SUMMARY

• Cisco Certified Network Engineer with 8+ years of experience in the industry, which includes expertise in the areas of Routing, Switching, Load Balancer and Firewall.
• Strong hands on experience on Cisco Catalyst (1900, 2900, 3550, 3750, 6500) series switches, VSS technology, Cisco (2500, 2600, 2800, 3600, 3800, 7200) series Routers, PIX Firewall (506, 515, 525, 535)/ ASA (5505/5510), Palo Alto Firewalls, Cisco ISE (Identity Service Engine), Load Balancers using Cisco ACE, F5, Security Device Manager (SDM), Cisco Works, HP Open View, SolarWinds, Sniffer.
• In - depth knowledge and experience in WAN technologies including OC3, E3/T3, E1/T1, Point to Point, MPLS and Frame Relay.
• Experience in Configuring and implementing VLAN, VTP domains, LAN switching and STP/RSTP.
• Experience in Cisco: Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay & MPLS), Routing protocol configurations (RIP, EIGRP, OSPF, BGP).
• Working configuration of new VLANs and extension of existing VLANs on/to the necessary equipment to have connectivity between two different data centers.
• Hands-on configuration and experience in setting up Cisco routers to perform functions at the Access, Distribution, and Core layers.
• In-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.
• Configured and managed Nexus 2k fabric extender, 5K, 7k and 9K switches.
• Implementation and Troubleshooting of WAN authentication protocols- PPP, CHAP and PAP.
• IP addressing and IP address scalability by configuring NAT/PAT.
• Provided second/third level technical support for ACI.
• Troubleshooting Cisco ACI.
• Experience in working with Infoblox.
• Design, deploy, test, and manage WiFi systems in the industry.
• Monitoring global WiFi network for sites.
• Advanced knowledge of the underlying architecture of ultra-low latency (ULL) and high throughput trading systems and networking.
• Ultra-low latency (ULL) digital video communication systems.
• Troubleshooting seven layers of the OSI Model and TCP/IP Models.
• Coding skills with PERL, Python, and shell scripting.
• Designed and developed network applications to monitor entire Fermi lab network identifying and blocking suspicious systems using Python and Perl applications.
• Experienced working on network monitoring and analysis tools like, SolarWinds, CISCO works, Riverbed and Wireshark.
• Management of DNS, DHCP, BOOTP and IPAM devices through Infoblox.
• Experience with F5 load balancers andCiscoload balancers (CSM, ACE and GSS).
• Basic and advance F5 load balancer configurations, including migrating configurations fromCiscoACEto F5 and general troubleshooting of the F5 load balancers.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NAT with the firewalls.
• Experience in QoS on multicast VPN.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience.
• JUNOS Space Appliance, development, automation, programming.
• Performed traffic migration from Cisco FWSM to Juniper SRX cluster.
• Building HA NAT for broadband subscribers on two Juniper SRX 5600 not using clustering.
• Troubleshooting the Juniper SRX100 and 110 series, Juniper NetScreen routers with Site-Site VPN, and firewalls.
• Implementation of Juniper Firewall, SSG Series, NetScreen Series ISG 1000, SRX Series.
• Worked on Juniper NetScreen Firewalls like, NS50, SSG 550M, SSG520M, ISG 1000, and ISG 200.

TECHNICAL SKILLS

Routers: Cisco 7600, 7200, 3800, 3600, 2900, 2800, 2600, 1800, 1700MX960, MX480, MX80, M10, M7i.

Routing Protocols: OSPF, EIGRP, BGP, RIP v1/v2, MPLS, Static Routing RedistributionAnd Summarization.

Switches: Nexus 2K/5K/7K/9k, Cisco Catalyst 2900, 3500, 3700, 65004500, 3850, 3560, 3750, 2960.

Switching: LAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switch, Ether channels, Transparent Bridging.

Firewalls: Cisco ASA 5540, ACL, IPSEC, Checkpoint (R75,R76,R77,R80,VSX)Juniper SSG Series, Net screen Series ISG 1000, SRX SeriesCisco ISE, Palo Alto, SRX5800, SRX5600, SRX3600.

Load Balancer: F5 Load Balancer, F5 Networks (Big-IP) LTM 8900 and 6400.

LAN: Ethernet (IEEE 802.3), Fast Ethernet, Gigabit Ethernet.

WAN: PPP, HDLC, Channelized links (T1/T3), Fiber Optic Circuits, Frame Relay, VOIP.

Gateway Redundancy: HSRP, VRRP and GLBP WAN Optimizer Riverbed Steelhead Appliance, WAE DHCP and DNS Infoblox.

Various Features & Services: IOS and Features, IRDP, NAT, SNMP, SYSLOG, NTP, BOOTP, DHCPCDP, TFTP, FTP, PIX.

AAA Architecture: TACACS+, RADIUS, Cisco ACS.

Scripting Languages: Perl, Python, PHP and Shell.

Network Monitoring: Logic Monitoring (LM), LMS, Cisco Secure ACS, WiresharkCisco Prime Infrastructure, SNMP, HRPing.

PROFESSIONAL EXPERIENCE

Confidential, Detroit, MI

Sr. Network Engineer

Responsibilities:

• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500.
• Experience in migration of VLANS.
• Configuring VLANs/routing/NATing with the firewalls as per the network design.
• Responsible for Cisco ASA firewall administration, Rule Analysis, Rule Modification.
• Configuration and maintenance of PIX and ASA firewall systems.
• Designed & implemented a Considerable portion of the Software Stack in ultra-low latency(ULL).
• Maintain and support all production, development, environments of ultra low-latency Platform.
• Comprehend networking concepts based upon the OSI and TCP/IP Models.
• Experience working in Data Centre environment, configuration changes as per the needs of company.
• Manage project task to migrate from Cisco ASA firewalls to Check Point firewalls.
• Provided redundancy to the network, implemented hot standby routing protocol (HSRP) and Load sharing for effective utilization of routers.
• Implementation and configuration of F5 Big-IP LTM-6400 load balancers.
• Centralized management, visibility and high availability of DNS, DHCP, BOOTP and IPAM devices through Infoblox.
• Configured DHCP scope into Infoblox for new sites which includes subnets for wireless, voice, security and data centers.
• Configuring, implementing, and troubleshooting VLAN’s, VTP, STP, Trunking, Ether channels.
• Designing, implementing LAN/WAN configurations on Cisco 5K, catalyst 6500 switches.
• Troubleshooting Cisco Application Centric Infrastructure (ACI).
• Provide second and third level technical support for ACI (Application Centric Infrastructure), APIC technologies.
• Experience in configuring, upgrading, and verifying the NX-OS operation system.
• Experience working with Nexus 9000, 7010, 5020, 2148, 2248 switches.
• Experience configuring Virtual Device Context in Nexus 9k, 7k, 5k series switch.
• Designed, configured, implemented site-site VPN on cisco ASA 5500 firewall.
• Implemented, configured redundancy protocols HSRP, VRRP, GLBP for Default Gateway Redundancy.
• Worked in projects converting P2P circuits into MPLS circuits, commissioning and decommissioning of the MPLS circuits for branch offices.
• Design Planning and Commissioning of new Wi-Fi network equipment across Hybrid Fiber Coax Networks for WAN/LAN Broadband WiFi solutions.
• Collaboration with partners, software developers, and customers to develop cutting edge WiFi networks and deployment solutions.
• Introduced several WiFi (MIMO) Backhaul and Access-point products and managed at Mass Production.
• Excellent coding skills with PERL, Python, and shell scripting.
• Maintain various DNS verification and report with PERL, Python and Shell scripts.
• Using self-made Perl script successfully converted Cisco FWSM config to Juniper SRX config.
• Configuring and resolving various OSPF issues in an OSPF multi area environment.
• Implemented, configured BGP WAN routing, converting OSPF routes to BGP.
• Implementing, configuring, and troubleshooting routing protocols like EIGRP, OSPF and BGP.
• Expertise in maintenance of layer2 switching tasks which advocate VLAN, VTP, STP, RSTP, PVST, RPVST, inter-VLAN routing.
• Performing network monitoring, providing analysis using tools like WireShark, Solarwinds.
• Post-sales support of Networks JUNOS Space deployment; providing network management automation support of MX and EX platforms.
• POC, tested, and implemented world’s first Next-Gen SPC architecture for Juniper SRX in Service Provider architecture.
• Developed redundant load-balancing design based on four MX 960 and two SRX 5600 using route leaking and policy routing.
• Backbone network based on over 100 Juniper MX 960/480 routers and multiple BGP AS.
• Deploy/Initial Setup EX series switches, SRX series Firewall, QFX series and MX series router for Building/DC Core network environment.
• Chassis based Juniper SRX, EX, M, and MX series products.
• Played a pivotal role in Juniper M120i Installation and configuration Idea backbone MPLS network.

Environment: Cisco 6506/4948/4510 switches, Cisco 3660/3845/7609 Routers, Cisco Nexus 9k/7K/5K, VLAN, Checkpoint, F5 Load Balancers, Infoblox, OSPF, RIP, RIRP, BGP, MPLS, HSRP, VRRP, GLBP, ASA 5500, Juniper SRX 5800.

Confidential, Cleveland, OH

Network Security Engineer

Responsibilities:

• Responsible forfittingthe infrastructuresurroundingswith majority of Cisco &Palo Altoappliances.
• EfficientlyexploitationService Now tool for generation of tickets,distributionseverity to incidents, following up with incidentstandingand troubleshooting incidents.
• Excellently used Splunkto researchand monitor incident management and incident resolutionissues.
• Researched, designed, and replaced agingstopfirewalldesignwith new next generationPalo Altoappliances serving as firewalls andURLand applicationreview.
• Upgraded and updated Cisco IOS fromtwelve.3T to 12.4.AccustomedDHCP tomechanicallyassign reusable information scienceaddresses to DHCPshoppers.
• Configuring and troubleshooting perimeter security deviceslikestopNGX R77Gaea, Provider-1/MDM, Secure Platform,Palo Altoand ASA Firewalls.
• Palo Altostyleand installation (Application, information andURLfiltering, Threatbar).
• Configured and deployed BIG-IP LTM 6900 for providing application redundancy and load balancing.
• Worked on F5 load balancers deploying many load balancing techniques with multiple components for efficient performance.
• Support for firewalls, gateways, and Layer 2 and 3 protocols, Switches, VLAN and ACL.
• Support Infoblox IP Address Management (IPAM) for the entire Enterprise Network. This includes 3rd Level design and support of BOOTP, DNS schemes, DHCP schemes, TCP/IP.
• Configuring rules and MaintainingPalo AltoFirewalls & Analysis of firewall logsexploitationvariedtools.
• Successfullyput inPalo AltoPA 3060 firewalls to protectinformationCenter and provided L3 support for routers/switches/firewalls.
• Implemented Zoneprimarily basedFirewalling and Security Rules on thePalo AltoFirewallExposure to wildhearthfeature ofPalo Alto.
• Regularly met with ACI application development leads to facilitate project.
• Troubleshooting Application Centric Infrastructure (ACI).
• Provide second/third level technical support for ACI.
• Maintained and managed networks running EIGRP and BGP routing protocols.Regularly performed firewall audits aroundstopFirewall-1 solutionsfor purchasers.
• Configuration of routing protocols EIGRP and BGPfor littleto medium sized branchessupportedcompany branch standards,together withdistributionand route maps.
• Build IT security infrastructuretogether withstop, Juniper andPalo Altofirewalls Configuring F5 Load Balancers: Adding virtual IPs, nodes, pools and healthobservation.
• Configuring Juniper Netscreen Firewall Policies between secure zonesexploitationNSM (Network Security Manager). Developed high level design based on Juniper IPsec auto-VPN solution and Insta PKI.
• Commissioned nine SRX 5800 cluster and integrated them into MTS network.
• Migration of Cisco FWSM to Juniper SRX 3600 cluster.
• Using self-made Perl script successfully converted Cisco FWSM config to Juniper SRX config.
• Backup and restore ofstopand Cisco ASA Firewall policies.
• Handling Break/Fixthings, monitor, configure, creating on Checkpoint R75, R76, R77, R80, VFXsensibleCenter Server running on Secure Platform.
• Monitoring Traffic and Connections instopand ASA Firewall.
• Manage project task to migrate from Cisco ASA firewallsto examinepurposefirewalls.
• Worked extensively in Configuring,observationand Troubleshooting Cisco's ASA 5500/PIX security appliance, configuring VLANs/routing/NAT with the firewalls as perthe planning.

Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/2960/6500 switches and Cisco 3640/12000/7200/3845/3600/2800 routers, Cisco ASAfive hundred, F5 BIGIPremembering, Infoblox, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.

Confidential, Chicago, IL

Network administrator

Responsibilities:

• Documented the company’s design, implementation and troubleshooting procedures.
• Managed Nexus 2k, 5K, 7k and 9k switches.
• Monitored the Network performance based on company’s Service Level Agreement (SLA).
• Configured VLANs with 802.1Q tagging according to the Server team’s requirements.
• Performed Layer I, II and III troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications.
• Configured Cisco Routers for BGP, OSPF, RIP, RIPv2, EIGRP, Static and default route in a VPN environment using MPLS.
• Implementing and troubleshooting the MPLS network.
• Upgraded global UC clusters from 8.6 to 9.X and supported Infoblox appliances grid environment for DNS, DHCP, BOOTP and IP Address Management tools (IPv4), for the State Farm enterprise network.
• Centralized management, visibility and high availability of DNS, DHCP, BOOTP and IPAM devices through Infoblox.
• Provided Network Support in the designing and implementation of Point to Point over T1s Frame Relay, DSL over ATM and IP over Frame Relay and Gigabit Ethernet.
• Schedule conference bridges for escalated issues, used troubleshoot ticketing system such as BMC remedy and on - call support for severity one network outages.
• Implementation and configuration of F5 Big-IP LTM-6400 load balancers.
• Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs.
• Developed high level design based on Juniper IPsec auto-VPN solution and Insta PKI.
• Commissioned nine SRX 5800 cluster and integrated them into MTS network.
• Migration of Cisco FWSM to Juniper SRX 3600 cluster.
• Using self-made Perl script successfully converted Cisco FWSM config to Juniper SRX config.
• Cisco ASA/Checkpoint R75,R76,R77,R80, VFX Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.

Environment: Cisco 2600/2800/3600/3800 Routers, Cisco 2950/3700/6500/7613 switches, ASA Firewall, Infoblox, RIPv2, OSPF, BGP, EIGRP, LAN, WAN, MPLS, F5 Load Balancers, VLAN, Trunking, PPP.

Confidential

Network Administrator

Responsibilities:

• Supported core network consisting of Cisco routers running multi area OSPF. Implemented stub/Totally stub areas as per requirements.
• Deployed Cisco ACS using TACACS+ for Authentication, Authorization and Accounting of access to network devices.
• Develop Cloud infrastructure, design, deploy, test, and manage WiFi systems in the industry.
• Developed Managed Services portal for monitoring global WiFi network for over 75+ sites.
• Resolve customer WAN/LAN/wireless/load balancing networking issues.
• Installed and configured Solarwinds server.
• Configuring IPsec VPN Site-site, GRE Tunneling and SDM along with troubleshooting.
• Firewall and router configuration changes as per the business requirement.
• Evaluating network performance, including availability, utilization, throughput, and latency
• Optimized OSPF and EIGRP network reducing network multicast traffic.
• Greatly enhanced network manageability using SNMP, NTP, SSH and SolarWinds.
• Extensive day to day work with Spanning Tree Protocol and multiple VLANs.

Confidential

Network Engineer

Responsibilities:

• Provided support for global network including T1/T3, ATM connections using HDLC and Frame Relay on 2600, 4000 series Routers. Cisco CLI, Cisco works, Network Security, Network Analysis Tools.
• Responsible for SNMP Monitoring and Performance Tuning software.
• Designed WAN structure to prevent single point of failure in case of link failure.
• Planning and Implementation of Subnetting, VLSM to conserve IP addresses.
• Experience in configuring STP for loop prevention and VTP for Inter-VLAN Routing.
• Performing the Configuration and troubleshooting of EIGRP, OSPF, and BGP.
• Dealt with the configuration of Standard and Extended ACLs for Security.
• Performed IOS upgrades on Catalyst 3550, 2950, 1900 switches, and 3600, 2600 and 2500 routers.
• Implementing Network Security with Cisco IOS Feature Set, NAT, and Simple Network Management Protocol.
• Involved in installing and configuring PIX 515E firewall.
• Dealt with DNS, DHCP trouble shooting and other IP conflict problems.
• Implementation of name resolution using WINS & DNS in TCP/IP environment.