SUMMARY:

• Over 7 years extensive experience in Solid understanding of Designing, Implementation, administration, Operational and troubleshooting of enterprise data networks
• Configuring security policies and procedures using Access Control List (ACL), Route Maps, Offset lists, Prefix Lists.
• Experience in WAN technologies like T1/T3, DS3,STM1 and STM4 circuit types
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, SYSLOG, SNMP, NTP, NAT, PAT and dealt with the DOS attacks and Flooding attacks..
• Knowledgeable in Cisco ACL, NAT, VLANs
• Experience in configuring DNS, DHCP, NFS, NTP, SSH, HTTP, HTTP/S
• Has hands - on experience with configuration and deployment of Routers and Switches Cisco 7600, 6500,4500,3700,3500,2900, Nexus 7K/5K and Juniper MX, EX2200, EX2500 switches and ERX310 router.
• Knowledge on complex Checkpoint, Cisco ASA & Palo Alto firewalls Environment.
• Firewalls Checkpoint R77/R75, Cisco ASA, and other Network devices such as IPAM (IP Address Manager) remote access and VPNs (IPSEC).
• Extensive experience on F5 load balancers, its methods, implementation and troubleshooting on LTMs and GTMs
• Configured and Installed checkpoint firewalls in the enterprise network. Also Configured F5 Load balancer LTMs to divide traffic from the web servers.
• Worked on Cisco's Nexus 9000 series switches that address SDN with Application Centric Infrastructure (ACI)
• Worked with devices of Cisco Switch / Router / ASA, Juniper & Fortigate, Bluecoat, Peplink, HP Tipping point
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP and RSTP.
• Hands of experience on AWS (Amazon Web Services).
• Extensive experience in deployment and management of Network Monitoring System(NMS) such as Syslog-NG Server, CISCOWORKS, Solar winds, Splunk, Nagios, Wireshark.
• Experience in penetration testing, vulnerability assessment (VA) and security auditing using Wire shark
• Extensive experience in LAN&WAN network related protocols, TCP/IP, IPSEC, routing and switching protocols EIGRP, OSPF, BGP, MPLS, HSRP, VRRP, STP.
• Implementing & troubleshooting Cisco 2900,3600, 3900, 7200, 7600 series routers CAT OS 2960, 3560,3750,4500,6500 series switches and Nexus 2k,5k,7k series switches
• Involved in the software and security design and of Access Router (Base station) of an ISP.
• Experience with setting up MPLS Layer 3 VPN cloud in data center and also working with BGP WAN towards customer.
• Multicast routing/switching, Rosen draft, mLDP, IPTV solutions
• Involved in the nationwide roll-out of Cisco routers for IP Backbone Network, IOS upgrade
• Experience in managing, designing and administration of IP Backbone Network and spearheaded the strengthening IP Backbone Network Security.
• Provided network monitoring, fault management, optimization and service quality assurance on 24/7 basis in Network Operations Center
• Expert level configuration of Layer 2 technology including VLANS, Trunking, STP, RSTP, PVST, MST, VTP in addition to port-security, Uplink fast, Backbone fast, Port fast, BPDU guard & filter and Ether channel including LACP & PAGP negotiations Extensive Knowledge in TCP/IP and OSI models.

TECHNICAL SKILLS:

Cisco Routers: 2500, 3600, 3700, 7200, ASR routers ASR 1k (1001, 1004, 106, 1013), ASR 9k and ASR 900, ISR 4k

Cisco Switches: Cisco 2900, 3560, 3750, 4500, 6500, Catalyst switch 2960, Nexus switches N5K, N7K (Nexus)

Firewalls: Cisco ASA, Checkpoint, Fortinet, Juniper SRX, Palo Alto

Routing Protocols: RIP v1/v2, OSPF, EIGRP, BGP, MPLS, VTP, FTP, VPN, DNS, IPv4, IPv6, HSRP,VRRP, ACL, NAT/PAT, TCP/IP, VTP, STP, RSTP, ACI, MST, VLANs, LACP, 802.1Q, ISL, SNMP, GLBP

Network Security: IPsec, VPN Configuration, ASA 5505, 5510 Firewalls, NAT/PAT, IDS/IPS, Internet Content Filtering, Palo Alto, Junos, DHCP SNOOPING, IDS/IPS, URL Filtering, SSL, IPSEC, IKE, Static, Dynamic, Reflexive ACL, and AAA

LAN Technologies: Ethernet, Fast Ethernet, and Gigabit Ethernet, SMTP, VLAN, IPTV, Inter-VLAN Routing, VTP, STP, RSTP, Light weight access point, WLC.

WAN Technologies: Frame Relay, PPP, ATM, HDLC, (E1/T1E3/T3), MPLS, MPLS/VPN

Monitoring & Network Tools: Cisco Works, Cisco Prime 3.0, F5, BlueCoat, Splunk, Solarwinds, Wireshark, Infoblox, GNS3, VISIO

Platforms: Windows 98/XP/Vista/7/8/8.1/10, Unix, Linux, Cisco IOS

PROFESSIONAL EXPERIENCE:

Confidential, Milwaukee, WI

Network Security Engineer

Responsibilities:

• Extensively worked on various routing protocols like EIGRP,OSPF, and BGP
• Installed, configured and managed Cisco routers such as 7200 series, 3800 series, 3700 series, 2800 series and Cisco Catalyst switch series 6500, 4500, 3500, and 2900
• Worked on setup, configure, upgrade, manage and troubleshoot Cisco routers, switches, firewalls and load balancers.
• Responsible for providing ongoing support to application centric infrastructure ( ACI ) solution.
• Assist with configuration and implementation of ACI and APIC.
• Troubleshoot and debug Nexus 9000 fabric to resolve timely issues of ACI and APIC
• Security policy review and configuration in Palo Alto and Juniper SRX Firewall in Datacenter. handled and supported complex BGP routed network infrastructure (perimeter) that include Route-maps, AS-Path, local preference, Inter VRF communication across multiple ISP’s and OSPF (IGP) with multiple area types.
• Designed and implemented Out of Band Management securing network using ACS, RSA SecurId, Secure SSL Tunnel for Data Center Operations.
• Extensively worked on Solarwinds and Infoblox tools for quickly and logically assessing emerging and existing problems and produce results
• Configure and manage infoblox, solarwind, extrahop and splunk
• Configured Splunk on AWS VPC that collects and indexes log messages, analyses them to deliver real time operational intelligence anywhere across the organization
• Troubleshooting and management Cisco, Juniper, Huawei, Redback and Extreme devices.
• Responsible for distributed applications across hybrid AWS and physical data centers.
• Responsible in Design and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Regular upgrade and maintenance of Infrastructure including Cisco Router and Switches, Juniper Routers and Firewalls, Nexus 7k,5k & 2k, f5 BIG IP, Palo Alto Firewalls, BlueCoat Proxy and Riverbed Steelhead appliances.
• Worked on IP allocation and de-allocation on DNS infoblox
• Design and Implement the changes on Palo Alto firewalls with PANOS 6.0 version. Make sure we have single pass through in equities environment for fast transactions.
• IOS/JUNOS upgrade for Cisco & Juniper routers cum switches.
• Involved in installing Hardware network devices such as Cisco switches, routers and Wireless accespoints at different sites.
• Document system errors or issues that occur during events in appropriate IPTV system event logs
• Configuration and fault management for Cisco ASA and PIX, Fortinet, Checkpoint NG; Blue Coat Proxy. Obtained Public Trust Clearances to support US Government clients.
• Responsible for the integration of Cisco SDN solution (ACI) with OpenStack (Kilo) based on GBP/OpFlex.
• Create and manipulate StadiumVision scripts used to control the building IPTV system
• Racking and stacking Cisco ISRs, Catalyst switches and mounting Cisco Aironet Access Points
• Worked on MPLS protocol to speed up the network traffic flow.
• Implemented site to site VPN in Juniper SRX as per customer.
• Maintenance and troubleshooting of connectivity problems
• Provided on call supports 24/7 and worked in NOC (Network operations center).
• Enable STP attack mitigation (BPDU Guard, Root Guard), Using MD5 authentication for VTP.
• Troubleshooting issues and outages on Trunks and Router interfaces extensively
• Supporting OSPF and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations
• Worked on network monitoring tools like Cisco Prime Infrastructure.
• Design, implement and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, STP, 802.1q, etc.
• Configuration and maintenance of OSPF protocol which was the enterprise IGP. Configuration included deploying of new branch locations or new network devices in the existing infrastructure creating Stub Areas and virtual areas.
• Planning and implementing sub netting, VLSM to conserve IP addresses
• Providing BGP routing support for Cisco ASA to F5 migrations
• Set up and troubleshoot secured wireless access points (WAP) and wireless LAN controller (WLC) for broadband internet.
• Installing and configuring Wireless Bridges for wireless connectivity between remote sites
• Work with Group IT to define Integration and Transition Plan, project manage into place.
• Working with field engineers to support remote installations
• Upgrading the IOS of the devices
• Work with existing Group systems and identifying key systems for integration using Solarwinds.
• Performing network administrative tasks such as creation and management of VLANs, port security, trunking, RPVST, Inter-VLAN routing and LAN Security.
• Implemented link aggregation using LACP and PAGP
• Involved in designing and implementing QOS and policy map to 2800 series routers for all the branches.
• Configured Port Channel,VPC and VDCs in Nexus 5K and 7K also configured fabric extender.
• Created ACLs for access in the internal LAN on ASA 5505, 5510,5520models.
• Configured of ACL’s in Cisco 5520 ASA firewall for internet Access requests for servers, Protocol Handling, Object Grouping and NAT.
• Upgraded the Enterprise network environment with Cisco ASA 5520. Configured ACL’s on Cisco Switches as well as configured routers as terminal servers.
• Designed and implemented security systems including various Cisco IOS ACLs, Context-Based Access Control, Network Intrusion Detection Systems, AAA Cisco Secure Access Control Server(ACS) (Radius/TACACS+). Planned, configured and operated IPsec VPNs.
• Worked on documentation to create Visio diagrams using MS Visio

Environment:: Cisco routers, Cisco switches, firewalls, load balancers, Palo Alto, F5, HSRP, VRRP, IPSEC VPN, VPN, QOS, ASA Radius, Juniper Switches, Fortinet, Juniper SRX, Splunk, TACACS, ASA, RSA, BlueCoat, MPLS, VLANS, VLSM, BGP, OSPF, Junos, Wireless Bridges, Infoblox, Solarwinds, trunking, RPVST, Inter-VLAN, Security. Visio diagrams, Nexus,Wireless bridges

Network Engineer

Responsibilities:

• Created new rules as per the Branch requirement and installed the policy on respective firewalls to allow respective access through specific ports.
• Configured of ACL’s in Cisco 5510 ASA firewall for internet Access requests for servers, Protocol Handling, Object Grouping and NAT.
• Identify firewall rules that are potential security risks.
• Configured ASA 5510 appliance and VPN.
• Used SPLUNK to analyze log data
• Developed ACI (Cisco Application Centric Infrastructure) based Cisco Validated Designs for Enterprises and Service Providers to transform Traditional 3 Layer Architecture to ACI based (Spine, Leaf and APIC) Architecture.
• Responsible for the DMZ infrastructure consisting of Radware Load Balancers, BlueCoat ProxySG & AV & F5 Firepass appliances.
• Involved in Configuration of Access lists (ACL) on Juniper and Palo Alto firewall for the proper network routing for the B2Bnetwork connectivity.
• Have created lot of site to site IPSEC VPN tunnel with Checkpoint and Cisco ASA firewalls.
• Configured and monitored Firewall logging, DMZ’s and related security policies.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Regular upgrade and maintenance of Infrastructure including Cisco Router and Switches, Juniper
• Planning, Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.
• Monitored and maintained networking equipment, ensuring availability and performance of the backbone network infrastructure and all related internetworking devices like routers and switches (Cisco).
• Managed internal regional IP pools, registrations of public IP and communicate with Internet transport providers.
• Worked with TAC, BU team for debugging and fixing ACI Network issues in Cisco Cloud.
• Very good Experience in using and maintaining various network monitoring tools like Solarwinds,Wireshark.
• Working Knowledge of Unix and CLI based command to implement networking tools
• Configuring, Maintaining the Routers and Switches and Implementation of RIP, EIGRP, OSPF, BGP routing protocols and trouble shooting.
• Ownership of all device configurations of network and security devices such as Cisco 7600/3500, ASA 5510 and checkpoint R77
• Involved in meetings with external engineering teams to design and build the network connections According to the business requirement.
• Provided network monitoring and service quality assurance on 24x7 basis in Core Network Operations Center.
• Implemented various EX, SRX & J series Juniper devices.
• Have created lot of site to site IPSEC VPN tunnel with Checkpoint, Juniper Netscreen firewalls and Cisco ASA firewalls.
• Provided highest level of IP Security support.
• Performed variety of core network enhancements, remote/on-site troubleshooting, migrations and upgrades, operation and maintenance IP/MPLS backbone network.
• Configuration of Network and Security devices such as Cisco routers and switches (Cisco 3500) Firewall ASA.
• Used protocol analyzes software such as Wire Shark, Analyzed HTTP, TCP, UDP, ARP protocols.
• Experience utilizing Cisco 5505 firewall such as configuring and maintaining access list
• Monitored and planned activities, outage control and performance of all network elements.
• Secured network from attacks by monitoring of network traffic, managing and implementing of Firewall and DDoS Mitigation System (Cisco MDM) and risk and Vulnerability Assessment (VA).
• Provided network consultancy in methodologies and design considerations for optimized security of IP Backbone Network setup and configuration, maintenance, operations and support.
• Involved in VPN (IPSEC and GRE) migrations and new designs for the clients.
• Working knowledge in networking and security technologies suite, IPSEC, SSL client and site-to-site VPNs.
• Troubleshooting the Network Routing protocols (BGP, EIGRP and RIP) during the Migrations and new client connections.
• Having good experience in troubleshooting various WAN technologies like Frame-Relay, MPLS.
• Confgiured VRF to maintain seperate routing tables for two different customers.
• Performed IP address planning, designing, installation, configuration, testing, maintenance and troubleshooting in complete LAN, WAN development.
• Identify firewall rules that are potential security risks.
• Installed,configured and maintained Cisco switches, Cisco routers, ASA firewalls, Checkpoint Firewalls (on Sun Solaris hardware), f5 Big IP Load balancers, and Dell Windows 2000/2003 Servers.

Environment:: Cisco routers, Cisco switches, firewalls, IPSEC VPN, VPN, QOS, F5, ASA, Radius,TACACS, ASA, MPLS, VLANS, VLSM RIP, EIGRP, OSPF, Junos, Juniper Switches, ACS, RSA, Juniper SRX, BGP, BlueCoat, trunking, Splunk, RPVST, Inter-VLAN, DDoS, VPN, WAN, VOIP, Checkpoint, ASA

Network Engineer

Responsibilities:

• Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 4500 series Cisco Catalyst switches.
• Performed IOS upgrades on 2900, 3500 series Cisco Catalyst switches and 1800, 2600, 3600 series Cisco routers using TFTP. Provided network connections for new workstations.
• Configured STP for loop prevention and VTP for Inter-VLAN Routing.
• Informing and updating clients about new products and services of the organization.
• Implementation of TCP/IP & related Services-DHCP/DNS
• Developed scripts for automation, monitoring and security purposes.
• Plan layout & installation of Local Area Network. Configuration of DNS, DHCP
• Optimization and security hardening of Network Monitoring System (NMS) servers
• Configured and installed the Wireless access points.
• Worked extensively in Configuring, Monitoring and Troubleshooting Juniper security appliance, Failover DMZ zoning & configuring VLANs/routing/NATTing with the firewalls as per the design.
• Migration of RIP V2 to OSPF, BGP routing protocols.
• Design multi-router peer Cisco BGP network, in process of Cisco MPLS L2/L3VPN transport network design.
• Configuring various advanced features (Profiles, monitors, iRules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIGIP appliances SSL termination and initiation, Persistence, Digital Certificates, Executed various migration/upgrade projects across F5 and hands on with F5 BIGIP LTMs/EM.
• Configured Juniper MX480s, EX8200s, EX4500s, EX4200s, from scratch to match design.
• Providing networking services, coordinate tasks and ensure their execution and documentation in accordance with established corporate standards.
• Experience in design, implementation and use of F5load balancers, BIG-IP optimize and control network traffic.
• In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits.
• Assisted in MPLS migrations, implemented a backup for the existing WAN connection using site-to-site IP sec VPN tunnels
• Hands on experience with Juniper EX-Series Ethernet Switches.
• Configuring and deployment of Juniper ERX310 router
• Experience with working on juniper switches like EX2200, EX2500, QFX switch with Spanning tree.
• Experience on QOS technologies (L2 QOS, L3 QOS Policing and Traffic Shaping).
• Hands on experience working with Cisco Nexus 7K, Nexus 5K and Nexus 2K Switches
• Planned and installed Frame Relay WAN links to the branch offices

Environment:: Cisco routers, Cisco switches, Nexus, Juniper Switches, ACS, firewalls, F5, BIG-IP,load balancers, TCP/IP, DHCP/DNS, NMS,LAN, RIP V2, OSPF, BGP, BlueCoat, Trunking, IOS, STP, VTP, Inter-VLAN, QOS.

Jr. Network Engineer

Responsibilities:

• Inventory & Stock Maintain for Spares (Switches, cables, Fiber optic cable)
• Quarterly & Half yearly perform Network health check-up
• Monitoring Public connectivity, Traffic & Bandwidth
• Cisco IOS Installation & Up gradation on L2 Switches with Latest IOS
• Provided users and network operations personnel with LAN and WAN technical support
• Installed and configured DHCP Client/Server
• Maintain, Configuration, Trouble-shoot Wi-Fi Devices
• Installation, configuration & Trouble shoot L2 Switches
• Configure two locations through wireless access point
• Experience on Corporate Data Network (CDN)/LAN management.
• Had a good hands-on experience with cisco 6509 Series Cisco Switch with VLAN’s for different departments
• Implemented VTP and trunking protocol 802.1q on cat 2900, 4500 and 6500 switches.
• Supporting wide range of products from Confidential, Troubleshooting of Routers, Switches, Leased line

Environment:: Cisco routers, Cisco switches, Nexus, cat 3560, 3750, 4500 firewalls, F5, BIG-IP,load balancers, TCP/IP, DHCP/DNS, LAN, WAN, NMS, CDN,LAN, RIP V2, OSPF, BGP, Trunking, IOS, STP, VTP, Inter-VLAN, QOS, Wi-Fi.