SUMMARY:

• To design and manage end to end networking solutions on existing and emerging technologies as a Sr. Network Design Engineer/ Architect. To work closely with business and technical partners in deploying customized solutions to further the achievement of business objectives. Strengths include strong Cisco experience, deep understanding of the most advanced Enterprise and Service Provider networks, excellent communication skills and strong ability to adapt to new technology with ease.
• Over 14 years of experience, architecting, engineering, deploying and troubleshooting numerous heterogeneous networks.
• Quick learner, adaptable, an effective team player and leader by example, with strong communication and documentation skills.
• An Individual, who takes initiatives, sets goals and works in a methodical and focused manner to achieve them.
• Strong planning, engineering, analytical and troubleshooting skills

SKILL SETS:

IP:  IPv4, IPv6, Dual - Stack IPv4 & IPv6 deployments.

L2 & WAN Protocols:  Ethernet / FastEthernet / GigabitEthernet / TenGigabitEthernet, MPLS, MPLS VPN, ATM, PoS, Frame-Relay, ISDN, SLIP, PPP and HDLC.

Routing Protocols:  RIP, RIP v2, IGRP, EIGRP, OSPF, IS-IS, BGPv4 & Multicasting

QOS:  RSVP, WRED, DWRED, CBWFQ, LLQ, Custom Queuing, Priority Queuing, CAR, GTS, FRTS, dot1p Class of Service, IP Precedence, Weighted Fair-Queuing.

Other Protocols & Technologies:  DLSW+, NAT, IPSec, HSRP, GRE, DHCP, SNMP, WCCP, Net-flow, Mobile IP, VoIP, VoATM and VoFR. Cisco Tele Presence System 500, CTS-1000, CTS-1100, CTS-1300, CTS-3000, CTS-3010 & 3200. CUCM, CUVC, CTMS, CTS-MAN, CTRS, CUBE & SBC.

Network Secure Technologies:  Cisco AAA (Authentication, Authorization, Accounting), RADIUS, TACACS+, Cisco PIX Firewall, IPSec (IKE, ESP, AH, MD5, SHA, RSA, DES, CA), IOS ACL, IOS Authentication Proxy, Secure Shell, IOS CBAC, IOS IDS, Cisco Secure Scanner, Cisco Intrusion Detection System, Cisco VPN Client.

Network Analysis and Management Tools:  Spirent, iTest, Schenick, Sniffer, CiscoWorks, HP Openview, Solarwinds, Spectrum, What’s UP Gold, IPAM (IP Management), runIP, QIP etc.

Misc Skills: IBM Web Sphere, Apache Web Server, IIS, HTML, DHTML, FrontPage, Dreamweaver and other web designing and administration tools.

PROFESSIONAL EXPERIENCE:

Senior Design Engineer

Confidential, New York City

• Member of the elite Strategic Trading Infrastructure (STI) team.
• Responsible for creating Designs and Standards for the next-gen ultra low latency trading platforms based on the Cisco Nexus 2k, 3k, 5k and 7k platforms.
• Created designs and configuration standards for Citi’s new ultra low latency CoLo at the Equinix Data Center.
• Created designs and configuration standards for all vendor and client XConnects migration to the new CoLo.
• Successfully migrated Radianz, TNS and IPC extranet clients over to the new CoLo.
• Successfully migrated Savvis extranet connectivity for CME, NASDAQ, BATS & other Market Data providers.
• Designed the new Internet DMZ at the Rutherford Data Center for Citi’s planned shut-down of the Connecticut Data Center.
• Successfully designed and standardized the architecture for the various Application Separation projects at Citi. A massive project that includes critical trading, prop trading, black pool applications such as CX, ColorData, Color Book and Lava Flow.

Solutions Engineer

Confidential, New York City

• Engineering team lead for Confidential ’s $1.2 Billion “MSSB” project involving migration of 900+ Confidential and Smith Barney branches & campus sites to the Verizon MPLS PiP cloud
• Designed MSSB & JV DMZ’s at Confidential Data Centers
• Created the engineering design, migration strategy & run-books for branch migrations
• Created the branch routing architecture and separated the Confidential Data, Smith Barney Data & Voice traffic flows deploying multiple VRF’s on the CE.
• Deployed entire range of Riverbed Wan Optimizers at all 900+ locations
• Migrated all MS & Citi financial applications for routing over the MPLS PiP cloud for all branches and campus sites to access.
• Migrated all 3rd party Vendors over from the legacy Data Centers over to the new MSSB Regional Data Centers.
• Created NAT’ing policies on the firewalls & DMZ switches for application migration & vendor connectivity.
• Tested and developed configuration standards and templates for ALL branch types.
• Managed a team of 4 Deployment Engineers
• Sole point of communication for engineering exchange with the Verizon engineering team located in various time-zones
• Provided engineering supervision and Tier 4 escalation and support for all complex routing/network issues related to the branch, campus and data center migrations.

Sr Network Design Engineer

Confidential, New York City

• Redesign of Confidential ’s core IGP. Migration from EIGRP to OSPF.
• Redesign of Confidential ’s TPNC, eDMZ and external Firewall environments.
• Design strategy and standardization of client connectivity within Confidential ’s TPNC environment.
• BGP peering design and configuration standardization across all client connectivity.
• Defined company wide “Change Implementation” & “Escalation” procedures and RoE.
• Formulation of firewall policies for all new application rollouts.
• Monitoring & Analysis of weekly bandwidth trends across critical WAN links, Internet Gateways etc using various Network Management tools such as eHealth and Spectrum.
• Pre staging & benchmarking of all network equipments to be included in Confidential ’s “Pre-Approved Hardware List”.
• Provided Level 3 support for critical network issues.

Sr. Network Design Engineer

Confidential, New York City

• BGP peering design and configuration within the Confidential global Tier 1 core as well as formulation of BGP routing policy standards for connectivity with the B2B clients.
• Design strategy and routing architecture for data center connectivity to the Tier 1 global core.
• Design and implementation of Forwarding plane separation for Internet, VPN and Application traffic.
• Low level design and Method of procedure for migrating various customers during data center move from NY to PA.
• Designed and standardized Confidential ’s VPN infrastructure and Method of procedure for provisioning new client connectivity via the VPN.
• Designed and planned strategy for migration of Confidential ’s old Market Data infrastructure to a new firewall controlled infrastructure.
• Analysis of Internet traffic flow and planning of alternate and higher capacity Internet pipes.
• Technical Design Lead for various major EOL projects in the AMRS region.
• Designed and implemented redundant BGP peering architecture for servicing the Confidential data center’s.
• Low level design and implementation of the Confidential ’s External Connectivity Utility (ECU) within the data-center at PA.
• Designed and implemented a secondary infrastructure within the Confidential External Connectivity Utility (ECU) for the separation of the Internet traffic from other application traffic at the Staten Island data-center.
• Creation of firewall security & NAT policies for all Confidential business applications and B2B connectivity.
• Extensive experience working with Radianz and TNS in deploying B2B connectivity/applications utilizing NAT’s and Double NAT’s.
• Redesigned and migrated all of Confidential B2B & VPN Client connectivity from New York to PA.
• Pre staging and testing of all hardware and software components required before rollout of new projects.
• Deep experience in designing and deploying infrastructure for key financial applications and protocols such as FIX, CCA, FTP Drop boxes etc.
• Key member of final escalation team at Confidential for all network related technical issues.

Sr. Network Engineer

Confidential, New York City

• Responsible for design and deployment of new B2B client connectivity through the Confidential ’s EBNC environment in the entire northeast region deploying L3 routing involving RIP2, EIGRP and BGP peering with the clients.
• Lead for the project involving migration of 100+ client connections through TNS and Radianz from New York to New Jersey and ensuring L3 convergence in the optical core and backups at various locations across the country.
• One point authority for approving and submitting new client connection (LVC) requests to TNS and Radianz on behalf of the Bank.
• Handled multiple projects for BofA for building-out multiple trading floors across the city as per the Bank’s LAN standards.
• Close interaction with the Bank’s governance team for formulation of new EBNC standards.
• Part of the core team for the tier-2 support for LAN and WAN in the northeast region.
• Provided tier-2 support for the Server Distribution and User distribution blocks for Data Center’s in New York City and Secaucus.
• Problem ticket queue management and resolution at Tier-2 using Peregrine Service Centre.
• Responsible for escalating unsolved issues to Cisco TAC and implementing the same in the network.

Network Architect (ISP and CORE)

Confidential

• Responsible for the nationwide Architecture, Design & detailed Engineering of Reliance Broadband Internet Access, involving the Cisco SESM/SSG (7301) deployment solution.
• Responsible for the Architecture and integration of nationwide WLAN Hot-Spots with the Cisco SESM/SSG solution.
• Engineered the Cisco BRAS to integrate with the Reliance Metro Ethernet Network
• Designed the routing architecture (OSPF) for the Metro Ethernet nationwide Network.
• Responsible for the nationwide Architecture, Design & detailed Engineering of Reliance Narrowband Internet Access and RA-MPLS, involving the entire range of Cisco NRAS boxes.
• Designed, Architected and Implemented Security policies for the BRAS, NRAS and VoIP deployments using Cisco PIX 535 and Session Border Controllers for VoIP utilizing SIP and H.323 VoIP protocols.
• Creation of Method Of Procedure and coordination among the various internal RIC groups for all major Planned events on the Reliance Backbone.(RDN)
• Formulation of BGP peering and routing policies for all RIC Internet bandwidth peering with external providers like UUNET, FLAG, REACH, SPECTRANET, VSNL etc
• Creation of firewall security policies for all RDN network elements
• Team lead for testing all IOS software releases
• Key member of final escalation team in RIC for all RDN related technical issues

 Network Engineer 

Confidential  

Responsibilities:

• Was responsible for designing and implementing LAN and WAN solutions for various clients.
• Monitored, maintained Cisco routers and switches installed at dedicated/shared T1 client’s locations and Allocating IP address space for clients as and when needed.
• Installed Cisco 75xx/72xx/26xx/25xx Routers.
• Configured Networks using RIP, OSPF and BGP protocol.
• Implemented VPN for dial-up clients for secured access over Internet.
• Implemented dedicated T1 access to internet for both head quarters and branch office with Cisco 2610 routers.
• Installed, configured 2 Cisco 2600 series routers, 3 Catalyst 3500 series switches and PIX-515 firewall for providing security between internal and external network.
• Designed, Installed and configured 2 Catalyst 4000 with layer 3 capabilities for inter vlan routing and 6 Catalyst 3500 Switches with Gigabit Ethernet Uplinks.
• Performed protocol migration and implemented OSPF across 15 sites, implemented firewall based on Cisco ACLs and CBAC.
• Implemented security policies on PIX firewalls to secure DNS, WEB, SMTP, RADIUS and other services
• Designed, implemented phase of centralized Intrusion Detection System.
• Did Troubleshooting complex BGP, OSPF and router related problems.
• Roll out of VPN solutions like NAT, GRE tunneling, IPSec.
• Did network performance optimization and monitoring by using HP Openview, Cisco Works 2000.
• Followed up with Cisco TAC for unresolved problems.