PROFESSIONAL EXPERIENCE

• Cisco IOS
• Network infrastructure build and migration
• Cisco Nexus 7000
• IT Security Knowledge
• Strong Communication Skills

EMPLOYMENT HISTORY

Confidential

Network Engineer

Responsibilities:

• Work on different networking concepts and routing protocols like BGP, EIGRP, OSPF, Tunnels, L2TP, and VPLS and other LAN/WAN technologies.
• Designing advanced networking solutions including Quality of Service (QoS), Virtual Routing and Forwarding (VRF) and route redistribution.
• Checkpoint Level3 operations support with hardware operations - fixed all problems & RMA’s, taking any escalations that dealt with the equipment and its connection: interfaces, VLAN’s, routes, etc.
• User admin on the firewalls, adding and deleting users as they come and go.
• Provided proactive threat defense with ASA that stops attacks before they spread through the network.
• Support 24x7 data network center, monitor network performance, manage and maintain Cisco IOS, IOS-XR and JunOS hardware.
• Configuring and install hardware and software required to conduct network penetration testing.
• Enabled to create a Positive Enforcement Model control between two networks that have different trust levels.
• Configuring and testing Multicast for both IPv4 and IPv6 routing in Data Center Environment.
• Design and implemented network infrastructure and configured all the network Infrastructure devices including Network Printers and Registers
• Implementing Bluecoat Proxies for the production environment
• Configuring and troubleshooting IP Multicasting (PIM & DVMRP) & MBGP
• Implemented standard configuration template scripts in various network devices for snmp v2, logging, and ntp.
• Configuring VLAN’s, Trunking and routing part for Cisco Catalyst 6500, 4500, 3750, 2980 switches.
• Assist in the migration from Cisco 6500 equipment to Cisco Nexus 7000 equipment and stacked Catalyst 3850 switches.
• Creating Private VLANs & preventing VLAN hopping attacks & mitigating spoofing with snooping & IP source guard.
• Cisco IOS and Cisco CatOS configuration and backups, Uploading and download IOS and CatOS using XModem, TFTP and FTP protocols
• Upgrading WAN link using PPP Multilink and by implementing Cisco WAAS
• Maintaining complex LAN/WAN networks with several VLANS and provided support for routing protocols and also providing secure sessions over internet using IPSec and SSL encryption.
• Configuring and resolving various OSPF multi-area environments, used OSPF as IGP with route filtering and route-redistribution, implemented Stubs/Totally stub areas, implemented features like route summarization and SPF throttling.
• Configuring and maintain access points through CISCO 4400 WLAN controller.
• Implementation of name resolution using WINS & DNS in TCP/IP environment
• Consistent network design deployed across all nodes throughout county consisting of core Cisco 7600 routers, distribution layer Catalyst 6500 switches, WAN aggregation Cisco 7600 routers, and access layer Catalyst 2900/3500/3750/3850 switches.
• Network analysis and capacity planning experience using tools like Sniffer, Ethereal, and Tcpdump.
• Configuring firewall filters, routing instances, policy options, on Juniper m320 and T640.
• Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/GRE to GetVPN.
• Dealing with the escalation problems for Routing, Switching and WAN connectivity issues using ticketing system remedy.
• Working on ASR routers like 1k, 9K series as a core and configured HSRP for active-active redundancy.
• Working on deployment/configuration of LWAPs, WLC, WDS and 802.11 wireless devices
• Implement changes on switches, routers, load balancers (F5 and CSS), wireless devices per engineer’s instructions and troubleshooting any related issues.
• Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/GRE to GetVPN.
• Created standSard access lists to allow snmp, ntp and logging servers.
• Replaced 6500 from access layer and Installed 3750s Switches.
• Racking and Stacking of Cisco 3750 Switches.
• Configuring Security Policies including NAT, PAT, AAA, ACL’s Standard Access Lists, Distribute-Lists, Route-Maps, VPN Concentrators, I
• Configure and troubleshoot Cisco PIX, ASA, FWSM, ACE, Nexus 1000v, and Juniper platforms in a multi-tenant infrastructure
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience
• Experience working Juniper T-Series, M-Series, MX-Series, J-Series and SRX-Series Routers
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience
• Configuring the Voice VLAN’s (VOIP) and Prioritizing the voice traffic over the data traffic
• Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.
• Configuring firewall filters, routing instances, policy options, on Juniper m320 an d T640
• Co-ordinate with the Data Network and Security team and come up with possible solutions.
• Provide solutions to Tier 1 escalated issues and tickets.
• Performing OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair
• Implementing Positive Enforcement Model with the help of Palo Alto Networks
• Efficient in lending support to DSL, DUN, ISP devices for all customers.
• Designing VLAN’s, access lists (ACL), troubleshooting IP addressing issues and Updating IOS images and other hardware installations
• Working on Aruba Wireless LAN Implementation for 11n Infrastructure across the Corporate Network.
• In-depth knowledge and hands-on experience on IP Addressing, Sub netting, VLSM and ARP, reverse & proxy ARP, Ping Concepts.
• Planning and implementation of OSPF protocol and internet IBGP and EBGP peering relationship with other ISP
• Implementing Cisco Wireless access points using LEAP and Cisco Radius for authentication, greatly increasing Wireless security.
• Experience in creating MOPS( Method of procedures) and get approved from peers for performing configuration changes.
• Responsible for managing the TFTP logs for the VPN and firewall services and troubleshoot the VPN tunnel issues like SA, RSA, ISAKMP encryption and cleared/refresh VPN tunnel issues
• Experience configuring Virtual Device Context in Nexus 7010.
• IOS upgrade and router hardening for 2600, 3600, 7200 routers and 6500, 2900, and 3500 series of switches.
• Designing L2VPN services and encryption system and other VPN with IPSEC based services
• Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.
• Working on Physical site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book.
• Well versed in configuring and troubleshooting Cisco routers (2500, 2600, 3600, 3700, 7200 and 7500 series routers) and Juniper routers.
• Replacing old 6500 and WAN routers from DR testing site and Installing Nexus 7K and ASR 1002, 1006 routers.
• Upgrading IOS on various Cisco Routers and Switches.
• Identify additional Network operations requirement and improvement opportunity.

Environment: Routers (1800, 2500, 2600, 2800, 3600, 3750, 3800, 7200), Cisco Switches (2900, 3500, 4000, 4500, 5000, 5800, 6500, 7600 Nexus 2k, 3k, 5kand 7k), MSFC, MSFC2,

Confidential, Texas

Network Engineer

Responsibilities:

• Configured Routing protocols such as OSPF and policy based routing.
• Team member of Configuration of Cisco 7206 router and Configuration of Catalyst switches.
• Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
• Supported on Cisco Nexus 5000 and Nexus 7000 Series Switch fabric links.
• Create and test Cisco router and switching operations using OSPF routing protocol.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.
• To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.
• Experience working with Layer 1-7 switching, TCP/IP, OSPF and load balancing (Cisco L2/L3 switches, firewalls, load balancers.
• Worked on Cisco Layer 2 switches (spanning tree, VLAN, QoS).
• Monitored and troubleshoot Cisco WAAS
• Involved in Configuration of Access lists (ACL) for the proper network routing for the B2Bnetwork connectivity
• Migrating 500 Cisco GSR production routers on the AT&T backbone, from Cisco IOS to IOS-XR and upgrading service modules.
• Well versed in configuring and troubleshooting Cisco routers (2500, 2600, 3600, 3700, 7200 and 7500 series routers) and Juniper routers.
• IP address allocation to each port of the backbone equipment: Routers, Remote Access Servers, Internet Servers (WWW, DNS, Mail, Proxy, Billing and AAA and NMS), and Line Drivers.
• Installed Wireless Access Points WAPs at various locations in the company.
• Configured, installed, & managed DHCP, DNS, & WINS servers
• Experience in configuring routing protocols like EIGRP, RIP v2, OSPF & BGP and Cisco ACS protocols like RADIUS and TACACS.
• Troubleshoot issues related to connectivity, STP, Vlans, Trunking, VTP, Layer 2/3switching, Ether Channels, Inter-Vlan routing, log messages, high CPU utilization and parameters that can degrade Performance of the network.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Configured and installed CSU/DSU like Para dyne, Visual and US robotics modems
• Configured EBGP/IBGP/VRFS policies also tested BGP attributes such as Local preference, MED, AS-PATH, Community and Weight
• Supported on Cisco Nexus5K and Nexus 7K Series Switch fabric links.
• Responsible for CheckPoint and Cisco ASA firewall administration across global networks.
• Performed penetration testing internally for our clients.
• Tested BGP features such as as-override, Local pre, EBGP load balancing
• Maintained complex LAN/WAN networks with several VLANS and provided support for routing protocols and also providing secure sessions over internet using IPSec and SSL encryption.
• Migrated point-to-point T1 WAN to a fully meshed MPLS IPVPN infrastructure.
• Maintained VOIP phone system and taking care of PBX cabinet.
• worked with IOS upgrade of Juniper devices
• Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.
• Experience working with JUNOS OS on Juniper Routers and Switches.
• Worked on troubleshooting and resolving issues escalated by the NOC and internal systems, including developing, implementing and deploying emergency hot fixes within a global network environment with advanced configurations.
• Configured Multicasting protocol for IPTV and Multicast over GRE tunnels.
• Configuration and troubleshooting link state protocols like OSPF in multiple areas.
• Configured all devices for remote sites/plants, vendors and added new equipment to RADIUS and worked with MPLS-VPN and TACACS configurations.
• Worked on ACE load balancers. Experience with F5 load balancers - LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability
• Performed RE, SIB, Fabric on various platforms like 12 k series and Juniper and t640 routers
• Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.
• Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.
• Built site-to-site IPSec VPNs over Frame-relay & MPLS circuits on various models of Cisco routers to facilitate adding new business partners to new and existing infrastructures.
• Dealt with Cisco IP phones and VOIP devices and configured Voice VLAN’s for Prioritizing voice on the network and did the documentation accordingly with changes
• Configured and installed multi-protocol (IP, IPX) multi-interface Cisco routers.
• Experience with hybrid CatOS to Native Cisco IOS code migration involving Catalyst 6503 to Catalyst 6504 switches
• Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.
• Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.
• Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers.
• Configured IP access filter policies.
• Support 24x7 data network center, monitor network performance, manage and maintain Cisco IOS, IOS-XR and JunOS hardware.
• Supported on Cisco Nexus 5000 and Nexus 7000 Series Switch fabric links.
• Providing Technical Support and solutions for Network Problems.
• Implementing NAT solution's on Cisco IOS routers.
• Worked on various point to point SONET links such as OC3, OC12, and STM-1.
• Upgrading IOS, troubleshooting network outages.
• Worked on Cisco Routers, Active /Passive Hubs, Switches.
• Worked on Extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series.
• Installed and Configured Network Devices in a Data Center including patching the cables in the Patch Panel.
• Design and implemented network infrastructure and configured all the network Infrastructure devices including Network Printers and Registers

Environment: Juniper (E series, J series and M series. Juniper SRX & VPN, T -Series, MX-Series Routers, Routing Protocol (BGP, OSPF, EIGRP, IGRP, IGMP, RIP), Routed Protocol TCP/IP, SIP, Multicasting (PIM),LANProtocol(VLAN,PVlan,VTP,IPX,Inter-vlan routing, ISL,dot1q,STP,IS-IS,RSTP,MSTP,IPVST,LACP, HSRP, GLBP, VPC,VDC,Ethernet, Port security).

Confidential, LINCOLN, NE

Network Engineer

Responsibilities:

• Worked on Cisco Layer 2 switches (spanning tree, VLAN).
• WAN Infrastructure running OSPF & BGP as core routing protocol.
• Support various Routers like 2600/3600/7200 series routers.
• Tested authentication in OSPF and BGP.
• Configured and troubleshoot OSPF and EIGRP.
• ASA firewall troubleshooting experience.
• Involved configuring ppp multilink group, dialer group, PPP authentication protocols like PAP, CHAP
• Designed a redundant LAN architecture with multiple VLANS in preparation for VoIP installation.
• Involved in ION designing GRE tunnels for encryption of data flow from source to destination.
• MPLS configuration on Cisco 7200 for Layer 3 Circuits
• Implemented ISL and 802.1Q for communicating through VTP.
• Troubleshooting IOS related bugs based on past history and appropriate release notes.
• Support 24x7 data network center, monitor network performance, manage and maintain Cisco IOS, IOS-XR and JunOS hardware.
• Work on different connection medium like Fibre and Copper Connectivity.
• Implementation and configuration of F5 Big-IP LTM-6400 load balancers
• Configured Cisco ASR, ISR 2800 & 3800 series routers with OSPF as an enterprise IGP, Created Stub Areas& configured Summarization for effective Routing. Used Route Maps, Distributed Lists, and Route-Distribution to manage network traffic.
• In-depth expertise in the implementation of analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems.
• Experience in Tier II ISP Routing Policies.
• Troubleshoot and Worked with Security issues related to Cisco ASA/PIX, Checkpoint, IDS/IPS and Juniper Netscreen firewalls.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience
• Implemed and Maintained Network Management tools Nortel ENMS, JFFNMS, SNMP, MRTG, and NMIS.
• Planning and configuring the routing protocols such as OSPF, RIP, and Static Routing on the routers.
• Performed and technically documented various test results on the lab tests conducted.
• Planning and configuring the entire IP addressing plan for the clients' network.
• Assist the certification team and perform configuration of LAN/MAN/WAN technologies such as Ethernet, Fast Ethernet, and Gigabit Ethernet.
• In-depth expertise in the implementation of analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems.
• Configured udld, port-fast, uplink fast and other spanning tree features.
• Designed a redundant LAN architecture with multiple VLANS in preparation for VoIP installation.
• Well versed in configuring and troubleshooting Cisco routers (2500, 2600, 3600, 3700, 7200 and 7500 series routers) and Juniper routers.
• WAN Infrastructure running OSPF as a core routing protocol.
• Follow process & procedures for change & configuration management.
• Implemented WLAN Aruba Wireless Access Points and its Controllers at various corporate sites fort 11n Infrastructure and its legacy technologies.
• Supported nationwide LAN infrastructure consisting of Cisco 4510 and catalyst 6513.
• Deployed the switches in high availability configuration with HSRP.
• Experience with Load Balancers for administrating and monitoring global & local traffic using Cisco CSM, ACE Module, and F5 BIG IP LTM & GSS.
• Support various Series of Cisco Routers like 7200/7600 series.
• Support Complex 6500 /5500 Series Switches.
• Provided Network documentation included VISIO diagrams, Solution Documents, MOPs, HLDs and LLDs.
• Consulted IT staff with small businesses environments on damage control, network security, malware isolation & eradication, disaster recovery, network security hardening, password recovery, & data recovery.
• Network Monitoring using tools like Cisco Works 2000.
• Created Lab demonstrations for new technology deployments with loaner equipment from various vendors and presented the findings to upper management.
• Troubleshoot network problems using Packet Analysis tools like Ethereal.
• Design and implemented network infrastructure and configured all the network Infrastructure devices including Network Printers and Registers

Environment: WAN Technology (Frame Relay, WAAS, PPP, WiSM Module in 6509, X.25, L2VPN, L3VPN, E1/T1/DS1/DS3), Network Management (SNMP v2, v3, Syslog, HP Open View NNM, Netflow Analyzer, Sniffer, Wireshark, Cisco Works, 3Com Network Analyzer, SolarWinds, Orion), AAA Architecture (TACACS+, RADIUS, Cisco ACS.

Operating systems: Linux, UNIX, DOS, WindowsXp/2007, Windows 2003 server and Windows 2008 server

Confidential, Carlstadt, NJ

Network Engineer

Responsibilities:

• Designed and implemented remote dial up solution for clients
• Installed and configured workstations for IP based LAN’s
• Installed and configured DHCP Client/Server
• Implementation Route redundancy protocols like HSRP,VRRP,GLBP
• Configured and managed networks using L3 protocols like RIPv2,
• Configured VLANs, Private VLANs, VTP and Trunking on switches.
• Configured L2 and L3 security features on devices
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience
• Converted CatOS to Cisco IOS Config Conversion on distribution layer switches
• Recommended Security considerations for the Intranet data center, integrating security, providing solution design details and configuration details
• Tested authentication in OSPF, LDP and BGP
• Worked on Extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) &ASA 5500(5510/5540) Series.
• Configuration of Access List ACL (STD, Ext, Named) to allow users all over the company to access different applications and blocking others.
• Designed and implemented support of Cisco WAAS
• Monitored ticket system for any incident ticket, responded and worked on resolving the ticket within SLA metrics
• Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/GRE to GetVPN.
• Support 24x7 data network center, monitor network performance, manage and maintain Cisco IOS, IOS-XR and JunOS hardware.
• Well versed in configuring and troubleshooting Cisco routers (2500, 2600, 3600, 3700, 7200 and 7500 series routers) and Juniper routers.
• Experience with design and implementation of Virtual Switching System (VSS) on 6500 Switches
• Installed Wireless Access Points WAPs at various locations in the company.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems. Implementation of name resolution using WINS & DNS in TCP/IP environment
• Designed a redundant LAN architecture with multiple VLANS in preparation for VoIP installation.
• Manage a very large DNS environment using manual management of DNS for DMZ/External servers
• Extensive experience taking copy of Cisco IOS on TFTP server and loading on back on routers
• Broad Hands on Experience in Inter-vlan routing, redistribution, access-lists and dynamic NAT
• Efficient in cabling as per co-location contracts with loop-back testing, including all DS1, DS3, T1, T3,CAT 6 and CAT 5 connections as per defined cabling procedures.
• Design and implemented network infrastructure and configured all the network Infrastructure devices including Network Printers and Registers

Environment: Network Security: Knowledge of Firewall, ASA,Cisco FWSM/PIX/ASDM, Cisco NAC,IPSec,Nokia Checkpoint NG,SPLAT,IPS/IDS(Snor),IPS 4260)Application Protocols( DHCP, DNS, FTP, HTTP,SMTP, TFTP),Documentation( Microsoft Office, Visio)