SUMMARY

• Has a total of about 19 years of experience as a Network Engineer, a Cisco Certified Network Professional (CCNP) and Microsoft Certified Systems Engineer with broad - based in-depth hardware and software industrial experience and proven track record of successful Network design and project implementations
• Hands on experience in configuring Cisco routers, switches, ASA Firewalls, Wireless Networks, VoIP Networks, Dell switches, Arista Switches.
• Experienced in using Network Protocols/Services such as RIP, IGRP, EIGRP, OSPF, BGP4, TCP/IP, IPX, SNA, T1, DS0, DS1, DS3, DSL, ADSL, OC3, OC12, OC48, OC192, ISDN and Frame Relay.
• Skilled in making Network secure in configuring VPN Firewall-to-Firewall using IPSec for secure, transparent access to database and application servers and configuration of Checkpoint Firewall, VPN, IPS and Firepower.
• Experienced with network protocols like Frame Relay, ISDN, and T1, ELAN etc.
• Has experience with designing, implementation and managing large networks

TECHNICAL SKILLS

Operating systems: Windows 2000, Windows 7, Windows NT 4.0, Windows NT 3.51, Windows 95 Windows 3.11, Windows 3.1, Ms Dos, Novell 3.12, Microsoft Exchange Server, Cisco IOS, SONET, UNIX, Linux

Hardware: Excellent PC repair, Cisco routers 1600, 1700, 2500, 2600, 2800, 3600, 4500, 7500, 12000, ASA 5505-5580 firewalls, Cisco Catalyst switches 5005, 5505, 2900, 3560, 6500, 8500, 8800, Bridges, hubs, repeaters, Dense Wavelength Division Multiplexing (DWDM), REDBACK router, Cisco Terminal Servers 2511, 2509

Network Protocols: RIP, IGRP, EIGRP, OSPF, BGP4, TCP/IP, IPX, SNA, T1, DS0, DS1

PROFESSIONAL EXPERIENCE

Confidential, Houston, TX

Lead Network Engineer

Responsibilities:

• Implemented Network Security Design integrated with Cisco Intrusion Prevention Systems (IPS), Firepower (SFR) and New Generation ASA firewalls.
• Implemented failover on ASA5510 and ASA 5525X Firewalls for high availability
• Migrate ASA5510 to Palo Alto Firewalls and also ASA 5525X-IPS, and ASA 5525-SFR module to enhance Firepower functionality such as Application Awareness and Control, URL filtering, Security Intelligence, intrusion detection prevention, and connection logging.
• Configured Firepower’s Virtual defence center and integrate with Splunk for optimum security logs and reporting.
• Configured site-to-site VPN between the Corporate Nework and Parent Network (Homedepot).
• Also managed Cisco VPN clients for home user access to internal network and also to parent networks.
• Expanded networks to new floors in our corporate office, and also configured and installed Dell N2048P, 5548P and 6248P for stacking and routing functionality.
• Management and troubleshooting of various Networks like MPLS, P2P, ELAN, and T1 circuits.
• Used network management tools such as Solarwinds Orion, Splunk, Dell manager, and Cisco Virtual Estreamer .
• Managed Cisco Meraki wireless controller, MR24 and MR26 Access Points.

Confidential, Houston, TX

Network Security Engineer

Responsibilities:

• Implementing Network Security Design and Network Management with Intrusion Prevention Systems (IPS), MARS, and ASA firewalls.
• Management and troubleshooting of various Networks like MPLS, New MicroWave and T1 circuit.
• Configured PIX 520, 525, 535, ASA 5505-5580, Checkpoint Firewall and Netscreen firewall.
• Worked on wireless LAN projectsto enhance store voice and data functionality.
• Configured site-to-site VPN between the corporate office and various vendor locations.
• Consolidated networks during mergers between Southern Union, Confidential, Sunoco Energy and host of others.
• Used network management and monitoring tools including Ciscoworks LMS, Nagios and Traverse.
• Implementation of Network Access Control (NAC) Security in our corporate building and all our field sites.

Confidential, Houston, TX

Network /Security Engineer

Responsibilities:

• Designed the architecture of Confidential network infrastructure
• Management and troubleshooting of Frame Relay PVC’s for primary circuit and ISDN for secondary circuit or backup.
• Configured PIX 501, 506, 520, 525, VPN 3000 concentrators, Checkpoint Firewall and Netscreen firewall.
• Worked on wireless Lan projectto enhance store voice and data functionality.
• Configured site-to-site VPN between the corporate office and 36 store locations.
• Configured remote access VPNforinternet usersto corporate office
• Configured and troubleshoot Confidential network including Routers and Switches
• Used network management and monitoring tools including Ciscoworks, Somix, Whats Up Gold Professional.
• Configured Cisco CallManager, Voice Gateway, IP Telephony, andCisco CallManager Express for VOIP.

Confidential, Houston, TX

Network Security Engineer

Responsibilities:

• Working on Cisco security devices like pix 501, 506, 515, 520, 525, Cisco 3000 Concentrators Cisco ASA 5500 etc.
• Configuring Lan-to-Lan VPN between pix-to-pix, pix-to-router, pix-to-concentrators, Asa-to-pix, Pix-to other security devices etc
• Configuring Remote access VPN between users on the internet and pix or concentrator or asa or router.
• Troubleshooting customers Cisco security devices and also configuring access-list to allow inbound and outbound traffic.
• Installing and configuring Cisco pix, Cisco concentrator, Cisco Asa 5500, routers and switches.
• Troubleshooting pix firewall IOS version 6.2, 6.3 and 7.0 security issues to conclusive resolution.
• Day-to-day configuration of VPN using IPSEC, crypto map, crypto IPSEC transform-set, IKE parameters, ISAKMP policy, Tunnel group, VPN group, authentication, encryption, hash, group, and security lifetime.
• Extensive knowledge of all Cisco security device including security policy and security levels.
• Used Cisco management software or applications like pdm, asdm, Ciscoworks common services, VMS, Firewall management center, security monitor, Cisco security agent.
• Extensive knowledge of VPN, access control servers, intrusion prevention, and network mgmt applications.

Confidential, Bridgeton, Missouri

Network Engineer

Responsibilities:

• Configuration and Troubleshooting of Cisco routers such as 7613, 7246,7226 and GSR 12014, 12416 and Cisco Switches like 2924 and Catalyst Switches 6509.
• Provisioning of customers interface and loading configlets on the CBB network, Test &Turn-ups Rebuilding Interfaces, Change Encapsulation, Bandwidth Upgrade, Soft and Hard disconnections of customers.
• Configuration of BGP on CBB network, BGP turn-ups, Protocol change, and balancing traffic between Customers and CBB with other ISPs.
• Configuration of Avici TSR and SSR routers on Confidential &T network.
• Managing and Maintaining both CBB and Broadband Customers on different interfaces, eg. T1, T3, HSSI, ATM, OC3, OC12, OC48, OC192, and Frame Relay and finding resolution to various problems.
• Troubleshooting and configuration of external CSU to DSX of CBB network.
• Troubleshooting Errors in Packet over SONET on OCX Network.
• Configuration of Customers multiple T1 or T3 to load balance to give customers higher usable bandwidth.
• Troubleshooting Dos attacks on customers network and applying access list to outbound interface.
• Relating with customers care and working with Mocars (Remedy) ticket ACL Manager, BMP, WMS, Whiteboard and other applications.
• Troubleshooting and resolving BGP and OSPF routing, WAN connectivity, Performance and some security issues.

Confidential, Houston, TX

Field Customer Support Engineer

Responsibilities:

• Installation and configuration of DOCSIS Cuda 12000 for Cable Communication
• Provided support for Cisco routers and Switches e.g. Cisco 7206 router, 3500 and 5505 switches
• Supported Linux in an open platform and on Cuda chassis
• Configuration of OSPF in a fairly large network environment
• Troubleshoot and configured REDBACK routers to the front end-users.
• Implemented high speed internet connectivity using cable modem technology over gigabit Ethernet
• Installation, configuration, and maintenance of various security products e.g. PIX Firewall
• Created security product deployment and system maintenance
• Interacting with customers to assess and implement security policy for their network

Confidential, Houston, TX

Sr. Network Engineer

Responsibilities:

• Worked with clients to troubleshoot and optimize internal routing, and configuring BGP4 and OSPF to balance traffic.
• Troubleshooting Frame relay and ISDN circuit in a fairly large environment
• Configured Cisco routers including 12008, 7206, Cisco switches such as 8800, 6400 series and Access LAN (DSLAM)
• Provided DSL and ADSL line to clients and configuring PL 200 routers
• Implemented and supported the building of 3 Colos and 2 super-pops
• Configured VPN Firewall-to-Firewall using IPSec from corporate company site to web hosting site for secure, transparent access to database and application servers.

Confidential, Durham, NC

Network Engineer

Responsibilities:

• Provided network support and monitoring of connectivity devices including Cisco products
• Supported Cisco products e.g. Cisco routers 1600, 1700, 2500, 2600, 3600, 4000, 7200, 7500, Cisco Catalyst 5000, 6500, 8500 series, Hubs and Modems.
• Designed customer solutions involving multiple Network Operating Systems and Project management
• Troubleshooting network connectivity problems in a global network environment.
• Extensive utilization of network management tools such as Hp Open view, IT/Operations, Network Node Manager, Sniffer, Cisco works and Ciscoview.
• Generated Remedy ticketing reports for each network outage and providing RFO.
• Provided resolution for major outages using Dial backup, alternate dial backup and reverse dials.
• Escalated problems to circuit providers and also having direct customer contact.
• Configuration of Checkpoint Firewall and VPN
• Support for various network securities including Checkpoint firewall.
• Supported distributed services and sites worldwide.
• Installation and implementation of new sites in global network management centers.
• Installation and configuration of Cisco routers, hubs, cat switches and modems.
• Utilized CTC (Complex to Complex) application Confidential sites and also in the VPN environment.
• Managed packets over SONET uplink with enhanced gigabit Ethernet module that supports standards compliant SONET /SDH interface.