PROFESSIONAL SUMMARY:

• A Professional Electrical Engineer with 8+ years of experience in the industry, with a strong networking base, talented in testing network based routing, switching applications and embedded applications.
• Experience in working with Cisco Nexus 7k, 5k, 2k Switches and Virtual Port Channel configuration.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.
• Experience in configuring HSRP and redistribution between routing protocols troubleshooting them.
• Experience working with Juniper JUNOS version 12 and Version 13 for routing and Switching protocols.
• Experience working with Cisco IOS, IOS - XR for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS.
• Designing and Implementing IP addressing including IPv4 and IPv6.
• Support city wide network; utilizing Solar Winds network management tools.
• Implementation of HSRP, VRRP and GLBP for Default Gateway Redundancy.
• Experience with Putty, Exceed and Secure CRT.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.
• Strong hands on experience in installing, troubleshooting, configuring of Cisco 7200, 3800, 3600, 2800, 2600, 2500 and 1800 series Routers, Cisco Catalyst 6500, 4500, 3750, 2950 and 3500XL series switches.
• In-depth knowledge and hands-on experience on IP Addressing, Sub netting, VLSM and ARP, reverse & proxy ARP, Ping Concepts.
• Ensure correct configuration and mitigate system and network vulnerabilities with SIEM tools.
• Implementation traffic filters on Cisco routes using Standard, extended Access list.
• Expert Level Knowledge about TCP/IP and OSI models.
• Implementing security policies using ACL, ASA, PIX Firewall, IPSec, VPN, AAA Security (TACACS+, Radius) on different series of routers.
• Undertook the migration from point to point serial links to a WAN utilizing MPLS.
• Designed advanced networking solutions including Quality of Service (QoS), Virtual Routing and Forwarding (VRF) and route redistribution.
• Worked on F5 Load Balancers - Configuring I rules, Profiles, Nat’s/Snats, Load Balancing.
• Expert knowledge of cable connectors and replacement as RJ-11, RJ-45, V.35, RS-449.
• Provides technical suggestion forproblem escalation and resolution.
• Network monitoring and testing from Operation Center (NOC) from a network management perspective.
• Excellent communication skills to interact with team members and support personnel and also can act as a mentor to less experienced personnel.
• In-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.
• Cisco ASA/checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Installed Wireless Access Points WAPs Confidential various locations in the company.
• Perform Wireless Administration and troubleshooting for the corporate Wireless infrastructure.

TECHNICAL SKILLS

Switches: CISCO 2900, 3500,4500,5000,6500, Nexus 7k,5k,2k

Juniper: E series, J series and M series. Juniper SRX & VPN

Simulation Tools: OPNET IT GURU, OPNET Modelar

Web Technologies: HTML, XHTML, CSS.

Firewalls: Juniper net screen(500/5200), Juniper SRX (650/3600), Palo Alto (200,500,2050,3020,5060), ASA(5520/5550/5580)

Networking Technologies: LAN/WAN Architecture, TCP/IP, Frame Relay, VPN, VLAN, VTP, NAT, PAT, STP, DNS, RSTP, PVST, SMTP.

Networking Hardware: Cisco Switches, Cisco Routers, PIX firewalls

Routing Protocols: OSPF, IGRP, EIGRP, RIP, MPLS, IS-IS, BGP, Redistribution, Multicasting

Security Technologies: Knowledge on Firewall, ASA, IP Sec, IPS/IDS, VPN & Cisco PIX, VLANNAT/PAT: DMZ, SIEM, IAM, and GRC"

Network Monitoring: Cisco Works 2000, Wire Shark, Solar winds

Operating Systems: Windows 7, Vista, XP, 2000, LINUX, Cisco IOS, IOS XR.

Network Simulators: GNS3, Packet Tracer

Routers: CISCO 2600, 2800,3600,3800,7200, Cisco CRS-1, CRS -3, GSR

Applications: MS Office, MS Visio

PROFESSIONAL EXPERIENCE:

Confidential, Thornton, CO

Network Engineer

Responsibilities:

• Experienced in working with an enterprise level atmosphere which consists of around 150 site locations with four big DataCenters across the globe.
• Designed and implemented different layers of security within the LAN and also for the Avaya external facing DMZ.
• Worked extensively on Network Segregation projects that include separating all the Avaya research labs from the production with Contrrolled access between them.
• Worked on configuring and installing juniper Security products such as SRX 240h, SRX 650,SSG 5, SSG 500M, ISG 2000.
• Adding all the juniper firewalls into NSM(Network and Security Manager), writing policies, configuring interfaces and IPSec VPN tunnels in NSM and push it to the JUNOS and ScreenOS devices such as SRX and SSGs.
• Upgrading software versions in SRX and SSG firewalls.
• Decent amount of knowledge on troubleshooting commands from CLI for SRX and SSG firewalls.
• Configuring Access Policies based on the Captive Portal login.
• Implementing static and dynamic routing through SRX and SSGs .
• Involved in migrating from NSM Express to NSM 3000.
• Configuring IPSec VPN tunnels with third party vendors and outsourced R&D Companies and document the tunnel parameters and pre-shared key.
• Maintaining the Policies based on individual tunnels by defining the Rule Groups in NSM and documenting it.
• Worked on PAN-OS devices such as PA-200, PA-500, PA-2050, PA-3020 and PA-5060 Palo Alto firewalls.
• Configuring Palo Alto firewalls for interfaces in layer 2 and layer 3, VLANs, Zones etc.
• Configuring various security profiles such as Anti-Virus, Anti-Spyware, Vulnerability protection, URL filtering, file Blocking, Data filtering, DOS protection and applying it to the interfaces and policies in Palo Altos.
• Analyzing Malware and Grayware from the WildFire submissions in Palo Altos to take required actions.
• Configuring IPSec VPN tunnels with the third party vendors.
• Dealing with Access Policies requests through Tufin and adding the rules accordingly.
• Taking care of security tickets to troubleshoot security and firewall related issues and be responsible in closing the tickets.
• Expertise in dealing with IPSec VPN tunnel troubleshooting from both JUNIPER and PALO ALTO firewalls that involves understanding IKE and IPSec parameters, resetting Phase 1 and Phase 2 if needed, routing of the configured Proxy IDs, looking Confidential the security associations (SA), IKE cookies also monitoring tunnel healths and keep a record of the tunnels which are dead for a significant long amount of time and delete the tunnel if needed after communicating with the tunnel owner vendor.
• Involved in migrating the tunnels from one DataCenter to another DataCenter/Juniper to Palo Altos which involves communicating with the third party vendors and working under a change control management.
• Worked on VXLAN across the DataCenters using Avaya ONA(Open Network Adapter).
• Played an important role during implementing IPv6 Confidential our site.

Confidential, Elk Grove, CA

Network Engineer

Responsibilities:

• Designed 10 gigabit networks using Cisco Nexus 7000 series switches, Checkpoint NGX firewall and Cisco 3800 series routers.
• Designing and Implementing IP addressing including IPv4 and IPv6.
• Design and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Configuration and maintenance of PIX and ASA firewall systems.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.
• Manage the day-to-day log collection activities of source devices that send log data to ESEM (SIEM) RSA.
• Networks using routing protocols such as RIP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance.
• Configured OSPF redistribution and authentication with type 3 LSA filtering to prevent LSA flooding.
• Configured OSPF over frame relay networks for NBMA and point to multipoint strategies.
• Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).
• Provided redundancy in a multi homed Border Gateway Protocol (BGP) network by tunings AS-path.
• Implemented Hot Standby Router Protocol (HSRP) by tuning parameters like preemption.
• Implemented various OSPF scenarios on networks consisting of 7600 routers.
• Configured policy based routing for BGP for complex network systems.
• Worked with Nortel Meridian PBX and/or Succession Call Server Technology, Alcatel-Lucent Vital QIP, Juniper SSL VPN.
• Configured Multiprotocol Label Switching (MPLS) VPN with Routing Information Protocol (RIP) on the customer’s site.
• Involved in configuring and implementing of composite Network models consists of Cisco7600, 7200, 3800 9000, CSR-1 series routers and Cisco 2950, 3500, 5000, 6500 Series switches.
• Participated in the installation, configuration, and post installation daily operational tasks and configuration of the deployment of Cisco Nexus equipment.
• Tuned BGP internal and external peers with manipulation of attributes such as metric, origin and local preference.
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.
• In F5 I did configure Virtual Servers, Configure Nodes, and configuring the load balancing Pools and also used to work with configuring load balancing algorithms.
• I did work with configuring F5 LTM 8950, 6900, VIPRION 2400 models.
• Experience working Juniper T-Series, M-Series, MX-Series, J-Series and SRX-Series Routers.
• Experience working with JUNOS OS on Juniper Routers and Switches.
• Experience in IP telephonyencompassing the full suite of VoIP enabled services including the interconnection of phones for communications; related services such as billing and dialing plans; and basic features such as conferencing, transfer, forward, and hold.
• Dealing with various Check Point firewalls such as the R series (R71 to R77) and experience and dealing with the DLP Market by moving from Detection to Prevention of Data Loss Incidents.
• Also primary and responsibilities was to Prevents data loss of critical business information, Combines technology and processes to make DLP work, Easy deployment for immediate data loss prevention.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.
• Manage a very large DNS environment using Lucent QIP and manual management of DNS for DMZ/External servers.
• Responsible for day to day management of Cisco Devices, Traffic management and monitoring.
• Installed, configured and set security policies on cisco and checkpoint firewalls, VPN.
• Installed, configured and troubleshot Cisco wireless network, Wireless LAN controllers.
• Analyzed and tested network protocols (Ethernet, TCP/IP) using Wireshark tool.

Environment: Cisco Routers7600, 7200, 3800, 9000, Cisco CatalystSwitch6500,5000, 3500, 2950,T1Controllers, DS3Lines (T3Lines), FiberandEthernetcabling.

Confidential, Redmond WA

Network Engineer

Responsibilities:

• Executed BPDU Guard, port-fast, uplink fast and other spanning tree features on various layers 2 and layer 3 switches.
• Supporting accounts on implementation and maintenance of DDI/IPAM Servers on various platforms.
• Configured static NAT, dynamic NAT, dynamic NAT overloading.
• Manage a very large DNS environment using Lucent QIP and manual management of DNS for DMZ/External servers.
• Configured of IPSEC VPN tunnels for site to site & remote access connectivity. Implementing the Cisco wireless security solution with (WPA2, WEP) for making the wireless users secure
• Back up a Cisco IOS to a TFTP server and Upgraded and restored a Cisco IOS from TFTP server.
• Responsible for implementing, supporting, and maintaining 24x7 network services.
• Coordinated efforts with Engineer’s to ensure all network devices conformed to defined network standards.
• Configured various Routing protocols such as RIP, OSPF, EIGRP, static routing.
• Provided configuration of STP and Port Security on Catalyst 6500 switches.
• Configure the Cisco CRS-1 Routing System, back out of configuration changes, and restore older versions of a configuration.
• Use Sourcefire Next Generation Intrusion Prevention System (IPS/IDS), FireEye and Q1 Radar (SIEM) to monitor for suspicious network traffic
• Troubleshooting of Cisco 2800, 2900, 3900, 7200, 7600, ASR9000, CRS and GSR 12k Series routers.
• Managed network IP allocations using QIP and DSDB.
• Configure the Cisco IOS XR security features in both owner SDR and non-owner SDRs.
• Configure legacy route map configurations using the new Cisco IOS XR Routing Protocol Language (RPL).
• Maintaining Core Switches, creating VLANs and configuring VTP.
• Optimized performance of the WANnetworkconsisting of Cisco 3550/4500/6500 switches by configuring VLANs.
• Performed redistribution with OSPF, EIGRP, RIP version 1 and 2 to enable communication with backbone.
• Configured OSPF for Stub area, Totally Stubby Area and NSSA.
• Experience with Checkpoint Firewall policy provisioning.
• In-depth expertise in the implementation, optimization, troubleshooting and documentation of LAN/WAN networking systems.
• Worked on a broad range of topics such as proactive monitoring and maintenance, disaster recovery exercises, and core network repairs.
• Provide Support to T-Mobile Wireless clients for network troubleshooting.
• Responsibility to maintain Fine-grained visibility and policy control over application access/functionality
• Experience in Multi-gigabit, low latency, in-line deployment.
• Worked on the security levels with RADIUS, TACACS+.
• Monitoring network performance to improve the backup strategy using Netrep, Solar winds.
• Route configuration and point code checks for System Technician and Network Technician.
• Knowledge and experience of 802.11 a/b/g/n Ethernet standard for wireless Technology.
• Worked with other team members in testing of the network architecture.
• Participated in quality system implementation project.
• Configure wireless routers on enterprise network.

Environment: Cisco 2800, 2900, 3900, 7200, 7600, ASR9000, CRS and GSR 12k routers, Cisco CatalystSwitch6500,4500, 3550,T1Controllers, CiscoASA5510,Checkpoint, FiberandEthernetcabling.

Confidential

Network Engineer

Responsibilities:

• Created a backup and recovery policy for software application and verified peripherals are working properly.
• Monitor performance of network and servers to identify potential problems and bottleneck.
• Performed RIP & OSPF routing protocol administration.
• Interacted with support services to reduce the downtime on leased lines.
• Configure Multi-protocol Label Switching-Traffic Engineering (MPLS-TE) tunnels on the Cisco CRS-1 Routing System
• Understand data flow through the Cisco CRS-1 Routing System
• Troubleshoot problems on a day to day basis & provide solutions that would fix the problems within their Network. Troubleshoot basic Cisco CRS-1 hardware and software problems
• Monitor the operability and reliability of the network.
• Provided first-level contact and problem resolution for all issues around our VIOP Phone and will be setting up and deleting settings as well as trouble shooting the system.
• Application Performance Monitoring and Network Performance Monitoring of the Time Warner’s network using OPNET IT Guru.
• Maintained communications with internal customers during the problem resolution process.
• Maintenance and Troubleshooting of connectivity problems using Ping, Trace route
• Managed the IP address space using subnets and variable length subnet masks (VLSM).
• Enable multicast routing on the Cisco
• CRS-1 routing system
• Configure Multi-protocol Label Switching (MPLS) on Cisco IOS XR Software
• LAN cabling in compliance with CAT5 standards.
• Worked along with the team in ticketing issues.
• Daily responsibilities included monitoring remote site using network management tools, assisted in design guidance for infrastructure upgrade & help LAN administrator with backbone connection and connectivity issue Other responsibilities included documentation and support other teams
• Create and maintain reports utilizing SQL, Excel, MS Access, SSIS, SSRS and SharePoint. These reports will be used to manage claim inventory, adjustment processes, audit, compliance, recoveries and coordination with other departments.
• Assisted in troubleshooting LAN connectivity and hardware issues in the network of 100 hosts.
• Studied and analyzed client requirements to provide solutions for network design, configuration, administration, and security.
• Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.
• Maintained redundancy on Cisco 2600, 2800 and 3600 router with HSRP.
• Hands on experience in Cisco and Juniper Routers and Switches.

Environment: Cisco 2600, 2800 and 3600 routers, Cisco Switch1900,6509,and 6513,Checkpoint.

Confidential

Network Engineer

Responsibilities:

• Provided redundancy in a multi homed Border Gateway Protocol (BGP) network by tunings AS-path.
• Worked on Juniper J series j230, M 320 routers and EX 3200 series switch.
• Implemented Hot Standby Router Protocol (HSRP) by tuning parameters like preemption.
• Implemented various OSPF scenarios on networks consisting of 7600 routers.
• Configured policy based routing for BGP for complex network systems.
• Configured Multiprotocol Label Switching (MPLS) VPN with Routing Information Protocol (RIP) on the customer’s Site.
• Tuned BGP internal and external peers with manipulation of attributes such as metric, origin and local Preference.
• Involved in Configuring and implementing of Composite Network models consists of Cisco7600, 7200, 3800 series and ASR 9k, GSR 12K, CSR-1 routers and Cisco 2950, 3500, 5000, 6500 Series switches.
• Perform network capacity planning and performance analyses with IT Guru Network Planner, VNE Server, ACE
• Configured networks using routing protocols such as RIP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure.
• Configured OSPF redistribution and authentication with type 3 LSA filtering and to prevent LSA flooding.
• Configured OSPF over frame relay networks for NBMA and point to multipoint strategies.
• Scripting experience with Pearl.
• Configuring, Installing and troubleshooting on Check Point Devices.
• Good knowledge on Intrusion Detection and Intrusion Prevention System.
• Policy Building using IDP.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.
• Responsible for day to day management of Cisco Devices, Traffic management and monitoring.
• Troubleshoot and Worked with Security issues related to Cisco ASA/PIX, Checkpoint, IDS/IPS and Juniper Netscreen firewalls.
• Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).
• Cisco Secure Access Control Server (ACS) for Windows to authenticate users that connects to a VPN 3000 Concentrator.

Environment: WinsXP/7,TCP/IP,WINS,DNS,DHCP,FTP,LDAP,IMAP,SMTP,POP3,Mail Servers.

Confidential

Network Support Engineer

Responsibilities:

• Assisted with various duties that will arise including: implementation, configuration, management, rules definition, problem solving, design advice, troubleshooting, updating, maintenance, etc.
• Maintenance and Troubleshooting of LAN connectivity problems using Ping, Trace route.
• Managed the IP address space using subnets and variable length subnet masks (VLSM).
• Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.
• Worked along with the team in ticketing issues.
• Assisted in troubleshooting LAN & WAN connectivity and hardware issues in the network of 10000 hosts.
• Studied and analyzed client requirements to provide solutions for network design, configuration, administration, and security.
• Experience with configuring BGP, OSPF on 7609 router.
• Maintained redundancy on Cisco 2600, 2800 and 3600 router with HSRP.
• Monitor performance of network and servers to identify potential problems and bottleneck.
• Performed RIP & OSPF routing protocol administration..

Environment: Cisco Routers - 1700, Cisco GSR 12416. Cisco Switches - 1900, 6509, and 6513