SUMMARY

• Around 8 years of experience in Networking and Security, including hands - on experience in providing network support, installation and analysis for a broad range of LAN / WAN communication systems.
• Experience with designing, deploying and troubleshooting LAN, WAN, Frame-Relay, and Ether-channel.
• Troubleshooting and installing of Cisco ISR 3900, 3800, 2951, 2811, ASR1K and Nexus devices.
• Experience in Configuring & implementing VLAN, VTP, LAN switching, STP and 802.x authentication in access layer switches.
• Switching tasks include VTP, ISL/802.1q, IPSec and GRE Tunneling, VLANs, Ether Channel, Trunking, Port Security, STP and RSTP.
• Experience securing and managing remote access using various VPN technologies like IPSec, SSL, and GRE.
• Utilizing management tools cisco works, solarwinds, HP, IMC, Riverbed/mazu, visio, Steelhead, Sniffer and Network Analyzer.
• Experienced in handling and installing Palo Alto Firewalls and juniper SRX firewall.
• Configure all Palo Alto Networks Firewall models (PA-2k, PA-3k, PA-5k etc.) as well as a centralized management system (Panorama) to manage large scale firewall deployments.
• Practical knowledge about TCP/IP, DHCP, DNS, SMTP, POP3, RIPV1, RIPV2, OSPF, IGRP. EIGRP, BGP Routing protocol Static, default and dynamic.
• Configuration of Network and Security devices such as Cisco routers and switches (Cisco 7600/3500/Nexus 7K/5K), Firewall (Checkpoint R75/Gaia and Cisco FWSM), Load Balancers and DNS and IP Manager (Infoblox).
• Configuration and troubleshooting L3 switches with VLAN, STP, SPAN, ETHERCHANNEL, HSRP, VRRP and GLBP.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience.
• Monitoring Traffic and Connections in Checkpoint and ASA Firewall.
• Working experience with A10 and F5 Load Balancer.
• Practical experience in Active directory, OU, DNS, DHCP, Group policy, Replication, Active directory domain trust relationship.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NAT with the firewalls as per the design.
• Configuring Checkpoint Firewall in IPSO, Secure Platform and GAIA platforms.
• Configuring, Administering and troubleshooting the Checkpoint and ASA firewall.
• Expertise in maintenance of layer2 switching tasks which advocate VLAN, VTP, STP, RSTP, PVST, RPVST, configuring of ether channel with LACP and PAGP along with troubleshooting of inter-VLAN routing.
• Using Smart Update, User Management and Authentication in Checkpoint Firewall.
• Thorough understanding of VPN technologies like IPSec, GRE tunneling, MPLS for remote access security.
• Experience deploying BIG-IP F5LTM Load Balancers for load balancing and traffic management of business application.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

TECHNICAL SKILLS

Routers: Cisco 7609, 2600, 2800, 3800, 3640, Cisco 3745, 7200 Series.

Switches: Cisco 3500, 5000, 6500 Catalyst Series Cisco 7000, 2000 Nexus Series

Firewalls: Palo Alto PA-500, PA-2k, PA-3k, PA-5k & PA-7050, Checkpoint R65/R70/R75/R76/R77

Load Balancer: F5-Big-Ip, LTM, Ax10.

Routing Protocols: BGP, OSPF, EIGRP, VRRP, HSRP, GLBP, and RIP.

Switching Protocols: STP, RSTP, PVSTP, VTP, ARP, and VLAN.

IP Services: DHCP, NAT, VLAN, DNS, FTP, TFTP, LAN/WAN.

WAN Technologies: ATM, ISDN, PPP, MPLS, ATT, 802.11, 802.11a, 802.11b, APLUS.

Network Technologies: IPsec, GRE, NAT/PAT, ACL, IPv4, IPv6.

Operating System: Windows XP, Vista, Windows 7, UNIX, SPLAT (Secure Platform), Linux

PROFESSIONAL EXPERIENCE

Confidential, Santa Ana, CA

Network Engineer

Responsibilities:

• Worked onCiscoLayer 2 switches (spanning tree, VLAN).
• Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.
• In depth knowledge on AAA protocol .
• WAN Infrastructure running OSPF & BGP as core routing protocol.
• Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers.
• Optimized performance of the WANnetworkconsisting of Cisco 3550/4500/6500 switches by configuring VLANs.
• Design and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Juniper: EX-2200,EX-4200, EX-4500, MX-480, M Series, SRX210, SRX240.
• Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
• Troubleshooting IOS related bugs based on past history and appropriate release notes.
• Troubleshooting and installing of Cisco ISR 3900, 3800, 2951, 2811,ASR 1K and Nexus devices.
• Worked on different connection medium like Fiber and Copper Connectivity.
• In-depth expertise in the implementation of analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems.
• Planning and configuring the routing protocols such as OSPF, EIGRP, RIP, and Static Routing on the routers.
• Performed and technically documented various test results on the lab tests conducted.
• Planning and configuring the entire IP addressing plan for the clients'network.
• Assist the certification team and perform configuration of LAN\WAN technologies such as Ethernet, Fast Ethernet, and Gigabit Ethernet.
• Supported networks, which are comprised of 2000+Ciscodevices.
• Supported nationwide LAN infrastructure consisting ofCisco4510 and catalyst 6513.
• Deployed the switches in high availability configuration with HSRP.
• Configured port-fast, uplink fast and other spanning tree features.
• Support various Series ofCiscoRouters like 7200/7600 series.
• Support Complex 0 Series Switches.
• NetworkMonitoring using tools likeCiscoWorks 2000 and Netflow Analyzer.
• Worked on presale network environment.
• Troubleshootnetworkproblems using Packet Analysis tools like Ethereal.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500.
• Experience with infoblox for documentation.
• DNS Updates/New Adds/Removals via Infoblox DNS Appliance.
• Worked on ASA (5540/5550) Firewalls and juniper SRX firewall. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS)..
• Worked on juniper SRX firewall to create policies using j-web user interface.
• Understanding of JUNOS platform and worked with IOS upgrade of Juniper devices.
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.
• Create and testCisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.
• Experience working with Nexus 7010, 7018, 5020, 2148, 2248 devices.
• Experience working with High performance data center switch like nexus 7000 series.
• Performed load balancing and application level redundancy by deploying F5 BIG-IP LTM 3900.

Environment: Cisco 6506/4948/4510 switches, Cisco 3660/3845/7609 Routers, Cisco ISR 3900, 3800, 2951, 2811, ASR1K, VLAN, Checkpoint, F5 Load Balancers, OSPF, RIP, RIRP, BGP, MPLS, HSRP, VRRP, GLBP, ASA 5500,Nexus 2K,5K,7K.

Confidential, Chicago, IL

Network Administrator

Responsibilities:

• Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools.
• Work on Checkpoint Platform including Provider Smart Domain Manager. Worked on configuring, managing and supporting Checkpoint Gateways.
• Working on the project of F5 LTM and GTM code upgrade project, doing couple of them every week.
• Successfully installed Palo Alto PA-3060 firewalls to protect Data Center and provided L3 support for routers/switches/firewalls.
• Implemented Positive Enforcement Model with the help of Palo Alto Networks.
• Responsible for setting up the infrastructure environment with majority of Cisco & Palo Alto appliances apart from various other equipment.
• Researched, designed, and replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliances serving as firewalls and URL and application inspection.
• Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering).
• Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls.
• Implementing and configuring F5 LTM's for VIP's and Virtual servers as per application and business requirements.
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall.
• Exposure to wild fire feature of Palo Alto.
• Designed and implemented IT security policies and networked backup systems.
• Configured route redistribution between OSPF and EIGRP in a multi-area OSPF network.
• Implemented Hot Standby Router Protocol (HSRP) by tuning parameters like preemption.
• Daily responsibilities included design, implementation, support and administration of multiple security products running Checkpoint Provider-1 and VSX, Sourcefire, and ISS Real secure.
• Regularly performed firewall audits around Checkpoint Firewall-1 solutions for customers.
• Provided tier 3 support for Checkpoint Firewall-1 software to support customers.
• Work on Checkpoint Platform including Provider Smart Domain Manager. Worked on configuring, managing and supporting Checkpoint Gateways.
• Implementation of SITE-TO-SITE VPNs over the internet using 3DES, AES/AES-256 with ASA firewalls.
• Experience to setup Checkpoint VPN rules over the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience.
• Working on the project of F5 LTM and GTM code upgrade.
• Tuned BGP internal and external peers with manipulation of attributes such as weight, local preference.
• Daily monitoring of network traffic using sniffers (Wireshark) and access logs to troubleshoot and identify network issues.
• Used Infoblox for documentation and tools updates.
• Worked with vendors and Engineering team to test new hardware and procedures.
• Consulted with engineering team to resolve tickets and troubleshoot L3/L2 problems.
• Monitored LAN/WAN network activity utilizing CA/Spectrum monitoring tools.

Environment: Cisco 6509/ 3750/3550/3500/2950 switches, Cisco 7200/3845/3600/2800 , F5 LTM & GTM,CiscoASA5540andcheckpoint,Wireshark,NetFlow,TACACS,EIGRP,RIP,OSPF,BGP,VPN,MPLS,CSM,SUP720, Ether Channels, Fluke and Sniffer.

Confidential, Farmington Hills, MI

Network Engineer

Responsibilities:

• Troubleshooting several VoIP issues like bandwidth, call quality, one way audio, registration issues and QoS.
• Integrate VoIP with PSTN and setup voice Gateway ensuring QOS for Cisco based Voice over IP and CDR for voice call Accounting.
• Troubleshooting several scenario based and complex networking as well as VoIP related issues.
• Configuring VoIP customers on MEDIACORE VoIP SBC server as well as Multiprotocol Signaling Switch (MSW).
• Maintaining and taking regular backup of several servers including CUCM.
• Worked on 4500 Catalyst switches for the purpose of LAN requirement and for troubleshooting LAN issues.
• Involved in Troubleshooting of DHCP and other IP conflict problems.
• Performing health checks on F5 load balancers and monitoring the status of the application servers.
• Installing upgrades or hotfix to further F5 load balancing versions.
• Configured SNATS on F5 load balancer to solve several routing problems.
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks.
• Performed Switching Technology Administration including VLANs, inter-VLAN Routing, Trunking, SIP, STP, RSTP and Port Aggregation.
• Deployed a large-scale HSRP solution to improve the uptime of collocation customers, in the event a core router became unreachable.
• Design, implement and maintain UCCX Contact Center scripts and workflows, including troubleshooting and debugging errant scripts.
• Configured RSTP, LACP and VTP on Nexus devices.
• Network consists of Heavy Cisco equipment such as Cisco 2500, 2600, 3640, 3945, 7200 series Routers, Cisco 6500, 4500, 3560, 2950, 2924 Switches, Cisco Pix firewall 500 series and Wireless Access points Cisco 1230.
• Performed RIP & OSPF Routing Protocol Administration.
• Experience in deploying EIGRP/BGP redistribution and the changing the metrics for the primary and backup paths for the packet prioritization and EIGRP tuning.
• Involved in Troubleshooting IP Addressing Issues and Updating IOS Images using TFTP.
• Handling network devices such as Switches (Cisco Catalyst 2900 and 3500 series), Routers (Cisco 2600, 2800 and 7200 series), Firewalls, Load balancers etc.
• Maintaining Checkpoint security policies including NAT, VPN and Secure Remote access.
• Engage with ISPs and PSTN providers globally to resolve related issues.
• Understanding of VOIP protocols, standards and codecs such as: SIP, H.323, Q.931, SCCP, RTP, QoS, G.711, G.729, T.38.
• Designed and configured the commands for QoS and Access Lists for Nexus 7K and 5K.
• Involved in New Branch Network Systems. Resolved Network Issues and Prepared Network Documentation.
• Monitored performance of Network and Servers to identify potential problems and bottleneck.
• Used Infoblox for documentation and tools updates.
• Implemented Infoblox for DNS appliance and run scripts as needed.

ENVIRONMENT: Cisco 6500/4500/3560/2950/2924 switches, Cisco 7200/3945/3640/2600/2500 , cisco ASA, routers, EIGRP, RIP, VTP, RSTP, OSPF, TFTP, VOIP, Nexus 5k and 7k switches.

Confidential

Network Engineer

Responsibilities:

• Configured EIGRP, BGP, and MPLS.
• Implemented Load Balancing between Cisco L3 Switch by HSRP and GLBP.
• Implemented cable multi-service operator (MSO) to capture traditional Telco subscribers with IP telephony and provide relevant QOS.
• Provided support regarding call routing, translation patterns, media resources etc.
• Maintaining and Troubleshooting VoIP server End-points and Route plans using Real Time Session Manager.
• Worked on VOIP protocols, codes and standards such as G.711, G.729, H.323, Q.931, T.38, RTP, SCCP, SIP, SCCP.
• Day to day troubleshooting and maintenance of CUCM clusters, Unity Servers and IP phones in the network.
• Configured redundant pair setup and synchronization between pairs on F5 load balancer.
• Involved in migrating applications from netscalers to F5 Big - IP environment.
• Configure Firewall, IPS, and QoS by SDM and provide security by Prefix list, Access- List and By Distribution List.
• Moved Core switches and several non-Cisco devices under strict deadlines to maintain network functionality.
• Satisfactorily Resolved Problems in timely manner with focus on providing a high level of support for all customers.
• Implemented new ultra-secure networks in multiple data centers that included Cisco 6500s and Juniper security devices.
• Implementing of cisco 3750,3850 switches and cisco 3900 and ASR 1000s routers to new sites.
• Designed VLAN’s and set up both L2 and L3 logical to have it communicate to the Enterprise network.
• Juniper: EX-2200,EX-4200, EX-4500, MX-480, M Series, SRX210, SRX240, .
• Scheduled preventive maintenance for fire-protection systems, including new protocols. Utilize MS Windows, Word, and Excel for reporting/documenting process.
• Provide high level technical support, including identifying and resolving problems on Cisco supported products for e-Commerce infrastructure.
• This included external routing and internal/intranet routing for DMZ servers.
• Prepared Engineering documents and Network diagrams in Microsoft Visio.
• Delivered Departmental Efficiency through advanced engineering, technical support, and documentation procedures.

ENVIRONMENT: F5 Big-IP 1500,3400 module, Cisco 3750,3850 Cisco 6500/3800/3600 routers, DMZ servers, BGP, MPLS, EIGRP

Confidential

System/Network Administrator

Responsibilities:

• Configuring and troubleshooting multi-customer ISP network environment.
• Involved in network monitoring, alarm notification and acknowledgement.
• Implementing new/changing existing data networks for various projects as per the requirement.
• Troubleshooting complex networks layer 1, 2(frame relay, ATM, Point to Point, ISDN) to layer 3 (routing with BGP, EIGRP, OSPF and RIP protocols) technical issues.
• Working on creating new load balancing policies by employing BGP attributes including Local Preference, AS-Path, and Community, MED.
• Installing and maintaining Windows NT Workstations and Windows NT Server.
• Providing technical support to LAN & WAN systems.
• Monitoring performance of network and servers to identify potential problems.
• Performing RIP, OSPF, BGP, EIGRP routing protocol administration.
• Preparing feasibility report for various upgrades and installations.
• Other responsibilities included documentation and support other teams.

ENVIRONMENT: Windows NT Workstations, NT servers, RIP, OSPF, BGP, and EIGRP.