SUMMARY

• Accomplished network and security engineering professional with over seven years of real time experience in designing, deploying, migrating and supporting critical multi - site redundant network environments.
• Extensive hands-on experience with complex routed LAN and WAN networks, Cisco routers, switches, ASA and PIX firewall deployment.
• Extensive knowledge of deploying & troubleshooting L2/L3 TCP/IP, Multilayer Switching, IPSec, UDP, WLAN, MPLS, Multicasting, Ethernet, IP Routing Protocols RIP, OSPF, EIGRP & BGP Cisco routers, switches, ASA and PIX firewall deployment.
• Excellent customer management/resolution, problem solving and debugging skills with good verbal/written communications and presentation skills.
• Worked on cisco 3900, 2900, 2800, 800, 1700 series routers and 1000 series ASR's.
• Worked on cisco 3500, 3700, 2900, 6500, 4500, 3500X series, POE and non-POE switches

TECHNICAL SKILLS

LAN Technologies: VLAN, VTP, vPC, Inter-VLAN routing, STP, RSTP, PVST

WAN Technologies: Frame Relay, ISDN, PPP, ATM, MPLS, exposure to DS1, DS3, OC3, OC12, OC48, T1 /T3 & E1/E3

WLAN Technologies: Autonomous AP’s, Lightweight AP’s, WLC, WDS, WLSE, Standards - 802.11a, 802.11b, 802.11G

Network Hardware: Cisco and other vendor equipment Cisco routers (10008, 7200, 3800, 3600, 2800, 2600, 2500, 1800 series), & Cisco Catalyst switches (6500, 4900, 3750, 3500, 2900, series), Cisco Nexus series ; PIX Firewall 506/515/525/535 , ASA Firewall 5520/5550, CatOS, Cisco IOS 11.x, 12.x, PIX OS 6.x, 7.x; Load Balancers (Cisco), Junipers M320, T640,CHECKPOINT firewall

Network Security: NAT/PAT, Ingress & Egress Firewall Design, VPN Configuration(L2 and L3), Internet Content Filtering, Load Balancing (F5 and Cisco ACE), IDS/IPS, URL Filtering

Routing Protocols: RIP, IGRP, EIGRP, OSPF, AND BGP.

Infrastructure Services: DHCP, DNS, SMTP, FTP, TFTP, IIS

IP Telephony: SIP, H.323, RTP, voice gateways, CCM

Documentation: MS office

Network Monitoring Tools: Wire shark, Cisco works, vitalqip, View Point

PROFESSIONAL EXPERIENCE

Confidential, Albany, NYC

Network Data Center Engineer

Responsibilities:

• As a member of Global Data Center Engineering and Development, which is responsible for designing, Implementing and troubleshooting of all kind of network requirements pertaining to the data center.
• Design and implementation of the LAN IP infrastructure using Layer 2 / Layer 3 switching, VLAN, vPC, HSRP and Trunking / channeling technologies and routing protocol EIGRP and OSPF.
• The data centers consisted of various Cisco platforms Cisco 3550, Cisco 4510, Cisco 6509, Cisco Nexus 5000 & 7010 series switches and LoadBlancer Cisco ACE, CSS and Big IP.
• Writing Engineering work orders as per the changes going in data center and implement the changes as per the schedule.
• Managing and implementing Layer 4 Cisco ACE and CSS load balancer, Migration of CSS to ACE load balancer and creating of SSL and Digital Certificates
• Managing Servers using Hardware Load balancer F5 and Cisco ACE load balancer by managing internal customized tools and creating of SSL and Digital Certificates.
• Providing support for teams in activities such as Load testing, troubleshooting and managing VIP, Sticky Ness.
• Configuring ASA and PIX Firewall to allow site to site VPN access and configuring authentication, encryption, compression, ACL to ensure better security.
• Configured standard and extended ACL’s on the servers to limit its access.
• AAA, PAP and CHAP implementation using Cisco Secure ACS (TACACS+, RADIUS)
• Configuring all the end ports as access ports using port fast and implementing BPDU guard
• Working on Cisco ACS, Cisco works, HP NNMI tools for ticketing system and authentication.

Confidential, Bohemia, NYC

Network Engineer

Responsibilities:

• My accomplishments are Network Administration and Security Infrastructure with Cisco hardware which includes data center and campus network.
• Managing Cisco Routers 3600,7200 series routers And Cisco Switches 3800 and 6500 series
• Project involved was upgrading Cisco nexus 2000 series switches with Cisco nexus 5000 series switches
• Configuring Net Screen Firewall to allow site to site VPN access and configuring authentication, encryption, compression, ACL to ensure better security.
• Applied effectively various routing protocols including EIGRP, OSPF and BGP
• Isolate and diagnose network problems, SSH, HTTP, HTTPS, involving TCP/IP, DHCP, DNS, Group Policy, Deployment & support of Microsoft Active Directory Services
• Involved in implementation of Wireless LAN, Wireless Access Point and Hotspots for our various clients and troubleshooting of Wi-Fi related problems faced.
• Managing Servers using Hardware Load balancers F5 and Cisco ACE.
• Provided support for teams in activities such as Load testing, troubleshooting, and performance tuning.
• Configured standard and extended ACL’s on the servers to limit its access.
• Configured static NAT, dynamic NAT, inside global address overloading, TCP overload distribution, overlapping address translation.
• Provided routing support including configuration and troubleshooting of various routers.
• Implemented IP, RTP, TCP, UDP, IPV4 Packets capture and analysis using WIRESHARK (ethereal).

Confidential, Murrysville, PA

Systems/Network engineer

Responsibilities:

• Assisted in troubleshooting LAN connectivity and hardware issues in the network.
• Studied and analyzed client requirements to provide solutions for network design, configuration, administration, and security.
• Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.
• Monitor performance of network and servers to identify potential problems and bottlenecks.
• Performed RIP & OSPF routing protocol administration.
• Interacted with support services to reduce the downtime on leased lines.
• Troubleshoot problems on day to day basis; provide solutions to fix the problems.
• Monitor the operability and reliability of the network.
• Maintenance and Troubleshooting of connectivity problems using Ping, Trace route.
• Managed IP address space using subnets and variable length subnet masks (VLSM).
• Worked along with the team in ticketing issues; responsibilities included documentation and support other teams.

Confidential

Network Security Engineer

Responsibilities:

• Design and Implement DMZ for FTP, Web and Mail Servers with CISCO PIX 506, PIX515
• Configured NAT and PAT on the Cisco PIX Firewalls for the Internal Systems
• Placed access control list (ACL) on inside and outside interfaces on the PIX Firewall
• Configured Turbo ACL
• Migration of PIX to ASA
• Configured Failover for high availability