SUMMARY:

• Around 8 years of expertise in Designing, Implementing and troubleshooting various Network Technologies.
• Hands - on experience, specializing in Cisco Environment in Data Center, systems, network and user administration, LAN / WAN.
• Strong knowledge on LAN/WAN technologies such as: Ethernet, Point-to-Point, Static, default, dynamic routing and VLANs.
• Experience of routing protocols like EIGRP, OSPF, RIP, BGP, and MPLS.
• Extensive Experience in System Testing of Wireless LAN Products.Good understanding of IEEE 802.11a/b/g/n Technologies. Understanding and debugging the problems.
• Experience in installation, configuration, design and ongoing maintenance of Cisco router and switches.
• Implemented WLAN/Wi-Fi Aruba Wireless Access Points and its Controllers at various corporate sites Infrastructure and its legacy technologies.
• Worked on Cisco Catalyst Switches 6500/4500/3500 series,
• Involved in migration of WLAN/Wi-Fi segment on the LAN Core. Also involved in configuring wireless VLANS.
• Involved in L2/L3 Switching Technology Administration including creating and managing VLANs, Port security, STP, Inter-Vlan routing, LAN security.
• Knowledge of Intrusion Detection, DMZ, encryption, IPsec, proxy services, Site to Site VPN tunnels, MPLS/ VPN, SSL/VPN.
• Knowledge of managing, maintaining, administering, troubleshooting high end network devices such as Cisco routers switches.
• Experience of routing protocols like EIGRP, OSPF, RIP, BGP and IP addressing,
• Experience on Endpoint security with McAfee Endpoint.
• Expertise in configuring and troubleshooting of Palo Alto, FortiGate, Juniper Netscreen& SRX Firewalls and their implementation.
• Worked with several network engineers for the understanding of Juniper SRX firewalls along with the changeover to Palo Alto (5060s) needs.
• Strong hands on and exposure to Checkpoint & Palo Alto on a regular basis.
• Experience on PCI and ISO compliant security implementations on the firewalls and perimeter devices.
• Part of a team working in L2/L3 Switching Technology Administration including creating and managing VLANs, Port security, Trucking, STP, Inter-VLAN routing, LAN security.
• Experience on fiber delivery services, architecture and knowledge of Passive Optical Networking (PON) in a fiber network.
• Upgraded the software images of all Cisco network devices to include routers, switches and ASA firewalls.
• Experience with Load Balancers for administrating and monitoring global & local traffic.
• Strong experience in Configuring F5 LTM 8950, 6900, VIPRION 2400 models.
• Hands on experience and good working knowledge with Checkpoint Firewall policy provisioning.
• Experience with managing the completed end to end site solutions.
• Experience in working with Cisco Load Balancers
• Configuration experience on Nexus 2000 Fabric Extender (FEX), which acts as a remote line card (module) for the Nexus 5000.
• Designed, Implemented and Troubleshot Cisco 3750, 3550, 3560, 2924, 6509-V-E, 6513, 6504, 6503, 6506, 6500 series switches.
• Hands-on experience on Checkpoint Firewall R77, Palo Alto and Cisco ASA 5520 firewalls.
• Performed Domain Admin tasks including maintaining DNS and DHCP.

TECHNICAL SKILLS:

Cisco Routers: Cisco 7200, 7600, 3800, 3600, 3400, 2800, 2600, 2500, 1800 ASR 1K, 7K, 9K, GSR 12K

Cisco Switches: 7200, 6500, 5000, 4900, 4500, 3750, 3700, 2950, 1720, Nexus 7K, 5K, 2K

Juniper Platforms: SRX, MX, EX Series Routers and Switches

Networking concepts: Access-lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPsec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi

Load Balancers: Cisco CSM, F5 Networks (Big-IP), LTM,GTM, Citrix NetScaler

WAN Technologies: Frame Relay, ISDN, ATM, MPLS, Leased line & exposure to PPP,SD-WAN, DS1,DS3,OC3,WAAS,T1/T3, & SONET, CRS 4 slot

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q

Security Protocols: IKE, IPSEC, SSL-VPN, DMVPN, MPLS

Networking protocols: RIP, OSPF, EIGRP, BGP, MP-BGP, LDP STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA, RSVP-TE, MP-BGP,MCAST - NG, ASM, SSM, IGMP, MVR, FHRP

Communication Protocols: TCP/IP, UDP, DHCP, DNS, ICMP, SNMP, ARP, RARP, PPP, HDLC and ISDN, SDN

Firewall Security: Cisco PIX 500 series, Cisco ASA 5500 series, Checkpoint, Juniper SRX

Sniffers: Wireshark, Solarwinds, Cisco firesight, ServiceNow

Operating Systems: Microsoft XP/Vista/7, UNIX, Linux (Red hat, Opens use, Fedora), Windows Servers 2003/2008Windows MS-Office. VMware ESX 5.1, VMware vSphere client, Microsoft Azure, office 365, Python

Citrix Net scalar: SDX, MPX, VPX, CPX

Monitoring Tools: Stealthwatch, Solarwinds

PROFESSIONAL EXPERIENCE:

Confidential, Houston-TX

Network Engineer

Responsibilities:

• Monitoring and Capturing bandwidth for more than 1500 devices which includes switches 4900, 4500, 3750, 3700, 2950 and routers 7600,7200,3800,2800,2600 using STEALTHWATCH tool.
• Using the host name, site location and Management address, adding all the devices in Stealth watch using exporters.
• Taking MPLS Site map as, capturing the bandwidth of each and every device through the trunk port.
• Capturing bandwidth includes Interface name, direction, average packet rate, average traffic, average utilization, maximum packet rate, maximum traffic, maximum utilization.
• Sometimes while pulling the bandwidth of some devices, the screen popups interface name in terms of ifindex-1, ifindex-2,3,4,5……12, at that time to find the exact interface of that device, taking MPLS site map as, we used to login to that device using Putty.
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP.
• Basic and advance F5 load balancer configurations, including migrating configurations from Cisco ACE to F5 and general troubleshooting of F5 load balancers
• To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.
• Worked on Layer 2 protocols such as STP, VTP, STP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment.
• Working with design and deployment of MPLS Layer 3 VPN cloud, involving VRF, Route Distinguisher(RD), Route Target(RT), Label Distribution Protocol (LDP) & MP-BGP.
• Involved in L2/L3 Switching Technology Administration including creating and managing VLANs, Port security, STP, Inter-Vlan routing, LAN security.
• Upgrading the network by translating protocol like EIGRP to OSPF.
• Configured networks using routing protocols such as RIP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure.
• Setting up alarm which includes High Target Index, SYNs received, High file sharing index, worm activity, high concern index, suspect data loss, data exfiltration, recon, data hoarding.
• Created PKI enterprise infrastructure and conduct trends analysis.
• Assisted in packet capture analysis and monitored authentication aspects.
• Provide technical oversight of the creation and maintenance of all networking configurations and data files
• Provide day-to-day communication/network security operation and maintenance of multiple secure network infrastructures.
• Setting up alarm severity (critical, major, minor, trivial, informational).
• Creating graph sheets of traffic(bps), utilization (%) through Interface traffic Dashboards.
• Capturing Interface speed(inbound/outbound), and interface threshold(inbound/outbound).

Environment: Cisco 4900, 4500, 3750, 3700, 2950 Switches, Cisco 7600/7200/3800/2800/2600 Routers, Nexus5K, 7K, LTM, GTM, F5 Load balancer, Switching Protocols STP, VTP, RSTP and VLAN. Routing Protocols EIGRP, OSPF, BGP including VPN, MPLS and Ether Channels

Confidential, Dallas - TX

Sr. Network Engineer

Responsibilities:

• Troubleshooting of Cisco 2000, 2800, 2900, 3900, 7200, 7600, ASR 9k, CRS and GSR 12k Series routers.
• Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX, Firewalls (SRX240, SRX550).Network Migration from RIP to OSPF and EIGRP.
• I did configure Nexus 7k, 5k and 2k (remote line cards) it was design and deployment of converting 6509 to nexus. I did work with VPC, VDC and ISSU software upgrades I did set up OTV between the data centers using Nexus 7Kand also FCOE on 5548 between the data centers.
• Planned and implemented Subnetting, VLSM to conserve IP addresses.
• Migrated L3VPN Traffic from Juniper M320’s to Cisco CRS-1 with minimum disruption.
• Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 4500 series Cisco Catalyst switches. Configured STP for loop prevention and VTP for Inter-VLAN Routing.
• Maintain Responsibility for Project Management, administration, strategic planning and implementation of MPLS projects. Deliver projects in a timely manner that lead to savings in cost and time while keeping customer expectations.
• Redistribute routing protocols and Frame-Relay configuration.
• Designed & implemented WAN upgrade for regional healthcare provider. Included migration from DS1-based L3VPN to Ethernet-based carrier VPLS service.
• Configured Standard, Extended, and Named Access Lists to allow users all over the company to access different applications and blocking others.
• Troubleshoot and resolved dynamic routing, Ethernet switching and host connectivity issues in a window and network environment.
• Function as Level 3 network escalation and support for service provide grade network.
• Back up a Cisco IOS to a TFTP server and Upgraded and restored a Cisco IOS from TFTP server.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems
• Convert Campus WAN links from point to point to MPLS and to convert encryption from IPSec/GRE to GET VPN
• Provided on-call support for installation and troubleshooting of the configuration issues.
• Network infrastructure support to routing and switching equipment.
• Provide Tier1 technical support; assist users facing network problems. Perform advanced troubleshooting, diagnostics and provide tier/level-1 solutions to network failures.
• Design the layout for cable installations. Troubleshoot wiring problems and serial communication lines.
• Configure IT LAN/WAN elements and held responsibility of maintaining and monitoring performance of network.
• Develop, plan and maintain documentation necessary for operation in support of LAN to WAN connectivity.
• Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.
• Involved in design and deploying various network security & High availability products like Cisco ASA and other security products.
• Support customer with the configuration and maintenance of ASA firewall systems.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Black listing and White listing of web URL on Blue coat proxy servers and web security gateway.
• Worked on Bluecoat proxySG to safeguard web applications in extremely untrusted environments such as guest Wi-Fi zones.
• Configure the Cisco IOS XR security features in both owner SDR and non-owner SDRs.
• Basic and advance F5 load balancer configurations, including migrating configurations fromCiscoACEto F5 and general troubleshooting of the F5 load balancers.
• Configure wireless routers on enterprise network. Participated in quality system implementation project.
• Knowledge and experience of 802.11 a/b/g/n Ethernet standard for wireless Technology.
• Configured and installed VOIP devices and IP Phones such as 7841, 7942, 7960, 7961, 7971G-Ge, 7975G.
• Worked with other team members in testing of the network architecture.
• Maintain excellent communication with the IT Manager on all tasks and projects.

Environment: Cisco 2950/3500/5000/6500 switches, Cisco 7600/7200/3800/2000 Routers, IP Phones 7841, 7942, 7960, 7961, 7971G-Ge, 7975G, ACL, LAN, WAN, RIP, OSPF, BGP, IPV4, Solar winds, Juniper SRX, RIP, OSPF, BGP, EIGRP, TFTP, F5 Load Balancer, Cisco ASA.

Confidential, Kings Mountain- NC

Network Engineer

Responsibilities:

• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
• F5 Big-IP load balancer configuration, layer 7 load balancing using I-Rules (TCL)
• Windows Server Administration (Windows 2000, 2003 & 2008).
• Performed installation and upgrades of office 365 Business as per the changes recommended by the network architect.
• Performed Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Configuring and deployed NetScaler VPX and NetScaler CPX hardware appliances
• Troubleshooting Citrix NetScaler content switching configurations.
• Conducted F5 Big-IP load balancer configuration, layer 7 load balancing using I-Rules (TCL)
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks.
• Extensive experience with F5 load balancers- LTM, GTM series like 6400, 6800, 5000 and 2000 for the corporate applications and their availability
• Experience on dealing with Cisco ISE Secure Network Server 3515 and other network security products.
• Troubleshooting the Juniper SRX100 anda hundred and tenseries, Juniper Net Screen routers with Site-Site VPN, and firewalls for Supervalu Retail sites.
• Experience on configuring Cisco Call manager. This Cisco Call Manager uses Cisco's proprietary SCCP (also known as Skinny) protocol. The Call Manager works as part of Cisco's solution to provide IP Telephony with many of the functions of a PBX system for an enterprise.
• Identify, design and implement flexible, responsive, and secure technology services
• Experience with Firewall Administration, Rule Analysis, Rule Modification.
• Configured FortiGate 5000 series firewall through Fort iOS operating System which delivers up to 1 Tbps throughput.
• We used MultiProtocol Label Switching (MPLS) for speeding up and shaping network flows.
• Implemented Positive Enforcement Model with the help of Palo Alto Networks.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.
• Creating and provisioning Juniper SRX firewall policies.
• Configure and maintain load balancers to specifications. Facilitate daily team meeting to review WAN/LAN problems, bandwidth utilization and capacity planning.
• Engineered and capacity managed multiple shifting priorities that expanded network routing from the VHO and designed diverse inter-nodal links on the Cisco fiber network.
• Created standard access lists to allow SNMP, NTP and logging servers.
• Alongside setting up these resources for L3VPN, L2VPN, MPLS-TE and FRR for the Tier1 main service provider.
• Documented new VPN enrollments in a database and create standard procedures for further improvement.
• ConfigureVRRP & GLBP andVLANTrunking802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.
• Provided proactive threat defense with ASA that stops attacks before they spread through the network.
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Co-ordinate with the Data Network and Security team and came up with possible solutions.
• Experience on dealing with Infoblox traffic control products to simplify DNS load balancing operations
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO
• Monitoring and troubleshooting network issues between client site and 85 remote sites with legacy switches and routers.
• Performed and presented network analysis as a part of network migration. Involved in knowledge transfer to vendors and provided them network support as required
• Configuration and maintenance of EIGRP and BGP network on router 7200 and 6500 MLS.
• Configuration and maintenance of 3750 stack and 6500 VSS for improved efficiency of the data plane.
• Configuration and management of NEXUS network in the existing network infrastructure.
• Created LAB setup with 7k and 5K NEXUS switches and Arista 7K for application testing.

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/ 0/ 3845/3600/2800 routers, Cisco ASA5510, Fortinet Firewall FortiGate 5000 series, Nexus 7K /, ASA, Checkpoint, LAN,OSPF,BGP,RIP,EIGRP Checkpoint, Palo Alto.

Confidential, Monterey - CA

Network Engineer

Responsibilities:

• Configured Cisco Routers for OSPF, IGRP, RIPv2, EIGRP, Static and default route.
• Worked on HSRP for hop redundancy and load balancing.
• Configured RSTP and used VTP with 802.1q trunk encapsulation.
• Provided port binding, port security and router redundancy through HSRP.
• Designed ACLs, VLANs, troubleshooting IP addressing issues and taking back up of the configurations on switches and routers.
• Provided testing for network connectivity before and after install/upgrade
• Switching related tasks included implementing VLANS and configuring ISL trunk on Fast-Ethernet and Gigabit Ethernet channel between switches.
• Experience in Cisco switches and routers: Physical cabling, IP addressing, Wide Area Network configurations.
• Configured & maintained IPSec VPN in Cisco ASA, Palo Alto firewalls.
• Monitoring alerts & events in Cisco IPS.
• Monitoring network devices using HP Network Node Manager.
• Implemented TACACS+ for administering user accounts.
• Responsible for Internal and external accounts and, managing LAN/WAN
• Settings of the networking devices (Cisco Router, switches) co-coordinating with the system/Network administrator during any major changes and implementation
• Routing protocols OSPF, RIP & BGP

Environment: Cisco 3845/3600/2800 routers, TACACS, EIGRP, RIP

Confidential

Network Administrator

Responsibilities:

• Configuration, LAN/WAN, Switch/Routing protocols.
• Troubleshooting complex LAN /WAN infrastructure that include routing protocols EIGRP, OSPF.
• Configured Access-lists, Distribution-lists, Offset-lists and Route Redistribution.
• Configured Ether channels, Trunks, VLans, HSRP in a LAN environment. Configured STP for loop prevention and VTP for Inter-VLAN Routing.
• Configured PVSTP+ for loop prevention and VTP for Inter-VLAN Routing.
• Implemented port aggregation & link negotiation using LACP and PAGP.
• Responsible for performing administration on OSPF routing protocols. Implemented route redistribution between OSPF and EIGRP.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Performed IOS upgrades on various catalyst series switches and maintained latest IOS versions according to company’s policy.
• Worked on installation, maintenance, and troubleshooting of LAN/WAN (ISDN, Frame relay, NAT, DHCP, TCP/IP). Configured STP for loop prevention and VTP for Inter-VLAN Routing.
• Configured Access List (Standard, Extended, and Named) to allow users all over the company to access different applications and blocking others.
• Done troubleshooting of TCP/IP problems and connectivity issues in multi-protocol Ethernet environment.
• Worked on network-based IT systems such as racking, stacking, and cabling.

Environment: BMC Remedy, Cisco ASA 5540, BIG-IP LTM 8900, QOS, Policy-maps Class-maps, Vlans, STP, RSTP, PVSTP, VTP, HSRP, Ether Channel,BGP, OSPF, EIGRP, MPLS, ATM, PPP, HDLC. SNMP, TACACS+, DNS, DHCP.