SUMMARY:

• Seven plus years of experience in designing, implementing and managing enterprise class network security solutions and devices with top notch organizations such as HP, IBM and Cognizant
• Deep hands on experience in managing complex network security environments for financial and banking clients such as Bank of America and UBS
• Expert in Design, Deploying, Configuration and managing F5 Networks BigIP 2000,4000,5000 Series, LTM 8900,6800, 6400 Series, GTMs 10000, 11000 and Viprion 4400, 4800 Series
• Deep hands on experience in migrating legacy F5 appliances to newer versions appliances
• Proficient in Configuring Checkpoint Firewall (Version R62, R65 and R71), Juniper ISG 1000/2000, and CISCO ASA firewalls as Standard and Distribution deployment
• Highly experienced in Installing, Configuring and Troubleshooting the network devices Cisco Catalyst 2900, 3500, 3700, 4500 and 6500 series, Cisco Nexus 7000, 5000, 2000 series Switches and Cisco Routers 7200, 3700, 3800, 2600
• ITIL foundation certified and worked in Chang, Incident and Problem Management roles
• Expertise in Configuring, implementing and troubleshooting the Routing Protocols OSPF, EIGRP, RIP, BGP, and switched L2 networks VLANs, Trunking, VTP, STP, PVST, HSRP and VRRP
• Hands on experience configuring and implementing IDS/IPS, proxy servers and Authorization, Authentication & Accounting (Radius, TACACS+)
• Hands on experience in configuring, implementing and troubleshooting DNS, DHCP, and BIND
• High level experience on Network Monitoring tools like Solar winds, HP open view, Wiresharkts

TECHNICAL SKILLS:

Load Balancer: BigIP 2000, 4000, 5000, 7000 series, F5 LTM 8900, 6400, 6800, GTM and 3 - DNS

Firewalls: Checkpoint GAIA, R72, R65; Cisco ASA 5505, 5510, 5550; Juniper ISG 1000/2000

Switches: Cisco Catalyst 2900, 3500, 4500, 6500 series, Nexus 7000, 5000, 2000 & NX-OS, Cat-OS, IOS

Routers: Cisco 1750, 2600, 2800, 3800, 3900 &7200 series with IOS, IOS-XE & IOS - XR

Routing: OSPF, EIGRP, BGP, RIP-2, PBR, Route Filtering, Redistribution, Summarization, Static Routing

Switching: VLAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switching, Multicast

Operations, Layer 3 Switches, Ether channels, Transparent Bridging, and Data Center Switching

LAN/Features: Ethernet, Fast Ethernet, Gigabit Ethernet, 10 Gigabit, 40 Gigabit Ethernet, HSRP, GLBP, VRRPNAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP

AAA Architecture: TACACS+, RADIUS, Cisco ACS, LDAP

Network Tools: Wire shark, Fiddler, Solar Winds, and Cisco Works

PROFESSIONAL EXPERIENCE:

Confidential -Champaign, IL

Senior Network Consultant/ Load Balancer Engineer

Responsibilities:

• Performed migration of legacy Bigip and 3-DNS devices to newer version of LTM 8900 boxes
• Participate in design authority and CAB meetings to review and approve load balancer configurations
• Configured SSL Termination/offloading on the LTM boxes; Installed and renewing SSL s
• Design and engineering Load balancing solutions for multi-tiered applications deployed across multiple data centers and DMZ security constructs
• Applied iRules such as cookie persistency, SSL termination and SSL initiation, redirection of URL from http to https for application specific e-commerce technology
• Migrated legacy 3-DNS wider ip's to GTM sync groups
• Troubleshoot and resolve load balancers related sev1 and sev2 incidents
• Design and implement GTM wider ip's including required topology and dns setup
• Work with technical project manager and business teams to design virtual server, pool, lb methods
• Implement and configure http, https profiles, ecv health monitors
• Provide rotational on-call engineer services to resolve sev1 and sev2 incidents

Confidential, New York, NY

Lead Engineer, F5 Network Engineering

Responsibilities:

• Engaged in various migration projects like migrating Version 9.x load balancers to Ver 10.x. and 11.x
• Gathering details from customers and providing best security infrastructure solutions with F5 load balancers, Check Point/Netscreen firewalls and Blue Coat proxies
• Design, Build, and Implement various solutions on Check Point Firewalls, Blue Coat Proxies, F5 Load balancers and F5 Global Traffic Managers.
• Creating Virtual IP address, Pools and Persistence profiles on F5 LTMs.
• Create complex iRules for URL redirections, HTTP header-insertion and modifications
• Creating Wide IPs with various load balancing methods like, Global Availability and Topology
• Take ownership of escalated incidents and ensure timely resolution

Confidential

F5 Load Balancer Engineer

Responsibilities:

• Performed migration of legacy Bigip and 3-DNS devices to newer version of LTM 8900 boxes
• Participate in design authority and CAB meetings to review and approve load balancer configurations
• Configured SSL Termination/offloading on the LTM boxes; Installed and renewing SSL s
• Design and engineering Load balancing solutions for multi-tiered applications deployed across multiple data centers and DMZ security constructs
• Applied iRules such as cookie persistency, SSL termination and SSL initiation, redirection of URL from http to https for application specific e-commerce technology
• Migrated legacy 3-DNS wider ip's to GTM sync groups
• Troubleshoot and resolve load balancers related sev1 and sev2 incidents
• Design and implement GTM wider ip's including required topology and dns setup
• Work with technical project manager and business teams to design virtual server, pool, lb methods
• Implement and configure http, https profiles, ecv health monitors
• Provide rotational on-call engineer services to resolve sev1 and sev2 incidents

Confidential

Technical Lead

Responsibilities:

• Work with business teams and project managers to design and deploy load balancer solutions for newer applications
• Involved in writing iRules for the LTM and updating the existing rules based on the Engineering team’s guidance
• Worked with iRule management like loading rules, writing iRule syntax using TCL language and iRule extension to TCL
• Dealt with creation of VIP’s, creation of Pool members and allocation of multiple application to the various pool slots
• Experience in dealing with Bigpipe commands, Bigpipe configurations, and command line tools like Tcpdump, Qkview, Bigtop and Bigstart.
• Perform 3-DNS and GTM wide ip’s configuration and implementation
• Configure plug proxy connections using bluecoat proxies, firewalls and load balancers
• Designing and implementing new Netscreen firewall environment
• Configure and implement firewall rules both through cli and NSM
• Set up, implement and troubleshoot ipsec site to site VPN for bank’s third party connectivity
• Provide level 3 incident management support for all network incidents

Confidential

Senior Network Engineer

Responsibilities:

• Setup, configuration, troubleshooting and testing of IPSEC site-to-site VPNs and SSL VPN on Cisco ASAs, Checkpoint and Juniper Firewalls
• Ensurenetwork availability and integrity through preventive maintenance and upgrade
• Configure and support NATs, access-lists, and routing on Cisco routers Cisco ASA/PIX firewalls, routers and switches
• Network Operations and support by providing Tier-2 and Tier-3 support to WAN and LAN related issues including HSRP, VLANs, VTP, STP, RSTP, TRUNKING, SPAN and RSPAN, EIGRP, RIP, OSPF, BGP.
• Stacked, configured 2960 series switches and connected with Nexus 7000 series switches creating Vpc, spanning tree, Trunk and redundancy for failover.
• Monitored and analyzed Intrusion Detection Systems (IDS) & Intrusion Prevention System (IPS) to identify security issues for remediation.
• Supported core network consisting of Cisco 7200 series routers running multi area OSPF. Implemented stub/Totally stub areas as per requirements.
• Implemented IP addressing, Subnetting, Route summarization and Distribution
• Configured Routing protocols such as VLANs, VTP, STP, MSTP, VRRP and HSRP
• Configured STP for switching loop prevention, and VLANs for data and voice along with configuring port security for users connecting to the switches.
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site to site VPN and remote VPN
• Configured NATs, ACL and routing on Cisco routers, firewalls, and layer 2 & layer 3 switches.
• Configured policy based routing for specific traffic, route filtering with route maps and route redistribution.
• Implemented Network monitoring tools Wireshark and ManageEngine IT360.
• Configured and implemented TACAS+ and Radius for network authentication