PROFESSIONAL SUMMARY

• Cisco Certified Network Engineer with over 9 + years of experience in the industry, which includes expertise in the areas of Routing and Switching.
• Expert Level Knowledge about TCP/IP and OSI models.
• In - depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.
• Expert level knowledge of routing protocols such as RIP, EIGRP, OSPF, BGP.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.
• Experience in configuring first hop redundant protocol HSRP and redistribution between routing protocols troubleshooting them.
• Implementation of HSRP, VRRP and GLBP for Default Gateway Redundancy.
• Hands-on configuration and experience in setting up Cisco routers to perform functions at the Access, Distribution, and Core layers.
• Checkpoint Level3 operations support with hardware operations - fixed all problems & RMA's, taking any escalations that dealt with the equipment and its connection: interfaces, VLAN's, routes, etc.
• Experience in configuring ASA, PIX, AAA, L2 and L3 Security.
• Troubleshoot and configure Site-to-Site VPN and Remote access VPN.
• In-depth knowledge and hands-on experience on IP Addressing, Sub netting, VLSM and ARP, reverse & proxy ARP, Ping Concepts.
• Maintain Zone base firewall using CSM.
• Implement certificate in firewall and router.
• Expert knowledge of cable connectors and replacement as RJ-11, RJ-45, V.35, RS-449.
• Experience in change management.
• Excellent communication skills to interact with team members.

TECHNICAL SKILLS

Protocols: RIP, RIP V2, EIGRP, OSPF, HSRP, VRRP, GLBP, LACP, PAGP, LDP/TDP, WLAN, 802.11/802.11e, WEP, POP3, LADP, TCP/IP (HTTP, Telnet, SNMP, SMTP, FTP, TFTP, DNS, ARP, RARP)

LAN technologies: VLAN, Trunking, VTP, STP, RSTP, MST, PVST+, PVLAN, SPAN, RSPAN, Port Mirroring, Ether channel (PAGP & LACP, load balancing), Optimizing STP (Port fast, Uplink fast, Backbone fast, Root Guard, BPDU Guard), 802.1Q-in-Q Tunneling, Wi-Fi (802.11a/b/g/n)

Firewalls: Cisco PIX 505, 515E, 525, Cisco ASA 5510, 5520, 5585, IDS/IPS (4200), Checkpoint 1100.

Security & Authentication: AAA, ASA, L2 and L3 Security, RADIUS, TACACS+, Route map, Access list, Digital Certificate, IPSec VPN, SSL VPN, Remote VPN, MPLS VPN, GRE, NAT/PAT

Monitoring Tools: Wire shark, Solar winds, HP-openview, KiwiCatTools, PRTGCSM ASDM, SNMP, Netflow, 3Com Network Analyzer, Network Monitor.

Operating Systems: Windows XP/Vista, Windows 2007, Windows server (2003, 2008), Microsoft office suite, Microsoft Visio, VMware ESX 4.1, Linux.

Servers: Domain Servers, DNS Servers, WINS Servers, Mail Servers, Proxy servers, Print Servers, Application Servers, FTP Servers

Remote Access: IP Sec VPN, VPN, Remote/Secure client, Site to site VPN, GRE tunneling

Other Tools: Putty, Secure CRT, Anyconnect, Remedy, HP service desk system

PROFESSIONAL EXPERIENCE

Confidential, San Antonio, TX

Sr. Network Engineer

Responsibilities:

• Responsible for designing and implementation of customer’s network and Security infrastructure.
• Involved in complete LAN, WAN, Extranet redesign (including IP address planning, designing, installation, pre configuration of network equipment, testing, and maintenance) in both Campus and Branch networks
• Experience working with MPLS Layer 3 VPN on ASR 9006 with IOS-XR
• Experience with converting Cisco 6500 IOS to Cisco Nexus NX-OS in the data center environment.
• Experience working with Nexus 7010, 5020, 2148, 2248 devices
• Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000
• Experience configuring VPC, VDC and ISSU Software upgrades on Cisco Nexus 7010
• Experience in Configuring, upgrading and verifying the NX-OS operation system
• Experience with configuring OTV between the data centers as a layer 2 extension.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.
• Experience working with BGP attributes such as Weight, Local-Preference, MED and AS-PATH to influence inbound and out bound traffic
• Involved in Switching Technology Administration including creating and managing VLANs, Port security, Trunking, STP, InterVlan routing and LAN security.
• Use and maintain routing protocols EIGRP, OSPF and BGP on the Routers in the network & also worked on BGP Route Reflectors, Confederations
• Deployed a large-scale HSRP solution to improve the uptime of collocation customers, in the event a core router became unreachable.
• Configured and designed LAN networks with Access layer switches such as Cisco 4510, 4948, 4507 switches.
• Experience with convert PIX rules over to the Cisco ASA solution.
• Responsible for Cisco ASA firewall administration across our global networks
• Support customer with the configuration and maintenance of PIX and ASA firewall systems
• Design, and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Configuring IPSEC VPN on SRX series firewalls
• Applies test expertise and experience to craft & execute test plans, conduct negative/exception tests, verification, performance and regressiontestingof RIA, HTML, AJAX, Mobile Web client, integration services, enablers & platforms
• Configuring Virtual Chassis for Juniper switches EX-4200,Firewalls SRX-210
• Implemented HSRP on the Cisco 2948G Layer 3 switches and EIGRP, OSPF on 2 Cisco 2610 routers, the Layer 3 switch, 3 Cisco 350XL Switches, Cisco 3524XL switches for load balancing and fail over.
• Configuring ASA Firewall and accept/reject rules for network traffic.
• Extensive knowledge and troubleshooting in data communication protocols and standards including TCP/IP, UDP, IEEE 802.3, Token Ring, Cable Modem, PPPOE, ADSL, Multilayer Switching, DoD standards.
• Provided Load Balancing towards access layer from core layer using F5 Network Load Balancers.
• Upgraded load balancers from Radware to F5 BigIP v9 which improved functionality and scalability in the enterprise.
• Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs
• Other responsibilities included documentation and supporting other teams.

Confidential, Quincy, MA

Network Support Engineer

Responsibilities:

• Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches
• Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.
• Involved in designing L2VPN services and VPN-IPSEC authentication & encryption system.
• Tuned BGP internal and external peers with manipulation of attributes such as metric, origin and local Preference.
• Cisco Secure Access Control Server (ACS) for Windows to authenticate users that connects to a VPN 3000 Concentrator.
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Router/ Microsoft VPN Server in order to access certain limited network resources from customer locations
• Involved in the redistribution into OSPF on the core ASA firewall.
• Experience on HSRP for load balancing.
• Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.
• Designing and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.
• Installed and configured four PIX 525 and two ASA 5505 in customer locations. In addition to that, two PIX firewall configured for the Guest access
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP
• Scripting experience with Pearl.
• Involved in Configuring and implementing of Composite Network models consists of Cisco7600, 7200, 3800 series and ASR 9k, GSR 12K routers and Cisco 2950, 3500, 5000, 6500 Series switches.
• Implemented various OSPF scenarios on networks consisting of 7600 routers.
• Configured policy based routing for BGP for complex network systems.
• Configured Multiprotocol Label Switching (MPLS) VPN with Routing Information Protocol (RIP) on the customer’s Site.

Confidential, SOUTH PORTLAD, ME

Sr. Network Consultant

Responsibilities:

• Hand on experience the configuration and implementation of various Cisco Routers and L2 Switches.
• Extensive experience in configuring and implementing EIGRP, OSPF and BGP.
• Supported core network consisting of Cisco 7200 series routers running multi area OSPF
• Configuration of EIGRP and OSPF as interior gateway protocol with route filtering and route redistribution.
• Implemented stub/Totally stub areas and various OSPF features like route-summarization and SPF throttling.
• Responsible for service request tickets generated by the helpdesk such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support
• Supporting EIGRP and BGP for problems of L2/L3 in internal teams & external customers.
• Providing daily network support for national wide area network consisting of MPLS, VPN and point-to point site.
• Upgrading Used DHCP to automatically assign reusable IP addresses to DHCP clients.
• Configured and installed multi-protocol (IP, IPX) multi-interface Cisco routers.
• Design, WAN link using PPP Multilink and by implementing Cisco WAAS
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.
• Configuring STP for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to the switches.
• Worked on commissioning and decommissioning of the MPLS circuits for various field offices.
• Network Cabling, dressing, labeling and troubleshooting various network drops onsite.

Confidential

NETWORK SUPPORT ENGINEER

ROLES/RESPONSIBILITIES:

• Configured Cisco Routers for RIP, RIPv2, EIGRP, Static and default route.
• Basic networking concepts such as TCP/IP (IP, TCP, UDP, SNMP, DNS, DHCP, FTP, HTTP, HTTPS, ICMP, SMTP, POP3, IMAP, ARP, IPSEC, NAT, Subnetting).
• Configuring and troubleshooting Site-to-Site and Remote site VPN for corporate users & vendors.
• Configured VPN on Cisco firewall.
• Troubleshooting and maintain remote access Any connect VPN profiles.
• Maintaining and updating VPN Gateways for ensuring force of latest Security policy to deny all input requests from all non-compliant devices.
• Adding Policies to the SRX 3600, 240, ISG firewalls and monitoring the logs.
• Interact with the customers and on call support to troubleshoot the issues.
• Configuring and troubleshooting Cisco Netscreen Firewalls using Network Security Manager.
• Upgrading IDP on the NSM and migrating firewalls.
• Aware of network analyzing tools like TCPDump, Wireshark, for monitoring STRM( Security threat Response Manager), NSM (Network Security Manager) for Juniper firewalls
• Implementation, administration: Design / Configuration changes, Defining events/signatures policies and its actions, Logging and Log analysis.
• Involved in Cisco ASA IOS code up gradation from 8.2.4 to 8.4.5Configuring VLANs, STP, VTP and Inter-VLAN routing in LAN environment with L2 Ethernet Switching
• Applied VLAN configuration to differentiate applications with RPVST & HSRP.tion of Cisco 5515, 5540, Series Firewall.
• Configuring VLANs, STP, VTP and Inter-VLAN routing in LAN environment.
• Configuration & maintenance of Cisco 2600 series routers with OSPF protocols.
• Upgrading the network by translating protocol like EIGRP to OSPF.
• Used DHCP to automatically assign reusable IP addresses to DHCP clients
• Checked and configured Cisco 7613 routers at data center.
• Configured Access List (ACL) to provide restricted user access to resources all over the company.
• Code upgrading on ASA from 8.3 to 8.4.5
• Migration from Frame-Relay/ATM network to MPLS-based VPN for customer’s WAN infrastructure
• Troubleshoot latency and throughput issues on MPLS and Dedicated Internet Access circuits.
• Responsible for coordinating with service providers for WAN link outages.