SUMMARY

• Around 8 years of experience in Networking and Security, including hands - on experience in providing network support, installation and analysis for a broad range of LAN / WAN/MAN communication systems.
• Hands on experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 and Nexus 3000, 5000, 6000, 7000 serswitches and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers, Load Balancers & Cisco Firewalls.
• Experience with various LAN and WAN technologies and protocols like: - TCP/IP, VLAN, VTP, STP, EIGRP, OSPF, BGP, IKE/IPSec VPNs, NAT, DNS, MPLS and access list.
• Led integration efforts between new technology domains of SDN, NFV, and Cloud with existing inventory, fault management, telemetry, Big Data, provisioning, activation, and capacity management systems and processes for minimal operational disruption.
• Hands on experience in configuring Cisco Nexus2232, 2248, 5548, 6001 and 7018(Sup 2E) and worked on nexus protocols VPC, VRF, VDC and FEX Links.
• Provide technology insight and direction to CIO leadership office.
• Understand vendor strategies and directions for SDN/NFV like Cisco, Juniper, Brocade.
• Evaluate technologies for Managed Services Service Assurance from SDN/NFV standpoint.
• Experience with tunneling methods like GRE/mGRE, DMVPN, IPsec, L2TP, ezvpn, IKE v1 and v2 remote vpns.
• Excellent knowledge and experience on multi-vendor platforms like Cisco, Juniper, Checkpoint, F5 Big-ip LTM load balancers, Bluecoat, Riverbed, Citrix, and VMware.
• Experience in implementing and designing new solutions with Cisco ASA Firewall series 5505, 5510, 5512-X and Palo Alto Firewall series PA-500, PA-2050.
• Hands-on experience of various layer 2 transport protocols including ATM & Frame Relay and MPLS, 2547bis VPN, RFC 4364, mVPN, VPLS.
• Extensive knowledge of Load balancing technology including algorithms and health check options.
• Experience directly managing routers, switches, load balancers and SSL accelerators in a high-availability infrastructure.
• Expert understanding of TCP as it pertains to packet inspection and network/application flows.
• Expert ability to troubleshoot issues and make recommendations for system changes, as needed, to resolve issues.
• Designing and implementation of DMVPN based IPSEC on all ATM centers Installation and configuration.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience.
• Experience in configuring and troubleshooting BIG-IP F5 load balancer LTM creating virtual servers, nodes, pools and iRules on BIG-IP F5 in LTM module.
• Working knowledge of IIS Server, DHCP Server, DNS Server, proxy server on linux and windows. Implementation and administration of DNS, DHCP and WINS.
• Very good knowledge in scripting languages like TCL/TK, Perl and Python.
• Intrusion Prevention System - IDS/IPS(IBM ISS IPS) Implementation and Upgrade for Site Protector.
• Experience with multi-vendor Load Balancers, WAN accelerators, Proxy Server, Content Filtering and also with automate network administration using applications like HPNA.
• Expertise in creating groups and pruning traffic flow using VLAN, VTP, ISL, 802.1Q.
• Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.
• Moderate knowledge in configuring and troubleshooting Wireless Network: Net gear, Wireless Security Basics, IEEE 802.11 a/b/g, RF spectrum characteristics as well as WAN testing.
• Experience with VOIP and QOS implements and support.
• Experience in the configuration of Aggregation protocols for Ether Channel i.e. PAgP and LACP.
• In-depth knowledge and hands-on experience on IP Addressing, Subnetting, VLSM and ARP, reverse & proxy ARP, Ping Concepts.
• Has experience in working on cloud AWScloud EC2, S3, RDS, Load Balancer, Auto Scaling with AWScommand line interface and AWS python SDK.
• Effective inter-personal skills, adaptive to any environment, keep abreast with the latest technologies and delivering solutions as an individual and as part of a team.
• Well organized, Self-starter, Quick learner, Self-Motivated, Team player with analytical, technical and communication skills.

TECHNICAL SKILLS

Cisco Platforms: Nexus 7K, 5K, 2K & 1K, Cisco routers (7600,7200, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900 series)

Juniper Platforms: SRX, MX, EX Series Routers and Switches

Networking Concepts: Access-lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPSec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi

Firewall: PIX Firewall (506/515/525/535 ), ASA Firewall (5505/5510),Palo Alto, Checkpoint

Network Tools: Solar Winds, SNMP, Cisco Works, Wireshark

Load Balancers: A10 Networks(AX2500),Cisco CSM, F5 Networks (Big-IP)

WAN technologies: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPPDS1,DS3,OC3, T1 /T3 & SONET

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q

Security Protocols: IKE, IPSEC, SSL-VPN

Networking Protocols: RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA

AAA Architecture: TACACS+, RADIUS, Cisco ACS.

Operating System: Windows 10,8,7/XP, MAC OS X, Windows Server 2008/2003, Basic Linux

PROFESSIONAL EXPERIENCE

Confidential, CHICAGO, IL

Network Engineer

Responsibilities:

• Working as Network Engineer, Hands on experience with Cisco Nexus 7000/5000/2000 , and Catalyst 3750, 4500 and 6500 platforms.
• Network Engineering and Troubleshooting experience relative to complex data infrastructure technologies and best practices in both end-user and data center environments.
• IOS Version management and IOS upgrades.
• 802.11a/b/g/n wireless networking and Cisco wireless implementation and management.
• Expert understanding of Quality of Service (QoS) provisioning, monitoring, and management.
• In-depth knowledge of layer 3 technologies, such as HSRP, EIGRP, OSPF and BGP.
• Understanding of Network infrastructure and best practices.
• Experience with Cisco Switching and Routing configuration and operational support.
• Experience with the upgrades of network devices like Palo alto, ASA firewalls, F5 Load balancer, routers and switches.
• Implementing new wireless LAN controller 2504 and 2802 access points.
• Working Knowledge of Cisco IOS, and Nexus (7K, 5K, 3K & 2K).
• Efficient designing of IP Addressing Scenario using VLSM and Sub netting.
• Good at OSI Layers concepts.
• Switching tasks include VTP, ISL/ 802.1q, VLAN, Ether Channel, STP and RSTP.
• Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).
• Experience in physical cabling, IP addressing and Subnetting with VLSM, configuring and supporting TCP/IP, DNS, installing and configuring proxies.
• Specific tasks include Integrated, Integrations, configurations, support and maintenance of routers and switches.
• Experience with design and deployment of MPLS Layer 3 VPN, MPLS Traffic Engineering, MPLS QOS
• Diverse industry exposure - telecom, consumer goods, health care and IT consulting
• Knowledge on complex, Cisco ASA & Palo Alto firewalls Environment.
• Proficient in setting up IT infrastructure including wide area networks (WAN) local area networks (LAN), security management systems network device administration.
• Experiene on Solarwinds tool to monitor all the devices in Confidential .
• Worked on implementation of the basic F5 ASM, F5 LTM and F5 APM.
• Creating Virtual Servers, Nodes, Pools, I apps and I rules on BIG-IP F5 in LTM module.
• Configuring and troubleshooting F5BIGIP LTM load balancing and implementing, Creating I rules, Virtual servers, Pools, Nodes with health, Profiles, SNAT, SSL, NAT, Traffic Policies.

Confidential, CHICAGO, IL

Network Admin

Responsibilities:

• Daily work includes handling DNS, IP management and DHCP tickets using Vital QIP. Assigning and maintaining IP addresses for UHG internal external and tricare environments.
• Handling DNS, Subnet and IP requests expeditiously but carefully from work intake buckets (various).
• Ability to perform problem solving on DNS issuesand take turn with on-call support.
• DNS and IPAM Infoblox device configuration, management and operations in an enterprise environment.
• Planning, Designing &implementing various solutions in distributed environment using Checkpoint, Cisco PIX & ASA, and Palo Alto NGFW.
• Principal researcher and outbound industry expert on Carrier IT, including NFV and SDN across all layers of the carrier infrastructure, and the enterprise customers of carriers.
• Supporting EIGRPand BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations.
• Enterprise Routing experience using protocols RIP v1 & 2, EIGRP,OSPF and BGP.
• Acted as Atmos Market Liaison for DMVPN Network Changes/CirCuit Upgrades with FSA's / Mgmt / LECS.
• Linux and BIND configuration, zone transfer, data import/export and/or understanding for transition to Infoblox environment.
• Implementation of Cisco's Virtual Office solution through utilization of DMVPN tunneling, and ArcanaNetworks MEVO server.
• Re-engineering of APHIS DMVPN solution to include EIGRP failover and route tagging.
• Working withCiscoChannel partners to build practices aroundCisco ACIand Nexus 9000.
• Windows DNS and Active Directory (conditional forwarding, etc.) knowledge/administration to support Windows team for DNS.
• Configuration and Administration of Palo Alto Networks Firewall to manage large scale Firewall deployments.
• Configured and managed updated Cisco Network Systems with routers for MPLS Client VPN, Site-to-Site VPN and Dynamic VPM (DMVPN).
• DNS name resolution Moves, Adds, Changes and Deletions (MACD).
• Updating of DNS ISP infrastructure through zone transfers.
• Provided DNS engineering support to DNS Architect and DNS team.
• Serve as the first point of contact for troubleshooting hardware and software for DNS problems.
• Ability to work up to an in-depth understanding of the overall network infrastructure and the ability to provide remote troubleshooting and resolution.
• Proficient in load balancing platforms such as NetScalers, Cisco ACE.
• Maintaining and updating inventory using Network Management Application layer softwares like SNMP, Wireshark, NTP, and Syslog.
• Working with monitoring tools such as airwave, Tufin, CSM and Solarwinds.
• Experience with DNS Simple Failover.
• Installation and maintenance of Windows NT and 2000/2003/2008 DNS, DDNS, DHCP and WINS Servers for the DOMAIN.
• Configured and managed Networking and Network Security by performing system administration / analysis that includes installing/configuring proxies, DNS, IP addressing scheme & IP subnetting with VLSM, configuring VLANs & Trunks.
• Installation, configuration and implementation of Windows 2003/2008 ADS, DNS, DHCP.
• Implementing security Solutions using Palo Alto PA-500, PA-2020, Check Point Firewalls R75, R77.20 GAIA.
• Aided in troubleshooting potential network issues in rolling out ISE.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.
• Production environment experience consisting of Global load balancing, local load balancing, SSL acceleration, HTTP compression/caching, and DNS.
• Strong experience with F5 Load Balancing platforms, integration / configuration / administration.
• Configured access layer switches in the ISE lab for implementation testing.
• Configured F5 Big IPs with VIPs, Pool, IRules and SSL certificates to ensure traffic was load balanced. Tested end to end connectivity via firewalls, routers and switches.
• Design and deployed F5 LTM and GTM load balancer infrastructure per business needs from the ground up approach.
• Implemented antivirus and web filtering on Juniper SRX 240 at the web server.
• Integrating Configuring Cisco Wireless LAN Controllers WLC with ISE to perform Dot1x authentication for Wireless users.
• Managed Juniper SRXfirewalls and IPS systems using CSM and ASDM.
• To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.
• Maintained BIG IP F5 APM VPN and provided solutions for intricate issues.
• Upgrading and relicensed F5 LTM.
• Configuring policies on Juniper SRX, Netscreen and Cisco ASA firewalls.
• Upgrade of juniper firewalls and management servers from SRX110 to SRX 5400.
• Established IPSec VPN tunnels between branch offices and headquarter using Juniper SRX Firewall
• Configuring F5 LTM VIPs, pools, monitors.
• Proficient in using F5 GTM, AFM, ASM and other F5 components to protect against advanced DDoS attacks.
• Assigned IP addresses and DNS entries, PTR/MX/A/Reserved, in Infoblox and tested configurations.

ENVIRONMENT: Redhat Linux, Alcatel-lucent Vital QIP, Windows server manager, Venafi, Secure CRT, ESD center, HP server manager, HP open view.

Confidential, Raymond, OH

Senior Network Engineer

Responsibilities:

• Working as Sr. Network engineer supporting Cisco routers, switches, Net screen Firewalls, Bluecoat proxy servers and BIGIP load balancers.
• Planning, designing, Installing and Configuring of Cisco Routers (1700, 1800, 2500, 2600, 3200, 3600, 3700, 3800 and 7200, 7609) & Cisco L2 & L3 Switches (2900, 3560, 4500 & 6500), Raritan Dominion SX 32 console router, Infoblox TE-2220, ND 2200, Netscaler SDX 13500, MPX 8200, VPX NSSX 18500.
• Administration and diagnostics of LAN and WAN with in-depth knowledge of TCP/IP, NAT, PPP, ISDN and associates network protocols and services.
• Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).
• Responsible for OSPF, BGP and static routing using Nexus, Cat6k, ISR, ASR.
• Also performed Dual-homing on nexus based platforms using the feature VPC and also managed to do Virtualization on the nexus platforms using the feature VDC and also maintained VRF’s in those VDC’s.
• Understanding of IPSEC & GRE tunnels in VPN technology implementation using Cisco IOS and have checkpoint firewall /VPN.
• Architecting and building Complex solution based on Cisco Openstack NFV platform.
• Design and integrate end-to-end solution with Cisco Suite of NFV and NFVI product.
• Provided pro-active fault monitoring of Cisco routers and switches utilizing HP overview, Cisco Works and Cisco IOS commands.
• Provide network support for the core network including MPLS, DMVPN and Datacenters. L2VPN, L3VPN and VPLS setup on the MPLS cloud. Deployment of Back offices leased lines links and their integration with MPLS. Deployment of branch links over DMVPN and AT&T AVPN.
• Dealt with monitoring tools like (Solarwinds, Infoblox, and Kiwi-cat tool), network packet capture tools like Wire-shark.
• Managed DMVPN Initiative for Global AtmosEnergy Network, Config/Replacing AVPN Circuits/Router/Switch - Upgrades.
• Key contribution includes troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF, & BGP.
• Design and configuring of OSPF, BGP on Juniper Routers (MX960) and SRX Firewalls(SRX240)
• Working on Core Devices which is mention as Network Planner (OPNET).
• Managing and administering Juniper SRXand Checkpoint Firewalls at various zones including DMZ, Extranet (Various Business Partners) and ASZ and internal.
• Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support.
• Co-ordination with VoIP carriers for solving the complaints in SIP and h323 calls using wireshark trace.
• Design, Implementation, ongoing management and troubleshooting of Cisco Unified Communication systems including Call Manager/Unified Communication Manager 6x, 7x.
• Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF & EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers 7613, 7201 and 3945E.
• Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NATTING, Subnetting, also including DNS, LDAP, DHCP, http, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, WISM, STP (Spanning tree Protocol), RTSP & Multicasting protocols.
• Integrating Configuring RSA Secure ID with ISE for Token based authentications using RSA Native method RSA RADIUS method for user's remote VPN users.
• Installing Jun OS upgrade package on SRXdevices and also Upgrading the SRX cluster with minimal downtown.
• Performed Network Security Assessment and implemented security improvements such as network filtering, SSH, AAA, SNMP access lists, VTY access lists, EIGRPMD5 authentication, and HSRP authentication
• Tested QoS infrastructure to provide proper priority and queuing based on traffic type using Ixia and Spirent test sets.
• Working knowledge with monitoring tools like Solar Winds & network packet capture tools like Wire-shark and Opnet. Experience working with McAfee antivirus, Storage Area network (SAN) and datastorage system.
• Configuration and support of QOS features like CBWFQ, WRED.
• Utilized SNMP-based network monitoring tools such as Nagios and Solarwinds to manage networks.
• Create S2S VPN with our own offices and various clients using Juniper SRX firewalls or Cisco ASA.
• Maintained BIG IP F5 APM VPN and provided solutions for intricate issues.
• Deployed Palo Alto Firewalls for web filtering and application control.
• Provide post breach firewall analysis on checkpoint R77.10 gain, Palo Alto firewalls to recommend two-factor authentication solution.
• Installed, configured and maintained DNS systems using Route53 (AWS).
• Build servers using AWS: Importing volumes, launching EC2, creating security groups, auto-scaling, load balancers, Route 53, SES and SNS in the defined virtual private connection.
• Implementing, maintaining and troubleshooting switching tasks such as VLANs, VTP, VLAN Trunking using ISL and 802.1Q, STP, RSTP, PVST+, Ether channel using LACP and PAGP, Inter-Vlan routing, CEF and DCEF.
• Creating and provisioning Juniper SRX firewall policies.
• Manages Citrix Netscaler Gateways, Delivery Controllers, Storefronts, Provisioning, Licensing, and VMware servers for the Federal Trade Commission. Provides support for remote VPN access, and virtual desktop sessions.
• Configures, and troubleshoots MPX 9700 Netscaler and Xen Desktop servers for production, AT, and development environments.
• Upgrades Netscaler Gateways from version 10.1 to 10.5 with enhanced FIPS, and TLS security features, and high availability for redundancy.
• Configured Cisco Wireless Networks like IEEE 802.11 a/b/g/n, LWAPP, WLC, WCS, Standalone APs, Roaming, Wireless Security Basics, RF spectrum characteristics.
• Implementation of HSRP, IPSec, Static Route, IPSEC over GRE, Dynamic routing, DHCP, DNS, FTP, TFTP, RAS.
• Migration to virtual servers in F5 Load balancer as part of web.
• IP Base software includes advanced quality of service (QoS), rate limiting, access control lists (ACLs), Open Shortest Path First (OSPF) for routed access, and IPv6 functionality.
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Performed attribute manipulation in BGP multi-homed scenario using attributes like AS-Path, MED, Local Preference and weight.
• Configured Netscaler appliance for Monitoring network activity utilizing CA/Spectrum Monitoring tools.
• Implementation of Netscaler Load Balancers.
• Netscaler Load Balance experience; setting up, monitoring and configuring Netsclaer load balancer.
• Implementing, Monitoring, Troubleshooting and Convergence in Frame-Mode MPLS inside the core.
• Configured and installed new IP addresses for new users by using IP Addressing and Subnetting Scheme, and work on CITRIX applications.
• Splunk indexer clustering and search head clustering for single-site and multisite environments.
• Experience with both the Unix and Windows operating systems; comfortable on the SSH command line interface Splunk data parsing operations (search-time field extractions, eventtypes, tags)
• Performed Network Security Assessment and implemented security features such as network filtering, SSH, AAA, SNMP access lists, VTY access lists and HSRP authentication.
• Wrote IOS and CAT OS upgrade procedures and Pre/Post checks for customer production upgrades.
• Manage large and small data center deployments using KVM, Power and DCIM.
• Supported OSX and Windows devices for the school's one-to-one program.

ENVIRONMENT: Cisco Routers (1700, 1800, 2500, 2600, 3200, 3600, 3700, 3800 and 7200, 7609) & Cisco L2 & L3 Switches (2900, 3560, 4500 & 6500), F5 and CSM load balancers, Juniper SRX Firewalls, Cisco catalyst 6509, 7613, Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550, Netscreen SSG5, Netscreen 204, Netscreen SSG 320

Confidential, Kansas City, KS

Network Specialist

Responsibilities:

• Assisted in troubleshooting LAN connectivity and hardware issues in the network.
• Studied and analyzed client requirements to provide solutions for network design, configuration, administration, and security.
• Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.
• Monitor performance of network and servers to identify potential problems and bottleneck.
• Performed RIP & OSPF routing protocol administration.
• Interacted with support services to reduce the downtime on leased lines.
• Troubleshoot problems on a day to day basis; provide solutions to fix the problems.
• Monitor the operability and reliability of the network.
• Designed a test manual and automated test cases are perform the over Network testing tool IXIA and Spirent.
• Automate test cases for carrier grade, provider Edge and Core Routers. Validate the IP/MPLS features are consistent with client’s design and behave as expected in a multi-vendor, scaled environment
• Configure the access-list and patch on the Juniper router and Firewall for customer support.
• Maintenance and Troubleshooting of connectivity problems using Ping, Trace route.
• Managed the IP address space using subnets and variable length subnet masks (VLSM).
• Worked along with the team in ticketing issues; responsibilities included documentation and support other teams.

ENVIRONMENT: TFTP, RIP, OSPF, IP/MPLS, VLSM

Confidential

Network Consulting Engineer

Responsibilities:

• Configured and installed Cisco 2500, 3640, 7200, and 7940 Routers.
• Troubleshot network bandwidth performance, mismatched framing and line coding.
• Coordinated with LAN/WAN engineers the development and implements security policy.
• Monitored usage of network resources with Cisco works, and using sidewinder in PIX Firewall.
• Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.
• Configured remote users to access corporate LAN with VPN connectivity.
• Interfaced with various vendors for company products.
• Configured Frame-Relay, ISDN, ATM, Protocols, & load balancing switches.
• Configured IPX/SPX, HDLC, PPP, TCP/IP, BGP, EIGRP, RIP, & HSRP.
• Coordinated the routing of data for Internet access via diversity, load balancing on MPLS.
• Versed in proxy servers, web servers, and VPN networks on Windows and Unix OS.
• Configuration of Routers, switches, CSU/DSU, bridges, multiplexer & server. Troubleshooting of Data. communications circuits such as OCX, T3, fractional T3, T1's, fractional T1, DSL, ATM/IMA, Frame Relay andISDN.
• Configuration of IP and routing technologies for various protocols such as EIGRP, OSPF, and BGP for MPLSNetwork.
• Troubleshooting network issue for production and disaster recovery using various diagnostic techniques,
• Troubleshooting equipment, and service providers for successful completion.
• Created Network documents, tickets and network Visio diagram for various customers.
• Coordinated with network service providers & Telco to resolve network outages

ENVIRONMENT: Cisco 2500, 3640, 7200, and 7940 Routers, EIGRP, OSPF, and BGP for MPLS Network, IPX/SPX, HDLC, PPP, TCP/IP, BGP, EIGRP, RIP, & HSRP, T1, DSL, ATM/IMA, Frame Relay and ISDN