified peripherals are working properly.
- Monitor performance of network and servers to identify potential problems and bottleneck.
- Performed RIP & OSPF routing protocol administration. Support services to reduce the downtime on leased lines.
- Daily responsibilities included monitoring remote site using network management tools, assisted in design guidance for infrastructure upgrade & help LAN administrator with backbone connection and connectivity issue Other responsibilities included documentation and support other teams
- Designed and Implemented plan for migration from existing Catalyst switches to Nexus and configured NX-OS Virtual Port Channels, Nexus port profiles, Nexus VPC peer links on Nexus 5k and 7k
- Cisco ASA/Checkpoint, Palo Alto Firewall troubleshooting and policy change requests for new IP segments that either come online or that may have been altered during various planned network changes on the network.
- Supported and executed migration to F5 BIG-IP LTM/GTM ADC Appliances from Citrix NetScaler
- Maintained BIG IP F5 APM VPN and provided solutions for intricate issues.
- Participated in the installation, configuration, and post-installation routine operational tasks and configuration of the Cisco Nexus Switches.
- Worked with Host Master for shared web hosting and managed Web Application Firewall (WAF), DNS and DHCP management using Infoblox and Analyzed networks using Wireshark
- Provided redundancy in a multi-homed Border Gateway Protocol (BGP) network by tunings AS-path
- Hand on experience the configuration and implementation of various Cisco Routers and L2 Switches.
- Designed and implemented VLAN using Cisco switch catalyst 3560, 3750, 3560 & 6500 series.
- Responsible for Checkpoint, ASA, Palo Alto Firewall management and operations across global networks.
- Analyzed customer application and bandwidth requirements, ordered hardware and circuits and built cost-effective network solutions to accommodate customer requirements and project scope.
- Experience in configuring and troubleshooting WAN technologies like MPLS, T1, T3, DS3, and ISDN.
- Involved in Design and Implementation of complex networks related to extranet clients.
- Troubleshooting the N/W Routing protocols (BGP, EIGRP, and OSPF) in Migrations and new client connections.
- Manage operational monitoring of equipment capacity/utilization and evaluate the need for upgrades; develop methods for gathering data needed to monitor hardware, software, and communications network performance.
- Worked towards the key areas of the project to meet SLA’s and to ensure business continuity. Involved in meetings with engineering teams to prepare the configurations according to the requirement.
- Creating change tickets according to the scheduled network changes and implementing the changes.
- Worked with F5 Load balancing, IDS/IPS, Bluecoat proxy servers and Administrating.
Environment: Cisco Catalyst, Juniper, Cisco Nexus, PA, Checkpoint firewalls, F5 APM, LTM and GTM, MPLS, T1, T3, IronPort proxies.
Confidential, Detroit MI
Network Engineer
Responsibilities:
- Configuring and troubleshooting multi-customer network environment.
- Involved in network monitoring, alarm notification, and acknowledgment.
- Implementing new/changing existing data networks for various projects as per the requirement.
- Troubleshooting complex networks layer 1, 2 to layer 3 (routing with MPLS, BGP, EIGRP, OSPF protocols) technical issues.
- Providing support to networks containing more than 2000 Cisco devices.
- Performing troubleshooting for IOS related bugs by analyzing history and related notes.
- Carrying out the documentation for tracking network issue symptoms and large-scale technical escalations.
- Managing the service request tickets within the phases of troubleshooting, maintenance, upgrades, fixes, patches and providing all-around technical support.
- Monitor the traffic of the network via NTA and IPAM
- Provided Technical Support to customers and partners on Palo Alto security appliances
- Commissioning and Decommissioning of the MPLS circuits for various field offices.
- Preparing feasibility report for various upgrades and installations.
- Ensure Network, system and data availability and integrity through preventive maintenance and upgrade.
- Involved in L2/L3 Switching Technology Administration including creating and managing VLANs, Port security, Trunking, STP, Inter-VLAN routing, LAN security.
- Worked on the security levels with RADIUS, TACACS+.
- Completed service requests (i.e. - IP readdressing, bandwidth upgrades, IOS/platform upgrades, etc.)
- Identify, design and implement flexible, responsive, and secure technology services
- Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
- Configured switches with port security and 802.1 xs for enhancing customer’s security.
- Monitored network for optimum traffic distribution and load balancing using Solar winds.
- Validate existing infrastructure and recommend new network designs.
- Created scripts to monitor CPU/Memory on various low-end routers in the network.
- Installed and maintained local printer as well as network printers.
- Handled installation of Windows NT Server and Windows NT Workstations.
- Handled Tech Support as it relates to LAN & WAN systems
Environment: - Cisco Catalyst switches, Cisco ACS, Cisco ASA 5500, cisco VPN concentrators, Cabling - copper, Fiber, 100, 1000, 10 gig, Windows DNS and DHCP, SevOne, Visio.
Confidential
Network Engineer
Responsibilities:
- Worked with the Help Desk for circuit troubleshooting to give Support to the Tech persons at the site.
- Managed servers, workstations, computers, laptops, printers, switches, routers and existing network applications.
- Conducted daily system health checks.
- Diagnosed and resolved all technical issues related to hardware and software.
- Performed quarterly audits for improving efficiency of systems.
- Performed daily audits on all systems, frameworks, hardware and server resources.
- Configuring routers and sending it to Technical Consultants for new site activations and giving online support at the time of activation.
- Supporting Development team for the access to corporate network and outside world. Providing access to specific IP, Port filter, and port access.
- Experience with Cisco 7200, 7600 routers, Cisco series switches: Physical cabling, IP addressing, Wide Area Network configurations.
- Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. Configured Cisco Routers for OSPF, RIP, IGRP RIPv2, EIGRP, Static and default route.
- Switching (Ethernet) related tasks included implementing VLANs and configuring ISL trunk on Fast-Ethernet channel between switches.
- Worked primarily as a part of the security team and daily tasks included firewall rule analysis, rule modification, and administration. Experience in working with designing, installing and troubleshooting of Palo Alto firewalls.
- Implemented SNMP on Cisco routes to allow for network management. Completed the installation and configuration of T1, T3 & OC3 circuits.
- Troubleshoot TCP/IP problems, troubleshoot connectivity issues.
Environment: Cisco Catalyst and Dell Switches, Cisco 2800, 7600 series routers, ISP circuits, Cabling, IDF/MDF
