SUMMARY

• Sr. Network Security Engineer with 18+ years of experience in Network, design, installation, configuration, administration, and troubleshooting of LAN/WAN, Ethernet and IP routing protocol such as OSPF, EIGRP, BGP and Security using Cisco Routers/Switches and Firewall like Check Point and Juniper SRX.
• Responsible for secure developments lifecycle for Cisco’s Nexus line of product including Application Centric Infrastructure (ACI), Application Policy Infrastructure Controller (APIC) - Cisco Software defined Network iWAN solution.
• Hands on experience on Nexus 9K, 7k Catalyst Switches like x series.
• Configured and implemented Load Balancing solutions like LTM, APM and ASM on F5 Viprion Chassis.
• Worked on extending the datacenter to Azura using express route.
• Configured, implemented and troubleshoot Aruba wireless controllers.
• Configured and implemented Citrix NetScaler for SSL VPN access.
• In-depth expertise in the analysis, implementation, troubleshooting, and documentation of LAN/WAN Architecture.
• Installed and configured SolarWinds, Live Action and Cisco Prime to monitor Network health and gather logs to troubleshoot the issues.
• Experience in installing and configuring DNS, DHCP server using Infoblox.
• Delivery Manager for Infrastructure and Security.

TECHNICAL SKILLS

Routers: Cisco 37XX, 38XX, 39XX, ASR 1K, ISR 4K

Switches: Cisco 3550, 3750, 38XX, 9300,45XX, 65XX, 68XX series, Nexus 9k,7K

Load Balancer: F5 Networks, Citrix NetScaler.

WAN Optimization: Riverbed, Cisco WAAS.

Wireless: Aruba.

Routing: OSPF, EIGRP, BGP, PBR, Route Filtering, Redistribution, Static Routing.

Switching: VLAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multilayer Switching, Multicast operations, Layer 3 Switches, Ether channels.

LAN: Ethernet, Fast Ethernet, Gigabit Ethernet.

WAN: MPLS, ATT AVPN, ATT UVN.

Various Features & Services: IOS and Features, HSRP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP Management.

AAA Architecture: TACACS+, RADIUS, Cisco ACS. Cisco ISE

Security / Firewalls: Cisco ASA, Checkpoint Firewalls, IPSEC & SSL VPNs, IPS/IDS, DMZ Setup, Cisco ISE, ACL, IOS Firewall features.

Juniper: SRX210, SRX240

PROFESSIONAL EXPERIENCE

Senior Network Engineer ­

Confidential

Responsibilities:

• Configuring, Maintaining the Routers and Switches and Implementation of EIGRP, OSPF, BGP routing protocols and troubleshooting Remote infrastructure management of offices in different locations nationwide.
• Troubleshooting and escalation management of day-to-day issues for offices. Managing Co-location and Datacenter infrastructure in North America
• Managing Citrix NetScaler load balancer for ssl vpn connectivity.
• Installing, configuring, and maintaining Cisco Switches
• Built site-to-site IPSec VPNs & MPLS circuits on various models of Cisco routers to facilitate adding new business partners to new and existing infrastructures
• Expert in configuring Cisco Routers, Catalyst Switches, Nexus Switches.
• Upgrade Cisco 4500, 6500, 6800, 3750, 2960s, Nexus 7k, Nexus 9K switch IOS software
• Experience working on Big IP/F5 load balancer, Citrix NetScaler,
• Configuring various advanced features (Profiles, monitors, iRules, Redundancy, SSL Termination, Persistence, SNATs, HA) on F5 BIGIP appliances, executed various migration/upgrade projects across F5 and hands on with F5 BIGIP LTMs/ APM and WAF.
• Managed complex wireless network strategies and imparted support to operational wireless computer networks.
• Offered users with wireless network technical support and handled indoor and outdoor site surveys.
• Monitored network for optimum traffic distribution and load balancing using Solarwinds, Live Action and Cisco Prime.
• Practice network asset management, including maintenance of network component inventory and related documentation and technical specifications information.
• Interfaced with customers and senior management for problem resolution and project planning.
• Designed and Implemented Nexus 7K/5K/2K and Catalyst 6500/4900/3750- X in a complex DC Core/Aggregation/Access layer on a 10G backbone in Production and DR Data Center
• Monitored and managed all network devices using Syslog, Cisco ISE, Cisco Prime, Solarwinds NPM, Splunk and Riverbends.
• Continually update understanding of business and technology status and objectives and respond to strategic design requests as the business evolves
• Constantly Monitor & Analyze Network Performance to detect problems and find ways to improve the Network
• Performs analysis and diagnosis of highly complex networking problems in the Data Center Environment
• Builds simulated networks in test labs to resolve highly complex problems and compatibility issues
• Involved in various POC to test drive new Products/Technologies that would Value add to our Data Center Operations

Environment: Cisco Catalyst 2960/3750/4500/6500/3800/9300 Series Switches, Cisco 3640/7200/3845/3600/2800 ISR4K and ASR1K routers, Citrix NetScaler, Cisco Nexus 9k,7K, Cisco ASA 5500, Checkpoint, Aruba 7010, windows server 2003/2008,2012,2016, F5 BIGIP LTM, F5 BIGIP ASM/APM, ACL, RIP, OSPF, BGP, EIGRP, DMVPN, GRE, LAN, WAN, VPN, HSRP,ISE

Senior Network Engineer ­

Confidential

Responsibilities:

• Designed and Configured Nexus 7000/5000/2000 in Top of Rack & End of Row Architecture for a Scalable Production Network that supports Rack & Blade server architecture VPC &VDC.
• Designed and Implemented Nexus 7K/5K/2K and Catalyst 6500/4900/3750- X in a complex DC Core/Aggregation/Access layer on a 10G backbone in Production and DR Data Center
• Monitored and managed all network devices using Syslog, Cisco ISE, Cisco Prime, Solarwinds NPM, Splunk and Riverbends.
• Continually update understanding of business and technology status and objectives and respond to strategic design requests as the business evolves
• Constantly Monitor & Analyze Network Performance to detect problems and find ways to improve the Network
• Performs analysis and diagnosis of highly complex networking problems in the Data Center Environment
• Builds simulated networks in test labs to resolve highly complex problems and compatibility issues
• Involved in various POC to test drive new Products/Technologies that would Value add to our Data Center Operations

Program Manager ­

Confidential ­

Responsibilities:

• Configured and provided access to Linacre network through Confidential RCS so that the Linacre can extend the application and services to Confidential RCS site.
• Plan and document the Network setup for the merger of business application and service.
• Plan and documents the installation and configuration of security application.

Confidential

Network Security Engineer

Responsibilities:

• Involve in the design of data model and technical architecture.
• Interact with business users in translating their requirements into infrastructure model.
• Installation and configuration of Nessus and ISS Security Scanner.
• Configure Firewall Analyzer for monitoring network traffic.
• Installation and configuration of Sensage log aggregator and created custom policies based on the requirements.
• Working on Cisco 4500 and 4900 switches for LAN requirements that include managing VLANs, Port Security and troubleshooting LAN issues.
• Configure and install LANDesk Management Suite for window patching and asset inventory.
• Configure and install Symantec End Point Protection for securing the entire network and implementing Application and device control to block optical and USB flash devices.
• Implement zero-day threat protection using Application and device control via. Symantec.
• Design and implement network comprising, Switches, Cisco ASA and Juniper SRX firewalls.
• Install and configure Websense Web Security for Web filtering traffic.
• Configured ACL’s to allow users to access different applications, Internet and compliance to the security policy and standards as per company norms.
• Perform Wireless administration and troubleshooting for the corporate Wireless infrastructure.
• Configure, deploy, and troubleshoot site-to site IPsec VPN.
• Configure application Load Balancing using F5 LTM.
• Configure and implement SolarWinds Orion NPM for monitoring servers and WAN links to quickly detect, diagnose and resolve network performance problems and outages.
• Implement advanced alerting for correlated events, sustained conditions, and complex combinations of device state.
• Install and configure Snort and Cisco IPS devices.
• Interact with business users in translating their requirements into infrastructure model.
• Design security policy based on the requirements.
• Review and approve standard project status reports (Product Activity reports, SLA Compliance reports, SR Aging Report etc.) for all projects.
• Creation of appropriate project metrics to monitor the cost, effort, quality and customer satisfaction.
• Periodic reviews of all the project/Account level metrics with Confidential offshore management team. Identify risks at the Project/Account level and formulate mitigation plans.

Environment: Client-Server Framework/Architecture/Development, Configuration Management, Disaster Recovery, Infrastructure Design, ISO 9000, Load Balancer, Cirix, VMware View, TCP/IPSystem Performance Monitoring/Measurement, Systems Security, Active Directory, DNS, DHCP, IIS, FTP, SSL Certificates, Cisco, VMware, Cisco UCS, Juniper, Internet, LAN Administration, Network Security, Networking Technology/Protocols, NFS - Network File System, SNMP, WAN, WAP Wireless Networks