SUMMARY:

• Over 7+ years of experience in Network design, Security, Tier support of Networks in various environments.
• Responsible for service request tickets generated by the halpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support.
• Extensive experience working onCiscoand Juniper routers/switches in complex environments with multiple ISPs.
• Experience working onCiscoCatalyst Series3750, 4500, 4900, 6500; Nexus 2000, 5000, 6000, 7000 and 9000 series switches.
• Experience in Network Planning, Implementing, Configuring, Troubleshooting, Security and testing of networking system on both Cisco and Juniper Networks in physical and cloud - based environments
• Worked onCisco7200, 3800, 3600, 2800, 2600, 1800 series Routers andCisco2900, 3500, 4500, 5500, 6500 and Nexus 5K series switches and Sound noledge of Routing and Switching concepts and MPLS design.
• Extensive noledge on Juniper SRX configurations on various platforms of Junos
• Hands On Experience in Amazon Web Service (AWS) provisioning and good noledge AWSservices like EC2, S3, AMI, ELB (Load Balancers)
• Expert in dealing with Networking Protocols and Standards such as TCP/IP, OSI, UDP, Layer 2 (VLANs, STP, VTP), Routing Protocols (RIP, EIGRP, OSPF, BGP),WANtechnologies (Frame relay, IPSec, VPNs, MPLS), QoS.
• Conversions to BGPWANrouting. Which will be to convertWANrouting from OSPF to BGP (OSPF is used for local routing only) which involves newwanlinks.
• Experience with Firewall migrations from PIX firewall to Cisco ASA and Juniper SRX firewall appliances.
• Experience in troubleshooting NAT configurations, Access-Lists (ACL), and DNS/DHCP related issues within the LAN network.
• Experience working on Cloud Computing Virtualization using VM ware ESXi 4.0 and Windows Hyper-V.
• Worked in the area of Virtualization with VMware VSphere 5.1 and 5.5, 6.0, ESXi 6.0, 5.5, 5.1, vCenter server 6.0, 5.5 and 5.2.
• Provided the technical integration of public and private Cloud services, includingAWS, Microsoft Azure, Office 365, Rackspace & VoIP/SIP providers to increase infrastructure agility due to business demands.
• Extensively used TCP/IP tool like TELNET for remote login to the routers and SSH for secure login.
• Installed and configuredCiscoUnified Communications Manage(UC).
• Experience in risk analysis, security policy, rules creation and modification ofCiscoASAnetworks.
• dis global role halped expand my expertise into other areas such as Cisco UCS, Checkpoint Firewalls, Cisco ASA, and VMware NSX.
• Experience on a project to build out a software defined data center based on Cisco ACI, VMware NSX and F5 load balancers
• Support and maintain VMware Infrastructure Running on Cisco Ucs and Vsphere.
• Established VPN tunnels betweenCiscorouters andCiscoFirewalls and Palo Alto Firewalls.
• ImplementedCiscoApplication Centric Infrastructure (ACI) as a solution for data centers using a Spine and Leaf architecture
• UsedCiscoACI Fabric which is based onCiscoNexus 9000 series switches andCiscoApplication Virtual Switch (AVS)
• Performed IOS Software upgrades on switchesCisco6509, 4510, 3750 andCiscoASR for compatibility withCiscoISE.
• Configure all Palo Alto Networks Firewall models (PA-2k, PA-3k, PA-5k etc.) as well as a centralized management system (Panorama) to manage large scale firewall deployments.
• Good noledge in SD-WAN technology in involving discovery design and implementation of client's network.
• Knowledge of JUNOS platform and worked with JUNOS upgrade of Juniper devices.
• Experience in A10 and F5 Load balancers such a BIG-IP LTM and GTM modules.

TECHNICAL SKILLS:

Routers, Switches: Cisco (Nexus; 2k, 6k, 7k, 9k, ASR, ISR) Juniper (MX, M and SRX, vSRX) Alcatel (SR7750, OS6850) Nortel (DMS500, DMS250) Foundry/Brocade

Network OS and Software: SDN, Open Daylight, Open Flow, VIRL, Nexus, NX/OS, ACI, Cisco IOS-XE, JunOS, ScreenOS, AOS, SR/OS

Cloud: AWS, Azure, Google, Aviatrix Multi-Cloud Network Architecture (Overlay)

Load Balancers: A10, F5 BigIP/IQ, Viprion, LTM, GTM, ASM. AFM, Cisco ACE, CSS11000, Foundry/Brocade

Protocols: MPLS, VPLS, VOIP, ATM, SONET, Frame Relay, POS, BGP, EIGRP, OSPF, SNMP, ISIS, TCP/IP, IPv4, IPv6, IPSec, SSL/TLS, VxLan, FabricPath, ACI, DMVPN, iWAN, SD-WAN

Packet Analysis: Wireshark, T-bird, RF Analysis

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q

WAN technologies: Frame Relay, ISDN, ATM, MPLS, Riverbed Steelhead SD-WAN, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONET

Packet and Application Firewalls: F5 BigIP ASM, AFM, Juniper SRX, Palo Alto, Cisco ASA/PIX/FWSM

Software Security: Reverse engineering, IDApro, GCC, GDB, ASM, SoftICE, Windbg, MS Visual studio, OllyDbg, Secure Coding Practices and Code Review

SD-WAN: Viptela, Meraki, Fortinet, SilverPeak, VeloCloud

VPN: GRE, mGRE, SSL, IPSec, DMVPN, Aruba Global Protect, Cisco AnyConnect

Network / Security Automation: SDN- SDN, Open Daylight, ACI, Firemon,Tufin, OpenFlow, REST

Virtualization: VMware ESXi, KVM, Containers, Zones, HyperV, AWS, GCE

Programming and Scripting: Bash, Shell, Python, REST, Java, TCL, Perl, C++, Pascal, Dot Net, Low-Level Assembly and C

Fiber Optic Carrier Integration: SONET, DWDM, ATM, F/R, ISDN, PSTN, T1/E1 T3/E3, Metro Ethernet, MPLS

Database: PostgreSQL, MySql, pgSQL, PL/SQL

Operating System: Windows 7/XP, MAC OS X, Windows Server 2008/2003, Linux, Unix.

PROFESSIONAL EXPERIENCE:

Confidential, Chicago IL

Senior Network Security Engineer

Environment: Cisco 3850/3750/3500/3650/6500/7600 switches, SÁ 5500 firewall, Palo Alto PA-3060 firewall, ASR router 1002/1006,CiscoACI, Juniper SRX,CiscoISE, AWS, AWS FLANDERS. Aw Cloud forge, AWS Blade runner, juniper EX-2200, EX-4200, M-320 router, SD-WAN, AWS Builder Hub, juniper SRX 5800 Fire wall, F5 LTM 1600/6400, Citrix NetScaler, OSPF, BGP, EIGRP, IPv4, IPv6VLANS, LAN,WAN

Responsibilities:

• Installing and configuring newCiscoequipment includingCiscocatalyst switches 3850, 3750, Nexus 5548 and Nexus 2k as per the requirement of the Organization.
• Completed the migration of L2 layer and L3V1 layer networks to L3V2 network design by consolidating, designing and implementing the L3V2 Console network configuration in AWS PROD and EC2 fabrics.
• Responsible for design and installation of new Quanta Lb9 routers and juniper QFX or 96 port routers as per new L3V2 network design model.
• Responsible for consolidating current design models after validating the cabling and patching feasibility on each AWS data center.
• Cut sheets creation for connection between console access switches, routers, aggregation and core routers in both fabric of AWS.
• Configured AWS IAM and Security Group in Public and Private Subnets in VPC.
• Working experience with creating XML definition file and 0+ jinja template files using AWS tool called BLADERUNNER
• Setup and install Tufin Cluster in virtual environment.
• Worked on Network Security policy management, Firewall management and audit for network using Tufin.
• Worked on Aruba wireless controllers 3600/7210 and Aruba wireless access point 135, 225 and 275.
• Migrated fromCisco3650 switches to Aruba 3810 series switches.
• Regular upgrade and maintenance of Infrastructure, Installing, configuring, and maintaining Cisco Switches (2900, 3500, 7600, 3700 series, 6500 series) Cisco Routers (4800, 3800, 3600, 2800, 2600, 2900, 1800, 1700, 800) Cisco Router and Switches, Juniper Routers.
• Configure and installationCiscoprime infrastructure to deploy IWAN.
• Provide NSX Micro-Segmentation Security for ASW Data Center.
• Configured RIP, PPP, BGP and OSPF routing, and Involving in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies and Creating and provisioning SRX firewall policies.
• Securitypolicy review and configuration in Palo Alto and Juniper SRX Firewall in US offices and Datacenter.
• Design, deploy, test, and implement in support of Cloud platform solutions of Open Stack and VMware infrastructure.
• Managed application micro-segmentation project with VMware NSX T to create secure zone in data centers and cloud deployments
• Experience working on Cloud Computing Virtualization using VMware NSX and Windows Hyper-V.
• Implementations of Network and Devices for Network SD-WAN environment.
• Designing and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel onCISCOCatalyst Switches 3500, 3650, 7600.
• Focused on working withCiscoChannel partners to build practices aroundCiscoACI.
• ImplementedCiscoApplication Centric Infrastructure (CiscoACI) as a solution for data centers using a Spine and Leaf architecture.
• Troubleshooting Issue in Production and QA environment for Business and Developer customers using AWS networking services in their architecture like Route 53, Virtual Private Cloud (VPC), Elastic Load Balancing (ELB), EC2 and so on.
• Expert in troubleshooting production issues and resolving incident and change tickets related toCiscoACI.
• Strong LAN and Data Center Networking (IP Routing, LAN Switching, Firewalls, ACLs, DNS, QoS, IPv4, IPv6 etc).
• Established IPSEC VPN tunnels withASA5500 series Firewall between some branch offices & headquarters.
• Successfully Design and installed Palo Alto PA-3060 firewalls to protect Data Center and provided L3 support for routers/ switches/ firewalls.
• Provide data center support upgrading and configuring ASR 5k device to support SDM/SD-WAN
• Handled and participated in migrating AWS PROD devices from L3V2- to L3V2+ network design.
• Identifying the current design on each fabric by plotting the network graphs and checking the diagrammatic view of the data center through an AWS tool- Cloud Forge.
• Maintenance and Network control with secure DNS, DHCP and IPAM using Infoblox .
• Managing theAWSsecurity policies andnetworkconfiguration, includingAWSdirect connect, vpn failover, Multiple VPC's, user and site access to servers and accounts.
• Created S3 buckets in theAWSenvironment to store files, sometimes which are required to serve static content.
• Configured and implemented F5 BIG-IP GLB and LTM load balancers.
• Worked on F5 LTM series like 1600, 6400 and Viprions for the corporate applications and their availability.
• Migration fromCiscofirewalls to Palo Alto firewalls platforms PA 4000 and PA 500 and PA- 200 firewalls network technologies including Optical VoIP VPN SAN switching and routing.
• Extensively worked on four End-to-End Datacenter Migration including application servers, Database Servers, Web servers and cloud (AWS/Azure) Migration.
• Expert in troubleshooting production issues and resolving incident and change tickets related toCiscoACI.
• Experience on dealing withCiscoISE Secure Network Server 3515 and other network security products.
• Used Python scripting for network sniffing and managed parameters for pool of servers and updated, automated and migrated different services and software by means of Ansible.

Confidential, Beloit, WI

Network & Security Consultant

Environment: Cisco 6500/4510/4500 X/4948/3560X switches, AWS, Nexus 9000, 5000,3000, 9504, 9300, 3200, 2308,CiscoASR 1k/7200/3925E/2951E GSR 7000/12000 Routers,CiscoISE, Aruba 7200/3600 wireless controller, Nexus 2k/5k/9k,CiscoNexus 7000,ASA 5500/5510/5540 fire walls, Windows 2000/2003/2008/ R2/2012, Juniper SRX firewall, MX routers, Palo Alto firewalls, SSLVPN, F5 load balancer LTM >M, Citrix Net scalar, BGP, EGBP, VPC, VDC, OSPF

Responsibilities:

• Installing, Configuring and troubleshootingCiscoRouters (ASR1002X, 3945, 3845, 2800, 3600) and Switches to perform functions at the Access, Distribution, and Core layers.
• Implemented AWSnetworking services Amazon VPC for the Private/PublicCloud, EC2 instances, IAM, and S3.
• Deliver Solution to improve Cloud architecture, deployment for AWS and Azure clouds.
• Design, configure, and administer Juniper MX routers, SRX Firewalls, Cisco routers & switches.
• Design and configuring of OSPF, BGP on Juniper Router and SRX Firewalls.
• Establish AWStechnical credibility with customers and external parties.
• Help customers build scalable, resilient, and high-performance applications and services onAWS.
• Configured Policies on Juniper Net screen and SRX firewalls and Palo alto as well.
• Develop /capture/document architectural best practices for building systems onAWS.
• Create Azure virtual machines in Azure and AWS, Set up domain controllers in Azure and AWS.
• Installing, Maintaining and Troubleshooting ofCiscoASR 1K, 7200, 3925E and 2951E Routers andCisco6500, 4510, 4500-X, 4948, 3560X, 3750X and 2960S Switches for deployment on production.
• Configuration and management of network routers (Cisco 6500, 7K; Juniper MX) and switches (Cisco 3850, 3750X, 3750, 3550; Juniper EX).
• AWS data backup (snapshot, AMI creation) techniques, along with data-at-rest security withinAWS.
• Responsibilities include software upgrade, license activation, configuring/installing new GSR router 7000,12000, Nexus switch 9000, 5000,3000, 9504, 9300, 3200, 2308, F5-5050 and maintaining network documentation.
• Created and resolved Palo Alto and Checkpoint Firewalls Rules, Routing, Pushed Policy.
• Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering).
• Configured rules and maintained Palo Alto Firewalls & analysis of firewall logs using various tools.
• Experience working with High performance data center switch like nexus 9000, 7000 series.
• Configuration of Fabric path and connectivity between Nexus 5K and Nexus 7k.
• Hands-on Experience withCISCONexus 7000, Nexus 5000, and Nexus 2000 platforms.
• Automated network implementations and tasks and designed monitoring tools using python scripting.
• Worked on F5 BIG IP LTM 3600 load balancers to configure Nodes, Pools and VIP's on a need basis.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Configured DNS and DHCP for servers using Infoblox.
• Completed basic configurations on the F5 Big-IP LTMs and GTM load balancer on existing network to split traffic on web-servers.
• Expert in design, configuration and deployment of F5 Solutions with extensive experience working with APM and ASM technologies.
• Creation of ASM policies (Application security) on F5 Virtual servers.
• Experience with Using GTM, APM & LTM F5 component to provide 24"7 access to applications.
• Responsible for configuration of A10 load balancer.
• Creating, configuring and Troubleshooting VIP's for (EBL & EFL Extranet networks) on F5/A10networks.
• Configured and Created wireless sites using theCiscoMeraki System dashboard.
• Implemented site to site VPN onCiscoMeraki MX64, MX65, MC84, and MX400.
• Experience with LAN protocols like VSS, STP, RSTP, MST, VTP, VLAN.
• Administrated LAN andWANwith of TCP/IP, NAT, PPP, ISDN and associates network protocols and services.
• ConfiguredCiscoISE for Wireless and Wired 802.1x Authentication onCiscoWireless LAN Controllers, Catalyst Switches, andCiscoASAFirewalls.
• Responsible in troubleshooting onCiscoISE added new devices on network based on policies on ISE.
• Hands on experience in Aruba S2500 switches, Aruba 7200, 3600 series wireless controllers.
• Performed site refreshes onCiscoswitching and Aruba wireless infrastructure.
• Integrating Panorama with Palo Alto Firewalls, managing multiple Palo Alto Firewall using Panorama.
• Implementation of L3 MPLS-VPN and Migration of branches to the new MPLS cloud4.
• Worked with engineering team to resolve tickets and troubleshoot L3/L2 problems efficiently.

Confidential, Austin, TX

Network Consultant

Environment: Cisco2960,3750,3850,4500,6500 switches andCisco3945, ASR 1004,1002-X routers,CiscoASA-5585,5500,5520,5555 firewalls,Juniper SRX, PaloAltoPA-5260,5060,3060,3020,500 firewalls,CiscoNexus 7K/5K/2K, LAN, OSPF, BGP, EIGRP,CiscoISE, F5 Big-IP LTM & GTM.

Responsibilities:

• Performed regular upgrades to network infrastructure components and diagnosis of complex networking problems by developing detailed implementation plans including communication strategies, validation and back out procedures.
• Provided support for all network security-related issues or queries including existing and new technologies, vendors and applications.
• Coordinating with the network staff to develop and enhance processes and procedures for disaster recovery.
• Responsible for network uptime and all changes are executed on time, in accordance with service level agreements with the business.
• Implemented a backup strategy along with a disaster recovery plan in the event that the servers or critical network components should go down to prevent lost revenue.
• Troubleshooting, installing and supporting agencies site-to-site and remoteASAVPN connections throughout the Vendors.
• Core Network Migrations and Replacements for the devices with end-of-life and end-of-support, which also includes theCiscoASAtoPaloAltofirewall migration across multiple agencies.
• Successfully installedPaloAlto(PA-5260,5060,3060,3020) firewalls to protect Data Center and provided L3 support for routers/switches/firewalls.
• Designed and replaced agingCiscoASAFirewall architecture with new next generationPaloAltoappliances serving as Firewalls, URL and application inspection.
• Integrated and ConfiguredCiscoASAFirewalls with ISE to the Posture policy compliance perform CoA for remote VPN IPSec, SSL AnyConnect users.
• ConfiguredCiscoISE and switches to authenticate and authorize devices and users.
• Managed F5 Big-IP GTM/LTM appliances to include writing iRules, SSL offload and everyday tasks of creating VIPs.
• Configuring and troubleshootingCiscoASAFirewalls for Site to site VPN tunnels.
• Configuring failover and working on SSL-VPN when in active/standby failover onCiscoASA
• ManagingCiscoASAFirewalls using ASDM (Creating and Modifying Rules)

Confidential, Austin, TX

Network Consultant

Environment: Ciscorouters 1601,1721, 1841, 2505, 7507 and 7513;CiscoSwitches 2926, 3750, and 6509 series, OSPF, MPLS, EIGRP & RIP, AWS

Responsibilities:

• Implemented and supported local and remote usingCiscodevices (Ciscorouters 1601,1721, 1841, 2505, 7507 and 7513;CiscoSwitches 2926, 3750, and 6509 series).
• Configured Policies on Juniper Net screen and SRX firewalls and Palo alto as well
• Implemented and supported disaster recovery facility for fail-over purpose, which included the backbone routers, VPN and DMZ networks.
• Configured static/dynamic routing for VPN customers with Managed Router Service (MRS) and customers using Proxy Radius servers. Also implemented Network Address Translation (NAT) on managed routers
• Troubleshot network connectivity/performance problems (serious fault investigation management and resolution).
• Monitored LAN and WAN links and handled capacity planning which included installation, configuration and maintenance ofCiscodevices (Ciscorouters 1603, 2500, 7507 and 7513;CiscoCatalyst Switches 2926, 5005, 5505, 6509 and 8540).
• Troubleshot network connectivity /performance problems and provided resolutions.
• Tested L2 protocols (VLAN, STP, flavors of STP, PVST, HSRP, VRRP& LACP) and routing protocols (OSPF, MPLS, EIGRP & RIP). Testing network features: NAT, ACLs, Multicast, Traffic shaping, queuing on an L2 and L3 switches.