OBJECTIVE

• To obtain a network engineering position in a progressive environment where my knowledge, skills and experience of 8 years are aptly utilized and challenged to meet the needs of a growing technology company.

SUMMARY

• Eight plus years of experience in the field of Network Engineering Lifecycle that include designing, planning, implementation & troubleshooting small, medium and large - scale enterprise networks.
• Worked on F5 LTM, GTM series like 6400, 6800 for the corporate applications and their availability.
• Experience in Cisco Routing and Switching with strong Cisco hardware/software experiences with Routers such as 2900, 3800, 3900, 4000, 7200, 7600,3900; Cisco ASR-1k/9k, Cisco Multilayer Switches 2960, 3850, 4500, 4900, 6500; Cisco Nexus 2k/5k/7k.
• Troubleshooting and installing of CSRs, ISR, GSR and Nexus devices.
• Experience working with JUNOS OS on Juniper Routers and Switches.
• Worked on Nexus platform 7010, 5K series (5548, 5020 and 5010) and FEX (2248, and 2232) and deployed VPC, VDC and OTV and successfully implemented VSS on the cisco catalyst switches.
• Network security including NAT/PAT, ACL, VPN Concentrator and Checkpoint Firewalls.
• Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls.
• Implemented Zone Based Firewalland Security Rules on the Palo Alto Firewall.
• Strong hands on experience on Checkpoint Firewalls, ASA (5550) Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).
• In-depth knowledge of TCP/IP protocol suite and proficiency in configuring and troubleshooting various routing protocols like BGP, OSPF, EIGRP, RIP, Static routing and management of routes using manual summarization, default-routes and redistribution.
• Networking technologies in the service provider arena including IP routing, IP QoS, MPLS andVOIP.
• Hands on Experience in configuring Virtual Local Area Network (VLAN), spanning tree protocol (STP), VLAN Trunking Protocol (VTP), Dynamic Trunking Protocol (DTP), Per VLAN spanning Tree (PVST), Rapid Per VLAN spanning Tree (RPVST), and 802.1x authentication in access layer switches.
• Good experience in physical infrastructure like Structured cabling, IP address management, Racking, Stacking, UCS management.
• Implemented traffic filters using Access-lists, Distribute-Lists, Route Maps and route manipulation using Offset-list.
• Management and Monitoring of network hardware by use ofSSH, Syslog, SNMP, NTP.
• Experience in T1/E1/T3 technologies and different LAN & WAN technologies.
• Sound knowledge in object Pythonobject oriented programming (OOP) concepts.
• Proficient in planning and completing projects to high standards in time-critical situations.
• Managed all operations support documents and ensured that all applicable network management systems are integrated and tested prior to launch.
• Excellent communicator, with emphasis on building strong client relationships.
• Proficient in using MS Visio for documentation.

TECHNICAL SKILLS

Cisco Routers: 2600, 2900, 3600, 3800, 7200,7500 and 7600

Cisco L2 & L3 Switches: Catalyst2900, 3560, 3750, 4500, 4900 and 6500; Nexus 7k/5k/2k.

LAN Technologies: Ethernet, Fast Ethernet and Gigabit Ethernet, VLAN, Inter-VLAN Routing, VTP, STP, RSTP

WAN Technologies: Frame Relay, PPP, HDLC, (E1/T1/E3T3)

Network Security: Cisco ASA (5512/5550/5585 ),ACL, IPSEC, SonicFirewall, WatchGuard Firewall

Server Operating System: Windows Server 2008, 2012

Desktop Operating System: Windows 7, Mac OSX

Routing Protocols: RIP, OSPF, EIGRP, BGP, PBR, Route Filtering, Redistribution, Summarization, and Static Routing.

Gateway Load Balancing: HSRP, VRRP and GLBP

Network Mgmt. Tools: Wire shark, Net flow Analyzer, Cisco Prime Infrastrucuture, SNMP, SYSLOG, Netcool, Splunk, SolarWinds, LogRhythm,ArcSight

Security Server Protocols: TACACS+, LDAP, RADIUS

Load balancer: F5 Networks (BIG-IP) LTM 6400.

VPN: IPSec& SSL VPN both Site-to-site and Remote VPN

Programming Languages: Python, Shell Scripting, Java.

PROFESSIONAL EXPERIENCE

Confidential, Overland Park, KS

Senior Network Engineer

Responsibilities:

• In the process of Data center fabric migration, performed migration from legacy Catalyst 6513 Switches to Nexus7010 switches adhering to ITIL change Management Procedure.
• Configured and maintained VPCs with 7010 and 5548 in the network. Also configured and maintained VDCs in 7010 switches, maintained VRFs in those separate VDCs.
• Worked on OTV to extend L2 VLANs between data centers over IP on Nexus 7010 switches.
• Used Fabric Extenders like 2248TP GE series for the top of the rack solution and used 5548P for the end of the row solution.
• Configured BGP peering, Prefix list and route policies on Cisco 7609 to connect to Virtual Private clouds on Amazon Web Services cloud on dedicated circuit from Sprint data centers.
• Configured DMVPN between Datacenters and geographically distributed AWS cloud locations to achieve fast backups/restores of application data.
• Knowledge of DAS, NAS and SANconcepts and technology. Also got knowledge in HA, Clustering, LAN.
• Scheduled maintenance of Nexus (2248, 5548, and 7010) switches so that there are no Orphan ports in the network, and all Users to be dual homed, so that they have sufficient redundancy.
• Performed OS upgrades & device replacements on several cisco devices (6500, Nexus 2K, 3K, 5k and 7k series switches).
• Maintained F5 BIG-IP LTM 6900 for providing application redundancy, load balancing and policies.
• Migrated switches to 3750Xseries Cisco Catalyst switch.
• Used Cisco ACI(Application Centric Infrastructure) SDN architecture to reduce operating costs, automate IT tasks, for greater scalability and visibility in a data center environment.
• Implemented Cisco ACI infrastructure for supporting rapid application change by reducing complexity with a common policy framework that can automate provisioning and resource management.
• Deployment and maintenance of Arista Networks7100 and 7150 series switches.
• Worked with Linux systems (Ubuntu specifically). To configure routers and switches through the CLI, the console computer had Linux operating systems.
• Adding Websites to the URL filtering blocklist in Bluecoat Proxies and upgrading firmware on the bluecoat proxies.
• Automated operations usingscriptinglanguage Python.
• Maintained TACACS+ and RADIUS servers for AAA authentication and user authentication.
• Used Cisco ASA 5540 firewall for Enterprise security, configured ACL’s for Internet requests to Server Farm in LAN and DMZ.
• Work closely with sales and customer support staff to assist with enrollment of customers into the DDoS mitigationplatform.
• Provided VPN services to site-to-site and, Remote access VPNs using IPsec and GRE tunneling mechanisms.
• Performed Network Security Assessment and implemented security features such as network filtering, SSH, AAA, SNMP access lists, VTY access lists, EIGRP MD5 authentication, and HSRP authentication.
• Experience working on Sonicwall Firewall and Sonicwall access points.
• Designing advanced networking solutions including Quality of Service (QoS), Virtual Routing and Forwarding (VRF) and route redistribution.
• Configured FTP server for inside/outside users & vendors.
• Configured and maintained EIGRP, OSPF and BGP on Cisco Routers.
• Troubleshot multi-vendor network platforms which include Cisco, Avocent and Aruba Wireless.
• Maintained all Corp VOIP (Call-Manager) and Cisco Unity systems.
• Create policies, alerts and configure using SIEM tools (Splunk, SolarWinds, LogRhythm,ArcSight)
• Used internal network monitoring tools (Solar Winds &Opmanager) to ensure network connectivity and Protocol analysis tools to assess the network issues causing service disruption.
• Created and designed network layout and documented network system design with detail information using Visio software.

Confidential, Des Moines, IA

Sr. Network Engineer

Responsibilities:

• Cisco Router ASR 1000 and 9000 series. Integrated Services 4000, 3900, 2900. 7600, 7300 and 7200 Series- configuration, implementation, maintenance.
• Cisco Firewall ASA 5500 - x series configuration, implementation and maintenance.
• Cisco Switch - Nexus 7k, 6k, 5k and 2k. and Catalyst 4500, 3700, 3500, 4900 and 6500 - configuration, implementation and maintenance.
• Experience working Juniper T-Series, M-Series, ERX 1400, M320, MX960, J-Series Routers.
• Performed IOS upgrades on 2900, 3500 series Cisco Catalyst switches and 1800, 2600, 3600 series Cisco routers using TFTP.
• Deployed F5 LTM Load balancer and experience in virtual server configuration, high availability, load balancing, irules, iApps and SSL profiles.
• Design/Implementation/Operational support for Citrix Netscaler Load balancers.
• Implemented Checkpoint FW Interface, NAT and VLAN using R77 GAIA Smart Dashboard. Advanced knowledge, design, installation, configuration, maintenance, migration and administration of Checkpoint Firewall R55 up to R77.
• Strong experience in Network security using ASA Firewall, Checkpoint, Palo Alto, Cisco IDS/IPS and IPSEC/SSL VPN. Work with process teams to test and refine network configurations.
• Created and resolvedPaloAlto and Checkpoint Firewall Rules, Routing and Pushed Policy.
• Configuring and troubleshooting Bluecoat SG9000 WAN acceleration appliances including WCCP, CIFS and creating/updating overlays.
• Involved in networkdevice migration project (migrating Cisco Switches to HP ProCurve Switches).
• Created numerous eConnects to ensure the bank had administrative access to the new Bluecoat proxies.
• Configured Client VPN technologies including Cisco’s VPN client via IPSEC.
• Having Data Center Design Experience, installing and Configuring Network Devices in a Data Center including patching the cables in the Patch Panel.
• Experience with moving data center from one location to another location, from 6500 based data center to Nexus based data center.
• Managed IP addressing and subneting using INFOBLOX.
• DNS administration like adding/modifying/deleting IP and DNS assignments using INFOBLOX.
• Regularly interact with management, technical support, development support and Client Support.
• Supported low latency networks and Financial industry network architecture.
• Work with technical and business analysts within the organization to define and build required network profiles.

Confidential, Hartford, CT

Sr. Network Engineer

Responsibilities:

• Experience working with Cisco IOS-XR on the ASR9000 devices for MPLS deployments.
• Experience with migrating from OSPF to BGP WAN Routing protocol.
• Implemented Site-to-Site VPNs over the internet utilizing 3DES, AES/AES-256 with PIX Firewalls.
• Network Redesign for Small Office/Campus Locations. This includes changes to both the voice and data environment.
• Installation and Configuration of Cisco Catalyst switches6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches.
• Application Analysis (LANZ) on the Arista 7150 to detect, capture, stream and transient congestion at microsecond rates.
• Experience with setting up MPLS Layer 3 VPN cloud in data center and also working with BGP WAN towards customer.
• Experience in communicating with different customers, IT teams in gathering the details for the project.
• Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
• Create and testCisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.
• Redesign of Internet connectivity infrastructure for meeting bandwidth requirements.
• Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.
• Optimized performance of the WANnetworkconsisting of Cisco 3550/4500/6500 switches by configuring VLANs.
• Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.
• Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers.
• Configured RIP, OSPF and Static routing on JuniperM and MX series Routers.
• Experience with Juniper SRX 240 Firewalls.
• Experience in WAN technologies like T1/T3, DS3, STM1 and STM4 circuit types.
• Configured Security policies including NAT, PAT, VPN, Route-maps and Access Control Lists.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Worked on Cisco Routers, Active /Passive Hubs, Switches, Cisco PIX Firewall, Nortel VPN Concentrators TCP/IP, NAT and Checkpoint ESX/GSX firewall.

Confidential

Network Engineer

Responsibilities:

• Configured RIP and EIGRP on 2600, 2900 and 3600series Cisco routers.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 4500series Cisco Catalyst switches.
• Maintaining and Troubleshooting VoIP server End-points and Route plans using Real Time Session Manager.
• Provided on-call support for installation and troubleshooting of the configuration issues.
• Configured Standard, Extended, and Named Access Lists to allow users all over the company to access different applications and blocking others.
• Planned and implemented Subnetting, VLSM to conserve IP addresses.
• Configured STP for loop prevention and VTP for Inter-VLAN Routing.
• Performed troubleshooting of connectivity problems using PING, and Trace route.
• Provided Technical support for improvement, up gradation, and expansion of the existing network architecture.
• Done troubleshooting of TCP/IP problems and connectivity issues in multi-protocol Ethernet environment.
• IOS upgradation 1900, 2900, 3500 series Cisco Catalyst switches and 2500, 2600, 3600 series Cisco routers using TFTP.