Satish

• 7 years of professional experience in Network engineering with Cisco Certified Network Engineer, performing Network analysis, design, Implementing, capacity planning with a focus on performance tuning and support of large Networks.
• Demonstrated success record in: Managing multiple tasks with proven ability to meet deadlines and proactively identifying the problem to solve complex technical issues.
• Substantial knowledge in Cisco Routing, Switching and Security with Cisco hardware/software heavy Cisco shop experience.
• Hands on experience in configuring and supporting a site-to-site and remote access Cisco IPsec, VPN client in addition to providing TACACS , VPN solutions using ASA/PIX firewalls and RADIUS services.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience
• Involved in troubleshooting of DHCP, DNS, and other IP conflict problems.
• Responsible for Check Point and Cisco ASA firewall administration across global networks.
• Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning configuring VLANs/routing/NAT with the firewalls as per the design.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability, and Experience working with Nexus 7K, 5K, 2K devices. Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning configuring VLANs/routing/Nating with the firewalls as per the design.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning configuring VLANs/routing/NAT with the firewalls as per the design. In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Sub netting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.
• Strong knowledge of TACACS , RADIUS implementation in Access Control Network.
• Experience with different Network Management Tools and Sniffers like Wireshark ethereal , HP-Open view, RSA envision, and Cisco works to support 24 x 7 Network Operation Center.
• Experience with F5 load balancers and Cisco load balancers CSM, ACE and GSS .
• Basic and advance F5 load balancer configurations, including migrating configurations from Cisco ACE to F5 and general troubleshooting of the F5 load balancers
• Experience with Putty, Exceed, Secure CRT, Shell Scripting and Perl.
• Experience in testing Cisco routers and switches in laboratory and deploy them on site production.
• In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewall.
• Aggregating switch links using LACP and PAGP protocols.
• Implementation and Troubleshooting of WAN authentication protocols- PPP, CHAP and PAP.
• IP addressing and IP address scalability by configuring NAT/PAT.
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.
• Experience with designing, deploying and troubleshooting LAN, WAN, Frame-Relay, Ether-channel.
• Experience working with High performance data center switch like Nexus 7010,7018, 7009, 5020, 2148, 2248 devices
• Experience working with HPNA, HP Network Node Manager, Cisco Prime, Infoblox NetMRI, MS Active Directory Services, SCCM, SCOM

Skills:-

• Cisco Certified Network Associate CCNA
• Cisco Certified Network Professional CCNP

TECHNICAL SKILLS:

• LAN technologies: Ethernet, Fast Gigabit Ethernet, VLANS, VTP, STP, RSTP, 802.1W.
• WLAN technologies: Autonomous AP's, Lightweight AP's, WLC, WDS, WLSE, Standards
• 802.11A, 802.11B, 802.11G
• WAN technologies: Frame Relay, ISDN, PPP, ATM, MPLS.
• Cisco Equipments: Cisco routers 2500, 2600, 2800, 3600, 3800, 7200 ,
• Cisco Catalyst switches 1900, 2900, 3550, 3750, 6500.
• Network Security: NAT/PAT, VPN Configuration, IPSec, IDS, IPS.
• Routing Protocols: IGRP, EIGRP, OSPF, ISIS, BGP, VRRP, GLBP HSRP
• Infrastructure services: DHCP, DNS, SMTP, POP3, FTP, TFTP.
• Network Management: SNMP, Cisco Works, HP Open View.
• Languages: C,C ,Perl,Python,Shell.
• IP Telephony: H.323, MGCP, SIP, QOS, voice gateways.
• Platforms: Windows 98/XP/VISTA, Windows 2000/2003 Server, Linux.
• Applications: MS Office, MS VISIO
• Network Security: Cisco ASA, AC, IPSEC,
• Load balancers: Cisco CSM, Cisco ACE 4710, F5 BIG-IP LTM 6900 series
• Firewall Cisco ASA,PIX,Palo Alto, Checkpoint, Juniper SRX

PROFESSIONAL EXPERIENCE:

Confidential

Sr. Network Engineer

Responsibilities:

• Configured Routing protocols such as RIP, OSPF, EIGRP, static routing and policy based routing.
• Team member of Configuration of Cisco 7206 router with VPN and Configuration of Catalyst switches.
• Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
• Create and test Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.
• Configuration and troubleshooting link state protocols like OSPF in single area and multiple areas.
• Redesign of Internet connectivity infrastructure for meeting bandwidth requirements.
• Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.
• Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.
• Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.
• Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.
• Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers.
• Providing Technical Support and solutions for Network Problems.
• Implementing NAT solution's on wan applications.
• Planned, tested and evaluated various equipment's, systems, IOSs and procedures for use within the Network / security infrastructure.
• Upgrading IOS, troubleshooting network outages.
• Implement network security for remote access. Tasks includes configuring site to site and clients to site VPN tunnels through multiple Cisco VPN concentrators and Checkpoint firewalls, and maintaining access policies for remote users
• Responsible for maintenance of multiple CheckPoint-1 firewalls on NT environment
• Initial configuration, design and installation of CheckPoint-1 2000 firewalls for multiple locations
• Experience with Cisco WLAN environments
• Experience working with HPNA, HP Network Node Manager, Cisco Prime, Infoblox NetMRI, MS Active Directory Services, SCCM, SCOM
• Knowledge in GRE tunneling
• Design, implementation and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Worked with creating VIP virtual servers , pools, nodes and applying iRules for the virtual servers like cookie persistency, redirection of the URL.
• Experience in L2/L3 routing and switching
• Created Visio Dean / Visio Documentation to give complete picture of network design for each building.
• Experience in Configuring, upgrading and verifying the NX-OS operating system.
• Design and Implement DMZ for FTP, Web and Mail Servers with CISCO PIX 506, PIX515
• Troubleshooting experience of network issues with physical and VM servers

Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/2960/6500 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers , Cisco Nexus 7K/5K, Cisco ASA5510, Checkpoint, F5 BIGIP LTM.,OSPF,EIGRP,RIP,BGP,VLAN,VPN,OSPF,BGP,EIGRP

Iron Mountain, Royersford, PA Dec 2012 Sep 2013

Sr. Network Engineer

Responsibilities:

• Troubleshooting the Juniper SRX100 and 110 series, Juniper Netscreen routers with Site-Site VPN, and firewalls for Supervalu Retail sites.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500.
• Experience in migration of VLANS.
• Handling enterprise outages effectively and driving towards the resolution. Coordination of fault escalations in conjunction with the 1st high-level technical management of high priority or technically complex calls.
• Working with Capacity management on network bandwidth utilization reporting of the sites WAN link and vendor co-ordination for new site turnovers / WAN links.
• Preparing Metrics report detailing on SLA performance of tickets and process quality report to analyze team performance discussion on the improvement areas By monthly .
• Providing training to new comers and effectively working towards a process quality improvement in the Team.
• Responsible for Cisco ASA firewall administration, Rule Analysis, Rule Modification.
• Supporting EIGRP and BGP based on the network by resolving level 2 3 problems of internal teams external customers of all locations
• Performing troubleshooting on slow network connectivity issues, routing issues that involves OSPF, BGP and identifying the root cause of the issues.
• Extensive hands-on experience with complex routed LAN and WAN networks, routers and switches.
• Hands-on experience with Ether Channel, Spanning Tree, Trunking, ACLs, Syslog. Experience in the setup of HSRP, Access-Lists, and RIP, EIGRP, and tunnel installations.
• Proficiency in configuration of VLAN setup on various Cisco Routers and Switches.
• Experience with implementing and maintaining network monitoring systems Cisco works and HP Open view and experience with developing complex network design documentation and presentations using VISIO
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Estimated Project costs and created documentation for project funding approvals.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Responsible for Checkpoint and Cisco ASA 5510 firewall administration across global networks.
• Provided proactive threat defence with ASA 5510 that stops attacks before they spread through the network.
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Implemented Positive Enforcement Model with the help of Palo Alto Networks.
• Documented new VPN enrolments in a database and create standard procedures for further improvement.
• Troubleshoot traffic passing managed firewalls via logs and packet captures
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.
• Created standard access lists to allow SNMP, NTP and logging servers.
• Configure VRRP GLBP and VLAN Trunking 802.1Q ISL, STP, Port Security on Catalyst 6500 switches.

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, Cisco Nexus7K/5K, 2248/3560/5020/6509,VPN,RIP,OSPF,BGP,EIGRP,HSRP

JPMC, New York City, NY Oct 2011 Nov 2012

Sr. Network Engineer

Responsibilities:

• Designed, installed, and maintained various WAN technologies and applications connecting remote sites to corporate headquarters.
• Configured, implemented, and troubleshoot routers and switches with various account settings, permissions, and parameters including security firewalls.
• Primary responsibility is to design and deploy various network security High Availability products like Checkpoint NGX, Provider-I, Nokia appliance, Cisco ASA other security products
• Installed various network hardware including concentrators, bridges, and hubs to establish communication connections with remote locations.
• Configured multiple domain name services DNS , email services Exchange Server , web, and file transfer protocol services FTP for various platforms including line leasing through DHCP servers.
• Configuring various advanced features Profiles, monitors, iRules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIGIP appliances SSL termination and initiation, Persistence, Digital Certificates, Executed various migration/upgrade projects across F5 and hands on with F5 BIGIP LTMs/EM.
• Experience with creating VIP virtual servers , pools, nodes and applying iRules for the virtual servers like cookie persistency, redirection of the URL.
• Experience with Trinzic management.
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks.
• Generating RCA Root Cause Analysis for critical issues of layer1/layer2/layer3 problems.
• Co-ordinated with the Data Network and Security team and came up with possible solutions.
• Work on Physical site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book.
• Provided proactive threat defence with ASA that stops attacks before they spread through the network.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• Experience with implementing and maintaining network monitoring systems Cisco works and HP Open view and experience with developing complex network design documentation and presentations using VISIO.
• Experience working with HP Comware
• Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. Configured Cisco Routers for OSPF, RIP, IGRP RIPv2, EIGRP, Static and default route.
• Configured the Cisco router as IP Firewall and for NATting.
• Configuring various advanced features Profiles, monitors, I Rules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIGIP appliances SSL termination and initiation, Persistence, Digital Certificates, Executed various migration/upgrade projects across F5 and hands on with F5 BIGIP LTMs/EM.
• Implement changes on switches, routers, load balancers F5 and CSS , wireless devices per engineers instructions and troubleshooting any related issues.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience
• Involved in Switching Technology Administration including creating and managing VLANS's, Port security, Trunking, STP, Inter-VLAN routing, LAN security etc.
• Deploying Layer 2 security in Server Farms by configuring switch for 802.1x port based authentication.
• Involved in the configuration troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
• Initial configuration, design and installation of CheckPoint-1 2000 firewalls for multiple locations
• Setup and maintained CheckPoint-1 security policies including NAT, VPN and Secure Remote access
• Creating and provisioning Juniper SRX firewall policies.
• Troubleshooting the Juniper SRX100 and 110 series, Juniper Netscreen routers with Site-Site VPN, and firewalls for Supervalu Retail sites.

Environment: Nexus 2k/5k/7k, Cisco 6500/7500/7200 Routers, Cisco 3550/4500/6500 switches, JuniperSRX100,LAN,WAN,OSPF,RIP,BGP,EIGRP,HSRP,PPP,VPN,Checkpoint,Cisco ASA,OSPF,BGP,EIGRP,LAN,WAN,Juniper SRX.

Aavanor systems, Chennai, India Dec 2009 Sep 2011

Sr. Network Engineer

Responsibilities:

• Handled Tech Support as it relates to LAN WAN systems.
• Active participation on operational support for routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Configured ASA 5510 appliance and VPN.
• Experience working with HP Comware
• Responsible for implementing Qos prioritizing voice traffic over a data.
• Implemented SNMP on Cisco routes to allow for network management. Completed the installation and configuration of T1, T3 OC3 circuits.
• Performed IOS upgrades on Catalyst 1900, 2900, 3500 series switches and 2500, 2600, 3600 series routers.
• Responsible for maintenance and utilization of VLANs, Spanning-tree, HSRP, VTP of the switched multi-layer backbone with catalyst switches.
• Implemented and configured routing protocols like EIGRP, OSPF and BGP.
• Connected switches using trunk links and Ether Channel
• Used Network Monitoring tool to manage, monitor and troubleshoot the network.
• Implemented redundant Load balancing technique with Internet applications for switches and routers.
• Support Network Technicians as they require training support for problem resolution including performing diagnostics, configuring network devices.

Mascon, Chennai, India Oct-2007 Nov 2009

Sr. Network Engineer

• Responsible for LAN and internet connection file and print server.
• Maintained and installed new internet connections for customers.
• Configured all devices for remote sites/plants, vendors and added new equipment to RADIUS and worked with MPLS-VPN and TACACS configurations.
• Installed and maintained local printer as well as network printers.
• Install and manage Cisco Catalyst 3500XL, 2960 series Switches and Cisco 1800, 3900 series routers
• Configured VLANs, Private VLANs, VTP and Trunking on switches.
• Hands on Experience in Inter-vlan routing, redistribution, access-lists and dynamic Natting
• Involved in all technical aspects of LAN and WAN projects including, short and long term planning, implementation, project management and operations support as required