SUMMARY

• Extensive experience in designing, implementing, configuring, troubleshooting and maintaining TCP/IP networks with BGP - 4, OSPF, IGRP, EIGRP routing protocols, MPLS, implementing security policies with Cisco / Juniper routers and switches, Juniper SRX 3600/5600 and Netscreen firewalls, M10, M20 routers, Fortigate 200, 1000 firewalls, Cisco ASA 55xx firewalls
• ACSes, IPsec VPNs and SSL VPNs, providing load balancing solutions, implementing VLANs, core and boarder routing with Cisco 35xx, 45xx, 65xx, Nexus 7000, 5000, Cisco 76xx, 72xx, 36xx routers, Cisco CSS 11501 load balancers, AudioCode VoIP Gateways, Gigamon GigaVUE and TAP devices, Extreme Black Diamond and Summit switches.
• Confidential controllers, F5 and Citrix load balancers. Monitoring and diagnostic tools: Wireshark, Observer, SolarWinds Network Performance Monitor, Network Traffic Analyzer etc., Cisco Works.

PROFESSIONAL EXPERIENCE

Confidential, Jersey City, NJ

Sr.Network Engineer (consulting)

Responsibilities:

• Responsible for day-to-day activities in 24x7 support of Local and Wide Area network infrastructure including installation, modification, operation, administration, and problem resolution (Cisco Nexus 7000, 5000 switches, Cisco Catalyst 6509, 4500, 35xx. ASR1001 routers. Troubleshooting and debugging of the Layer 2 and Layer 3 networking issues. supported Company’s wireless network with Aruba Controllers and Access Points. Analyzing the issues and network performance (NetBrain, WireShark, SolarWinds etc.)
• Migrating PIX firewalls and Cisco 6513 FWSMs to ASA 5585 firewalls, Implementing firewalls failover. Migrating the firewalls configurations and configuring firewall access rules. Implementing a new design. Network discovery, installation and connection. Planning and providing technical support functions necessary for network additions, changes, and moves. Providing the diagrams and spreadsheets of the changes. Migrating Fortigate firewalls to Cisco ASA 5585.
• Redesigning a networking infrastructure of the Company, implementing a new design, migrating and supporting of the network consisted of Cisco switches 6506, 35xx, Nexus 6K, routers 29xx, ASA 5515, 5520, Fortigate, 200 1000 (v5) firewalls.
• Configuring IPsec and SSL VPN tunnels, BGP and MPLS connections, NATs, VLANs, switch ports, DMZs, STPs. Implementing switches redundancy (HSRP/VRRP), and Cisco ASA 55xx firewalls failover. Migrating firewall configurations and configuring firewall access rules. Provided a technical support for the customers.

Network Engineer

Confidential

Responsibilities:

• Responsible for day-to-day activities in 24x7 support of Local and Wide Area network infrastructure including installation, modification, operation, administration, and problem resolution (Cisco 35xx, Extreme Networks Black Diamond and Summit x350-650 switches, Cisco 72xx routers), F5 load balancers, supported Company’s wireless network with Aruba technologies.
• Troubleshooting and debugging of the Layer 2 and Layer 3 networking issues. Analyzing the issues and network performance (WireShark, SolarWinds, “Observer”)
• Planning and executing changes in network systems, designs, and procedures which will enhance the department's ability to service changing needs. Providing solutions for better network performance and network security, configured NATs, VLANs, switch ports, DMZs, STPs, EAPSs. Implementing switches redundancy (HSRP/VRRP), Cisco 55xx firewalls failover. Planning and executing special networking projects including major installations of new equipment, relocation of major equipment, experimental installations.
• Responsible for equipment and network circuits inventory.
• Assisted with the maintaining the security of the network infrastructure (Juniper SRX 34xx, Cisco 55xx, Fortigate 3xxx, Checkpoint R75 firewalls).
• Responsible for accuracy and timeliness of network system and network equipment documentation, including network maps, circuit lists, system diagrams, configuration notebooks, equipment manuals, support procedures.
• Planning for and providing technical support functions necessary for network additions, changes, and moves made throughout the company.
• Responsible for a networking part of Disaster Recovery exercises.

Network Engineer (consulting)

Confidential, Plantation, FL

Responsibilities:

• Implemented full redundancy and Distribution Deployment (replication and synchronization of databases) of ACSes (Cisco Secure Access Control Systems) in different locations (Installed and configured new ACSes, migrated existing to latest 5.4 versions, solved bugs during the migration process. Configured additional groups, rules, and mappings on ACSes. Reconfigured TACACS+ and RADIUS on all routers and switches.
• Implemented redundancy for AnyConnect accesses via different firewalls.
• Implemented redundancy for all routers and switches with HSRP/ VRRP, configured new VLANs.
• Configured firewall access rules on Cisco ASA 55xx firewalls to access different resources according to the end customer needs.
• Responsible for engineering, configuration, installation, maintenance and support of data communication networks for customers and within the organization.
• Provided daily technical support to customers and internal departments with regard to the LAN/WAN and Internet services.
• Responsible for implementation of SSL VPNs for the Agencies of the State of Virginia.
• Network discovery, and migration SSL VPNs to Cisco ASA 5550 firewalls.
• Setting up Connection Profiles, Tunnels, Group policies, Dynamic Access policies, LDAP mappings, AAA Server Groups, Host Scans, Secure Desktop policies.
• Implemented AnyConnect Secured Mobility Solutions IPSec IKEv2. Configuring AnyConnect Conection Profiles, AnyConnect User Profiles, AnyConnect User Groups.

Network Engineer

Confidential

Responsibilities:

• Designed and implemented data networks, voice over IP, and quality of service (QoS) for different customers, developed strategies for improving network performance
• Determined weak points in an existing network, made suggestions to the customers for improving networks efficiency, performance and security.
• Redesigned the network infrastructures, provided solutions to eliminate performance bottlenecks, and networking failures.
• Configured Traffic Shaping to optimize utilization on backbone routers.
• Provided solutions for better performance and security, configured NATs, assigned VLANs, DMZs.
• Implemented security policies with access - lists with Cisco routers and switches.
• Configured IPsec VPNs for remote sites. Built and maintained Visio documentation database of network topology.
• Provided a load balancing solution for the Web and database servers with Barracuda load balancers.
• Configured switches, routers and firewalls for better security and performance: configured NATs, assigned VLANs.
• Provided solutions for load balancing for the Web and database servers with Kemp load balancers.
• Established and maintained safe and secure remote access sessions through the Internet by SSL VPNs with Cisco ASA 55xx firewall for thousands of users in the network of retail stores.

Network Engineer

Confidential,, New York

Responsibilities:

• Built and managed 7x24x365 Network Operations Center (NOC)
• Designed and implemented: Core and boarder routing and switching, VLANs, used Cisco 7500, 7200, 3800, 3600 routers, Catalyst 1900/2800/2900/4000/5000 series switches, Summit i24/i48 layer-3 switches, Foundry NetIron 4802 Layer-3 switches, IP-multicast services with DVB - Digital Video Broadcasting.
• Configured, troubleshot and maintained global TCP/IP networks for satellite/terrestrial Internet links,
• Built Internet networks with BGP-4, OSPF, EIGRP Cisco routers.
• Engineered BGP routing (Route Maps, AS-Path prepend, MED, Local Preference) to load balance traffic across multiple ISPs.
• Implemented of HSRP, DHCP, DNS, FTP, TFTP, MRTG.
• Troubleshoot, debugged and made recommendations for customer networks configurations.
• (CiscoWorks, Sniffers NT, Spectrum LanView, HP OpenView, etc)