SUMMARY

• More than seven plus years of professional experience in Network Designing, Deployment, Configuring, Routing, Switching, DNS, DHCP, Firewall Security and administration of complex inter networking communication systems.
• Excellent in troubleshooting connectivity and hardware issues on Cisco Switches, Routers, firewalls and HP devices.
• Experienced working and configuring Cisco routers and L2/L3 Switches and good understanding of IP Sub netting.
• Expertise in configuring switches and routers with protocols such as OSPF, EIGRP, BGP, HSRP, GLBP, STP, TRUNKING, VPN, VLANs, VDC, ISIS, MULTICAST.
• Implementation and troubleshooting MPLS, MPLS L3 VPN, VXLAN and ELAN on Cisco devices.
• Implementation of BGP with multi - homed routing with dual ISP.
• Configured and maintained Cisco Catalyst Switches 6500/4500/3500/3850/2900/9000/9300 series, Cisco Nexus Series Switches 7K/5K/2k.
• Proficient in LAN/WAN routing, switching, application load balancing and wireless.
• Installing, Configuring, Maintaining, Administration of Cisco, Palo Alto and Checkpoint Firewalls across global networks.
• Provided Excellent IT security and by building Cisco ASA firewalls with Failover.
• Strong knowledge on Security context, clustering and next Generation Firewall.
• Implementation of IDS/IPS in ASA Firewalls.
• Strong knowledge on TCP/IP and Ethernet LAN.
• Ensure network devices are hardened to mitigate risks of potential threats
• Plan network development and expansion of remote schools
• Experienced working on network monitoring and analysis tools like SOLAR WINDS, THOUSANDEYES, CISCO PRIME, TCPDUMP and Wireshark, Alcatel-Lucent.
• Plan, design, and implement solutions for WAN, LAN, VOIP, QOS, WIFI, DMZ, firewalls, VPN, Cloud Services, and security architecture across enterprise networks
• Experience in Load Balancing with F5 LTM and GTM, ASM, WAF products and implementation of I Rules and High Availability of F5.
• Advanced level troubleshooting of complex WAN/LAN network architectures. ( GCS Technologies, and Ixia/Key sight Technologies)
• Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).
• Experience with configuring various network services like DNS, DHCP and NAT implementations with Cisco devices.
• Maintained DNS, BGP, OSPF, LACP, 802.1Q, 802.1x, NAC, MPLS, TCP/IP, IPv4, Ethernet, WAN technologies, VPN tunneling.
• Served a platform for other services that are required within the data center or cloud environment using Cisco ACI.
• Experienced with cisco Wireless Controllers for Access points with cisco 5520, 2500 wireless controllers.
• Experience in maintaining Disaster Recovery and Backup configurations for quickly resolving issues.
• Administrating windows server infrastructure which include Domain Controllers, File and Print, FTP/SFTP servers.
• Strong knowledge on Installing Operating systems on Physical and Virtual machines.
• Strong knowledge on Linux command and Installation of operating system on physical and virtual severs.
• Worked on Infoblox to update the DNS host.
• Have knowledge about NXOS, OTV and cisco series ASR routers
• Confident in Network security including NAT/PAT, ACL, VPN Concentrator
• Used tools such as SNMP for server configuration and NTP to configure Network Time Protocol (NTP).
• Excellent working knowledge of deployment and management of IT services such as DNS, SSH, DHCP, VOIP, NAT, QoS.
• Sound knowledge and experience in IPv4 and IPv6 Addressing, sub netting, VLSM, ARP, proxy ARP.
• Extensive experience in configuring and managing profiles, VIP’s, monitors, pools, pool members, I Rules in F5 Network Load Balancers.
• Managed upgrade of IOS for Cisco Switches and routers.
• Utilize Bluecat for DNS, DHCP, and IPAM
• Efficient in designing and configuring of Layer 2 / 3 networking features such as VLAN, access/trucking, STP, VTP, 802.1X, Port Security, L2PT and SPAN

TECHNICAL SKILLS

Routers & Switches: Cisco 2K/3K/4K/7K, ASR, 9K, XR, Juniper M320. Cisco Catalyst 1440/2K/3K/4K/6K, Cisco ASR Series Routers, Cisco Nexus switches (9K, 7K, 6K, 5K,2K), Cisco 6500, 4500, 3750 and 2900 Series Routers.

Firewalls & Security: Checkpoint NGX, Cisco ASA, Cisco IPS/IDS, Security context, Clustering, Next Gen Firewall, Palo alto firewalls, Cisco WLAN, Cisco ISE, Cisco ACI.

Networking Protocols: Static, EIGRP, OSPF, BGP, MPLS, RIP, HSRP, GLBP, STP, RSTP, PVSTP, VTP, ARP, VLAN, DNS, SMTP, SNMP, FTP, HTTP, HTTPS, IGMP, WLAN 802.11/802.11 e, CDMA, ISIS.

LAN/WAN Technologies: Ethernet, Fast Ethernet, Gigabit, Token rings, STP, RSTP, PVSTP, Workgroup, SD-WAN, Domain, HSRP, Frame Relay, ISDN, PPP, HDLC, ATM, MPLS, Leased Lines, SDN, VXLAN, SDWAN

Network Tools: Solar Winds, Wireshark, Nmap, MS Visio, Ethereal, Packet, PRTG Packet Sniffer, network management tools (SNMP, NetFlow, etc.) such as HP OpenView

Wi-Fi & Wireless: D-Link Wireless (Point to Point), D-Link Access Point, CISCO 1532e/ 3500/2602/ 2702/ 1200 series Access Points, Canopy Wireless Device (point to point/multi point), Linksys Wi-Fi/ Wireless Router

Load Balancers: F5 load balancers, BIG-IP LTM/GTM, ASM, WAF, FortiGate/ Forti analyzer/ Forti manager.

Additional Skills: CSU/DSU Troubleshooting, ATM, IP addressing, IP sub netting, PAT, IPSec Based VPN, API, IPSec over GRE Tunnels, VoIP, DNS, ADS.

Operating Systems: Windows XP/7/8, LINUX, UNIX

PROFESSIONAL EXPERIENCE

Confidential, Dallas, TX

Sr-Network Engineer

Responsibilities:

• Worked on servers patching and upgrading and also migrations of services running in Infoblox to Bluecoat.
• Experienced in assisting the clients on troubleshooting P1 issues of domain name system changes including the LB configurations, firewall issues.
• Manually updated Network time protocol servers in Bluecoat Address manager (BAM)
• Planning and implementing the tasks for change management for all kinds of Merchant services domain name system changes etc.
• Test leaf and spine networks with Ixia (IxNetwork), MLTT, and iPerf for resilience, throughput and predictability. Test for system performance, bottlenecks, and resiliency.
• Configuration, deployment, and troubleshooting of multi-vendor (Cisco, Juniper, SonicWALL, and Ixia) routers, switches, firewalls, inline bypass switches, TAP's, and network packet brokers.
• Worked as part of the team to manage enterprise network infrastructure as a Tier-1 Support Engineer.
• Managed and implemented the tasks for subdomain additions along with Wild card to it.
• Monitored Splunk and Nagios for overall Enterprise network management system.
• Configuring Cisco 2900/3500 switches with STP, RSTP, and RPVST to avoid loops.
• Hands-on experience in configuring VPC, VDC and ISSU Software upgrades on Cisco Nexus 7010.
• Updated the records in Verum accordingly for the whole global environment.
• Daily monitored the tools (HP service manager, Host master) for ticket completions of DNS/DHCP changes. Validated and issued stealth master deployments every day after the business hours to push the changes into production.
• Helped in removing the NTP devices/appliances from Nagios monitoring and in logical decommissions of various servers.
• Deployed the DDI automation software into production by finding out the errors that comes up. Automated the XHA failover for our stealth masters in complete environment.
• Experience in configuring GLBP on Cisco Catalyst switches.
• Advanced level troubleshooting of complex WAN/LAN network architectures. (Nike, GCS Technologies, and Ixia/Keysight Technologies)
• Support routing protocols including BGP and OSPF routing, HSRP, Load Balancing/Failover configurations, GRE Tunnel Configurations, VRF configuration and support on the routers.
• Troubleshooting issues using advanced techniques such as TCPDUMP, FW Monitor,
• Newly build datacenters are in place and provided our costumers the Ip addressing space globally to deploy their devices on network.
• Configured Cisco VPN Concentrator 3060 for VPN Tunnel with Cisco VPN hardware/software client and PIX/ASA firewall.
• Configuring and implementing Security/NAT rules on Cisco ASA 7.x,8.x/PIX firewalls.
• Troubleshooting issues related to STP, RSTP and Vlans allocation in Organization for maintaining Layer 2/3 Switching intact.
• Experience with design and implementation of Virtual Switching System (VSS) for both User segment and server segment using 6509 catalyst switches
• Working Knowledge on DDI automation functions, libraries and software’s we used by providing the solutions to the operational needs. provides support on Complex infrastructure changes. Handles daily operational awareness, monitoring and ticketing in the DDI space.
• NTP infrastructure provides a robust infrastructure for synchronizes all system clock and PTP provides a higher accuracy to it.
• Provided a restful services API fulfilling DNS, DHCP and IPAM.

Environment: OSPF, BGP, VLAN, STP, Nagios, RSTP, PTP, Cisco Nexus 7010, NAT, PAT, Splunk, GLBP, TUNNELING, Cisco VPN, Ether- Channels, NTP, API.

Confidential, Oakbrook, IL

Network Security Engineer

Responsibilities:

• Assisted in design and deploying of cisco UCS network
• Implements Network hardware and software using industry policies and standard procedures
• Acts to improve network system reliability by providing ongoing testing, tuning and troubleshooting
• Redesigned Corporate MPLS WAN system and DMVPN Network.
• Installing, Configuring, Maintaining, troubleshooting, Administration of Cisco, Palo Alto and Checkpoint Firewalls.
• Used network simulation software such as IxNetwork, and test case automation software, such as Ixia and Spirent, network analysis like Scapy and Wireshark
• Configuring and troubleshooting VSS, VLAN, 3850 stacking, Fex, Windows VM, Ixia.
• Complete understanding of feature testing of switches (RFC 2889 and RFC 2554) using IXIA's IP testing system.
• Experience with configuring, supporting, and troubleshooting security products including Cisco ASA, Cisco, IDS solutions, and others
• Experienced in Configuring Checkpoint Firewall (Version R62, R65 and R71) and Cisco ASA Firewalls as Standard and Distribution deployment to have the network secure and maintained Site to Site VPN connection through the Firewalls.
• Good working knowledge on DHCP, BGP, multicast .
• Evaluates and recommends Network hardware and software as well as service Providers.
• Use Solar Winds and wind-shark to manage, monitor and administer the Network
• Develops backup procedures and methods to ensure maximum Network systems reliability, restorability and disaster recovery.
• Experience with F5 load balancer LTM, GTM, ASM, WAF
• Worked on Citrix NetScaler Access Gateway and F5 load balancers for creating SSL Client-Server.
• Experience with Ethernet LAN (Local area Network) topologies
• Working knowledge of IPSEC/GRE SSL VPNs, VLANs, QoS, and VIP
• Strong hands on experiences Cisco Routers 4300, 4400, 4500, 2900, 3800, Switches 3850, 4500, 9300, 9400, 9500, 6500, 6800 series.
• Maintaining OSPF, EIGRP and static routing protocol on CISCO routers and catalyst switches.
• Configuring and troubleshooting cisco 1800, 1900, 2800, 3800, 3900 series routers and cisco Nexus 9K, 7K, 5K, 6500, 4900, 3750 series catalyst switches.
• Setup TFTP server to maintain CISCO router configurations and CISCO images. Worked on network hardware and software upgrades.
• Configured HSRP, VLAN Trunking 802.1Q, VLAN routing on Cisco Catalyst 3550/4500/6500 Switches.
• Designed and configured Cisco ASA firewalls with OSPF and BGP.
• Worked on Cisco ASR series routers, NXOS and OTV
• Worked with project managers to determine networking requirements and provide the enterprise users with the best solutions to their networking problems from an institutional prospective.
• Implementation of Checkpoint Firewall 4.1 to protect and authenticate local-net and DMZ. Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.
• Troubleshoot User connectivity issues on Checkpoint and Cisco ASA using CLI utilities.
• Made changes to Palo Alto Firewalls, Cisco ASAs, Cisco Nexuses, and Cisco routers and switches to ensure optimal network operations
• Assisted in the migration of firewall rules set from Legacy Cisco ASA to Palo Alto firewall using Palo Alto migration tool 3.0
• VPN connections for customers, administer DHCP, NTP, DHCP Snooping, Port Security, manage wireless network, creating and managing VLANs, solve network related user
• Firewall deployment, rules migrations, Firewall administration and migrating existing rule onto Palo alto Firewalls.
• Support Infoblox appliances to provide DHCP and DNS services for the health system’s hospitals and remote clinics
• Experience in configuring Cisco ASA Firewalls 5540/5550/5585 using CLI, Cisco CSS, CSM, ASDM for day to day maintenance.

Environment: : Cisco UCS, MPLS WAN, DMVPN, Checkpoint R62, R65, DHCP, NTP, Infoblox, BGP, Multicast, SolarWinds, IPSEC, SSL, VPN, OSPF, EIGRP, Cisco Nexus, Cisco ASA firewalls, Palo Alto firewalls, CSM, ASDM, CSS, NXOS, OTV, Cisco Nexus 6500, 4900, 3750,9000, Cisco routers and switches, F5 LTM, GTM.

Confidential, Dover, NH

Network Engineer

Responsibilities:

• Configuring switch ports, access & trunk links, static routes, load balancing, updating IOS etc.
• Prioritizing and assigning the workflow tasks and incident tickets while maintaining SLAs
• Updating access-list, IPS filters NATs/ security rules, clearing unwanted bi-directional NATs
• Working knowledge of VSS, VPC, LACP, PAgP, VRFs, IPSEC/GRE SSL VPNs, VLANs, QoS, and VIP
• Working knowledge of Nexus, Cisco IOS, Cisco 7200, 6500,4500,4900,3700 series switches, ASRs,891 routers, WLC, Aps, WISMs, Nokia Firewalls, web sense, checkpoint, wire sharks, Cisco, WCS.
• Completing work order tasks for commissioning /de-commissioning devices on the network
• Provide technical post-sales design and implementation services of Infoblox/DHCP/IPAM and Security products
• Plan, design, and implement solutions for WAN, LAN, VOIP, QOS, DMZ, firewalls, VPN, Cloud Services, and security architecture across enterprise networks
• Troubleshoot and resolve issues
• Experience with Fiber-optic cabling including terminations, standards, and troubleshooting skills.
• Configurations of load balancing in F5, SSL/VPN connections, Cisco ASA Firewalls and related network security measures.
• Experience in configuring, deploying and deployment of Cisco Security Manager (CSM) for management of Cisco ASA Firewall series.
• Managed the F5 Big IP LTM, GTM appliances to include writing I Rules, SSL offload and everyday task of creating WIP and VIPs.
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come online or that may have been altered during various planned network changes on the network.
• Troubleshooting issues using advanced techniques such as TCPDUMP, FW Monitor
• Good knowledge on DHCP, BGP, multicast .
• Experience with Ethernet LAN (Local area Network) topologies
• Worked on Cisco ASA VPN devices, Experience with IDS/IPS Platforms.
• Have working knowledge about F5 load balancers, GTM, ASM, WAF balancers
• Experience in configuring HSRP, GLBP on Cisco Catalyst switches.
• Have worked knowledge on with VxLAN configurations on 7K, 9k switches platform.
• Designed and configured Juniper routers with OSPF and BGP, ISIS, Multicast.
• Analyze and provide reports to management about capacity planning and trend analysis
• Maintain and monitor all infrastructure hardware.
• Setup UNIX NTP servers to ensure that all cameras have the proper time stamps.
• Have knowledge on Cisco VOIP phones
• Documentation and creating policies and baseline configurations.
• Experience with TCP/IP protocol and Microsoft Visio.
• Collaborate with Service Providers to process circuit orders and facilitate installation schedules

Environment: Access-list, Nat’s, VSS, VPC, IPSEC, SSL, Wi-Fi, QOS, VIP, DHCP, Ethernet LAN, HSRP, GLBP, Cisco Catalyst Switches, Juniper, TCP/IP, Fiber OPTIC, F5, Cisco ASA, CSM, Checkpoint.

Confidential, Milwaukee, WI

Network Engineer

Responsibilities:

• Worked as part of the team to manage enterprise network infrastructure as a Tier-1 Support Engineer.
• Configured HSRP, VLAN Trunking 802.1Q, VLAN routing on Cisco Catalyst 3550/4500/6500 Switches.
• 85\PS, Ether-Channels, STP for creating and Maintaining Access/Distribution and Core layer switching architecture.
• Configuring Cisco 2900/3500 switches with STP, RSTP, and RPVST to avoid loops.
• Hands-on experience in configuring VPC, VDC and ISSU Software upgrades on Cisco Nexus 7010.
• Configuring Static NAT, Dynamic NAT, and PAT overload.
• Assisting the certification teams in configuring LAN/WAN technologies such as Ethernet, Fast Ethernet, Gigabit Ethernet.
• Experience in configuring GLBP on Cisco Catalyst switches.
• Support routing protocols including BGP and OSPF routing, HSRP, Load Balancing/Failover configurations, GRE Tunnel Configurations, VRF configuration and support on the routers.
• Troubleshooting issues using advanced techniques such as TCPDUMP, FW Monitor,
• Opnet packet capture, pcap analysis using Wireshark, firewall rule base audit and MOP (Method of Procedure) for firewall and proxy.
• Configured Cisco VPN Concentrator 3060 for VPN Tunnel with Cisco VPN hardware/software client and PIX/ASA firewall.
• Configuring and implementing Security/NAT rules on Cisco ASA 7.x,8.x/PIX firewalls.
• Troubleshooting issues related to STP, RSTP and Vlans allocation in Organization for maintaining Layer 2/3 Switching intact.
• Experience with design and implementation of Virtual Switching System (VSS) for both User segment and server segment using 6509 catalyst switches
• Configure STP for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to the switches.
• Have knowledge about configuring technologies like F5 Load Balancing, Security Firewalls.
• Actively used smart view tracker for troubleshooting.
• NTP server setup and configuration on network devices.
• M3000 NTP server configuration and administration.
• Problem solving support for issues affecting B2B, Internet and VPN, Routing, traffic and log analysis.

Environment: OSPF, BGP, VLAN, STP, RSTP, Cisco Nexus 7010, NAT, PAT, GLBP, TUNNELING, Cisco VPN, Ether- Channels.

Confidential

Network Engineer

Responsibilities:

• Maintaining the network security and integrity, hardware and software problems in the setup.
• Handling software, patch updates and antivirus across the enterprise.
• Monitoring the network performance, diagnose network failures and connectivity issues using Wireshark, tcpdump and Nmap.
• Creating and maintaining user accounts, passwords, profiles, home directories, setting file permissions.
• Document network and telephony hardware and software configurations, versioning and hardware.
• Troubleshooting of routing protocols, which include RIP, BGP, EIGRP, and OSPF.
• Implementing and maintaining standard access-lists and extended access list as per User’s security level.
• Providing tech support for complex WAN and LAN networks.
• Maintaining and regularly updating network documentation and network diagram using MS Visio.
• Operational support and troubleshooting production issues across the environment.
• Facilitate and coordinate with vendors, suppliers, and IT teams in resolution of network and systems faults or upgrades under the supervision of senior staff.
• Designing and establishing redistribution of RIP and EIGRP into OSPF.
• Switching tasks include VTP, IPSEC and GRE Tunneling, VLANs VTP, VLAN Trucking using ISL and 802.1Q, STP, RSTP, PVST+, Ether channel using LACP and PAGP, INTER- VLAN, Routing, CEF and DCEF.
• Provided diagrams and insight on setting up new networks. Created diagrams for preexisting network infrastructure. Worked on Switching configuration.
• Actively involved in Switching technology Administration including creating and managing VLANS, Port Security-802.1x, Trucking 802.1Q, RPVST+, Inter-VLAN routing and LAN security on Cisco Catalyst Switches 4507R+E, 6509-E and Cisco Nexus Switches 2232,5596,7009
• Defining and implementing route-maps, distribute lists, access-lists for resolving redistribution issues.
• Performing system administration tasks including backups and file restores.
• Extensive use of Cisco Routers and Switches by using LAN & WAN routing protocol EIGRP, OSPF and BGP to manage network infrastructure worked with any complex routing and switching issues.
• Installation and deletion, workstation, Server installation, and operating system upgrades.

Environment: Cisco 3750/3550/3500/2960 Switches & Cisco 3640/12000/7200/3845/3600/2800 Routers, BGP, VLAN, HSRP, LAN, WAN.

Confidential

Network Support Engineer

Responsibilities:

• Installation of WINDOWS (XP/7) and professional servers.
• Troubleshooted using PING, TRACEROUTE to check connectivity.
• Configuring, maintaining and troubleshooting of layer 3 routing and layer 2 switching.
• Configured VPN for remote access.
• Good knowledge on DHCP.
• Troubleshooted desktops, servers, laptops.
• Implementing VLAN’s using DOT1Q/ISL on Cisco switches.
• Configuring routing protocols such as OSPF, EIGRP, and BGP as required.
• Configuring and implementing Security/NAT rules
• Implementing Windows NT domain, DNS services E-mail, Web and FTP services.
• Hand-on experience in installing, maintaining and configuring HP printers, copiers, servers and other networking devices with IP addresses.

Environment: TCP/IP, RIP, Access-lists, LAN/WAN, Trunking 802.1, ISL.