SUMMARY

• 8+years of professional experience in Network Designing, Deployment, Configuring, Troubleshooting and Testing of networking system.
• Experience in configuration of routing protocols such as RIP, OSPF, EIGRP over Cisco routers
• Experience in configuration and troubleshooting of layer 2 protocols such as STP, RST, MSTP, and VTP.
• Experience in configuration of Cisco switches 3850, 3650, 4500, 2900 and Nexus switches 7000, 5000
• Experience in configuration of Cisco routers 3900, 3800, 2900, 2800
• Experience on switching protocols Virtual Trunking Protocol, Ether Channel.
• Experience establishing IPSec - VPN tunnels with ASA firewall
• Extensive work experience with Cisco Routers, Cisco Switches, Cisco Firewalls and Load Balancers
• Experience in troubleshooting of DNS and DHCP IP conflict problems.
• Hands on experience in working with Cisco, ASA/PIX firewalls and Cisco IPS and ACS.
• Efficient Knowledge of Cisco Trust Sec, Cisco prime, Cisco ISE and PRTG SNMP network monitoring tools.
• Familiar with the configuration ofJuniperMX960,MX480,EX4500,J2320/J2350andJ4350Routers.
• Experience in deployment and configuration of Cisco GSR/ 7200/3800/2800/1900 seriesand CiscoNexus7000/catalyst 6500/4500/3750/2950 Switches.
• Working knowledge of IDS and IPS, policy routing, private VLANs, ACLs and NAT.
• Knowledge and experience with IP addressing, sub netting, VLSM, ARP and ping concepts
• Maintaining and updating inventory of allnetworkhardware, managing and monitoring of devices with SNMP.
• Extensive knowledge in designing, deploying and troubleshooting LAN,WAN, Ether-channel, Frame-Relay, IPRouting Protocols (RIPV2,OSPF,EIGRP&,BGP).
• In-depth working knowledge on TCP/IP, OSI model.
• Maintained and troubleshoot on wide range of client problems.
• Enhanced level of work experience on TCP/IP,RIP2,OSPF, EIGRP,BGP, HSRP, GLBP,IPX\SPX,IPX,STP,ISDN,DHCP,DNS,PPP,VTP.
• Installed all cables, connections and cross-connects to datacenter network and customers.
• As a framework build supporting Cisco Trusses Early-Field-Trail program, bolstered UC with their arrangement questions and helped them in smoother Trust secfield arrangement.
• Coordination of building transition during the Juniper/PulseSecureacquisition.
• Installation, configuration and maintenance of checkpoint firewalls.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Installation, configuration and maintenance of Check Point R77.XX firewalls.
• Implemented traffic filters on CISCO routes using Standard Access List and Extended Access list.
• Excellent working knowledge of TCP/IP protocol suite and OSI layers.
• Experience in deploying EIGRP/BGP redistribution and the changing the metrics for the primary and backup.
• Implemented systems and software upgrades of OS and configuration changes for users.
• Experience in physical cabling, IP addressing and sub netting with VLSM, configuring and supporting TCP/IP, DNS, installing and configuring proxies.
• Gained experience working with Layer-2 and Layer-3 Switching and Security.
• Experience of VMware server
• Worked on VSphere, VClient configuring multiple Hosts.
• Configuring VSwitches, Distributed v Switches.
• Strong knowledge in HSRP, VRRP and GLBP redundancy Protocols.
• Efficient in preparing technical documentation using Microsoft office and Visio
• Excellent problem solving, troubleshooting skills, effective analyzing skills and capable of quickly learning, and delivering solutions as an individual and as part of team.
• Excellent communication and interpersonal skills to Interact.
• Self-motivated, hardworking and can handle multiple demands and competing priorities.

TECHNICAL SKILLS

Protocols: RIP, RIP V2, EIGRP, OSPF, IS-IS, IGRP, HSRP, VRRP, GLBP, LACP, PAGPDNS, SMTP, SNMP, FTP, TFTP, LPD/TDP, WEP, POP3 LADP,TNS

LAN Technologies: Workgroup, Domain, HSRP, DHCP, Static, VLAN, STP, VTP, Ether Channel, Trunks.

WAN Technologies: Leased Line, Frame Relay, ISDN, PPP, HDLC, ATM, SONET, Metro Ethernet.

Network Products: CISCO Routers 1700, 1800, 2500, 2600, 2800. CISCO High End Router 3600, 3800, 7200, 12010. CISCO Switches 1900, 2950, 2960. CISCO Campus Switches 3550XL, 4984 Core Catalyst 4503, 4507 RE, Catalyst 6500/6503/6507. Juniper MX-80,MX-480,SRX-100, SRX-110,SRX-550 Routers and EX-4200 Switches.

Security & VPN: PIX 500 Firewall, ASA 5505 Firewall, AIP SSM, CSC SSM, FWSM, Fortigate, CISCO CSM, ACL- Access Control List, IPS/IDS, NAT, PAT, CISCO ACS, Check point, sonicwall, RSA SecureID, SRX,SSG series firewalls.

Authentication: RADIUS, TACACS+, Digital certificates

Monitoring Tools: Wireshark, Nmap, Nessus, OpManager, PRTG Packet Sniffer

Servers: Domain servers, DNS servers, WINS servers, Mail servers, Proxy Servers, Print Servers, Application servers, FTP servers, Avocent Console server.

Operating Systems: Windows NT 4.0 (Desktop/Server), Windows 2000/2003/2008 server, Windows XP/7, LINUX, Solaris, Red Hat, Active Directory, UNIX, junos.

PROFESSIONAL EXPERIENCE

Confidential - Dublin, CA

Senior Network Engineer

Responsibilities:

• Responsible for NetworkRebuild Design, for three client location, Deployment, Configuring, Troubleshooting and Testing of large to medium enterprise networks.
• Involved in complete LAN, WLAN development (including IP address planning, designing, installation, configuration, testing, maintenance etc.). Handled project independently from planning stage to the validation and troubleshooting post-installation.
• Network Planning and implementation between the Main Head office and branch offices located across USA and Mexico. Design and Implement Remote access management and VPN access between the sites.
• Planning, Designing, Deploying, of Wide Area Networks using Static Routing and Dynamic routing protocols including OSPF, EIGRP and BGP.
• Replaced the old HP switches with the Cisco 2960 and 3850 cat switches including VLANS and Trunking Protocols.
• Worked on installing, configuring, and troubleshooting of Cisco Switches 2960, 3850 Cat switches.
• Configuring HSRP between VLANs, Configuring Ether-Channels, and Port Channel on 3850 catalyst.
• Configured and installed Cisco series Routers, ASA and Dell sonic Firewalls.
• Installed and configured Aero hive Access Points as part of new site installations.Created network policies. Directed the launch of an enterprise class office Wi-Fi solution resulting in increased staff mobility and flexibility.
• Implemented with Cisco Layer 3 switches 3750, 4500 in a multi VLAN environment with the use of inter-VLAN routing, HSRP, ether channel.
• Configured OSPF on CISCO devices with multiple routing processes and redistributed them. Tested and hands on experience in multi area OSPF topologies.
• Configuring, managing, and troubleshooting networks using routing protocols like RIP, EIGRP and OSPF (Single Area and Multi Area).
• Deployed and configured the DHCP server and created scopes for the dynamic IP addressing to the users.
• Deployed and configured the External RADIUS server (Windows 2012 NPS server) for the Authentication, Authorization and Accounting the user to connect to the Aero hive WAP’s.

Environment: Cisco Switches (2960,3850), Cisco Routers, Dell sonic wall, Cisco 3600 series Switches, Aero hive WAP’s, Windows NPS 2012 server, RIP,EIGRP, VLAN, WAN, MPLS, Active Directory.

Confidential, Smyrna, TN

Sr. Network Engineer

Responsibilities:

• Designing and Deploying the Wireless Networks with Different Secured Authentications and Encryptions basing on the Client Requirement.
• Configured and performed software upgrades on Cisco Wireless LAN Controllers 2504, 4404, 5508 for Wireless Network Access Control integration with Cisco ISE.
• Worked on the CISSO Access Points both Autonomous and Controller based and converting in to controller based by upgrading the IOS.
• Design and Implementation of 802.1x Wired/Wireless User Authentication using Cisco ISE Radius Server.
• Designed & Deployed Cisco ISE 1.2/1.3 for Enterprise RADIUS Authentication with Active Directory, RSA SecurID, Proxy Radius Services to Cisco ACS, RADIUS and TACACS.
• Configuration & Maintenance of Cisco ISE for Certificate based authentication for BYOD, Guest authentication and Corporate Mobile Device Authentication using Xenmobile MDM
• Design and Implementation of 802.1x Wired/Wireless User Authentication using Cisco ISE Radius Server.
• Designed & Deployed Cisco ISE 1.2/1.3 for Enterprise RADIUS Authentication with Active Directory, RSA SecurID, Proxy Radius Services to Cisco ACS, Juniper Steel Belted Radius and Radiator Radius.
• Configuration & Maintenance of Cisco ISE for Certificate based authentication for BYOD and Corporate Mobile Device Authentication using Xenmobile MDM
• Configuring policies, Firewall rules, Web filtering using checkpoint smart dashboard and Initial configuration of Palo Alto Firewall.
• Troubleshooting, Analyzing network connectivity and Application and URL filtering using Smart track viewer and Smart track monitor
• Worked on NX-OS series 2000,3000,4000,5000,6000,7000 switches by configuring and upgrading in data centers
• Worked on upgrading Cisco ISE 3300 Appliances and 1.0.4 Cisco ISE software on VMware’s.
• Performed IOS Software upgrades on switches 6500, 3750 and 4500s and Cisco ASR for compatibility with Cisco ISE 1.0.3/1.0.4 setup.
• Configured 6500, 3750 and 4500 for Network Access Solution integration with Cisco Identity Service Engine on ESX 5.0 VMware and physically with Cisco ISE appliances.
• Planning, designing and Configuration of various Policy Configurations, Profile Authorizations, End device Profiling, User Identities, Cisco ISE and AD mapping with various attributes and levels of authorizations and Network Access.
• Planning, designing and configuration of various Cisco ISE strategies (Standalone, Distributed Setups).
• Worked Extensively on Access Control Policies consisting of VLAN switching through SNMP, Applying downloadable ACLs through Cisco ISE, and Configuring Standard and Extended ACLs locally and on the upstream switch’s for Cisco ACS
• Worked extensively on device profiling, authentication and authorization mechanisms using AAA, RADIUS, 802.1X, Policy buildups for Posture Compliance Policies and Rules for Checking the devices coming onto Network, Remediation Process, Access and Controls, and Segmenting the Global Networks for NAC Solutions for both Cisco and Fore scout NAC Appliances.
• Worked extensively on designing PKI Infrastructure for EAP-TLS Protocol using certificate based authentication.
• Extensively worked on Microsoft Certificate Authority Server for ROOT/Intermediate Issuance of certificates, securing the certificate exportability.

Environment: Cisco routers 3700, 3800, 7200, 7604, Cisco catalyst series Switches 2960, 3750, 3560, 6500, Nexus 5k, Nexus 7k, MPLS, Frame Relay, VRF, DSLAM, RIPv2, OSPF, BGP, IPSEC, VLAN, STP, VTP, HSRP.

Confidential - Dresser, WI

Network Engineer

Responsibilities:

• Performed IOS upgrades on Catalyst 1900, 2900, 3500 series switch, and 2500, 2600, 3600 series routers.
• Involved in designing, configuring, implementing, maintenance and troubleshooting issues relating to routers and switches in LAN, WLAN and WAN.
• Performed IOS Software upgrades on switches 6500, 3750 and 4500s
• Designed and deployed networks as per the company’s requirement. Handled different tasks such as network address assignment, assignment of routing protocols, etc.
• Worked on NX-OS series 2000,3000,4000,5000,6000,7000 switches by configuring and upgrading in data centers
• Handling the network infrastructure of NOC LAN/WAN, migration & configuration of network client workstations. Addressing performance bottlenecks & ensuring maximum network efficiency and uptime.
• Planning designing, Installation, configuration and maintenance of 802.11a/b/g Wireless Networks and Wireless Access points.
• Implemented, Monitored and troubleshoot the protocols EIGRP, OSPF and Static Routes.
• Used the Pulsesecure Built in VPN for High Scale performance and increased through put with the three different locations as one of the IQMS server tunnel is connected to the Cloud services.
• ManagePulseSecure, our VPN solution, which contains 10 separate VPN tunnels for employees and external partners.
• Configuration and Installation of ASA 5520 firewalls.
• NAT, VPN and Traffic filter implementation in Cisco Firewall.
• Implemented traffic filters using Standard and Extended Access Control lists. Handled Route-map, Re-distribution list & access-list configurations.
• Access distribution and core layer switching architecture, created VLANS, Firewall Services Module (FWSM) and STP configuration.
• Experience with Cisco Voice and Unified Communications Solutions (CUCM 8 ).
• Deployed unified communication solutions for the corporation with Cisco 2900, 3900, 3900E routers.
• Hands on experience with voice protocols like MGCP, H323 and SIP.
• Hands on experience with various gateway models like Cisco Voice Gateway 200, Cisco Access Digital Trunk Gateway and Cisco Analog Trunk Gateway.
• Experience with CUCM services such as Unified Messaging, Multimedia Conferencing, and Collaborative Contact Centers.
• Good working and understanding knowledge with Net screens and NSM and SRX.
• Assisted in building Net screen and SRX firewalls (interface creation, routing, policy, etc.)
• Worked in team in migrating from Net screen to SRX platform
• Good knowledge on managing Netscreen and SRX deployed in HA mode
• Good understanding knowledge in managing code levels on Netscreen and SRX platforms, Knowledge of SPACE
• Addressing issues like routing problems, route announcements/advertisements, and security access issues.
• Used tools WireShark, Packet Sniffer and Microsoft Network Analyzer for monitoring Local Area Network connections (LAN’s) and Wide Area Network Connections (WAN) for Network connection and failure issues.
• Administrative responsibilities including the installations, additions, updates and changes to Microsoft Windows 2003 and Windows 2008 servers.
• Administering the Microsoft Windows Servers and managing disk space, user profile creation and user rights management.
• Maintain and create user accounts and policies within Active Directory, Configure/maintain Internet filtering and security on public access pc’s.
• Configuration and maintenance of DNS & DHCP servers.
• Maintained accurate network documentation for moves, adds, changes, and deletes. Properly documentation of problem situations and resolutions.

Environment: Cisco Routers, Cisco Switches, Routing Protocols (RIP, BGP, OSPF), VPN Tunnels, Checkpoint Firewall, Frame relay, ACL, NAT, WAP, WLC, VLAN, RSTP, Active Directory, Tools (MRTG, Cisco Works).

Confidential, Atlanta, GA

Network Engineer

Responsibilities:

• Experience working with frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NAT, sub-netting, also including DNS, LDAP, DHCP, HTTP, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN,WISM, STP (Spanning tree Protocol), RTSP & Multicasting protocols.
• Configured DMVPN with IPSEC on it and EIGRP as IGP protocol.
• Troubleshoot routing issues on Cisco 7600, 7200VXR and Juniper QFX 5100.
• Performed data center migration in Access, Distribution and Core layers to next gen.
• Supported corenetworkconsisting of Cisco routers running multi area OSPF. Implemented stub/Totally stub areas as per requirements.
• Implementing, Monitoring, Troubleshooting and Convergence in Frame-Mode MPLS inside the core and troubleshooting VRF and MPLS VPN issues
• Implemented NAT solutions on WAN applications and troubleshoot NAT issues on VPN's.
• Configured Dynamic on hub and point to point on Spokes VPN's as per requirements of customers
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part ofNetworkteam. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.
• Configured NTP, CFS, Ether-channel using LACP on Nexus switches
• Experience with configuring Nexus 2000 Fabric extender(FEX) which acts as a remote line card(module) for Nexus 5000
• Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves redistribution
• Configured policy based routing on WAN links as per company requirement.
• Implemented Site-to-Site VPNs over the internet utilizing 3DES, AES/AES-256 on interface level and tunnel level.
• Involved in design and deploying variousnetworksecurity & High availability products like Cisco ASA and other security products.
• Configured VLANs on a switch for inter-VLAN communication. Configured VLAN Trunking Protocol (VTP) on Core Switches. Configured various LAN switches such as CISCO CAT 2900, 3550, 4500, 6509 switches for STP, VTP Domain, VLAN, Trunking, Fast Ether Channel configuration
• Administering multiple Firewall of Juniper / Net Screen, in a managed distributed environment. Fulfilling routine change requests of Net Screen OS Firewall and resolving trouble tickets, maintain and monitoring firewalls.
• Worked on ACE load balancers and F 5 LTM,GTM.
• Experience in monitoring and analyzing the load balancing ofnetworktraffic using Wireshark and Solar Winds
• Configured IP access filter policies and distribution lists and route filters.
• Configure, troubleshoot, install, and manage Juniper J and M series routers, Juniper NetScreen firewalls to include ISG 2000, NS-5200, and SSG series
• Configured RIP, OSPF, and static routing on Juniper M and MX series Routers
• Implemented antivirus and web filtering on Juniper SRX 240 at the web server
• Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as perNetworkDesign Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches
• Trace ports of user via trace route and ping to process change in VLAN assignment as requested by user via TMAC process and notify them once done
• Configured WI-FI APs connected in LAN to reduce cable costing by creating AP, worked on Cisco SP WI-FI, troubleshoot in Cisco Aironet 3700, 1700 and 600 series
• Familiar with blue coat proxy servers and blue coat web sense.
• Configuring and implementing F5 BIG-IP, LTM, GTM load balancers to maintain global and local traffic
• Experience with converting Cisco ACE load balancer to F5 LTM load Balancer in data center environment.
• Experience with converting PIX rules over to the Cisco ASA solution.
• Implemented new device of Cisco & Juniper as per policy reviewed bynetworkarchitect.
• IPSO Versions and Checkpoint SW are currently being remediated to current target version of IPSO 6.1 Build 38 running Checkpoint R65 Build 63, Currently remediating Running in Active/Active Cluster mode into VRRP High Availability setups
• Configuring objects such as Load Balancer pools for local traffic management on F5 Load balancers
• Dealt with creating VIP(virtual servers), pools, nodes on F5.
• Installed high availability Big IP F5 LTM and GTM load balancers to provide
• Implementing F5 BIG-IP application delivery controllers for load balancing using Virtual servers, irules and iApps
• Provide technical leadership on Checkpoint firewall risk assessments using Tufin reports and analyze client remediation efforts for security violations
• Monitoring of Check Point firewall 9070 with Smart Tracker Checkpoint
• Performing audit on Check point and Cisco firewalls for the unused rules and objects using Tufin reports
• Configured and implemented centralized Syslog server on both production and corporatenetwork and enable SNMP traps for monitoring traffic and check the health of servers andnetworkdevices
• Co-ordinates with Vendors to replace the faulty hardware like power supply, fans, modules, cables, sfp, access points & lwaps
• Design, install and support Cisco wireless LWAPP environment, supporting both 802.11ac (5GHz) and 802.11b/g (2.4GHz) environments
• Extensive experience taking copy of Cisco IOS on TFTP server and loading back on routers and switches
• Documented all the work done by using Visio, Excel & MS word

Environment: Cisco Routers - 2900, 3800, 3900, 7200, Cisco Series Catalyst Switches - 2960, 2975, 3750-E, 4500, 6500, Nexus 3k/5k, Cisco Pix Firewall, ASA Firewall, MPLS, Frame-Relay, VOIP, OSPF, BGP, VLANS, STP, PAGP, VRRP, Port Security, VPN, Load balancers, Access list, Wire shark.

Confidential

Network Engineer

Responsibilities:

• Supported various Routers like 2600/3600/7200/7200 VXR and 12416, 12816 series routers.
• Analyzed, configured and troubleshoot the LAN/WAN networks. Monitor Network traffic and access logs in order to troubleshoot network access issues. Use network analysis tools to monitor and shape traffic for optimum performance.
• Perform configuration and maintenance of LAN\WAN technologies such as Ethernet and Fast Ethernet. Securing the network with access lists applied on interfaces.
• Planning designing, Installation, configuration and maintenance of 802.11a/b/g Wireless Networks and Wireless Access points.
• Implemented traffic filters using Standard and Extended Access-lists. Handled Route-map, Re-distribution list & access-list configurations.
• Implementing IP Routing protocols EIGRP, OSPF, RIPv1 and RIPv2.
• Configuring and managing Windows Firewalls, Cisco PIX and Checkpoint firewalls.
• Performed IOS Software upgrades on switches 6500, 3750 and 4500s
• Cisco Load balancers, VPN concentrators and implementing QoS and performing traffic engineering.
• Daily administration of Windows servers including creation/deletion of new user accounts, print services, backups. Installed and Maintained software license agreements.
• Handled all orders as per the company needs, Add, Change, Terminate, Relocate etc. Coordinated with engineering team and onsite technician for remote configuration of Cisco routers and Switches
• Providing End-user support for configuration and troubleshooting of hardware, software and Windows operating systems related issues, Network connectivity issues, Remote access setup and VPN connection issues.
• Participating in disaster recovery testing, maintaining system documentation logs and assisting in troubleshooting and diagnosis of system problems.
• Executing email administration, backup, data recovery, and preventive maintenance in addition to routine software installation and troubleshooting functions.
• Experience with Cisco Voice and Unified Communications Solutions (CUCM 8).
• Deployed unified communication solutions for the corporation with Cisco 2900, 3900, 3900E routers.
• Hands on experience with voice protocols like MGCP, H323 and SIP.
• Served in computer maintenance, performed all types of hardware, software maintenance and engineering in addition to systems selection, backup and technical support.
• Installing, Configuring and updating of Antivirus packages (Kaspersky and AVG).
• Installation, maintenance and troubleshooting of various laser and Network and Local Printers.

Environment: Cisco catalyst series switches 7600/6500/2900 , Cisco Nexus 5k/7k series switches, Solar Winds, Remedy, GNS3, Wire Shark.

Confidential

Network Engineer

Responsibilities:

• Configuration and administration of Cisco Switches and Routers.
• Installed and maintained network hardware and software
• Responsible for installing, maintaining and supporting computer communication networks within the organization.
• Involved in configuring trunk port between two switches.
• Support to plan and execute LAN (VLAN Management) and WAN management activity.
• As a LAN Support point of contact give response to initial trouble calls.
• Directly worked with customers to offer Level 2, Expertise in handling routers, servers, and switches.
• Responsible for support and upgrades of a 250 user network.
• Assists in LAN Design & support.
• Performed onsite data center support that includes monitoring of systems alarms, electrical power, server administration and network alerts.
• Provided customer support including daily backup procedures, testing network connections, equipment installation and turn-up, and remote hands assistance.
• Undertook troubleshooting of network connectivity problems and day-to-day operations.
• Experience in configuring and troubleshooting EIGRP, OSPF & BGP Routing protocols.
• Developed maintenance and operating standards for computer hardware and software.
• Experienced with physical layer interfaces and cabling standards.
• Planned and implemented IP address schemes and subnet masks.
• Patch and test cables for new and existing sites.
• Troubleshooting and supporting multiple OS and hardware environments.
• Maintained detailed time based incident logs and technical checklists.
• Responsible for documenting network related issues.

Environment: Cisco 7200, 7600 routers, Cisco series switches, WAN, NAT, OSPF, RIP, IGRP, RIPv2, EIGRP, Static Routers.