SUMMARY

• Cisco certified professional with 8+ years of experience in network design, implementation, and support. Experience working with Nexus 7K, 5K and 2K
• Experience and knowledge in network design, implementation, configuration, optimization, administration, and network management.
• Experience in Networking, including hands - on experience in IP network design providing network Support, installation and analysis.
• Experience with Next Generation and web application firewalls (CheckPoint, Palo Alto, Cisco ASA Firepower, WatchGuard, Juniper SRX, Akamai Kona WAF, AWS WAF)
• Network Professional with experience in Designing and troubleshooting LAN, WAN, MPLS in Branch, Lab, Campus and Data Center environments.
• Expert level knowledge of troubleshooting, implementing, optimizing and testing of static and Dynamic routing protocols such asRIP, EIGRP, OSPF,BGP; ability to interpret and resolve complex route table problems.
• Configure VLANs, STP, RSTP, MSTP, and inter-VLAN routing in LAN environment for the customers.
• Design and deployed networks using dynamic routing protocol (OSPF, EIGRP and BGP) MPLS on Cisco Equipment.
• Involved in company effort to consolidate operational cost by minimizing investment in WAN connectivity and use technologies like SD-WAN and cloud managed solutions like Cisco Meraki.
• Successful implementation of technologies including: Ether channel,Trucking, VTP, VLAN, Inter-VLAN Routing, STP MSTP, Port security for L2 in a distribution layer and implemented EIGRP, OSPF routing for Site-site VPN connections on Cisco Switches.
• Implementation of traffic filters on Cisco routes using Standard, extended Access list.
• Expert Level Knowledge about TCP/IP and OSI models.
• Responsible for configuring multi-vendor routing, switching, and security devices for internal and colocated networks.
• In-depth expertise in analysis, implementation, troubleshooting & documentation of LAN/WAN
• Experienced in installation, configuration and maintenance of Ericsson SE 600, 800, 1200 Routers, Cisco 7200, 3900, 2800, 2600, 2500 and 1800 series Router / Cisco Catalyst Cisco 6500, 4500, 3750, 2950 series Switches.
• Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF,
• LDP, EIGRP, RIP, BGP v4, MPLS
• Trunks, VTP Ether channel, STP, RSTP and MST.
• Coordinated with development team in resolving defects by providing all the required information for fixing the defects and verifying their fix in private builds.
• Managed design, security analysis, and firewall policy deploys
• Supported diagnostic and test activities to determine performance, validation and solutions to complex software issues.
• Experience with hardware load balancer administration and support, preferably with F5 and Cisco ACE load balancers.
• Configuring Cisco routers and switches to enable and troubleshoot a variety of features such as Trunk, Vlan, Ether channel, port security, routing protocols including EIGRP, OSPF & BGP and Other related technologies such as multicasting.
• Experience in the setup of Access-Lists and tunnel installations.
• Good knowledge and experience in Installation, Configuration and Administration of Windows
• Servers 2000/2003, Active Directory, FTP, DNS, DHCP, TFTP, Linux OS under various WAN environments.
• Experienced in creating multiple VPC’s and public, private subnets as per requirement and distributed them as groups into various availability zones of the VPC.
• Created NAT gateways and instances to allow communication from the private instances to the internet through bastion hosts.
• Used security groups, network ACL’s, internet gateways and route tables to ensure a secure zone for organization inAWS public cloud.
• Created and configured elastic load balancers and auto scaling groups to distribute the traffic and to have a cost efficient, fault tolerant and highly available environment.
• Created S3 buckets in theAWSenvironment to store files, sometimes which are required to serve static content for a web application.
• Configured S3 buckets with various life cycle policies to archive the infrequently accessed data to storage classes based on requirement.
• Possess good knowledge in creating and launching EC2 instances using AMI’s of Linux, Ubuntu, RHEL, and Windows and wrote shell scripts to bootstrap instance.
• Used IAM for creating roles, users, groups and also implemented MFA to provide additional security toAWSaccount and its resources.
• Created EBS volumes for storing application files for use with EC2 instances whenever they are mounted to them.
• Created snapshots to take backups of the volumes and also images to store launch configurations of the EC2 instances.
• Responsible for Continuous Integration and Continuous Delivery process implementation using Jenkins along with Python and Shell scripts to automate routine jobs.
• Implemented Continuous Integration using Jenkins and GIT from scratch.

TECHNICAL SKILLS

Cisco Routers: (1800, 2500, 2600, 2800, 3600, 3750, 3800, 7200), ASR 1K and 9K.

Cisco Switches: (2900, 3500, 4000, 4500, 5000, 5800, 6500, and 7600 Nexus 2k, 3k, 5k and 7k).

Routing Protocol: (BGP, OSPF, EIGRP, ISIS, IGRP, LDAP, IGMP, RIP), Routed Protocol TCP/IP, Multicasting (PIM),.

LAN Protocol: VLAN, PVLAN, VTP, IPX, Inter-VLAN routing, ISL, 802.1Q (dot1q), STP, IS-IS, RSTP,, Ethernet, Port security.

WAN Technology: Frame Relay, ISDN, ATM, PPP, ICMP, L2VPN, L3VPN

Network Management: SNMP v2, Syslog, HP Open View NNM, Net flow Analyzer, Sniffer, Wireshark, Citrix Xen, HP SAN storage .

Operating systems: Linux, UNIX, DOS, Windows XP/2007/2008, Windows 2003 server and Windows 2008 server

Network Security: NAT/PAT, Ingress &Egress Firewall Design, VPN ConfigurationInternet Content Filtering, Knowledge of Firewall, ASA, IPSEC, Palo alto.

Application Protocols: DHCP, DNS, FTP, HTTP, SMTP, TFTP.

Documentation: Microsoft Office, excel.

Cloud Platforms: AWS,Microsoft Azure, Open Stack.

Configuration Management Tools: Chef, Puppet, Ansible, Jenkins.

Operating Systems/Virtualization: Windows, Unix, Linux, Solaris, MAC, VMware

PROFESSIONAL EXPERIENCE

Confidential, Westlake, Texas

Network Engineer

Responsibilities:

• Responsible for Support of network security and network devices such as routers, switches and wireless access points.
• Responsible for designing and implementation of Network Infrastructure.
• Implemented upgraded firewall platform built on Checkpoint Firewall Technologies.
• Migrated the rules from Checkpoint firewall to Palo Alto firewalls
• Implemented security policies using ACL, Firewall, IPSec, and VPN
• Exposure to Blue coat Proxy
• Working knowledge of security products such as Cisco ISE
• Act as a subject matter expert for the customer’s next generation firewall solution
• Implemented security policies using ACL, Firewall, IPSec, VPN, AAA Security TACACS+, and Radius on
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA Security appliance
• Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools
• Designing SD-WAN solution based on current infrastructure
• Configured VLAN, OSPF, Sub-netting, EIGRP, BGP, VTP, spanning tree, IP Sub-netting, Wireless Access points
• Involved in configuring Checkpoint firewall and applying rules to pass servers and switches through firewall.
• Involved in Migration of Juniper EX series switches to Cisco 3500 series and 6500 series switches.
• Coordinated and scheduled the delivery ofF5Professional Service implementations and consulting engagements
• Configured Group Policy Objects to create a secure Windows Infrastructure.
• Experience working with Nexus 7010, 5548, 5596, 2148, 2248 devices.
• Experience with configuring FCOE using Cisco nexus 5548
• Administered DNS, DHCP and WINS.
• Firewall rule management with Check Point, F5 GTM/LTM load balancing, NetOptics Taps and traffic aggregation for monitoring & security analytics
• Configure and troubleshoot Juniper EX series switches and routers
• Experience with moving data center from one location to another locate
• Designed underlay IP/Routing control plane for a datacenter clustered SD-WAN solutionon, from 6500 based data center to Nexus
• Design, and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls
• Experience with configuring BGP, OSPF in Juniper M and MX series routers
• Infrastructure trouble shooting and TCP/IP Protocols Experience.
• Involved in installing newer 3502 Wireless Access Points.
• Provided third level help desk support for problems relating to Active Directory.
• Contributed to our operations environment by maintaining security standards using the Palo Alto platforms, including Panorama and 7050 series.
• Reviewing the Security Engineering Ticket Queue and working the oldest tickets with the SLA of 4- business hours to resolve from the submission time
• Helped the Network team to install New switches and routers and configure the IOS according to the requirement
• Research, diagnose, troubleshoot and identify solutions via phone, email, and WebEx to resolve customer issues regarding a collection of products within the Qualys Solutions Suite including
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability
• Configuration and extension of VLAN from one network segment to their segment between Different vendor switches (Cisco, Juniper)
• Research and resolve wireless, switching, routing and security issues reported by Cisco Meraki customers and partners
• Assisted in backup, restoring and upgrading the Router and switch IOS.
• Maintaining the health of 250+ wireless Access points in two locations.
• Involved in installation and configuration of Cisco 3500 and 6500 series switches.
• Highly experienced in AWS Cloud platform and its features which includes Amazon AWS Cloud Administration which includes services like: EC2, S3, EBS, VPC, ELB, AMI, RDS, IAM, Glacier, SNS, SWF, SES, ELASTIC BEANSTALK, Route 53, Auto scaling, LAMBDA, Cloud Front, Cloud Watch, Cloud Trail,CloudFormation,OPSWork,SecurityGroups.
• Helped migrating and managing multiple applications from on premise to cloud using AWS services like S3, Glacier, EC2, RDS, SQS, SNS, SES, Cloud Formation, VPC etc.
• Implemented secured way of Centralized login for AWS users using 389 Directory Services (LDAP) and Open VPN.
• Created NAT gateways and instances to allow communication from the private instances to the internet through bastion hosts.
• Involved in writing Java API for Amazon Lambda to manage some of theAWSservices.
• Used security groups, network ACL’s, internet gateways and route tables to ensure a secure zone for organization inAWS public cloud.
• Created and configured elastic load balancers and auto scaling groups to distribute the traffic and to have a cost efficient, fault tolerant and highly available environment.
• Created S3 buckets in theAWSenvironment to store files, sometimes which are required to serve static content for a web application.
• Created EBS volumes for storing application files for use with EC2 instances whenever they are mounted to them.

Confidential - San Jose, CA

Network Engineer

Responsibilities:

• Experience with configuring Cisco 6500 VSS in Distribution layer of the Data center network
• Configuration and Administration of Cisco Routers and Switches
• Experience working with Nexus 7010, 5548, 5596, 2148, 2248 devices.
• Experience configuring VPC(Virtual Port Channel), VDC(Virtual Device Context) in Nexus 7010/7018
• Convert Campus WAN links from point to point to MPLS and to convert encryption from IPsec/GRE to Get VPN.
• Experience with setting up MPLS Layer 2 VPN in data center and also working with BGP WAN towards customer
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability
• Experience with moving data center from one location to another location, from 6500 based data center to Nexus based data center
• Designed perimeter security policy; Implemented Firewall ACL's; Allowed access to specified services;
• Enabled IDS/IPS signatures in Firewall & fine-tuned TCP & UDP.
• Apply Cisco ISE configuration to switches
• Performed various configurations using the CISCO SDM like configuring VPN, Security Audits, Firewalls,
• Network Redesign for Small Office/Campus Locations. This includes changes to both the voice and data environment
• Created user ID's, roles, groups OU's etc.
• Developed project plan, served as primary task resource, implemented and migrated domain from Windows 2008 to Windows 2008 R2
• Configuring AAA TACACS and RADIUS
• Implementing AAA TACACS and RADIUS into an existing network
• Network security including NAT/PAT, ACL, and ASA/SRX Firewalls.
• Conducted weekly meetings on new applications being run within our dev and production environments, to specify security requirements.
• Good knowledge with the technologies VPN, WLAN and Multicast.
• Well Experienced in configuring protocols HSRP, GLBP, ICMP, IGMP, PPP, PAP, CHAP, and SNMP.
• Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches
• Experience with communicating with different with different customers, IT teams in gathering the details for the project
• Switching tasks include VTP, ISL/ 802.1q, IPSec and GRE Tunneling, Open Stack, Anisable, VLANs, Ether Channel, Trunking, Port Security, UCS,STP and RSTP.
• Experience in installing and configuring DNS, DHCP servers.
• Replace branch hardware with new 3900 routers and 2960 switches.
• Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.
• Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/GRE to GetVPN.
• Responsible for layer 2 securities which was implemented using a dedicated VLAN ID for all trunk ports, setting the user ports to non-trunking, deployed port security when possible for user ports
• Involved in configuring Juniper SSG-140 and Cisco ASA firewall
• Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed.

Confidential

Network Engineer

Responsibilities:

• Performed network engineering, design, planning (WAN & LAN) & implementation.
• Studied single point failures & designed WAN structure in such a way that there are no failures in network in case of any device or link failure
• Establishing the networking environment by designing system configuration, directing system installation, defining, documenting and enforcing system standards.
• The design and implementation of new solutions and improving resilience of the current environment. maximizing network performance by monitoring performance, troubleshooting network problems and outages, scheduling upgrades and collaborating with network architects on network optimization. undertaking data network fault investigations in local and wide area environments, using information from multiple sources. securing network systems by establishing and enforcing policies, and defining and monitoring access.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual
• Network security including NAT/PAT, ACL.
• Good knowledge with the technologies VPN, WLAN and Multicast.
• Well Experienced in configuring protocols HSRP, GLBP, ICMP, IGMP, PPP, PAP, CHAP, and SNMP.
• Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches
• Experience with communicating with different with different customers, IT teams in gathering the details for the project
• Switching tasks include VTP, ISL/ 802.1q, IPSec and GRE Tunneling, VLANs, Ether Channel, Trunking, Port Security, STP and RSTP.
• Experience in installing and configuring DNS, DHCP servers.
• Replace branch hardware with new 3900 routers and 2960 switches.
• Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.

Confidential

Network Engineer

Responsibilities:

• Responsible for providing the network support and windows support
• Maintaining the NMS and antivirus server
• Interact with the clients to resolve the queries, issues and problems.
• Responsible for providing help, support and assistance in initial installation of the system, and solving network queries
• Configure the Network Cisco aces switches 2960 and core switches(4503-E) and (4506-E) series
• Configure the OSPF and HSRP in Cisco Routers 3945/E9 and Cisco Core Switch 4503,4506 E Series
• Configure the VLAN, STP, OSPF, Inter VLAN and HSRP
• Configure the trunk in the switches and HSRP Protocol on routers
• Configure the MPLS,SIFY,ISDN lines
• Maintaining the Networking and hardware issues of Thin client and Client router 1941/E9 and Core router 3945/E9
• Install and configure the LMS in windows 2008 Server.

Confidential

Network Engineer

Responsibilities:

• Designed and implemented a complex network system that used both LAN and MAN technologies · customer operational performance by resoling IT issues · Established network specifications ·
• Computer assembling and maintenance ·
• Configuring the Cisco Routers and switches ·
• Interacting with the clients to resolve the queries, issues and problems ·
• Responsible for providing help, support and assistance in initial installation router and configure on site locations
• Monitoring the NMS system for different Network Alerts.
• Set up of distributed core LAN using Cisco 6500 series switches.
• Coordinating with service providers for WAN link outages.
• Performed switching technology administration including VLANs, inter-VLAN routing, Trucking, STP, RSTP, port aggregation & link negotiation.
• Network Cabling, dressing, labeling and troubleshooting various network drops onsite
• Design, execution of installation and configuration of VPN/IVPN, LAN/WAN as per organizational requirements.
• Experienced in Planning and Organizing Change Managements.
• Gained good experience by working with configuration management tool Ansible and CI/CD tool Jenkins.
• Set up and builtAWSinfrastructure with various services available by writing cloud formation
• With the help of IAM created roles, users and groups and attached policies to provide minimum access to the resources.
• Integrated Amazon Cloud Watch with Amazon EC2 instances for monitoring the log files and track metrics.
• CreatedAWSS3 buckets, performed folder management in each bucket, managed cloud trail logs and objects within each bucket.
• Created Highly Available Environments using Auto-Scaling, Load Balancers, and SQS.
• Defined branching, labeling, and merge strategies for all applications in Git.
• Configured Elastic Load Balancers with EC2 Auto Scaling groups
• Configured S3 to host Static Web content.
• Experienced in S3 Versioning and lifecycle policies to and backup files and archive files in Glacier
• Created monitors, alarms and notifications for EC2 hosts using Cloud Watch
• Maintenance/updating of Network diagrams.
• Worked on Network Operations using Ticketing system.
• Ensure standard Router and Switch Configurations are maintained.
• LAN Segments monitoring/Trouble shooting LAN related issues.
• Carryout periodic backup of Router/Switch configurations.
• Analyzing the Bandwidth Utilization of the Links