PROFESSIONAL SUMMARY:

• Certified Palo Alto Network Engineer with 8+ years of professional experience in Network engineering with Cisco Certified Network Engineer, performing Network analysis, design, Implementing, capacity planning with a focus on performance tuning and support of large Networks. Strong knowledge in Cisco Routing, Switching and Security with Cisco hardware/software (heavy Cisco shop) experience.
• Experience working on Cisco Catalyst Series3750, 4500, 4900, 6500; Nexus 2000, 5000, 6000 and 7000 series switches.
• Extensive work experience with Cisco Routers, Cisco Switches, Load Balancers and Firewalls.
• Experience in layer - 3 Routing and layer-2 Switching. Dealt with Nexus models like 7K, 5K, 2Kseries, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.

TECHNICAL SKILLS:

• Cisco Platforms: Nexus 7K, 5K, 2K & 1K, Cisco routers (7600,7200, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900 series), CSR/ASR, IOS-XR
• Juniper Platforms: SRX, MX, EX Series Routers and Switches
• Access: lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPSec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi
• Firewall: ASA Firewall (5505/5510), Checkpoint, Cisco ASA, Palo Alto
• Network Tools: Solar Winds, SNMP, Cisco Works, Wireshark
• Load Balancers: Cisco CSM, F5 Networks (Big-IP)
• WAN technologies: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONET
• LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q
• IKE, IPSEC, SSL: VPN
• Networking Protocols: RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA
• Operating System: Windows 7/XP, MAC OS X, Windows Server 2008/2003, Linux, Unix

PROFESSIONAL EXPERIENCE:

Confidential

Network Engineer

Responsibilities:

• Configured Site to Site IPsec VPN tunnels to peer with different clients and each of client having different specifications of Phase 1 and Phase 2 policies using Cisco ASA 5500 series firewalls.
• Configuring and Troubleshooting NAT, ACL's, IPSec Site-site and Remote Access VPN Tunnels, HA, Routed and transparent Firewall modes, Multiple Context mode.
• Working on VPN Tunnel migration from Juniper SSG to ASA 5500 series firewalls.
• Configuration of ACLs in Cisco 5540 series ASA firewall for Internet Access requests for servers in LAN and DMZ and also for special user requests as authorized by management.
• Providing daily network support for Global wide area network consisting of MPLS, VPN and point-to point site
• Helped installed F5 VIPRION load balancers for one of our new Data center.
• Extensive experience in upgrade, backup and password recovery of F5 viprion.
• Worked on Access control server configuration for RADIUS & TACAS+
• Performed Configuration on ASR 9K Pairs includes HSRP, Bundle Ethernet Configuration, Assigning DHCP profiles.
• Working on port migration from catalyst 6500 to ASR 9K router.
• Worked on Nexus 5k upgrades from 7.1(4)N1(1) to 7.3(5)N1(1).

Confidential

Network Engineer

Responsibilities:

• Configured and implemented Nexus 5K and 2K in lab environment
• Participated in the installation, configuration, post-installation, daily operational tasks and configuration and deployment of Cisco Nexus equipment 7010, 5596 and 2248.
• Installing and configuring TACACS/RADIUS, Performed ISSU to upgrade to the core Nexus 7k switches.
• Prepared Documentation to upgrade Cisco IOS, CAT OS and NX-OS in High availability production environments pre/post checks for customer production upgrades.
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support
• Performed IOS Software upgrades on switches Cisco 6509, 4510, 3750 and Cisco ASR for compatibility with Cisco ISE.
• Hands on experience with Cisco Nexus 7K, 5K and 2K series equipment including configuration of protocols.
• Monitored and resolved network device issues identified by SolarWinds in a timely manner
• Worked on assessment and the finalization of the detailed designs and provided a design document for the Implementation of Cisco ISE and the Migration of Wireless and TACACs to ISE.
• Configured network access servers and routers for AAA Security (RADIUS/ TACACS+).
• Provided engineering support and technical assistance by ensuring the Cisco ISE server is correctly installed and licenses are applied.
• Worked with different vendors and service providers like BT, AT&T and Verizon to TTU our circuit.
• Managing Bluecoat and adding LDAP groups and users and give access right to groups.
• Creating and adding and reserving new subnets and IP address in Bluecoat.
• Reclaiming IP address in Bluecoat.
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP.
• Implemented and configured SNMP, Syslog and traps on Cisco routes to allow for network management
• Experience with SSL offloading, TLS security, and cipher management on the F5.
• Designed application mapping and application delivery using F5 BIG IP LTM. Configured Virtual IPs and servers on F5 and associated pool and pool members to it
• Provided application-level redundancy and availability by deploying F5 load balancers LTM
• Worked on F5 LTM configuring different Load balancing methods Round Robin/Ratio based Etc.
• Implemented changes on existing configurations for the applications on F5 load balancer
• Managed and supported all NetScaler LTM's in pre-production and production environments
• Configured Citrix NetScaler for load balancing and assigned virtual server IP (VIP) address to virtual servers.
• Collaborating with Application owners, Network Team, DNS Team, and Firewall Team, to migrate applications from Legacy NetScaler Load Balancer to New F5 BIG-IP Local Traffic Manager
• Engineering and configuring Virtual Server, Pools, Profiles, Persistence, and monitor on F5 LTM to match the configuration the Application had on NetScaler
• Configured Site-to-Site IPsec VPN tunnels to peer with different clients and each of client having different specifications of Phase 1 and Phase 2 policies using Cisco ASA 5505 series firewall.

Environment: Cisco Routers, Cisco Nexus 9k,7k,5k, 3k and 2k, Cisco Switches, BIG IP F5 LTM, GTM, Checkpoint and ASA Firewalls, IT Security Policies, OSPF, EIGRP, HSRP, BGP, Sniffers, Service Now, Service Desk, Catalog, Jira, Solar winds, spectrum, Gigamon, Anue, LAN and WAN networks

Confidential, NJ

Sr. Network Security Engineer

Responsibilities:

• Installing license according to the Customer requirements.
• Time to time upgrade network connectivity between the branch office and regional office with multiple link paths and routers running HSRP, EIGRP in unequal cost load balancing to build resilient network.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Performed IOS upgrades on various catalyst series switches and maintained latest IOS versions according to company's policy.
• Configured VSS on Cisco Catalyst 6509 switches in order to have redundancy.
• Implementing 3750 Stackable switches using Cisco Stack Wise technology. Experience to review and evaluate current and future design issues as required maintaining network integrity, efficient data flow.
• LAN Cabling in compliance of CAT6 standards infrastructures like Racking and Stacking.
• Worked on service now ticketing system, participated in CAB meetings, participated in on-call meetings and was involved in incident response management.
• Performed Cisco IOS upgrades on ISR ASR routers and catalyst access switches: Any upgrade performed under CR, management approval and change window
• Setup complex IP-Traffic test topologies to stress the system and functional blocks of ASR 9K routers.
• Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a flexible Access Solution for Data Center access architecture.
• Configured Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000 to connect servers and storage devices.
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches, fixes, and all-around technical support.
• Support the Solarwinds platform for monitoring the network for any network related issues
• Utilized Secure CRT for configuration and troubleshooting of Cisco network routers and switches.

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/ 0/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, F5 Load Balancer Cisco Nexus7K/5K, Checkpoint, Cisco ASA.