SUMMARY:

• Network Engineer with an experience of over 8 years in network installation, support, analysis and optimization including a broad range of LAN/WAN/MAN, enterprise networks and service provider systems.
• Strong hands on experience on Cisco Catalyst (3550, 3750, 6500) series switches, Cisco (2500, 2600, 2800, 3600, 3800, 7200) series Routers, ASA Firewall (5505/5510), Load Balancers using Cisco ACE, F5 LTM/GTM, Security Device Manager (SDM), Cisco Works, HP Open View, Solar Winds, Sniffer, Palo Alto Networks Firewall models (PA - 2k, PA-3K and PA-5K) .
• Experience in Cisco: Physical cabling, IP addressing, Wide Area Network configurations ( Frame-relay & MPLS ), Routing protocol configurations (RIP, EIGRP, OSPF, BGP )
• Hands-on experience in installing, configuring, maintaining and troubleshooting Cisco Switches, Cisco Routers, Juniper EX Switches, Juniper Routers and Cisco Nexus Switches.
• Worked on configuring the Nexus 5K Aggregation Switch and Nexus 2K Fabric Extenders. And Implemented VDC, VPC, and OTV on the Nexus 5K and 7K switches.
• Experience in implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether-channel, STP, RSTP and MST.
• Hands on experience in implementation and deploying BIG-IP F5 LTM load balancers for load balancing and network traffic management for business applications.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Implementation of HSRP, VRRP for Default Gateway Redundancy.
• Expert level knowledge on OSI model and TCP/IP protocol suite.
• Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.
• Experience in Design and assistance for deploying enterprise-wide Network Security and High Availability Solutions for ASA.
• Implementation and maintained Sourcefire intrusion detection/ prevention (IDS/IPS) system.
• Experience in Data Center Design with Cisco Nexus in troubleshooting of DNS, DHCP and other IP conflict problems.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/Routing/NAT with the firewalls as per design.
• Installed and configured Cisco Firewalls, Cisco PIX (506E/515E/525) & ASA 5500 (5510/5540) series
• Experience with Linux Command Line Interfaces For logging into access points, etc.
• Strong knowledge of Cisco and Juniper software (IOS/XR and JunOS) and hardware.
• Installation, configuration, and management of WAN optimizer, Riverbed Steelhead.
• Experience with hardware load balancer administration and support, preferably with F5 and Cisco ACE load balancers.
• Experience with the conversion of Checkpoint VPN rules over to the Cisco ASA technology. Migration experience with both Checkpoint and Cisco ASA VPN.
• Experience in layer-3 Routing and layer-2 Switching.
• Provided administration and support on Bluecoat Proxy for content filtering and internet access between site and VPN client users.
• Deployment and Management of Bluecoat proxies in the forward proxy scenario as well as for security in reverse proxy scenario.
• Proficient in using Solar Winds Network Management tools like Network Performance Monitor (NPM), Netflow Traffic Analyzer, Putty, Network Configuration Manager (NCM) and Cisco Prime.
• Excellent communication skills, quick learner, enthusiastic, motivated and a team player.
• Provide 24/7 support.

TECHNICAL SKILLS:

Router platforms: Cisco routers (7600,7200, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900, 6807 series), Nexus 7K, 5K, 2K & 1K.

Switch platforms: Cisco 2900XL, 2950, 2960, 3560, 3750, 4500 and 6500, Nexus (2K, 5K, 7K and 9K)

Juniper Platforms: SRX, MX, EX Series Routers and Switches

Access: lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPSec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi

Firewall: Juniper Netscreen 6500, 6000, 5400, Juniper SSG, SRX5600, SRX5800, CheckPoint (NGX, R65, R70 and R71), Cisco Firewalls (ASA 5505, 5506-X, 5585), Palo Alto Networks (PA-2K, PA-3K and PA-5K).

Network Management/Monitoring: Solar winds, HP NNMi 8xi (Network Node Manager), Net flow and Cisco prime, Ethereal / Wireshark, TCP Dump.

F5 BIG: IP LTM 2000, 3900, 5000, 6400, 6800 AND 8900, Bluecoat SG8100, AV 510.

WAN technologies: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONET

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q

IKE, IPsec, SSL, AAA, Access: lists, prefix-lists, SSL-VPN

Networking Protocols: RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA, IPv4 and IPv6

Operating System: Windows 7/XP, MAC OS X, Windows Server 2008/2003, Linux, Unix

PROFESSIONAL EXPERIENCE:

Confidential, Moses Lake, WA

Sr. Network Engineer

Responsibilities:

• Deployed and maintained security/network devices and data centers for Service provider network.
• Involved in the configuration & troubleshooting routing protocols like MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, and MPLS.
• Experience with Installing and troubleshooting Data center migration with 24/7 support.
• Expert in configuring Cisco Routers, Catalyst Switches, Nexus Switches.
• Upgraded Cisco 6500, 3750, 2960s, Nexus 5000, Nexus 2000 and Nexus 7000 switch software.
• Worked extensively with ASR 9K (9010/9922), Nexus 7000, 5000, 2000, Cisco 6500 series multilayer switches, Cisco 2960s series switches and Cisco 3560/3750s switches.
• Monitor performance of network appliances and WAN utilizing using network analyzer like Wireshark.
• Experience with the connectivity of Cisco Networking Equipment with F5 Load Balancer.
• Configuration and providing management support for Palo Alto and Checkpoint Firewalls (R75, R76 and R77).
• Configuration, Troubleshooting, and Maintenance of Palo Alto Firewalls (36+ firewalls) - PA200, PA2000 series, PA3000 series, PA4000 series and PA5000 series.
• Successfully configured and maintained Site to Site IPSEC and SSL VPN's on Palo Alto firewalls.
• Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering).
• Helped installed F5 VIPRION load balancers for one of our new data centers .
• Configured Cisco ISE for Wireless and Wired 802.1x Authentication on Cisco Wireless LAN Controllers, Catalyst Switches, and Cisco ASA Firewalls.
• Install and upgrade Cisco Wireless LAN equipment including but not limited to: 1100, 1200, 1300 and 3500 series Access Points ; 4400 and 5500 series Wireless LAN controllers ; 6500 & 3750 Core switch routers; 2960, 3560 & 3750 series switches.
• Experience with configuring Hot Standby Routing Protocol (HSRP) and VLAN Trunking Protocol(VTP).
• Monitor and troubleshoot BGP, EIGRP, TI circuits, and cellular backup circuits via ICMP and SNMP ticketing systems.
• Experience with installing and configuring Spanning Tree Protocol, BPDU Guard, Port-Fast, Up-Link Fast, Trunking (dot1q and ISL) and Ether channel on Campus Network Design Architecture.
• Working on Cisco 6509 and 4507 series switches for LAN requirements that include managing VLANs, Port Security and troubleshooting LAN issues.
• Implementing Citrix NetScaler 10 for Networking and Traffic Optimization (CCA) (BETA).
• Extensive Knowledge on the implementation of Cisco ASA 5500 series firewalls.
• Performed load balancing and application level redundancy by deploying F5 BIG-IP LTM 3900.
• Experience with design and implementation of Data center migration at NBC Universal.
• Researched, designed and replaced aging Cisco ASA firewall architecture with the new Next Generation Palo Alto appliances serving as firewalls for URL application inspection.
• Performed installation and configuration Cisco Secure Access Control Server (ACS) configuration for AAA (RADIUS) authentication.
• Worked on design, configuring and managing of Blue Coat Proxy Servers.
• Deploying Cisco ASA and Bluecoat ProxySG (Web Security Appliance) S170 for URL Filtering Policies.
• Worked on Blue Coat Proxy SG to safeguard web applications (Blacklisting and White listing of web URL) in extremely untrusted environments such as guest Wi-Fi zones.
• Working on Enterprise AV Solutions, IDS\IPS, Firewalls, and SIEM (IBM QRadar\HP ArcSight ) tools.
• Expertise in networking technologies like LAN, MAN, WAN and peripheral devices.
• Develop Engineering Documentations to record F5 environment and change processes LTM/GTM/iRules.

Environment: Juniper routers and switches, Cisco routers 7200; Cisco Catalyst switches 6500, 4500, 2950; Cisco PIX Firewalls 535, 525 Routing Protocols OSPF, BGP; STP, VTP, VLAN; VPN, MPLS, HSRP, GLBP, Big-IP F5 Load Balancer, Cisco Works; MS Visio, Checkpoint, Cisco ASA and Palo Alto firewalls, Blue Coat Proxy.

Confidential, Rosemont, IL

Network Engineer

Responsibilities:

• Installation and Configuration of Composite Network models consisting of Cisco7600, 7200, 3800 series routers and ASR 9k, GSR 12K routers and Cisco 2950, 3500, 5000, 6500 Series switches.
• Configured routing protocols such as OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy. It also includes the configuration of the port channel between core switches and server distribution switches.
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that includes routing protocols EIGRP, OSPF & BGP.
• Experience configuring Virtual Device Context & Virtual Port Channel in Nexus 7010.
• Responsible for day to day management of Cisco Devices, Traffic management and monitoring.
• Experience in HSRP standby troubleshooting & Experience in configuring & upgrading of Cisco IOS.
• Implemented various OSPF scenarios on networks consisting of 7600 routers.
• Configured policy based routing for BGP for complex network systems.
• Configured Multiprotocol Label Switching (MPLS), VPN with Routing Information Protocol (RIP) on the customer’s Site.
• Provided application level redundancy and availability by deploying F5 load balancers LTM.
• Upgrading system images on Nexus 5 and 7 multi-layer switches using kick start and FTP server.
• Configured Multicasting by using protocols such as PIM and IGMP.
• Router Microsoft VPN Server to access certain limited network resources from customer locations
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Designing and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.
• Hands on Experience with Cisco Wireless Controllers 5500’s and 2500’s and coming to access points, worked on 3700’s, 3500’s and 1142 access points.
• Implemented Zone-Based Firewalling and security rules on the Palo Alto Firewall.
• Installed and configured PIX 525 and ASA 5505 in customer locations. In addition to that, configured PIX firewall for the guest access.
• Good Knowledge in using IPS/IDS devices.
• Implemented a large number of security policy rules and NAT policy rules on Palo Alto, created zones, implemented Palo Alto Firewall interface and Palo Alto IDS.
• Managed Infoblox Grid Manager to manage DNS Forward and Reverse Lookup zones.
• Involved in the redistribution into OSPF on the core ASA firewall.
• Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.
• Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.
• Involved in designing L2VPN services and VPN-IPSEC authentication & encryption system.
• Tuned BGP internal and external peers with manipulation of attributes such as metric, origin and local Preference.
• Configuring and implementing F5 BIG-IP, LTM, GTM load balancers to maintain global and local traffic.
• Configuring, Installing and troubleshooting on Check Point Devices and Involved in the migration of Cisco Pix Firewall to Cisco ASA.
• Good knowledge on Intrusion Detection and Intrusion Prevention System.
• Knowledge on multiplex techniques such as DWDM.
• Configured networks using routing protocols such as RIP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure.
• Implemented Hot Standby Router Protocol (HSRP) by tuning parameters like preemption.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network .
• Used Tcpdump to analyze packets on the TCP/IP and provides brief display of packet.

Environment: Cisco 7600/7200/3800 routers, ASR 9k, GSR 12k. Cisco 2950/3500/5000/6500 Switches, Nexus 7000 series, Cisco wireless controllers 5500/2500 Cisco Access points 3700/3500/1142 access points, F5 Load Balancer, Checkpoint, Cisco PIX 500 series, Cisco ASA 5505, Palo Alto PA5050, RIP, OSPF, BGP.

Confidential, Birmingham, AL

Network Deployment Engineer

Responsibilities:

• Configuring routing protocols OSPF, EIGRP, RIP, MPBGP, LDP and BGPV4.
• Implemented DHCP, DNS, IPAM configuration on the servers to allocate, resolute the IP addresses from Subnet.
• Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalyst Switches.
• Switches Replace branch hardware with new 2851 routers and 2960 switches.
• Configuring and troubleshooting Juniper Netscreen Firewalls using NSM.
• Migrate, upgrade and patch management for Fortinet and checkpoint Firewalls
• Conversions to BGP WAN routing, which converts WAN routing from OSPF to BGP (OSPF is used for local routing only) that involves new wan links.
• Configuring various advanced features (Profiles, monitors, iRules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIG-IP appliances SSL termination and initiation, Persistence, Digital Certificates, Executed various migration/upgrade projects across F5 and hands-on with F5 BIG-IP LTMs/EM.
• Configured various BGP attributes such as Local Preference, MED, Extended Communities, Route-Reflector clusters, Route-maps and route policy implementation.
• Actively participated in upgrading fast Ethernet, Layer 3-switched/Routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.
• Converting CatOS to Cisco IOS Config Conversion on distribution layer switches.
• Configuring VLANs, VTP & enabling trunks between switches.
• Install, configure, manage and troubleshoot Cisco SourceFire IPS appliances and defense Center.
• Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.
• Configured various Router interfaces like ATM interface, T3 & Channelized T1 interfaces.
• Configuring and troubleshooting Cisco catalyst 6509, 7609, 7613 with Supervisor cards, Cisco 3640, Cisco GSR 12416, 21418 (with PRP and RPR processors).
• Worked Extensively on Cisco Firewalls, Cisco PIX (506E/515E/525) & ASA 5500(5510/5540) Series.
• Involved in Data center migration at Access, Distribution and Core layers.
• Wrote IOS and CAT OS upgrade procedures and Pre/Post checks for customer production upgrades.
• Strong Knowledge in working with F5 Load Balancers and their Implementation in various Networks.
• Created MOPS and get approval from peers to perform configuration add/ remove changes.

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/12000/ 7200/3845/3600/2800 routers Cisco Nexus 5K, 2248/3560/5020/6509 , Cisco ASA 5510, Checkpoint, IPS, OSPF, RIP, EIGRP.

Confidential

Network Engineer

Responsibilities:

• Responsible for the configuration of Cisco Routers (7000, 5300, 4000, 2500, 3000, 2600) using RIP, IGRP, OSPF, EIGRP, BGP.
• Implemented Cisco IOS Firewall IDS using 2600 series router.
• Configured and installed multi-protocol (IP, IPX) multi-interface Cisco routers.
• Managed office network with Cisco devices with network devices including 2500 and 3600 series routers and 3500, 2900, 1900 series switches.
• Extensive experience in configuring and implementing OSPF and BGP.
• Supported core network consisting of Cisco 7200 series routers running multi-area OSPF.
• Configured EIGRP and OSPF as interior gateway protocol with route filtering and route redistribution, installed and maintained Cisco 3600, 2600 and 7200 backbone routes with HSRP.
• Implemented stub/Totally stub areas and various OSPF features like route-summarization and SPF throttling.
• Hands-on experience with WAN technologies like T1/T3, DS3, STM1 and STM4 circuit types
• Implemented Cisco Secure Access Control Server (ACS 3.0) for TACACS+/RADIUS.
• Worked on redistribution of routing protocols and Frame-Relay configuration
• Handled Network Migration from RIP to OSPF.
• Implementation of TCP/IP and related Services (DHCP/ DNS/ WINS)
• Performed troubleshooting, while maintaining trouble ticket tracking, following both internal/external routes.
• Worked with Aruba Access point as a Public Wi-Fi and successfully implemented Wireless Access Point (WAP).
• Experience working with Active Directory (as a centralized system) to automate network security management and user data.
• Worked extensively on Cisco ASA 5500 (5510/5540) Series.
• Involved in Configuration of Access lists (ACL) on ASA firewall for the proper network routing for the B2B network connectivity.
• Experienced in securing configurations of SSL/VPN connections, troubleshooting Cisco ASA firewalls and related network security measures.
• Configuring static NAT, dynamic NAT, inside Global Address Overloading, TCP overload distribution, Overlapping Address Translation.
• Upgraded Cisco Routers, Switches and Firewall (PIX) IOS using TFTP.
• Acted as Tier 3 support for connectivity, failures, configuration, implementation, and troubleshooting.
• Design, test, and implement global Next Generation MPLS network (150 sites) using Cisco 3800, 2800, 2600, and 1721 routers using BGP and EIGRP protocols.
• Implementing traffic policy changes with Cisco PIX Firewall appliance WAP configuration and installations.

Environment: Cisco 2600/2800/3600/2950/2960 series switches, Cisco Routers 7000, 5300, 4000, 2500, 3000, 2600, PAT, DHCP, DNS, OSPF, EIGRP, ASR, TCP/IP, LAN, WAN, PIX, Static/Dynamic NAT, ASA 5500, MPLS, VPN, BGP, WAP, IPS, Aruba WLAN, HSRP, Active Directory, ACL, Cisco ASA.

Confidential

Network Engineer

Responsibilities:

• Configured and installed Cisco routers 2500, 2600, 3601 and 4000 series. 2950 Switches & Linksys wireless access points.
• Handled the upgrades and replacement of network components like NIC cards, display cards, RAM, keyboard, mouse and other peripherals/ devices.
• Handled installation of operating systems (NT/2000, XP), troubleshooting of operating systems and configuration of the servers.
• Gained knowledge in IP Subnetting for Class A, B, and C networks.
• Documented the design, implementation and troubleshooting procedures.
• Configured and troubleshot VLAN, VTP, STP and Trunks.
• Remote testing of links up to 1.5 Mbps using tools like REACTS.
• Configured routing protocols like RIP, EIGRP, OSPF and BGP on Cisco devices.
• Good knowledge on troubleshooting the routing protocols.
• Recovered lost passwords and created standard access lists and extended access-list to new users.
• Monitoring network performance to improve the backup strategy using Netrep, Solar winds.

Environment: Cisco 2500/2600/3601/4000 routers, Cisco 2950 switches, link sys access points, VLAN, VTP, STP, 802.1Q, RIP, OSPF, EIGRP, BGP, ACLs.