SUMMARY

• 8+ years of experience in networking, installing, configuring and maintaining network devices.
• Hands on experience in configuring Cisco Catalyst 2960, 3750,3850, 4500, 6500 and Nexus 3000, 5000, 6000, 7000, 9000 series switches and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers.
• Implementing IP addressing schemes, LAN/WAN protocols, IP Services, to meet network requirements in different environments.
• Expertise in Configuration of Virtual Local Area Networks (VLANS) using Cisco routers and multi - layer Switches and supporting STP, RSTP, PVST, RPVST along with trouble shooting of inter-VLAN routing and VLAN Trunking using 802.1Q.
• Implemented redundancy with HSRP, VRRP, GLBP, Ether channel technology (LACP, PAgP).
• Proficiently implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, Route Maps and route manipulation using Offset-list.
• Hands on experience in deployment of GRE tunneling, SSL, Site-Site IPSEC VPN and DMVPN.
• Extensively worked on Cisco catalyst 6509 and implemented VSS along with VDC and VPC on Nexus 5505, 7009 switches.
• Comprehensive expertise in the implementation of optimization, analysis, troubleshooting and documentation of LAN/WAN networking systems.
• Working knowledge on configuring access lists. Troubleshooting DNS/DHCP issues within the LAN network.
• Extensive hands-on experience in working with complex routed LAN and aironet networks, and preparing technical documentation.
• Involved in troubleshooting network traffic and its diagnosis using tools like ping, traceroute, WireShark, TCP/IP dump and Linux operating system servers.
• Implemented many number of security policy rules and NAT policy rules on PaloAlto, created Zones, PaloAlto Firewall interface,PaloAlto IDS and VLAN.
• Hands-on experience on Checkpoint FirewallR77, Palo Alto and Cisco ASA5520 firewalls.
• Experience with Network Automation using Python.
• Proficient in Cisco IOS for configuration & trouble shooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP, V4, V6, MPLS
• Experience with convert Checkpoint VPN rules over to the Cisco AS Asolution.
• Migration with Checkpoint, Cisco ASA and VPN experience.
• Experience in configuring Virtual Device Context in Nexus 7010.
• Experience in Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering)
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support.

Areas of Expertise

• Client support
• On-going monitoring
• Capacity planning
• Consulting skills
• Cisco support
• User acceptance testing
• Network build out
• WAN monitoring
• Maintaining architecture
• Net flow analysis
• Vendor management
• End to end troubleshooting
• Python.

TECHNICAL SKILLS

Cisco Routers: 2600, 2900, 3600, 3800, 7200 and 7600

Juniper Routers and firewalls: MX240, MX480, MX960, SRX1500 and SRX5600

Cisco L2 & L3 Switches: 2900, 3560, 3750, 3850,4500, 4900, 6500, Nexus 5K/7K/9K

LAN Technologies: Ethernet, Fast Ethernet, and Gigabit Ethernet, SMTP, VLAN, VRFs Inter-VLAN Routing, VTP, STP, RSTP, Light weight access point, WLC.

WAN Technologies: Leased lines 128k - 155Mb (PPP / HDLC), Fiber Optic Circuits, Frame Relay, ISDN, Channelized links (T1/DS3/OC3/OC12), Load Balancing.

Network Security: Cisco ASA, ACL, IPSEC, Juniper SRX,QFX, EX.

OS products/Services: DNS, DHCP, Windows (2000/2003/2008 , XP), UNIX, LINUX.

Routing Protocols: MPLS, OSPF, EIGRP, BGP, RIP-2, PBR, IS-IS, Route Filtering, Redistribution, Summarization, Static Routing, IPv4,IPv6. IOV AND SR IOV

Gateway Load Balancing: HSRP, VRRP, GLBP

Various Features / Services: IOS and Features, HSRP, GLBP, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP,TFTP and FTP Management

Network Management Tools: Wireshark, Net flow Analyzer, Nagi(Nagios) Cisco Works, Ethereal, SNMP, HP open view, Ethereal, Solar winds, TCP/IP Splunk, Line.

Security Server Protocols: TACACS+, RADIUS, Cisco Firepower

Facilities: DS0, DS1, DS3, OCX, T1/T3

Load Balancers: Cisco CSM, F5 Networks (Big-IP) LTM 8900, Cisco ACE 4710.

Operating Systems: Windows (98, ME, 2000, XP, Server 2003/2008, Vista, Windows 7), Linux

Firewall & Security: Checkpoint, Palo Alto, Cisco ASA 5520, PIX 501, 515E, 520,API

PROFESSIONAL EXPERIENCE

Confidential, Spring, TX

SR Network Engineer

Responsibilities:

• Work as a part of the team Involved in the migration of current Datacenter setup from 6500 based data center to Nexus based data center.
• Experience working with Cisco Nexus2148 Fabric Extender and Nexus5000 series to provide a Flexible Access Solution for a data center access architecture.
• Involved in configuring VPC (Virtual Port Channel), VDC(Virtual Device Context) in Nexus 7010/7018 devices.
• Involved in the Implementation of Layer 2 Features (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel across the distribution/access layer switches.
• Implementing layer 3 features IP Configuration, Authentication, Route Summarization, OSPF Special Areas, Route Filtering and IGP Routing Protocols.
• Configured SRX-550 devices as an HA pair for redundancy and Performed JUNOS code upgrades across multiple different branch firewalls.
• Experience with setting up IPSEC VPN on Juniper SRX 3600 Firewalls towards the multiple Customer sites as backup path to the datacenter.
• Involved in the configuration of MX-80 and MX-104 routers with OSPF IOV and peer with BGP to service providers for redundancy across all the branches.
• Design and implement OSPF Areas for reliable Access Distribution and for Core IP Routing.
• Responsible for new site/property setup, migration of existing point to point circuits to an MPLS based solution
• Involved in configuring Juniper and Cisco ASA firewalls and applying rules to pass servers and switches through firewall.
• Involved in setting up and Migrating DMZs from existing setup(ASA) to an integrated new setup(Juniper SRX) in the environment.
• Configuring various advanced features (Profiles, monitors, I Rules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIGIP appliances SSL termination and initiation, Persistence, Digital Certificates,
• Executed various migration/upgrade projects across F5 and hands on with F5 BIGIP LTMs/EM.Worked on F5 LTM series like 7050, 4800, 2200 for several applications and their availability.
• Responsible for the configuration of Virtual Servers, Nodes, and load balancing Pools and configuring load balancing algorithms.
• Experience with migrating from IOS to IOS-XR on ASR 9K.Involved in the configuration of MPC4E for 100GE/10GE interface support.
• Install SCBE2 on MX960/MX480 devices and configure MS-MPC for JFLOW, NAT feature.
• Migrate the older Omniswitch-6800 devices at branches to Juniper EX4200,EX4300 devices as a part of the tech refresh project with higher port density..
• KVM Virtualization and virt manager servers and configuring routers & switches
• Performed configuration of OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
• Troubleshooting of LAN, WAN, WLAN & VoIP networking issues using Wireshark, TCP/IP dump, Netflow, Syslog and other advanced tools and methodologies
• Implement and configured GLBP (on core switching and also for VPN redundancy), VRRP on MX 480 devices in a different location of office on the switched network and managing the entire multilayer switched network.
• Work on multiple Port open requests for multiple business units in the organization on ASA and SRX firewalls Experience Configuring Vlan’s, VTP’s, and enabling trunks between switches.
• Configured Trunk groups, ether channels, and Spanning tree.
• Involved in the Support of network security and network devices such as routers, switches and wireless access points.
• Performed network administration tasks such as creation and management of VLANS, Port security, Trunking, RPVST+, Inter-VLAN routing, and LAN security.
• Configuration of site-to- site VPN connections (IPSec/GREtunnels, DMVPN) to support diverse network connections to extranet clients.
• Worked as a member of the NOC groups to troubleshoot issues related to IP phones, Connectivity and application slowness.
• Troubleshoot issues with Wireless Access points (Cisco 3502) and configure SSID’s on 4506 Wireless LAN Controllers.
• Configured WLC-5505 and IOS XE, Cisco IOS Platforms in 3502 wireless access points across branches.
• Ensure problems are satisfactorily resolved in a timely manner with focus on providing a high level of support for all customers.
• Responsible for Coordinating with service providers for WAN link outages.
• Experience in Configuring, upgrading and verifying the NX-OS operation system with ISSU procedures.
• Responsibilities also include technical documentation of all implementations including visio drawings.
• Attending meetings and technical discussions related to current project.

Confidential, Concord, CA

SR Network Engineer

Responsibilities:

• Played responsible role for implementing, engineering, and level 2 support of existing network technologies services and integration of new network technologies / services.
• Worked on 3560, 3750, 3850, 4510,4500-X, 6509 series Cisco Catalyst switches, and 2248, 5020, 5548 and 7010 Cisco Nexus switches, HP switches in multi VLAN environment for the implementation of inter-VLAN routing,802.1Q trunking, and Ether Channel.
• Performed network administration tasks such as creation and management of VLANS, Port security, Trunking, RPVST+, Inter-VLAN routing, and LAN security.
• Configuration of site-to- site VPN connections (IPSec/GREtunnels, DMVPN) to support diverse network connections to extranet clients.
• Worked as a member of the NOC groups to troubleshoot issues related to IP phones, Connectivity and application slowness.
• Troubleshoot issues with Wireless Access points (Cisco 3502) and configure SSID’s on 4506 Wireless LAN Controllers.
• Adept at configuring and troubleshooting of VPC on Nexus 7Ks, 5Ks and VSS on Cat 6509, 4500-X.Expertise in Configuration of Virtual Local Area Networks (VLANS) using Nexus 7Ks, Cisco routers and multi-layer.
• Switches and supporting STP, RSTP, PVST, RPVST along with trouble- shooting of inter-VLAN routing and VLAN trunking using 802.1Q.
• Expertise in configuration of routing protocols and deployment of OSPF, EIGRP, BGP and Policy routing over Cisco Routers, Switches (Nexus 7Ks, Catalyst 6500).
• Performed ISSU on Nexus Switches and responsible for troubleshooting application latency.
• Resolved various trouble tickets related to routing (BGP, EIGRP, Static Routes, prefix-list, route- map, distribute-list, route-redistribution), switching (VLAN, port security, trunking, STP, VPC, HSRP, FEX).
• Designed, planned and performed failover testing with various extranet clients successfully.
• Involved in design, implementation and configuration of HSRP for load balancing on L3 switches on different location of office on the switched network.
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP, NTP.
• Performed maintenance and troubleshooting of connectivity problems using PING, and Trace route.
• Used DHCP to automatically assign reusable IP addresses to DHCP clients via Infoblox IPAM.
• Configured and maintained OSPF protocol which included deployment of new locations in the existing infrastructure created Stub/areas and configured summarization for effective routing.
• Configured OSPF on ASR 1002/9001 Cisco routers at various back offices across US.
• Configured ACLs in Juniper SRX 3400 and Palo Alto PA-5050 firewalls for Internet Access requests for servers, Protocol Handling, Object Grouping and NAT.
• Experience setting up SRX 240 HA Pairs on the branch firewalls for redundancy.
• Configured SPAN and RSPAN for network monitoring.
• Worked on network-based IT systems such as racking, stacking, cabling and module replacement.
• Configured and installed Wireless Access Points at different company’s location and managed them through Wireless LAN Controller (Cisco)

Confidential, Austin, TX

Network Engineer

Responsibilites:

• Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications.
• Supporting Development team for the access to corporate network and outside world. Providing access to specific IP, Port filter and port access.
• Configured the Cisco router as IP Firewall and for NATting.
• Switching (Ethernet) related tasks included implementing VLANS and configuring ISL trunk on Fast-Ethernet channel between switches.
• Installed high availability Big IP F5 LTM and GTMloadbalancersto provide uninterrupted service to customers.
• Installing and maintaining local as well as network printers.
• Validating existing infrastructure and suggesting new network designs.
• Working on creating new load balancing policies by employing BGP attributes including Local Preference, AS-Path, and Community, MED.
• Configuring all the required devices and equipment for remote vendors at various sites and locations.
• Installation and maintenance of new network connections for the customers.
• Monitor performance of network and servers to identify potential problems and bottleneck.
• Real time monitoring and network management using Cisco Works LMS.
• Configuring routers and send it to Technical Consultants for new site activations and gives online support at the time of activation.
• Provided technical support on hardware and software related issues to remote production sites.
• Maintained redundancy on Cisco 2600, 2800 and 3600 router with HSRP.

Confidential

Network Engineer

Responsibilities:

• Configured and resolved various OSPF issues in an OSPF multi area environment.
• The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.
• Worked with telecom vendors in regards to network fault isolation.
• Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, BGPv4.Configured IP access filter policies.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ to support new and existing application platforms.
• Configured egress and ingress queues for ISP facing routers using CBWFQ.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Configured BGP and OSPF routing
• Cisco ASA 5510, 5540 Firewall Administration, Rule Analysis, Rule Modification.
• Troubleshoot by Analyzing traffic passing managed firewalls via logs and packet captures.
• Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost effective network solutions to accommodate customer requirements and project scope.
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools

Confidential

Network Support Engineer

Responsibilities:

• Involved in installation, maintenance and support of network equipment (CiscoRouters, Switches and Firewalls).
• Evaluated customer needs and proposed solutions.
• Configuring IP Access-lists based on the client requirement.
• Designed scalable and efficient IP Addressing scheme for new network installations.
• Responsible for Network security and administering access and permissions.
• Monitoring network systems operations and conducting system performance evaluations and system diagnostics.
• Responsible for developing and maintaining online documentation and resources pertaining to wireless network.
• Review Statement of Works (SOW) and Bill of Materials (BOM) for LAN and Wireless.
• Provide proactive support the daily operation of wireless network of the organization
• Responsible for gathering and compiling data for special projects as well as prepare weekly status reports
• Perform other related tasks under the instructions of the Manager/Senior Wireless Network Engineers
• Responding quickly to network outages (24*7) and take appropriate action.