We provide IT Staff Augmentation Services!

Senior Network Security Engineer / Network Security Architect Resume

4.00/5 (Submit Your Rating)

Reston, VA

PROFESSIONAL SUMMARY:

  • Having around 14+ years of experience in Network & Security.
  • Worked extensively in infrastructure management services in production environment and data center engineering and operations.
  • Hands on network security implantation for data centres.
  • Cisco Certified Network Associate (CCNA)
  • Cisco Certified Network Professional (CCNP Routing & Switching)
  • Information Technology Infrastructure Library(ITIL)
  • Splunk Training Certification

TECHNICAL SKILLS:

Routing Protocols:: EIGRP, OSPF, BGP,MPLS,DMVPN,SD WAN

Firewall: : Cisco ASA, Cisco Pix, Palo alto, Check point, Juniper

Switches: Cat 6500,3600,& Nexus models like 7K, 5K, 9k and 2K series.

Routers:: ASR1000 series and ISR Routers

Tools: : Splunk, Source fire 3D8140, Nexpose,Websense,STIG, Service Now, Solar winds, Netscout, Cisco Prime, Tufin secure track & change, Cisco ACS, Cisco ISE,wireshark, Cisco Meraki

Load Balancers:: F5(VIPRION,LTM,, GTM, BIG IQ modules, CSS, Kemp

Voip: QOS, Voice vlan,SIP,RTP, Cisco, Avaya

IPICS tool: Windows, Linux and Vmware environment knowledge

Wireless: 5000 series controller and 3500 series access point

  • Knowledge in DHCP, DNS, Multicast
  • Good knowledge of PXE for remote boot and ILO configuration and management
  • Capable of handling Switching Configuration like Vlan, Trunking, VTP, STP, RSTP, Port - Security, HSRP, VRRP, GLBP
  • Involved in configuring Cisco Access Points and WLAN controllers.
  • Maintained configuration backups for all network and security devices in periodic intervals.
  • Involved in various features & services HSRP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP Management.
  • Experience in identifying potential threats and ensuring security of network systems
  • Strong knowledge of system, network security, log analysis, and intrusion detection technologies

Server Software: Windows 2000 Server, Windows 2003 Server, Windows 2008 Server, Terminal Server, ISA Server and Exchange Server 2003, Active directory, Dhcp servers

  • Expert in taking quick action on cyber threat intelligence
  • Superior knowledge of TCP/IP, firewalls, routers, and network protocols and technologies
  • Excellent communication, organization, and troubleshooting skills
  • Expert in project management, risk assessment, and security audits
  • Experience in Visio diagrams

PROFESSIONAL EXPERIENCE:

Confidential, RESTON, VA

Senior Network Security Engineer / Network Security Architect

  • Experience on working with Designing, Installation, configuration Cisco ASA, Palo Alto Next Generation firewall (5060,3060), Juniper SRX4100 with security, networking and management features such as URL filtering, IPsec, VPN, SSL-VPN etc
  • Working experience versa SD WAN network (Controller, PE, open stack, Linux)
  • Experience on working with Designing, Installation, configuration Nexus switches 7k,5k, 2k,9k
  • Involved in Data center Migration projects
  • Working experience in Datacenter Technologies such as VDC,VPC,OTV,VLAN
  • Configuring Routers, switches and installing for branch connectivity
  • Handling MPLS Network Management (T1 links)
  • Hands on experience in visio network diagrams
  • Cisco ISE server installation, configuration and management
  • Configuring Radius, TACACS+,AAA
  • Handling F5(VIPRION,LTM, GTM)
  • Working knowledge in IPICS tool
  • Extensive experience with Big-IP LTM and ASM modules in a large shared environment
  • Demonstrate an ability to craft and understand iRules
  • Experience with TCPDump, Wireshark and analyzing network traffic
  • DMVPN Implementation and Management.
  • Providing Voip phone support and installation and configuration
  • Cisco ASA to Paloalto firewall migration.
  • Demonstrate a solid understanding of the OSI and TCP/IP network models and provide examples
  • Working experience In Cisco Meraki tool. creating virtual servers, pools/pool members, nodes, monitors, iRules etc.. Furthermore, the engineers will be responsible for all load balancer support for cloud service providers
  • Experience analyzing security impacts and risks to websites, explain crafting ASM policies with examples.
  • Responsible for the installation, configuration and maintenance of the F5 BIG IP infrastructure supporting
  • Experience in custom SSL, ciphers, and LTM traffic performance optimization
  • F5 SSL certificate updates
  • Experience with supporting and maintaining wireless networks
  • Intermediate knowledge of networking and systems administration; and the ability to troubleshoot problems
  • Source fire Firesight Management and Intrusion Events with Impact levels
  • Monitoring the real time vulnerabilities logs and threat analyze
  • Enforce security Usage policies
  • Monitor and act unusual network behavior worked Source fire 3D8140 module
  • Installing and Managing source fire
  • Checkpoint Firewall rules, site to site and VPN management.
  • Implementing and configuring SD WAN implementation. ( Design and deploy VMware cloud environment, Linux OS)
  • Extensive knowledge on IPS, encryption, IPsec, DMVPN, Site to Site VPN tunnels and SSL certifications.
  • Implemented security policies by creating groups (objects) and specific policies as per the user levels.
  • Captured miscellaneous packets by configuring span port and analyzed the using WIRESHARK.
  • Configured and monitored Firewall logging in zone based protections by dividing DMZ's and with related security policies at zonal levels.
  • Configure NAT and HIDE such as Dynamic, Static, and Manual NAT policies as required for user traffics going out to the internet.
  • Configuration of ACLs in Cisco 5540 series ASA firewall for Internet Access requests for servers in LAN and DMZ and for special user requests as authorized by management.
  • Implemented Site-to-Site VPNs over the internet utilizing 3-DES, AES/AES-256 with ASA Firewalls.
  • Extensively worked on Configuring, Monitoring and Troubleshooting Cisco's ASA 5500 with NAT, Object Groups, Failover, Multi-Contexts levels.
  • F5 Load balancer Management.
  • Experience in SIEM Tools ( Splunk,Wireshark)
  • Nexpose VA reports
  • STIG validation
  • Splunk log analyze
  • Working knowledge in packet captures and packet tracer in Cisco ASA firewall.
  • Good experience in working with F5 Load Balancer.
  • Source fire Firesight Management and Instrusion Events with Impact levels
  • Monitoring the real time vulnerabilities logs and threat analyze
  • Enfore security Usage policies
  • Active directory user management.
  • Moniot and act unusual network behavior worked Source fire 3D8140 module
  • Installing and Managing source fire
  • Configuration and Administration of Cisco and Juniper Routers and Switches
  • Experience working with Nexus 7010, 5548, 5596, 2148, 2248 devices.
  • Experience in working with NTP Servers.
  • Good experience in working with the troubleshooting the servers situated in the Data Center.
  • Troubleshooting the network with the Packet capturing in Wireshark and resolving the issue using the filtering of the packet capture using TCP/IP filtering there.
  • Worked in adding the static Routes to the Router, which is configured by BGP protocol.
  • Installation of the SSL Certificates in the F5 BIGIP, after the creation of the CSR. Then installed the SSL Certificate in the VIP (Virtual Server) in the
  • Penetration Analysis for network devices
  • Network security including NAT/PAT, ACL, and ASA Firewalls.
  • Working knowledge in Symantec End point
Confidential, Madison, WI

Senior Network Security Engineer / Technical Solution Network Security Architect

Responsibilities:

  • Responsible for Crossroads roll out of LAN/WAN, DMVPN problem determination and diagnosis, provide project leadership
  • Experience on working with Designing, Installation, configuration Cisco ASA, Palo Alto Next Generation firewall (5060,3060) with security, networking and management features such as URL filtering, IPsec, VPN, SSL-VPN etc
  • Experience on working with Designing, Installation, configuration Nexus switches 7k,5k, 2k,9k
  • Involved in Data center Migration projects
  • Working experience in Datacenter Technologies such as VDC,VPC,OTV,VLAN
  • Configuring Routers, switches and installing for branch connectivity
  • Handling MPLS Network Management (T1 links)
  • Involved in Cisco ACS to ISE migration project
  • Worked on Radius, TACACS+,AAA
  • Experience in SIEM Tools ( Splunk,Wireshark)
  • Working knowledge in IPICS tool
  • Hands on experience in visio network diagrams
  • Cisco ISE server installation, configuration and management
  • Hands on experience in High level network design. ( Firewalls, Routers, Datacenter)
  • Hands on experience in Websense and nexpose, Splunk tools
  • Experience in Source fire IPS/IDS
  • Handling F5(VIPRION,LTM, ASM, APM, GTM, AFM, BIG IQ modules
  • Hands on experience in Websense and nexpose, Splunk tools
  • Extensive experience with Big-IP LTM and ASM modules in a large shared environment
  • Demonstrate an ability to craft and understand iRules
  • Experience with TCPDump, Wireshark and analyzing network traffic
  • Demonstrate a solid understanding of the OSI and TCP/IP network models and provide examples creating virtual servers, pools/pool members, nodes, monitors, iRules etc.. Furthermore, the engineers will be responsible for all load balancer support for cloud service providers
  • Experience analyzing security impacts and risks to websites, explain crafting ASM policies with examples.
  • Responsible for the installation, configuration and maintenance of the F5 BIG IP infrastructure supporting
  • Experience in custom SSL, ciphers, and LTM traffic performance optimization
  • F5 SSL certificate updates
  • Demonstrate a solid understanding of the OSI and TCP/IP network models and provide examples
  • Experience analyzing security impacts and risks to websites, explain crafting ASM policies with examples.
  • Experience in custom SSL, ciphers, and LTM traffic performance optimization
  • Experience with supporting and maintaining wireless networks
  • Intermediate knowledge of networking and systems administration; and the ability to troubleshoot problems
  • Checkpoint Firewall rules, site to site and VPN management.
  • Involved in cisco ASA firewall migration
  • Change, Incident and Problem Management.
  • Worked on Datacenter Migration Project.
  • Worked on Firewall Migration projects.
  • Source fire Firesight Management and Instrusion Events with Impact levles
  • Monitoring the real time vulnerbilities logs and threat analyze
  • Enfore security Usage policies
  • Moniot and act unusual network behaviour
  • Working experience In Cisco Meraki tool. worked Source fire 3D8140 module
  • Installing and Managing source fire
  • Experience in SIEM Tools
  • Worked on STIG validation
  • Disaster recovery Plan prepared and conducted BCP drills.
  • Penetration Analysis for network devices
  • Worked on Vmware, SQL, Unix and database environment
  • Migrated Cisco ACS to Cisco ISE all the network devices and wireless radius authentication configuration.
  • Implementing, configuring, and troubleshooting various routing protocols like EIGRP, OSPF, and BGP, MPLS
  • Responsible for maintaining and ensuring the proper functioning of all network devices (Routers/switches, Cisco Routers/Switches, Cisco ASA firewalls, and load balancers (LTM)).
  • Troubleshooting, problem determination, diagnosis of performance issues, bandwidth issues, throughput traffic prioritization to improve overall application response time for WAN network.
  • Participating in the design and planning aspects of the network infrastructure that installed in the new building.
  • Implementation and troubleshooting F5 Load balancers.
  • Implementation, configuration & troubleshooting the issues related to Virtual Servers, pools, nodes & certificates on F5 Load Balancer
  • Configuration and installation of LAN switches and wireless network infrastructure equipment and cabling all uplink and user network connections.
  • Working knowledge in Symantec End point
  • Participating in testing of the internal network infrastructure in the new building, and troubleshooting any issues.
  • Deployed QOS for VOIP phones
  • Deployed Cisco Catalyst 6500, 4500, 4000, 3750, 3850, 3560 switches
  • Installed and monitored extreme networks 7100 stackable switches.
  • Indepth knowledge in analyzing splunk logs
  • Deployed and configured Cisco ASR 1000, 7000, 9000 series routers
  • Also worked with Extreme networks wireless devices like Access points AP3705, AP3610.
  • Configured session persistence and web services.
  • Installed Cisco 2500 and 5800 Series Wireless Controllers and Access Points
  • Design and configuring of OSPF, BGP on ASR Routers
  • Design and configured of OTV using ASR routers
  • Security policy review and configuration in Palo Alto and Cisco ASA Firewall in US offices and Datacenter.
  • Configured Multi protocol Label Switching (MPLS) VPN with Routing Information Protocol (RIP) on the customer's stage.
  • Worked and performed troubleshooting, implementing, optimizing and testing of static and dynamic routing protocols such as EIGRP, OSPF, BGP ability to interpret and resolve complex route table problems.
  • Experience with Security- Firewalls, NAT / PAT, IPSEC, S2S.
  • Experience with STP, RTSP and FTP, DNS, HTTP, DHCP
  • Level-3 network administration including Installation, configuration and troubleshooting of Wireless Networks.
  • Experience in DMVPN deployments for branch network
  • Worked with ITIL (Information and technology information library ) for managing our services.
  • Back up a Cisco IOS to a TFTP server and Upgraded and restored a Cisco IOS from TFTP server.
  • Configured and perform trouble shooting on Dell Power Connect Switch 5548 used to connect VM Servers and Flex Systems.
  • In-depth expertise in the implementation, optimization, troubleshooting and documentation of LAN/WAN networking systems.
  • Worked on a broad range of topics such as proactive monitoring and maintenance, disaster recovery exercises, and core network repairs
  • Worked independently, meted deadlines provided detailed written status reports, documentation, work on multiple simultaneous projects and track status and progress on each.
Confidential

Senior Network Security Engineer

Responsibilities:

  • Implementing, configuring, and troubleshooting various routing protocols like EIGRP, OSPF, and BGP, MPLS
  • Experience with supporting and maintaining wireless networks
  • Intermediate knowledge of networking and systems administration; and the ability to troubleshoot problems
  • Managed Vulnerability reports using Nexpose
  • Worked on Radius, TACACS+,AAA
  • Active directory user management.
  • Penetration Analysis for network devices
  • Change, Incident and Problem Management.
  • Working knowledge in IPICS tool working experience in Sourcefire IPS/IDS
  • Disaster recovery Plan prepared and conducted BCP drills.
  • Coordinated with centralized helpdesk for any issues reported and working towards resolution for the incidents.
  • Under Infrastructure resiliency flavor in the team, involved in bridging configuration gaps as per the Grainger Standards, so that Hardware Level Resiliency has been achieved.
  • Transitioning the new changes in connectivity of the project to validate under NOC support Model.
  • Involved in Capatity Management to check Bandwidth availability and coordinating with teams to upgrade circuits when required.
  • Involved in Problem Management to provide RCA analysis on Priority 1 calls.
  • Involved in Incident Management, as entire support is based on ticketing system by Grainger
  • Involved in design and implementing of new facilities and new projects.
  • Configured switch-ports security, VLANs on Cisco Catalyst 6509 and 3750 switches
  • Managed Cisco PIX firewall for ACL and VPN.
  • Created and maintained topological changes for Test Labs, Data Center and Switch port assignment in Visio.
  • Level-3 network administration including Installation, configuration and troubleshooting of Wireless Networks.
  • Handling F5 LTM, GTM, AFM, APM, BIG IQ modules
  • Extensive experience with Big-IP LTM and ASM modules in a large shared environment
  • Demonstrate an ability to craft and understand iRules
  • Experience with TCPDump, Wireshark and analyzing network traffic
  • Demonstrate a solid understanding of the OSI and TCP/IP network models and provide examples creating virtual servers, pools/pool members, nodes, monitors, iRules etc.. Furthermore, the engineers will be responsible for all load balancer support for cloud service providers
  • Experience analyzing security impacts and risks to websites, explain crafting ASM policies with examples.
  • Responsible for the installation, configuration and maintenance of the F5 BIG IP infrastructure supporting
  • Experience in custom SSL, ciphers, and LTM traffic performance optimization
  • F5 SSL certificate updates
  • Backup, restoring and upgrading the Router and switch IOS.
  • Document all changes, upgrades, maintenance, procedures.
  • Facilitate the end-to-end connectivity implementation.
Confidential

Senior Network Security Engineer

Responsibilities:

  • Cisco Nexus 7k,5k,2K Datacenter switches Implementation and configuration.
  • Checkpoint firewall and Juniper SRX4100 Implementation and management.
  • Implementing, configuring, and troubleshooting various routing protocols like EIGRP, OSPF, and BGP, MPLS
  • Worked on Radius, TACACS+,AAA
  • Handling F5(VIPRION,LTM, ASM, APM, GTM, AFM, BIG IQ modules
  • Working experience in IPS and IDS and signature updates.
  • Configured various Routing protocols such as OSPF, EIGRP, static routing.
  • Level-3 network administration including Installation, configuration and troubleshooting of Wireless Networks.
  • Provided configuration of STP and Port Security on Catalyst 6500 switches.
  • Configured QOS parameters in Nexus 9k (9500) Switches.
  • Performed redistribution with OSPF, EIGRP to enable communication with backbone.
  • Managed the Cisco network infrastructure using Cisco Prime.
  • Disaster recovery Plan prepared and conducted BCP drills.
  • Implementing and troubleshooting WEP WPA2 wireless security protocols
  • Worked with Ixia XR 2000 Devices for in-band and out-band management.
  • Worked extensively on Cisco ASA 5500 (5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.
  • Troubleshooting BGP complex routing issues in a large scale ISP network.
  • Responsible for implementation of MPLS based VPNs for various enterprise Customers.
  • Configured, installed and deployed Nexus 7K switches at the core and distribution levels.
  • Implemented routing protocols such as OSPF for the new network. Involved in L2/L3 Switching Technology administration including creating and managing VLANs, VTP, Dot1Q, Port security, Trunking, Etherchannel, STP, SVI, LAN security.
  • Created ACLS based on certain requirements at the client side to access the internal network and the internet.
  • Configuration Implementation & Troubleshooting of Checkpoint Firewall ( R77).
  • Configuration of Static NAT and Hide NAT in Checkpoint Firewall.
  • Penetration Analysis for network devices
  • Configuring and Management IPsec VPN in Checkpoint Firewall.
  • Monitoring and Troubleshoot IPS/IDS and common network traffic.
  • Working knowledge in IPICS tool
  • Create Firewall Policy rule base in smart dashboard and assign permission.
  • URL and Application Filtering configuration in Checkpoint.
  • Anti-spoofing configuration in Checkpoint.
  • Having Knowledge of Cluster, High Availability, Active - Active, Active - Stand by on checkpoint.
  • Backup & Restore of configuration of Checkpoint.
  • Basic Configuration of CISCO ASA Firewall, Interface Configurations and ACL.
  • Configure site to site IPsec & Remote access VPN (Client mode & Hardware mode) SSL VPN (Client less & any connect) on Cisco ASA Firewalls.
  • Having knowledge of Static NAT, Dynamic NAT and Dynamic PAT in CISCO ASA Firewall.
  • Creating and Implementing ACL in Cisco Router.
  • Working on the regular ticket, Incidents.
  • Responsible for securing the organization network security.
  • Sound Knowledge of LAN/WAN Technologies: STP, RSTP, VLAN, Inter VLAN, VTP, Ether channel/port channel.
  • Configuration of Aruba WIFI access points (IAP).
  • •Configuring UTM- Site to site VPN, Web Filtering, Content filtering, application Filtering, Policies, Antivirus
Confidential

Senior Network Security Engineer

Responsibilities:

  • Responsible for implementing, supporting, and maintaining 24x7 network services.
  • Coordinated efforts with Engineer's to ensure all network devices conformed to defined network standards.
  • Designing and Configuration of Corporate network which include configuration network Equipment such as Cisco ASA Firewall, network Switches and Router.
  • Worked F5 suites LTM, GTM, AFM, APM, BIG IQ modules
  • Designed, configured and implemented HSRP, BGP, EIGRP, OSPF, and MPLS WAN in multi-protocol network environment.
  • Change, Incident and Problem Management.
  • Built LAN/ WAN TCP/IP network comprised of Cisco Switches (6500, 7000, 3750, 3500, and 2900)
  • Worked on Radius, TACACS+,AAA
  • Provided Desktop support
  • Disaster recovery Plan prepared and conducted BCP drills.
  • Developed an optimum IP Addressing schemes, VLAN tables, and network documentation and diagrams (Visio)
  • Hands on experience on subnetting and VLSM, STP, VTP, VLAN trunking.
  • Troubleshooting on all Cisco IOS and Catalyst switches on the network which included but was not limited to; 3700, 7200 and 7500 series routers and catalyst 6513 and 6509 switches.
  • Monitored network traffic via network monitoring tools and sniffers in an attempt to troubleshoot network outages and intrusions by tracing their origin and destination.
  • Installation, configuration and maintenance of Palo Alto, Cisco ASA 5500, Juniper SRX and ISG Firewalls
  • Providedlevel-3 network administration including Installation, configuration and troubleshooting of Wireless Networks.
  • Knowledge and experience of 802.11 a/b/g/n Ethernet standard for wireless Technology.
  • Implemented, configured redundancy protocols HSRP, VRRP, GLBP for Default Gateway Redundancy.
  • Performing network monitoring, providing analysis using various tools like Wireshark, Solar winds, Cisco Prime within environment.
  • Responsible for Cisco ASA Firewall administration, rule analysis & modification
  • Configured and Implemented Site-to-Site VPNs at branch sites.
  • Configured and implemented Remote Access VPN using Cisco's VPN client via IPSEC.
  • Worked on F5 and CSM load balancers deploying many load balancing techniques with multiple components for efficient performance.
  • Installation, configuration and maintenance of Cisco Routers like 3600, 7200 and juniper mx series.
  • Had hands on VoIP systems employ session control and signaling protocols to control the signaling, set-up, and tear-down of calls
  • Working on Active Directory to add users to new groups and change user's policies
  • Working on IPS and IDS (source fire)
  • Penetration Analysis for network devices
  • Preparing document manuals for the new work procedure, keeping records of work done and updating work logs and trackers.
Confidential

Senior Network Security Engineer

  • H ands on experience in configuring site-to-site VPN with IPSEC
  • Experienced in installing and troubleshooting data circuit problems (MPLS, T1).
  • Worked on Radius, TACACS+,AAA
  • Implementing VoIP solutions using SIP & H.323, also knowledge of Avaya VoIP product.
  • Configuring BGP/OSPF routing policies and designs, worked on implementation strategies for the expansion of the MPLS VPN networks.
  • Change, Incident and Problem Management.
  • Disaster recovery Plan prepared and conducted BCP drills.
  • Windows AD Administration.
  • Configured RIP, EIGRP, OSPF, BGP routing and IP access filter policies.
  • Worked on the upgrades on Cisco Routers during production maintenance windows.
  • Configured and managed OSPF redistribution and authentication with type 3 LSA filtering and to prevent LSA flooding and configured OSPF over frame relay networks.
  • Maintained TACACS+ and RADIUS servers for AAA and user authentication.
  • Configured PVSTP+ for loop prevention and VTP for Inter-VLAN Routing.
  • Worked on Extensively on Cisco Firewalls ASA 5500(5510) Series.
  • Provided level-3 network administration including Installation, configuration and troubleshooting of Wireless Networks.
Confidential

Senior Network Security Engineer

Responsibilities:

  • I mplemented and delivered services to our customers and partners on a variety of platforms and vendors, including Cisco and F5
  • Configured and optimization settings of Riverbed.
  • Troubleshooting of Cisco 2900, 3900, 6500, 7500, 7200, ASR 1000 Series routers.
  • Configured static NAT, dynamic NAT, dynamic NAT overloading.
  • Back up a Cisco IOS to a TFTP server and Upgraded and restored a Cisco IOS from TFTP server.
  • Worked on Radius, TACACS+,AAA
  • Coordinated efforts with Engineer's to ensure all network devices conformed to defined network standards.
  • Monitoring and troubleshooting network infrastructure in NOC
  • Configured various Routing protocols such as OSPF, EIGRP, static routing.
  • Provided configuration of STP and Port Security on Catalyst 6500 switches.
  • Deploying and upgrading of 802.11B/G/NAC Wi-Fi in both the 2.4 and 5 GHz frequencies
  • Knowledgeable in application transport and network infrastructure protocols (SSL, DNS, DHCP, WINS, NTP, FTP, HTTP, SMTP,LDAP)
  • Troubleshooting of Cisco 2800, 2900, 3900, 7200, 7600, ASR 1000 Series routers.
Confidential

Network Engineer

Responsibilities:

  • Designed, Implemented and configured HSRP on different location of office on the switched Network and Managed the Entire multi layer switched network.
  • Experience with Checkpoint Firewall policy provisioning.
  • Configured and Maintained the Local Network using 2900, 6500 series Switches and 2800 series Routers.
  • Configured and installed the 3600 series Router.
  • Implemented Site-to-Site VPNs over the Internet utilizing 3DES, AES/AES-256 with ASA Firewall 5505.
  • Configured Protocol Handling, Object Grouping and NAT on ASA Firewalls (5505).
  • Configured Firewall logging, DMZs and related security policies and monitoring.
Confidential

Network Administrator

Responsibilities:

  • Involved in Installing and Configuring a Cisco/Microsoft secure ACS server for AAA authentication (RADIUS/TACACS+).
  • Troubleshoot latency and throughput issues on MPLS and Dedicated Internet Access circuits.
  • Provide high level technical support, including identifying and resolving problems on Cisco supported products for e-Commerce infrastructure. This included external routing and internal/intranet routing for DMZ servers.
  • Implemented cable multi-service operator (MSO) to capture traditional Telco subscribers with IP telephony and provide relevant QOS.
  • Configured EIGRP, BGP, and MPLS.
  • Configured Firewall, QOS by SDM and provide security by Prefix list, Access- List and by Distribution List.
  • Moved Core switches and several non-Cisco devices under strict deadlines to maintain network functionality
  • Implemented new ultra-secure networks in multiple data centers that included Cisco, Juniper security devices.
  • Designed VLAN's and set up both L2 and L3 logical to have it communicate to the Enterprise network.
Confidential

Network Administrator

Responsibilities:

  • Configured EIGRP, BGP, and MPLS.
  • Configured Firewall, QOS by SDM and provide security by Prefix list, Access- List and by Distribution List.
  • Moved Core switches and several non-Cisco devices under strict deadlines to maintain network functionality
  • Implemented new ultra-secure networks in multiple data centers that included Cisco, Juniper security devices.
  • Designed VLAN's and set up both L2 and L3 logical to have it communicate to the Enterprise network.

Confidential

Project Manager

Responsibilities:

  • Responsible for implementing, supporting, and maintaining 24x7 Confidential network services.
  • Coordinated efforts with Engineer's to ensure all network devices conformed to defined network standards.
  • Designing and Configuration of Corporate network which include configuration network Equipment such as Cisco Switches and Router.
  • Designed, configured and implemented HSRP, BGP, EIGRP, OSPF, and MPLS WAN in multi-protocol network environment.
  • Built LAN/ WAN TCP/IP network comprised of Cisco Switches (6500, 7000, 3750, 3500, and 2900)
  • Developed an optimum IP Addressing schemes, VLAN tables, and network documentation and diagrams (Visio)
  • Hands on experience on subnetting and VLSM, STP, VTP, VLAN trunking.
  • Troubleshooting on all Cisco IOS and Catalyst switches on the network which included but was not limited to; 3700, 7200 and 7500 series routers and catalyst 6513 and 6509 switches.
  • Monitored network traffic via network monitoring tools and sniffers in an attempt to troubleshoot network outages and intrusions by tracing their origin and destination.

We'd love your feedback!