SUMMARY:

• Cisco Certified Network professional with 3+ years of experience in the field of Networking with strong and extensive knowledge of Design, configuration, implementation, operation and support of Cisco Routers, Switches, and VPN devices
• Substantial knowledge in configuring and troubleshooting Dynamic routing protocol (Interior Gateway Routing Protocol) such as Distance Vector routing protocol (RIPv1, RIPv2 and IGRP), Link - State routing protocols (OSPF and IS-IS) and Hybrid protocol (EIGRP)
• Significant knowledge in configuring and troubleshooting Exterior Gateway protocols such as BGPv4 including internal BGP, HSRP and external BGP (eBGP)
• Indulgent in configuring Spanning Tree Protocol (STP), Per VLAN Spanning Tree (PVST), Rapid STP (RSTP) and Rapid per VLAN Spanning Tree (PVST+)
• Worked on Network topologies and configurations, TCP/IP, UDP, Routers, Hubs and Switches
• Routing, Switching, Firewall technologies, System design, Implementation and Troubleshooting of complex network systems
• Configured Cisco Catalyst 6500, 4500, 3850, 3750, 2960 switches and Cisco 3600, 7200& ASR 1K & 9k Routers for an enterprise network.
• Engineered PCI, clustering, and virtual chassis baseline configurations for Juniper MX and EX multilayer switches as well as SRX firewalls to lay groundwork for new device installation
• Configure, test and troubleshoot 1G, 10G, IPTV, ATM and LAG (Link Aggregate) circuits on Juniper MX960, E320, ERX and Cisco CRS routers
• Developed and implemented core network consolidation plan. Included redundant configuration of Juniper EX8200
• In-depth knowledge and experience in WAN Technologies including OC3, E3/T3, E1/T1, Point to Point, MPLS and Frame Relay
• Worked on latest Cisco Switches like Nexus 9000, 7018, 5548, 5020 and 5010, Implemented advanced features like VDC, VPC, OTV and configured top of the row Fabric Extenders 2248 and 2232
• Validation of Intrusion Detection System and Intrusion Prevention systems(IDS/IPS) of Cisco network security ASA products/Sensors, Cisco Firepower Management Center, Cisco switches and routers
• Cisco AMP Administration for Malware Protection and Comodo for Antivirus protection
• Validation of Cisco IDS/IPS products in Cloud environment like Amazon Web Services(AWS)
• Experience in Implementing, Maintaining, and Troubleshooting L2 Switching tasks: VLANs, VTP, VLAN Trunking (ISL/802.1Q), STP, RSTP, PVST, PVST+, CST, CEF and DCEF
• Experience in T1/E1/T3 technologies and different LAN & WAN technologies.
• Managed F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs
• Planned and worked on design with Network team to Re-architect F5 load-balancers to load-balance traffic anywhere in the company network
• Actively participated in upgrading Fast Ethernet, Layer 3 switched/routed LAN Infrastructure from Cisco 3640 to Cisco 2811 ISR Routers and Switches at access level to 2950, 3550
• Well understanding of Cisco UCS and M-Series Modular servers to enable centralized management of highly scalable system and to Speed-up IT operations.
• Worked extensively in Configuring, Monitoring and Troubleshooting Checkpoint security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls per design.
• Hands on Experience on security devices and firewall infrastructure under enterprise level network.
• Experience in Cisco: Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay & MPLS), Routing protocol configurations (RIP, EIGRP, OSPF, and BGP)
• Proficiency in Configuration of VLAN setup on various CISCO Routers and Switches.
• Extensive hands on Experience with Complex routed LAN networks, CISCO Routers and Switches.
• In-depth expertise in the Analysis, Implementation, Troubleshooting & Documentation of LAN/WAN architecture and good experience on IP services.
• Experience in Installing and Configuring DNS, DHCP server.

TECHNICAL SKILLS:

Networking Technologies: LAN/WAN, TCP/IP, Frame Relay, VPN, VLAN, L2VPN, VTP, NAT, PAT, STP, RSTP, PVST, MSTP

Networking Hardware: Cisco Switches, Cisco Routers, firewalls

Routing Protocols: OSPF, IGRP, EIGRP, RIP, MPLS, IS-IS, BGP, Multicasting

Security Technologies: PAP, CHAP, Cisco PIX

Network Monitoring Tools: Cisco Works 2000

Operating Systems: Windows 7, Vista, XP, 2000, LINUX, Cisco IOS, IOS XR

Routers: CISCO 2600, Juniper M & T Series, Cisco CRS-1, CRS -3, GSR

Management Tools: SNMP, Syslog, Sniffer, and Wire shark

Switches: CISCO 2900, Nexus 7k,5k,2k,1k

Programming Languages: C, C++, VB Script, Power Shell, ITIL v3 - Service Strategy, Service Design, Service Transition, Service Operation, Continual Service Improvement

Web Technologies: HTML, XHTML, JAVA SCRIPT, CSS

Firewalls: Checkpoint 4000 series, juniper net screen Juniper SRX Pix Load Balancer Cisco CSS, F5 Networks (Big-IP)

Network Security Knowledge of: Firewall, ASA, Cisco FWSM/PIX/ASDM, IPsec, Nokia Checkpoint NG, IPS/IDS(Snor), IPS 4260, Juniper SRX & VPN Juniper E series, J series and M series. MX960, M10i, T1600, T640

PROFESSIONAL EXPERIENCE:

Confidential

Networking Student Assistant

Environment: Cisco Routers 7600, 7200, 3800, 3700, 2800, 2500; Cisco Catalyst switches: 6500, 4500, 3500, 3750, 3850, 2900; Cisco ASA 5550, 5520; VTP, VLAN and 802.1Q trunking; Routing Protocols OSPF, EIGRP, Static Route; Sniffer tools: Wire shark, MS Visio

RESPONSIBILITIES:

• Responsible for Internal and external accounts and managing LAN/WAN and checking for Security Settings of the networking devices (Cisco Router, switches) co-coordinating with the system/Network administrator during any major changes and implementation
• Involved in the Configuration & Troubleshooting of Routing Protocols MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access Filter policies
• F5 Big-IP load balancer Configuration, layer 7 load balancing using I-Rules (TCL)
• Worked with Complex Routed IP networks, routers, layer 2/3 switches, firewalls, LAN/WAN networking hardware and protocols
• Meraki Roll-out from Design/Configured/Implementation (MX80, MS320-48, MS220-48)
• Comprehensive elementary configurations on the F5 Big-IP LTMs load balancer on prevailing network to divide traffic on web-servers
• Provided Tier III level support for Verisign IDS/IPS and Host Log Monitoring offerings with enterprise security devices Including but not limited to Sourcefire, Snort, ISS, Juniper, Cisco IDS/IPS, McAfee NSM, Enterasys, Tipping Point and Cisco ASA for the past few years
• Creating and provisioning Juniper SRX firewall policies
• Install and update 3rd party software and operating system patches (i.e., Symantec Anti-virus, Windows Updates)
• Design & Implementations of Data Center /ACI solutions/ Virtualization solutions like EAP using Cisco ACI, Nexus 9k/7k/5k/2k/1k
• Provide recommendations on IPS and IDS placement and configuration in conjunction with best practice and current network design/standards
• Design security system using fortiget appliances
• Configuring Access list rules Fortiget 100 firewall
• Manage and configure Checkpoint Firewall (IPS/IDS)
• Worked on Cisco 2950,2960, 4507, 6509 series switch for LAN requirements, that includes managing VLANs, Inter-VLAN Routing, VTP, STP, RSTP, PVST+, Port-Securities and troubleshooting LAN issues.
• Responsible for Level 3 support Firewall Engineer (Cisco ASA)
• Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed
• Troubleshoot TCP/IP, and troubleshoot connectivity issues in multi-protocol Ethernet
• Replaced Citrix Access Gateway with Citrix Net-scalar including full VPN gateway
• Create Load Balancing configuration in F5 LTM and Citrix Net-scaler per requirement
• Experienced and configured firewall administration including BLUECOAT, F5, Checkpoint, Citrix NetScaler App and Fortinet
• Troubleshooting the issues and outages on Trunks and Router interfaces comprehensively
• Provided technical assistance for LAN/WAN management & troubleshooting
• Fortiget Firewall configuration for ECC Network, Traffic shaping and Content filtering. Routing and others
• Developed deployment solutions for network technologies, including Optical, VoIP, VPN, switching and routing
• Configuration and management of NEXUS network in the existing Cisco network infrastructure
• Created LAB Setup with 7k and 5K NEXUS switches for application testing
• Experience on Bluecoat proxy server
• Troubleshot configurations on various vendor platforms to include Cisco, Cisco Nexus, Juniper, F5, and Bluecoat
• Dynamic IP Routing protocols (OSPF, EIGRP, BGP, Multicast)
• Lead Engineer for Network refresh project for Multinational insurance company. Providing remote assistance for replacing exiting switches with new Cisco switches
• Configuring routing protocols OSPF, EIGRP, RIP, MPBGP, LDP and BGPV4
• Experience configuring VPC, Virtual Device Context in Nexus 7010
• Configuring STP for loop deterrence and VTP for Inter-VLAN Routing
• Facilitated Continuous Integration for scenarios tagged as Sanity & Regression and Continuous Delivery (CICD) including GitHub, Jenkins
• Hands on experience working on Ansible Automation environments, supporting containers, Dockers and writing Python Scripts for Pre-ingest, post-ingest, migration tests
• Troubleshoot firewall related packet drops and reachability issues using Netscout & Checkpoint's Smart Tracker
• Installing and configuring Routers, Switches and CSU/DSU's to support WAN links
• Product analysis and support for Access-layer switches such as Cisco 4510, 4948, 4507, distribution layer switches such as 6513, 6509, 6504 and a routed core
• Configured Aruba access points, troubleshoot connectivity issues with Aruba access points. Prepared wireless survey reports, reports documenting completed projects and AP placement maps
• Design Cisco, Meraki, and Aruba WLAN/WiFi infrastructures
• Azure Network Configuration - Created resource groups using resource manager which allow to see cost/billing and monitoring information for resources within a resource group and manage access to those resources as a set for individual customer
• Aruba b/g/n access points
• Setting VLANS and configuring trunk on Fast-Ethernet channel between switches
• Installed and maintained CISCO 3600, 2600, 2900 and provided Gateway Redundancy by HSRP, VRRP
• Expanding the network and providing proper routing such as OSPF, EIGRP, static route and default route
• Used Network Troubleshooting Tools such as Ping, Telnet and Trace route to verify network diagrams proposed network changes and IP services
• Troubleshooting issues and outages on Trunks and Router interfaces extensively

Network Engineer

Environment: Net Flow, EIGRP, RIP, OSPF, BGP, VPN, MPLS, CSM, SUP720, Anisible, Ether Channels, Cisco 7200/3845/3600/2800 routers, Cisco 6509/ 3750/3550/3500/2950 switches, Github

RESPONSIBILITIES:

• Connected switches using trunk links and Ether Channel
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team, Cisco Prime Infrastructure. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer
• Converted network with multiple routing protocols RIP, IGRP, EIGRP into a single OSPF domain, thus providing for future network scalability
• Configuring of IP Allocation and sub netting for all applications and servers and other needs throughout company using FLSM, VLSM addressing
• Configuration changes automation with Ansible
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network
• Implemented redundant Load balancing technique with Internet applications for switches and routers
• Configured Cisco IOS Feature Set, NAT and Simple Network Management Protocol (SNMP) for Network Security implementation
• Support Network Technicians as they require training & support for problem resolution including performing diagnostics, & configuring network devices
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks
• Addition and removal of services from virtual server configuration on Citrix Net-scalar load-balancer
• Maintaining SSL certificate on Citrix Net-scalar load balancer and managing the virtual servers
• SIEM monitoring and investigation of any alerts using tools like Arc-sight ESM, Arc-sight Logger, HBSS, Net-Scout, Site Protector IDS, and Wireshark Protocol Analyzer
• Functional Management of the Azure Network in customer as well as production perspective.
• Cloud design: Participate in Amazon AWS/Microsoft Azure network design and implementation
• Documenting and Log analyzing the Cisco ASA 5500 series firewalls
• Used Network Monitoring tool to manage, monitor and troubleshoot the network
• Experience in HSRP standby troubleshooting & Experience in configuring & upgrading of Cisco IOS.
• Received inbound calls of technical nature, independently resolved customer complaints, concerns and inquiries regarding their Internet connection
• Troubleshoot a wide range of technical support issues and connectivity problems such as authentication, connection speed, e-mail configuration, and loss of synchronization
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network
• Experience in new employee mentoring, training and coaching
• Involved in Product analysis and support for Access-layer switches such as Cisco 4510, 4948, 4507, distribution layer switches such as 6513, 6509, 6504 and a routed core
• Participates in network planning and provides input on network design and the selection of network equipment
• Configured site to site VPN for connecting student lab to training and development centers
• Configured various LAN switches such as CISCO CAT 2900, 3550, 4500, 6509 switches and Access layer switches such as CISCO 4510, 4948, 4507 switches for VLAN, Fast Ether Channel configuration
• Worked on Route-Reflectors to troubleshoot BGP issues related to customer route prefixes also route filtering using Route-maps
• To secure configurations of load balancing in F5, SSL/VPN connections, troubleshooting CISCO ASA firewalls, and related network security measures
• Installation, configuration and operation of the Nessus security assessment tool for STIG/SCAP compliance and vulnerability scans on various operating systems, COTS, FOSS, network devices, and databases
• Worked on IP control for management and optimal allocation of IP addresses
• Perform any required interface, VLAN, trunking, and routing moves, adds, and changes for existing services
• Enabled STP attack (BPDU Guard, Root Guard) using MD5authentication for VTP, disabling all unused ports and putting them in unused VLAN
• Monitor and analyze network threats through Palo Alto Panorama; run vulnerability assessment on machines with anomalous behavior, monitor firewall for incoming and outgoing threats
• Engaged in ongoing performance monitoring of installed hardware and WAN circuits recommending or implementing changes to improve performance
• Optimized and configured performance of the WAN network consisting of Cisco Nexus 5000 series Switches by configuring VLANs