PROFESSIONAL SUMMARY:

• CCNP Certified Professional with 8 years of experience in routing, switching, firewall technologies, system design, implementation, troubleshooting of complex network systems, enterprise network security, wireless design, data network design, capacity management and network growth.
• Exposure to LAN/WAN setup, installation, configuration and troubleshooting on Cisco Routers, Cisco Switches, Nexus Switches, Firewall, Proxy, VPN Concentrator.
• Experience installing, configuring and troubleshooting Catalyst (2900, 3500, 3700 and 6500 Series), Nexus (5000, 2000 Series) Switches, and Routers (ASR 9K, 10K,2800, 3600, 4400, 7200 Series) using CLI and GUI.
• Experience configuring and troubleshooting OSPF, EIGRP, BGP, RIP, VLAN’s, Trunking, VTP, STP, PVST, RSTP, HSRP,802.1q, and Ether - channels.
• Worked on Palo Alto firewall and used panorama for centralized control of all the firewalls.
• Good knowledge of OSI Model and TCP/IP networking standards with protocols such as SNMP, FTP, ICMP and IPv6.
• Network security including NAT/PAT, ACL, HTTPS, Web Proxy, LDAP, VPN Concentrator, ASA/PIX Firewalls, Cisco IDS/IPS, AAA, Radius, TACAACS+, IPsec/SSL VPN and L4 - L7 protocol.
• Strong work experience with the following technologies MPLS, Q0S, VPN, WLAN and Multicast.
• Hands on experience working on Airmagnet Spectrum XT analyser in identifying RF interfaces impacting Wifi networks.
• Expert in Data Center Technologies such as VPC, VDC, VSS, STP, FCoE, OTV & FabricPath
• Tested wireless signal strength at various locations of the hospital campuses using Airmagnet .
• Implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, Route Maps and route manipulation using Offset-list.
• Perform … wireless site survey using Airmagnet suite of tools that included wireless survey pro and spectrum analysis.
• Perform active and passive WLAN surveysusing Airmagnet and Cognio spectrum analyser tools.
• Performed deep packet analysis to troubleshoot application issues using tools like Wire-shark.
• Experience with Cisco ISE and Cisco controllers and WAP
• Experience in installing, configuring and troubleshooting of Checkpoint Firewall and Juniper SSG series.
• Experience with F5 load balancers LTM, GTM series like 6400, 6800, 8800 for the corporate applications.
• Extensive understanding and knowledge using load balancers like F5, Citrix NetScaler Load Balancer and Cisco CSM
• Experience securing and managing remote access using various VPN technologies like IPSec, SSL, and GRE.
• Configured Client-to-Site VPN using SSL Client on Cisco ASA 5520 ver8.2.5re
• Knowledge of VoIP, Cisco Unified Communications Manager (CUCME).
• Knowledge on VxLAN and/or Application Centric Infrastructure (ACI).
• Worked with Infoblox for secure DNS, DHCP and IPAM, Cisco ACE GSS 4400 series global site selector appliance
• Deployment and Management of Bluecoat proxies in forward proxy scenario as well as for security in reverse proxy scenario.
• Intermediate level understanding of Juniper JUNOS, M series router and SRX firewalls.
• Working knowledge of network monitoring/management tools like Wireshark, TCPdump, Cisco Prime, Net Flow, PRGT, Solar Winds.
• Experience in diverse IT disciplines, including networking, technical support, programming, operating systems and system administration. worked on leading research and engineering team on rapid prototyping next generation cloud computing and software defined networking (SDN) products and services
• Strong documentation and diagraming skills
• Hands-on experience in the setup of HSRP, ACL, and tunnel installations.
• Enhanced level of knowledge with IGRP, PPP, ATM, and T1/T3 Frame-Relay.
• Working knowledge of Change Management Process and Trouble Ticket Escalation and ITIL Framework.
• Hands on experience to work with Linux Server, Vblock Server, UCS and VMware Server.
• Experience with Change management process and Project documentation tools like Excel and VISIO.
• Finely tuned analytical/critical thinking and debugging skills with excellent verbal and written communication skills.

TECHNICAL SKILLS:

Cisco Routers: 2800, 3600, 4400, 7200: Cisco

Switches: 2900, 3500, 3700, 5000, 6500

Nexus Switches: 5500, 5000, 2000

Other Hardware: F5 BIG-IP LTM Load Balancer, 7960 IP Phone

Networking: TCP/IP, UDP, ICMP, LAN, WAN, DHCP, DNS, FTP, TFTP, SNMP, ARP

Other Protocols: HSRP, GLBP, VRRP, QoS/CoS, VoIP, IPv4, IPv6, IP SLA

Security: ACL, NAT/PAT, ASA (5505, 5510) Firewall

Load Balancer: F5 Networks (Big-IP) LTM 6400, 1600

Firewalls: Cisco ASA 5520, 5550, 5540, Juniper SRX 240, 5400, 5600, 5800, Juniper, 6500, 5400 Palo Alto PA-3060/2050, Check point Firewalls R75, R76 and R77.

LAN: Ethernet, Fast Ethernet, Gigabit Ethernet

WAN: PPP, HDLC, Channelized links (E1/T1/E3/T3), Fiber Optic Circuits, Frame Relay.

Routing: EIGRP, OSPF, RIP, BGP, MPLS, PPP:

Switching: VLAN, VTP, STP/RSTP, Ether-Channel (PAgP, LACP), CEF

Operating Systems: Win XP, Win 7, Win 8, Win Server 2003, working knowledge of Mac OS X

Applications: Wireshark, PRTG, VMware, MS Visio, MS Office

PROFESSIONAL EXPERIENCE:

Confidential, NC

Network Engineer

Responsibilities:

• Worked on a migration project, from checkpoint to Juniper firewall devices.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco ASA's 5585.
• Responsible for Cisco ASA firewall administration, Rule Analysis, Rule Modification.
• Implementation of Access Lists for allowing/blocking desired traffic.
• Packet capturing, troubleshooting on network problems, identifying and fixing problems.
• Experience working in Datacenters environment, configuration changes as per the needs of company.
• Design network system architecture and implement the prototype of the system using SDN.
• Preformed IOS upgrades on cisco routers and switches.
• Expert level of understanding on OSI model layer.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing
• Experience in migration of VLANS.
• Design, build, standardize, and deploy new Data Center for multi-tenant / Cloud environment. This includes Nexus 7000/5000 and Cisco 3750/3850 series switches, ASR and CSRv routers, ASA / ASAv Firewalls and Cisco Identity Services Engine (ISE)
• Design, install, configure, troubleshoot and maintain varies load balancers including Citrix NetScaler, F5 BIG IP, Riverbed STM.
• Experience worked on VM Ware,
• Migration of application, server, service groups from Citrix NetScaler to F5.
• Involved in IP addresses allocation for all the networking devices including switches, routers, firewalls and F5 load balancers through DNS entry using Infoblox.
• Monitoring IP address blocks, Address inventory, DHCP scopes for the inside network infrastructure through IPAM Infoblox.
• Performed Configuration on ASR 9K Pairs includes HSRP, Bundle Ethernet Config, Assigning DHCP profiles
• Installed and configured storage VMware and worked Flex team for Configuring and installing Dell Power Connect switch 5548 and i Confidential easing their Bandwidth Usage.
• DDoS remediation using SDN techniques
• Extensive Knowledge on the implementation of Cisco ASA 5500 series and checkpoint R 75 firewalls
• Configuring objects such as Load Balancer pools for local traffic management on F5 Load Balancers
• Configuring VLANs/routing/NATing with the firewalls as per the network design.
• Experience in establishing NIC bonding/ teaming, IP aliasing.

Confidential, NC

Network Engineer

Responsibilities:

• Configuration 7500, 7200 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
• Create and test Cisco router and switching operations using OSPF routing protocol, ASA 5500 Firewalls, and MPLS switching for stable VPNs.
• Configuring new cisco switches in data centers WS-C 3560 (24ps & 48ps) as the part of migration plan.
• Experience working with Nexus 5K, 2K devices.
• Experience with configuration of Nexus 2000 Fabric Extender (FEX), which acts as a remote line card (module) for the Nexus 5ks.
• Adept knowledge in preparing Networking topologies, and technical documentation by using Microsoft Visio/Office.
• Hands on experience worked on Windows active directory.
• Hands on experience on monitoring tools HPNA, MMT.
• Worked with Motorola WiNG, ADSP, Cisco WCS, AirMagnet Survey Pro, Cisco switches and routers of various models.
• Perform Wireless Network surveys at customer locations either active or passive.
• Configure and troubleshoot VoIP via Cisco Call Manager/ Unified Communications
• Survey with Air Magnet site survey tools
• Working experience on ticketing tools, Device pro2, PAC 2000.
• Used AirMagnet Survey Pro and Cisco Spectrum Analyzer on almost daily basis.
• Install and configure L3 cisco switches like 4500, 3750, 3560 and L2 switch 2960 as per the requirements.
• Provisioning, installing, and ordering new circuits to new and existing sites.
• Long -standing professional customer relationship by providing adequate support to meet their expectations.
• Hands on experience working with Wireless LAN controller (WLC), and upgradation.
• Experience with F5 technologies (LTM, GTM, V9, V10 and V11).
• Manage Cisco ISE Deployments for various customers
• Managed the F5 Big IP backup and VIP creation.
• Involved in migrating applications from NetScaler to F5 Big - IP environment
• Deploying load balancing and failover solution with firewall and L3 switches
• Proactively monitor and manage all productions network systems to maximize system availability in Citrix NetScaler
• Configured address objects and service objects on Palo Alto PA 2050.
• Experience deploying BIG-IP F5LTM Load Balancers for load balancing and traffic management of business application.
• Commissioning & decommissioning, configuring, URL and Web filtering, SSL s, monitoring, SNMP traps, logging, blocking on Palo Alto PA-3060, migrating from one network to other.
• Configured and maintained IPSEC and SSL VPN on Checkpoint Firewalls.
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall
• Configuring firewalls for site to site tunnels, any-connect VPN, zoning.
• Document LAN/WAN infrastructure, such as network topology, subnets, firewall and router configurations, and other systems deemed to be critical.
• Add/modify rules in firewall as per application team requirement.
• Good knowledge of Checkpoint firewall technologies.
• Experience with Checkpoint Firewall R61 version
• Handle & troubleshooting Spanning tree related issues.

Confidential, Cincinnati OH

Network Engineer

Responsibilities:

• Implementing, configuring, and troubleshooting various routing protocols like RIP, EIGRP, OSPF, and BGP.
• Implementation of Wireless access points to newly opened branches and existing branches.
• Building new Verizon branch data networks of various sizes from small to large sites.
• Experience working on HP Blades, and on Virtual connect technologies.
• Implementation of Cisco 3750, 3850 switches and Cisco 3900 and ASR 1000s routers to new sites.
• Decommissioning and consolidating existing branch networks and connect network sites to the Internal MPLS cloud.
• Managed and deployed Cisco PIX and ASA firewalls
• Configured PVSTP+ for loop prevention and VTP for Inter-VLAN Routing.
• Involved in design, implementation and configuration of HSRP for load balancing on L3 switches on different location of office on the switched network.
• Deploying and decommission of VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices.
• Involved in L2/L3 Switching Technology Administration including creating and managing VLANs, VxLAN, Port security, Trunking, STP, Inter-Vlan routing, LAN security.
• Involved in Network Designing, Routing, DNS, IP Subnetting, TCP/IP protocol.
• Configuring Quality of Service best practices for several types and sizes of branches across the enterprise network.
• Checking and configuring Cisco 7600 and 7200 routers at data center for remote sites’ issues.
• Work with Verizon Wirelessdata network architecture to track IPs, isolate host location, and import data into IPC tool.
• Working closely with Data center management to analyze the data center sites for cabling requirements of various network equipment.
• Proficient with Cisco ASA 5500 firewall in multi-context, clustering and Active/Standby failover environment.
• Installed Cisco WAAS device 4451-X for acceleration of TCP-based applications, and Cisco's Wide Area File Services (WAFS) in a single appliance and to preserve and strengthening branch security.
• Installs, configures and maintains Juniper EX series switches and SRX, MX, and M series routers.
• Reduced the number of managed devices from 120 to 15 by implementing Virtual Chassis technology using Juniper EX4200 switches.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 and Radware for the corporate applications and their availability.
• Worked with ASA Firewall configuration and Participated in Migration of PIX to ASA for hardware devices.
• Performing network monitoring, providing analysis using various tools like WireShark, Solarwinds etc.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience
• Troubleshoot and Worked with Security issues related to Cisco ASA/PIX, Checkpoint, IDS/IPS and Juniper Netscreen firewalls.
• Responsible for Checkpoint firewall management and operations across our global networks.
• Work on IPv4, IPv6 addressing schemes and management for Devices.
• Mapped, Network Diagrams and physical identification in MS Visio.
• Updated documentation as necessary.
• Preformed IOS upgrades on cisco routers and switches
• Worked with engineering team to resolve tickets and troubleshoot L3/L2 problems efficiently.
• Configured Cisco 2800, 3800 routers and 3750, 4500, 6500 switches as part of the implementation plan.
• Propose network redesign based on client hardware guidelines, network policies and individual site’s unique characteristics.

Confidential, Kansas city MO

Network Engineer

Responsibilities:

• Managing and supporting large scale MPLS & Frame relay on Cisco & Juniper environment for more than 5000 Retail sites, 100 Distribution centers, 100 offices and 3 datacenters.
• Installed and configured Cisco 2600, 2800, 3600, 3800 routers and 2950, 3700, 6500 switches.
• Maintained and managed networks running OSPF and BGP routing protocols.
• Configured route redistribution between OSPF and EIGRP in a multi-area OSPF network.
• Daily monitoring of network traffic using sniffers (Wireshark) and access logs to troubleshoot and identify network issues.
• Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000
• Working configuration of new VLANs and extension of existing VLANs on/to the necessary equipment to have connectivity between two different data centers.
• Troubleshooting the Juniper SRX100 and 110 series, Juniper Netscreen routers with Site-Site VPN, and firewalls for Confidential Retail sites.
• Performed switching technology administration including VLANs, inter-VLAN routing, trunking, port aggregation
• Route redistribution and route update manipulation using route-maps; distribute lists and AD manipulation and link negotiation.
• Performed basic security audit for routers and firewall, identifying missing ACL’s, configuration of standard and extended ACLs for Security.
• Creating ACL policies for Cisco 5580 ASA firewall with access control to NAT and object grouping functions.
• Configured and supported Cisco firewall PIX 500 series.
• Preformed wireless remediation efforts to assess and resolve performance
• Configured and deployed WAAS at branch offices.
• Assist in determining network hardware, bandwidth, and SIP trunk needs.
• Used network monitoring tools to ensure network connectivity and protocol analysis tools to assess and pinpoint networking issues causing service disruption.
• Extensively used TCP/IP tool like TELNET for remote login to the routers and SSH for secure login.
• Deploying VoIP phones and providing access to voice and data traffic with QoS policies
• Worked with Radius and TACAACS+

Confidential

Network Engineer

Responsibilities:

• Day to day network troubleshooting at the Alcatel lucent area network.
• Cisco IOS experience on 3600/7200 class hardware in complex WAN environment and experience on Cisco OS and IOS on CAT6500 in a complex data center environment
• Hands on experience installing Sup720 for Cisco 6509-E series and its Gigabit Ethernet port deployment in core network.
• Planned, tested and evaluated various equipment’s, systems, IOSs and procedures for use within the Network / security infrastructure.
• Supported Data Center migration and consolidation project. Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.
• Worked on Cisco Routers, Active /Passive Hubs, Switches, Cisco PIX Firewall, Cisco ASA, NOKIA Firewalls, Nortel VPN Concentrators TCP/IP, NAT and Checkpoint ESX/GSX firewall.
• Deployed Riverbed WAN optimizers and F5 load balancers.
• Configured vPC, FEX and VDC’s on Nexus 5K.
• Coordinate with Server, Security, Application teams along with 3rd party vendors to provision and setup third party servers, network devices in Data Center environment.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Configuring Voice VLANS with respect to Cisco VOIP phones 7940, 7960.
• Work with 3rd party vendors and application owners to migrate site to site VPN’s to new datacenter.
• Configure, deploy and troubleshoot 4400 wireless controllers and 1200 LWAPP’s.
• Establishing VPN Tunnels using IPSec e Confidential yption standards and configuring and implementing site-to-site VPN, Remote VPN.
• Worked on the security levels with RADIUS, TACACS+.
• Hands on experience and good working knowledge with Checkpoint Firewall policy provisioning.
• Setup Access list and configured Firewall.
• Primary responsibility is to design and deploy various network security & High Availability products like Checkpoint NGX, Provider-I, Nokia appliance, Cisco ASA other security products
• Experience with creating VIP (virtual servers), pools, nodes and applying iRules for the virtual servers like cookie persistency, redirection of the URL.
• Monitor network health using tools like eHealth, Cisco Prime, Spectrum and recommend optimization solutions.
• Create BOM’s and network implementation plans.
• Configured Nexus 5K, 7K, Cisco 3900, ASR 1K routers and 2960, 3750, 6500 switches as part of the day to day activities.
• Map out existing network and forthcoming changes in Visio as part of the quarterly network audit process.