SUMMARY:

• 8 years of experience in networking, installing, configuring and troubleshooting network devices.
• Implementing IP addressing schemes, LAN/WAN protocols, IP Services, to fulfill network requisites in different environments.
• Hands on experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 series, and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers, Cisco Nexus 7000 series, 5000 series, 2000 series data center switches, Juniper EX/ MX/ SRX series.
• Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP - BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS and VLAN
• Comprehensive expertise in the implementation of optimization, analysis, troubleshooting and documentation of LAN/WAN networking systems.
• Implemented redundancy with HSRP, VRRP, GLBP, Ether channel technology (LACP, PAgP) etc.
• Implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, Route Maps and route manipulation using Offset-list.
• Hands on in deployment of GRE tunneling, SSL, Site-Site IPSEC VPN and DMVPN.
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP, NTP.
• Experience with F5 load balancers - LTM, GTM series like 6800 and 8900 for the corporate applications and their availability.
• Installed and Configured A10(AX2500) Load Balancer SLB for various applications in backend
• Strong experience on Juniper SSG series Firewalls and Checkpoint R75, 76 Firewalls.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NAT with the firewalls as per the design.
• In-depth involvement configuring Enterprise WAN Cisco 2851, 3845, ISR 2951, ISR 3945, ISR 4451, ASR 1004 & ASR 9001series Routers.
• Expertise in Data Center Core layer, Access layer, Aggregation layer, Services layer.
• Worked extensively on AAA design system.

TECHNICAL SKILLS:

Cisco Routers: 1600,1700,2600,2800, 2900, 3600, 3800, 7200 and 7600

Cisco L2 & L3 Switches: 1900, 2900, 3560, 3750, 4500, 4900, and 6500

Cisco Nexus: 5020, 5548, 5596T, 2148, 2248TP, 2348UPQ, 7010, 7702

Juniper: EX-2200, EX-4200, EX-4500, MX-480, M Series, SRX210, SRX240

LAN Technologies: Ethernet, Fast Ethernet, and Gigabit Ethernet, SMTP, VLAN, Inter-VLAN Routing, VTP, STP, RSTP, Light weight access point, WLC.

WAN Technologies: Frame Relay, PPP, HDLC, (E1/T1/E3T3), DS3, OC192.

Network Security: Cisco ASA, ACL, IPSEC.

OS products/Services: DNS, DHCP, Windows (2000/2003/2008, XP), UNIX, LINUX.

Routing Protocols: OSPF, EIGRP, BGP, ISIS, VRF, PBR, Route Filtering, Redistribution, Summarization, and Static Routing.

Gateway Load Balancing: HSRP, VRRP, GLBP, EBGP

Various Features / Services: IOS and Features, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, TFTP and FTP.

Network Management Tools: Wireshark, Netflow Analyzer, Cisco Works, Ethereal, SNMP, HP open view.

Security Server Protocols: TACACS+, RADIUS.

Facilities: DS0, DS1, DS3, OCX, T1/T3

Load Balancers: Cisco CSM, F5 Networks (BIG-IP) LTM 8900, BIG-IP GTM 6800, A10, Cisco ACE 4710.

Operating Systems: Windows (98, ME, 2000, XP, Server 2003/2008, 2012, Vista, Windows 7/8), CentOS, Ubuntu, IOS.

Firewall & Security: Checkpoint, Cisco ASA, Palo Alto, Juniper SRX, fortigate 5000-series.

PROFESSIONAL EXPERIENCE

Confidential, Menlo Park, CA

Sr. Network Engineer

Responsibilities:

• Configuring Static, IGRP, EIGRP, BGP and OSPF Routing Protocols on Cisco 1600, 2600, 2800, 3600, 7300 series Routers.
• Design, Implement & troubleshooting of Juniper switches, routers and Firewalls EX-2200, EX-4200, EX-4500, MX-480, M Series, SRX210, SRX240, SRX 3600/650.
• Configuring and implementation of Juniper Firewall, SSG Series, Net screen Series ISG 1000, SRX Series.
• Managing and troubleshooting of Juniper M320 routers including installation, upgrade, configuration and network management.
• Deployed on Nexus 7000, 5000 and 2000 series with V-Block servers and Cisco UCS E-series.
• Worked with Cisco Nexus 2148 Fabric Extender and Nexus 7010, 5000 series to provide a Flexible Access Solution for datacenter access architecture.
• Deploying and decommission of VLANs on core ASR 9K, Nexus 9K, 7K, 5K and its downstream
• Performed Configuration on ASR 9K Pairs includes HSRP, Bundle Ethernet Configuration, Assigning DHCP profiles.
• Configured ASR 9K Routers as PE's in the MPLS backbone.
• Performed extensive testing around the upgrade, migration and configuration functionality of our software.
• Expansion and implementation of current data center for different phases of migration.
• Configured EBGP load balancing and ensured stability of BGP peering interfaces.
• Worked on Route-Reflectors to troubleshoot BGP issues related to customer route prefixes also route filtering using Route-maps.
• Configured Easy VPN server and SSL VPN to facilitate various employees’ access internal servers and resources with access restrictions.
• Configuring and implementation of Juniper Firewall, SSG Series, Netscreen Series ISG 1000, SRX Series.
• Implementation of Site-to-Site VPNs and DMVPN over the internet using IKE Phase 1 and IKE Phase 2 based on traffic with ASA 5500 series Firewalls.
• Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution and Configured and troubleshooting of CSM, integration with ASA devices.
• Deployed Palo Alto Firewalls for web filtering and application control.
• Management of corporate Checkpoint Firewall implementing security protocols and alleviating network attacks.
• Migration of servers from one datacenter to another, providing switch connections to the new servers, updating Check point Firewall rules for the new servers, F5 to A10 Load Balancers Migration
• Supported Operations team when complex changes are done by developing MOPs for network devices (routers, switches and A10 Load balancer) code upgrades, VLAN/IP migrations from old to new network topology without any service disruption.
• Extensive use of NSM (Network and Security Manager), FortiOS 5 and CSM (Cisco Security Manager) for adding or modifying firewall policies for the firewalls in use.
• Mapped, Network Diagrams and physical identification in MS Visio.
• Worked with engineering team to resolve tickets and troubleshoot L3/L2 problems efficiently.
• Worked on WLAN Security in the areas of authentication, encryption, IDS/IPS using Radius, AAA authentication, EAP, LEAP, PEAP, PSK, AES-CCMP encryption, Wireless Sniffers, WEP encryption (Wired Equivalent Privacy), WPA (Wi-Fi Protocol Access), WPA2.

Confidential, Montvale, NJ

Sr. Network Engineer

Responsibilities:

• Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.
• Configured Nexus 5020, 5548 7010 and 7702 with multiple Distribution VDC’s running EIGRP for route propagation between them.
• Experience with configuring Nexus 2000 Fabric Extender (FEX) hitch acts as a remote line card (module) for the Nexus 5000.
• Having extensive noledge on Configuration of HSRP between VLAN and Ether-Channels, Port Channel on 6500 catalyst
• Configured various BGP attributes such as Local Preference, MED, Extended Communities, Route-Reflector clusters, Route-maps and route policy implementation.
• Built site-to-site IPsec VPNs over Frame-relay & MPLS circuits on various models of Cisco Routers to facilitate adding new business partners to new and existing infrastructures.
• Design an End -to-End High- Level Cisco TrustSec Network with Cisco ISE and 802.1x
• Worked on F5 BIG-IP LTM 8900, configured profiles, provided and ensured high availability.
• Worked on F5 and CSM load balancers deploying many load balancing techniques with multiple components for efficient performance.
• Installed and configured network switches and routers for LAN and Wireless Local Area Network deployment- devices using the IEEE 802.3af standard for Power over Ethernet
• Created reports and documentation for user Accessconfiguration and enacted authentication and Access control security protocols including captive portal and port MAC locking devices.
• Managed and configured Cisco Access Pointsand Wireless LAN Controllers.
• Responsible for deploying various network security & High Availability in Checkpoint Firewall
• Responsible for Cisco ASA firewall administration across our global networks
• Support Panorama Centralized Management for Palo Alto Firewall PA-500, PA-200 and PA3060, to central manage the console, configure, maintain, monitor, and update Firewall core, as well as back up configuration
• Having Experience on Configuration of Palo Alto design and installation which includes Application and URL filtering Threat Prevention and Data Filtering.
• Build Logical design and Implementation of Wireless Solution.
• Experience with configuring VMware and managing and maintenance of VMs (virtual server)
• Created a Web based HTTP server using socket programming in Python.
• Continual network monitoring of data center support, troubleshoot and diagnose hardware problem

Confidential, Bellevue, WA

Network Engineer

Responsibilities:

• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies. Cisco CLI, Cisco works, Network Security, Network Analysis Tools
• Experience with Checkpoint Firewall policy provisioning.
• Firewall Policy implementation on Checkpoint R62 and R65 using Provider 1
• Develop, design and implement firewall infrastructure surrounding Checkpoint and Cisco Firewalls and a good experience with security tools and protocols like NERC/CIP and SOX
• Troubleshoot traffic passing managed firewalls via logs and packet captures.
• Having noledge on the Data Centre Multi-Tier data design
• Configured and resolved various OSPF issues in an OSPF multi area environment.
• Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
• Layer 2 switching technology architecture, implementation and operations including L2 and L3 switching and related functionality. dis includes the use of VLANS, STP, VTP and their functions as they relate to networking infrastructure requirements including internal and external treatment, configuration and security.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• Estimated Project costs and created documentation for project funding approvals.
• Managed various teams involved in site surveys, cabling specifications, Network equipment installation and configuration.
• Planned resources and presented project status to higher management.
• Deployed 7613 as PE and CE routers and configured the Edge Routers.
• Excellent troubleshooting noledge on T1, T3, OC-3 and OC-12.
• Created and delivered internal trainings for BGP.
• Having Hands on experience with deployment and Configuration with MAC Authentication Bypass
• Configured egress and ingress queues for ISP facing routers using CBWFQ.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Ability to analyze, configure and troubleshoot networks.
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support
• Supporting EIGRP and BGP based PwC network by resolving level 2 &3 problems of internal teams & external customers of all locations
• Planned, designed, installed, configured and maintained fiber optic network, Wireless access points 802.11a/b/g/n

Confidential

Network Engineer

Responsibilities:

• Responsible for maintenance and utilization of VLANs, Spanning-tree, HSRP, VTP of the switched multi-layer backbone with catalyst switches.
• Implemented redundant Load balancing technique with Internet applications for switches and routers.
• Support Network Technicians as they require training & support for problem resolution including performing diagnostics, & configuring network devices
• Connected switches using trunk links and Ether Channel.
• Used Network Monitoring tool to manage, monitor and troubleshoot the network.
• Configured Cisco IOS Feature Set, NAT and Simple Network Management Protocol (SNMP) for Network Security implementation.
• Received inbound calls of technical nature, independently resolved customer complaints, concerns and inquiries regarding their Internet connection.
• Troubleshoot a wide range of technical support issues and connectivity problems such as authentication, connection speed, e-mail configuration, and loss of synchronization.
• Experience in new employee mentoring, training and coaching.