SUMMARY

• 8 years of experience in providing solutions, implementation, configuration and troubleshooting of Cisco Routers and switches, fine tuning of firewalls, VPN configuration, troubleshooting network related problems in Enterprise Network.
• Hands on experience in configuring Cisco switches and Cisco routers and F5 Load Balancers and providing network support, installation and analysis for a broad range of LAN/WAN/MAN communication systems.
• Strong experience onJuniper SSG series Firewalls and Checkpoint R75, 76 Firewalls
• Experience with various LAN and WAN technologies and protocols like: - TCP/IP, VLAN, VTP, STP, EIGRP, OSPF, BGP, IKE/IPsec VPNs, NAT and access list.
• Knowledge and experience on Protocols such as TCP/IP, SNMP, ICMP, NAT, PAT
• Firewall technologies including general configuration, security policy, rules creation and modification of cisco ASA and Palo Alto.
• Experience in addressing Cisco infrastructure issues, monitoring, debugging like routing, WAN outages, Network Hardware/Software failure, configuration and performance issues.
• Practical experience in Active directory, OU, DNS, DHCP, Group policy, Replication, Active directory domain trust relationship.
• Implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, Route Maps and route manipulation using Offset-list.
• Hands on in deployment of GRE tunneling, SSL, Site-Site IPSEC VPN and DMVPN.
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP, NTP.
• Strong experience onJuniper SSG series Firewalls and Checkpoint R75, 76 Firewalls.
• Experience with F5 load balancers - LTM, GTM series like 6800 and 8900 for the corporate applications and their availability.
• Expertise in OSI layer model/TCP/IP.
• Well versed and experienced in routing and switching protocols RIP, OSPF, EIGRP, BGP and VLAN
• Worked on F5 LTM series like 6400, 6800 for the corporate applications and their availability.
• Configuring, Administering and troubleshooting the Palo Alto firewall.
• Also proficient in handling Network Monitoring tools and Packet capture tools, technical documentation and presentation tools and also has excellent analytical, organizational, problem solving & resolution skills.
• Configuring and troubleshooting CISCO catalyst 6509, 7609, 7613 with Supervisor cards, Cisco 3640, Cisco GSR 12416, 21418 (with PRP and RPR processors).
• Strong knowledge ofNetworkAccess Control Server, RSA SecurID two-factor authentication, digital certificates & logging.
• Extensive experience in designing and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Implement/Maintain a Juniper Environment of 600 data collection units across USA.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy.
• Experience in testing cisco routers and switches in laboratory and deploy them on site production.
• In-depth knowledge and hands-on experience in IP Subletting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3, Firewalls.
• Adept in preparing Technical Documentation and presentations using Microsoft VISIO/Office
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Experience withPaloAltoNetworksNext Gen firewalls.
• Installing and configuring FWSM and ACE modules on Cisco 6509 distribution switches.
• Implemented firewalls using Cisco ASA, Cisco PIX, Check Point Provider-1 /SiteManager-1 NGX R65, Firewall-1/VPN-1 NGX R65 Gateways, Secure Platforms.
• Migration of all the PIX firewalls to ASA firewalls.
• Configuring, Administering and troubleshooting the Checkpoint, Palo Alto,Impervaand ASA firewall

TECHNICAL SKILLS

Cisco routers: 2600, 2941, 2960,3600, 3750, 7200, 7609, 12K and CRS-1

Cisco switches: Cisco 3550, 3750, 45XX, 65XX series

Alcatel Lucent: ALU 7670 RSP, ALU7750 SR, ALU 7705 SAR, ALU RNC 9370, ALU HDM, ALU access layer Omni switch ALU layer 3 Omni switches, ALU 9500 MPR

Ericsson: RBS 3418/3518, RNC 3810/3820, RBS 2106/2206

Switching: LAN, VTP, STP, PVST+, RSTP, Inter VLAN routing & Multi-Layer Switch, Multicast operations, Layer 3 Switches, Ether channels, MPLS

Network Routing Protocols: OSPF, EIGRP, BGP, RIP-2, VRRP, HSRP, Policy Based Routing, Route Filtering, Redistribution, Summarization, Static Routing

Security: ACL, IPsec, VPN, Port-security, Zone-Based Firewalls, NAT/PAT, Ingress & Egress Firewall Design, VPN Configuration, Internet Content Filtering, Load Balancing, IDS/IPS, URL Filtering

Load Balancer: F5 Networks (Big-IP), ACE

IP Services: L2VPN, L3VPN, VPLS, VPRN, QOS

WAN: Frame Relay, ISDN, PPP, ATM, MPLS, exposure to DS1, DS3, OC3, OC12, T1 /T3 & E1/E3

Network Management: SNMP, Cisco works LMS, Cisco MWTM, ALU 5620 SAM

Reports: Microsoft Visio, Microsoft Excel, Microsoft Word

NEXUS Features: VDC, VPC, VRF, FEX, Fabric Path, F & M Series line cards

AAA Architecture: TACACS+, RADIUS, Cisco ACS

Firewalls: Cisco ASA 55XX series, Juniper SSG140, Checkpoint R75, R76

Operating Systems: Windows 2000/2003, Vista, 7, CISCO IOS

PROFESSIONAL EXPERIENCE

Confidential, Atlanta, GA

Sr. Network Engineer

Responsibilities:

• Responsible for Integrating, provisioning and maintaining 3G and 4G networks on various migration projects.
• Manage all Network and Firewall devices to include Cisco routers, switches, SSLs, VPNs, Checkpoint as well as content delivery networks (Cisco CSS, Citrix Netscaler and F5 BigIP LTM and GTM 1600 and 3400 load balancers) 4.5, 9x in a 24x7x364 enterprise environment.
• Work with the following routing/switching protocols: BGP, OSPF, EIGRP, LDP, HSRP, VRRP, GLBP, VTP, 802.1d, and 802.1q, ISL, VLAN’s and Port-Channels.
• Configure ALU 7705 SAR-H small cell router connected to the Internet through Modem and ISP router
• Verify the UDP ports are enabled on the customer firewall in case of shared backhaul connectivity for the internet traffic
• Configure the DHCP from the IP address pool provided by Confidential &T
• Configure switch ports connecting to the WAN and LAN networks with separate subnets and VLAN’s
• Configure the Static IP routes
• Troubleshooting with field technicians on access points, Small cell switches issues and backhaul connectivity issues with ISP
• Experience with Checkpoint Firewall policy provisioning.
• Implemented antivirus and web filtering on Juniper SRX 240 Confidential the web server. Configured OSPF, BGP, LDP on Cisco 12K and CRS-1 routers
• Configuring OSPF as the Routing Protocol between PE and CE routers. Worked on MPLS enabled Backbone
• Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000.
• Performing RAN Node Rehome to overcome overload capacity problem in RNC
• Configure control plane and data plane IP’s on RNC
• Implemented Access lists and policy mapping on Juniper router installed in each branch across all the states.
• Configured OSPF (L3), VLAN and BFD on MSN and SIAD for resiliency
• Discovering, monitoring and testing alarms on Network elements using various tools like Cisco MWTM & Alcatel-Lucent 5620 Service Awareness Manager (SAM)
• Performed circuit provisioning. Coordinated with engineering team and onsite technician for remote configuration of Cisco routers, switches, monitoring the cable design
• Configured Cisco ASA firewall in enterprise network (ASA 5510, 5520, 5550).Performed EVC testing on CISCO/ALU MSN&SIAD to verify the VLAN’s are delivered over Local exchange carrier (LEC) by performing ICMP test
• Verify the VLAN ID’s are allowed through Unicast filter in MSS in case of troubleshooting
• Monitor and Troubleshoot the Radio configurations in case of any packet drops by checking storm counters on MSN
• Responsible for provisioning IP backhaul and establishing Ethernet/IP connectivity between the MSN (Multi Service Nodes) and the SIAD (Smart Integrated Access devices) Confidential new cell sites via various service provider network by configuring Alcatel Lucent 7705 SAR / 7750 SR and Cisco 41
• Configured VLANs 101 Node B Telecom,102 Node B OAM, 103 Node B PTP with /30 subnets
• Verify the configuration of the VLAN’s as their subnets are broadcasted to MSN through OSPF by performing Ping tests from SIAD to MSN
• Configured OSPF, MPLS, PWE3 circuits, BFD, QoS, creating VC/VP’s and assigning traffic parameters according to the target profile
• Verification, Validation, Monitoring and Documentation after every day’s work by checking KPI
• Troubleshoot IP routing, SONET, ATM circuit problems with carriers and customers
• Keeping track of the customer network Confidential NOC 24x7, Prepare forecasts of network traffic and capacity, and recommend modifications to the network configurations which reduce costs or improve quality of service
• Providing on-site training for the newly hired employees and Providing Tier-3 support for Off shore team
• Troubleshooting problems on a day to day basis & providing solutions that would fix the problems within their Network
• Preparing various project reports for identifying areas of obstruction, conducting troubleshooting to rectify the network
• Ensuring execution of preventive maintenance of networks, including schedules maintenance to ensure trouble free and seamless operations
• Assisting in the execution of technical meetings with clients for requirement gathering and troubleshooting all kinds of problems

Confidential, Bowie, MD

Sr. Network Engineer

Responsibilities:

• Troubleshooting firewall and ACL related connectivity issues.
• Designing, Installation and configuration on Checkpoint, ASA, Net Screen and Juniper Firewalls.
• They improve the overall performance of applications by decreasing the burden on servers associated with managing and maintaining application and network sessions, as well as by performing application-specific tasks using F-5 load balancer.
• Assist in identifying customer-specific requirements and provide solutions.
• Answer questions about the product capabilities, features and configuration.
• Assist customer team with the design and placement of Palo Alto Networks devices.
• Secure calls using standardized protocols (such as Secure Real-time Transport Protocol). Most of the difficulties of creating a secure telephone connection over traditional phone lines, such as digitizing and digital transmission, are already in place with VoIP. It is only necessary to encrypt and authenticate the existing data stream.
• Develop and maintain network configuration, documentation, industry best standards and practices.
• Participate in technical discussions (internal and external).
• Work closely with the base personnel to ensure all network devices are monitored properly.
• Be familiar with Security Technical Implementation Guides (STIGS).
• Designing, Installation and configuration of ACL's and firewall Filters on Cisco and Juniper Routers.
• Troubleshooting MPLS circuits, VPN and SSL VPN connectivity.
• Designing, Installation and configuration of MPLS circuits, VPN and SSL VPN connections on checkpoint Firewalls, Juniper & Net Screen VPN Boxes.
• Configuring IPsec VPN connections, encryption algorithms & VPN domains on checkpoint R75.
• Working Troubleshooting with the TCP dumps and wire shark.
• Configuring, troubleshooting and managing secure web content gateways and filters like Blue Coat and Websense.
• Working on Active Directory to add users to new groups and change user's policy
• Working on RSA 2 Factor, AAA & Radius
• Working on IPS and IDS (source fire and fire eye)
• Working on tools and devices Aruba & CADA to assign roles, policies to devices and users.
• Configuring and deploying Cisco NAC & Cisco ISE
• Working on Cisco NAC & ISE to authorize users based on protocols PEAP and EAP-TLS, also manage and monitor user's access privileges.
• Immediate troubleshooting of the alerts and applying a fix individually or escalating it to different teams for the quick resolution of the alerts without letting any Data Center and/or Servers down.
• Managing and configuring Networks of 10,000+ networking devices with collaboration and support from several different Teams.
• Working and completing different types of ticketing tools like JIRA, CM, SC and SR with SLA time period.
• Had hand on VoIP reduced the income generated by the state owned telecommunication company
• Creating databases for known errors and problems in the work.
• Creating Security operation procedure manuals for different security operations for future reference and training purposes.
• Preparing document manuals for the new work procedure, keeping records of work done and updating work logs and trackers.
• Promoting team work by helping peers in daily work and improve the entire productivity output

Confidential, IL

Network Engineer

Responsibilities:

• Interacting with clients, understanding their needs & providing technical support to clients by remotely accessing their networks & troubleshooting the issues raised.
• Developing technical design documentation of new data center connectivity based on common design standards.
• Designing structured cabling and rack-layout’s for new datacenter
• Configuring Power PDU’S and Digi console in data center environment.
• Updating all sever and network design documentation for each project worked, ensuring accuracy.
• Coordination of equipment replacement for service restoration
• Vendor escalation, chase 3rd party vendors and suppliers for regular updates and escalate where necessary
• Troubleshooting of all sever and network/firewall Incident reported by Service Desk. As well as working on Service requests.
• Ensures connectivity and communication among networks, servers and clients inside and outside the department
• Change management responsibilities, ensure all change procedures are followed properly Documentation and reporting
• Upgrading Cisco IOS on routers
• Configuring VLANs in Cisco Switches with Inter-VLANs routing with VTP (VLAN Trucking Protocol)
• Configuring cisco 6509 switches in core level.
• Set up network infrastructure with fail over mechanism
• Configuring ether-channel on cisco switches
• Configuring IPsec vpn tunnels in cisco ASA firewalls
• Planning, installation, configuration and ongoing maintenance of wired networking infrastructure including routers, switches, and configuring all necessary LAN / WAN protocols in support of wireless infrastructure.
• Configuring, managing and troubleshooting networks using routing protocols like RIP, EIGRP and OSPF (Single Area and Multi Area).
• Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client.
• Perform routine network maintenance checks as well as configure and manage printers, copiers, and other miscellaneous network equipment.
• Troubleshot the issues related to routing protocols.

Confidential, Owatonna,MN

Network Engineer

Responsibilities:

• Experience working with ASR 9000 series switches with IOS-XR
• Configuring various advanced features (Profiles, monitors, IRules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIGIP appliances SSL termination and initiation, Persistence, Digital Certificates, Executed various migration/upgrade projects across F5 and hands on with F5 BIGIP LTMs/EM.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience
• Experience working with design and deployment of MPLS Layer 3 VPN cloud, involving VRF, Route Distinguisher(RD), Route Target(RT), Label Distribution Protocol (LDP) & MP-BGP
• Experience working with migration from 6500 series devices to 4500 Series switches in Campus deployments Confidential Core, Distribution and Access Layers.
• Experience with LAN protocols like STP, RSTP, MST, VTP, VLAN and Port Channel Protocols like LACP, PAGP
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500 with ACL, NAT, Object Groups, Failover, Multi-Contexts
• Worked onJuniperMX480, MX960.
• Implementation, configuration and support of Checkpoint and ASA firewalls for multiple clients
• Experience with migrating from Cisco ASA 8.2 version to Cisco ASA 8.4 Version
• Responsible for Cisco ASA firewall administration across our global networks
• Migration of existing IPSEC VPN tunnels from one Data Center to another Data Center, due to decom of existing Data Center, which involved working with Partner Companies.
• Experience with converting WAN routing from EIGRP/OSPF to BGP (OSPF is used for local routing only) which also involved converting from Point to point circuits to MPLS circuits.
• Rebuilding data centers and redundant sites for failover, F5 load balancers
• Responsible for layer 2 securities which was implemented using a dedicated VLAN ID for all trunk ports, setting the user ports to non-trucking, deployed port security when possible for user ports
• Acting as a tier 3 technical support engineer for all Juniper Screen OS andJun OS-based SRX.
• Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN
• Experienced withJuniper: EX-2200, EX-4200, EX-4500,MX-480 and M Series, SRX210 and SRX240.
• Implement and configured VRRP/GLBP (on distro/core switching), HSRP on different location of office on the switched network and managing the entire multilayer switched network
• Experience in Configuring, upgrading and verifying NX-OS operation system with OSPF, BGP
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP
• Implemented Site-to-Site VPNs over the internet utilizing 3DES, AES/AES-256 with ASA Firewalls
• Responsible for managing activities, Upgrading IOS - Upgrading hardware and installing new devices, Tuning (Configuration), make standardization for the topology Configured, installed, & managed DHCP, DNS, & WINS servers

Confidential, Montebello, NY

Network Engineer

Responsibilities:

• In-depth expertise in the implementation of analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems.
• Configured and troubleshoot OSPF and EIGRP.
• Planning and configuring the routing protocols such as OSPF, RIP, and Static Routing on the routers.
• WAN Infrastructure running OSPF & BGP as core routing protocol.
• Support various Routers like 2600/3600/7200 series routers.
• Tested authentication in OSPF and BGP.
• Performed and technically documented various test results on the lab tests conducted.
• Hands on Experience working with security issue like applying ACL’s, configuring NAT and VPN
• Responsible for Internal and external accounts and, managing LAN/WAN and checking for Security
• Work on different connection medium like Fiber and Copper Connectivity.
• Knowledge of Juniper environment including SRX/JunosSpace.
• Installed and configured Cisco ASA 5500 series firewall and configured remote access IPSEC VPN on Cisco ASA 5500 series
• Responsible for Configuring SITE TO SITE VPN on VPN Concentrators series between Head office and Branch office.