SUMMARY

• Cisco Certified Network Engineer with 7 years of professional experience in Network Engineering, performing Network Analysis, Network planning and Design, Implementing and Troubleshooting with focus on performance tuning and support of large networks.
• Experience in Cisco Routing, Switching and Security with strong Cisco hardware/software experiences on Cisco Router models such as 1900, 2900, 3900, Cisco ASR - 1k/9k series, Cisco Multilayer Switches 4500, 6500, Cisco Nexus 2k/5k/7k/9k series and Juniper: M320, MX80, MX480, MX960 and EX4200, EX8200 series switches.
• Experience in Layer 3 Routing protocol configurations: RIP, EIGRP, OSPF, BGP, & MPLS and Layer 2 Routing protocol configurations: ATM/Frame Relay,IP services such as QoS and VPN technologies: IPSEC & SSL.
• Experience in configuring, VLANs, STP, VTP PVST and 802.x authentication in access layer switches and work in extensively in Designing, Implementing & Managing LAN, WLAN & WAN solutions for different client setups. In-depth knowledge and experience in WAN technologies including T1, T3, ISDN, HDLC, Point to Point, ATM & Frame Relay.
• Experience in set up, configuration and management of Cisco ASA Firewall in various domains such as Internet, DMZ, Business-Partner and Remote-Access VPN etc.
• Experience in creating DAP Policies on Cisco ASA for Remote-access users and creating IPSEC tunnel on ASA with Business Partner Firewall.
• Implemented MPLS/VPN services for various customers and ACS configuration for RADIUS & TACACS+.
• Experience in configuring and troubleshooting, creating Virtual Servers, Nodes, Pools and iRules on BIG-IP F5 load balancer LTM.
• Experience in configuring and troubleshooting vPC on Cisco Nexus-5k series for downstream FEX and Servers.
• Strong knowledge of HSRP, VRRP Redundancy Protocols in high availability environment.
• Experience with different Network Management Tools and Sniffers like SNMP, HP-Open view, and Cisco works to support 24 x 7 Network Operation Center.
• Experience in Physical cabling, IP addressing & subnetting with VLSM, configuring and supporting TCP/IP, DNS, installing and configuring proxies.
• Ability to install, manage & troubleshoot Large Networks & Systems Administration on Windows & Linux platforms in development, staging, lab & production environments.
• Experience with Project management and Operations planning process and documentation tools like Microsoft Excel and Visio.

TECHNICAL SKILLS

IP Routing: RIP, BGP, OSPF, IGRP, EIGRP, Static Routing, VLSM, IP Addressing (IPv4), Subnetting

Communication Protocols: TCP/IP, TCP/IP addressing schemes, UDP, DHCP, ICMP, SNMP, ARP, RARP, PPP, HDLC, ISDN, SSH, FTP, Telnet

Redundancy Protocols: GLBP, HSRP, VRRP

Topologies: Frame Relay, Point-to-Point Circuits, VPN, ATM, Ethernet, Cable Modem, and Wireless

Switch Technologies: IEEE 802.11, DNS, VLANs, VTP, STP, DTP, MLPPP, MPLS, ISL, dot1q

Virtualization: Packet tracer 5.0, OPNET SP Guru Transport Planner, Boson NetSim, GNS3, Service Aware Manager (SAM), Citrix XenApp, CCP, ASDM, GAIA Dashboard

Network Hardware: Cisco switches (1900, 2950, 2960, 3550, 3560, 4500, 6509, and 6513), Cisco Nexus Switches (2248, 2232, 5548, 5596, 7010, 7718), Cisco Routers (1700, 1800, 1900, 2500, 2600, 2800, 2900, 3600, 3800, 3900, 7200, ASR-1k/9k), Cisco ASA 5500 series, CSU/DSU’s, Network cards, Modems, BIG-IP F5 Network load balancers, Catalyst: 6500, 6503, 6507

Network Management Tools: MRTG, Sniffer, HP Open view, Cisco WAN manager, Cisco works 2000. Security: NAT/PAT, Ingress & Egress Firewall Design, VPN Configuration, Internet Content Filtering, URL Filtering -Web-sense, SSL, RSA, AES encryption, IPSEC, IKE, Static ACL, Dynamic ACL, Reflexive ACL, Authentication AAA (TACACS+ & RADIUS), Etherpeek, Zenmap, TCP dump, Wireshark, Gauntlet data security, FakeNet, Tripwire

Firewall: Cisco ASA 5505, Check Point, Juniper SRX

Operating Systems: Cisco IOS, Solaris, Windows 2000/2003/2008 Server, Windows 7/8, Linux, UNIX, Active Directory

Network Diagram: CADE, Diagram Designer, yED, Microsoft Excel, Microsoft Visio

PROFESSIONAL EXPERIENCE

Confidential, Columbus, OH

Network Engineer

Responsibilities:

• Worked as part of a team to manage Enterprise Network Infrastructure as a Tier 3 Support Engineer.
• Responsible for maintaining the entire switching domain across the Head Office campus and also the Layer-2 campus network across the remote branches which includes configuring VLANs and Trunks, Spanning Tree Protocol, Port-Security, VLAN Access-Maps and DOT1X for switches.
• Perform Network Security Assessment and implement security improvements such as network filtering, SSH, AAA, SNMP access lists, VTY access lists, EIGRP MD5 authentication, and HSRP authentication.
• Configuration and monitoring of BIG-IP (F5) load balancers and there packet flow.
• Experience in working with Nexus 7010, 5020, 2148, 2248 devices.
• Experience in configuringNexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000.
• Implemented SNMP on Cisco routers for network management.
• Configured various advanced features (iRules, Redundancy, SSL Termination, Persistence, SNATs, HA) on F5 BIG-IP appliances.
• Configured JuniperMX480s, EX8200s, EX4500s and EX4200s.
• Knowledge on trouble tickets of F5 Load balancers in LTM module.
• Worked on Cisco Catalyst switches: Cisco 3750, 4500, 6500 series switches.
• Managed enterprise setup by configuring and troubleshooting BGP related issues. Worked on adding new BGP peers for remote branch offices and business partners.
• Scaling of IGP and BGP in the core.
• Administration of ASA firewalls in the DMZ and FWSM to provide security and restricted access.
• Dealt with implementation & deployment related to Cisco devices and applying security policies on it.
• Troubleshoot issues related to VLAN, VLAN Trunking, HSRP failovers and their related issues and configuration of NAT.
• Provided support for Network Operation Centre with the help of Cisco Works (CW) and also used it to create template for doing configuration changes and IOS upgrades. Also, efficient on CW packages like LMS and RWAN applications.
• Maintain effective communications with vendors, peers and clients in resolution of trouble-tickets, equipment RMAs and support requests.
• Planning for upgrade of Cisco IOS 12.2, 15 on devices and performing the upgrade.
• Assist in the architecture, evaluation and recommendations related to purchasing and installing hardware, software related to IP Networking.
• Monitor network traffic and develop capacity planning initiatives, making necessary recommendations for additional resources or hardware.
• Write and execute test plan, desk level procedures and test case documents for smooth network operations.

Environment: Cisco Routers:1900, 288, 2900, 3900,7200, ASR-1k Cisco Switches:2960,3560,4500,6500,3750 Juniper Routers:M320, MX80,MX480,MX960 Juniper Switches: EX4200,EX8200

Confidential, Rhode Island, RI

Network Engineer

Responsibilities:

• Review, analyze, approve and execute all changes in a network. Configuration of Cisco Routers and Switches. Participated in a rotating 24x7 support schedule for the Network Operation Center.
• Design, validate and implement LAN, WLAN & WAN solution to suite client’s needs.
• Design OSPF Areas for reliable Access Distribution and for Core IP Routing.
• Implement, monitor, troubleshoot and convergence in Frame-Mode MPLS inside the core.
• Perform troubleshooting and monitor routing protocols such RIP, OSPF, EIGRP & BGP.
• Design and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.
• Provide Load balancing towards access layer from core layer using F5 Network Load balancers.
• Implement TCP/IP and related services like DHCP/DNS/WINS.
• Configure and troubleshoot HSRP on Cisco routers.
• Deploy a large-scale HSRP solution to improve the uptime of collocation customers, in the event a core router became unreachable and also got a good understanding on deployment of Identity Service Engine (ISE).
• Hands-on experience in configuring and troubleshooting ACLs, NAT, TACACS.
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Experience in work with Nexus 7010, 5020, 2148, 2248 devices.
• Experience with configuringNexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000.
• Implement SNMP on Cisco routes to allow for network management.
• Configure and manage Networking and Network Security by performing system administration and analysis that include installing and configuring proxies, DNS, IP addressing scheme & IP subnetting with VLSM, configuring VLANs & Trunks.
• Responsible for procurement and installation of hardware, network drives and other IT infrastructure. Document the design, implementation and troubleshooting procedures with Method of Procedures (MOPS).

Environment: Cisco Routers:1800, 2500, 2600, 3640, 4500, 6500, 7200 series Routers. Cisco Switches:1900, 2924, 2950, 3560, 4500, 6500.

Confidential -- Wayne, PA

Network Engineer

Responsibilities:

• Involve in VPN (IPSEC and GRE) migrations and new designs for the clients.
• Troubleshoot the Network Routing protocols (BGP, EIGRP and RIP) during the migrations and new client connections.
• Manage operational monitoring of equipment utilization and evaluate the need for upgrades; develop methods for gathering data needed to monitor hardware, software, and communications network performance.
• Ensure the project will achieve targeted dates to count on business continuity.
• Configure and troubleshoot OSPF, BGP, and EIGRP.
• Work on projects like BGP Route Reflectors deployment, removal of BGP from the core.
• Configuration and troubleshooting of Cisco Routers such as Cisco 3640, Cisco GSR 12416, GSR 21418 (with PRP and RPR processors), Cisco catalyst 6509,7613 with supervisor cards.
• Configure IP RIP, PPP, BGP and OSPF routing.
• Work on security features such as authentication, authorization, accounting, access control, and secure protocols for Cisco high-end routing platform (IOS-XR).
• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4.
• Configure IP access filter policies
• Implement network redesign of enterprise security infrastructure, including firewalls, IDS/IPS VPN solutions (trusted site to site, DMVPN, multiple factor authentication remote access systems, log consolidation and monitoring).
• Configure various BGP attributes such as Local Pref., MED, Extended Communities, Route-Reflector clusters, Route-maps and Route Policy Implementation.
• Create and deliver internal trainings for BGP.
• Configuring, Monitoring and Troubleshooting Cisco’s PIX firewall, TACACS, ASA 5500 security appliance and Checkpoint NG Firewall. Designing and Implementation experience in building DMZ, and integration of firewalls with Confidential Anti-Virus and web filtering applications from Trend Micro and Websense.
• Configure egress and ingress queues for ISP facing routers using CBWFQ.

Environment: Cisco Routers:1900, 2900, 3640, 3900, 7200 series Routers Firewall:Cisco ASA 5585-X, 5500 Series, Checkpoint Firewall

Confidential, Santa Monica, CA

Network Implementation Security Engineer

Responsibilities:

• Implement, configure, support and maintain Confidential ’s network infrastructure.
• Maintain the existing inventory and evaluate the new hardware.
• Manage and implement remote firewalls using NSM and CSM.
• Implementation of firewall rules on Juniper 5400, Juniper SRX 3600, 100 on a daily basis, using NSM, as well as CLI when needed.
• Manage all remote firewalls using Juniper NSM and Cisco Security Manager.
• Configuration of new SRX firewalls for remote site implementation.
• Firewall Engineer for all new server implementations at Santa Monica location.
• Proficient in the use of Santa Monica “Change Management” system.

Environment: Juniper Firewall:Juniper SRX firewall Cisco Switches:2960, 3750, 3560.

Confidential

Network Engineer

Responsibilities:

• Implement ISL and 802.1Q for communication through VTP.
• Work with client teams to find out requirements for their network.
• Design solutions for requirements using Cisco Routers and Switches.
• Responsibilities included documentation using Visio and support for other teams
• Perform RIP, OSPF, BGP EIGRP routing protocol administration.
• Install wireless access points (WAP 3500 and 3600 series) at various locations in the company.
• Maintain redundancy on Cisco 2600, 2800 and 3600 routers with HSRP.
• Migration of RIP V2 to OSPF, BGP routing protocols.
• Deploy the network infrastructure to meet the requirements.
• Create VLAN and Inter-VLAN routing with Multilayer Switching.
• Complete service requests (i.e. IP readdressing, bandwidth upgrades, IOS/platform upgrades).
• Provide technical consultancy for better application response using QoS.
• Monitor performance of network and servers to identify potential problems and bottleneck.
• Provide technical support on hardware and software related issues to remote production sites.

Environment: Cisco Routers:2500, 2600, 2800, 3640 series Routers. Cisco Switches:2900, 3550, 4000.

Confidential

Network Engineer

Responsibilities:

• JuniperM20 and M10 configuration support for EBGP/IBGP and OSPF at core level.
• JuniperM20/Cisco 6509 rate-limiting/policing configuration and support in core/aggregator level provisions for customers.
• JuniperM20 JUNOS and Cisco 6509 IOS upgrade maintenance and support.
• Resolve all computer related problems, monitor and maintain system functionality and reliability by identifying ways to prevent system failures.
• Perform replacements of failed hardware and upgraded software.
• Perform scheduled virus checks and updates on all Servers & Desktops.
• Configure VLANS to isolate different departments.
• Upgrade IOS on Cisco Catalyst switches 2960 and 3560 to fix problems related with IOS bugs.
• Upgrade and backup of Cisco routers and switches configuration files to a TFTP server.