SUMMARY:

• Cisco Certified Network Engineer with 7 Years of professional experience in Network Engineering, performing Network Analysis, Implementing, capacity planning with a focus on performance tuning and support of large Networks.
• Expertise in Layer - 3 Routing protocols like RIP v1/v2, EIGRP, OSPF, IS-IS, BGP, MPLS and Layer-2 Switching technologies.
• Strong understanding of current and future technologies including TCP/IP, IPv4/v6, RIP, EIGRP, OSPF, BGP, Frame Relay, ACL, VPN, Wireless LAN and configuration of VLANs.
• Experience in Cisco Routing, Switching and Security with strong Cisco hardware/software experiences with Cisco Routers such as 1900, 2600, 2900, 3600, 3900,7200 Cisco ASR-1k/9k, Cisco Multilayer Switches 4500, 6500, Cisco catalyst 3750, 3500, 2900 and Cisco Nexus 2k/5k/7k/9k.
• Extensive work experience with Cisco Routers, Switches, Load balancers and Firewalls.
• Expertise in Configuration of VLANS, using Cisco Multilayer switches and supporting STP, RSTP, PVST, RPVST, MST along with troubleshooting of Inter-VLAN routing and VLAN Trunking using ISL/802.1Q.
• Hands-on experience on Cisco and Juniper routers.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Proficient in using firewall technologies including general configuration, security policy, rules creation and modification of Cisco ASA, Palo Alto and Checkpoint.
• Experience with Cisco IOS, Cat OS, Cisco IOS XR and JUNOS.
• Proficiently implemented traffic filters using Standard and Extended access-lists, Distribution lists, Route-maps and Route Manipulation using offset-list.
• Network security including NAT/PAT, ACL, VPN and IPsec on DMVPN (GRE Mode).
• Hands on experience in configuring and supporting site-to-site and remote access Cisco IPsec VPN using ASA/PIX firewalls, Cisco Any Connect, VPN Client, experienced in RSA SecureID in addition to providing TACACS+ and RADIUS services.
• Hands on experience in deployment of GRE tunneling, SSL, Site-Site IPsec VPN and DMVPN.
• Extensively worked on Cisco Catalyst 6509 and implemented VSS along with VDC and VPC on Nexus 5505, 7009 switches.
• Experience in configuring and Troubleshooting BIG-IP F5 load balancer LTM and Cisco load balancer(ACE).
• Worked on Load balancer F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Expertise in OSI and TCP/IP model and in depth understanding of UDP and TCP protocols.
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks.
• Well experienced in configuring protocols HSRP, GLBP, VRRP, ICMP, IGMP, PPP, HDLC, PAP, CHAP and SNMP.
• Knowledge in configuring and troubleshooting Cisco Wireless Networks: LWAPP, WLC, WCS, Standalone AP, Roaming, Wireless Security, IEEE 802.11 a/b/g/n, RF spectrum characteristics, Cisco Aironet 3700, 2700, 1700 and Aruba wireless 7000 and 2300 series.
• Adept in handling network monitoring tools such as Wireshark, Net Flow, SNMP and SYSLOG.
• Working experience with REMEDY for ticket change management process.

TECHNICAL SKILLS:

Cisco Routers: 2600, 2900, 3600, 3800, 7200,7600 and ASR 1k/9k.

Cisco L2 and L3 Switches: 2900, 3560, 3750, 3850, 4500, 4900, 6500 series and Nexus 2k/5k/7k/9k.

LAN Technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, SMTP, VLAN, VTP, Inter-VLAN Routing, STP, RSTP, PVST, MST, ISL, dot1q, DTP, VPC, VDC, Light weight access point, WLC.

WAN Technologies: Frame Relay, PPP, HDLC, MPLS, E1, T1, T3, OC Standard.

Gateway Redundancy: HSRP, VRRP, GLBP, Ether Channel (LACP and PAgP).

Routing Protocols: RIP v1/v2, EIGRP, OSPF, IS-IS, BGP, MP-BGP

Firewalls: Cisco PIX/ASDM, Cisco ASA, Checkpoint, Juniper SRX and Palo Alto.

Wireless Technologies: Cisco WLC, IEEE 802.1x and 802.11, WLAN, WAP, AP, SSID, LWAPP.

Load Balancing: F5:6400, 6800, 8800 with LTM, GTM, ASM, APM, Access Gateway, Secure Gateway.

VoIP: Call Manager, Call Manager Express, SIP Trunking.

Applications: Cisco Packet tracer, GNS 3, Active Directory, VMWare Workstation, VMWare ESXi.

Tunneling Protocols: L2TP, IPsec, GRE, MPLS.

Authentication Protocols: PAP and CHAP.

Network Management: Wireshark, Net Flow Analyzer, SolarWinds.

Services & Features: DNS, DHCP, NAT, PAT, FTP, TFTP, SNMP, SYSLOG

Documentation: Microsoft VISIO, Microsoft word, Excel.

Operating System: Microsoft XP/Vista/7/8/10, UNIX, Linux, Windows Servers 2003/2008

Other Technologies: MATLAB and MySQL.

PROFESSIONAL EXPERIENCE:

Confidential, Columbus NE

Network Engineer

Responsibilities:

• Administration BIG-IP F5 LTM 8900 for all local Load Balancing and configured profiles, provided and ensured high availability.
• Administer and implement firewall policies in Palo Alto Networks, Cisco ASA's and other vendor specific appliances.
• Conducted site surveys and performed site survey documentation.
• Configured and deployment of routing protocols OSPF, EIGRP & BGP over Cisco Routers in Production environment.
• Configuring, troubleshooting and managing secure web content gateways and filters like Blue Coat and Websense.
• Configuring and implementing IPsec VPN tunnel between ASA5550 Firewalls, Palo alto 5060, 7060 firewalls Applied access list, NAT & IPS/IDS configurations.
• Configured Site-to-Site IPsec VPN tunnels to peer with different clients having different specifications of Phase 1 and Phase 2 policies using Cisco ASA5500 series firewalls.
• Created dedicated VLANs for Voice & Data with QOS for prioritizing Voice over Data.
• Configured HSRP, VRRP and VLAN Trunking 802.1Q, VLAN routing on above switches.
• Configuring RIP, OSPF and Static routing on Juniper M and MX series Routers and VLAN, spanning tree, VSTP, SNMP on Juniper EX series switches.
• Create and test Cisco router and switching operations using OSPF in Cisco Lab.
• Deploying and upgrading Palo Alto 5060 & 7060 firewalls and establishing IPS/IDS, anti-malware.
• Design and architect traffic flows in BGP using standard and extended access-lists, Distribute-list and Route Maps, MED and Local P to load balance traffic across multiple ISP links.
• Designing, Implementing LAN/WAN configurations on Cisco Nexus 5K, Catalyst 6500 switch.
• Designing, Implementing and Troubleshooting Cisco 3750, 3550, 3560, 6513, 6504, 6506, 6500 series switches, ASR routers with Cisco IOS and IOS-XR.
• Experience configuring VPC, VDC and ISSU Software upgrades on Cisco Nexus 7010.
• Expertise in installing, configuring and troubleshooting Juniper EX and QFX Switches (EX2200, EX2500, EX3200, EX4200, EX4500, EX8200, QFX5100, QFX5200, QFX10000 series)
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience.
• Experienced in troubleshooting of problems related to routing protocols involving BGP, OSPF, IS-IS, EIGRP, RIP, IP Multicasting, MPLS and Layer 2 technologies.
• Experience with Migrations of Cisco ASA firewall to Palo Alto firewall.
• Ensuring faster accessibility and high uptime of website using BIG-IP F5.
• Experienced with redistribution from EIGRP to OSPF routing protocol.
• Experienced with Cisco 1800, 2500, 2600, 2800, 3600, 3800, 7200 and 7600 series Routers.
• Hands-on experience on designing, and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Hands on Experience with Juniper MX960 Series.
• Hands on experience on troubleshooting Cisco Wireless LAN controllers and Wireless Access points.
• Have applied ACLs for Internet access to servers using Cisco 5550 ASA firewall and performed NAT.
• IPSEC & SSL VPN Appliances from Nortel and Cisco. F5 Big IP & EM, Stampede Webrider compression devices and WebSense & Bluecoat internet filtering.
• Implemented redundancy with HSRP, Ether Channel technology (LACP, PAgP) etc.
• Involved in configuration of Access lists (ACL) on checkpoints firewall for the proper network routing for B2B network connectivity.
• Initial configuration and installation of Checkpoint firewalls for multiple locations.
• Implementing & configuring F5 LTM and virtual servers as per application and business requirements.
• Maintained TACACS+ and RADIUS servers for AAA authentication and user authentication.
• Network security including NAT/PAT, ACL, VPN concentrator, IPS/IDS.
• Part of a Layer 3 Network Support Team, troubleshoot network issues and analyze the problems and provide suitable solutions for the issues while coordinating with the team members and Senior Service Engineers.
• Performing troubleshooting on VPN connectivity issues, slow network connectivity issues and identifying the root cause of issues.
• Packet capturing, troubleshooting in network problems with Wireshark and SolarWinds.
• Performed LAN operation and troubleshooting which involves working on VLANs, Inter-VLAN routing, Trunking, STP, RSTP, MST, port aggregation(PAgP) and link negotiation(LACP).
• Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF & EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers
• Successfully configured Windows Server 2008 with DHCP, Active Directory, and NPS in support of testing secure 802.1x authentication.
• Worked on Route-Reflectors to troubleshoot BGP issues related to customer route prefixes and route filtering using Route-maps.
• Worked with Cisco IOS-XR on the ASR 9000 devices for MPLS deployment in data center.
• Worked on Layer 2 Switching and Cisco Nexus 2148 Fabric Extender and Nexus 9000,7000,5000 series switches to provide a flexible access solution for a datacenter access architecture.
• Worked on configuring AAA settings and Cisco Firewall ASA 5500(5510/5540) series. Performed Security operations in terms of pushing new policies and deploying new rules.

Confidential, Downingtown PA

Network Engineer

Responsibilities:

• Configured 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
• Configuring rules and maintaining Palo Alto firewalls and analysis of firewall logs using various tools.
• Configured HSRP and VLAN Trunking 802.1Q, VLAN Routing on Catalyst 6500 switches.
• Configured BPDU Guard, port-fast, uplink fast, SPAN, RSPAN and other spanning tree features.
• Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500 and 7200 Series Routers.
• Configure VPC, Ether Channel and FEX on Nexus 5K, 7K and 2K switches.
• Configured Juniper MX480s, EX8200s, EX4500s, EX4200s, and SRX5800s from scratch to match design
• Configure ASA firewall and accept/reject rules for network traffic.
• Create and test Cisco router and switching operation using OSPF, ASA firewalls and MPLS switching for stable VPNs.
• Configured VLANs, route Subnets and ACLS in Juniper SRX firewalls using JUNOS Space.
• Experience working with BGP attributes to influence inbound and outbound traffic.
• Expert level knowledge of MPLS and its applications (VPLS, L2VPN, L3VPN, NG-MVPN, EVPN, MPLS-TP, Seamless MPLS) along with different vendor specific standards. Strong knowledge base in the design and deployment of Blue Coat Proxy SG and Checkpoint firewalls.
• Experience with setting up MPLS Layer 3 VPN cloud in Data Center and working with BGP WAN towards customer.
• Efficient at use of Microsoft VISIO / Office as technical documentation and presentation tools.
• Experience in Network Management Tools and sniffers like SNMP, HP-Open view, Wireshark and SolarWinds.
• Experience working with Cisco IOS-XR on the ASR 9000 devices for MPLS deployment.
• Experience with migrating from OSPF to BGP WAN Routing protocol.
• Hands on experience with Spanning Tree, Syslog, ACLs, HSRP and Etherchannel.
• Implemented Site-to-Site VPNs over the internet utilizing 3DES, AES/AES-256 with PIX firewalls.
• Implementing security policies using ACL, IPsec VPN, IPS/IDS, TACACS+ and RADIUS.
• Implement security solutions using Palo Alto PA-5000, Checkpoint Firewalls R75, R77.20 Gaia.
• Knowledge and experience of 802.11 a/b/g/n standard for Wireless Technology.
• Manage network and network operating system including: Servers, VMWare, Windows, file and print services.
• Monitor and report Domain Controllers, Exchange, Network Devices, VLANs, Switches and Routers, Active Directory, IP Addressing, WAN and LAN services.
• Managed the F5 BIG-IP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs.
• Responsible to help team for troubleshoot, configure and resolve the issues regarding F5.
• Troubleshoot on security related issues on Cisco ASA/PIX, Checkpoint and IDS/IPS.
• Use and maintain routing protocols EIGRP, OSPF and BGP on Routers in the network and also worked on BGP Route Reflectors and Confederations.
• Working Experience on web content filter and gateways like Blue Coat, Websense.
• Worked with the team in designing, deployment and configuration of wireless networks using Cisco WLC 5508 in HQ, Cisco WLC 2504 in Regional offices and Cisco 3500 series APs.
• Worked on F5 GTM, LTM series like 6400, 6800, 8800 for corporate applications and their availability.
• Worked extensively in configuring, monitoring and troubleshooting Cisco’s ASA5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/Routing/NATing with the firewalls.

Confidential

Network Engineer

Responsibilities:

• Configured RIP and EIGRP on 2600, 2900 and 3600 series Cisco Routers.
• Configured VLAN, Private VLANs, STP, RSTP, MST, SPAN and RSPAN on Cisco switches.
• Configuring OSPF and Static routing on Juniper M and MX series Routers.
• Configured and maintained RIP, OSPF and other routing protocols on 2600 and 3600 series Cisco routers.
• Configured and Troubleshoot OSPF and EIGRP and Configured Etherchannel using LACP and PAgP.
• Configured firewall logging, DMZs and related security policies and monitoring.
• Configured policy based routing for BGP for complex network systems.
• Designed Configured, Installed, and Maintained and provided T-Shoot the network infrastructure for Cisco platform for more than 300 devices i.e. 2800, 3600 series Routers and switches for office and for various Customers.
• Hands on experience in Inter-VLAN Routing, Redistribution, Access-Lists and Dynamic NAT & PAT.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Installed and configured Cisco ASA5500 series firewall and configured remote access IPsec VPN.
• Involved in maintaining STP, RSTP and PVST+ for the catalyst switches.
• Implemented VTP and Trunking protocols (802.1Q and ISL) on 3560, 3750 and 4500 Series Cisco Catalyst Switches.
• Installing, Configuring Cisco Catalyst switches 6500, 3750 and 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control Lists implemented as per Network Design.
• IOS upgrades in catalyst series switches like 2900, 3560 and 3750.
• LAN cabling in compliance with CAT5 standards.
• Migration of RIPv2 to OSPF, BGP routing protocols.
• Technical management for LAN/WAN management and customer issues.
• Troubleshooting, support and implementation for DNS/DHCP.
• Worked on Juniper devices like M, MX, T routers on advanced technologies like, MPLS VPNs, TE and other service provider technologies.

Confidential

Network Engineer

Responsibilities:

• Connected switches using trunk links and Etherchannel.
• Configuration and maintenance of Cisco 2900 series including VLANS and TRUNKING protocols.
• Configure OSPF, RIP and EIGRP protocols and IP sub-netting on Cisco routers and switches.
• Delivered Departmental Efficiency through advanced engineering, technical support and documentation procedures.
• Experience in configuring CSU/DSU devices and helped troubleshooting various CSU/DSU devices
• Hand-on Experience with configuring T1.5, Gigabit Ethernet, Channelized T3 and full T3, ATM, Frame-Relay.
• Implemented load balancing between Cisco L3 switch by HSRP and GLBP.
• Implement redundant load balancing technique with Internet application for switches and routers.
• Installing computer hardware, software, printers, wired, wireless network management, maintenance and troubleshooting devises and network problems.
• Monitor performance of network appliances and WAN utilizing using network analyzer like Wireshark.
• Performed the general activities of LAN administration on switches, routers, hubs and WI-FI and network printers.
• Provided high level technical support, including identifying and resolving problems on Cisco supported products for e-commerce infrastructure.
• This included external routing and internal routing for DMZ servers.
• Performed installation, cabling and cable testing.
• Responsible for maintenance and utilization of VLANs, Inter-VLAN Routing, Spanning Tree (STP), HSRP, VTP of the switched multi-layer backbone with catalyst switches.
• Troubleshoot Cisco hardware: Inspected devices, Read Device LEDs, loose connections, cards, dirty devices, interior IOS upgrades, switch port configuration and port monitoring.
• Worked with management and various departments to develop procedures and troubleshoot problems.