SUMMARY:

• Cisco Certified Network Engineer with 8 years of Experience in Network engineering, designing, architecting, implementing, configuring and troubleshooting Network & Security infrastructure on routers, layer2/layer3 switches and firewalls
• Experience working on ASA … Firewalls. Implemented security policies using ACL, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS) and worked on Cisco ACS version 5.x
• Experience in implementation and troubleshooting of VLAN, STP, MSTP, 802.1Q, RSTP, PVST, DTP, HSRP, VRRP, GLBP, LACP, PAGP, AAA, TACACS, RADIUS, MD5 and VTP
• Strong practical experience in layer - 3 Routing and layer-2 Switching. Dealt Cisco routers and catalyst series switches
• Designed and worked with new network management tools to enhance the capacity to monitor e-mail services, availability of resource, and network traffic
• Troubleshoot and verified routers and switches with VLANs and inter-switch communications
• Enterprise Routing experience using protocols RIP v1 & v2, EIGRP, OSPF and BGP
• Upgrading IOS for Cisco routers and switches
• Deployed Positive Enforcement Model with the help of Palo Alto Networks
• Testing Cisco routers and switches in laboratory scenarios and deploy on site for production
• Worked onNexus 7K, 5K, 2K switches, NXOS, IOS and IOS-XR BXB to N7K-NXOS (MPLS) system test worked with cisco ASR 9k, 1k
• Expertise in installing, configuring and troubleshooting Juniper EX Switches (EX2200, EX2500, EX3200, EX4200, EX4500, EX8200) series
• Detailed Knowledge about IP Multicast, IGMP, IGMP v2 and v3, CGMP/IGMP Snooping, PIM-Sparse and Dense Mode
• Extensive experience in Tier II ISP Routing Policies, Network Architecture, IP Sub-netting, VLSM, TCP/IP, NAT, Confidential, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits
• Experience with configuring Nexus 2000 FEX (Fabric Extender) which acts as a remote line card (module) for the Nexus 5000
• Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a Flexible Access Solution for a datacenter access architecture
• Experience in configuring and troubleshooting of Juniper SSG series
• Configured F5 BIG-IP, LTM, GTM load balancers and implemented it to maintain global and local traffic
• Assisting in implementing enterprise wide network security and high availability solutions for point
• Worked with convert Checkpoint VPN rules over to the Cisco ASA solution, Migration with both Checkpoint and Cisco ASA VPN experience
• Good communication skills and a team player, Effective inter-personal skills, adaptable to any environment with the latest technologies and provide solutions as an individual and as a team member

TECHNICAL SKILLS:

Switches: Nexus 2K/5K/7K, Cisco Catalyst 2900, 3500, 3700, 6500, 4500, 3850, 3560, 3750, 2960

Switching: LAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switch, Etherchannels, Transparent Bridging.

Routers: Cisco 7600, 7200, 3800, 3600, 2900, 2800, 2600, 1800, 1700

Routing: OSPF, EIGRP, BGP, RIP v1/v2, PBR, Route Filtering, Redistribution, Summarization, and Static Routing.

LAN: Ethernet (IEEE 802.3), Fast Ethernet, Gigabit Ethernet

WAN: PPP, HDLC, Channelized links (T1/T3), Fiber Optic Circuits, Frame Relay

Network Security: Cisco ASA Firewalls, Juniper, ACL, IPSEC, F5 Load Balancer, Checkpoint, Palo Alto

Load Balancer: F5 Networks (Big-IP) LTM 8900 and 6400.

Gateway Redundancy: HSRP/VRRP and GLBP, WAN Optimizer Riverbed Steelhead Appliance Confidential and DNS Infoblox

Various Features & Services: IOS and Features, IRDP, NAT, SNMP, SYSLOG, NTP, Confidential, CDP, TFTP, FTP.

AAA Architecture: TACACS+, RADIUS, Cisco ACS.

Network Management: Wireshark, SNMP, Solar winds

WORK EXPERIENCE:

Sr . Network Engineer

Confidential, Detroit, MI

Responsibilities:

• Responsible for Support of network security and network devices such as routers, switches and wireless access points.
• Responsible for designing and implementation of Network Infrastructure.
• Implemented upgraded firewall platform built on Confidential Technologies.
• Involved in Building, Configuring, maintaining, and troubleshooting network devices in the environment.
• Implemented upgraded firewall platform built on Cisco ASA's.
• Involved in Migration of Juniper EX series switches to Cisco 3500 series and 6500 series switches.
• Coordinated and scheduled the delivery of F5 Professional Service implementations and consulting engagements
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability
• Experience working with Nexus 7010, 5548, 5596, 2148, 2248 devices.
• Experience with Network Automation using Python
• Configured and deployed WAN routers (ISR G1 and ISR G2)
• Experience configuring VPC (Virtual Port Channel), VDC (Virtual Device Context) in Nexus 7010/7018
• Experience with configuring FCOE using Cisco nexus 5548
• Experience working with ASR 9000 series switches with IOS-XR
• Configured Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000 to connect servers and storage devices.
• Experience with setup and troubleshooting of F5 BIG-IP load balancing administration
• Configuring objects such as Load Balancer pools for local traffic management on F5 Load Balancers
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution.
• Migration with both Checkpoint and Cisco ASA VPN experience
• Responsible for Check Point and Cisco ASA firewall administration across our global networks
• Experience with setting up MPLS Layer 3 VPN cloud in data center and also working with BGP WAN towards customer
• Configure and troubleshoot Juniper EX series switches and routers
• Migrated to Juniper EX series switches from Cisco 3500 series and 6500 series switches
• Experience with moving data center from one location to another location, from 6500 based data center to Nexus
• Design, and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls
• Experience with configuring BGP, OSPF in Juniper M and MX series routers
• Infrastructure trouble shooting and TCP/IP Protocols Experience.
• Assisted the Network team in maintaining the network in different locations
• Maintained a Network with more than 600 Network devices, some 25, 000 end hosts, and the other Network devices like Confidential, DNS servers, Firewall servers.
• Responsible for Co-ordination with Hardware vendors, software vendors and service Providers.
• Involved in installing newer 3502 Wireless Access Points.
• Helped the Network team to install New switches and routers and configure the IOS according to the requirement
• Configured VLAN, OSPF, Sub-netting, EIGRP, BGP, VTP, spanning tree, IP Sub-netting, Wireless Access points.
• Configuration and extension of VLAN from one network segment to their segment between Different vendor switches (Cisco, Juniper)
• Convert Campus WAN links from point to point to MPLS and to convert encryption from IPsec/GRE to GetVPN.
• Assisted in backup, restoring and upgrading the Router and switch IOS.
• Attended Team meetings and provided comments on existing network and the recommendations to improve the current network Performance.
• Identifying technical problems and debugging hardware and software related to LAN's/ WAN's.
• Maintaining the health of 250+ wireless Access points in two locations.
• Interact effectively with other departments and staff to ensure satisfactory and timely resolution of their issues or problems.
• Involved in configuring Confidential and applying rules to pass servers and switches through firewall.
• Involved in installation and configuration of Cisco 3500 and 6500 series switches.
• Involved smart view tracker to check the firewall traffic.
• Experience with deployment of Palo Alto firewalls for different NAT, Skype traffic

Environment: Cisco Catalyst Switches with Nexus 2148, 2224T, 5548, 6018, 7010, Cisco Catalyst 6506, 6509 4948E, 4510 Switches, Cisco 3660, 3845, 7609 routers, Cisco ASR, Confidential, Palo Alto, Cisco 5500, 5550 ASA firewall, F5 Load Balancers, Bluecoat proxy, Reverbed, IPS/IDS, Cisco Wi-Fi technologies, Cisco prime, Microsoft Lync, RADIUS, TACACS+, EIGRP, OSPF, BGP, VPN.

Sr . Network Engineer

Confidential, Detroit, MI

Responsibilities:

• Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF & EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers 7613, 7201, and 3945E.
• Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NAT'ing, sub-netting, also including DNS, LDAP, Confidential, http, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, WISM, STP (Spanning tree Protocol), RTSP & Multicasting protocols.
• Experience with design and implementation of Virtual Switching System (VSS) for both User segment and server segment using 6509-V-E catalyst switches
• Automated network implementations and tasks and designed monitoring tools using python scripting
• Created/Configured Devices for monitoring in Solar Winds for Brinks North
• Experience with managing the completed end to end site solutions
• Experience with design and implementation of Data center migration
• Worked on Migration of Juniper SRX firewalls for isolation of network segments and VPN's, ARS (9k, 901, 903)
• Configured F5 GTM solutions, which includes WideIP, Pool Load Balancing Methods, probers and monitors
• Experience with setup and troubleshooting of F5 BIG-IP load balancing administration
• Configuring objects such as Load Balancer pools for local traffic management on F5 Load
• Designing, Implementing and Troubleshooting Cisco 3750, 3550, 3560, 2924, 6509-V-E, 6513, 6504, 6503, 6506, 6500 series switches, GSR, ASR routers with Cisco IOS and IOS-XR
• IPv4 address space management and sub netting
• Installed, configured and managed Cisco routers such as 7200 series, 3800 series, 3700 series, 2800 series and Cisco Catalyst switch series 6500, 4500, 3500, and 2900.
• Upgraded the data center network environment with Cisco ASA 5520. Configured ACL's on Cisco Switches as well as configured routers as terminal servers.
• Monitoring the traffic through Cisco catalyst switches for Detection of Intrusion using IDSM2 and its Prevention IPS.
• Replaced aging Confidential architecture with new next generation Palo Alto appliances serving as firewalls and URL and application inspection.
• Serve as part of a team of network engineers responsible for base wide network upgrade from Cisco Layer 3 Catalyst switches to Juniper Layer 3 EX4200 & EX3200 switches.
• Design, implement and administer IPv4/IPv6 enterprise network infrastructure utilizing Juniper routers.
• Worked on Juniper MX 480, MX960
• Implementing 3750 Stackable switches using Cisco Stack Wise technology. Experience to review and evaluate current and future design issues as required maintaining network integrity, efficient data flow.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution and worked on RSA secure IDs to providing VPN Token to Company USERS. Migration with Cisco ASA VPN experience.
• Worked on Layer 2 protocols such as STP, VTP, STP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment
• Involved in designing and implementing QOS and policy map to 2800 series routers for all the branches
• Experience Branch Relocation: Connect workstation, servers, etc. Rack and stack Pre-configured new hardware and connect the circuits. Work with Carrier to test and turn-up circuits.
• Performed IP address planning, designing, installation, configuration, testing, maintenance, and troubleshooting in complete LAN, WAN development.
• Involved in operations and administration of WAN consisting Ethernet Handoffs, T1, DS3, and Optic Fiber Handoffs.
• Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools
• Hands on Knowledge/experience on F5 load balancers, its methods, implementation and troubleshooting on LTMs and GTMs
• Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations
• Racking, Stacking, configuring, Nexus 5K and 2K and 7K.
• Installed wireless access points (WAP) at various locations in the company.
• Actively involved in switching technology Administration including creating and managing VLANS, Port security - 802.1x, Trucking 802.1Q, RPVST+, Inter-VLAN routing, and LAN security on Cisco Catalyst Switches 4507R+E, 6509-E and Cisco Nexus Switches 2232, 5596, 7009.
• Created dedicated VLANs for Voice & Data with QOS for prioritizing VOICE over DATA.
• Configured WIFI APs connected in LAN to reduce cable costing by creating AP, worked on Cisco SP Wifi, troubleshoot in Cisco Aironet 3700, 1700 and 600 series.
• Worked on configuration and commissioning of the MPLS circuits for various branch offices.
• Providing Daily network support for national wide area network consisting of MPLS, VPN and point-to-point site.
• Performed Network Security Assessment and implemented security improvements such as network filtering, SSH, AAA, SMTP, SNMP access lists, VTY access lists, EIGRP MD5 authentication, and HSRP authentication.
• Configured of ACL's in Cisco 5520 ASA firewall for internet Access requests for servers, Protocol Handling, Object Grouping and NAT
• Managing and providing support to various project teams with regards to the addition of new equipment such as routers switches and firewalls to the DMZs.
• Responsible for Data Center Migrations and its operations.
• Implemented antivirus and web filtering on Juniper SRX 240 at the web server as well as configuration of E F5 load balancers and Cisco load balancers (CSM, ACE and GSS)
• Documenting workflow process, managing and implementing standard policy and procedures

Environment: Cisco ASR 9K routers, Nexus 7K, 5K routers, Cisco Switches, Cisco ASA 5500 firewalls, OSPF, EIGRP, MPLS, HSRP, VRRP, IPSEC VPN, VPN, QOS, Juniper Netscreen, Riverbed, IPS/IDS Load balancer, Ethernet Handoffs, T1, DS3, Optic Fiber Handoffs VLANS, VTP, RSTP, ACL, NAT, RADIUS, TACACS+, CRS, IPV6, Cisco ACE, Cisco prime

Network Engineer

Confidential, Seattle, WA

Responsibilities:

• Configured HSRP between VLANs, configuring Ether Channels, Port Channel on 6500 catalyst switch
• Configured Routing protocols such as RIP, OSPF, EIGRP, MPLS, static routing and policy based routing
• Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client.
• Validate existing infrastructure and recommend new network designs
• Installed and maintained Cisco and F5 Load Balancer documentation
• Responsible for network design, bandwidth allocation, IP address allocation, supervising installation, configuration and maintenance on major network technologies
• Configured and troubleshoot link state routing protocols like OSPF in single and multiple areas
• Worked with various internal organizations during pre/post deployment phase of different type of circuits
• Installed and configured Cisco 2600, 2800, 3600, 3800 routers and 2950, 3700, 6500 switches
• Performed data center migration in Access, Distribution and Core layers
• Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture
• Daily monitoring of network traffic using sniffers (Wireshark) and access logs to troubleshoot and identify network issues
• Performed switching technology administration including VLANs, inter-VLAN routing, Trunking, port aggregation
• Route redistribution and update manipulation using route-maps; distribute lists and AD manipulation and link negotiation
• Configured Standard, Extended, and Named Access Lists to allow users all over the company to access different applications and blocking others
• Provided technical support and solutions for network problems, NAT solution on WAN applications
• Performed configuration and troubleshot EIGRP and BGP
• Configured BPDU Guard, port-fast, uplink fast and other spanning tree features
• Providing Tier II support in the provisioning, end-to-end test and turn-ups and maintenance of the major accounts. Optimizing Network by continuously and extensively working with customer to upgrade and optimize network and Circuit Move Add Changes including detailed design documentation
• Performed Layer I, II and III troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. Configured Cisco Routers for BGP, OSPF, RIP, RIPv2, EIGRP, Static and default route in a VPN environment using MPLS
• Implemented and troubleshot the MPLS network
• Performed troubleshooting of connectivity problems using PING, and Trace route
• Upgraded Cisco ASA 5510 firewalls using 6500/7600 catalyst modules for enhanced performance, security and reliability. Upgraded IOS, troubleshot network outages
• Implemented changes and upgrades to network equipment and perform quality assurance reviews of those upgrades. Reviewed all changes to network configuration for technical accuracy and impact
• Provided Network Support in the designing and implementation of Point to Point over T1s Frame Relay, DSL over ATM and IP over Frame Relay and Gigabit Ethernet
• Documentation of network resources, peripherals, procedures and policies for optimization of IT resources and security
• Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. Configured Cisco Routers for OSPF, RIP, IGRP RIPv2, EIGRP, Static and default route
• Migrated IPv4 addresses to IPv6 addresses using mechanisms like Tunnel Broker, Transport Relay Translation (TRT), NAT64, DS-Lite and DNS64
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems
• Co-ordinated with the Data Network and Security team and came up with possible solutions
• Work on Physical site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book
• Cisco ASA/ Confidential troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network
• Provided on-call support for installation and troubleshooting of the configuration issues
• Planned and implemented Subnetting, VLSM to conserve IP addresses
• Configured STP for loop prevention and VTP for Inter-VLAN Routing
• Provided technical support for improvement, upgradation, and expansion of the existing network architecture
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards
• Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO
• Estimated Project costs and created documentation for project funding approvals
• Done troubleshooting of TCP/IP problems and connectivity issues in multi-protocol Ethernet environment
• IOS upgrade 2900, 3500 series Cisco Catalyst switches and 2500, 2600, 3600 series Cisco routers using TFTP
• Installed and configured Confidential server, troubleshot of Confidential and other IP conflict problems
• Configured ACLs (Standard, Extended and Named) to allow users all over the company to access different applications
• Displayed excellent troubleshooting skills and customer centric approach

Environment: Cisco 2900, 3500, 6500/7600 catalyst Switches and Cisco 2500, 2600, 3600 routers, Cisco ASA 5510 firewalls, Microsoft Lync, Unix commands, IPV6, ACL, STP, VTP, HSRP, Subnetting, VLSM, NAT, RIP, OSPF, EIGRP, BGP, MPLS, ATM, PPP

Network Engineer

Confidential, Charlotte, NC

Responsibilities:

• Configured Routing protocols such as RIP, OSPF, EIGRP, static routing and policy based routing, infrastructure and configured the entire network Infrastructure devices including network printers.
• Managed 5000 user accounts and group policies for users belonging to various accounts such as Citibank using Active Directory server, and Internet Information Services (IIS), Mail and File servers, DNS and Confidential servers.
• Troubleshot Lotus Notes and Exchange mailbox issues, software issues and network connectivity issues.
• Participated in design and implementation IPv4 Subnetting in the company network .
• Worked with Confidential by managing and monitoring LAN/WAN network services.
• Scheduled maintenance for routers/servers by running maintenance commands through SSH connections.
• Performed Windows server 2003 and 2008 administration, desktop support and network maintenance.
• Created Virtual Machine templates for Windows server 2003/2008 using VMware vSphere and cloned them.
• Performed switching tasks and implemented VLANS, VTP, RSTP and Port security.
• Provided 24/7 rotational on call supports for branch offices.
• Implemented security measures using ACL and configured NAT according to the connectivity requirement.

Environment: Cisco Routers, Cisco Switches, Routing protocols (RIP, OSPF, EIGRP), VLAN, VTP, RSTP, NAT, ACL, SSH, Cisco CLI, QOS, Subnetting, Microsoft Lync, Server Administration, Cisco Access Points, VMware.

Network Engineer

Confidential, Charlotte, NC

Responsibilities:

• Configured IP routing using a combination of static and dynamic routing protocols like OSPF and EIGRP
• Configured VLANs with IEEE 802.1q tagging, private VLANs, VTP on Cisco 4500 and 6500 series switches
• Configured STP for switching loop prevention and VLANs for data and voice along with configuring port security for users connecting to the switches
• Worked on issues related to static and dynamic routing protocols like RIP, EIGRP (Variance and unequal cost load balancing) and OSPF
• Configured trunk groups, ether channels, Spanning tree for creating Access/distribution/core layer switching architecture
• Worked on Confidential Network monitoring tool to monitor and troubleshoot various issues in the network
• Worked on issues related to VLAN, VTP and HSRP failovers
• Created network diagrams and proper documentation for the network architecture

Environment: Cisco 6500, 4500 switches, Cisco routers, Cisco IOS CLI, VTP, VLAN, HSRP, STP, Net Flow, TACACS, EIGRP, RIP, OSPF, CSM, Ether Channels.