SUMMARY

• Experienced in installation, configuration, migration and maintenance of Network and Security appliances.
• Extensive experience in configuring and troubleshooting of routing protocols: EIGRP, OSPF and BGP.
• Experience of switching task includes VLAN, STP, RSTP, VTP, Ether channel, VPC, Fabric path.
• Implemented security policies on Cisco ASA using access - list rules, IPsec, VPN, and AAA Security.
• Demonstrated experience in developing, implementing ASA firewall configurations, analyzing and optimizing.
• Experience in configuring Palo Alto 5000, 3000, 500/200 series firewalls with Panorama NMS
• Working knowledge for ACI, info-security infrastructure, fundamentals Firewalls like, Check Point and Juniper SRX.
• Implemented traffic filters using terminal server, Standard and Extended access-lists, distribute-lists and route-map.
• Experience in configuration of Voice VLANs (VOIP), prioritizing the voice traffic over the data traffic.
• Knowledge of creating VPC, subnets, route tables, security groups, instances in Public/Private cloud like AWS & Azure.
• Experience on networking tools like Service Now, BMC Remedy, Wireshark, Solarwind, PRTG, NetBrain etc.
• Experience in physical cabling, IP addressing and Subnetting with VLSM, configuring and supporting TCP/IP, DNS.
• Responsible for campus refresh for access layer stackable technology & infrastructure to meet the enterprise standards.
• Experience working with multiple vendors and service provider like Level 3 for new circuit and for up-gradation
• Experience working with change management; helped client to optimizing process for change management.
• Responsible for documenting worked performed, creating visio diagram and defining standards at work place.
• Finely tuned analytical/critical thinking and debugging, excellent verbal and written communication skills.
• Highly enthusiastic, creative team player; ability to completing project implementation as schedule; Have great analytical, interpersonal and communication skills
• Always ready to work with latest and new emerging technologies | Versatile Team Player | Communicator and Collaborator | Committed to Excellence | Fast Learner | Energetic | Result Oriented | Highly Organized | Problem Solver | Technology Trend Follower

TECHNICAL SKILLS

Routers: Cisco ASR-1000 and ISR - 7200, 4450, 3900, 2800, 2900 series

Switches: Nexus 9K/7K/6K/5K/2K/1K, Catalyst 6500, 4500, 3800, 3700, 2950 series

Firewalls: Cisco ASA 5500, Juniper SRX series, TACACS, RADIUS, Cisco ACS

Load Balancer: Cisco CSS, F5 - Big-IP - LTM/GTM

LAN Technologies: VXLAN, VLAN, VTP, STP, RSTP, PVST, 802.1X, Ether channel, Multicast

WAN Technologies: Frame Relay ISDN, MPLS, Cisco WAAS, WAN accelerators

Networks / Securities: VPN, IDS/IPS, IPsec, ACL, Wireless - Cisco WLC, Meraki, Aruba

Route/Switch Protocols: EIGRP, OSPF, BGP, TCP/IP, HSRP, VRRP, GLBP and traffic engineering

Tools: / Packages: ASDM, Visio, Service Now, Netflow, Nmap, UNIX, Working knowledge of Python

PROFESSIONAL EXPERIENCE

Data Network Administrator/Consultant

Confidential, San Francisco Bay Area, CA

Environment: Cisco 7200/3900/2800 routers; Nexus, 3750/3850/6500/4500- X switches, remedy, service-now, HPNNMi, Solarwind, ACS, WLC, SD-WAN, Palo Alto firewalls with Panorama NMS

Responsibilities:

• Working with network/IT team for troubleshooting network issues including router, switches and F5.
• Network engineering and administration of Client's LAN, WAN and Nexus Data Center infrastructure.
• Provide technology support installing, troubleshooting, maintaining, and providing solutions to complex hardware/ software problems alerting management and other IT groups when issues or major problem are suspected to minimize client downtime.
• Monitor and control infrastructure performance in the area of response, throughput and availability. Handle times of peak service demands or as needed to solve complex problems aimed at delivering consistent quality service to clients within predefined service levels.
• Participate in various IT projects intended to improve/upgrade communications infrastructure such as evaluations of new software and hardware required to meet business needs or to make a process more cost effective.
• Cisco ASR 1001, Cisco Nexus 7010,6001,6004,5696, 5548,2K, Cisco 4507 layer 2, Cisco 4510 layer 2/3, Cisco C3750 stackable switches, Cisco C3850 stackable switches with built in wireless LAN controllers. Cisco 6509 layer 2/3 switches, Cisco 5508 wireless lan controllers, Cisco 3502 Access Points & Aruba RAP/WLC, Cisco IOS v12.2-15.4, NX-OS 6.2.X

Network Infrastructure Engineer

Confidential, Mountain View, CA

Responsibilities:

• Worked on maintenance, upgrades and operational issues on Cisco Routers 2900/3800/3900/ ASR and Switches - catalyst, IOS-XE Nexus 7k/5k/2K, ASA 5585/5520 and Infoblox DNS/DHCP support
• Help the NOC team to configure the servers, networking and F5 configuration and patches
• Operation support and designing as required and Providing Security solutions
• Maintained VPN solution for employees and code upgrade for the ASA
• Applied new Firewall(ASA) rules as required by business and Managed Cisco ACS boxes
• Worked on maintenance and upgrades Cisco wireless WLC, LWAPP APs

Network Engineer

Confidential, Richmond, VA

Environment: Cisco ASRs, 7200, 3900 and 2800 routers; Nexus 7k/5k/2k/1K, 3750, 6500, 4500 switches

Responsibilities:

• Worked with Cisco advance services to implement data center Nexus environment for new Upgraded the NX - OS for implementing new Data-Center design, support and migrations
• Consolidated multi-tiered environment of Nexus switches using VPC, VDC, UCS, VMware ESX, VCenter, and Fabric path technologies
• Configuration included VLANs & VTP, STP port features, Gateway redundancy using HSRP, enterprise security using port Security and Dot1X framework.
• Hands on creating security policy, application filters, App-ID, URL filter and threat prevention on Palo Alto.
• Migrated ~ 4000 user segment as part DNS/ DHCP Scope migration project

Security Operation Engineer

Confidential, S. Portland, ME

Responsibilities:

• Extensively worked on implementation of policies on Router, Switches and Firewall; enabling IDS/IPS signatures in Firewall and fine-tuning of TCP and UDP.
• Designed perimeter security policy, allowing access to specified services, Worked on Network Environment segmentation migrations for all PII/PHI application to securing data
• Creating and implementing security policies based on network traffic analysis for internet firewall.
• Configured Object Grouping, Protocol Handling and analyze the legitimate traffic for Class-I data.
• Performed comprehensive firewall & NAT rule analysis for data center migration project
• Performed in-depth troubleshooting for firewall, remote access, and site-to-site VPN-related issues
• Code upgraded on Cisco ASA firewall, CSM and ASDM tool.
• Opening and closing the ports based on business requirement and Pushing policies in Zone Based Firewalls.

Network Engineer

Confidential, Bloomfield, CT

Responsibilities:

• Implementation and troubleshooting of routing protocols OSPF and BGP. Also involved in complete LAN, WAN development (including IP address planning, installation, configuration, testing, maintenance etc.)
• Implemented logical design models (L2/L3, VPC, VDC, Data-center Zones, Spanning tree, VTP, VLANs)
• Proven analytical and problem-solving abilities while troubleshooting of network control protocols (QOS,, NTP, DHCP), network management protocols (CDP, FTP, TFTP, SNMP) and security protocols (SSH, HTTPS, AAA, IPSec)
• Responsible for creating and maintaining diagrams and documentation of network systems.
• Involved in Network survey and Installation networking equipment and associated software products
• Maintain network inventory, prepare documentation to pertain management and maintenance.
• Responsible for service request tickets generated by the help-desk such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support.
• Network Admin at Kenrich January ‘08- April ‘09
• Responsible for creating and maintaining diagrams and documentation of network systems.
• Perform responsibilities of supporting the daily operations of the network and troubleshooting network issues.
• Responsible for updating the IOS and configuring the new Router and Catalyst Switches.
• Designed and installed small Windows based LANs for business clients.
• Troubleshoot and resolved many user-end issues performed network testing and base lining.