Sr. Network Security Engineer Resume
Redmond -, WA
SUMMARY
- Sr. Network Engineer with around 7 years of experience in designing, implementing, managing WAN and LAN networks
- Extensive experience in administration, engineering, and supporting for various technologies including proficiency in LAN/WAN, routing, switching, security, application load balancing and wireless.
- Designed and implemented router and layer 2 and 3 switches.
- Responsible for Firewall, Load Balancing and Wireless Infrastructure.
- Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.
- Experience with Checkpoint VSX, including virtual systems, routers and switches.
- Experience with DNS/DFS/DHCP/WINS Standardizations and Implementations.
- Configuration of Network and Security devices such as Cisco routers and switches (Cisco ASR 1K, 9K, … 7K/5K).
- Excellent in communication Network Design, Network Protocols and firewalls.
- Supported in troubleshooting and directing end users on issues ranging from database security, backup/restoration, to erroneous data issues, detailed networking issues, software change request/bug discovery and reporting.
- Execute DHCP, DNS, IPAM configure on the servers to allocate
- As part of Data Services team, was Lead on Disaster recovery planning, implementation, and testing.
- Extensive experience in Implementing, Configuration, Upgrades and Support of Checkpoint (NGX R65, R70 and R71), Juniper Firewalls (SRX5400, SRX5600, and SRX5800), Cisco Firewalls (ASA5525, ASA 5505, 5506 - X, 5585), Palo Alto Networks Firewall models (PA-2k, PA-3k, and PA-5 k).
- Implemented Site to Site, Upgraded Wireless LAN Controllers.
- Designed and implemented SSL Portal for outside customers.
- Installed, configured and monitoring of Checkpoint Firewall.
- Implemented All Firewalls for building accessing the internet.
- Streamlined server architecture and maximize usability for company and clients.
- Controlled costs by investigating upgrades and new technology before implementation.
- Managed multiple simultaneous customer design and risk avoidance projects.
- Repaired and restructured current servers as needed.
- Prepared reports on data center efficiency to improve function and reduce costs.
- Ensured that data center stays as immaculate as possible to prevent unnecessary damage to computer systems.
- Knowledge and hands-on experience on IP Addressing, Sub netting, VLSM and ARP, reverse and proxy ARP, Ping Concepts
- Network Technologies: RIP, OSPF, RADIUS, DNS and QOS
- Network Security, NAT, PAT, STP, VPN, Traffic Filtering
- Excellent knowledge in IP addressing on iPv4 and iPv6
- Completes logical and physical setup and configuration of routers, switches and access points.
- Kept all systems as updates as possible implementing any new technology where possible.
- Set up CAT5/6 & FC structured cabling - Cable trace, Crimp, FC testing, cable management.
- Knowledge or experience with Palo Alto, Tipping Point, Iron Port, Mobile Iron and other Firewall technologies.
TECHNICAL SKILLS
Networking: Routing Algorithms, Mobile Ad-Hoc Networks (MANETs), WAN, LAN, OSI, TCP/IP, BGP, EIGRP, DNS, DHCP Routing (Static Route& Summarization, RIPv2, EIGRP, OSPF, BGP, Redistribution)
Switching: (STP, RSTP, PVSTP, VLANs, VTP, CDP, LLDP, NEXUS, VRRP, GLBP)WAN Technologies (PPP, CHAP, PAP, GRE, Frame Relay, MPLS)
Simulation Tools: MATLAB, GNS3, Cisco Packet Tracer, Xilinx, LabView, RIVERBED (OPNET)
Cisco router platforms: 2500, 2600, 2800, 3600, 3700, 3800, 7200, 7609.
Cisco Switch platforms: 2900XL, 2950, 2960, 3560, 3750, 4500, and 6500.
Network Security Tools/Load Balancers: Wireshark Packet Analyzer, Firewall Securities. Cisco ASA 5585, 5550, 5540.Checkpoint (NGX R65, R70 and R71), Juniper Firewalls (SRX5400, SRX5600, and SRX5800), Cisco Firewalls (ASA5525, ASA 5505, 5506-X, 5585), and Palo Alto Networks Firewall models (PA-2 k, PA-3 k, and PA-5 k).
LAN Technologies: Vlan, vtp, inter-vlan routing, stp, rstp, pvst, 802.1x
Network Securities: Nat/pat, vpn, l2/l3vpn, filtering, load balancing f5, ids/ips, IPsec, acl.
Web servers: Apache, Nginx and IIS.
Juniper Products: JunosE (ERX1440, REX e320 & e120), SRX, MX, EX Series Routers and Switches.
Juniper Switches: Juniper EX 4400, EX 4200, EX 2200.
PROFESSIONAL EXPERIENCE
Confidential - Redmond - WA
Sr. Network Security Engineer
Responsibilities:
- Configured, troubleshoot, and upgraded Checkpoint Firewalls for Manage clients, which included network and/or resource access.
- Maintained complex LAN/WAN networks with several VLANS and provided support for routing protocols and also providing secure sessions over internet using IPSec and SSL encryption.
- Replacing HP switches with Cisco 2960 series switches
- Configuring new Cisco routers and switches, migrating and upgrading LAN & WAN
- Implementing security Solutions using Palo Alto Pa-5000/3000, Cisco ASA, Checkpoint firewalls R75, R77.20 Gaia, Juniper SRX 5600/5800 and Provider-1/MDM
- Prepared network diagrams, documenting on confluence about issues and solutions
- Configuring the check for monitoring the devices like web servers, routers, modems, switches, firewalls, application servers, load balancers and other servers
- Configuring, implementing and maintaining of Cisco firewalls (ASA 5505, 5510), Cisco Routers, Cisco Switches
- Configuring, troubleshooting and maintaining the SOPHOS firewalls in various locations
- Performing quarterly and yearly PCI compliant scans
- Good Knowledge on Juniper SRX configurations on various platforms of Junos.
- Installed and configured firewalls, IPS, IPsec VPNs and various screens for intrusion prevention on Juniper SRX equipment.
- Install, turn-up and configured Juniper hardware for Matrix & CPA test labs; routers, switches and test equipment.
- Test network resilience & failover by oversubscribing links, capacity planning, apply vendor software updates.
- Write MoPs to configure Juniper and Tellabs interfaces 10Ge Trunks, OSPF, CoS, QoS, VPLS, EVPL, RSVP Juniper hardware support of MX960e, MX480e, M10, M120, M320, T1600, T640, and Tellabs 8860.
- Managed Datacenter of F5 load balancers, Cisco 4500, Juniper M120 and Extreme switches.
- Support for Juniper M120 & J series, Cisco 3745, 6500, Extreme Summit, GPRS CGSN, Memotec switch.
- Devised and Implemented procedures for configuration and management of up to 400 Juniper Ex3300 access switches, including planning and development of a standard configuration template.
- Upgrade network equipment, software and hardware components and system configuration.
- Maintain technical detailed documentation of LAN and WAN systems and applications.
- Automated active directory operations of the organization like adding, removing, updating users using python.
Confidential - Wilmington, DE
Sr. Network Engineer
Responsibilities:
- Install and configure two new Juniper switch environments. The new models; Juniper EX4200 & EX4550 switches.
- The EX4200s to become there new CORE switches and the EX4550 for customer's new Storage environment.
- This also involved Virtual Chassis and OSPF configuration for EX4200 Cores and bonded twinax for EX4550's for their storage environment.
- Configured Multihoming BGP routing on customer's Juniper SRX firewall infrastructure.
- Setup and configured multiple Juniper ISG-2000 firewalls and Juniper SSG-20 firewalls for partner locations.
- Configured multiple site-to-sites VPN on Cisco PIX FW and Cisco routers to connect too many customers and partner locations.
- Configured Juniper M10i, M7i, and Juniper EX switches for new data center.
- Configuring HSRP between the 3845 router pairs of Gateway redundancy for the client desktops.
- Configuring GLBP, VLAN Trunking 802.1Q, STP, Port security on Catalyst 6500 switches.
- Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support.
- Involved in L2/L3 Switching technology administration including creating and maintaining VLANs, Port security, Trunking, STP, Inter Vlan Routing, LAN security.
- Configured CIDR IP RIP, PPP, BGP and OSPF routing.
- Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
- Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
- Configuring STP for switching loop prevention and VLANs for data and voice along with Configuring port security for users connecting to the switches.
- Ensured Network, system and data availability & integrity through preventive maintenance and upgrade.
- Worked in OSI Model, TCP/IP protocol suite (IP, ARP, ICMP, TCP, UDP, SMTP, FTP and TFTP).
- Basic Configuration and VLAN/VTP/Spanning-tree setup on Cisco 3800, 6500, WDN 6K Nexus Switches.
- LAN/WAN design and implementation using Cisco routers, hubs and switches.
- Securing network resources with shared folder permissions, Implementing file security system.
- Configure Switches (layer2, 3 and 4 switching).
- Router Configuration and monitoring of Cisco 9K, 71w.
- Configured Cisco Routers using Bundle Ethernet, RIP, IGRP, OSPF and EIGRP.
- Worked on connecting to Oracle database and fetch the data with Python.
Confidential - Woonsocket, RI
Sr. Network Engineer
Responsibilities:
- Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 Catalyst
- Experience with IP Subnetting, Telnet/SSH Clients, Terminal Server Remote Access, Service Now, COS, VoIP and MPLS technologies.
- Cisco network software (COS/IOS), inventory/maintenance tracking and vendor support. Case handling; as well as with Cisco routers and Catalyst/Nexus switches, F5 load balancers and Infoblox DHCP/DNS.
- Administration Big IP F5 LTM for all Local Load balancing and use GTM for load balancing across Data Centers.
- Worked with Cisco Nexus Switches and Virtual Port Channel configuration.
- Worked with Checkpoint VSX, including virtual systems, routers and switches.
- Worked with DNS/DFS/DHCP/WINS Standardizations and Implementations.
- Configuration of Network and Security devices such as Cisco routers and switches (Cisco ASR 1K, 9K, … 7K/5K).
- Supported, troubleshot, and directed end users on issues ranging from MS SQL database security, backup/restoration, to erroneous data issues, detailed networking issues, software change request/bug discovery and reporting.
- Configuring Cisco and Juniper devices (Router & Switches).
- Dynamic routing protocol configuration (RIP, RIP V2).
- Nat and IPsec configuration on Cisco Routers.
- Coordination with client and internal teams for operational issues, project work, following process like change process, problem management process, Access management etc., DR plan, process document, run book etc.
- Managing DNS, FTP, Send mail, NIS, HTTP, Account management, Samba, NFS, Auto mount, VNC, Disk management, NTP, NFS cron, package update, data.
- Replication through sync, OS installation and taking its image etc.
- Coordination with vendors like Red hat, HP, Sungard etc and taking proper follow up.
- Using DRAC, DELL Remote console to manage server.
- Handling server down issues and analyzing the root cause for the issue by checking system logs.
Confidential
Network Engineer
Responsibilities:
- Network Engineer responsible for Firewall, Load Balancing and Wireless Infrastructure.
- Worked for Data Services Team, leading on the Disaster recovery planning, implementation and testing.
- Part of multiple acquisition teams requiring migration to Compass data center.
- Replaced Checkpoint NG Firewalls with Cisco FWSM.
- Replaced Nortel Contivity IPSEC VPN with Cisco ASA SSL Client and Clientless VPN.
- Designed and Implemented Wireless Infrastructure with Secure Intranet and Guest Access.
- Implemented Cisco Optimized Edge Routing (OER) to utilize multiple ISPs with single public address Space.
- Designed and Implemented Cisco GSS. DNS based load balancing with health checking and proximity detection.
- Used to load outbound vendor connections across multiple paths.
- Deploying and decommission of VLANs on core ASR 9K, MIX routers, Nexus 7K, 5K, HP switches and its downstream devices.
- Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
- Configured CIDR, RIP, PPP, BGP, MPLS and OSPF routing on Cisco routers and Juniper routers.
- Assisted in MPLS migrations, implemented a backup for the existing WAN connection using site-to-site IP sec VPN tunnels.
- Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
- Worked on designing and troubleshooting of OSPF routing problems
- Worked in Proxy servers, Solar wind network installation and monitoring billing system, Network performance for one year time.
- Managing and administering User accounts, assigning Group policies for computers and users.
- Managing disk space, user profile creation and user rights management.
- Configuring and maintaining web server and mail server.
- Handled Procurement of B/W, Servers, Microsoft License, renewal AMC like, Servers and Desktop Maintenance, Recording Machine, Firewall, MPLS and Lease line, Routers and Switches.
Confidential
Jr. Network Engineer
Responsibilities:
- Configured OSPF on CISCO devices with multiple routing processes and redistributed them. Tested and hands on experience in multi area OSPF topologies.
- Monitor, troubleshoot, test and resolve Frame Relay, ATM, MLPPP, PPP, and Dial-up.
- Routing protocol use EIGRP, OSFP, Static, Static Routes.
- Design and implement data cloud solutions.
- Design and implement EIGRP, OSFP, VPN, and Site to site VPN.
- Perform upgrades to Cisco Switches from 5000, 6500.
- Manage Help desk staff on day to day activate.
- Configuring/Troubleshoot issues with the following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 series), to include: bridging, switching, routing, Ethernet, NAT, and DHCP, as well as assisting with customer LAN /MAN.
- Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches Confidential access level to 2950, 3550.
- Configuring Vlan's, VTP's, enabling trunks between switches.
- Assisted in network engineering efforts consistent with the infrastructure of an Internet Service Provider and support of such network services.
- Helped in designing and implementation of VLAN for the new users. Network Protocol Expert in DNS/DHCP & IP Management application support.
- Scripting/programming (Perl / Shell Scripting, C, C++).
- Work with Active Directory, as well as utilizing VI for IP/hostname updates.
- Significant work and knowledge of VitalQIP and usage of QIP GUI.