SUMMARY

• 8 years of experience in Networking, including hands - on experience in IP network design providing network support, installation and analysis.
• Expert level knowledge of troubleshooting, implementing, optimizing and testing of static and dynamic routing protocols such as EIGRP, OSPF, BGP ability to interpret and resolve complex route table problems.
• Worked on Cisco 7200, 3800, 3600, 2800, 2600, 1800 series Router andCisco 2900, 3500,4500, 5500, 6500 series switch.
• In-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.
• Hands-on experience with Ether Channel, Spanning Tree, Trunking, ACLs, Syslog.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.
• Hands on experience with Cisco 7200x 6500, 7600, ASR1k, ASR9k, Brocade SX800 andJuniperEX4550 and MX960.
• Hands on experience of Cisco Routers/ switches, Wireless LAN controllers and APs,ACS, ASA firewalls, VPN and Cisco UC 500/300, Windows Server 2008/2012 and VMWare ESXi configuration and support.
• Understanding the JUNOS platform and worked IOS upgrade ofJuniperdevices
• Hands-on configuration and experience in setting up Cisco routers to perform functions Confidential the Access, Distribution, and Core layers.
• Hand on experience on dealing with Network Security Compliance issues and PCI compliance issues
• Hands On experience Cisco IOS/IOS-XR/NX-OS, Juniper JUNOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS
• Strong Knowledge in working with F5 Load Balancers and their Implementation in various Networks.
• In-depth knowledge and hands-on experience on IP Addressing, Sub netting, VLSM and ARP, reverse & proxy ARP, Ping Concepts.
• Experience workingJuniperT-Series, M-Series, MX-Series, J-Series Routers
• Experience withCheckpointFirewall policy provisioning.
• Experience in the setup of Access-Lists, and RIP, EIGRP, and tunnel installations.
• Proficiency in configuration of VLAN setup on variousCiscoRouters and Switches.
• Experienced in trouble-shooting both connectivity issues and hardware problems on Cisco based networks.
• Experience in configuring VDC, VPC and FCOE, upgrading NX-OS for Nexus Family Switches.
• Good knowledge in network hardware and technologies including routers, switches, bridges, hubs, Ethernet, frame relay, wireless, etc.
• Hands on experience and good working knowledge withCheckpointFirewall policy provisioning
• Enhanced level of experience with OSPF, BGP, and TCP/IP.
• Excellent leadership with good written and oral communication.
• Great team player and able to work under pressure 24x7 duty rotation.

TECHNICAL SKILLS

Routers: (1800, 2500, 2600, 2800, 3600, 3800, 7200).

Cisco Switches: (2900, 3500, 4000, 4500, 5000, 6500, Nexus 5k and 7k).

Routing Protocol: (BGP, OSPF, EIGRP, IGRP, RIP), Routed Protocol TCP/IP, Multicasting.

Management tools: SNMP, Syslog, Sniffer, and Wireshark.

LAN Protocol: VLAN, VTP, Inter-vlan routing, ISL, dot1q, STP, RSTP, PVST, HSRP, GLBP, Ethernet, Port security.

WAN Technology: Frame Relay, X.25, E1/T1/DS1/DS3

Fire Firewall: Juniper (Netscreen/JUNOS), Sonicwall, watchguard,Cisco ASA/PIX,Check point, Palo Alto.

Juniper: EX4450 and MX960.

AAA: TACACS+, RADIUS, CiscoACS.

Load Balancer: F5-Big-Ip, LTM, Ax10

Network Management: SNMP v2, Cisco Works, 3Com Network Analyzer, MRTG, SolarWinds, TACACS

Network Security: Knowledge of Firewalls, Checkpoint NG, ASA, IPsec, IPS/IDS, & VPN, Juniper SRX, ACE Module and F5 Load Balancers

Application Protocols: DHCP, DNS, FTP, TFTP, HTTP, FTP SMTP, SSL.

Documentation: Microsoft Office, Visio

PROFESSIONAL EXPERIENCE

Confidential, Quincy, MA

Network Engineer

Responsibilities:

• Network Architect for datacenter consolidation project. Consolidated 16 global datacenters consisting of Cisco 6500, 4500, 2800, ASA 5540, F5 BIG-IP 3600,. Consolidation was in preparation to upgrade datacenters to Nexus 7000, 5000, 2000, and ASR 1000 backbone infrastructure.
• Leaded the team to setup a new Switching Center on a remote location, designed the network. Configured Cisco ISP routers, CP Firewalls and Brocade Switches. Added the devices on an NMS (Orion,NetMRI, Kiwi Syslog Server) for monitoring.
• Provided Load balancing solutions to clients for using F5 Load balancers.
• Implemented redundancy in BigIP F5 loads balancers to provide uninterrupted services to clients.
• Implemented two F5s in an Active/Standby setup on BIGIP 10.2.4.
• Always keeping up with all security policies on the ASM module to meet business PCI requirements.
• Work on different networking concepts and routing protocols like BGP, EIGRP, OSPF and other LAN/WAN technologies.
• Checkpoint Level3 operations support with hardware operations - fixed all problems & RMA’s, taking any escalations that dealt with the equipment and its connection: interfaces,VLAN’s, routes, etc.
• Experience with converting Cisco 6500 IOS to Cisco NexusNX-OSin the data center environment.
• Implementation of secure enclaves withPaloAltoand ASA firewalls
• Remote access and site-to-site VPN administration using Cisco ASA/ASR andPaloAlto
• Configuration and implementation of Juniper andPaloAltofirewalls.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.
• Replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliance
• Implemented Positive Enforcement Model with the help of Palo Alto Networks
• Maintain and configure CiscoACSdevices to support AAA security for both external remote access and internal wireless connectivity
• Concentrators TCP/IP, NAT and Checkpoint ESX/GSX firewall
• Configured and optimization settings of Riverbed.
• Configured Nexus 7010 including NX-OS Virtual Port Channels, Nexus port profiles, Nexus Version 4.2 and 5.0, Nexus VPC peer links
• Creating dedicated VLANs for Voice & Data with QoS for prioritizing VOICE over DATA.
• Deployment, configuration, and management of 802.1x solutions to include Cisco Identity Services Engine (ISE),ACS, and Cisco Prime.
• Maintained and provided support for LAN/WAN infrastructure as needed. This included working on specific hardware such as switches, routers, PIX, ASA firewalls, wireless APs, VPN Concentrators, frame relay, IPsec VPN and other entities.
• Wireless technology including Aruba 6000 controllers with 65 and 70 series APs as well as Cisco Wireless solution (WLSE, WLSM, 1200 series APs), and Bluecoat IDS
• Worked with convertCheckpointVPN rules over to the Cisco ASA solution. Migration with both Checkpointand Cisco ASA VPN experience.
• User admin on the firewalls, adding and deleting users as they come and go.
• Provided proactive threat defense with ASA that stops attacks before they spread through the network.
• Worked on Cisco FWSM/PIX/ASDM, Juniper SRX platforms and Configured firewall filters, routing instances, policy options, on Juniper m320 and T6
• Developed global standards for deployment of blue coat proxy servers to replace the older net cache deployments.
• Followed and implemented a secure Toys R Us network with proper Firewall rules according to the PCI compliance.
• Designed and Implemented Cisco PIX525 and ASA5550 firewall’s interfaces with FTP, DNS, HTTP servers on DMZ with different security levels.
• Enabled to create a Positive Enforcement Model control between two networks that have different trust levels
• Implemented standard configuration template scripts in various network devices for snmp v2, logging, and ntp
• Installed and configured the ACE and CSM for firewall/Server Load balancing for Cisco Catalyst switches.
• Created standard access lists to allow snmp, ntp and logging servers.
• Replaced 6500 from access layer and Installed 3750s Switches.
• Racking and Stacking of Cisco 3750 Switches.
• Co-ordinate with the Data Network and Security team and come up with possible solutions.
• Provide solutions to Tier 1 escalated issues and tickets.
• Work on Physical site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book.
• Replaced old 6500 and WAN routers from DR testing site and Installed Nexus 7K and ASR 1006 routers.
• Documented all the work done by using Visio, Excel & MS word.
• Upgraded IOS on various Cisco Routers and Switches.
• Identify additional Network operations requirement and improvement opportunity.

Confidential, COLUMBUS, OH

Network Engineer

Responsibilities:

• Configured Routing protocols such as OSPF and policy based routing
• Supports the configurations of complex system architectures of all Firewall Systems: Cisco ASA Firewall 5550 & 5580,PaloAltoNetworksFirewalls, Sentrion Sendmail, Zixvpm, HP Tipping point, FireEye and Splunk.
• Configuring various advanced features (Profiles, monitors, iRules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIGIP appliances SSL termination and initiation, Persistence, Digital Certificates, Executed various migration/upgrade projects across F5 and hands on with F5 BIGIP LTMs/EM.
• Configured and troubleshoot F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability and A10 load balancer based on different load balancing
• To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.
• Configured and edited policies on F5 network access control.
• Design and implement redundantACSauthentication server and VPN access using Cisco ASA.
• Configured High availability for Aruba mobility controller 7210 with active-active redundancy model with controllers in Master-Local topology
• Replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliances serving as firewalls and URL and application inspection
• Integrated VoIP with PSTN and set up voice Gateway ensuring QOS for Cisco based Voice over IP and CDR for voice call Accounting
• Involved in Riverbed WAN optimization.
• Coordinated and performed VPN Lan2Lan, Remote VPN and Firewall security policies as well as NAT Configurations
• Experience in Configuring, upgrading and verifyingNX-OSoperation system with OSPF, BGP
• Implemented Positive Enforcement Model with the help of Palo Alto Networks
• Assisted testingPaloAltofirewalls along with Cisco ASA OS 8.4
• Assisted with support of the following systems: Cisco (ISRs, IOS,ACS), Juniper (EX switches, SRX firewalls, Space), BlueCoat ProxySG Web Filters, and AeroHive Wireless HiveManager.
• Team member of Configuration ofCisco7206 router and Configuration of Catalyst switches.
• Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
• Supported on CiscoNexus 5000and Nexus7000 SeriesSwitch fabric links.
• Configuringnetworkaccess servers for AAA Security UsingJuniperIC (Infranet Controllers) MAG-SM360, MAG-4610.
• Configured OSPF over frame relay networks for NBMA and point to multipoint strategies
• Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).
• Working on security levels with RADIUS, TACACS+.
• Involved in Configuration of Access lists (ACL) oncheckpointfirewall for the propernetworkrouting for the B2Bnetworkconnectivity
• Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/GRE to GetVPN.
• Maintained e-Commerce module according to PCI compliance and deployed security polices among WEB, APP and DB servers
• Use Sourcefire Next Generation Intrusion Prevention System (IPS/IDS), FireEye and Q1 Radar(SIEM) to monitor for suspicious network traffic
• Configuring white listed websites in Proxy Server - BLUE COAT
• Configuration & Installation ofJUNIPERdevices (SSG-140/550., SRX, IDP, EX8200 core switch).
• Create and testCisco router and switching operations using OSPF routing protocol.
• To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.
• Experience working with Layer 1-7 switching, TCP/IP, OSPF and load balancing (Cisco L2/L3 switches, firewalls, load balancers.
• Adding and removingcheckpointfirewall policies based on the requirements of various project requirements.
• Managed all network and devices to include Cisco routers, switches, VPNs, SSL, Check Point, Cisco PIX, Cisco ASA, Cisco FWSM as well as content delivery networks
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN usingjuniperSSG 140.
• Worked on troubleshooting and resolving issues escalated by the NOC and internal systems, including developing, implementing and deploying emergency hot fixes within a global network environment with advanced configurations
• Configuration and troubleshooting link state protocols like OSPF in multiple areas.
• Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.
• Optimized performance of the WANnetworkconsisting of Cisco 3550/4500/6500 switches by configuring VLANs.
• Cisco ASA 5540 firewall experience creating access rules for various DMZ containers for both inbound and outbound traffic.
• Maintained DNS, DHCP, Active Directory, Replication & other services on the Windows Server 2000 & 2003 network.
• Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers.
• DNS administration like adding/modifying/deleting IP and DNS assignments using InfoBlox.
• Providing Technical Support and solutions forNetwork Problems.
• Upgrading IOS, troubleshootingnetworkoutages.
• Worked on Cisco Routers, Active /Passive Hubs, Switches.
• Having Data Center Design Experience, installing and Configuring Network Devices in a Data Center including patching the cables in the Patch Panel. Design and implemented network infrastructure and configured all the network Infrastructure devices including Network Printers and Registers

Confidential

Network Engineer

Responsibilities:

• Worked onCiscoLayer 2 switches (spanning tree, VLAN).
• WAN Infrastructure running OSPF & BGP as core routing protocol.
• Support various Routers like 2600/3600/7200 series routers.
• Tested authentication in OSPF and BGP.
• Responsible for migrating to and maintainingPaloAltofirewalls.
• Performed management of physical infrastructure which includes Cisco routers, switches,PaloAltoFirewalls, Cisco firewalls, Checkpoint Firewalls, Cisco ASA and FWSM.
• Configuring and troubleshooting Cisco PIX, ASA, FWSM, ACE, Nexus 1000v, andJuniperplatforms in a multi-tenant infrastructure
• Configured F5 Load balancers and monitored the Packet Flow in the Load balancers.
• Configured and troubleshoot OSPF and EIGRP.
• ASA firewall troubleshooting experience.
• Design and Configuration of user policies and group policies on Active directory.
• Troubleshooting IOS related bugs based on past history and appropriate release notes.
• Work on different connection medium like Fibre and Copper Connectivity.
• In-depth expertise in the implementation of analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems.
• Planning and configuring the routing protocols such as OSPF, RIP, and Static Routing on the routers.
• Installed and Configured a Cisco secureACSserver for AAA authentication (RADIUS).
• Worked on a PCI remediation project which involved creation and installation of zone based firewalls
• Providing technical consultancy for better application response using QoS
• Manage the day-to-day log collection activities of source devices that send log data toESEM (SIEM) RSA.
• Configuring and managing Blue Coat Proxy Servers
• Demonstrable knowledge on WAN encapsulation protocols like HDLC, PPP and Frame Relay. ISDN.
• Configuring MPLS, VPN (IPSEC, GRE) in VPN concentrators and QOS in integrated networks (Data, Voice, and Video).
• Configured OSPF over frame relay networks for NBMA and point to multipoint strategies.
• Remediation of firewall rules fromcheckpointfirewalls to Cisco ASA firewalls and their implementation.
• Worked onJuniperT-Series, M-Series, MX-Series, J-Series Routers
• Configured contexts on ASA 5540, 5520, 5510.
• Implemented TCP/IP, TFTP and related services like DHCP/DNS/WINS
• Performed and technically documented various test results on the lab tests conducted.
• Planning and configuring the entire IP addressing plan for the clients'network.
• Assist the certification team and perform configuration of LAN\WAN technologies such as Ethernet, Fast Ethernet, and Gigabit Ethernet.
• In-depth expertise in the implementation of analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems.
• WAN Infrastructure running OSPF as a core routing protocol.
• Follow process & procedures for change & configuration management.
• Supported nationwide LAN infrastructure consisting ofCisco4510 and catalyst 6513.
• Deployed the switches in high availability configuration with HSRP.
• Support various Series ofCiscoRouters like 7200/7600 series.
• Support Complex 0 Series Switches.
• NetworkMonitoring using tools likeCiscoWorks 2000.
• Created Lab demonstrations for new technology deployments with loaner equipment from various vendors and presented the findings to upper management.
• Troubleshootnetworkproblems using Packet Analysis tools like Ethereal.

Confidential

Network Engineer

Responsibilities:

• Designed and implemented remote dial up solution for clients
• Designed, validated and implemented LAN, WAN & WLAN structure to suite client’s need.
• Performed troubleshooting and monitored routing protocols such as OSPF, EIGRP & BGP.
• Involved in writing troubleshooting guidelines for MPLS VPN.
• Configuring, installing, and managingJuniperand Cisco routers, Brocade and Cisco switches, JuniperNetscreen firewalls to include ISG 2000, NS-5200, NS-5400, and SSG series, and TACLANE encryption devices
• Configuring F5 load balancers and has good understanding about them.
• Installed Cisco Pix,Checkpointand other Vendor Firewalls
• Streamlined the process of deployment of operating system.
• Active Directory user’s management and planning for authoritative and non-authoritative restore.
• AAA Radius/Tacacs setup on CiscoACSfor routers and Cisco Merakinetwork
• Configured ACL & NAT through CLI
• Installed and configured workstations for IP based LAN’s
• Installed and configured DHCP Client/Server
• Configured and managed networks using L3 protocols like RIPv2,
• Configured VLANs, Private VLANs, VTP and Trunking on switches.
• Configured L2 and L3 security features on devices broad Hands on Experience in Inter-vlan routing, redistribution, access-lists and dynamic NAT
• Efficient in cabling as per co-location contracts with loop-back testing, including all DS1, DS3, T1, T3,CAT 6 and CAT 5 connections as per defined cabling procedures

Confidential

Network Engineer

Responsibilities:

• Configured Cisco Routers for OSPF, IGRP, RIPv2, EIGRP, Static and default route.
• Worked on HSRP for hop redundancy and load balancing.
• Configured the Cisco router as IP Firewall and for NATing Configured RSTP, MST and used VTP with 802.1q trunk encapsulation.
• Provided port binding, port security and router redundancy through HSRP.
• Designed ACLs, VLANs, troubleshooting IP addressing issues and taking back up of the configurations on switches and routers.
• Provided testing for network connectivity before and after install/upgrade
• Switching related tasks included implementing VLANS and configuring ISL trunk on Fast-Ethernet and Gigabit Ethernet channel between switches.
• Experience in Cisco switches and routers: Physical cabling, IP addressing, Wide Area Network configurations.
• Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external.
• Troubleshooting on routing protocols, which include RIP, BGP, EIGRP, and OSPF.