SUMMARY

• Over 10+ years of experience in routing, switching, firewall technologies, systems design, and administration and troubleshooting.
• Sound knowledge in LAN/WAN setup, installation, configuration, and troubleshooting.
• Experience of routing protocols like EIGRP, OSPF, RIP, BGP, and MPLS.
• Strong hands - on experience in Troubleshooting for QOS, connectivity, and hardware problems on Cisco Networks.
• Extensive experience with Cisco IOS, Windows client/server operating systems, Linux, Networking technologies, Firewalls.
• Worked on Cisco ASA, of Cisco (AAA) ACS server.
• Experience in installing, configuring, and troubleshooting of Cisco Nexus 7k, 5k, 2k, Cisco 7600, 7200, 3800, 3900, 2800, 2900 series Routers, Cisco Catalyst 6500, 4500, 2960 and 3750 Stack Switches.
• Deployed site-to-site VPNs over IPsec and GRE.
• Experience in configuring L2/L3 protocols like VLANS, STP, VTP, MPLS and Trunking protocols.
• Designed and deployed highly available LAN/WAN infrastructure.
• Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX Firewalls (SRX240, SRX550).
• Good knowledge in WAN Technologies like ACL, NAT, and PAT, IPSec, and VPNs.
• Worked in OSI model, TCP/IP, UDP, IP addressing and Sub netting. working knowledge on SD-WAN (Viptela), SD-LAN and WAN optimization technologies for efficient delivery of teh application data across LAN and WAN
• Monitor teh network traffic through Orion Solar Winds and Spectrum syslog server.
• Plan, survey, design, deploy, implement Cisco Meraki wireless managed network infrastructure.
• Knowledge on CISCO VIPTELA SD-WAN Architecture/Design
• Lead teh IWAN (Intelligent WAN - Cisco SD-WAN) and VPN (Secure Transport) for enterprise networks working with Cisco ISR 4k,1k routers
• Good Understanding of IPS/IDS, Proxies, encryption, FireEye, ASR and CRS routers and teh configuration of MPLS, VRF's and BGP.
• Working knowledge with Load Balancers F5 LTM like 3900, 6900 for various application.
• Interconnecting existing DC network infrastructure to newly deployed ACI fabrics in order to allow applications to be gradually migrated from one infrastructure to another, ideally in a non-disruptive manner.
• Knowledge of Intrusion Detection, DMZ, encryption, IPsec, proxy services, Site to Site VPN tunnels, MPLS/VPN, SSL/VPN
• Working knowledge of network monitoring/management tools like Wireshark, TCP dump, Cisco Prime, Net Flow, PRGT, Solar Winds.
• Extensive experience in configuring Palo Alto Networks 2000, 4000, 5000.
• Experience with design and implementation of Data center migration and ACI.
• Experience with SD WAN and SDN (VMware NSX) vSphere and Cisco ACI
• Strong understanding of Infoblox tool, to ensure high performance of Network services like DDI.
• Working knowledge experience in Check Point, Fortinet, Palo Alto Firewalls, Bluecoat proxies.
• Working knowledge with automation frameworks such as Ansible
• Have a good knowledge Nagios and experience in monitoring tool like Splunk, AppDynamics, Grafana, Grafite.
• Worked on Juniper Net screen Firewalls like NS50, SSG 550M, SSG520M, ISG 1000, and ISG200.
• Deployed Cisco Wireless Controller Cisco 5760, 5500 series.
• Highly enthusiastic, creative team player, project implementation, analytical, interpersonal and communication skills.
• Troubleshoot teh Network Issues onsite and remotely depending on teh severity of teh issues.

TECHNICAL SKILLS

Routers: Cisco GSR12016, ASR1001, 2900, 3900, 7200, 7600 & ASR9000, Juniper M320, MX80, MX960, And MX480

Firewalls: Juniper, Cisco ASA, Checkpoint

LAN Technologies: VLAN, VTP, Inter-VLAN routing, STP, RSTP, PVST, 802.1x

WAN Technologies: Frame Relay, ISDN, ATM, MPLS, PPP, Channel & Leased lines

Network Securities: NAT/PAT, VPN, Filtering, Load Balancing, IDS/IPS, IPsec, ACL

Routing Protocols: RIP, IGRP, HSRP, EIGRP, OSPF, IS-IS, BGP, OMP

Routed Protocols: TCP/IP, IPX/SPX

Infrastructure Services: DHCP, DNS, SMTP, POP3, FTP, TFTPNetwork Managements SNMP, SSH, Telnet, ICMP

Configuration Mgmt Tool: Ansible, Cisco SD-WAN(Viptela)

IP Telephony: VOIP, FXO/FXS/E&M/T1/ISDN/ PRI, Call manager Express.

Operating Systems: Windows Vista/XP/NT/2003, MS DOS, UNIX, Linux

Packages: Visual Studio 2008, OPNET, MATLAB, CAD, Flash, Dream weaver.

Ticketing tool: Service NOW, JIRA, REMEDY

Cloud Technologies: Open Stack, AWS.

Tools: Wireshark, Tcpdump, VMware, Nessus, Solar winds, Cisco ISE, Splunk

Scripting Languages: Bash, Python and Perl.

PROFESSIONAL EXPERIENCE

Confidential, Los Angeles, CA

Senor Network Engineer

Responsibilities:

• Responsible for maintenance and utilization of Vlans, Spanning Tree, HSRP, VTP of teh switched multi-layer backbone with catalyst switches. Performing IOS upgrading on catalyst c2960, c3550, c3750, c4510, c4948, c6500.
• Design, install, upgrade, configure and repair local and wide area network hardware and resolve infrastructure issues.
• Proactive monitoring and root cause analysis.
• Configure site-to- site VPN and client-to- site VPN on Palo Alto firewall, Juniper and Cisco ASA.
• Apply access lists and NAT configurations based on implementation guidelines.
• Create VLAN and Inter-Vlan routing with Multilayer Switching.
• Migration of core DNS, DHCP and NTP services from Microsoft to Infoblox.
• Worked on various Cisco Nexus 9K's extensively for ACI based deployments.
• Knowledge of working on ACI Fabric Layout with Leaf-Spine topology, set up prod and test ACI Environments.
• Involving in teh configuration & troubleshooting of routing protocols: MP-BGP, OSPF, EIGRP, RIP, BGP v4.
• Monitor and implement network security solutions to protect against known and unknown threats.
• Supporting and implementing Aruba Wireless networks and Palo Alto firewalls.
• Design, implement and support teh network deployment of Aruba Clear Pass Network Access Control Solution.
• Designs, configures and tests network components to meet teh business and application requirements.
• Installed and implemented & troubleshoot teh Network Virtualization through VMware and NSX.
• Utilizes network software and hardware components to maintain, monitor and troubleshoot network infrastructures, components and communications to ensure teh agreed and accepted levels of performance, security, service and availability are maintained.
• Generating RFC (Request for Change) as per changes needed to implement on devices and getting approved by higher management
• Involving in teh configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
• Assisting in Planning, design, documentation and implementation phases of project systems to including Servers, Network equipment, PC & Software applications. Probing and troubleshooting Layer 2,3 switching and routing protocol issues
• Migrated vendor IPSec VPN tunnels from existing Juniper SRX firewall to Palo Alto firewalls as part migration projects.
• Added routes and updated interface configurations on Juniper SRX firewalls as required.
• Updated policies, NAT rules, Zones on Palo Alto firewalls and pushed through Panorama.
• Troubleshooted issues related to Palo Alto firewall and Panorama connectivity.
• Added new Palo Alto firewalls to Panorama and pushed respective templates to new devices.
• Performed platform OS upgrades for all network equipment including Cisco, Arista switches and routers,
• Configured Cisco Switches and Palo Alto firewall for remote VPN sites.
• Responsible for troubleshooting of DNS, DHCP and other Static IP conflict problems
• Configuring/Troubleshoot issues with teh following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 Series), to include: bridging, switching, routing, Ethernet, NAT, and DHCP, as well as assisting with customer LAN, MAN, router/firewalls.
• Configured Cisco IOS Feature Set, NAT and Simple Network Management Protocol (SNMP) for Network Security implementation.

Environment: Service Now, Orion, Wireshark, Infoblox, Cisco PRIME, Cisco Secure ACS (TACACS) Servers, ScienceLogic Portal, TruView, Cisco WAAS, Aruba CM, Panorama PaloAlto, Splunk. Palo Alto 5020, 5060. Routing Protocols (EIGRP, RIP, OSPF, BGP), Juniper SRX, Juniper EX, SRX3750, 3550, 3560, 2924, 1400, 6509-V-E, 6513, 6504, 6503, 6506, 6500 series switches, Switching protocols (VTP, STP, GLBP), F5 Load Balancers (LTM)

Confidential

Senior Network Engineer

Responsibilities.

• Responsible for service request tickets generated by teh halpdesk in all phases such as troubleshooting, maintenance, upgrades, patches, and fixes with all around technical support.
• Design and deployment of MPLS QOS, MPLS Multicasting per company standards.
• Designing, configuring, implementing, and troubleshooting (LAN) VLAN’s, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.
• Worked extensively on firewalls and configuration of Cisco (AAA) ACS server, RADIUS and TACACS+ for VPN users and implementation of secured VPN on Cisco routers, PIX and VPN concentrator appliances.
• Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX Security appliance, Failover, DMZ zoning & Configuring VLANs/routing/NATing with teh Firewalls as per teh Design.
• Create, Delete and modify Security policies and troubleshooting traffic flows in checkpoint firewall.
• Hands-on experience on Cisco Network Hardware like Cisco switches, Cisco ISR G2/ASR routers, Cisco Wireless Access Points Platforms experienced configuring and deploying from scratch and fixing them with various modules like Gig card, VPN SPA Card, T1-WIC card and other modules.
• Worked Network Access Controls on L2 devices using Identity Service Engine (ISE).
• Design and implementation of multiple Cisco technologies. Cisco ISE, ISR/ASR 4331, 9K Routers, Nexus/Catalyst Switches, ASA Firewalls, VMware/vSphere.
• Design and support of 802.11WirelessLAN systemsAccesspoints, controllers.
• Implemented GLBP (on core switching and also for VPN redundancy), HSRP on different location of office on teh switched network and managing teh entire multilayer switched network
• Replace Campus Cisco End of Life hardware with new Cisco9300 and 9500 devices.
• Managed Websense Web Security,ACSserver (TACACS) autantication services.
• Researched, designed and replaced aging Checkpoint Firewall architecture with new next generation Palo Alto appliances serving as Firewalls and URL and application inspection.
• Performed platform OS upgrades for all network equipment including Cisco, Arista switches and Plao Alto Cisco ASA firewalls
• Configured and maintained IPsec and SSL VPN on Palo Alto Firewalls.
• Used juniper firewalls SRX3600, SRX 650 for WAN edge routers, configured route-based VPN and policy-based VPN and also chassis clusters with SRX 240.
• Experience working with JUNOS OS on Juniper Routers and Switches.
• Implemented GLBP (on core switching and also for VPN redundancy), HSRP on different location of office on teh switched network and managing teh entire multilayer switched network.
• Configured STP attack mitigation (BPDU Guard, Root Guard), using MD5 autantication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed.
• Configured, managed VMware NSX for vSphere and NSX for Multi-Hypervisor, including NSX Manager, NSX
• Negotiate VPN tunnels using IPSec encryption standards and configured and implemented site-to-site VPN, Remote VPN.
• Net flow configuration onNexus5k, 7k platform.
• Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering).
• Configuring and Maintaining Cisco Wireless LAN controllers, Access points
• Analyzing and closing teh Vulnerabilities found in teh Wireless using Airtight SpectaGuard.
• Provide troubleshooting support on global Firewall, IDS,LoadBalancing and Proxy infrastructure.
• Server load-balancing utilizing F5 LTM-BigIP, including, AFM,APMand ASM modules.

Environment: TACACS+, RADIUS, Solar Winds, Solaris, SSL, Juniper switches EX 2200, EX 2500, EX4200, EX4500, Juniper SRX, MX and Cisco Nexus 7k, 5k, Cisco 12000/7200/3845/3600 routers, Cisco ASA5520, Fortinet firewalls, Open Stack, VMware, Cisco AIR-CAP2602I-E-K9, Checkpoint, F5 Load Balancers (LTM)

Confidential

Network Engineer

Responsibilities:

• Provides 24/7 support for day-to-day global operational activities including change Implementation, handling Work Order Access Request, High Priority Incident Handling/Troubleshooting for Security Devices (Firewalls, Proxies, IPS, SSL, VPN Devices etc.) and deploying F5 Load Balancers for load balancing and traffic management of business application.
• Worked on Multi-vendor platform with Check Point, Fortinet and Cisco firewalls requesting net flow for security compliance, coding, and pushing firewall rules after approval and troubleshoot incidents.
• ImplementedSNMPon Cisco routers to allow network management. Completed teh installation and Configuration of CSU/DSU, T1, T3 & OC3 circuits.
• Created Standard and extended access lists on Firewalls and Cisco ISR’s to allowSNMP, NTP and logging server’s traffic.
• Unix/Linux Shell scripting skills, as well asPythonautomation, and analyzing logs using Perl.
• Administration and L3 support of our Infoblox DDI deployment and F5 GTM's and configuring various advanced features (Profiles, monitors, I Rules, Redundancy, SSL Termination, Persistence, SNATs, and HA) on F5 BIG IP appliances.
• Knowledge of working on ACI Fabric Layout with Leaf-Spine topology, set up prod and test ACI Environments.
• Hands-on experience in some of areas in HSRP, QoS, SSL VPN/Ipsec VPN, Wireless technologies, DHCP management, Firewall skills and MPLS services framework.
• Experience designing and implementing load balancing solutions for large enterprises working on F5 load balancers and Cisco load balancers.
• Performed configuration of Fabric path and connectivity between Nexus 5K and Nexus 7k and configuration and installation of Nexus 5k, 7k along with upgrading Nexus OS and performed substantial lab testing & validation prior to implementation of Nexus 7K, 5K & 2K
• Experience configuring Virtual Device Context in Nexus 7010 and worked on F series module on Nexus 7010 and implemented L3 SVI's and L2 VLANs, Inter VLAN Routing and HSRP configuration in Nexus on F series module.
• Monitor teh network traffic through Orion Solar winds and Spectrum syslog server.

Environment: McAfee EPO, F5 Load Balancers LTM and GTM modules, NGX R55 and R65, Cisco ASR 9K, Fortinet, Forti Analyzer, Blue Coat, Nexus 9396, 7010,5548, 5520, 2248, VPC, VDC, VRF, VSS, Alcatel 7750, Cisco ASA, BGP, VPLS, OSPF, EIGRP, QOS, VPM, Solar winds Orion NPM.

Confidential

Network and Systems Engineer

Responsibilities:

• Worked on ONOS to test teh device drivers and device discovery from ONOS for controlling teh Equipment through controller.
• Responsible for designing and deployment of MPLS Traffic Engineeringand configuring RIP, OSPF, EIGRP BGP, MPLS, QOS, ATM and Frame Relay.
• Established IPSec VPN tunnels between branch offices and headquarter using Juniper SRX Firewall.
• Services expert responsible for effectively communicating, educating, and positioningInfoblox service programs within teh partner community and customer base.
• Configured and designed LANnetworkswith Access layer switches such as Cisco4510, 4948, 4507 switches.
• Maintenance of NTP, Net brain and terminal servers.
• Responsible for implementing of lean initiatives, training and supervision of new IE Techs forriverbed
• Installation and maintenance of Cisco Layer 3 switches 3750, 4500X, 6500 and Cisco 3550/4500/6500 switches in multi VLAN environment.
• Expertise in teh administration, support and operation of teh Orion Solar Winds platform including Network Performance Monitoring (NPM), Network Configuration Manager, Server & Application Monitor (SAM), NetwFlow, Traffic analyzer and IP address Manager.
• Responsible for Check Point, Cisco ASA and Palo-Alto firewalls configuration and administration across global networks for providing IPS/IDS.
• Upgrade of Juniper firewalls and management servers from SRX 3750 to SRX 6509.
• Worked in Network building and Network infrastructure management team.
• Hand on Experience in configuration and implementation of various Cisco Routers and L2 Switches.
• Experience with Remedy ticketing system in resolving tickets related to routing and Switching.
• Configuration of EIGRP and OSPF as interior gateway protocol with route filtering and route redistribution.
• Coordinated with senior engineers with BGP/OSPF routing policies and designs, worked on implementation strategies for teh expansion of teh MPLS VPN networks
• Worked on Frame Relay, ISDN, PPP, HDLC, Network Troubleshooting using CLI Show commands, PING, Trace route, telnet.
• Configuring STP for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to teh switches.
• Involved in group & individual presentations to corporate clients about teh company’s internet based products like leased lines and modular routers.
• Worked with level-2 team on migration project of CMA's from one Provider-1 to other Troubleshooting and Configuration of Cisco ASA 5580, 5540, FWSM, firewalls for all teh agencies connecting to Citynet.
• Worked on changing global objects and global rules to local objects and local rules for migration project.

Environment: In Corporate office architecture with highly reliable & secured network including) Palo Alto 5020, 5060, Checkpoint 41K and 61 K series, Routing Protocols (EIGRP, RIP, OSPF, BGP), Juniper SRX, Juniper EX, SRX3750, 3550, 3560, 2924, 1400, 6509-V-E, 6513, 6504, 6503, 6506, 6500 series switches, Switching protocols (VTP, STP, GLBP), Cisco ESA.

Confidential

Network Engineer

Responsibilities:

• Worked in Network building and Network infrastructure management team.
• Hand on Experience in configuration and implementation of various Cisco Routers and L2
• Switches.
• Provide alternative means from dial-up connection to bring down teh damage or loss dat occurs for teh client.
• Experience with Remedy ticketing system in resolving tickets related to routing and Switching.
• Configuration of EIGRP and OSPF as interior gateway protocol with route filtering and route redistribution.
• Coordinated with senior engineers with BGP/OSPF routing policies and designs, worked on implementation strategies for teh expansion of teh MPLS VPN networks
• Worked on Frame Relay, ISDN, PPP, HDLC, Network Troubleshooting using CLI Show commands, PING, Trace route, telnet.
• Configuring STP for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to teh switches.
• Involved in group & individual presentations to corporate clients about teh company’s internet based products like leased lines and modular routers.
• Configuring and applying QOS to 2600 series routers for all teh branches.

Environment: Wins XP/ 7, TCP/IP, WINS, DNS, DHCP, FTP, LDAP, IMAP, SMTP, POP3, Mail Servers