SUMMARY

• Around 8 years of diversified experience in Network Admin, and network engineer, Voice Engineer.
• 6 years of hands on experience with BIG - IP environment utilizing two or more of the following: GTM, LTM, APM or ASM.
• Experience in deploying and troubleshooting LAN/WAN, MPLS, ETHER-CHANNEL, IP Routing Protocols-(RIPV2, OSPF, EIGRP & BGP), Switching, Firewall, Technologies, NAT, VLAN, STP, VTP, 802.1q, HSRP, GLBP and Load Balancers, VPN configurations.
• Experience in implementation, support and troubleshooting of VLAN’s including operational knowledge of STP, PVST, RSTP, inter VLAN routing, Port security, Ether-Channel, LACP Protocol and ISL/802.1q.
• Expertise in installing, configuring, and troubleshooting of Cisco Routers (7200, 3800, 3600, 2800, 2600, 800) and installing, configuring and maintaining Cisco Switches (2900, 3500, 3750 series, 6500 series).
• Implemented REDISTRIBUTION on different IP Routing protocols and Migration from IPV4/IPV6
• Design, implement and configure the GM Financial core network and WAN circuitry using a collapsed core design using: Ethernet MPLS links, 6500, 4500, 4500x, BGP, OSPF.
• Extensively worked on Cisco PIX 506/515E while designing and implementing various projects with Cisco PIX firewall and migrated and implemented new solutions with Cisco ASA Firewall series 5500, 5510, 5512-X.
• Extensive knowledge in configuring, monitoring and troubleshooting Cisco’s ASA 5500.
• Experience with Checkpoint Firewalls NG, NGX, NGR55, NGX R65, R70, R75, UTM.
• Experience with GAIA, Checkpoint VPN-1/Firewall-1, Standalone & Distributed setup, Security management, Log server, Secure platform (SPLAT), Provider-1, and VSX gateway with clusters and Virtual firewall models like smart-1, power-1.
• Worked on different firewall and security appliance such as: Palo Alto 200,500, 3020, 3060, 5020,5060
• Designed and configured Palo Alto Central Management Platform with Panorama and Wildfire Deployment.
• Experience with F5 Big IP and Cisco ACE load balancers for load balancing and traffic management.
• Worked on F5 APM, LTM, GTM series like 6400, 6800, 8800, i5800.
• Installed high availability Big IP F5 LTM, GTM and ASM Load balancers to provide uninterrupted service to customers.
• Hands on knowledge/experience on F5 Load balancers, its methods, Implementation and troubleshooting on LTMs and GTMs.
• Experience Configuring VDC&VPC in Nexus Switches 7k, 5k and 2k.
• Expertise in DOCSIS cable protocol.
• Configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 7000.
• Experience in configuring, upgrading and verifying the NX-OS operation system.
• Experience in working with the Linux Systems and Kernel components.
• Experience with converting Cisco 6500 IOS to Cisco Nexus NX-OS in the data center environment.
• Expertise in installing, configuring and troubleshooting Juniper E, J, M & T-Series Routers and Juniper EX Switches (EX2200, EX2500, EX3200, EX4200, EX4500, EX8200 series).
• Worked on Juniper Net Screen Firewalls like NS50, SSG 550M, SSG520M, ISG 1000, ISG 200.
• Experienced in call routing using CISCO Unified Contact Center Enterprise. (UCCE)
• Expertise in preparing Technical Documentation and Presentation using Microsoft VISIO/Office.

TECHNICAL SKILLS

Cisco Platforms: Nexus 9K,7K, 5K, 3K,2K & 1K, Cisco routers (7600,7200, 3900, 3600, 28002600, 2500, 2000, 2901, 2911, 1800 series) & Cisco Catalyst switches (6500, 49003750, 3500, 4500, 2900 series), ASR (9K, 901, 903), ISR G1’s & G2’s, SUP720 & SUP 2T, Cisco unified manager, Cisco sip phones 79407960, Cisco Wireless controller 2500,5500,5700.

Juniper Platforms: SRX, MX, EX Series Routers and Switches.

Networking concepts: Access-lists, Routing, Switching, Arista Switches sub-netting, Designing, CSU/DSU, IPsecVLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi, checkpoint(R77.30).

Load Balancers: Cisco CSM, F5 Networks (Big-IP), LTM, GTM, Citrix NetScaler.

WAN Technologies: Frame Relay, SDN, ATM, MPLS, Leased line & exposure to PPP, DS1, DS3, SD-WAN OC3, WAAS, T1/T3, & SONET, CRS 4 slot.

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channelVLANS, VTP, STP, RSTP, 802.1Q, VPLEX.

Security Protocols: IKE, IPSEC, SSL-VPN, FIX.

Networking protocols: RIP, OSPF, EIGRP, BGP, MP-BGP, LDP STP, ATM LANE, RSTP, VLANs, VTP, PAGPLACP, MPLS HSRP, VRRP, GLBP, TACACS+, Radius, AAA, RSVP-TEMP- BGP, MCAST - NG, ASM, SSM, IGMP, MVR, FHRP, ELP. ca

Communication Protocols: TCP/IP, UDP, DHCP, DNS, ICMP, SNMP, ARP, RARP, PPP, HDLC and I9SDN.

Firewall Security: Cisco PIX 500 series, Cisco ASA 5500,555series, Checkpoint, Juniper SRX, Palo Alto, Fire Eye NXFortinet Firewall, Zscaler Proxy.

Sniffers: Wire Shark, Solar Winds, GNS3, Riverbed

Operating Systems: MS DOS, Windows 95/98, Windows NT/2000/XP/Vista/7/8, UNIX, LINUX, NEXUS.

Scripting Language: HTML, Java Script, PHP, Perl, Bash, Shell, Python

Automation tools: Puppet, Chef, PowerShell, Ansible etc.

PROFESSIONAL EXPERIENCE

Confidential, Minneapolis, MN

Network Engineer

Responsibilities:

• Responsible for entire LAN and WAN/WLAN maintenance, troubleshooting and installation, deployment, and upgrade of software, hardware and network facilities. Configuration, support and maintenance of the network environment.
• Administered IP phone networkwith Cisco Call Manager and Unity and implemented global VOIP dial plan for PGS PANS which resulted in 70% cost reduction in long distance.
• Collaborating with application owners, network team, DNS team, firewall team, to migrate application from legacy met NetScaler load balancer to new F5 BIG-IP local traffic manager.
• Expertise in installing, configuring, and maintaining Cisco Switches (2900, 3750, 3700 series, 3850 series).
• Expertise in installing, configuring, and troubleshooting of Cisco Routers (6500,3850, 3750, 2600).
• Security policy review and configuration in Palo Alto and Juniper SRX Firewall in US offices and Data centers, communicated with juniper engineering and QA test systems.
• Working with RedHat Linuxteam for resolving the Kernel/OS level issues
• Successfully installed Palo Alto PA-5060 firewalls to protect Data Center and provided L3 support for routers/switches/firewalls.
• Deploying and decommission of VLANs on core ASR 9K, Nexus 9k, 7K, 5K and its downstream devices, ci
• Experience on Internet protocols and services (TCP/IP, WWW, FTP, TELNET, NFS, SSH, RSH, etc.
• Designed, configured and administrated Silver-Peak WAN Optimization devices.
• Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+, RADIUS).
• Member of the Security Team, assisted in the migration of Firewalls from Cisco ASA to Fortinet.
• Handled all the FirewallMigrations from Cisco ASA to Fortinet on a Global Scale.
• Regular maintenance of the F5 ASM, primarily installing of the latestF5 ASM signatures.
• Hands on experience in translating customer's Security policy (ASM) and accurately apply it to the F5.
• Enforcement Readiness period, Trusted and Untrusted traffic, Loosening and tightening restrictions inASM.
• Drive all technical accepts of the adoption of application F5 ASM layer firewall.
• Responsible for Palo-Alto firewalls configuration and administration across global networks for providing IPS/IDS.
• Configured Palo Alto firewall for outbound traffic via Bluecoat Proxy server.
• Deploying Palo alto firewall using VMWare NSX and Citrix NetScaler SDX version using L2 and L3 interface with VM-100, Vm-200 and1000-hv.
• Configuration, Troubleshooting and Maintenance of Palo alto firewalls - PA200, PA2000 series, PA 3000 series, PA 4000 Series, PA 5000 series.
• Juniper and Palo Alto firewall per client topology and features such as Application & URL filtering, Security Profiles, VPN, Data filtering and file blocking
• Managed Checkpoint Firewalls using Multi Smart Domain Manager, Cisco with Cisco CSM and Palo Alto with Panorama.
• Designed and configured Palo Alto Central Management Platform with Panorama.
• Designed Installed and Troubleshoot Palo alto firewalls with the cluster using Panorama
• Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalysts. implementation, and administration of the following network protocols: BGP, EIGRP, SNMP, SSH, ICMP, STP, DHCP, DNS, and more recently, VRPP, HSRP
• Gateways to support analog and fax solutions and configuring the gateways to communicate with Cisco Unified Call Manager 8.5.1
• Work with SSH, Telnet, SNMP, VLANs, SFPs, port activations, sty, IP access-groups, banner logins, AAA authentication, HSRP, IOS upgrades, and VOIP.
• Firewall Design and Implementation Cisco ASA 5525, Checkpoint.
• Firewall Design and Implementation CiscoASA 5506, 5508,5515 Palo Alto.
• Managed large enterprise environment containing Palo Alto Firewalls, Checkpoint Firewalls,Bluecoat Proxy, F5 LTMS/GTM, Cisco routers, Switches and Cisco ASA.
• Deployed, designed new infrastructure using checkpoint firewalls, Palo Alto,Bluecoat Proxy, f5 load balancer, and source fire devices
• OSPF and BGP were used as the routing protocols to populate the Multicast Routing Tables.
• RTLS overWI-FI tags, Cisco VoIPWI-FI phones, rugged tablets, wireless printers, scanning guns/rings, mobile workstations and robotic pallet lifts.
• Provide support and for 2Tier and 3Tier firewall architecture, which includes various Checkpoint, Cisco ASA firewalls and Palo-Alto firewalls.

Confidential, Minneapolis, MN

Network Engineer

Responsibilities:

• Configuring and troubleshooting Cisco 1800, 1900, 2800, 3800, 3900 series routers and Cisco Nexus 9K, 7K, 5K, 6500, 4900, 3750 series catalyst switches.
• Design, Engineering, support and Implementation of solutions that required HP/Cisco Networking Tipping Point IPS, Juniper/Cisco/Checkpoint/Fortinet and VPN solutions admin, policy.
• Secure Email Gateway, Web Marshal proxy gateway and Secure Connect FortinetFirewalls.
• Experience with Cisco FWSM, implementing ACL on router, using ASDM and ASA 5505s
• Strong hands on and troubleshooting experience on Nexus 9k,7k,5k and 2k.
• Troubleshoot application F5 balancing issues on Cisco CSS and ACE platforms.
• Train other team members onUCCE environment
• Implemented security policy using the option Rapid Deployment Security Policy with Policy Builder also enables the Real Traffic Policy Builder the automated policy building tool in F5 ASM.
• Using the ActiveSync security policies, application-ready security policies to protect servers running on F5 using F5 ASMfor both the HTTP and the HTTPS protocols.
• Migrated and implemented new solutions with Juniper SRX 240, 650, 1400, 3400 Configuring Site-Site VPN on Juniper Firewall with SRX 1400, 3400.inde.
• Session border controller enforces security, service time with VoIP session.
• Advanced knowledge, design, installation, configuration, maintenance, migration and administration on Juniper SRX device.
• Enabled and verified UTM feature on Juniper SRX 550 Service gateway.
• Support LWAPP, GLB, VRRP, HSRP, OSPF, VOIP, etc.
• Manage VOIP Installation and maintenance of SIP hosted PBX Customers.
• Develop from the ground SIP VOIP service. Implementation, troubleshooting and Configuration. Create documentation templates for future installations and procedure guidelines.
• Worked on implementation of the basic F5 ASM, F5 Fire pass and VE, F5 APM.
• Multiple projects implementations, support and co-ordination, firewall IPS, IDS, VPN and remote access technology.
• Implement Cisco IOS Firewall IDS using 2600 series router
• Configured Cisco ISE for Wireless and Wired 802.1x Authentication on Cisco Wireless LAN Controllers, Catalyst Switches, and Cisco ASAFirewalls.
• Used protocols to discover and establish security associations used by 802.1x.
• Provide configuration steps needed for migration of existing customer traffic onto the newly built upgraded network of Cisco ASR 9Ks, Nexus switches across all Data Centers.
• Configure NAC (network Access Controller), IOS, switch and router upgrades
• Support in configuring VPC, VDC and ISSU software upgrade on Nexus 7010
• Configured Layer 2 and 3 with Cisco Nexus 7K, 5K instead of 6509,9710, 5596UP, 3850,3950, ASR.
• Implemented Positive Enforcement Model with the help of Palo ALTO Networks
• Extensive working experience of VLANs, Ether channels, Spanning tree protocol and MPLS.
• Experience in Installation, Configuration and Administration of Windows 2000/2003, HTTP, FTP, DNS, NTP, DHCP servers under various LAN and WAN environments.
• Provided BGP and firewall consulting to clients SRX240 and EX4200 implementation. Included reviewing and improving IP Plan, application requirements, and WAN failover.

Confidential

Network Admin

Responsibilities:

• Troubleshooting the TCP/IP networks for connectivity, outages and slow networks issues and recommended appropriate and cost-effective solutions for the congestion.
• Provided Enterprise level Active Directory Architecture, engineering, Design and Documentation of the proposal approaches
• Networkconsists of Heavy Cisco equipment such as: Cisco 2924 switches, Cisco 5500 series Layer 3 switches, Cisco 7200 series routers, Cisco Pix firewall 500 series and Wireless Access points Cisco 1230.
• Configured Cisco ASA 5510 for VPN Network Access Control integration with CiscoISE(Inline PEPs).
• Mitigated WAN/LAN connectivity issues and performed new installs using multiple vendor equipment. configurations for multiple data centers and LAN/WAN/MAN of a large dispersed geographical network with varying requirements
• Responsible for deploying various network security& High Availability in Checkpoint Firewall.
• Configuring routing protocols OSPF, EIGRP, RIP, MPBGP, LDP and BGP V4.
• Used and Maintained Routing Protocols BGP, TCP/IP, BGP, ISIS, OSPF, MPLS, RSVP, and VRRP in a dual-stack IPv4/6 environment.
• Working closely with Server team, Network appliance team to migrate the server connections and Riverbed, F5 connections from Catalyst 6500 Switches to Nexus 7000, 5000.
• URL filtering will help you to categorize the websites on the internet.
• Participated in 24 x 7 incident and problem support.

Confidential

Network Admin

Responsibilities:

• Cisco ASA 5505, 5510 designs, implementation, configuration and troubleshoot. Basically, creating Lan Firewall, VPN, access-list, remote VPN.
• Migration from 2500 series to 2600 series Routers.
• Installed, configured (through CLI & SDM) and managed CISCO routers and Catalyst switches.
• Performed Troubleshooting and monitored routing protocols such OSPF, EIGRP & BGP.
• Configured ACL & NAT through CLI.
• Re-resigned, implemented and supported Certificate (PKI) based VPN technologies (IPSEC, EASYVPN, DMVPN, GET, VTI, GRE, IOS-SSL VPN, AnyConnect, SSL VPN WITH LDAP/ACS), VPN QOS and authored remote access and third party connection policy
• Experience with protocols such as Frame Relay, IEEE 802.11 and VLAN, OSPF and BGP, DNS, DHCP, FTP, NTP, SNMP, SMTP and TELNET.
• Involved in customer escalations and troubleshooting issues related to connectivity, STP, VLAN, Trucking, VTP, Layer 2/3 switching, Ether channels, Inter-VLAN routing, log messages, high CPU utilization and parameters that can degrade performance of network.
• Configured VLANS on multiple catalyst switches performed troubleshooting on TCP/IP network problems, Administered Frame-Relay and networks
• Provided technical support and problem resolution for the LAN and its environment by analyzing the problem, identifying the cause and circumstances of the problems and finding a solution to the identified problem.
• Experience on Check Point Next-Generation Firewalls R65, R70, R75.

Confidential

Network Admin

Responsibilities:

• Troubleshooting hardware, software, and other network related problems, and systems Desktop responsibilities included software & hardware installation & configuration.
• Implemented Site-to-Site VPNs between ASA Firewall and Router.
• Responsible for layer 2 security which was implemented using a dedicated VLAN ID for all trunk ports, setting user ports to non-TRUNKING, deployed port security when possible for user ports.
• Configuration & maintenance of Cisco2600 series routers with OSPF protocols.
• Configuration and implementation of various protocols on 2800 series router for efficient performance of network.
• Installation, Integration and maintenance of LAN, WAN and MAN setup.
• VLAN Configurations, troubleshooting and Firewall ACLs and Object-Groups configuration and support.
• Upgrade the network by translating protocols like EIGRP to OSPF.
• Redistribution from RIP to OSPF and vice versa by implementing Hub and Spoke topology with a Frame Relay Switch.