SUMMARY:

• CCNA CCNP CERTIFIED network professional with 7+ years of experience in network design, implementation, and support.
• Worked on network topologies and configurations, TCP/IP, UDP, Frame Relay, ATM, bridges, routers, hubs and switches.
• Routing, switching, firewall technologies, system design, implementation and troubleshooting of complex network systems.
• Experience working with Nexus 7K, 5K and 2K. Good Experience on ITIL framework
• Configured Cisco Catalyst 6500, 4500, 3850, 3750, 2960 switches and Cisco 3600, 7200& ASR 1K & 9k Routers for an enterprise network.
• Worked on Juniper Net Screen Firewalls like, NS50, SSG 550M, SSG520M, ISG 1000, and ISG 200.
• Implementation of Juniper Firewall, SSG Series, Net screen Series ISG 1000, SRX Series.
• In - depth knowledge and experience in WAN technologies including OC3, E3/T3, E1/T1, Point to Point, MPLS and Frame Relay
• Worked on latest cisco switches like Nexus 9000, 7018, 5548, 5020 and 5010, implemented advanced features like VDC, VPC, OTV and configured top of the row Fabric Extenders 2248 and 2232.
• Experience in implementing, maintaining, and troubleshooting L2 switching tasks: VLANs, VTP, VLAN Trunking (ISL/802.1Q), STP, RSTP, PVST, PVST+, CST, CEF and DCEF.
• Experience in T1/E1/T3 technologies and different LAN & WAN technologies.
• Managed F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs
• Planned and worked on design with Network team to re-architect F5 load-balancers to load-balance traffic anywhere in the company network.
• Troubleshooting with layer 2 and layer 3 devices.
• Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.
• Well understanding of Cisco UCS and M-Series Modular servers to enable centralized management of highly scalable system and to speed-up IT operations.
• Worked extensively in Configuring, Monitoring and Troubleshooting Checkpoint security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls per design.
• Dealt with monitoring tools like Xymon,cacti and solar winds.
• Experience in Cisco: Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay & MPLS), Routing protocol configurations (RIP, EIGRP, OSPF, and BGP)
• Proficiency in configuration of VLAN setup on various CISCO Routers and Switches.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.
• Extensive hand on experience with complex routed LAN networks, CISCO Routers and Switches.
• In-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.
• Experience through Hand-on Experience with configuring T1.5, Gigabit Ethernet, Channelized T3 and full T3, OCX, ATM, Frame-Relay and VOIP (Voice-Over Internet Protocol)
• Experienced working on network monitoring and analysis tools like, SOLAR WINDS, CISCO works and RIVER BED and Wireshark.
• Extensive experience in configuring and troubleshooting of protocols RIP v1/v2, EIGRP, OSPF, BGP and MPLS.
• Well experienced in configuring HSRP, GLBP, ICMP, PPP, PAP, CHAP and SNMP.
• Experience in installing and configuring DNS, DHCP server.

TECHNICAL SKILLS:

Routers: Cisco 17XX, 18XX, 26XX, 28XX, 37XX, 38XX, 39XX &72XXseries& ASR 1K & 9K Series

Switches: Cisco 3550, 3750, 45XX, 65XX series, Nexus 7K, 5K, 2K

Load Balancer: Cisco CSS, F5 Networks

WAN Optimization: Cisco WAAS, PPP Multilink

Routing: OSPF, EIGRP, BGP, RIP-2, PBR, Route Filtering, Redistribution,Summarization, Static Routing.

Switching: VLAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing &Multi-Layer Switching, Multicast operations, Layer 3 Switches, Ether channels, Transparent Bridging

LAN: Ethernet, Fast Ethernet, Gigabit Ethernet, FDDI, CDDI, TokenRing, ATM LAN Emulation

WAN: Leased lines 64k - 155Mb (PPP / HDLC), channelized links (E1/T1/E3/T3), Fiber Optic Circuits, Frame Relay, ISDN, and Load Balancing.

Various Features & Services: IOS and Features, HSRP, GLBP, IRDP, NAT, SNMP, SYSLOG,NTP, DHCP, CDP, DNS, TFTP and FTP Management.

IP Telephony: IP Telephony utilizing Cisco routers, FXO/FXS/E&M/T1/ISDN/PRI, Call manager (publisher & subscriber)

AAA Architecture: TACACS+, RADIUS, Cisco ACS.

Security / Firewalls: Cisco ASA Firewalls 55XX, IPSEC & SSL VPNs, IPS/IDS, DMZSetup, CBAC, Cisco NAC, ACL, IOS Firewall features, IOS Setup & Security FeaturesJuniper EX 2200, EX 4200, EX 4500, MX-480, M Series, SRX210

PROFESSIONAL EXPERIENCE

Confidential, Wilmington, DE

Sr. Network Engineer

Responsibilities:

• Configured RIP, PPP, BGP and OSPF routing.
• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
• F5 Big-IP load balancer configuration, layer 7 load balancing using I-Rules (TCL)
• Windows Server Administration (Windows 2000, 2003 & 2008).
• Identify, design and implement flexible, responsive, and secure technology services
• Experience with Firewall Administration, Rule Analysis, Rule Modification
• Implemented Positive Enforcement Model with the help of Palo Alto Networks.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.
• Creating and provisioning Juniper SRX firewall policies.
• Created standard access lists to allow SNMP, NTP and logging servers.
• Documented new VPN enrollments in a database and create standard procedures for further improvement.
• Troubleshooting with layer 2 and layer 3 devices
• Troubleshoot traffic passing managed firewalls via logs and packet captures
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.
• Configure VRRP & GLBP and VLAN Trucking 802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.
• Provided proactive threat defense with ASA that stops attacks before they spread through the network.
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Co-ordinated with the Data Network and Security team and came up with possible solutions.
• Work on Physical site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book.
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network
• Dealt with monitoring tools like Xymon,cacti and solar winds.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO
• Estimated Project costs and created documentation for project funding approvals.
• Monitoring and troubleshooting network issues between client site and 85 remote sites with legacy switches and routers
• Performed and presented network analysis as a part of network migration. Involved in knowledge transfer to vendors and provided them network support as required
• Good Experience on ITIL framework
• Worked as a single point of contact for the whole migration
• Configuration and maintenance of EIGRP and BGP network on router 7200 and 6500 MLS.
• Configuration and maintenance of 3750 stack and 6500 VSS for improved efficiency of the data plane.
• Configuration and management of NEXUS network in the existing network infrastructure.
• Created LAB setup with 7k and 5K NEXUS switches for application testing.

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, Palo Alto, Cisco Nexus7K/5K,2248/3560/5020/6509, ASA, Checkpoint, LAN, OSPF, BGP, RIP, EIGRP

Confidential, Washington, DC

Network Engineer

Responsibilities:

• Designed and implemented Cisco VoIP infrastructure for a large enterprise and multi-unit office environment. Met aggressive schedule to ensure a Multi-office reconfiguration project which was successfully delivered
• Successful in Trouble shooting Routers and Switches.
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support
• Supporting EIGRP and BGP based PwC network by resolving level 2 &3 problems of internal teams & external customers of all locations.
• Upgrade Cisco Routers, Switches and Firewall (PIX) IOS using TFTP
• Updated the HP open view map to reflect and changes made to any existing node/object.
• Handled SRST and implemented and configured the Gateways, Voice Gateways.
• Configuring HSRP between the 3845 router pairs for Gateway redundancy for the client desktops.
• Configuring STP for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to the switches.
• Ensure Network, system and data availability and integrity through preventive maintenance and upgrade.
• Involved in L2/L3 Switching Technology Administration including creating and managing VLANs, Port security, Trucking, STP, Inter-Vlan routing, LAN security.
• Worked on the security levels with RADIUS, TACACS+.
• Completed service requests (i.e. - IP readdressing, bandwidth upgrades, IOS/platform upgrades, etc.)
• Knowledge on ITIL framework
• Identify, design and implement flexible, responsive, and secure technology services
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Configured switches with port security and 802.1x for enhancing customers security.
• Monitored network for optimum traffic distribution and load balancing using Solar winds.
• Validate existing infrastructure and recommend new network designs.
• Created scripts to monitor CPU/Memory on various low end routers in the network.
• Installed and maintained local printer as well as network printers.
• Handled installation of Windows NT Server and Windows NT Workstations.
• Handled Tech Support as it relates to LAN & WAN systems

Environment: Net Flow, TACACS, EIGRP, RIP, OSPF, BGP, VPN, MPLS, CSM, SUP720, Ether Channels, Cisco 7200/3845/3600/2800 routers, Fluke and Sniffer, Cisco 6509/ 3750/3550/3500/2950 switches, Checkpoint firewalls (SPLAT).

Confidential, Mclean, VA

Network Engineer

Responsibilities:

• Responsible for Internal and external accounts and, managing LAN/WAN and checking for Security Settings of the networking devices (Cisco Router, switches) co-coordinating with the system/Network administrator during any major changes and implementation
• Worked with complex routed IP networks, routers, layer 2/3 switches, firewalls, LAN/WAN networking hardware and protocols.
• Comprehensive elementary configurations on the F5 Big-IP LTMs load balancer on prevailing network to divide traffic on web-servers.
• Worked on Cisco 2950,2960, 4507, 6509 series switches for LAN requirements, that includes managing VLANs, Inter-VLAN Routing, VTP, STP, RSTP, PVST+, Port-Securities and troubleshooting LAN issues.
• Responsible for Level 3 support Firewall Engineer (Cisco ASA).
• Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed.
• Troubleshoot TCP/IP, and troubleshoot connectivity issues in multi-protocol Ethernet.
• Troubleshooting the issues and outages on Trunks and Router interfaces comprehensively.
• Provided technical assistance for LAN/WAN management & troubleshooting.
• Developed deployment solutions for network technologies, including Optical, VoIP, VPN, switching and routing.
• Experience configuring VPC, Virtual Device Context in Nexus 7010
• Configuring STP for loop deterrence and VTP for Inter-VLAN Routing.
• Installing and configuring Routers, Switches and CSU/DSU's to support WAN links.
• Product analysis and support for Access-layer switches such as Cisco 4510, 4948, 4507, distribution layer switches such as 6513, 6509, 6504 and a routed core.
• Setting VLANS and configuring trunk on Fast-Ethernet channel between switches.
• Installed and maintained CISCO 3600, 2600, 2900 and provided Gateway Redundancy by HSRP, VRRP.
• Expanding the network and providing proper routing such as OSPF, EIGRP, static route and default route.
• Used Network Troubleshooting Tools such as Ping, Telnet and Trace route to verify network diagrams proposed network changes and IP services.
• Troubleshooting issues and outages on Trunks and Router interfaces extensively.

Environment: Cisco Routers 7600, 7200, 3800, 3700, 2800, 2500; Cisco Catalyst switches: 6500, 4500, 3500, 3750, 3850, 2900; Cisco ASA 5550, 5520; VTP, VLAN and 802.1Q trunking; Routing Protocols OSPF, EIGRP, Static Route; Sniffer tools: Wire shark, MS Visio

Confidential

Network Engineer

Responsibilities:

• Responsible with analysis and diagnosis of highly complex networking problems.
• Hands on Experience with simulated networks in test labs to resolve highly complex problems and compatibility issues.
• Supports with technology design conversations/collaboration/workshops
• Delivering subscription optimization business to maximize customer value.
• Works on standard project documentation including detailed test plan for highly complex networks.
• Provide Support and Generates network configurations from Low Level for highly complex networks.
• Plans and executes highly complex Network Upgrade and Network Migration activity.
• Assists customer (Comcast) with deployment and strategy of highly complex technology solutions
• Troubleshoots and resolves highly complex customer network problems across a broad range of technologies.
• Acts as a focal point for highly complex network problem resolution.
• Hands on Experience with the ATP Testing with IOS-XR.
• Working with Daily Basis Reporting (Network Profiler).
• Interacted with clients and analyzed operational requirements.
• Hands on experience with the VPN.
• Supports Customer with day to day Issues with the Protocols.

Environment: CRS, ASR9K, NCS6K, Network Profiler, CEC, Cisco Jabber, Outlook, LAN, VPN, SecureCRT, NOS specialization, Case Kwery Tool, IP Control tool, CRAN Provisioning tool, National Engineering Tool, BMC Remedy, Skype etc.

Confidential

Network Support Engineer

Responsibilities:

• Actively participated and completed many projects based on MPLS VPN, Internet Solutions for corporate customers Backbone.
• Actively participated Implementation and customization of customer network.
• Hands on experience working on Cisco 7600, 12K, ASR routers & Juniper MX series and Juniper BRAS.
• Designing, Provisioning and Installation of the Customer Sites in Oracle IPSA for MPLS Backbone.
• Configuration and troubleshooting of many link types i.e. SONET Controllers for sub E1/T1, E3/T3 and • POS controllers for STM1 links.
• Implementation and testing of ISDN BRI/PRI circuits.
• Migrated Vlans from ASA (perimeter firewalls) to FWSM's for better security management
• Responsible to troubleshoot the connectivity between CPE router and the COLT's edge router (SAR)
• Worked closely with RIR (Regional Internet Registry) to procure PI (Provider Independent) and PA (Provider
• Responsible for troubleshooting complex networking issues in service provider MPLS & internet
• Aggregately) IP addresses and AS numbers for COLT and customers.
• Set up DNS Reverse Delegation according to RIPE rules in RIPE Database.

Environment: MPLS VPN, Cisco 7600, 12K, ASR routers & Juniper, MX series, Juniper BRAS, Oracle IPSA, SONET Controllers, Sub E1/T1, E3/T3, STM1, ISDN BRI/PRI circuits, CPE router, COLT's edge router, RIR, IP addresses, RIPE.