SUMMARY

• Having 7 + years of experience as Network Engineer in routing, switching, system design, implementation and troubleshooting of complex network systems as well as understanding on firewall technologies.
• Strong hands on experience in installing, configuring, and troubleshooting of Cisco ASR9K, ASR1004, 7600, 7200vxr, 3800, 3600, 2800, 2600, and 1800 series Routers, Cisco Catalyst 6500,4948,4510,4500 - x, 3750x, 2960s and 3560XL series switches and also on Nexus series switches
• Familiar with switching protocols VTP, ISL/ 802.1q, IPSec, VPN Tunneling, VLANs, Ether Channel, Trunking, Port Security, STP and RSTP.
• Well Experienced in configuring protocols HSRP, GLBP, ICMP, IGMP, PPP, PAP and SNMP.
• Experience working with Nexus 7010, 5020, 2148, 2248 devices.
• Extensive experience in configuring and troubleshooting of routing protocols RIP v1/v2, EIGRP, OSPF and BGP.
• Good knowledge with the technologies VPN, WLAN and Multicast.
• Extensive Experience in WAN Technologies, Switching Technologies along with Failover Mechanisms & Inter VLAN Routing types.
• Worked on network topologies and configurations, TCP/IP, UDP, Frame Relay, bridges, routers, hubs and Switches.
• Knowledge on Cisco Firewalls, Cisco PIX (506E/515E/525) & ASA 5500(5510/5540) Series.
• Involved in design and deploying various network security & High availability products like Cisco ASA and other security products.
• Experience in configuring Site-to-site and remote access VPN solutions.
• Extensive knowledge of low latency design and implementation for trading systems
• In depth understanding of IPV4 and implementation of Subnetting.
• Excellent communication skills, Enthusiastic, motivated and a team player.
• Experience with Change management process and Project documentation tools like Excel and VISIO.
• Played various customer interaction roles in various capacities, across projects in different areas.
• A highly organized individual who adopts a systematic approach to problem solving, effectively analyzes results and implements solutions.
• Highly motivated with the ability to work independently or as an integral part of a team and Committed to highest levels of professional.

TECHNICAL SKILLS

Protocols: RIPV1/ V2, EIGRP, OSPF, BGP, HSRP, VRRP, GLBP, LACP, PAGP, DNS, SMTPSNMP, FTP, TFTP,LPD/ TDP, WLAN, 802.11/802.11 e, WEP, POP3 LADP.

LAN Technologies: Workgroup, Domain, HSRP, DHCP, Static, VLAN, STP (Spanning Tree Protocol), VTP, Ether Channel, Trunks.

WAN Technologies: Leased Line, Frame Relay, ISDN, PPP, HDLC, ATM, SONET, Metro Ethernet.

Network Products: CISCO Routers 1700, 1800, 2500, 2600, 2800, 2811. CISCO High End Router 3600, 3800, 7600, 7200vxr,12010. CISCO Switches 1900, 2950,2960. CISCO Campus switches 3550XL, 4984 Core Catalyst 4500 series, Catalyst 6500/6503/6507 , f5 load balancer.

Security & VPN: PIX 500 Firewall, ASA 5505 Firewall,Fort iGATE, CISCO CSM, ACL- Access Control List, IPS/IDS, NAT, PAT, CISCO ACS, Check point, SonicWALL, RSA Secure ID, pfSense (Linux based firewall), socks proxy, HTTP proxy, IPsecSSL VPN.

Authentication: RADIUS, TACACS+, Digital certificates.

Monitoring Tools: Wireshark, Nmap, Nessus, OpManager, PRTG Packet Sniffer, and Infoblox.

PROFESSIONAL EXPERIENCE

Confidential, Chicago, IL

Sr. Network/Datacom Engineer

Responsibilities:

• IP RAN Network Support(Installation and commissioning IP-RAN routers)
• Implementation of solutions for Redundancy and Load sharing and Traffic Congestions for IP RAN Routers.
• Supporting Etisalat Network regarding any expansion for 2G and 3G services
• Responsible for Swapping and upgrading all IP RAN Routers in BSC rooms and RNC rooms from NE40 to NE40E.
• Network Support and Maintenance for IP RAN Routers
• Deep Understanding and Knowledge for Datacom Product Switches S93XX and S5328 Series and Routers NE40 and NE80 and NE20 Series
• Providing the customer with LLD services.
• Implementation and upgrading core and distribution layer including multiple server farms silos with Nexus 5K and 7K.
• Deployment of Cisco Nexus 7k, 5k and 2K along with ASR 9K, 6509s (Sup 720), Cisco 4900, 3750, 2960 switches.
• Experience configuring Virtual Device Context in Nexus 7010
• Configuration of routing protocols OSPF, BGP and policy based routing
• Providing support for the Layer 2 and Layer 3 devices in the Network.
• Perform IOS upgrades in Cisco Routers and Switches including Nexus 3K and 5K.
• Design OSPF Areas for reliable Access Distribution and for Core IP Routing.
• Redistribution of routing protocols - OSPF to BGP and BGP to OSPF.
• Network Migration from Layer2 to Layer3 at access level.
• Implementation and configuration of VPN Tunnels.
• Implementing, Monitoring, Troubleshooting and Convergence in Frame-Mode MPLS in the core.
• Load Balancing usingF5 Networks Big IP
• Implemented and maintained Big-IP F5 load balancing solution across multiple datacenters
• Created security policy according to user’srequirement in Cisco ASA-5580 firewall using CLI & GUI
• Configured HSRP and VLAN trunking 802.1Q, VLAN routing on catalyst 6500 switches
• Configured BPDU Guard, port-fast, uplink fast and other spanning tree features
• Study single point failures & design WAN structure in such a way that there are no failures in network in case of any device or link failure
• Setting up VLANS and configuring inter-VLAN routing, Trucking, STP, RSTP, port aggregation & link negotiation on Ethernet channel between switches
• SRX 650 as an Internet gateway, features implemented include NAT, IDP/IPS, Screening, IPSec VPN, ALG, UTM (Spam filter, Webfilter, Antivirus Engine, Content Filter). AppSecure Services (Application Firewall).
• Troubleshoot and Worked with Security issues related to Cisco ASA/PIX, andIDS/IPS firewalls
• Maintain Palo Alto and Cisco firewalls and VPN connectivity associated with mobile employees and tunnels to remote facilities.
• Monitor and enhance perimeter security. Produce and distribute various system availability reports, and conduct follow-up meetings with management as required
• Systems Administration and Support of Remote Office locations.
• Implementation of TCP/IP and related services - DHCP/DNS
• Perform Wireless Administration and troubleshooting for the corporate Wireless infrastructure.
• Build Logical design and Implementation of Wireless Solution
• Working on various 802.11x technologies for additional regulatory domains, Quality of Service, Inter Access Point Protocol etc.
• Performed day to day network operations using Remedy and HP Service Manager tool for ticketing system and change management.
• Policy provisioning, access to specific segments of the networks through Cisco ISE.
• Engineered, configured and deployed routers using Cisco ISE.
• Installed Wireless Access Points WAPs at various locations in the company

Confidential, San Francisco, CA

Sr. Network Engineer

Responsibilities:

• Installing, Configuring and troubleshooting Cisco Routers (ASR1002X, 3945, 3845, 2800, 3600) and Switches to perform functions at the Access, Distribution, and Core layers.
• Configuring Virtual Device Context in Nexus 7010.
• Working with Cisco Nexus 2148 Fabric Extender and Nexus 5500 series to provide a Flexible Access Solution for datacenter access architecture.
• Manage performance tuning of trading platform and low latency infrastructure
• Design, Install, and Maintain Server access farms in multiple silos.
• Work with Engineering on Server Farm refresh project on consolidation and increasing the bandwidth on Server Access silos.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Configure BGP features such as as-override, Local pre, EBGP load sharing on client connections
• Configured and resolved various OSPF issues in an OSPF multi area environment between multiple branch routers.
• Upgrade the existing HSRP with new GLBP standard and load sharing between VLANs
• Configuration UDLD, Loop guard, IP source guard, BPDU guard and other spanning tree features on cisco switches.
• Configure trunk ports and implement granular control of VLANs and VXLANs using NX-OS to ensure virtual and flexible subnets that can extend further across the network infrastructure than previous generation of switches.
• Configure port-profiles as part of the NX-OS command structure that allows for configuration of multiple ports and port-types via inherited configurations applied via a single command that reduces administrative error and allows for better configuration readability.
• Implementing the necessary changes such as adding, moving and changing as per the requirements of business lines in a data center environment
• Configuring and implementing F5 BIG-IP, load balancers to maintain global and local traffic
• Experience installing, upgrading and supporting Check Point.
• Worked on Infoblox for creating the DNS entries, A records and CNAMEs
• Worked on Riverbed devices for WAN bandwidth Optimization in the data centers for the sensitive market data applications
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Integrated WAN links between sites using multipoint connections to establish connectivity between each of the four sites as required.
• Configured EIGRP MD5 Message Authentication between sites to prevent unauthorized insertion of routes into the domain. Integrate manual EIGRP route summarization.
• Configure and administrated OSPF routing with multiple areas for networks between sites. Implement OSPF MD5 Authentication between each OSPF enabled subnet to prevent unauthorized insertion of routes into the domain.
• Integrated static NAT/PAT to provide access to services located on a server in the private network to the public network. Implement standard and extended access-lists to filter network traffic.
• Worked on multiple projects related to Branch networks, Campus networks, extranet clients and Data Center Environments involving in data center migrations from one data center to another.
• Provided estimated bandwidth requirements for data replication, to best determine adequate timing for migration service levels
• Created data migration strategies to help with completion of migration of data center from one point to another.
• Configured backup and recovery of Cisco IOS Images. Perform password recovery on Cisco IOS routers/switches to restore administrative access. Backup and Restore startup-comfit file for disaster recovery.
• Configured and administrated an IPsec Site-to-Site VPN.
• Configured and administrated Zone-Based Policy Firewall on the Cisco 1841 ISR with the following components: three zones, class-maps specifying traffic that must have policy applied as it crosses a zone-pair, policy maps to apply action to the class-maps’ traffic, zone-pairs, and application of policy to zone pairs.

Confidential, Franklin Lake, NJ

Network Engineer

Responsibilities:

• Experience in configuring Site-to-site and remote access VPN solutions.
• Installed and configured Cisco 7200 series router and Cisco 2950, 4500, 6500 Series switches.
• Configured network using routing protocols such as RIP, OSPF, and BGP and troubleshooting L2/L3 issues.
• Worked on multiple projects related to Branch networks, Campus networks, extranet clients and Data Center Environments involving in data center migrations from one data center to another.
• Provided estimated bandwidth requirements for data replication, to best determine adequate timing for migration service levels
• Created data migration strategies to help with completion of migration of data center from one point to another.
• Configuration of Cisco 6500 (sup 720), 4500 (SUP 6) & 3750 Catalyst Switches for network access.
• Worked extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.
• Configuring RIP, OSPF and Static routing on Cisco Routers
• Configuring VLAN, Spanning tree, VSTP, SNMP on EX series switches
• Time to time upgrade network connectivity between branch office and regional office with multiple link paths and routers running HRSRP, EIGRP in unequal cost load balancing to build resilient network.
• Design and implement Catalyst/ASA Firewall Service Module for various LAN’s.
• Key contribution includes troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF, & BGP.
• Configured Client VPN technologies including Cisco’s VPN client via IPSEC.
• Configuring ACL to allow only authorized users to access the servers.
• Participated in on call support in troubleshooting the configuration and installation issues.
• Installation, maintenance, troubleshooting local and Wide Areas Network (ISDN, DDR, NAT, DHCP, TCP/IP).
• Provided technical support in terms of upgrading, improving and expanding the network.
• Providing technical security proposals, detailed RFP responses, and security presentation, installing and configuring ASA firewalls, VPN networks and redesigning customer security architectures.

Confidential

Network Engineer

Responsibilities:

• Configuring and troubleshooting multi-customer ISP network environment.
• Involved in network monitoring, alarm notification and acknowledgement.
• Implementing new/changing existing data networks for various projects as per the requirement.
• Troubleshooting complex networks layer 1, 2(Point to Point, ISDN) to layer 3 (routing with MPLS, BGP, EIGRP, OSPF and RIP protocols) technical issues.
• Used Wireshark for network packet capture.
• Providing support to networks containing more than 2000 Cisco devices.
• Performing troubleshooting for IOS related bugs by analyzing past history and related notes.
• Carrying out documentation for tracking network issue symptoms and large scale technical escalations.
• Managing the service request tickets within the phases of troubleshooting, maintenance, upgrades, fixes, patches and providing all-round technical support.
• Commissioning and Decommissioning of the MPLS circuits for various field offices.
• Preparing feasibility report for various upgrades and installations.
• Installation and maintenance of new network connections for the customers.
• Configuring all the required devices and equipment for remote vendors at various sites and plants.
• Installing new equipment to RADIUS and worked with MPLS-VPN and TACACS configurations.
• Installing and maintaining local as well as network printers.
• Validating existing infrastructure and suggesting new network designs.
• Working on creating new load balancing policies by employing BGP attributes including Local Preference, AS-Path and Community, MED.
• Installing and maintaining Windows NT Workstations and Windows NT Server.
• Providing technical support to LAN & WAN systems.
• Monitoring Memory/CPU on various low end routers in a network.