SUMMARY:

• CCNA CCNP certified professional with around 6+ years of experience in network design, implementation, and support. Routing, switching, firewall technologies, system design, implementation and troubleshooting of complex network systems.
• Extensive experience in configuring and troubleshooting of protocols RIP v1/v2, EIGRP, OSPF, IS - IS, BGP and MPLS.
• Extensive knowledge with VLAN’s, Trucking, RSTP, SNMP, Ether Channels, HSRP, Port Security, ACL’s, QoS, Traffic Policing, Shaping, EIGRP, OSPF, NAT, PAT, Inspections, VPN’s, DHCP, Wireshark etc.
• Expertise in configuring and troubleshooting of Palo Alto, Juniper Net Screen & SRX Firewalls and their implementation
• Administration and diagnostics of LAN and WAN with in-depth knowledge of TCP/IP, NAT, PPP, ISDN and associates network protocols and services.
• In-depth knowledge and hands-on experience in ISP Routing Policies, Network Architecture, IP Sub netting, VLSM, TCP/IP, NAT, DHCP, DNS, IPAM FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.
• Working Knowledge of Cisco IOS, Junos & basic Nexus (7K, 5K&2K).
• Switching tasks include VTP, ISL/ 802.1q, VLAN, Ether Channel, STP and RSTP.
• Strong hands on experience on PIX (506, 515, 525, 535), ASA (5505/5510) Firewalls. Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).
• Responsible for Check Point and Cisco ASA firewall administration across global networks.
• Well experienced in configuring HSRP, GLBP, ICMP, PPP, PAP, CHAP and SNMP.
• Experience in installing and configuring DNS, DHCP server, IPAM- IPv4, IPv6
• Expertise in installing, configuring, and maintaining Cisco Switches (2900, 3500, 7600, 3700 series, 6500 series) Cisco Routers (4800, 3800, 3600, 2800, 2600, 2900, 1800, 1700, 800)
• Expertise in installing, configuring and troubleshooting Juniper Routers (J,M and MX-series)
• Hands-on expertise with routers ASR-901, ASR-903, ASR 5500, ASR-9010 and Juniper ACX, E, M, MX960 series
• Experience maintaining malicious code prevention systems (e.g. Symantec Anti-Virus)
• Implementing/supporting security measures & controls (vulnerability mgmt., Log Monitoring Configuration Management, network scans, malicious code etc.
• Industrial Control System experience.
• Experience participating in developing and updating of system recovery plans.
• Experience with Continuous Improvement programs (e.g. Six SGMA)
• Experience in NOC(network operation Center) and DATA center
• Experience working with Nexus 7K, 5K and 2K.
• Expertise in Cisco Nexus 9332PQ, 9372PX-E,9396TX, 93128TX switches.
• Knowledge on F5’s BIG-IP Application security management and Edge Gateway Solution
• Worked extensively on Palo Alto, Juniper Net screen, Fortinet and SRX Firewalls.
• Knowledge on cryptosystems such as RSA and AES.
• Experience with design and deployment of MPLS Layer 3 VPN, MPLS Traffic Engineering, MPLS QOS
• Extensive experience in configuring Layer3 routing and layer2/3 switching of Juniper & Cisco based J2320,MX,EX,2950,2960,3600,3750,4500,6500,1700,1800,2600 and 3700 series routers & Switches.
• Troubleshooting & implementation of Vlan, STP, MSTP, RSTP, PVST, 802.1Q, DTP, HSRP, VRRP, GLBP, LACP, PAGP, AAA, TACACS, RADIUS, MD5, VTP & SVI.
• Knowledge on complex Checkpoint, Cisco ASA & Palo Alto Firewalls Environment.
• Experience working with Cisco IOS-XR on the ASR9000 devices for MPLS deployments
• Experience in testing Cisco & Juniper routers cum switches in laboratory scenarios and deploy on site for production.

TECHNICAL SKILLS:

Network Protocols: MPLS, VRF, OSPF, BGPv4, EIGRP, HSRP, VRRP, Policy-Based Routing (PBR), Route Redistribution, Static Routing, Web Cache Communication Protocol (WCCP), MPLS, Metropolitan Area Network (MAN), Wavelength Division Multiplexing (WDM), ISDN, PPP, VTP, STP, RSTP, VLANs, 802.1q/ISL, CDP, LACP

Cisco Router Platforms: 1841, 2611, 2621, 2800, 3600, 3845, 3900, 7206VXR

Cisco Switch Platforms: 2900XL, 2950, 2960, 3500, 3550, 3560, 3760, 4500, 6500, Nexus 4k, Nexus 5k, Nexus 2k, Nexus 1k, Nexus 7k

Routing Protocols: EIGRP, BGP, OSPF, RIP, MPLS

LAN Technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, Port Channel, TCP/IP, VLSM, Cisco/Catalyst L2/L3 Switches, Wireless (802.11 a/b/g/n) Juniper/Netscreen/Cisco Firewalls

WAN Equipment: Cisco/Juniper Routers, Silver Peak NX-7xxx WAN Accelerators, OC-192, OC-48, FRAME RELAY, PPP, T1/E1, HDLC, MPLS, DS3, Leased Lines, DSL Modems, ISDN(PRI/BRI), Fiber technology, Copper Cabling Technology

Network Management Tools: Cisco Works, Silver peak GMS, RSA Security Console, RSA Operations Console, VMware vSphere Client, TFTP, FTP, SSH IXIA, Spirent

Security Access Control: Cisco Secure ACS for Windows, RSA, AAA, TACACS+, Radius, IPSec, GRE, NAT/PAT, ACLs, Juniper SA SSLVPN w/DUO, Cisco Altiga SSLVPN, VeriSign

Operating Systems: Windows 2003, Windows 2008, Linux

Languages: C, C++, Perl scripting, Bash, Assembly, HTML, SQL, Oracle 10g

Software: Microsoft Visio 2010, Microsoft Office, AutoCad, Matlab

Network Operating Systems: Cisco IOS, Nexus OS, CATOS, Junos

Documentation Tools: Microsoft Office, Visio, Project, SharePoint

PROFESSIONAL EXPERIENCE:

Confidential, LA, CA

Sr. Network Engineer

Responsibilities:

• Worked with Cisco Layer 3 switches 3750,4500,6500; Cisco Nexus 5596 and 7010 in multi VLAN environment with the use of inter-VLAN routing, 802.1Q trunk, ether channel
• Configuring objects such as Load Balancer pools for local traffic management on F5 Load Balancers.
• Configured Cisco ASR-9K, ISR 2800 & 3800 series routers with OSPF as an enterprise IGP
• Extensively used TCP/IP tool like TELNET for remote login to the routers and SSH for secure login.
• Configuring and Maintaining TACACS+ for AAA.
• Migrated AAA server to ISE 2.0 from legacy ACS servers
• Managed IP addressing and implemented IP Access Lists.
• Worked extensively on Palo Alto, Cisco Firewalls, Cisco PIX &ASA 5500(5525/5585) Series.
• Knowledge on Palo Alto- OS: Version 5,6,7
• Experience with Firewall Administration, Rule Analysis, Rule Modification.
• Monitoring network access rules usage on Tufin Secure Track.
• Configuring Tufin and network devices for monitoring network rules.
• Experience with administering, troubleshooting and configuring / implementation (Cisco and Checkpoint) firewalls.
• Supported Cisco Trustsec Early-Field-Trial program, supported UHC with their deployment queries and assisted them in ensuring smoother Trustsec field deployments.
• Involved in Switching Technology Administration including creating and managing VLANS, Port security, Trunking, RPVST+, Inter-VLAN routing, LAN security etc.
• Worked on Disaster Recovery (DR) test plan and build an IPSEC tunnel site to site.
• Configured PVSTP+ for loop prevention and VTP for Inter-VLAN Routing.
• Set up VSS cluster, ether channel, VLAN trunking, VTP and inter-VLAN routing on 6506.
• Configure VDC and vPC on Nexus 7010 and Nexus 5596.
• Configures and managed Nexus 2248 and 2400 series of wireless controller.
• Implemented port aggregation & link negotiation using LACP and PAGP.
• Configured site to site VPN technologies using IPSEC.
• Upgraded legacy Catalyst switches to 3750X for MACSEC and CTS rollout
• Involved in design, implementation and configuration of HSRP for load balancing on L3 switches on different location of office on the switched Network.
• Worked with Routing Protocols of OSPF, and BGP.
• Implementation of name resolution using WINS &DNS in TCP/IP environment
• Knowledge on DNS zone migration and DHCP scope migration
• Administer IP control Appliances for DNS/DHCP services
• Worked on F5 BIG-IP LTM 6900, configured profiles, and provided and ensured high availability
• Worked on F5and CSM load balancers deploying many load balancing techniques with multiple components for efficient performance
• Established an SSL VPN connection to F5 Networks' BIG-IP ASM security management, Edge Gateway, BIG-IP APM, and Fire Pass controllers.
• Worked with end to end switching and firewall using Cisco 9300 series.
• Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5585 Firewalls.
• Involved in complete LAN, WAN development (including IP address planning, designing, installation, configuration, testing, maintenance, troubleshooting etc.)
• Worked for change management procedure and implementation of configuration changes during non-production window
• Building Green filed setup network data center.
• Building industry in Brownfield using Greenfield deployment.
• Accessibility to high speed networks / ISPs.
• Well-connected transportation environment because you need to have a 24×7 staff working there.
• Performed Network Security Assessment and implemented security improvements such as network filtering, SSH, AAA, SNMP access lists, VTY access lists, EIGRP MD5 authentication, RSA authentication and HSRP authentication.
• Maintained an 8-nodevirtualized ISE deployment providing access layer security across two network enclaves for over 5000 end points
• Implementation of Juniper Firewall, SSG Series, Netscreen Series ISG 1000, SRX Series
• Implementation of HA-JSRP in JUNOS devices, SRX Series Router/Firewall in both A/A and A/P mode
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall
• Used internal network monitoring tools to ensure network connectivity and Protocol analysis tools to assess the network issues causing service disruption.
• Experience working with Cisco IOS-XR on the ASR9000 devices for MPLS deployments in data center
• Consolidated remote and LAN access and wireless connections within a single interface to streamline access management.
• Provided Breakthrough Approach to Unifying and Optimizing Access to the Data Center using F5’s BIG-IP Edge Gateway Solution
• Implementation of name resolution using WINS & DNS in TCP/IP environment
• Ability to analyze, configure and troubleshoot networks

Environment: Cisco Routers 7600, 7200, 3800, 3700, 2800, 2500; Cisco Catalyst switches: 6500, 4500, 3500, 3750, 3850, 2900; Cisco ASA 5550, 5520; ASR-9K, ISR 2800 & 3800, VTP, and 802.1Q trucking; Routing Protocols OSPF, BGP, IP MPLS, IPSec, VLANs, Load Balancer: Big-IP F5, VOIP protocols: SIP; Sniffer tools: Wire shark, MS Visio.

Confidential, Detroit, MI

Sr. Network Engineer

Responsibilities:

• Implementing, administering and troubleshooting network infrastructure devices like routers, switches, Wireless access points and controllers.
• Working knowledge on configuring access lists. Troubleshooting DNS/DHCP issues within the LAN network
• Configure various LAN switches such as CISCO CAT 2900, 3550, 4500, 6509 switches and Access layer switches such as Cisco 4510, 4948, 4507 switches for VLAN, Fast Ether Channel configuration.
• Implemented and configured LAN Protocols: Ethernet, VLANs, VTP and STP.
• Created Voice Mail boxes, call handlers, create and reset passwords.
• Designed complex network systems using Cisco routers, switches
• Involved with the designing and Configuring of the network (data and VoIP) ensuring maximum security.
• Planned, scheduled, tested, and implemented critical data center network changes.
• Developed and maintained service measurements for data network systems and Services.
• Open Systems Interconnection (OSI), T-1 system design, TCP/IP, ATM and various Network Management systems.
• Troubleshoot L2/L3 and upgrade Nexus, ASR9K/1K/ACI mode nexus guide for Cisco and Juniper Datacenters equipment’s
• Created dedicated VLANs for Voice and Data.
• Dealt with creating VIP pools, nodes and created custom iRules for the virtual servers like cookie persistency and redirection of URL on F5 ASM cookies issues and configures ASM policies
• F5 VIPRION hardware products like LTM, GTM series like 6400, 6800, 8800.
• Experience working on network security Palo Alto Firewall Using Panorama for managing Palo Alto to provides a comprehensive, graphical view of network traffic.
• Complete implementation of Firepower Firewall protects threat from External attack. Unified Threat Management, Configuration of Remote VPN connectivity to remote location.
• Configure the Fire POWER chassis in clustered and then after HA mode to meet the clients ever changing design requirements
• Design Installation and Configuration of Cisco Nexus 9372 DMZ Switches
• To hold network information gathering workshops with the Customer to understand the Customer's existing network design and technical requirements of new network designs.
• Worked on upgrading F5 device from 11.4 to 11.5.3 to remediate HTTP classes and profiles and Upgrading and relicensed F5 LTM.
• Configuration, migrations, upgrades of F5 Big IP LTM 3400, 6400, 8900 running v4.x to 10.2.x, Active/Standby.
• Implemented and Managed Cisco Nexus 7010, 7700 and Nexus 5596UP Switches configured with FEX 2248 extenders
• Configured OSPF, Multicast and static route on Firewalls.
• To raise equipment's Return Material Authorizations (RMA's) and to track these through to problem resolution
• Responsible for researching new technology directions and making recommendations for improving the reliability & functionality of LAN & WAN.
• Experience with firewall administration, Rule Analysis and Rule modification.

Environment: Cisco 7200/3845/3600/2800/2900, ASR 1000 routers, 2950/2560/3850/ nexus 7 series switches, Flow, TACACS, EIGRP, RIP, OSPF, BGP, VPN, MPLS, Ether Channels, Sniffer, Solarwinds, WAN, Aruba, Airwave, Clear pass policy manager, AWS, VMware, Infoblox, Palo Alto firewalls, Cisco Prime Infrastructure, Checkpoint, check point firewall.

Confidential

Network Engineer

Responsibilities:

• Complete ownership Self-Hosted Openstack environment comprised of EqualLogic 10GbE; Force10; Cisco Routing, Nexus Switching, and ASA firewalls; and Fortinet Firewalls
• Design an available and secure firewall solution for the Cloud program
• Performed Proxy testing which serves Layer-7/ HTTP traffic and other Proxy features like HEADER ERICHEMENT, TFD, LTMI and Video Optimization.
• Worked on call flows involving IMS architecture - VOLTE, IP messaging (RCS)
• Lead the testing team on Virtualized Proxy which supports port 80 traffic in connected car project.
• Also migrated from the hierarchical tree networking model to leaf-spine design using Ethernet fabric network.
• Implementation, configuration and maintenance of Cisco Devices such as Cisco routers, 4500X, 4900M, 4948, 7600 Series, ASR 9010, 9001, 1001
• Optimized spine-and-leaf topologies with integrated gateways to provide greater efficiency and transparent mobility for physical and virtual machines and services along with end-to-end visibility.
• Involved in test case design, execution and analyze the traces and perform root cause analysis on issues.
• Experience and worked on protocols: SIP, DIAMETER, HTTP, GTP, RADIUS, and TCP/IP.
• Working closely in sync with other node teams for integration, functionality and understanding.
• Worked on Tools like NetScout, IRIS EPC/IMS analyzer, JDSU, Wireshark, HPQC
• Worked on Traffic generating tools, IXLOAD and LANDSLIDE SPIRENT
• Integration, Testing, Verification and Software upgrade of Ericsson’s Multi Server Proxy (MSP) Solution in AT&T’s Core Network for optimizing HTTP, MMS and video traffic.
• Providing ongoing customer support throughout implementation as well as driving new solutions development for MSP.
• Solution deployment and implementation was done on various Servers running on Linux
• Configured network interfaces, routes, DNS, DNAT, NTP, IPAM and SNMP on traffic servers and VLAN on network switches.
• Implementation of name resolution using WINS &DNS in TCP/IP environment
• Performed troubleshooting of networking issues in MSP system using tools like TCP dump, traceroute, and netstat, nslookup and SQL queries.
• Configuration and management of various Virtual Servers.
• Created Test Plans and executed regression and call-flow testing between Mobile Proxy, RADIUS Server, LDAP server, F5 Load Balancer and Webserver using Wireshark and Pureload.
• Migrated AAA server to ISE 2.0 from legacy ACS servers
• Optimized the IP network with the F5 BIG-IP platform
• Worked on Net scaler MPX, VPX and SDX.
• Experience with Palo Alto - Firewall Administration, Rule Analysis, Rule Modification
• Performed Deep packet inspection using Wireshark for various protocols like RADIUS, HTTP, LDAP and SSL.
• Responsible for addressing all issues on core nodes (MSS, MGW, SGSN, MME, CPG, MSP and IMS) related to performance, capacity and QOS and provide sustainable technical solutions through engineering and/or tools for AT&T.
• Involved in migration of virtual machines from VMware ESX 4.1 to ESX 5.0/5.5.
• Involved in Corporate Sponsored Data and SOCKS,Toggle Voice testing
• Worked on SD interface testing and performance testing,failover resiliency
• Dealt with EAP-AKA authentication
• Implementation of EAP-AKA protocol on voice over WIFI calling
• Implemented DER and DEA, Post challenge request messages for authentication on AAA and HSS
• Implementation of Radius and Diameter (RFC 3588, RFC 4072) interface with EAP for AAA Controller
• Integration of EAP module with R6 module.
• Initial troubleshooting Cisco routers and switches, problem analysis, isolation of network events in a 24x7 NOC
• Created and designed network layout and documented network system design with detail information using Visio
• Working with deploying services to virtual environments like OpenStack, VMware, etc.
• Configured and managed VLANs, 802.1Q Trunk, RPVST+, Inter-VLAN routing, HSRP and LAN security for Layer-2 and Layer-3 switching domains as per the organization's requirement plan

Confidential

Network Administrator

Responsibilities:

• Responsible for entire LAN and WAN maintenance and troubleshooting of the company network
• Involved in the Team of Data Center Operations to perform duties like administration and deployment of Cisco Routers and Switches according to the organization requirements
• Experience with moving data center from one location to another location, from 6500 based data center to Nexus based data center
• Experience working with Cisco Nexus 2148 Fabric Extender and Nexus series to provide a Flexible Access Solution for a datacenter access architecture
• Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000
• Experience with setting up MPLS Layer 3 VPN cloud in data center and working with BGP WAN towards customer
• Design an available and secure firewall solution for the Cloud program
• Involved in project planning, deploying and reviewing based on the requirements within the existing network
• Reviewing all changes to network configuration for technical accuracy and providing solutions to Multi-Protocol Network problems
• Configured and managed VLANs, 802.1Q Trunk, RPVST+, Inter-VLAN routing, HSRP and LAN security for Layer-2 and Layer-3 switching domains as per the organization's requirement plan
• Experience Working on Traffic generating tools like IXIA and LANDSLIDE SPIRENT.
• Worked with F5 Load-Balancers and the following software modules: LTM, ASM, AFM, GTM
• Tested various BGP attributes like local preference, MED, Weight and replicated customer issues in the testing environment lab
• Routing protocol configuration such as OSPF, IS-IS, EIGRP and BGP, Router redundancy configuration (HSRP, VRRP and GLBP)
• Administrated LAN and WAN with of TCP/IP, NAT, PPP, ISDN and associates network protocols and services.
• Multicasting, Route redistribution, Route Filtering using Distribute list
• IP Allocation for all applications and servers with high availability throughout the company
• Configured ASA 5540 to ensure high-end security on the network with ACLs and Firewall
• Experience working on Net Scaler platform for SDN. Also worked on Network automation, HPNA
• WAN Technologies (PPP, Frame Relay, ATM, ISDN, Site to Site VPN)
• Exposure to building frameworks based upon SDN/NFV functionality.
• Provided application level redundancy and availability by deploying F5 6500 series LTM load balancers
• Worked on F5 BIG-IP LTM 6900, configured profiles, and provided and ensured high availability
• Experience in design, implementation, and support of F5’s Big-IP Access Policy Manager (APM) software component in a complex enterprise environment
• Involved in designing WAN infrastructure for redundancy in case of link failure
• Responsible for technical evaluation, troubleshooting, overall project management, problem solving and turn-up of the service with the ISP
• Created and designed network layout and documented network system design with detail information using Visio
• Involved in Principle Architect for Next Generation Security Data Center project utilizing SDN (Software Delivered Networks) including technologies like OpenStack and ACI
• Implementation of HA-JSRP in JUNOS devices, SRX Series Router/Firewall in both A/A and A/P mode

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 7200/3700/3600/2800/2600/2691 routers, EIGRP, OSPF, BGP, VLAN, Cisco Packet tracer and GNS3 simulators for Network design, KIWI for Network Management