PROFESSIONAL SUMMARY:

• Overall 8 years of experience in the field of Networking with an ability to quickly learn and integrate new technology in a variety of industries. Proven success in implementing management, operations, technical and interpersonal skills to improve productivity, reliability and teamwork to benefit the company.
• Experience working as a Network Administrator and supporting IT support capacity for security, repair, installation, migration, reconfiguration and maintenance of large - scale networks ranging from 500 users to over 50000 users. Experience with Cisco 2600/3600/4000/7200/7500 series routers and Cisco Catalyst 3700/3600/4500 series switches.
• Expertise with Installation, configuration and troubleshooting of Cisco Routers (ASR 9K, NSX 5K, Meraki MX84, CISCO ISR 1K, 7600, 3800, 2800, 2600, 1800 series). and Juniper Routers (MX, PTX, T4000-series)
• Expertise with Installation, configuration and maintenance of Cisco Switches (6500,3560, 2960, 1900 series); Nexus 2000, 9000 series switches while implementing advanced features like VDC, VPC, OTV and Fabric Path and Juniper EX Switches (4300, 4550, 9200), QFX Switches (5100,5200,10000), OCX1100 series.
• Experience working on DHCP, DNS and different Layer 2 protocols which include VLANs, VTP, STP, Port Security. Deployed routing protocols such as EIGRP, OSPF and BGP and have very good knowledge on BGP attributes.
• Experience supporting Windows 2008/2003/2000/7/ Vista/NT/XP, Remote Desktop Management, Microsoft Office 2010/2007/2003/2000/ XP, IBM Compatible Workstations and Printers, Microsoft Exchange, Microsoft SQL Norton, and Network Security.
• Good knowledge about TCP/IP, OSI model, ASA Firewall, Check Point Firewall and other technologies such as NAT, ACLs and VPNs (Remote Access and Site to Site VPNs).
• Configured High availability, User ID on Palo Alto firewall. Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools. Demonstrated experience in developing, implementing, auditing Checkpoint firewall (R77.30) configurations and analyzing, optimizing rule sets.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Palo Alto rules. Extensive experience with Check Point and CISCO Security Firewall Configurations and network configurations, Strong TCP/IP understanding. Knowledge of debugging Check Point Firewall.
• Installed, Configured and currently maintaining Check Point Firewalls (R76 Gaia, R75.40, R75 and R70) in a Distributed Deployment and High Availability Redundancy Scenario. Implementation and administration of Check Point Firewalls & network Management.
• Good knowledge on Bluecoat proxy server SG. Worked on riverbed steel head CX/GX models. Worked on Deep Packet Inspection (DPI) with riverbed Steelhead platform . Experience in configuring and Troubleshooting BIG-IP F5 load balancer LTM & GTM.
• Basic and advance F5 load balancer configurations, including migrating configurations from Cisco ACE to F5 and general troubleshooting of the F5 load balancers
• Complete basic configurations on the F5 Big-IP LTMs and GTM load balancer on existing network to split traffic on web-servers. Ability to Install, Manage & Troubleshoot Large Networks & Systems Administration on Windows & Linux platforms in Development, Lab & Production Environments.
• Excellent inter-personal skills with the ability to work in a team of large members.
• Experience using Microsoft Visio for creating a detailed physical and logical network diagrams.

TECHNICAL SKILLS:

Routers and Switches: 2600/3600/4000/7200/7500, Cisco Catalyst 2960, 3560, 3750, 3850, 4500, 6500 & Nexus 9000/7000/5000/2000

Access: lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPSec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi

Routing Protocols: OSPF, EIGRP, BGP, RIP, Static routing

Switching Protocols: VTP, STP, RSTP, VLANs

Wireless: Cisco PRIME Wireless, Cisco Wireless Controllers, CAPWAP

Firewall: Cisco ASA, Checkpoint Firewall

Load Balancers: Cisco CSM, ACE, F5 Networks (Big-IP)

Other Protocols: IP, TCP, UDP, ICMP, NAT, DHCP, SNMP, IPSEC, HTTP, SSH, DNS

IKE, IPSEC, SSL: VPN

Networking Protocols: RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA, IPv4 and IPv6

Tools: Cisco ISE, IPAM/Infoblox, Secure CRT, ServiceNow, BMC Remedy, Statseeker, AKiPS, Cisco POWR, Cisco PRIME, Netbrain

Operating System: Windows 7/XP, MAC OS X, Windows Server 2008/2003, Linux, Unix

PROFESSIONAL EXPERIENCE:

Confidential, Rochester, MN

Network Specialist in NOC

Responsibilities:

• Monitoring, troubleshooting and configuring the network infrastructure of Confidential servicing 500 buildings, with 10,000 network devices.
• Supporting hardware and software including Cisco Catalyst and Nexus switches, Cisco FEX (Fabric Extender), routers, WAP (Wireless Access Points), F5 BIG-IP, Infoblox IPAM (IP Address Management), Cisco Prime, Net Brain, Statseeker.
• Working on Layer 2 technologies that include STP, VLANs, VTP, Port Channel, DHCP Snooping and 802.1X.
• Configuring and troubleshooting Routing protocols that include EIGRP, OSPF, BGP and Static Routing.
• Creating, reviewing and updating Service Now tickets according to established Standard Operating Procedures (SOPs).
• Providing support to remote desktop connections, Tier 3 Support to Helpdesk and liaison with 3rd party ISP carriers such as Charter, L3, and Century Link.
• Responding to incoming calls and emails in the NOC regarding Wired and Wireless issues in the Network.
• Reaching out to Cisco Technical Assistance Center (TAC) to seek their support in troubleshooting Network issues and to request replacement of faulty Network equipment.
• Working with technicians onsite to install and repair hardware connections
• Performing queue management for alarms, tasks, incidents and participating in ongoing network implementation projects such as IOS Upgrades, Hardware upgrades, Configuring VLANs, Replacing EOL switches in Data Centers
• Troubleshooting Vendor VPN (Virtual Private Network) connections by modifying/implementing firewall rules
• Creating profile policies in Cisco ISE and Whitelisting end devices as per the request of end users
• Implementing 802.1x and MAB with RADIUS in an effort to significantly improve the security of the organization’s wired and wireless networks
• Configuring and maintaining TACACS+/ Radius servers for AAA authentication and user authorization

Confidential, Sacramento, CA

Sr. Network Security Engineer

Responsibilities:

• Experience in Cisco Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay & MPLS), Routing protocol configurations (RIP, EIGRP, OSPF, and BGP). Proficiency in configuration of VLAN setup on various CISCO Routers and Switches.
• Hands-on configuration and experience in setting up Cisco routers to perform functions at the Access, Distribution, and Core layers. Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.
• Hardware upgrades includes Cisco switches from individual switches to Stacks of 3950 series, from 4500 series switches to 9400 series switches and more. Software upgrades includes upgrading a variety series of switches to latest updated software for ISE deployments.
• Extensive hand on experience with complex routed LAN networks, CISCO Routers and Switches. Worked on ISE 802.1X, ISE wired/wireless guest and ISE trust sec implementations.
• Exposure to multiple technologies and builds/troubleshooting: VSAN/NSX/SDA/VXLAN, etc. Upgrade Cisco 6500-E, 3560, and 2960 switches to IOS software that is on the ISE compatibility matrix.
• Worked extensively with Nexus 9K, Catalyst 3K, 6K and ASR 1K.
• Create and test Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.
• Deployment, configuration, and management of 802.1x solutions to include Cisco Identity Services Engine (ISE), ACS (Radius and TACACS+), and Cisco Prime Infrastructure. Address, ISE Endpoint Information, which is used to estimate the failure, risks before change windows.
• Installing, configuring, and maintaining Cisco Switches (2900, 3500, 7600, 3700 series, 6500, 9400 series), Cisco Routers (4800, 3800, 3600). Configure Palo Alto Panorama Console to maintain and control all Infrastructure firewall templates.
• Managed all network and devices to include Cisco routers, switches, VPNs, SSL, Cisco PIX, Cisco ASA, as well as content delivery networks (CSS, Citrix Net Scaler and F5 Big IP LTM and GTM 1600 and 3400 load balancers) enterprise environment.
• Manage project task to migrate from Cisco ASA firewalls to Check Point firewalls. Deploying of Cisco ISE on Nexus 5000/7000 routers, Cisco switches, and Cisco ASA and Firepower firewalls. Executing RADIUS pre-deployment tasks like ISE setup, loading templates into Cisco Prime.
• Managing intrusion detection system (IDS) and intrusion prevention system such as NSM, Tipping point
• Experience with deployment of Palo Alto firewalls for different NAT, video conferencing traffic secured all traffic flow between riverbed Steelheads over private MPLS and performed optimization for demanding security protocols such as SSL/TLS and HTTPS.
• Experience in configuring and Troubleshooting BIG-IP F5 load balancer LTM & GTM. Basic and advance F5 load balancer configurations, including migrating configurations from Cisco ACE to F5 and general troubleshooting of the F5 load balancers
• Complete basic configurations on the F5 Big-IP LTMs and GTM load balancer on existing network to split traffic on web-servers. Design and implement fiber and copper cable requests for connectivity within the data center.

Confidential, San Jose, CA

Network Engineer

Responsibilities:

• Provide technical support to the existing networks of various customers across United States.
• Participate in Network operations and Network implementation projects planning, deploying and providing support as per the requirement.
• Configuring Network equipment that include Cisco catalyst switches, Cisco routers and wireless access points
• Switching related projects included implementing VLANs and configuring port channels between the distribution layer switches
• Working with Client teams to find out their Network requirements and providing them with a solution and resources required
• Configured Access List ACL (STD, Ext, and Named) to allow users all over the company to access different applications and blocking all the untrusted web applications.
• Implemented Zone Based Firewalls and Security Rules on the Palo Alto Firewall. Exposure to wildfire feature of Palo Alto. Supported Blue Coat Proxy in explicit mode for users trying to access Internet from Corp Network. Editing and Changing Palo Alto Polices and Monitoring threats on firewalls.
• Analyzed traffic pattern and implemented URL filtering using the Palo Alto Firewall. Good understanding of Wildfire and creating various policies on Palo Alto (PA 5050, PA 500).
• Maintaining and Configuring Palo Alto Firewall Platform Panorama with Dual Authentication and User Authentication and User. Configuring network interfaces, static routes, NAT rules in panorama and thereafter pushing to individual Palo alto devices.
• Creating dedicated VLANs for Voice & Data with QOS for improving the data and voice quality. Used Load balancer CSS between the servers inside the network and in the DMZ.
• Implemented Site-to-Site VPNs over the Internet with Checkpoint. Configured Failover for high availability.

Confidential

Network Engineer

Responsibilities:

• Responsible for supporting the company's clients at all levels as part of team.
• Supporting in resolving the network related issues in remote locations of the company.
• Responsible for networking, design, installation and maintenance services Supporting users and network administrators over the telephone and by email.
• Maintain the company’s network infrastructure. Assisting the network manager with support requests. Addressing the trouble tickets from customers and resolving any kind of Network issues at the earliest
• Prepare the survey reports, Network design & LAN diagram according to the site requirements.
• Configuring, Monitoring & Troubleshooting Network Connectivity and security related issues of the end users
• Ensuring that all hardware and software is configured and installed correctly. Configuration Access point such as TP-link and Digital device.
• Configuration Routers that include Cisco, TP-link, D-Link, Net-gear, I-Ball, Linksys, Belkin and Intex.
• Core knowledge in Installation, Testing and commissioning of IP and Analogue CCTV systems, Access Points.
• Configuration of DVR and port forward for Cameras on Public IP as well as on normal IP for Clients.
• Travelling to client sites to help with installs, deployment, and troubleshooting. new employees.
• Assistance with off-shore staff and compiling procedural documentation.
• Assists in the planning, designing, documentation, and implementation of various systems which include Desktop PC’s, servers, network equipment, and software applications.

Confidential

Technical Support Engineer

Responsibilities:

• Planning and Designing of Network infrastructure, Site Survey for consolidated LAN-WAN project. Prepare the survey reports, the Network design & LAN diagram according to the client requirements.
• Configuring HP, Cisco and Allied Tellises Routers and Switches as per the requirement. Install and setup New PCs, mini Computers, LAN and WAN Products.
• Install, Configure, and maintain personal computers, file servers, Ethernet Networks, network Cabling, and other related equipment, devices and systems.
• Installation of CCTV cameras/IP cameras (Indoor, Outdoor, PTZ). Troubleshooting various network problems like port enabling and crimping. Implementing, Configuring, Monitoring & Troubleshooting Network Connections & Security issues of the end users.
• Structured cable laying plan and connectivity. Designed and implemented the type of architecture for the LAN setup as per the client’s requirement
• Experience on Passive side and Installation of Switch, Racks and patch panels and Troubleshooting Network issues that include LAN and WAN connectivity. IP Address allocation, I/O connectivity.
• Testing end-to-end connectivity. Supporting the Network infrastructure Responsible for configuring and testing any new hardware and software. Visit client sites to help with installation, deployment, and troubleshooting software operating systems and server operating systems.