SUMMARY

• CCNP certified - 7+ years of professional experience in Network Designing, Deployment, Configuring, Troubleshooting and Testing of networking system
• Design and configuring of OSPF, BGP on Juniper Routers (MX960) and SRX Firewalls(SRX240)
• Experience working with High performance data center switch like nexus 7000 series
• Experience working with Nexus 9000, 7010,7018, 5020, 2148, 2248 devices
• Dealt with the escalation problems for Routing, Switching and WAN connectivity issues using ticketing system like Remedy Ticketing System
• Working with Cisco for opening TAC Case and resolving issues to meet project deadlines.
• Experience with designing, deploying and troubleshooting LAN, WAN, Frame-Relay, Ether-channel, IP Routing Protocols - (RIPV2, OSPF, EIGRP & BGP), ACL's, NAT, VLAN, STP, VTP, HSRP & GLBP
• Experience in layer-3 Routing and layer-2 Switching. Dealt with Nexus models like 9K, 7K, 5K, 2K series, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches
• Strong hands on experience on PIX Firewalls, ASA (5540/5550) Firewalls, Palo Alto Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS)
• Having Experience in Implementation, Administration and Maintenance in multi-vendor platform environments (Cisco, Juniper, Checkpoint, F5, Palo Alto)
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools
• Working knowledge with monitoring tools like Solar Winds & network packet capture tools like Wire-shark
• Working knowledge ofBluecoat Proxy AV & SG appliances
• Strong knowledge on working with F5 Load balancers and their implementation Data Center Networks
• Experience with network based F5 load balancers with software module GTM & checkpoint
• Experience with using F5 Load balancer in providing worldwide data and file sharing, continuous internet connectivity and optimized web performance
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability
• Experience with using LTM F5 component to provide 24X7 access to applications
• Provided 24x7x365 availability and on-call support as required by the projects
• Excellent working knowledge of TCP/IP protocol suite and OSI layers
• Good knowledge and experience in Installation, Configuration and Administration of Windows Servers 2000/2003, Active Directory, FTP, DNS, DHCP, TFTP, Linux OS under various LAN and WAN environments

PROFESSIONAL EXPERIENCE

Confidential, Elk Grove, CA

Sr. Network Data Engineer

Responsibilities:

• Experience with Network Redesign for Company Campus Locations and Moving from 6500 based Data Center to Nexus based Data Center.
• Experience with design and configuring Overlay Transport Virtualization (OTV) on Cisco NX-OS devices like Nexus 9000
• Experience working with ASR 9000 series switches with IOS-XR
• Experience working with design and deployment of MPLS Layer 3 VPN cloud, involving VRF, Route Distinguisher(RD), Route Target(RT), Label Distribution Protocol (LDP) & MP-BGP
• Experience with design and configure Fibre Channel over Ethernet(FCoE) on Cisco Nexus 5548 devices.
• Experience working with migration from 6500 series devices to 4500 Series switches in Campus deployments at Core, Distribution and Access Layers.
• Experience with LAN protocols like STP, RSTP, MST, VTP, VLAN and Port Channel Protocols like LACP, PAGP
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500 with ACL, NAT, Object Groups, Failover, Multi-Contexts
• Experience with migrating from Cisco ASA 8.2 version to Cisco ASA 8.4 Version
• Experience with convert PIX rules over to the Cisco ASA solution.
• Responsible for Cisco ASA firewall administration across our global networks
• Migration of existing IPSEC VPN tunnels from one Data Center to another Data Center, due to decom of existing Data Center, which involved working with Partner Companies.
• Experience with converting WAN routing from EIGRP/OSPF to BGP (OSPF is used for local routing only) which also involved converting from Point to point circuits to MPLS circuits.
• Implement and configured VRRP/GLBP (on distro/core switching), HSRP on different location of office on the switched network and managing the entire multilayer switched network
• Experience working with Cisco Nexus2148 Fabric Extender and Nexus5000 series to provide a Flexible Access Solution for a datacenter access architecture
• Experience configuring VPC, VDC and ISSU software upgrade in Nexus 7010
• Experience in Configuring, upgrading and verifying NX-OS operation system with OSPF, BGP
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP
• Implemented Site-to-Site VPNs over the internet utilizing 3DES, AES/AES-256 with ASA Firewalls
• Migrated, created, and managed pools and clusters in F5 BigIP GTM 3DNS load balancers across multiple Datacenters.
• Experience on working with the trouble tickets on F5 Load Balancers

Confidential, Massachusetts

Sr. Network Engineer

Responsibilities:

• Involved in design and implementation of Data Center Migration, worked on implementation strategies for the expansion of the MPLS VPN networks
• Experience converting Cat OS to Cisco IOS on the Cisco 6500 switches
• Designed MPLS VPN and QoS for the architecture using Cisco multi-layer switches
• Configuring IP, RIP, EIGRP, OSPF and BGP in routers.
• Experience in deploying EIGRP/BGP redistribution and the changing the metrics for the primary and backup paths for the packet prioritization and EIGRP tuning
• Experience in migration of Frame-relay based branches to MPLS based technology using multi layer stackable switch like 6500 series and 2800 series router
• Configured OSPF redistribution and authentication with type 3 LSA filtering and to prevent LSA flooding.
• Configured OSPF over frame relay networks for NBMA and point to multipoint strategies.
• Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).
• Configuring RIP, OSPF and Static routing on JuniperM and MX series Routers
• Responsible to manage, configure and implement Checkpoint, Cisco ASA and Palo Alto firewall
• Provided redundancy in a multi homed Border Gateway Protocol (BGP) network by tunings AS-path.
• Worked on Juniper J series j230, M 320 routers and EX 3200 series switch.
• Created engineering configuration, Security Standards, documenting processes and Network documentation using Microsoft Visio
• Created and edited the Knowledge base articles related to Palo Alto Networks.
• Involved in diagnosing and troubleshooting the issues related to Palo Alto Network firewalls
• Troubleshooting and installing of CRS, ISR, GSR, ASR9000 and Nexus devices.
• Administration of Cisco 11.x and 12.1 versions and higher
• Monitored all Cisco equipments using Cisco Works
• Involved in SNMP Network management. Worked on various scanning and Sniffing tools like Ethereal
• Upgrades and backups of Cisco router configuration files to a TFTP server
• Implementing and maintaining backup schedules as per the company policy
• Experience working with Nexus 7010,7018, 5020, 2148, 2248 devices
• Experience working with High performance data center switch like nexus 7000 series
• Manage Cisco Routers and troubleshoot layer1, layer2 and layer3 technologies for customer escalations
• Installed and configured the Cisco routers 2800 in two different customer locations. It includes coordinating with Verizon and AT&T in order to bring the serial interface up for T3 link. Also, configuration includes frame relay, BGP and VPN tunnel on GRE
• VLAN Configurations, troubleshooting and Firewall ACLs and Object-Groups configuration and support
• Configured IPSec site-to-site VPN connection between Cisco VPN 3000 Concentrator and Cisco 3800
• Upgrades load balancers from Radware to F5 BigIP v9 which improved the functionality and scalability in the enterprise.
• Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday tasks of creating WIP and VIPs.

Confidential

Network Engineer

Responsibilities:

• Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches
• Managing health check of Network devices and this is involves upgrading IOS on every quarter after checking the vulnerability of IOS and reviewing the configuration
• Experience in HSRP standby troubleshooting, configuring & upgrading of Cisco IOS
• Installation, Configuration and troubleshooting Cisco switches and Firewall on multi mode context based environments
• Implemented various OSPF scenarios on networks consisting of 7600 routers.
• Configured policy based routing for BGP for complex network systems.
• Configured Multiprotocol Label Switching (MPLS) VPN with Routing Information Protocol (RIP) on the customer’s Site.
• Router/ Microsoft VPN Server in order to access certain limited network resources from customer locations
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Designing and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.
• Installed and configured fourPIX525 and two ASA 5505 in customer locations. In addition to that, two PIX firewall configured for the Guest access
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP
• Involved in the redistribution into OSPF on the core ASA firewall.
• Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.
• Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.
• Configuring, Installing and troubleshooting on Check Point Devices.
• Deploying and configuring F5 3DNS and Big-IP-LTM for global and local traffic management.
• Knowledge on multiplex techniques such as DWDM.
• Troubleshoot and Worked with Security issues related to Cisco ASA/PIX, Checkpoint, IDS/IPS and Juniper Netscreen firewalls.
• Configured networks using routing protocols such as RIP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure.
• Implemented Hot Standby Router Protocol (HSRP) by tuning parameters like preemption.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.

Environment: In Corporate office architecture with highly reliable & secured network including Cisco routers (7200,3800,2800), Cisco switches (4900,2900), Cisco ASA Firewall (5510), Routing Protocols (EIGRP, RIP, BGP), Switching protocols (VTP, STP, GLBP)

Confidential

Cisco Network Engineer

Responsibilities:

• Installed and configured Cisco ASA 5500 series firewall and configured remote access IPSEC VPN on Cisco ASA 5500 series
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems
• Implementation of name resolution using WINS & DNS in TCP/IP environment
• Configured FTP server for inside/outside users & vendors
• Used various scanning and sniffing tools like Wire-shark
• Enabled STP Enhancements to speed up the network convergence that include Port-fast, Uplink-fast and Backbone-fast
• Configured network access servers and routers for AAA Security (RADIUS/ TACACS+)
• Other responsibilities included documentation and change control
• Worked on Cisco routers 7200, 3800, 2800 and Cisco switches 4900, 2900
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include
• Configured Firewall logging, DMZs & related security policies & monitoring
• Creating Private VLANs & preventing VLAN hopping attacks & mitigating spoofing with snooping & IP source guard
• Hands on Experience working with security issue like applying ACL’s, configuring NAT and VPN
• Settings of the networking devices (Cisco Router, switches) co-coordinating with the system/Network administrator during any major changes and implementation
• Routing protocols OSPF, RIP & BGP
• Configured BGP for CE to PE route advertisement inside the lab environment
• Spearheaded meetings & discussions with team members regarding network optimization and regarding BGP issues
• Responsible for Configuring SITE TO SITE VPN on Cisco Routers between Head Quarters and Branch locations
• Provided Load Balancing towards access layer from core layer using F5 Network Load Balancers.
• Configured with F5 Load balancers in Failover for Load balancing
• Implemented the security architecture for highly complex transport and application architectures addressing well known vulnerabilities and using access control lists that would serve as their primary security on their core & failover firewalls
• Installation & configuration of Cisco VPN concentrator 3060for VPN tunnel with Cisco VPN hardware & software client and PIX firewall