SUMMARY

• Cisco CertifiedNetworkEngineerwith 8 years of experience in the industry, which includes expertise in the areas of Routing, Switching and Firewall.
• Designing, Implementation, Administration, Operations and Troubleshooting of enterprise data networks as aNetworkEngineer.
• Experience in Cisco Physical cabling, IP addressing, Wide AreaNetworkconfigurations (Frame - relay & MPLS), Routing protocol configurations (RIP, EIGRP, OSPF, and BGP).
• Migration of network devices (Palo Alto, F5, Juniper, Aruba, Riverbed, Routers& switches) from one zone to other. Performed opening and closing of ports.
• Worked on Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering).
• Experience with Cisco 3750, 3850, 2960, 4500, 6500, Nexus 2k, 3k, 5k and 7k switching ware. Experience on Juniper EX and Arista 7000 series Switches in Data Center Environment.
• Good understanding of load balancing strategies/techniques, expertise in application switching/traffic management, knowledge of persistence and SSL certificates and troubleshooting methodologies.
• Strong background inIP Addressing, Subnetting, VLSM, ARP, OSI and TCP/IP models.
• Creation and maintenance ofnetworktopology documentation using Microsoft Visio.
• Strong hands on experience on PIX Firewalls, ASA (5540/5550) Firewalls. Implemented Security Policies using ACL on IPS/IDS, AAA (TACACS+ & RADIUS).
• Coordinate activities with vendors (Infoblox/F5/Cisco) and other State Ram services teams like Network services, Security, Cloud Services, Windows Support, inventory management, etc.
• Good Understanding of Python scripts for system automation, monitoring and security reporting.
• Experience with Bluecoat URL filtering with white listing and black listing URL, creating rules for content filtering.
• Enterprise Switching with VLANs, Trunks, Spanning Tree, Port Spanning etc.
• Troubleshooting and installing of CRS, ISR, GSR, ASR9000 and Nexus devices
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Experience on dealing with Aruba Wireless products including Access Points, Mobility Access Switches and Outdoor mesh routers.
• Implementing technology solutions for clients that will address their needs in Networking, Security, Enterprise Data Center, SDN & SD-WAN focused solutions.
• Hands on experience on dealing with Microsoft Azure cloud computing including implementing access lists in the Network Security Group.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Experience in configuring Site-to-site and remote access VPN solutions.
• Solid experience in F5 BIG-IP Load Balancing solutions including LTM, GTM, and ASM solutions
• Development of IP/MPLS network architecture and service designs.
• Strong Post Sales capabilities around Data Center, Virtualization, Storage, SDN, SD-WAN, Security, Compute & Cloud solutions.
• Assists in the development, implementation, and day-to-day maintenance of IT security & control infrastructures.
• Good knowledge in configuration of Voice VLAN's (VOIP), prioritizing the voice traffic over the data traffic.
• In depth knowledge with network monitoring and performance tools such as Solar winds and Wireshark
• Install and configure Bluecoat Proxy in the network for web traffic management and policy configuration.
• Excellent customer management/resolution, problem solving, debugging skills and capable of quickly learning, effectively analysis results and implement and delivering solutions as an individual and as part of a team.
• Manages Infoblox NetMRI for inventory, policy compliance and configuration management
• Configure VRRP & GLBP and VLAN Trunking 802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.
• Experience with F5 load balancers and Cisco load balancers (CSM, ACE and GSS).
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience.
• Planned and implemented new infrastructure in Data Center Implementing security Solutions using Palo Alto Pa-5000/3000, Cisco ASA, Checkpoint firewalls R75, R77.20 Gaia and Provider-1/MDM.
• Designed and replaced aging checkpoint Firewall architecture with new next generation Palo Alto appliances serving as firewalls and URL and application inspection.
• Excellent working knowledge of TCP/IP protocol suite and OSI layers.
• Experience with Linux Command Line Interfaces For logging into access points, etc.

TECHNICAL SKILLS

Routing Protocols: IGRP, EIGRP, OSPF and BGP

L2 Protocols: VTP, STP, RSTP, MSTP, PVST, ISL, 802.1q

Switching: VLANs, Private VLANs, 802.1q, and Ether-Channel

Redundancy Protocols: HSRP, VRRP, GLBP

Firewalls: Checkpoint, PIX, Cisco ASA Appliances (5505, 5550), Bluecoat, Palo Alto

Load Balancers: BIG-IP F5 LTM and GTM, Cisco CSM

Network Management: SNMP, Cisco Works, Wireshark, Packet Sniffer, Solar Winds and HP Open View

Servers: FTP, DHCP, DNS, HTTP, Syslog and TFTP

Documentation: MS office, MS Visio

Operating Systems: Windows NT/2000/XP/ Vista/ 7/8; MS DOS, Linux

WAN Technologies: Frame Relay, PPP, ATM, and MPLS

WLAN Technologies: Autonomous AP’s, Lightweight AP’s, WLC, Channels-802.11b/g

Cisco Router Platforms: 7600/7200/3800/3600/2800/2600/2500/1800 series

Cisco Switch Platforms: 6500/4900/4500/3750/3500/2900/1900 series

PROFESSIONAL EXPERIENCE

Confidential, Boston, MA

Sr. Network Engineer

Responsibilities:

• Configuration, implementation, Analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems.
• Configuring, monitoring and troubleshooting EIGRP, OSPF, BGP protocols on Juniper EX/QFX series, SRX Firewalls, Cisco 2500/2600/3000/7500/7200 Series routers and Static routing.
• Performing IOS Software upgrades on switches 6500, 3750 and 4500s.
• Supported nationwide LAN and Data center infrastructure consisting of Cisco 4510, Catalyst 6513, Cisco NX 9k.
• Installing and configuring Cisco Identity Services Engine 1.4 and customized Sponsored Guest Portal.
• Working on Cisco Layer 2 switches (spanning tree, VLAN).Take support calls and troubleshoot various Layer 2 & Layer 3networkconnectivity issues.
• NAT, VPN and Traffic filter implementation on Cisco Firewalls and IPS.
• SD-WAN NFV functional testing planning, testing executions and verify and track issues and resolve issues with vendors.
• Complete basic configurations on the F5 Big-IP LTMs and GTM load balancer on existingnetworkto split traffic on web-servers.
• Configuration of ASA (5540/5550) Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).
• Implementing traffic filters using Standard and Extended Access Control lists. Handled Route-map, Re-distribution list & access-list configurations.
• Performingnetworkcontrol with secure DNS, DHCP and IPAM using Infoblox
• Strong experience with JunOS SRX and SRX clustering.
• Understanding of JUNOS platform and worked with IOS upgrade of Juniper devices.
• Installation of VMware ESX, NSX Servers, vSphere Client and VCenter Server.
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.
• Creating and testing Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.
• Configured load balancing on F5 and Cisco ACE load balancers to allow traffic going to the Bluecoat proxies to be optimized and load balanced
• Adept in handling network monitoring tools such as Wireshark, Netflow, SNMP and SYSLOG.
• Responsible for full life cycle from site surveys, implementation, testing and training of secure Aruba wireless network installations.
• Strong Quantitative & Analytical background with professional experience in Network Administration, Quality of Service (QoS), Security Policies & Project Management.
• Managed all network and devices to include Cisco routers, switches, VPNs, SSL, Check Point, Cisco PIX, Cisco ASA, Cisco FWSM as well as content delivery networks (CSS, Citrix Netscaler and F5 BigIP LTM and GTM 1600 and 3400 load balancers) enterprise environment.
• Support high level designs and integration OSS systems of Service fulfillments, service activations, MANO, and services assurances functions for SDN/NFV (such as vCPE and Cloud platform) for new Managed Services, Internet Services, and IP-VPN services of SD-WAN.
• Implementing and troubleshooting firewall rules in Cisco ASA 5525, 5580, Checkpoint R77.20 Gaia and VSX as per the business requirements
• Design/implement IP/MPLS network to support voice, data, video traffic with IP Telephony and Products over the VMware cloud.
• Install, service and support of IP Telephone, VoIP and video surveillance systems.
• Traffic segregation utilizing PAN Security Zone, Nexus VRF and F5 ASM and iRules.
• Worked on Cisco IOS for configuration & troubleshooting of routing protocols: BGP, OSPF, EIGRP, IGRP and RIP.
• Configured and performed software upgrades on Cisco Wireless LAN Controllers 5508 for Wireless Network Access Control integration with Cisco ISE
• Maintaining Cisco Secure ACS, Controlling and monitoring allTACACSaccounts, for secure Cisco hardware access, providing quarterly audits and supporting local access and VPN authentication thru WI-FI and VPN access.
• Managed successful delivery of massive security response portfolio including Splunk, Cisco ISE.
• Install, configure and maintain several Cisco DMVPN routers servicing smaller Sites, Several Edge routers running BGP and MPLS to Internet service providers.
• Working with a team where my primary responsibility is planning, installation, configuration, performance tuning, problem determination, and administration of a Security Information and Event Management (SIEM) solution.
• Black listing and White listing of web URL on Blue Coat Proxy servers.
• Deployment and Management of Bluecoat proxies in the forward proxy scenario as well as for security in reverse proxy scenario.
• Monitoring LAN's and WAN's forNetworkconnection and failure issues using tools such as Wireshark, Packet Sniffer, Solar Winds.
• Creating object, groups, updating access-lists on Check Point Firewall.
• Attending requests received via Salesforce Ticketing systems and providing solutions.

Environment: Juniper EX/QFX series, Cisco 2500/2600/3000/7500/7200 Series routers, Cisco ASA 5540/5500 Firewalls, Palo Alto, Blue Coat Proxy servers, Cisco ISE, IPS, IDP, RIP, EIGRP, OSPF, BGP, LAN/WAN, HARP, DMVPN, MPLS, F5 BIG-IP LTM 3900, NAT, GTM, MS Visio, PPP, VLAN, VPN, Infoblox, TACACS+, RADIUS

Sr. Network Security Engineer

Confidential

Responsibilities:

• Maintained of EIGRP and BGPnetworkon router 7200 and 6500 MLS.
• Monitored and troubleshotnetworkissues between client site and remote sites with legacy switches and routers.
• Performed and presentednetworkanalysis as a part ofnetworkmigration.
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as part ofNetworkteam. The LAN consisted of Cisco campus model of Cisco 2000, 3550 at access layer, Cisco 6513 at distribution/core layer.
• Involved in configuration of MP-BGP, EIGRP, BGP v4 and IP access filter policies.
• Actively participated in the Data Center Operations Team to perform duties like administration and deployment of Cisco Routers and Switches according to the organization requirements and assisted withnetwork capacity and high availability requirements.
• Configured VRRP & GLBP and VLAN Trucking 802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.
• Involved in complete LAN, WAN, Extranet redesign (including IP address planning, designing, installation, pre-configuration of network equipment, testing, and maintenance) in both Campus and Branch networks.
• Responsible for designing and implementation of customer's network and Security infrastructure.
• Experience with converting Cisco 6500 IOS to Cisco Nexus NX-OS in the data center environment.
• Responsible for Cisco ASA firewall administration across our networks and support customer with the configuration and maintenance of the firewall systems.
• Support high level designs and integration OSS systems of Service fulfillments, service activations, and services assurances functions of for SDN/NFV (such as vCPE and Cloud platform) for current Ethernet services such as E-LINE and E-LAN services
• Design and implementation of peering IP networks using BGP and MPLS, interior routing protocols.
• Experience in Cisco PIX- 506/515/525/535 Firewalls, Palo Alto Firewalls, Cisco ISE, Security Device Manager (SDM), Cisco Works, HP Open View, Solar Winds, Packet Sniffer.
• Experience with designing, implementing and troubleshooting Cisco routers and switches using different routing protocols like OSPF, EIGRP, DMVPN, BGP, ISIS and MPLS L3 VPN, VRF.
• Actively involved in switching technology administration, Bash scripting including creating and managing VLANS, Port Security-802.1x, Trunking 802.1q, RPVST+, Inter-VLAN routing, and LAN security on Cisco Catalyst 4507R+E, 6509-E and Nexus 2232, 5596, 7009 switches.
• Configuration of CISCO ISE for AAA, CCNP, security access group with the use of SGT and SGACL.
• Configured and troubleshot Cisco catalyst 6509, 7613 with supervisor cards.
• Implemented a test environment with Nexus 7k and 5K switches for application testing.
• Designation and Implementation ofArubaWireless solution includingArubaS3500 Mobility switch,Aruba105, 175, 225 Campus AP,Aruba7210 & 7220 Mobility Controller.
• Responsible for Cisco ASA Firewall/Checkpoint administration across global networks.
• Provided proactive threat defense with Cisco ASA Firewall that stops attacks before they spread through the network.
• SupportedInfobloxappliances grid environment for DNS, DHCP and IP Address Management tools (IPv4).
• Hands on experience with F5 ADC, Palo Alto, Dell Force10, Brocade, Meru/Aruba WLAN, Splunk, TACACS.
• Understand the flow of traffic through the Check Point Security gateway cluster and troubleshoot connectivity issues using advanced troubleshooting from Command Line Utilities.
• System level monitoring on Linux andInfobloxAppliances to watch process and service statuses, like Performance Monitoring & Tuning - iOS tat, nfsstat, vmstat & netstat, etc.,
• Provided administration and support on Bluecoat Proxy for content filtering and internet access between site and VPN client users.
• Created standard access lists to allow SNMP, NTP and logging servers.
• Documented new VPN enrollments in a database and create standard procedures for further improvement.
• Troubleshoot traffic passing managed firewalls via logs and packet captures.
• Negotiate VPN tunnels using IPsec encryption standards. Also, configured and implemented site-to-site VPN, Remote VPN.

Environment: Palo Alto, Cisco ASA 5540/5500, Nexus 5k, 7k switches, Cisco Meraki MS350, Aruba S3500 Switch, Aruba 105/175/225 Campus AP, Aruba 7210/7220 Mobility Controller, IPS, IDP, RIP, EIGRP, OSPF, BGP, Red Hat Linux 6.x, Tivoli (TSM), VMware ESX, NFS share, Perl Scripting, HP Service Manager, LAN, WAN, HARP, DMVPN, MPLS, GTM, MS Visio, PPP, VLAN, VPN.

Network Engineer

Confidential, Irvine, CA

Responsibilities:

• Strong hands on experience on Cisco Catalyst 1900/2900/3550/3750/6500 series switches, VSS technology, Cisco 2500/2600/2800/3600/3800/7200 series routers.
• Actively participated in configuration and management of different layer 2 switching tasks including address learning, efficient switching etc.
• Worked on ASA firewalls and experience with F5 load balancers, Cisco load balancers (CSM, ACE and GSS).
• Designed and implemented Wireless Intrusion Prevention Systems (WIPS) to enforce security policies.
• Provisioning and troubleshooting Ethernet services, Gigabit networks and Connectivity issues with WAN types (T1, E1, DS3 and Frame Relay) data circuit debugging.
• Experience MPLS connectivity using VRF id and have broad knowledge on Multi-protocol label switching (MPLS-VPN) and traffic engineering (MPLS-TE).
• Administered Palo Alto Firewalls to allow and deny specific traffic and to monitor user usage for malicious activity and future QoS.
• Worked with Infoblox IP Address Management (IPAM) tool to investigate endpoint DHCP and DNS settings.
• Dealt with the escalation problems from Level 1, 2 and 3 for routing, switching and WAN connectivity issues using Remedy ticketing system.
• Perform advanced troubleshooting using Packet tracer and TCP dump on firewalls.
• Maintained and updated Active Directory for authentication purposes.
• Design VLANs, Access Control Lists (ACL), troubleshooting IP addressing issues and updating IOS images and other hardware installations.
• Provided support to the technical team for installation and monitoring of the issues.
• Implemented NAT configuration and its troubleshooting issues related access lists and DNS/ DHCP issues within the LANNetwork.
• Configuration, provisioning and deploy designed network solutions from build to deployment within IP Routing, MPLS / BGP environment.
• Implemented SNMP on Cisco routes to allow for network management. Completed the installation and Configuration of CSU/DSU, T1, T3 & OC3 circuits.
• Created and manage VPNs for managed service clients including medical community on Cisco, Net screen and Fortinet Cisco PIX VPN devices.
• Engineering for Verizon Cloud Platform. Big Switch SDN controllers w/ Trident based switches. DPDK, SRIOV, & SDN network.
• Experience with Checkpoint Firewall policy provisioning and modification of Palo Alto PA-500, PA-2k, PA-3k, and PA-5 k.
• Configured HSRP and VLAN Trunking 802.1, VLAN Routing on Catalyst 6500 switches Responsible for company's Cisco ASA firewall administration across our global networks.
• DNS Updates/Removals/New Adds via Infoblox DNS Appliance.
• Experience with Cisco LAN controllers (8500, 5760, 5500) Cisco Aironet Access Points (3700, 2700, 1600, 700W), Cisco Mobility Platform.
• Configured and maintained VPCs with 7010 and 5548 in the network. Also configured and maintained VDCs in 7010 switches, maintained VRFs in those separate VDCs.
• Access control server configuration for RADIUS and TACACS+.
• Experience with enterprise-class security products such as web proxy, reverse proxy, load balancing, IDS/IPS, DLP, Firewall, IPsec/SSL VPN, WAN/LAN, wireless and remote connectivity.

Environment: Cisco 2500/2600/2800/3600/3800/7200 series routers, Cisco 1900/2900/3550/3750/6500 series Catalyst switches, OSPF, BGP, MPLS-VPN, HSRP, GLBP, VRRP, WAN, DHCP, DNS, ADS, VPN, VLAN, NAT, IPSEC, WIPS, VPN, STP, Infoblox.

Jr. Network Engineer / Intern

Confidential

Responsibilities:

• Configured VLAN, Spanning tree, VSTP, SNMP on Cisco Catalyst Switch 6500, Juniper EX series switchesand RIP, OSPF and Static routing on Cisco 7600 and Juniper MX 240 series Routers.
• Monitored and configured changes on installed Cisco networking devices such as Routers and Switches to address network related issues/problems.
• Troubleshot TCP/IP problems and connectivity issues in multi-protocol Ethernet environment.
• Project design and proposal of large networks to key account customers and enterprises such as SDH, PBX, Frame-Relay (other WAN project designs) and offshore systems.
• Configured Cisco IOS Feature Set, NAT and Simple Network Management Protocol (SNMP) for Network Security implementation.
• Troubleshot of Layer 2 features (VLAN, STP, RSTP, VRRP, and Ether Channel).
• Configured F5 Load balancers and monitored the Packet Flow in the Load balancers.
• Monitored network performance to improve the backup strategy using Solar winds.
• Monitored network traffic with the help of Qradar and Cisco IPS event viewer.
• Implemented network security for remote access by configuring site to site and clients to site VPN tunnels through multiple Cisco VPN concentrators and Checkpointfirewalls and maintained access policies for remote users.
• Project design of computer networks inclusive of structured cabling (fiber-optic or UTP, voice and data alike), active devices (servers, switches, routers and other network appliances).
• Refined IPS Policy and Created Rules according to the Security Standard.
• Used DHCP to automatically assign reusable IP addresses to DHCP clients.

Environment: Cisco 7600/7200/3800 routers, Cisco 6509/6500/3550 Catalyst switches, Juniper (EX4550, EX4220, MX240) Switches, Juniper (SRX-Series, E-Series, ACX-Series, PTX-Series) Routers, Qradar, F5, SNMP, NAT, VLAN, STP, VSTP.

Jr. Network Administrator

Confidential

Responsibilities:

• Created VLANs and Inter-VLAN routing with Multi-Layer Switching (MLS).
• Maintenance the general networking objectives of system/networkoperations.
• Configured and installed Cisco 2500/2600/3601/4000 series routers and Cisco Catalyst 6500/4500/3850 T/ 3750/2950/3500 XL series switches.
• Setup and maintained Exchange 2003 and Active Directory.
• Troubleshoot and resolve issues with Active Directory user accounts.
• Designed the IP addressing scheme usingVLSMand configured IP addressing.
• Performed activities such as initial user account creation, established LAN connectivity, file and resource sharing.
• Installation, configuration and tested Cisco equipment's, IOS updates, and configured, troubleshot various LAN/WAN technologies issues for internal and external clients, monitorednetworkperformance, definednetworkpolicies and procedures.
• Intrusion Detection System installation, Cisco VPN and Layer 3 implementations.
• Handled installation, configuration and troubleshot of operating systems NT/2000, XP, and Solaris.
• Implemented VTP and Trunking Protocols (802.1q and ISL) on Cisco 3560/3750/4500 series Catalyst switches.
• Optimized OSPF and EIGRPnetworkreducingnetworkmulticast traffic.Configured EIGRP for lab environment.
• Supported IT infrastructure, consisting of desktops, laptops, servers, voice mail, email, andnetwork systems
• Maintained and troubleshot networkconnectivity problems using PING, Trace Route.
• Provided helpdesk support that involved identifying and escalating the tickets to specific groups.

Environment: Cisco 2500/2600/4000 series routers, CISCO 3560/3750/4500 series Catalyst switches, VLAN, STP, RSTP, VRRP, VTP, EIGRP, OSPF, Active Directory, Network Administration, LAN/WAN, VLSM