SUMMARY:

• Having 7 years of network engineering, administration and general Infrastructure support experience. Have extensive exposure to IT support in educational, pharmaceutical and telecom domain.
• Experience in Cisco ASDM for Cisco ASA firewall management.
• Experienced with Juniper JUNOS device configuration like Juniper Router, Juniper switches, SRX, and SSG Firewalls.
• Experience in migrating Cisco ASA to Checkpoint firewall in the test environment.
• Working on Cisco Routers and Switches and Wireless networks at Enterprise level
• Experience with Citrix Netscaler 10, 10.5, 11.0; GSLB; Xen App 4, 4.5, 6.0
• Good knowledge working on Big IP/F5 load balancer, Checkpoint and Palo Alto Firewalls.
• Experience in installing, configuring and troubleshooting Checkpoint Firewalls R75.40 R77.30,Gaia, R75.40 SPLAT, R75 SPLAT and R70 SPLAT
• Configured F5 Load balancer LTMs and GTMs to divide traffic from the web servers.
• Proficiency in configuration of Layer2 and Layer3 Virtual Local Area Networks (VLANS) using Cisco multi - layer Switches supporting STP, RSTP, PVST along with inter VLAN routing and VLAN trunking 802.1q.
• Worked on Cisco Nexus 2k, 5k, 7K, 5K to configure VDC’s /VRF’s and vPC’s.
• Familiar with Cisco firewalls ASA 5500 series.
• Hands on experience in upgrading Cisco IOS & Firmware on different Cisco devices & modules.
• Experience in Firewall technologies including general configuration, risk analysis, security policy, rules creation and modification of Check Point Gaia R77.30 and Cisco ASA.
• Good Experience on Palo Alto Firewalls; Panorama
• Implemented MPLS over BGP, EIGRP, OSPF, RIP, HSRP, FHRP, VRRP, VLAN, VTP, RSTP, STPfor secured connection.
• Extensive experience in design, implementation and working exposure of routing protocols - RIP ( V1 & V2), IGRP, EIGRP, OSPF, BGP, IS-IS.
• Excellent experience on Air Magnet, Site Surveys, Cisco Controllers, DOCSIS 3.0, Wi-Fi
• Worked with Aruba Clearpass, Aruba WLAN, Brocade, Aero hive Access Points
• Excellent knowledge on VOIP, SIP, Genesis
• Expertise in physical infrastructure like structured cabling, IP address management, racking, stacking and Data Center concepts.
• Deploying and decommissioning VLANs on core Nexus 7K, 5K and its downstream devices.
• Good Knowledge on Nexus Technologies like VDC, VPC, VPC+, Fabric Path.
• Network security skills include NAT/PAT, ACLs and ASA firewall.
• Experienced in implementing, routers, and switches, building VPNs, Wireless Networks, VLANs, ASA and security policies in highly secured and redundant networks.
• Experienced in configuring and troubleshooting MPLS, building MPLS-VPN and Multicast support.
• Experience in configuring span session on network devices for data captures.
• Experience with Project documentation tools & implementing and maintaining network monitoring systems and experience with developing network design documentation and presentations using VISIO
• Working Experience in SONET, DWDM & ATM Networks.
• Good understanding and working knowledge of ITIL standards.
• Working Experience on web content filter and gateways like Blue Coat, Websense.
• Planning, Designing, Implementation of small, medium organizations including LAN, VLAN, WLAN and WAN on wired and wireless networks
• Having vast experience in designing and configuring of Switches for VLANS and inter-switch communications

TECHNICAL SKILLS:

Mobile technologies: WCDMA, UMTS, HSPA, IMS, LTE.

Networking technologies: LAN, WAN, IEEE802.11 (Wi-Fi), IEEE802.16 (WIMAX), RADIUS, TACACS

VOIP Protocols: SIP, RTP, RTCP

Protocols: TCP/IP, UDP, FTP, MAP, INAP, ISUP, NAT, SNMP, ATM, SS7, OSPF, EIGRP, RIP, BGP, VRRP, MPLS

Tools: Map Info, Ekahau, TEMS, Google Earth, Google Map, Air Magnet, Ethereal, MATLAB, MS Office, AT&T Communication Manager, Hyper terminal, Datum, Sierra Wireless Watcher, IPerf, snooper, Cisco Packet Tracer, GNS 3, Wireshark, Tektronix IRIS, TWC Sport, Air Magnet survey pro, IBWAVE, SCDNA, IXIA, Spirent, JDSU.

Programming languages: C, C++, JAVA

Operating Systems: UNIX, Linux, Windows (XP/Vista).

Network Management Observer: Cisco NCM, Zenoss Monitoring, nGenius, InfoBlox and Gigamon

Firewalls: Cisco ASA 5505, 5510,5520, Checkpoint and Palo Alto

PROFESSIONAL EXPERIENCE:

Confidential, Mclean, VA

Sr. Network Engineer

Responsibilities:

• Design and deliver solutions for network related projects as well as part of Level-3 Network Operations Team in the 24 X 7 to support critical bank production environments.
• Working with AT&T Global network services (AVPN, ANIRA, MSS, Managed Firewalls, Hosting)
• Junos Space administrator, which is a server that monitors all Juniper switches on the network and alerts of outages and errors within remote switches
• Worked on Route-Reflectors to troubleshoot BGP issues related to customer route prefixes also route filtering using Route-maps.
• Deploying and decommission of VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices
• Configure Class of service with Class Maps and Policy maps with 6COS traffic for as Per AT&T specifications.
• Designed, Installation and configuration of MPLS circuits, VPN and SSL VPN connections on ASA, Juniper SRX devices
• Worked on Palo Alto design and installation of Application and URL filtering, Thereat
• Prevention, Data Filtering.
• Experienced with Configuration and implementation of High Availability (A/P, A/A) on • firewalls.
• Extensive Knowledge on Wildfire, panorama feature of Palo Alto.
• Configured switch ports connecting to the WAN and LAN networks with separate subnets and VLAN's
• Troubleshoot with field technicians on access points, Small cell switches issues and backhaul connectivity issues with ISP
• Configured OSPF as the Routing Protocol between PE and CE routers. Worked on MPLS enabled Backbone.
• Involved troubleshooting and verifying test cases for OSPF, E/I BGP, LDP, vPE/VLAN and security cases with IXIA tool.
• Configuration and troubleshooting of CSM, integration with ASA devices.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco ASA 5500.
• Provided proactive threat defense with ASA that stops attacks before they spread through the network.
• Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls, CISCO PIX 506, and PIX515.
• Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.
• Worked on data centre migration of existing PIX firewall to ASA firewall, PIX OS upgrade from 6.3 to 7.0.
• Mapped, Network Diagrams and physical identification in MS Visio.
• Updated documentation as necessary.
• Preformed IOS upgrades on Cisco routers and switches.
• Maintaining and load balancing: web server traffic for customers using F5 load balancers.
• Worked as a team with other engineers to design, install, implement, and configure ASR 9K Network for interconnectivity, and egress redundancy.
• Troubleshoot basic BGP routing issues on Cisco 12xxx and Cisco CRS series.
• Propose network redesign based on client hardware guidelines, network policies and individual site's unique characteristics.
• Implementing, troubleshooting and maintaining AP, WLC, WCS, and NCS.

Environment: Cisco Nexus 9k, 7k, 5k, 2k series switches, Cisco Series 3650, 4500, 6500 (Sup Engine 720, 32, 2, 2A, 1), UCS-C, UCS-D, UCS-M, NICE, Aspect systems, AZURE/AWS, vPC, FEX, Microsoft Visio, OSPF, BGP, BIG-IP, MPLS, FHRP, HSRP, VRRP, LDP, vPE/VLAN and security cases with IXIA tool. Working with AT&T Global network services (AVPN, ANIRA, MSS, Managed Firewalls, Hosting), VMX, for AIC - ADIOD 2.5, and ADIG 3.0.2 vPE, AVPN, ANIRA, MSS, Managed Firewalls, Hosting.

Confidential, San Francisco, CA

Network Engineer

Responsibilities:-

• Configuring Cisco Router and ASA 5505 firewall, Configuring suphos firewall (UTM)
• Worked with Co-Location Unitas on overall network designs for AZURE/AWS cloud environment in SOC, as well as Lab build-out for application testing.
• Configuration of Cisco 881 routers (ASA5500), configuration and troubleshooting of cisco meraki MX64 using Solar winds for modernizing point of application (POSNET - new name GROW) of 2000 Jiffy Lube stores-connected to shell data centre using VPN concentratrators.
• Troubleshooting with issues with Net Fortis routers and Fortinet firewalls.
• Customer reservation plugin including features like finding the best driver to make the trip and integration with payment system, mango pay. It was a LAMP Environment.
• Product testing and support for Access layer switches such as Cisco 4510, 4948, 4507, distribution layer switches such as 6513, 6509, 6504 and a routed core.
• Provide expert level support on Vyatta router, VPN and firewall features
• Planning and implementation of IP addressing scheme using sub-netting and VLSM.
• Designing Networks for voice and data networks over LAN and WAN.
• Designing, Implementing and Managing WLAN Distribution Network.
• Working on cable modems and CMTS (cable modem Termination Systems).
• Working on Wi-Fi Portfolio by Configuring and Troubleshooting Wireless Access Points (WAP) and Wireless Controllers (WLC) for limited connections issue In Wireless Local Area Network (WLAN)
• Involved in originating VoIP telephone calls are similar to traditional digital telephony and involve signaling, channel setup.
• Configuring user's roles and policies for authentication using Cisco NAC and monitoring the status of logged users in network using Cisco ISE.
• Configuring and Troubleshooting WLC to manage ESS for the widespread Comcast WLAN.
• Providing ACS configurable options that determine the IP addresses from which administrators can access the ACS administrative web interface and the session duration after which idle sessions are logged out from the system.
• Responsibilities in preparation, planning, design and implementation of purchased solutions into a customer's existing networking environment
• Planning, designing and configuration of various Cisco ISE strategies (Standalone, Distributed Setups).
• Deployed Intelligent WAN (IWAN) in both Hybrid and Dual-ISP branches to provide an increase in bandwidth capacity, security and reliability
• Software-Defined Networking (SDN): Hands-on experience and expert knowledge of Cisco Intelligent WAN (IWAN)
• Configured and performed software upgrades on Cisco Wireless LAN Controllers 5508 for Wireless Network Access Control integration with Cisco ISE.

Environment: Cisco Nexus 9k, 7k, 5k, 2k series switches, Cisco Series 6500 (Sup Engine 720, 32, 2, 2A, 1), UCS-C, UCS-D, UCS-M, NICE, Aspect systems, AZURE/AWS, vPC, FEX, Microsoft Visio, OSPF, BGP, BIG-IP, MPLS, FHRP, HSRP, VRRP, Data Center Management, Putty, Cisco 6500 chassis Switches, QIP, LAN & WAN Administration, Cisco WAC, AP'S, HP Open View, splunk, checkpoint Firewalls

Confidential

Network Engineer

Responsibilities:-

• Managing Service and Maintenance contracts with Vendors for the Network/Server/Circuits in the infrastructure. Participating in Global IT initiative and adhere to SOX compliance.
• Used Air Magnet Wi-Fi (802.11n) to design, build, test, and verify wireless networks for military and civilian projects. Performed a large scale inspection for indoor and outdoor wireless, Genesys CIM 8.x and VOIP for a large gated community in Los Angeles, including equipment purchasing, consolidation and budget remediation.
• Worked with Ekahau, CATOS, IOS & NX-OS, DOCSIS 3.0, CAT5/6, Mobile Survey Tool for Outdoor Wi-Fi site surveys and prepared QC reports for the same.
• Wrote SOW and RFIs for new construction wireless networking. Completed design review, provided RFIs, and critical design review for the east LA school project.
• Configured F5 BIG IP, F5 LTM
• Upgrading CATOS, CAT5/6 and IOS versions on Supervisor Engine Modules.
• Worked with Aruba Wi-Fi, WLAN; Aruba Clearpass, HPE Aruba Wireless, HPN Switching; Cisco Wi-Fi products such as access points, wireless controllers, softwares etc. Designed and installed Bridgewave Point to Point wireless links between building sites at a highly classified biometrics laboratory.
• Performed an extensive walk thru of the DC Blue Plains water treatment facilities and provided RFIs, and SOWs for that project. Worked on a top secret DHS data center build out. Purchased Cisco 3750G and GBICs, installed these switches, configured them and trained the in place staff. Configured and documented Cisco 2960 series switches. Performed primary purchasing and white package deployment, configuration and project management considerations for a nationwide hotel chain,
• Built a practice around network assessment, discovery, and upgrades for legacy and green field customers. Designed and ran proof of concept for IPv6 IP network upgrades and designs, Instituted a knowledge base and a peer to peer transfer of knowledge including training and basic procedural step by step hands on learning. Troubleshot and configured the company AXS 1800 and associated ONTs to provide in building connectivity.
• Configuration and Administration of Cisco and Juniper Routers and Switches.
• Configuration of 7750 routers and 7450 switches to allow clients applications to be accessed within our company (DMZ VPN)
• Involves the application of SOLAR WINDS Orion, CA SPECTRUM, Spirent IXIA in the configuration and setting for the meraki MX64 routers.
• Configuring RIP, OSPF, EIGRP BGP, VRRP, FHRP, HSRP, LDP, MPLS, QOS, Multicast, ATM and Frame Relay.
• Configuration of Nokia/ Alcatel Lucent 7750 service routers, 7210 switch, 7450 switches to allow clients applications to be accessed within company (DMZ VPN). Worked with DNA (Data Network Analysis) testing using SCDNA tool for small cell testing in SOC
• Performing Global Server Load balancing (GSLB) and Carrier Grade Network Address Translation (CGNAT) using Citrix Netscalar 10.5.
• Used Nemo Outdoor 7.3, TEMS, and JDSU for network planning, optimization and benchmarking purposes.
• Worked with IBWAVE 6.5.0 create a 3D building model in Google Earth, validation of building materials and floor plans.
• Administration and diagnostics of LAN and WAN using Riverbed with in-depth knowledge of TCP/IP, NAT, PPP, ISDN and associates network protocols and services.
• Monitored the network with Network Management platforms, such as Spectrum, Mobile Iron and Cisco Works. Monitoring and responding to system and network alarms and alerts.
• Configuring L3 Support, VLANs and implementing inter VLAN routing.
• Testing E911, voicemail, Media gateways.
• Working with NETFORTIS - Fortinet firewall, Edge water and Still water routers
• Involved in configuring Juniper SSG-140.
• Involved in configuring checkpoint firewall Firewalls (Migrations, Configuration, Firewall Analysis, Rule Modification, Design) (R75.40 Gaia, R75.40 SPLAT, R75 SPLAT and R70 SPLAT).
• Involved smart view tracker to check the firewall remediation traffic.
• Troubleshooting hardware and network related problems.

Environment: Cisco Nexus 9k, 7k, 5k, 2k series switches, Cisco Series 6500 (Sup Engine 720, 32, 2, 2A, 1), UCS-C, UCS-D, UCS-M, NICE, Aspect systems, vPC, FEX, Microsoft Visio, OSPF, BGP, BIG-IP, MPLS, FHRP, HSRP, VRRP, Data Center Management, Putty, Cisco 6500 chassis Switches, QIP, LAN & WAN Administration, Cisco WAC, AP'S, HP Open View, splunk, checkpoint Firewalls (Migrations, Configuration, Firewall Analysis, Rule Modification, Design), Palo Alto, L3 Support Juniper-Routers/switches, Juniper SRX100, SRX240 (Net Screen NS-5GT, ISG-550, QIP, DNS and DHCP, BlueCat, IPam, Group Policy and endpoint management, WSUS/SUP, VBS, PowerShell, WMI, anti-virus policy creation and management

Confidential

Network Engineer

Responsibilities:-

• Implementation of new sites from scratch and projects with phases, like project planning, considering needs and requirements for completion in SOC and then implementing to connect with existing network in a cloud environment.
• Performed Cisco wireless site survey to test wireless strength of the installed Wireless Access Points.
• Worked with Air Magnet with Passive and Active Passive wireless surveys
• Upgrading CATOS, CAT5/6 and IOS versions on Supervisor Engine Modules.
• Performed Load balancing with Net Scalar 10.5 using Round Robin
• Installation of XenDesktop/Xenapp 4.5/5.0/6.5/7.6
• Used Citrix Netscaler 10, 10.5 for load balancing using round robin
• Performed a large scale inspection for indoor and outdoor wireless and VOIP, NiCE call recording software, SIP trunking, Genesys CIM 8.x, URS, GVP, contact center solutions(CCS)
• Worked with Mobile survey tool and Ekahau for outdoor Wi-Fi access points site surveys
• Router disaster recovery and Direct Access infrastructure from crashes and checking logs for reason for crash and verifying if hardware or software issues on production routers.
• Configured F5 BIG IP, F5 LTM
• Worked with Cisco Prime in leveraging and integration synergies infrastructure (NMS product)
• VLAN configuration to differentiate applications with RPVST, HSRP, FHRP, GRE.
• Setting up VLANS and configuring ISL trunk on Fast-Ethernet channel between switches.
• Implemented SNMP, NMS, OSS, and Mobile Iron on Cisco routes to allow for network management.
• Working experience with IP reservation and DHCP management using- INFOBLOX, NetMRI & QIP.
• IP Allocation for all applications and servers and other needs throughout company.
• IP addressing and IP address scalability by configuring NAT/PAT.
• Streamline BYOD and enterprise mobility with easy, out-of-the-box setup for self-service device onboarding and management with Cisco ISE (Identity Services Engine)
• Implemented redundancy for Routers, Switches and Firewalls.
• Work on day-to-day tickets to support the end users connected to the network.

Environment: Microsoft Visio, OSPF, BGP, EIGRP, BIG-IP, MPLS, ASA, HSRP, FHRP, VRRP, QOS, Data Center Management, Cisco Works, Putty, Cisco 6500 chassis Switches, Routers QIP, LAN & WAN Administration, Cisco WAC, AP'S, HP Open View, L3 Support, Wireshark and day-to-day End user and Data Center support, checkpoint Firewalls (Migrations, Configuration, Firewall Analysis, Rule Modification, Design, Palo Alto, Tufin, Juniper SRX100, SRX240 (Net Screen