SUMMARY:

• Professional IT experience in Network design, implementation, and support. Routing, switching, firewall technologies, system design, implementation and troubleshooting of complex network systems.
• Experience in skillful deployment of Layer - 2 technologies like VLANS, VTP, STP, RSTP, Inter-VLAN routing, VLAN Trunking, Ether Channels, VLAN access-maps and port security.
• Experience with working on latest cisco switches like Nexus 2000, 5000, 6000 and 7000 series switches while implementing advanced features like VDC, VPC, OTV and Fabric Path.
• Hands On experience Cisco IOS/IOS-XR/NX-OS, Juniper JUNOS for configuration troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS.
• Extensive experience in configuring and troubleshooting of protocols v1/v2, EIGRP, OSPF, BGP and
• Experience on dealing with Cisco Application Centric Infrastructure (ACI) by integration hardware and software products as per network layout.
• Implementing Zscaler in Production
• Worked with VLAN’s, Trunking, RSTP, SNMP, Ether Channels, HSRP, Port Security, ACL’s, QoS, Traffic Policing, Shaping, EIGRP, OSPF, NAT, PAT, Inspections, VPN’s, DHCP, Wireshark etc.
• Installing & configuring firewalls like Checkpoint (Provider-1, R65, R70, and R75), Secure Platform (SPLAT), Juniper SRX, Net screen firewall, Palo Alto, Fortinet and Cisco ASA (5510, 5520, and 5550).
• Experience in Migration from Cisco ASA's toFortinet’ s FortiGate firewalls
• Configured network security policiesIPSEC, SSL,NAT, PAT,VPN, Route-maps, distribute lists, Prefix lists, Access Control Lists (ACL), filters inCisco ASA,Juniper SRX,Palo Altoenvironments.
• Experience in layer-3 Routing and layer-2 Switching. Dealt with Nexus models like7K, 5K, 2K series, Cisco router models like GSR-12K, ASR9K, CSR 1000V,7200, 3800, 3600, 2800, 2600, 2500 and 1800 series and Cisco catalyst 6500, 4500, 3750, 3500,3850, 4500 and 2900 series switches.
• Implementing 3750 Stackable switches using Cisco Stack Wise technology. Experience to review and evaluate current and future design issues as required maintaining network integrity, efficient data flow.
• Experience ofJUNOSplatform and worked withJUNOSupgrade of Juniper devices
• Experience working on Cisco IOS, Junos & basic Nexus (9k, 7K, 5K&2K).
• Experience in working on cloudAWScloud EC2, S3, RDS, Load Balancer, Auto Scaling withAWScommand line interface andAWSpython SDK.
• Experience in Azure network, VPN and Express route, Azure DNS, Traffic Manager, and Load Balancers
• Worked on F5 load balancers, its methods, and implementation and troubleshooting on LTMs and GTMs.
• Experience with Change management process and Project documentation tools like Excel and VISIO.
• Excellent team player with good communication and leadership skills, Capable of Problem solving, Time management and Decision-making skills with the ability to set priorities and produce results.

TECHNICAL SKILLS:

Cisco Platforms: Nexus 7K, 5K, 2K and 1K, Cisco routers (7600,7200, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900, 6807 series)Juniper Platforms: Juniper MX960, MX480, MX104, MX80, Juniper EX and QFX Switches, Juniper SRX4600, SRX4200, SRX550, SRX345

Networking Concepts: Access-lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPsec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi

Firewall: ASA Firewall (5505/5510/5520 ), Zscaler, Checkpoint (R75/R76), Palo Alto (2k, 3k, 5k), Juniper SRX (240).

Network Tools: Solar-winds, SNMP, Cisco Works, Wireshark

Load Balancers: Cisco CSM, F5 Networks (Big-IP)

WAN technologies: MPLS, leased lines & exposure to PPP

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q

Security Protocols: IKE, IPSEC, SSL-VPN

Networking Protocols: RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA, IPv4 and IPv6

Operating System: MAC OS X, Windows Server 2008/2012, Linux, Unix

PROFESSIONAL EXPERIENCE:

Confidential

Network Service Provider Engineer

Responsibilities:

• Participating in a high impact project such as the implementation of IPV6 at the National Level ( ).
• Migrations of Services to NEXUS 9K platforms (2018 - in process)
• Version updates on CBR8 equipment (2018)
• Hardware replacement and upgrade on NEXUS9500 platform (2020- in process)
• Project Planning and Control
• Generation of attached and administrative documentation.
• Documentation HLD, LLD, MOP, Post-Mortem, KNOWLEDGE BASE, Executive Report, Technical Reports, etc

Confidential

Network Engineer

Responsibilities:

• Tasks performed: During my stay within the institution, my activities were related to layer 2 and layer 3 network equipment configuration, Wireless and Routing and Switching configurations, structured cabling survey.
• Involved in complete LAN, WAN development (including IP address planning, designing, installation, configuration, testing, maintenance etc.).
• Implemented with Cisco Layer 3 switches 3750, 4500, 6500 in multi VLAN environment with the use of inter-VLAN routing, HSRP, ISL trunk, ether channel.
• Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, EtherChannel implementation on ASR 9Kredundant pair.
• Successfully Installed, configuredCisco Catalyst switches 9300,6500, 3750 & 3550 series, Access control lists, ISDN, ATM, load balancing switches and configured IPX/SPX, HDLC, BGP, EIGRP, OSPF and VRRP on various sites.
• Worked on stacking of the devices based on the network requirement with Cisco Catalyst 9300 series depending on the requirement with a stack count of 8, 6, 2, 3.
• Maintained Juniper EX series switches and Juniper MX routersandtroubleshooted them.
• Configured HSRP & VLANs, Configuring Ether-Channels and Port Channel on Cisco 9300 catalyst switches
• Worked with Cisco ACI (Application Centric Infrastructure) SDN architecture to reduce operating costs, automate IT tasks, for greater visibility and scalability in a data center environment.
• Worked with Cisco Channel partners to build practices around Cisco ACI, worked on configuring tenant policies, VLAN, VTEPS, VNI, BridgeDoamins.
• Deployed Viptela SD-WAN, worked with the team in implementing and designing of SD-WAN infrastructure and providing WAN connectivity across the enterprise.
• Worked on Cisco ISE deployment which was a replacement for the ACS and provided new long term and short-term guest wireless services for the Port Authority.
• Configured rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using Panorama.
• Successfully installed Palo Alto PA-3000/PA-5000 firewalls to protect Data Center and provided L3 support for routers/switches/firewalls.
• Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls and implemented Zone Based Firewall and Security Rules on the Palo Alto Firewall. Exposure to wild fire feature of Palo Alto.
• Worked with Palo Alto firewalls PA250, PA4050, PA3020 using Panorama servers, performing changes to monitor/block/allow the traffic on the firewall. Technical assistance for LAN/WAN management and complex customer issues.
• Configured systems log on the Palo Alto firewall and moved the logs to Splunk.
• Worked with Palo Alto firewalls PA5050 using Panorama servers, performing changes to monitor/block/allow the traffic on the firewall.
• Responsible for Palo Alto and Cisco ASA firewall administration across our global networks Maintenance and configuration of Cisco ASR1000 series
• Installed and configured new Cisco equipment including Cisco catalyst switches 9300, Nexus 7010, Nexus 5548 and Nexus 9k as per the requirement of the Organization.
• Worked with F5 load balancers and Cisco load balancers (CSM, ACE, and GSS).
• Configured and managedF5 ASM (Application security manager). Developed security policies.
• Worked with Load Balancing team to build connectivity to production and disaster recovery servers through F5 Big IP LTM load balancers
• Worked in F5 concepts which include Virtual servers, Pools, Health monitors, SSL Profiles, Persistence profiles, Load balancing methods, HA pair, irules.
• Worked with F5 load balancers to provide Land Balancing towards Access layer from core layer and configuring F5 LTM both by GUI and TMSH/CLI and Cisco load balancers (CSM, ACE and GSS).
• Upgraded load balancers from Radware to F5BigIP v9 which improved functionality and scalability in the enterprise.
• Implemented and Configured (Profiles, irules) of F5 Big-IP LTM-6400 load balancers
• Worked in SD-WAN technology. Part of a migrating team from MPLS to SD-WAN.

Environment: LAN, WAN, VLAN, HSRP, ISL TRUNK, Juniper,OSPF, BGP, DHCP, IPV6, ISDN, ATM, IPX/SPLX, HDLC, EIGRP, VRRP, CISCO ACI, VXLAN, MPLS, PALO ALTO Firewalls, Checkpoint,CISCO ASR1000, CISCO ASA, DMZ, VMware, SD-WAN.