SUMMARY

• Developed and architected software systems in the area of data networking/telecommunications using ‘C’, C++. Built software wif patterns enabling piecemeal growth, architectural vision and step - wise refinement.
• 15+ years' industry experience under Unix, Windows and VxWorks platforms, designing complex Object Oriented systems using Rumbaugh’s Object Modeling Technique and UML paradigm.
• Good working noledge of TCP/IP, SSL, IPSEC/IKE, IP Multicasting, HTTP, UNIX IPC, RPC, Sockets, TLI, Signals, Multi-threading, interswitch VLAN communication using ISL and 802.1Q frame taggjng.
• Well versed in building highly available, scalable server and network architectures using techniques like Dynamic VIPA, VRRP, HSRP. Good understanding of multi-core processors and issues related to cache coherency in multi-core processors.
• BPF for Performance analysis and networking. Intimate noledge of SSL/TLS, HTTP(s), Radius, 802.1x, NAT/NAPT, RDP(Reliable Datagram Protocol), TCP/UDP, IPSEC, PKI, IKE, PPP, L2TP, Certificates and TCP/IP stack in general.
• Design experience includes extensive object modeling using UML paradigm.
• Well versed in implementation scenarios for VPNs, IETF standards for IP Security architecture, security management including internet key exchange
• Worked on deployment scenarios for edge network services like QoS, IPSEC, NAT, Firewall, DHCP, PPP, and L2TP
• Knowledge of Vmware ESXi
• Git, svn, cvs source code control systems

PROFESSIONAL EXPERIENCE

Confidential

Architect/Team Lead

Responsibilities:

• Working on design and implementation of IPv6 stack for LynxOS Real time Kernel which includes IPv6 packet forwarding, IPv6 send and receive multicast streams, IPv6 packet fragmentation. Implemented sendmsg and recvmsg in los178 kernel (RFC 3542). Enhanced the stack to support Rx Timestamp. Worked on IPv6 Traffic Class implementation. Target processors are ARM and x86. Implemented RFC 8200 and RFC 4443. Worked on DO-178C Certification.
• Worked on IPv4/IPv6 Neighbor management to support synchronization of neighbor entries between linux kernel, storage container, IP container and also supported fail over. Design and implementation of management VRF, integration of management vrf wif docker infrastructure in a linux containerized environment. Responsible for design discussion, estimation for feature support, document review and code review across teams.
• Implemented IPSec, cross subnet roaming, BGP, Multicast, GPS hardware integration wif wireless routers, user account lockout on lighttpd embedded web server, RADIUS User authentication Used GPS receiver from u-blox, chipset EWM-G107. Worked on preventing SSL vulnerabilities like CCS attack and DDoS, XSS, CSRF attacks on the web server. Target OS is OpenWrt and target processors are MIPS and PPC. Worked on 802.1x to prevent rogue access points and other unauthorized devices from becoming insecure backdoors. Implemented hostapd on ABB WIFI products which includes IEEE 802.11 access point management (authentication / association), IEEE 802.1X/WPA/WPA2 Authenticator, EAP server, and RADIUS authentication server functionality.

Sr. Network Consultant

Confidential

Responsibilities:

• Worked on vendor evaluation to implement url filtering feature in the device. Design and develop IKEv2 and IPsec on the Router/Switch product. Used opensource strongswan ver 4.6.3 for linux kernel version 2.6. Designed IPSec databases like SADB and SPD. Designed IPC mechanism between IKE daemon and IPSec subsytem and routing subsystem to support high data throughput and low latency.
• Working on 802.1x port network access control, STP implementation and IGMP snooping for Juniper EX series of switches. Target OS is FreeBSD based JUNOS.
• Worked on L2/L3 multicast protocols like IGMP, PIM SM, PIM SSM, PIM BIDIR for Cat6k. Also worked on multicast forwarding for Virtual Switching System. Target OS is IOS and used Ixia fior traffic generation.
• Design and implement Linux based wireless home router suitable for low latency video streaming in the presence of data cross traffic. Working on implementing Hierarchical Token Bucket algorithm to guarantee desired rate for video traffic. Used Linux kernel version 2.6.32 and Intel dual core processor. Designed and implemented TCP based application protocol to interface wif the QOS kernel module.
• Design and implement de - multiplexer for EMC Networker to facilitate better de-dup ratio for Quantum Dxi7500 series having NAS and virtual library interface wif GbE, Fibre Channel or iSCSI connectivity. Responsibilities include working wif multiplexed modules and integrating them into Quantum core software, debug and troubleshoot. Also design and implement core system software for disk based backup, disaster recovery and data protection.
• Design and implement de-multiplexer for Symantec NetBackup.
• Design and implementation of Linux kernel drivers and enabling IPv6 in the Linux kernel for Netapp storage devices. Firewall configuration for IPv6 using IP6Tables. Target microprocessor is powerpc 405 GP and Target OS is Montavista Linux 5.0. Implemented Makefiles to build kernel, application, u-boot images for Montavista linux kernel 2.6.18 and Montavista linux kernel 2.4.
• Integrated Linux bonding driver wif the switch configured for 802.3ad (LACP) for bandwidth aggregation to increase end to end throughput. Kernel debugging using KGDB and Kprobes. Target OS is OpenSuse 10.1 version 2.6.16 and Target Microprocessor is x86.
• Worked on Extreme Operating System Infrastructure including enhancement of SSL, Web server on the switch. Integration of SSL wif the web server. Target platform is Monta Vista Linux 2.4. Used Ethereal and tcpdump for traffic analysis while testing.
• Worked on VPLS Implementation over MPLS networks. Involved in L2 learning and aging, L2 loop detection and MAC limiting, L2 VLAN port manager, Design and Implement l2lc process restart strategy. Target Microprocessors used are PowerPC and X86. Target OS is NetBSD. Used Ixia for traffic generation and 'C' under NetBSD/Linux Environment. Used Ixia for protocol testing, ethereal and tcpdump for protocol analysis while testing.
• Design and Implementation of Radius on EdgeMarc series Router to authenticate Telnet, Http,Https, SSH, getty console port. Target Microprocessor is Intel IXP 425. Target OS is uclinix 4.2.20. Worked on Boa Webserver and tinylogin on dis project. Used 'C' under Linux environment
• Worked on Cisco Architecture for Lawful Intercept in IP Networks (RFC 3924) dealing wif lawfully authorized interception and monitoring of communications. Implemented message processing to facilitate call traffic interception between CISCO CMTS router and Law Enforcement Agency (LEA).
• Used C++ under Solaris environment.
• Designed and Implemented low foot print TLS/SSL, IPSEC protocol for InterNiche embedded TCP/IP stack in the context of the Express Logic ThreadX RTOS. Used Green Hills Multi 2000 for PowerPC ver 3.5 while developing embedded TLS/SSL/IPSEC protocols on the Motorola PowerPC/MBX 860 development board. Used 'C' under Linux/Unix environment
• Worked on RTP/RTCP implementation for InterNiche embedded TCP/IP stack. Used 'C' under Linux/Unix environment
• Worked on IP fragmentation/Reassembly, IP Routing and TCP Fast Restransmit/Fast Recovery features for InterNiche embedded TCP/IP stack. Used 'C' under Linux/Unix environment
• Worked on Control Logic Computer which controls CAN controllers to facilitate automated material handling system used by semiconductor fab companies. The system is responsible for reliable, timely movement of material from a source device to the destination device. Sources and destinations can be storage systems, process tools, wafer sorters, or any other fab systems that operate on material moved by the transport system. Used C /C++ under Tornado/VxWorks 5.4 RTOS environment.
• Worked on the implementation of ARP protocol for CAN interfaces. Used C /C++ under Tornado/VxWorks 5.4 RTOS environment.
• Design and develop a reliable end-to-end transport protocol to exchange upper layer protocol data units. The transport protocol supports upper layer message segmentation and re-assembly as well as error detection and correction using Reed-Solomon algorithm. Software is used to implement real time emergency road service in automobiles facilitating reliable transmission of SMS wireless messages over Cellular network. Used C under SuSe Linux 2.4
• Worked on design and implementation of a highly available multithreaded system (BFUP Processor) to facilitate real time processing of the customer updates using UNIX IPC mechanisms like named pipes (FIFOs), sockets and message queues and also handled asynchronous processing using signals. Used C /C++ Under SUN Solaris.

Confidential

Senior Software Engineer / Tech Lead

Responsibilities:

• Worked on Corona NMS and Service Edge Router 12000 (SER - 12000) synchronization. Configuration changes in the SER-12000 may be made by multiple management stations, embedded CLI, external browser (e.g. HP-OVW) or other mechanisms. Software keeps management station in sync wif the Network Element (SER-12000) using C under VxWorks.
• Worked on SNMP agent development using Socket API, Message queues and MIB definition for SER-12000. Used Windriver Wind Net SNMP Agent development tool for VxWorks.
• Worked on messaging software architecture to facilitate communication between VxWorks tasks using queues. The message can be sent from one task to another in the same processor or to a task on a different processor over shared memory or internal IP network using C under VxWorks.
• Worked on L2TP Tunnel Switching or Multihop facilitating configuration across different administrative domains.
• Worked on implementing RADIUS MIB in the hardware and also worked on modeling RADIUS to facilitate configuration of RADIUS in the network element using C under VxWorks
• Designed and Developed network management solutions for provisioning domains such as Firewall, VLAN, OSPF, BGP, RIP, EIGRP, ATM, SONET, PPP, L2TP, IPSEC, PKI and IKE, DHCP, network address translation.
• Worked on deployment scenarios for layer 2 and layer 3 VPN (IPSEC), which involved securing L2TP tunnel using IPSEC authentication protocols like AH & ESP.
• Designed and developed multi-threaded Bulk Provisioning system, which enables rapid creation of several IP services using the ISM software. dis feature is being extensively used by Corona as a benchmark to demonstrate Bulk Provisioning capabilities vis- -vis the competition.

TECHNICAL SKILLS

Languages: 'C', C++, PERL, PASCAL

Operating Systems: Linux 2.6, SunOS 5.6, Digital UNIX, AIX

RTOS Experience: VxWorks 5.4, ThreadX, MontaVista Linux, uclinux

Networking: HTTP, SSL/TLS, IPsec, TCP/IP, RPC & SOCKETS API

Routing Protocols: OSPF Version 2, BGP, RIP, EIGRP

Design Methodologies: Object-Oriented Design (Grady Booch & James Rumbaugh, UML) and Structured Design

Distributed Technologies: ONC RPC

Network Management: SNMP v2, SNMP v2c, SNMPv3, TL1, MIB II, RMON, FCAPS, TMN Architecture

Traffic generators: Ixia

Source Code Control System: Perforce, Rational Clearcase, RCS, Intersolv, CVS