SUMMARY:

• Over Seven Plus years of Experience in Designing, Security, Deployment and Operations of complex enterprise and service provider networks. Adept in managing service functions & streamlining the working standards operating system for project rollout, design and development of Telecom solutions.
• Strong hands on experience in installing, troubleshooting, configuring of Cisco ASR1002, 7600, 7200, 3800, 2800, 2600 and 1800 series Routers, Cisco switches Nexus, 6500, 4500, 4900, 3600, 3800 etc.
• Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP - BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS.
• Design and Configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX Firewalls (SRX240, SRX550).
• Juniper Networks specializes in routers, switches, firewalls, data center solutions, cloud services, and VPN solutions.
• Deployed Juniper switches EX4500 and EX4200, routers M7i and M10i and Junos OS
• Hands On experience Cisco IOS/IOS-XR/NX-OS for configuration
• Experience in troubleshooting CISCO Meraki Appliance (MX80, MX60,MX400) and Meraki wireless Access points (MR66,MR18)
• Expert in design, configuration and deployment of F5 Solutions with extensive experience working with APM and ASM technologies.
• Experience configuring and troubleshooting on Citrix NetScalar Load Balancer.
• WAN circuit systems design, configuration, implementation, troubleshooting and support.
• Advanced knowledge in installation and configuration of Juniper Netscreen Firewall.
• Shell Scripting for automating tasks using Python.
• Experience with Firewall Administration, Rule Analysis, Rule Modification.
• Experienced in handling and installing Palo Alto Firewalls with exposure to wild fire feature of Palo Alto Networks.
• Configuring, Installing and troubleshooting on Check Point Devices.
• Experience in spanning tree and intervlan routing.
• Experience working with OTV & FCOE on the nexus between the datacenters. Experience working with OTV & FCOEon the nexus between the datacenters
• Steered efforts for providing presentation and seminar to the customers for in-house projects to introduce about the projects Implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, and Route Maps.
• Creating object, groups, updating access-lists on Check Point Firewall, apply static, hide NAT using smart dashboard.
• Migrated firewall rules from Cisco ASA to Palo Alto and Checkpoint Firewalls
• Experience in working with load balancer for converting CSS to ACE
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP, NTP.
• Provided on call supports 24/7 and worked in NOC (Network operations center).
• Working knowledge with monitoring tools like Solar Winds and network packet capture tools like Wire-shark.
• Good knowledge of using Microsoft VISIO/Office as technical documentation and presentation tools

TECHNICAL SKILLS:

LAN Technologies: VLAN, VTP, Inter-Vlan routing, STP, RSTP, PVST, 802.1x

WAN Technologies: Frame Relay, ISDN, PPP, ATM, MPLS, Leased lines

Network Security: NAT/PAT, VPN, Filtering, IDS/IPS, IPSec, ACL

Routing Protocols: RIP, IGRP, EIGRP, OSPF, BGP, IS-IS, HSRP

Routed Protocols: TCP/IP, IPX/SPX

Infrastructure Services: DHCP, DNS, SMTP, MIBs, Syslog, POP3, FTP, TFTP

Network Management: SNMP, SSH, Telnet, ICMP

IP Telephony: VOIP, FXO/FXS/E&M/T1/ISDN/PRI, Call manager Express

Operating Systems: Windows Vista/XP/NT/2003, MS DOS, UNIX, Linux

Comm. Protocols: Wi-Fi, WiMax, CDMA, 3G

Protocol Analyzers: OPNET, Wireshark.

Languages/ Tools: Python, Linux Red Hat

PROFESSIONAL EXPERIENCE:

Confidential, Sacramento, CA

Sr. Network Engineer

Responsibilities:

• Experienced working with security issues related to Cisco ASR 9K, Checkpoint and Juniper Netscreen firewalls.
• Responsible for design & management of Juniper Netscreen Firewalls, Juniper Switches, Cisco Switches.
• Provided 24x7 Cisco WAN resolution support and Change Management (CM) for an MPLS statewide IP/ATM WAN core backbone consisting of 6 NAPs, 13 POPs, and more than 150 end sites.
• Troubleshoots Different technologies problems involving to Cisco routers, Firewalls, APs, Switches, Fortinet and Meraki.
• Diagnose and troubleshoot wireless, security, switching, and other various network-related issues with CISCO Meraki
• Configured VSS, VPC and HSRP on Cisco Switches.
• Hands on experience with new next generation Palo Alto appliances serving as firewalls and URL and application inspection.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience.
• Configured Cisco Catalyst 6500, 4500, 3850, 3750, 2960 switches and Cisco 3600, 7200& ASR 1K & 9k Routers for an enterprise network.
• Configured network services equipment Riverbed accelerators in compliance with security policy.
• Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.
• Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.
• Configuring IPSEC VPN (Site-Site to Remote Access) on SRX series firewalls.
• Creating and provisioning Juniper SRX firewall policies.
• Troubleshoot, configure, and administer various technologies: BGP, OSPF, DMVPN, vDC, vPC, STP, IPv4, IPv6, unicast/multicast.
• Managed Check Point Firewalls from the command line using Putty sessions. (cpconfig and Sysconfig).
• Troubleshoot traffic passing managed firewalls via logs and packet captures.
• Configuration and Administration of Palo Alto Networks Firewall to manage large scale Firewall deployments.
• Firewall filtering and NAT, Adding and modifying the policies in juniper SRX.
• Advanced knowledge in installation and configuration of Juniper Netscreen Firewall.
• Design, install, configure, troubleshoot and maintain varies load balancers including Citrix NetScaler.
• Configuring STP for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to the switches.
• Configuring SRX devices and troubleshooting them, connecting them with Cisco nexus devices to test connectivity.
• Configuring VPN, clustering and ISP redundancy in Check Point Firewall.
• Migrated Firewall infrastructure from Checkpoint R65 to Netscreen ISG2000.
• Experience with Firewall Administration, Rule Analysis, Rule Modification
• As storage administrator propose Implementation and management of ISCSI and SAS direct attached SAN storages.
• Load balancing Virtual IPs on F5 EBL (LTM and GTM) A10 EFL (SLB and GSLB).
• Supported the design, development and implementation of the Riverbed Steelhead and Interceptor architecture for WAN optimization.
• Asset management, keeping inventory of every device in the data center
• Backup and restore of Check Point and Cisco ASA Firewall policies.

Confidential, Monterey park, CA

Network Security Engineer

Responsibilities:

• Design and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Configuring RIP, OSPF and Static routing on Juniper M and MX series Routers.
• Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
• Mutual redistribution of OSPF and BGP routes using route maps for WAN optimization.
• Hands on in deployment of GRE tunneling, SSL, Site-Site IPSEC VPN and DMVPN.
• Configured VSS, Port Channels, L2 and L3 VLANS, Routing on L3 Cisco Switches.
• Worked on cisco Nexus 5000 series switches for data center.
• Installed and configured CISCO Meraki (MR66, MR18) Wireless Access Points
• Installed and configured CISCO Meraki (MX80, MX60) & appliance via the cloud MX400
• Identified opportunities for implementation of network best practices, particularly F5 load balancer implementations.
• Installed high availability Big IP F5 LTM and GTM load balancers to provide uninterrupted service to customers.
• Provided Load Balancing towards access layer from core layer using F5 Network Load Balancers.
• Experience with working on Palo Alto Next-Generation firewalls security profiles and Cisco ASA VPN.
• Monitoring Traffic and Connections in Check Point and ASA Firewall.
• Deploying, configuring, and administering Checkpoint EndPoint firewalls and hands on experience with network protocols.
• Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools.
• Remote access and site-to-site VPN administration using Cisco ASA/ASR andPaloAlto
• Managed and configured NAT's on the Juniper Netscreen SSG firewalls.
• Failover, OSPF and Any Connect VPN technologies
• Configuration of firewalls 5520 series ASA for business to business connectivity and application of ACL rules for network traffic.
• Storage VDC with FCoE to Nexus 5548UP switch.
• Working with Cisco ASA 5585-X firewalls with Firewall rules,IPSec VPN, NAT, Active-Standby
• Responsible for installation, troubleshooting of Check Point Firewall and LAN/WAN protocols.
• Worked on the migration project of Juniper SSG to Juniper SRX firewalls.
• Configured Juniper MX480s, EX8200s, EX4500s, EX4200s, and SRX5800s from scratch to match design.
• Working on Juniper netscreen ISG1000, Pal Alto Networks, Infoblox Grid Manager.
• Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs.
• Upgrading system images on Nexus 5 and 7 multi-layers switches using kick start and FTP server.
• Manage Corporate Checkpoint VPN utilizing SSLVPN and Edge technologies.
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall.
• Migrate studies from the Cisco ACE Load Balancer appliance to the Citrix NetScaler Load Balancer appliance.
• Daily monitoring of network traffic using sniffers (Wireshark) and access logs to troubleshoot and identify network issues.
• Creating and maintaining architectures, technical standards and network diagrams for LAN/WAN/Data center networks.
• Managing Data Center and assisting other engineers with troubleshooting from network device, storage, and blade servers.

Confidential

Network Engineer

Responsibilities:

• WAN circuit systems design, configuration, implementation, troubleshooting and support.
• Network consists of Heavy Cisco equipment such as Cisco 2500, 2600, 3640, 3945, 7200 series Routers, Cisco 6500, 4500, 3560, 2950, 2924 Switches, Cisco Pix firewall 500 series and Wireless Access points Cisco 1230.
• Troubleshooting and installing of CRS, ISR, GSR, ASR9000 and Nexus devices.
• Involved in Troubleshooting of DHCP and other IP conflict problems.
• Performed Switching Technology Administration including VLANs, inter-VLAN Routing, Trunking, STP, RSTP and Port Aggregation & Link Negotiation.
• Worked as a part of data center deployment where we converted from Cisco 6500 to Nexus.
• Developed a Network Device Tracking Software for equipment accountability.
• Maintained Corporate Firewalls & Analysis of firewall logs using various tools. Configured and troubleshooting of HSRP on Cisco routers.
• Develop IT roadmaps for security
• Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools.
• Provided technical assistance for implementing IP, MPLS, Multicast, layer 2 and layer 3 MPLS VPNs, on Alcatel, Cisco and Juniper routers/switches, Cisco ASA, VSAT, MPLS), F5 BIG-IP LTM VIP configuration.
• Worked with Juno OS and Juniper M&T series switches.
• Configuration, Installation and troubleshooting of Juniper Netscreen.
• Experienced with Juniper: EX-2200, EX-4200, EX-4500, MX-480 and M Series, SRX210 and SRX240.
• Worked on WAN Accelerator "River Bed "for optimization of the bandwidth and file sharing on the WAN Circuit.
• Juniper Network and Security Manager (NSM) to synchronize, maintain and support security gateways.
• Configuring F5 Load Balancers: Adding virtual IPs, nodes, pools and health monitoring.
• Upgraded load balancers from Radware to F5 BigIP v9 which improved functionality and scalability in the enterprise. Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs.
• Scaling of IGP and BGP in the core.
• Involved in Migration of Cisco firewalls to Juniper SRX firewalls.
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP, NTP.

Confidential

Network Support Engineer

Responsibilities:

• Designed MPLS VPN and QoS for the architecture using Cisco multi-layer switches
• Configuring and implementation of Juniper Firewall, SSG Series, Netscreen Series ISG 1000, SRX Series.
• Implemented and configured Cisco IOS, IOS-XR, CAT-OS and Nexus hardware and software: 1000v to 7000 series.
• Configure Firewall, IPS and QOS by SDM and provide security by Prefix list, Access- List and By Distribution List.
• Designed and configured the commands for QoS and Access Lists for Nexus 7K, 2K and 5K.
• Configuring and troubleshooting issues related to STP, RSTP and VLAN's allocation in Organization for maintaining Layer 2/3 Switching intact.
• Worked on 4500 Catalyst switches for the purpose of LAN requirement and for troubleshooting LAN issues.
• Maintaining Checkpoint security policies including NAT, VPN and Secure Remote access
• Configuring IPSEC VPN (Site-Site to Remote Access) on SRX series firewalls.
• Adding Websites to the URL filtering blocklist in Bluecoat Proxies and upgrading firmware on the bluecoat proxies.
• Utilized VMware ESX configured and installed it properly to implement Cisco, Microsoft Server 2008, Linux, MySQL builds, designs, throughout the entire Network Infrastructure.
• Managing enterprise BGP setup by configuring and troubleshooting BGP related issues. My responsibility was also to add new BGP peers for remote branch offices and business partners.
• Create and troubleshoot VDC, allocate resources, interfaces, NTP
• Maintenance and Troubleshooting of LAN connectivity problems using Ping, Trace route.
• Experience on a mesh 6500 and 5500 series switches to support the core trading system.
• Managing F-5 LTM, GTM, APM, ASM Administration, creating virtual servers, mapping pools, iRules and Profiles. SSL traffic offloading, also managed PCI Security Audit with F5 ASM.
• Implemented cable multi-service operator (MSO) to capture traditional Telco subscribers with IP telephony and provide relevant QOS.

Confidential

Network Admin

Responsibilities:

• Experienced in Configuration of Cisco Routers 2500, 3000, 4000 using RIP, OSPF, EIGRP and Cisco Switches 2960 and 3560
• Hands on Experience on Installation and configuration of workstations for IP based LAN’s.
• Experience in Installation and configuration of DHCP Client/Server.
• Involved in Configuration and management of networks using L3 protocols like RIPv2, OSPF and EIGRP.
• Hands on Experience in Configuring L2 and L3 security features on devices.
• Involved in configuring Juniper SSG-140, Cisco pix firewall and Check point firewall.
• Using Smart Update, user management and authentication in Check Point Firewall.
• Responsible for initial MPLS configurations for customers such as various interface configuration and routing protocols such as EIGRP, OSPF, & BGP, and COS
• Experience in Configuring VLANs, Private VLANs, VTP and trunking on switches.
• Broad Hands on Experience in Inter-Vlan routing, redistribution, access-lists and dynamic NAT
• Working on adapter modules to process the Syslog content appropriately to the end use in NMS.
• Efficient in cabling as per co-location contracts with loop-back testing, including all DS1, DS3, T1, T3,CAT 6 and CAT 5 connections as per defined cabling procedures
• Involved in SNMP Network management. Worked on various scanning and sniffing tools like Ethereal.
• Log messages using Syslog server and analyze the issues related to high CPU utilization and parameters that can degrade performance of the network
• Interfacing with C level executives to understand technology vision, gather requirements and develop technical specifications to align with business roadmaps.
• Write network critical documentation: backup procedures, server specs, installation details, etc.