SUMMARY

• A Network Engineer with over 7+years of experience in design, installation, configuration, administration and troubleshooting of LAN/WAN infrastructure and security using Cisco devices in large network infrastructure environment.
• Extensive noledge of TCP/IP network fundamentals such as the OSI model, Subnetting/supernetting, common port assignment, packet sniffing/filtering, and ACL’s.
• Hands - on routing experience in a multi-protocol environment including routing protocols such as RIP, OSPF, EIGRP, BGP.
• Hands-on LAN switching experience includes configuration of VLANs, trunking with ISL as well as 802.1Q encapsulation protocols, configuring VTP server and client, implementing HSRP as well as VRRP on routers and Layer 3 switches to provide redundancy and load balancing.
• Expertise in configuring routers, switches, FWSM’s and ASA Firewalls.
• Strong interpersonal skills and leadership qualities which help in creating innovative yet practical solutions to the business.
• Thorough noledge of configuring dynamic access policies, multi contexts in ASA’s and maintaining remote access VPN.
• Excellent verbal and written communication skills.

TECHNICAL SKILLS

Operating Systems: Windows Servers(2008,2003), Exchange Server(2010,2007,2003) Windows Operating Systems(7,Vista,Xp), Unix, Solaris

Firewalls: Juniper ( Netscreen 5200,5400), (ASA(5510,5520,5540,5550,5580-20), FWSM, PIX(515,525,535), Checkpoint NGX R-55,R-60,R-65

Cisco Products: Routers (1700, 1800, 2500, 2600, 2800, 3200, 3600, 3700, 3800, and 7200), Cisco L2 & L3 Switches (3750, 3560, 4500 & 6500) Series, Confidential 2k, 5k and 7k’s, Cisco FWSM’s, ASA Firewalls (5510, 5520, 5540 & 5585)

Protocols/Services: Routing Protocols (RIP, EIGRP, OSPF,BGP),GRE,IPSEC, MPLS,PPP,FRAME-RELAY,ATM QOS,VOIP, TCP/IP

Windows Products /Services: DNS,DHCP,WINS.ISA,IIS, Winproxy2.0

Network Management Tools: CiscoWorks, HP Openview, Solar Winds, Wireshark, Netmri

Other Products: M.S Office, M.S Visio,F5 Load Balancer, Infoblox

PROFESSIONAL EXPERIENCE

Confidential, Dallas, TX

Network Engineer

Responsibilities:

• Responsible for configuring firewall rules in between DMZ’s, from external vendors to the systems in DMZ’s for TDQ (Test, Development & Quality Analysis) as well as production Environments.
• Responsible for building and maintaining Private Frame Relay Circuits between Lowes and different banks to ensure secure transfer of the credit card and gift card data.
• Responsible for building and maintaining site to site VPN tunnels with other business partners based on the business requirements.
• Responsible for maintaining DMVPN tunnels from Hong Kong and Mexico to two of the Data Centers in US.
• Created dynamic access policies on the ASA’s for the offshore vendors to be able to VPN in and access the resources they needed for their testing purposes.
• Upgraded the code on multiple ASA’s from 8.2 to 8.4 which required a very great deal of configuration changes especially due to the change of syntax for building NAT’s on 8.4.
• Planning, designing and implementation of moving multiple DMZ’s on FWSM’s to ASA’s by creating Multi-Context Environments on the ASA.
• Installing and configuring FWSM and ACE modules on Cisco 6509 distribution switches.
• Planning and designing to in corporate McAfee’s IDS/IPS devices into Lowes network at optimized network locations.
• Configured SNMP on all the network devices and added them to Solarwinds for monitoring.
• Configured Routing protocols such as OSPF, BGP static routing and policy based routing.
• Configured HSRP and VLAN trunking 802.1Q, VLAN Routing on Confidential 7k, 5k and Catalyst 6500 switches.
• Worked closely with people from different teams on the documentation of layer3 to layer 1 network topology using MS VISIO and other tools.
• Assisted in planning, designing and implementation of NAC for network access control throughout the Lowes network.
• Assisted in migration process of moving Proxy services from Websense to Bluecoat at multiple Lowes corporate locations including Hongkong.
• Participated in On-call rotation along with just one other person throughout the period of work to provide level 3 support for the OCC on issues related to Firewalls.

Confidential, Reston, VA

Network Engineer

Responsibilities:

• Planning, designing and implementing high availability solutions with Netscreen & SRX Firewalls (500 & 650 series).
• Ticketing system (Hp Service Desk) and keeping the customer up-to-date on problem resolution.
• Planned, coordinated, implemented and supported the 802.11x, VPN over wireless, security, LAN/WAN hardware, software and Internet/Intranet/Extranet integration network connectivity, diagnosed network failures and resolved any problems.
• Installing & Configuring Checkpoint NG AI (R-65) in a standalone environment.
• Configuring the VLAN and enabling IP routing in order to allow restricted connections from the enterprise network for some resources.
• Configuring the Cisco 3650 Layer 3 switches & HSRP for redundancy.
• Troubleshooting of complex LAN/WAN infrastructure dat include routing protocols EIGRP, OSPF & BGP.
• Configured Intrusion detection, logging and reporting of all suspicious activity.
• Configuring the Cisco ASA 5510 with inside, outside & DMZ interfaces.
• Installing and Configuring F5 load balancer in failover mode.
• Study the single point failures and design the WAN structure in such a way dat there are no failures in the Network in case of any device or link failure.
• Designing and configuring LAN in Cisco 3 tier architecture (Core, Distribution and Access)
• Configuring 2960 switches as the distribution and access switches, the access level switches will be extended from distribution layer.
• Installed and supported UNIX servers at 20+ departments
• Configuring a VPN server on Cisco ASA for the ODC users to work remotely.
• Utilized Sniffer, Observer & Solarwinds Bandwidth for Network Monitoring.

Confidential

Network Engineer

Responsibilities:

• Led major initiatives, develop roadmaps and standards, and oversee all aspects of the Sicher corporate, mission critical, global international web hosting network covering over 60 countries including over 100 routers, 200 switches, 190 VLANs, 16 pairs of Netscreen (5200,5400), ASA Firewalls Switching Modules (FWSM) and 4 Cisco Content Switching Modules using high-end Cisco Catalyst 6500 switches.
• Performed migration from Cisco PIX 535 to Netscreen 5000 Series as a solution to converged, multifunction security and VPN services within a single platform.
• Deployed and implemented corporate infrastructure using protocols OSPF & BGP.
• Creating dedicated VLANs for Voice and Data with QOS for prioritizing the VOICE over the DATA.
• Installing and configuring FWSM & Content Service Modules (CSM) in Cisco 6509 switches
• Installing and configuring Cisco Security Manager in the server and adding firewall modules to the manager.
• Operational support for worldwide production network, including MPLS & frame-relay.
• Analyze and troubleshoot various networks using monitoring tools and sniffers.
• Verifying and configuring rules in firewalls and maintaining Corporate Firewalls & Analysis of firewall logs.
• Taking servers out of rotation from the load balancer by removing the services and content rules from the load balancer configuration.
• Experienced with PPP and TCP/IP internals and debugging techniques
• Configured VTP domain, trunk links, ether channels and remote VLANs on Cisco and other venders’ switches.
• Troubleshooting the network for the network connectivity issues and network performance issues.
• Documentation of layer3 to layer 1 network topology using MS VISIO and other tools.
• Merged recently acquired companies to existing network. Provided Tier 2 and Tier 3 hands on support for NOC utilizing tools such as CiscoWorks, Concord Health and HP Openview.