SUMMARY

• Over 7 years of experience in Cisco Routing, Security and Firewalls, Architecture, Deployment and Maintenance as well as designing, implementing and maintaining enterprise data networks.
• Experience in Ethernet, Fast Ethernet, Gigabit Ethernet, 10 Gigabit and 40 Gigabit Ethernet.
• Expertise in F5 LTM and GTM Management.
• Expertise in F5 BIG - IP LTM and Cisco CSS load balancers.
• Experience with Citrix NetScaler, F5 GTM load balancer.
• Upgraded IOS on over 40 Cisco ASA 5500 firewalls and FWSM modules
• Experience in Network security using ASA Firewall, Checkpoint, Palo Alto Cisco IDS/IPS and IPSEC/SSL VPN, F5 Load Balancer.
• Extensive knowledge of configuring and troubleshooting Layer 3 Routing protocols RIP, IGRP, EIGRP, OSPF, EBGP, IBGP, ISIS and BGP and layer 2 protocols, VTP, STP, Black Box, RSTP.
• Configuring and Troubleshooting Route Redistribution between multiple OSPF protocols.
• Researched, designed, and replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliances serving as firewalls and URL and application inspection
• Experience working with 5505, 5510, 5520 and 5550 model ASA's.
• Extensive experience in Installation, Configuration and Administration of FIREWALLS i.e. CISCO, Cisco ASA 5510, 5520, 5540, 5550, 5580, Juniper SRX, Junos, Fortinet, Checkpoint R70,71,75
• Upgraded IOS on over 40 Cisco ASA 5500 firewalls and FWSM modules.

TECHNICAL SKILLS

HARDWARE: Cisco Nexus (7000, 5000, 2000) series SwitchesCisco Routers (7200, 1700, 1921, 4321, 4331, 2601,2800)Cisco Catalyst (2960, 3560, 3750 and 6500 series)Load Balancers Firewall

PROTOCOLS: RIP, OSPF, IGRP, EIGRP, BGP, VTP, STP, PVST, RSVP, HSRP, DHCP,DNS, TCP/IP, SNMP, Frame Relay, ISDN, Static Routing, VLAN Routing, Ether-Channels.

PROFESSIONAL EXPERIENCE

Confidential, Farmingdale, NY

Network Engineer

Responsibilities:

• Handling Network day-today Operation and Management Network Datacenters involving various Network & Security related Project, Changes and incident resulting in configuration and management of various Cisco Nexus 7K, 5K, 2K, ASA, 6500 ASASM, Juniper ISG, Juniper SSL VPN, HP Tipping point, Bluecoat proxy SG 900, F5 LTM, GTM & ASM.
• Design, Configuration and management of IP architecture, hands on experience on Nexus 7K, 5K and 2K hardware models and line cards, have performed ISSU upgradation, configuration & troubleshooting of VDC, VPC, OTV, Fabric-path, HSRP etc. on the same.
• Commissioning and configuration of Physical connectivity for blade server on Cisco ACI.
• Creating tenants, EPG, Bridge domain, L3 route on Cisco ACI domain.
• Performed upgradation of Cisco APIC and ACI switches.
• Implemented HA for Bluecoat Director and also for F5 LTM 4000 in active standby scenario.
• Successfully accomplished Shellshock & Poodle vulnerability mitigation project which involves Upgrading Bluecoat Director, Juniper SSL vpn box F5 LTM & GTM hotfix upgrade.
• Troubleshooting website access issues on Bluecoat Proxy and HP Tipping point IPS.
• Performing troubleshooting on slow network connectivity issues, routing issues involves OSPF, BGP, black box and identifying the root cause of the issues.
• Knowledge of Cisco, Juniper, Silverpeak, Aruba Wireless, Fortinet, Palo Alto, Avaya LAN Switches.
• Apply patches to the Aruba controllers as well as the 80+ Juniper RADIUS appliances system to correct security deficiencies in a timely manner.
• Installation & Configuration of Aruba controllers and access points
• Deploy, configure, and support Aruba wireless controller and AP devices globally, also a direct escalation path for all wireless issue
• Design, implementation and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q etc.
• Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
• Upgrading and troubleshooting Cisco Cat OS to the Cisco Switches and routers.
• Configuring Site to Site to VPN connectivity
• Deployed Nexus 5k pair w/ L3 modules for Valet garage VPCs in a collapsed core
• Datacenter upgrades from C6500s to Nexus 7k/5k/2k, double-VPC between distribution and access, single-VPC to servers
• Replace core and distribution layer switching with Cisco Nexus 7000 utilizing VDCs and 10g VPCs to server and user access
• Configured over 200+ Site-to-Site & Remote Access VPNs on PIXs, VPN Concentrators, IOS routers and ASAs
• Experience in managing and Maintaining Nexus 5000 and 7000 series.
• Extensively worked on Nexus 9k,5k and 7k, configured and troubleshooted.

Confidential, Philadelphia

Network Engineer

Responsibilities:

• Provide Advanced Support in designing and maintaining F5 platform involving 200+ F5 devices
• Implement enhancements to current configuration across applications
• Work closely with application and server teams to provide solutions for application delivery/ resiliency and automation
• Configuration and management experience of Cisco 9300 series switches in ACI mode.
• Been part of team which has designed and and deployed SDN via Cisco ACI concept using leaf 9396PQ and 9336PX as spine switch.
• Perform OS upgrades to F5 devices from v10.x to v11.x and v11.x to v12.x
• Work with F5 vendor support, replace LTM/ GTM appliances with RMA
• Replace Viprion blades with RMA - configure vcmp guests, manage licenses and configuration backups
• Implement and maintain DNS Express (BigIP DNS) for security and scalability with Infoblox servers
• Extensive experience and vast knowledge of F5 BigIP modules - LTM, GTM/DNS, APM, EM, BigIQ
• Implement new design, closely work with application teams and deliver the requirement for traffic flow, http intercept, iRules, SSL/TLS, Wireshark packet analysis.
• Complete knowledge with Engineering and Operations roles pertaining to F5.
• Experienced with TMOS v12. Upgraded several LTMs from v11 .4.1 to v12.1.2
• Troubleshoot several issues related to v12 - example - new ciphers, key exchange, error bugs etc
• Compile detailed documentation of technical and process related work through Runbook and Ops Guides
• Maintain viprion 4480 platform, schedule proactive reboots of devices so their uptimes stay below 365 days
• Remote terminal servers - Work with Cisco SLC Lantronix Out-of-Band devices to maintain accuracy of access
• Monitor F5 devices and alerts via SNMP traps and polling, utilizing tools like, HP NNMi, E-Health and HP Network Analyzer
• Performing the Configuration and troubleshooting of EIGRP, OSPF, and BGP.
• Implemented and configured routing protocols like EIGRP, OSPF, BGP.
• Adhere to defined change process, document and work tickets - Incidents, Changes and Quotes
• Handle decommissioning of several applications as they are migrated to cloud or new infrastructure
• Access Easy-IP or Infoblox for maintaining accurate database of IP addresses
• Utilize sharepoint and O365 apps for seamless workflow within the team
• Troubleshoot complex issues related to F5 OS upgrades, Performance, SSL, Hardware etc
• Create and maintain workflow of volumetric and qualitative analysis within the team, provide weekly and monthly status reports
• Adept with VCMP technology on viprion hosts/guests/virtual disk
• Adding cores per slot, rebuild of guests, Configure Provision and Deploy new guests as needed
• Assist cloud migration and work with AWS teams to route traffic using Route53
• Provision SSL termination on the F5 devices - involving CSR creation, signing and import of CA-signed certificates.

Confidential - Chicago, IL

Network Engineer

Responsibilities:

• Hands on experience in datacenter environment (LAN/WAN/security/application)
• Design, implement and maintain firewall systems and firewall policies
• Implementation of Checkpoint Firewall 4.1 to protect and authenticate local-net and DMZ. Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.
• Experienced in Providing Security solutions using Checking Point and CISCO for the network.
• Extensive experience with CheckPoint and CISCO Security Firewall Configurations and network configurations.
• Experience in Network security using ASA Firewall, Checkpoint, Palo Alto Cisco IDS/IPS and IPSEC/SSL VPN, F5 Load Balancer.
• Researched, designed, and replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliances serving as firewalls and URL and application inspection.
• Deployed Site to Site and Client to Site VPNs utilizing Checkpoint Firewall-1/VPN-1.
• Implementation of Checkpoint Firewall to protect and authenticate local-net and DMZ. Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.
• Experience in full life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations.
• Experience migrating from Cisco switches to 3com
• Configure f5 BiGip to provide Load Balancing for server farm
• Configured with F5, Citrix Load balancers in Failover for Load balancing and SSL handling
• Experience with Provider One or Check Point's Smart Center management station Tipping Point
• Experience with common network management protocols/tools (TACACS, NTP, SNMP, SYSLOG, etc)
• Maintaining accurate customer records
• Documenting the Environment Designs and updating Visio Designs.