SUMMARY

• Strategic minded network engineer over 6+ years of data center infrastructure. A dynamic engineer skilled with high - performance designs and configuring.
• Excellent understanding of network infrastructure. Self-motivated with ability to quickly comprehend, coordinate, analyze, troubleshoot and solve complex technical issues.
• Dedicated network engineer with affinity to work as a team as well as perform individually.
• Large-scale application and networking migration of the enterprise network, extensive knowledge in developing test plans, procedures and testing various, LAN/WAN products and protocols.
• Migrating legacy technology to Next-Gen technologies.
• Result oriented professional who seeks out and adopt new technologies for innovative development. continue my journey as part of could, hybrid and Multivendor environment.

TECHNICAL SKILLS

Routers: ISR 2900, 3700,3900,4k, ASR1000

Switches: 29XX,4500,4900,6500, Nexus series.

Firewalls: ASA. PAN, Check point

Load Balancers: F5. LTM GTM

Console devices: Raritan, Cisco ISR terminal server. Open Gear

Cloud technologies: AWS cloud, Azure cloud

Routing Protocols: OSPF, EIGRP, BGP, IS-IS.

Switching Protocols: VTP, STP, RSTP, MST, VLANs, PAgP, LACP, 802.1Q, ISL. VXLAN HSRP,VRRP

VPN: ASA-ASA

Technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, Cisco ACS m, Cisco ISE for Tacacs+/Radius. SDWAN

WAN: ISDN T1/E1, MPLS, T3/E3, DMVPN, PPP, Metro-E. Internet

Operating Systems: Windows and Linux

Network Management: Riverbed, INFOBLOX, Net brain, NetScout, NGenius one, Npulse.

Automation Tools: Service Now. GNS-3, Visio, Wireshark, Icinga, Kibana, Cleatus, Splunk, SolarWinds.

PROFESSIONAL EXPERIENCE

Confidential

Responsibilities:

• A next generation identity services has been deployed in the monitoring mode with carefully designs to enhance to enterprise security m compliance and streamline security operations.
• Developed and Proposed Infrastructure Lab in leading industry cloud environments like AWS, Azure, Google Cloud. This reduced tremendous capital and operational cost on the client as compared to maintain a physical lab environment in the data center. Deep understanding of IaaS, PaaS and SaaS has help me developed a cost saving infrastructure proposal for client.
• Closely worked with architecture team to migrate DNS and DHCP services from windows to Infoblox services. Worked with multiple application to smoothly perform Data center DR test using LBDN feature. Proposed a plan to Automate IP/DNS address assignment using Rest API mechanism to integrate with Service now ITIL tool.
• Nexus 9k and Cat 9k has been installed in data centers with EOL 6500 and 4500 switches. With the base line up grade multiple things were achieved, mitigating vulnerabilities, upgrading the hardware to meet the next generation technologies.
• Day to day firewall traffic flow for new and existing application across various environment including Prod, Pre-prod, development and test. Proposed a plan to automate he exaction of firewall traffic flow using Algosec tool.
• Splunk being considered the centralized repository of all the logs in infrastructure space. Splunk Dash board were created for dependent application team for first level troubleshooting. This has significantly reduced the L2 and L3 team time spent of less critical issue.
• Closed worked with architecturally team to rapidly expand VPN infrastructure in the environment to support WFH during Pandemic situation.
• Infrastructure as code using Python and Ansible has been used to rapid configuration deployment for various cisco hard ware and cloud infrastructure. By decreasing TCO significantly.
• Solar winds, N-Genius and N-Pulse to monitor the traffic and network performance across the environment in multiple geographical location. SolarWinds helped to automate daily monthly, weekly capacity issue, bandwidth utilization trend respective dashboard was created for the same. CPU and load on the core data center infrastructure also used extensively as the configuration management on the network devices and standardization across the environment.
• N genius and N pulse are NetScout products used to capture network performance. This can be enabling at different entry point to capture packet level traffic across environment
• Qualis guard tool was used to scan all the vulnerabilities in the data network infrastructures. Multiple security vulnerability was addressed as part of security audit in routers, switches, firewalls NPM tools and other data center device.
• Automation techniques were used to fix configuration and software related vulnerabilities to strengthen infrastructure security.
• Based on the periodic scans necessary hardware and software fix were validated in the test environment prior to deployment in the production environment.
• Develop operational strategies such as End of Life (EOL), applicable hardware/software product roadmaps, and vulnerability management processes.
• Continuously identify, review, and recommend potential opportunities for enterprise cost-savings by referring to total Cost of operation methodology.
• Evaluation of technology needs for the new data center and assist with the migration strategy. Migrating the on prem services to could for higher flexibility, availably and reduce TCO .
• Install, support and maintain network hardware and software infrastructure according to best practices, including routers, aggregators, switches, intrusion protection systems and firewalls. Migration of existing services to new Cisco hardware.
• Development of documentation, departmental procedures, and support guides.

Confidential

Network Engineer

Responsibilities:

• A network engineer with key responsibility of implementation, troubleshooting and upgrading the network infrastructure to various remote sites.
• Thorough understanding and functional knowledge of Cisco Spine-and-Leaf ACI Software-defined networking Architecture. Was used to migrate from legacy network to multi-tenant network centric architecture.
• Knowledge and understanding of network infrastructure systems (routing, switching, load balancing, and/or firewalls) and Internet technologies. This helped me mitigate interdependent production issue in complex data center environment.
• Architecture experience in enterprise network technologies and working with Network Engineering/Operations Teams, was able to get proof of concept ready for the deployment of SDN and software defined network technologies.
• Initially Designed ACI environment to migrate all the infrastructure network centric architecture of the ACI from tree model to Leaf spine model with options of future enhancement for application centric infrastructure.
• The Develop and maintain configurations plans for Cisco ACI design, planning, implementation, and testing, based on a multi datacenter configuration.
• Enhanced ability of VXLan and IS-IS protocol in the cisco ACI environment helped to logically segment the infrastructure environment into production, dev, test, preprod. Achieving the interdependent environment in deployment to isolate interdependent issues.
• Nexus 9K with higher ability to of using 40G and 100 G ethernet port have led to greeter out put on the data center core solutions
• Port security was implemented using 802.1 technology as part of enterprise security and threat mitigation.
• Ability to optimizes performance and centralized management has helped in standardized deployment by user rest API method to automate deployment of policies in the new environments.
• Infrastructure as code methodology was used to automate multiple environment deployment like rapid deployment of configuration in across multiple cisco hardware using Ansible and python, Json was used to put the rest API deployment in the CISOC ACI to deploy new configuration elements in ACI environment.
• Reusable of policies, tenants, EPGS etc. has significantly reduced the time in deploying by using Rest API, in turn user for rapid deployment and migration.
• Configuring VLAN based EPGS in ACI and ACI Multipod Solution by introducing industry best practice recommended by the vendors.
• Responsible for designing/grooming an existing or new circuit path across the company network with knowledge and understanding of the network architecture and routing configurations. This helped to mitigate the long-term bandwidth issue in corporate and distribution center environment.
• Analyzes, implements, and maintains local and wide area network systems, including planning, designing, evaluating, selecting operating systems and protocol suites and configuring communication media with switches, routers, load balancers, and other devices.
• Provide expert technical support to investigate and resolve complex issues on F5 products (software and hardware to include F5 BigIP, F5 Local Traffic Manager).
• Within the design responsibilities, accountable for producing an accurate design layout record that applies a proficient understanding of the products and their specifications offered by the company and the scope of. work requested on a customer order meets the product criteria, as well as having in-house parts/equipment available for consumption and delivery to the end user.

Confidential

Network Engineer

Responsibilities:

• Designing and expansion of the L2/L3 network in care centers and failed offices.
• Configuring ASA to hide the client’s Security Electronics network behind the firewall.
• Good knowledge on ZBFW and excellent at establishing cellular based network connection upon demand.
• Demonstrated deep expertise in infrastructure technologies with an emphasis on LAN, WAN, wireless, and data center technologies.
• Took complete ownership of data circuit provisioning and maintained lifecycle of provisioning.
• MPLS And DMVPN connection setup for various remote site.
• Create and maintain circuit and design layout records.
• Procurement cisco reverbed and another vendors equipment based on request.
• Monitor system capacity and coordinate ordering and installing of additional equipment for existing branch locations.
• Responsible of upgrading 240 sites with 4331 routers including technical and scheduling.
• Streamlined the process of Network replacement life cycle such as Network assessment, proof of concept, building material, budgeting, procuring, testing and implementation.
• Strictly adhering to customer change control procedures and documentation practices as per industry standards.
• Proving network support in absence on network operations on a 24x7 basis.