OBJECTIVE:

• Seek a challenging position in the Networking & Security domain with an organization of repute to utilize gained skills and knowledge for the growth of the organization.

SUMMARY

• Professional 5+year experience in Networking designing, installation, configuration, and operating LAN, WAN protocol
• Deep knowledge of TCP/IP protocols
• Configuring CISCO switch and Router (L2 and L3) & its hardening
• Good at implementing IPv4 & IPv6 addressing scheme& services to meet network requirements
• Knowledge of IPv6 Technologies like NDP, ICMPv6, SLAAC, DHCPv6, DNS64, NAT64, IPv6Tunneling
• Knowledge & Configuration of IPv4 Static Routing, Dynamic Routing Ripv1/v2, EIGRP, OSFP, BGP protocols
• Knowledge & Configuration of IPv6 Static Routing, Dynamic Routing, EIGRP for IPv6, OSPFv3 protocols
• VPN: Knowledge & Configuration on Site - to-Site, Remote Access IPSEC VPN and SSL VPN
• Well experienced in Cisco Router, Cisco ASA Firewall, Checkpoint Firewall
• Switching tasks include VTP, IPSEC and GRE Tunneling, VLANs, VTP, VLAN Trucking using ISL and 802.1Q, STP, RSTP, PVST+, Ether channel using LACP and PAGP,INTER- VLAN Routing, CEF and DCEF.
• Implemented redundancy with HSRP, VRRP, GLBP.
• Expert level configuration of Layer 2 technology including VLANS, STP, RSTP, PVST, MST, VTP in addition to port-security, Uplink fast, Backbone fast, Port fast, BPDU guard & filter.
• Expertise in implementing Security policies like NAT, PAT, IDS, IPS, VPN and Access lists
• Good Knowledge with the technologies MPLS, VPN, WLAN, NAT, Multicast, Routing, Frame relay, SNMP
• Involved in configuration and setup of DHCP, FTP and TFTP.
• Experience in monitoring and analyzing the load balancing of network traffic using Wireshark and Solar Winds.
• Network connectivity troubleshooting, ping, trace route, telnet.
• Worked on network topologies and configurations, TCP/IP, UDP, Frame Relay, Token Ring, bridges, routers, hubs and switches.
• Well experienced in configuring GLBP, ICMP, PPP, PAP, CHAP and SNMP.
• Knowledge & Configuration of Cisco ACL, NAT, AAA, TACACS+ & RADIUS Server on Cisco Secure ACS
• Experience in Layer3 routing and Layer2 switching experienced dealing with router configurations like 6509,6500, 5060, 4500, 3750 and 3500XL series and switches 9K, 7k, 5k, 3k, 2k.
• Expertise understanding in implementing and configuring F5 Big-IP LTM-3900, and 6900 LOAD BALANCERS, maintained policies.

TECHNICAL SKILLS

Cisco Routers: 1700,1800,2500,2600,3600,3800,7200,7600

Cisco L2 & L3 switches: 2900,3560,3750,4500,4900,6500

LAN Technologies: VLAN,VTP,STP,RSTP,PVST,802.1x

WAN Technologies: HDLC, PPP, ATM, SONET, MPLS, VPN, IPSec-VPN

Network Securities: NAT/PAT, VPN, Filtering, IPSec VPN,ACL, Cisco ASA Firewall and Palo Alto Firewall,checkpoint firewall

Routing Protocols: RIP,IGRP,EIGRP,OSPF,BGP,IS-IS,HSRP,IPv6

Routed Protocols: TCP/IP HTTP RAID

Network Managements: SNMP, SSH, Telnet, ICMP,Netflow

Tools: and skill: MATLAB, wireshark,solarwinds

Operating System: Windows,MS DOS,UNIX,Linux

PROFESSIONAL EXPERIENCE

Confidential, VA

Network Engineer

Responsibilities:

• Responsible for setting up the infrastructure environment with majority of Cisco & ASAappliances apart from various other equipment.
• Responsible for design VPN technologies including concepts, VPN configuration, and VPN deployment with good understanding of networking and application protocols (TCP/UDP, IPv4/IPv6), and security protocols (SSL, IPSEC, IKEv2, PKI). knowledge of (1) Internet connectivity; (2) routing concepts (3) firewall concepts (4) workstation and OS configuration, setup, and Windows troubleshooting.
• ASA design and installation (Application and URL filtering, Threat Prevention, Data Filtering)
• Successfully installed checkpoint firewalls to protects Data Centre and provided L3 support for routers/switches/firewalls
• Implemented Positive Enforcement Model with the help of ASA Networks.
• Implemented Zone Based Firewalling and Security Rules on the checkpoint Firewall
• Configured routing protocols like MPLS, OSPF and troubleshooting layer3 issues. Configuration of routing protocols EIGRP and BGP for small to medium sized branches based on company branch standards, including redistribution and route maps.
• Administration and diagnostics of LAN and WAN with in-depth knowledge of TCP/IP, NAT, PPP, ISDN and associatesnetworkprotocols and services.
• Maintained and managed networks running EIGRP and BGP routing protocols.
• Regularly performed firewall audits around Checkpoint Firewall-1 solutions for customers.
• Provided tier 3 support for CheckpointFirewall-1 software to support customers.
• Work on Checkpoint Platform including Provider Smart Domain Manager. Worked on configuring, managing and supporting Checkpoint Gateways.
• Configuration of routing protocols EIGRP and BGP for small to medium sized branches based on company branch standards, including redistribution and route maps.
• Configured Client VPN technologies including Cisco’s VPN client via IPSEC
• Providing VPN and SSH access as per role and considering security breaches. Performing Firewall rule analysis and make decisions on risk to customer network

Confidential

Network Engineer

Responsibilities:

• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF and BGP.
• Configuration, Testing, Planning, Design of Cisco routers, Cisco Catalyst 2900,3570 and 6500 switches and Migration for Frame-Relay network to MPLS based VPN for customer’s WAN infrastructure.
• Experienced in working with Cisco NX-OS and IOS.
• Deployed VSS on Cisco Catalyst 6509 switches and provided post-deployment support for issues.
• Time to time upgrade network connectivity between branch office and regional office with multiple link paths and routers running HSRP, EIGRP, in unequal cost load balancing to build resilient network.
• Manage the operations of the DNS/DHCP and infrastructure Operate system upgrades, ensuring various scripts and matched with API versions.
• Responsible for network performance, monitoring/analysis, proactive troubleshooting and capacity analysis of network and proposing improvements and design changes beneficial to the business.
• Responsible for Network cabling, dressing, labeling and troubleshooting network drops onsite.
• Setting up VLANs and configuring inter-VLAN, Trunk protocol, STP, PVST, RSTP, port aggregation & link negotiation on Ethernet channel between switches.
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF and BGP.
• Knowledge of Installation and Configuration of T1, Frame Relay, and ISDN, ACE Authentication, Radius reporting, and IP Services.
• Setting up VLANs and configuring inter-VLAN, STP, PVST, RSTP, port aggregation & link negotiation on Ethernet channel between switches.
• Designed and implemented security systems including various Cisco IOS ACLs, Context-Based Access Control, Palo alto firewall, Network Intrusion Detection Systems, AAA Cisco Secure Access Control Server (Radius/TACACS+) and Linux syslog servers. Planned, configured and operated IPsec VPNs.

Confidential

System Administrator

Responsibilities:

• Responsible for the installation, configuration, maintenance and troubleshooting of the company network. Duties included monitoring network performance using various network tools to ensure the availability, integrity and confidentiality of application and equipment
• Configured and troubleshoot OSPF and EIGRP.
• Involved in trouble shooting of DNS, DHCP and other IP conflict problems
• Planning and configuring the routing protocols such as OSPF, RIP, and Static Routing on the routers.
• WAN Infrastructure runs OSPF & BGP as core routing protocol.
• Support various routers like 2600/3600/7200 series routers.
• Tested authentication in OSPF and BGP.
• Switching related tasks included implementing VLANS, VTP, STP and configuring on the Fast Ethernet channel between switches
• Responsible for configuring a site to site VPN on VPN Concentrator series between Head office and Branch office
• Installation & configuration of Palo alto firewall.
• Configured Firewall logging, DMZs & related security policies& monitoring
• Worked on Cisco Layer 2 switches (spanning tree, VLAN).
• Hands on experience working with security issues like applying ACL's, configuring NAT and VPN
• Responsibilities also include technical documentation of all upgrades done. Attending meetings and technical discussions related to current project.
• Prepared engineering documents and network diagrams in Microsoft Visio.
• Documented firewall changes and request forms to respective vendors.
• Vendor co-ordination for hardware issues and assessment management.
• Ability to handle multiple complex tasks, with tight deadlines concurrently.

Confidential

Network Admin

Responsibilities:

• Configured RIP and EIGRP on 2600, 2900 and 3600series Cisco routers.
• Involved in troubleshooting of DHCP and other IP conflict problems
• Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 4500series Cisco Catalyst switches
• Provided on-call support for installation and troubleshooting of the configuration issues
• Configured Standard, Extended, and Named Access Lists to allow users all over the company to access different applications and blocking others
• Planned and implemented Sub-netting, VLSM to conserve IP addresses.
• Configured STP for loop prevention and VTP for Inter-VLAN Routing.
• Performed troubleshooting of connectivity problems using PING, and Trace route.
• Provided Technical support for improvement, up gradation, and expansion of the existing network architecture
• Done troubleshooting of TCP/IP problems and connectivity issues in multi-protocol Ethernet environment.IOS upgrade 1900, 2900, 3500 series Cisco Catalyst switches and 2500, 2600, 3600 series Cisco routers using TFTP.