SUMMARY

• 8+ years of experience in networking, installing, configuring and maintaining network devices.
• Hands on experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 and Nexus 3000, 5000, 6000, 7000 series switches and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers.
• Implementing IP addressing schemes, LAN/WAN protocols, IP Services, to meet network requirements in different environments.
• Expertise in Configuration of Virtual Local Area Networks (VLANS) using Cisco routers and multi - layer Switches and supporting STP, RSTP, PVST, RPVST along with trouble shooting of inter-VLAN routing and VLAN Trunking using 802.1Q.
• Implemented redundancy with HSRP, VRRP, GLBP, Ether channel technology (LACP, PAgP).
• Proficiently implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, Route Maps and route manipulation using Offset-list.
• Hands on experience in deployment of GRE tunneling, SSL, Site-Site IPSEC VPN and DMVPN.
• Extensively worked on Cisco catalyst 6509 and implemented VSS along with VDC and VPC on Nexus 5505, 7009 switches.
• Comprehensive expertise in the implementation of optimization, analysis, troubleshooting and documentation of LAN/WAN networking systems.
• Working knowledge on configuring access lists. Troubleshooting DNS/DHCP issues within the LAN network.
• Troubleshooting of complex network systems including high-end routers: CISCO GSR, ASR1K, ASR9K, 2600, 2800, 3600, 7200, 12000 Series Routers, and Catalyst 4500, 6500, and 7600 switches
• Cisco ASA Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Extensive Knowledge on the implementation of Cisco ASA 5500 series firewalls.
• Expertise in IP subnetting and worked on various designing and allocating various classes of IP address to the domain
• Extensive Knowledge on the implementation of Cisco ASA 5500 series and checkpoint R 75 firewalls
• Extensive hands-on experience in working with complex routed LAN and WAN networks, and preparing technical documentation.
• Involved in troubleshooting network traffic and its diagnosis using tools like ping, traceroute, WireShark, TCP dump and Linux operating system servers.
• Sound knowledge of Routing and Switching concepts and MPLS design.
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP, NTP.
• Expertise in OSI layer model/TCP/IP.
• Extensive knowledge and experience of routing and switching protocols RIP, OSPF, EIGRP, BGP and VLAN.
• Good Knowledge in troubleshooting issues on NAT.
• Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.
• Experience configuring Virtual Device Context in Nexus 7010
• In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 Sonet POS OCX / GigE circuits, Firewalls.
• Primary responsibility is to design and deploy various network security & High Availability products like Cisco ASA other security products
• Responsible for Check Point and Cisco ASA firewall administration across global networks.
• Worked on ASR 1000 series routers.

TECHNICAL SKILLS

Cisco Routers: 2600, 2900, 3600, 3800, 7200 and 7600

Cisco L2 & L3 Switches: 2900, 3560, 3750, 4500, 4900, 6500, Nexus 5K/7K

LAN Technologies: Ethernet, Fast Ethernet, and Gigabit Ethernet, SMTP, VLAN, Inter-VLAN Routing, VTP, STP, RSTP, Light weight access point, WLC.

WAN Technologies: Frame Relay, PPP, HDLC, (E1/T1/E3T3), DS3, OC192.

Network Security: Cisco ASA, ACL, IPSEC, Juniper SRX.

OS products/Services: DNS, DHCP, Windows (2000/2003/2008 , XP), UNIX, LINUX.

Routing Protocols: RIP v1/v2, OSPF, EIGRP, IS-IS, BGP, PBR, Route Filtering, Redistribution, Summarization, and Static Routing.

Gateway Load Balancing: HSRP, VRRP, GLBP

Various Features / Services: IOS and Features, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, TFTP and FTP.

Network Management Tools: Wireshark, Netflow Analyzer NetScout, Wireshark, Solarwinds, SNMP, Cisco Works, Ethereal, SNMP, HP open view, Ethereal.

Security Server Protocols: TACACS+, RADIUS

Facilities: DS0, DS1, DS3, OCX, T1/T3

Load Balancers: Cisco CSM, F5 Networks (Big-IP) LTM 8900, Cisco ACE 4710.

Operating Systems: Windows (98, ME, 2000, XP, Server 2003/2008, Vista, Windows 7), Linux

Firewall & Security: Checkpoint, Cisco ASA, Palo Alto, ASA 5505 Firewall, Juniper Net Screen firewall

PROFESSIONAL EXPERIENCE

Confidential, Long Island NY

Sr Network Engineer / On - Site engineer

Responsibilities:

• Installing, Maintaining and Troubleshooting Cisco ASR 9K, 7600 Routers and Cisco 4510, 4500-X, 4948, 3560 X, 3750X and 2960S Switches for deployment on production network.
• Configuring and troubleshooting Protocols like OSPF, BGP, MPLS and Multicast on the customer network.
• Working on various CISCO proprietary tools like Network Profile for performing network based audits and collecting configuration related files.
• Hands on experience doing Bug Scrubs related to specific IOS codes and reviewing it with customer to implement it in their network.
• Creating MOP’s to perform system upgrades on 3K (3650, 3750 and 3850), 4K (4800, 4948) series Catalyst, 7600 and ASR9K (9010, 9922) series routers.
• Scheduling maintenance windows for applying various network related configurations, patches, service packs (ASR 9K) and implementing best practices.
• Worked extensively on unreachability project from cisco CSPC (Common Services Profile Collection) to 2400 devices Networkwide which included communication with the respective teams such as WIFI, Security, SERVER, Database etc.
• Configuring, upgrading and verifying the NX-OS operation system on 7K, 5K and 2K series devices.
• Performing a network wide audit to make sure all the customer devices are running the appropriate IOS code. If the devices are out of software/hardware maintenance/support then upgrading them to the BU recommended code after reviewing it with internal peers would be on priority.
• Updating the customer about the CISCO devices or their IOS versions which are prone to vulnerability described in PSIRT (Cisco Product Security Incident Response Team) and providing them with workaround.
• Used troubleshooting applications and tools such as Checkpoint Smart View Tracker, Smart View monitor, Wireshark, Tcpdump, Trace route, Solarwinds, NetScout and command line utilities to identify, report and provide resolution to all kinds of firewall and VPN related connectivity issues
• Installing and configuring new Cisco equipment including Cisco catalyst switches 6500, Nexus 7010, Nexus 5548 and Nexus 2k as per the requirement of the Organization.
• Design, Install and consolidation of local server farms in multiple branch locations with Cisco 4500-X at distribution and 4948’s replacing the 3750’s at access level.
• Experience configuring VPC (Virtual Port Channel), VDC(Virtual Device Context) in Nexus 7010/7018
• Experience with configuring FCOE using Cisco nexus 5548
• Monitored network for optimum traffic distribution and load balancing using Solar winds
• Configured Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000 to connect servers and storage devices.
• Configuring Static, BGP and OSPF Routing Protocols on Cisco Routers.
• Experience in migration of VLANS.
• Cisco Routing and switching platforms like Catalyst 6500/7600, ASR 9000, Nexus
• Mapped, Network Diagrams and physical identification in MS Visio.
• Updated documentation as necessary.
• Preformed IOS upgrades on Cisco routers and switches

Environment: Cisco 2960/3650/3750 X/ 3850/ GE/4948E/WS-C4948/ Catalyst switches and Cisco 7600/ASR9K (9010/9922)/Nexus 7K/5K Routers and datacenter switches. Automation tools like Network profile (NP)/ HP(Opsware). Monitoring tools SevOne/Cacti.

Confidential, MA

Sr Network Engineer

Responsibilities:

• Deploying and decommission of VLANs on core ASR 9K, Nexus 7K, 5K, 2k and its downstream devices.
• Experience in Configuring, upgrading and verifying the NX-OS operation system.
• Experience with converting 6500 to Cisco Nexus in the data center environment.
• Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000.
• Experience working on different monitoring tools Q radar, Zenoss and Net scout to analyze and resolve the issues
• Experience with network monitoring tools like Solar winds Orion and troubleshooting (SNMP configuration monitoring and syslog analysis)
• Hands on experience in Cisco ASA 5505, 5510, 5520, 5540, 5545-x with firepower, 5550 series firewalls, Cisco Source fire Amp IPS and Cisco ACS.
• Experience working and configuring with Nexus 7010, 5020, 2148, 2248 devices
• Configuration of Cisco 6500 (Sup 720), 4500 (SUP 6) & 3750 Catalyst Switches for network access. Worked extensively on Cisco Firewalls, Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.
• Configured Nexus 7010 including NX-OS Virtual Port Channels, Nexus port profiles, Nexus Version 4.2 and 5.0, Nexus VPC peer links.
• Extensive knowledge in IKE v1/V2, IPSEC Site to Site VPN, remote access VPN (IPSEC, SSL client and clientless VPN).
• Experience in Wireshark log analysis.
• Experience with troubleshooting of WAN and LAN connectivity technologies
• Detailed knowledge of critical routing and switching features such as Class of Service/Quality of Service, Traffic and Performance Engineering, High Availability, and IP Services such as FTP, NAT/PAT, and NTP
• Configuring, Installing and troubleshooting on Check Point Devices.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.
• Day-to-day activities include working with project teams on network changes, resolving VPN issues, handling support tickets, assigning access, monitoring the network, applying patches and building non-production subnets
• Configured OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
• Monitoring Network infrastructure using SNMP tools HP NNM, Solar-winds and Opnet
• River stone RS 8600 to Alcatel-Lucent 7750 SR swap, CDMA mobile backhaul, MTS (Ukraine) - customer support, design assistance, implementation, and support.
• ConfiguredF5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability
• Worked on migrating the LTM 5100 version 9.2 to 5100 LTM version 9.4 and F5 GTM configurations
• Worked on updating pools, members and nodes using the GUI interface for the local traffic managers
• Experience in dealing with Bigpipe commands, Bigpipe configurations, and command line tools like Tcpdump, Qkview, Bigtop and Big start
• Involved in iRule management like loading rules, writing iRule syntax using TCL language and iRule extension to TCL.
• Transitioned Load Balancing efforts for Citrix products from F5, to NetScaler.
• Worked on updating the SSL certificates to the application URL using the F5 LTM and F5 GTM
• Working with Network Design and implementation teams on various projects across North America.
• Experience with manipulating various BGP attributes such as Local Preference, MED, Extended Communities, Route-Reflector clusters, Route-maps and route policy implementation.
• Experience in network security in a telecommunications environment.
• Performing the Firewall ACL requests change for various clients by collecting source and destination details
• Performing troubleshooting on slow network connectivity issues, routing issues that involves OSPF, BGP and identifying the root cause of the issues.
• Configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4.

Environment: Cisco 3750/3550/3500/2960/6807 switches and Cisco 3640/ / 0 / 0/2800 routers, Cisco ASA5510 Checkpoint, Aruba Controllers 6000, 3600, 3400,650, Cisco Nexus 7K/5K, 2248/3560/5020/6509

Confidential, Elmhurst, IL

Sr Network Engineer

Responsibilities:

• Maintain, upgrade and commission of branch and campus sites connectivity into data centers and create a seamless network hardware standard across all North American branches.
• Installing and configuring new Cisco equipment including Cisco catalyst switches 6500, Nexus 7010, Nexus 5548 and Nexus 2k as per the requirement of the Organization.
• Creating a rule on the checkpoint firewall for a NAT (used ACLs to block unauthorized users) to the VLAN IP and allowing the IPSec traffic
• Installation and deployment of new Server farms in multiple silos.
• Primary responsibility is to design and deploy various network security & High Availability products like Checkpoint, Cisco ASA other security products
• Design, Install and consolidation of local server farms in multiple branch locations with Cisco 4500-X at distribution and 4948’s replacing the 3750’s at access level.
• Worked as a part of data center deployment where we converted from Cisco 6500 to Nexus.
• Experience with configuring FCOE using Cisco nexus 5548
• Worked primarily as a part of the security team and daily tasks included firewall rule analysis, rule modification and administration.
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks
• Implementation of L3 MPLS-VPN and Migration of branches to the new MPLS cloud.4
• Managing and providing support to various project teams with regards to the addition of new equipment such as routers switches and firewalls to the DMZs.
• Configuring Static, BGP and OSPF Routing Protocols on Cisco Routers.
• Configured Site to Site IPsec VPN tunnels to peer with different clients and each of client having different specifications of Phase 1 and Phase 2 policies using Cisco ASA 5500 series firewalls.
• Configured Easy VPN server and SSL VPN to facilitate various employees’ access internal servers and resources with access restrictions
• Installing and configuring Checkpoint NG R55 & NGX R60
• Configured inside ACL, outside ACL, inside, outside interfaces.
• Configured NAT and PAT policies.
• Configuration and troubleshooting of EIGRP, OSPF, BGP.
• Configuration and troubleshooting of CSM, integration with ASA devices.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500.
• Experience in migration of VLANS.
• Adding and removing checkpoint firewall policies based on the requirements of various project requirements
• Cisco Routing and switching platforms like Catalyst 6500/7600, ASR 9000, Nexus
• Implementation of Access Lists for allowing/blocking desired traffic.
• Configuring VLANs/routing/NATing with the firewalls as per the network design.
• Configured EBGP load balancing and Ensured stability of BGP peering interfaces
• Design and Implement Remote access VPN server using Checkpoint NGX R60 and NG R 55 & Cisco ASA
• Worked on F5 BIG IP LTM 3600 load balancers to configure Nodes, Pools and VIP’s on a need basis.
• Designed and implemented DMZ for Web, Mail & FTP Servers using Cisco ASA5500 Firewalls.
• Worked extensively on Cisco ASA 5500(5510/5540) and experience with deploying rules to the Cisco ASA solution.
• Building the VPN tunnel and VPN encryption.
• Worked with engineering team to resolve tickets and troubleshoot L3/L2 problems efficiently.

Environment: Cisco 3900/4400/7200/7600 Routers, Cisco 3650/6500/6800 Switches, Nexus 7k/5k/2k FEX RIP, OSPF, BGP, EIGRP, LAN, WAN, CISCO ASA 5500, HSRP, VRRP, GLBP, VLAN, QoS, Wireshark, Solarwinds.

Confidential, Jessup, PA

Sr Network Engineer

Responsibilities:

• Installing, Configuring and troubleshooting Cisco Routers (ASR1002X, 3945, 3845, 2800, 3600,7200. 9000) and Switches to perform functions at the Access, Distribution, and Core layers.
• Configuring, upgrading and deployment of Nexus 7010, 5596 and 2248.
• Designing, implementing LAN/WAN configurations on Cisco Nexus 5K, catalyst 6500 switches
• Configuring and resolving various OSPF issues in an OSPF multi area environment.
• Implemented, configured BGP WAN routing, converting OSPF routes to BGP (OSPF in local routing).
• Expertise in maintenance of layer2 switching tasks - VLAN, VTP, RSTP, configuration of ether channel with LACP and PAGP along with troubleshooting of inter-VLAN routing.
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks
• Packet capturing, troubleshooting on network problems with Wireshark, identifying and fixing problems
• Implementing, configuring, and troubleshooting various routing protocols - EIGRP, OSPF, and BGP.
• Performing network monitoring, providing analysis using various tools like Wireshark, Solar winds etc.
• Experience working in Datacenter environment, configuration changes as per the needs of company.
• Manage project task to migrate from Cisco ASA firewalls to Check Point firewalls
• Redesigned Internet connectivity infrastructure for meeting bandwidth requirements.
• Configuring, implementing and troubleshooting VLAN’s, VTP, STP, Trunking, Ether channels.
• Installing, configuring Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design.
• Experience in configuring, upgrading and verifying the NX-OS operation system.
• Configured and managed Cisco access layer routers and switches
• Provided support for troubleshooting and resolving customer reported issues
• Planning and upgrading Check Point infrastructure including Smart Centers and enforcement points
• Worked on F5 BIG-IP LTM 8900, configured profiles, provided and ensured high availability.
• Troubleshoot and Worked with Security issues related to Cisco ASA, and IDS/IPS firewalls
• Worked on F5 and CSM load balancers deploying many load balancing techniques with multiple components for efficient performance.
• Experience migrating Cisco 7600/6500 devices to ASR9k routers
• Configured and managed OSPF redistribution and authentication with type 3 LSA filtering and to prevent LSA flooding and also configured OSPF over frame relay networks.
• Designing, configuring, implementing and troubleshooting (LAN) VLAN’s, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience
• Configuration and set up of Juniper SRX firewalls for policy mgmt. and VPN's
• Provided firewall policy configuration and services with Juniper SRX 240 & 650 service gateways
• Implemented site to site VPN in Juniper SRX as per customer.
• Implemented various EX, SRX & J series Juniper devices.
• Implementing and managing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).
• Configuring HSRP for network redundancy and High availability.
• Involved in designing of LAN (Ethernet) and WAN infrastructure for the new Data Centre Using MS Visio.
• Route configuration and point code checks for System Technician and Network Technician
• Configuring VPN for site-site and remote access.
• Designing and configuring IP address schemes.
• Maintaining Cisco hardware and Cisco IOS upgrade.
• Configured Cisco 1231 Access points with 5959 and 4941 antennas (802.11/a/g).
• Designing, configuring, implementing and troubleshooting (LAN) VLAN’s, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.

Environment: Cisco 2960/3560/3750/4500/6500 switches and Cisco 3640/12000/ 7200/3845/3600/2800 routers, Cisco Nexus 5K/2K, Cisco ASA5510, Checkpoint, Aruba Controllers 6000, 3600,3400,650: windows server 2003/2008: F5 BIGIP LTM.

Confidential, Austin TX

Network Engineer

Responsibilities:

• Configured IP RIP, PPP, BGP and OSPF routing.
• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies. Cisco CLI, Ciscoworks, Network Security, Network Analysis Tools
• Experience with Checkpoint Firewall policy provisioning.
• Identify, design and implement flexible, responsive, and secure technology services.
• Experience with Firewall Administration, Rule Analysis, Rule Modification.
• Troubleshoot traffic passing managed firewalls via logs and packet captures.
• Configured and resolved various OSPF issues in an OSPF multi area environment.
• Worked with telecom vendors in regards to network fault isolation.
• Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
• Route configuration and point code checks for System Technician and Network Technician.
• Installed different software on the systems. Install and managing network devices including Hubs, Switches.
• Managing and configuring Cisco Switches and Firewalls independently
• Layer 2 switching technology architecture, implementation and operations including L2 and L3 switching and related functionality. This includes the use of VLANS, STP, VTP and their functions as they relate to networking infrastructure requirements including internal and external treatment, configuration and security.
• Worked on Checkpoint NGX R65 firewalls for building the ACL rules for the extranet connectivity and implementation of the rules on the corporate firewalls and monitored logs for the issues.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• Estimated Project costs and created documentation for project funding approvals.
• Managed various teams involved in site surveys, cabling specifications, Network equipment installation and configuration.
• Network security involves web filtering on internet sites (User's restriction) using checkpoint Firewalls.
• Planned resources and presented project status to higher management.
• Deployed 7613 as PE and CE router and configured and troubleshooted the Edge Routers.
• Excellent troubleshooting knowledge on T1, T3, OC-3 and OC-12.
• Created and delivered internal trainings for BGP.
• Configured egress and ingress queues for ISP facing routers using CBWFQ.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Ability to analyze, configure and troubleshoot networks.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience
• Designed and implemented Cisco VoIP infrastructure for a large enterprise and multi-unit office environment. Met aggressive schedule to ensure a Multi-office reconfiguration project which was successfully delivered
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support
• Supporting EIGRP and BGP based PwC network by resolving level 2 &3 problems of internal teams & external customers of all locations

Environment: Net Flow, TACACS, EIGRP, RIP,OSPF,BGP,VPN,MPLS,CSM,SUP720, Ether Channels, Cisco 7200/3845/3600/2800 routers, Fluke, Sniffer, Cisco 6509/ 3750/3550/3500/2950 switches, Checkpoint firewalls Secure PLATform.

Confidential

Network Engineer

Responsibilities:

• Experience in Cisco 7200, 7600 routers, Cisco series switches: Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay and ATM).
• Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. Configured Cisco Routers for OSPF, RIP, IGRP RIPv2, EIGRP, Static and default route.
• Configured the Cisco router as IP Firewall and for NATting.
• Worked with the Help Desk for circuit troubleshooting to give Support to the Tech persons at the site.
• Configuring routers and sending it to Technical Consultants for new site activations and giving online support at the time of activation.
• Supporting Development team for the access to corporate network and outside world. Providing access to specific IP, Port filter and port access.
• Switching (Ethernet) related tasks included implementing VLANS and configuring ISL trunk on Fast-Ethernet channel between switches.
• Installed and configured PIX 520, 525, 535 series firewalls, configured standard and extended access-lists and policy- based filters.
• Configured ASA 5510 appliance and VPN.
• Responsible for implementing Qos prioritizing voice traffic over a data.
• Implemented SNMP on Cisco routes to allow for network management. Completed the installation and configuration of T1, T3 & OC3 circuits.
• Troubleshoot TCP/IP problems, troubleshoot connectivity issues.

Environment: TCP/IP networks, Cisco Works 2000, VLAN, VTP, STP, Trunks H/W, network drives, DSL, T1 Lines LAN, WAN, VLANs, IP Access List, Cisco 2620, 3750, 2950 and Link sys