SUMMARY

• 8+ years of total IT professional as a Network Engineer.
• Experience in Networking and Security, including hands - on experience in providing network support, installation and analysis for a broad range of LAN /WAN/MAN communication systems.
• Hands on experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 and Nexus 3000, 5000, 6000, 7000 switches and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers, Load Balancers & Cisco Firewalls.
• Experience with various LAN and WAN technologies and protocols like: - TCP/IP, VLAN, VTP, STP, EIGRP, OSPF, BGP, IKE/IPSec VPNs, NAT, DNS, MPLS and access list.
• Experience with tunnelling methods like GRE/mGRE, DMVPN, IPsec, L2TP, ezvpn, IKE v1 and v2 remote vpns.
• Excellent knowledge and experience on multi-vendor platforms like Cisco, Juniper, Checkpoint, F5 Big-ip LTM load balancers, Bluecoat, Riverbed, Citrix, and VMware.
• Experience in implementing and designing new solutions with Cisco ASA Firewall series 5505, 5510, 5512-X, 5555-X and Palo Alto Firewall series PA-500, PA-2050.
• Hands-on experience of various layer 2 transport protocols including ATM & Frame Relay and MPLS, 2547bis VPN, RFC 4364, mVPN, VPLS.
• Extensive knowledge of Load balancing technology including algorithms and health check options.
• Maintain and manage hundreds Nexus9k/7k/2k and hundreds of routers CRS,ASR 9K/1K, Juno MX960, EX4500/3200 and F5 load balance
• Experience directly managing routers, switches, load balancers and SSL accelerators in a high-availability infrastructure.
• Expert understanding of TCP as it pertains to packet inspection and network/application flows.
• Experience with convert Checkpoint r80 VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience.
• Experience in configuring and troubleshooting BIG-IP F5 load balancer LTM creating virtual servers, nodes, pools and iRules on BIG-IP F5 in LTM module.
• Working knowledge of IIS Server, DHCP Server, DNS Server, proxy server on Linux and windows. Implementation and administration of DNS, DHCP and WINS.
• Very good knowledge in scripting languages like TCL/TK, Perl and Python.
• In-depth knowledge and hands-on experience on IP Addressing, Subnetting, VLSM and ARP, reverse & proxy ARP, Ping Concepts.
• Has experience in working on cloud AWScloud EC2, S3, RDS, Load Balancer, Auto Scaling with AWScommand line interface and AWS python SDK.
• Effective inter-personal skills, adaptive to any environment, keep abreast with the latest technologies and delivering solutions as an individual and as part of a team.
• Well organized, Self-starter, Quick learner, Self-Motivated, Team player with analytical, technical and communication skills.

PROFESSIONAL EXPERIENCE

Confidential, Chicago IL

Network Deployment Engineer

Responsibilities:

• Working as Network Engineer, Hands on experience with Cisco Nexus 7000/5000/2000 , and Catalyst 3750, 4500 and 6500 platforms.
• Network Engineering and Troubleshooting experience relative to complex data infrastructure technologies and best practices in both end-user and data center environments.
• Expert understanding of Quality of Service (QoS) provisioning, monitoring, and management.
• In-depth knowledge of layer 3 technologies, such as HSRP, EIGRP, OSPF and BGP.
• Understanding of Network infrastructure and best practices.
• Experience with Cisco Switching and Routing configuration and operational support.
• Experience with the upgrades of network devices like Palo alto, ASA firewalls, F5 Load balancer, routers and switches.
• Upgrade ios in Nexus7700/7100, JuniperMX960, and ASR1K, Migrate traffic from interface to new interface in ASR 9K.
• Implementing new wireless LAN controller 2504 and 2802 access points.
• Working Knowledge of Cisco IOS, and Nexus (7K, 5K, 3K & 2K).
• Efficient designing of IP Addressing Scenario using VLSM and Sub netting.
• Good at OSI Layers concepts.Experience in physical cabling, IP addressing and Subnetting with VLSM, configuring and supporting TCP/IP, DNS, installing and configuring proxies.
• Monitoring the NMS system for different Network Alerts.
• Skilled in using collections in Python for manipulating and looping through different user defined objects.
• Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
• Managing and Troubleshooting Cisco ASR 9K, 7600 Routers, Cisco 4510, 4500-X, 4948, 3560X, 3750X and 2960S Switches, Load Balancers and Cisco Firewalls with Firepower services for deployment on network.
• Implemented VPNs and associated tunneling technologies (MPLS, L3VPN, VPLS MVPN, IP SEC)
• Switching tasks include VTP, ISL/ 802.1q, VLAN, Ether Channel, STP and RSTP.
• Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).
• Designed QoS policies for critical applications based on business requirements and traffic patterns.
• Implemented Site-to-Site VPNs over the Internet utilizing 3DES, AES/AES-256 with ASA Firewalls.
• Experience with migrating from Cisco ASA 8.2 version to Cisco ASA 8.4 Version.
• Experience with convert PIX rules over to the Cisco ASA 55XX solution.
• Skilled in Object-Oriented Design and Object-Oriented Programming using Python and C++.
• Specific tasks include Integrated, Integrations, configurations, support and maintenance of routers and switches.
• Performing system upgrades on 3K (3650, 3750 and 3850), 4K (4800, 4948) series Catalyst, 7600 and ASR9K(9010, 9922) series routers.
• Experience with design and deployment of MPLS Layer 3 VPN, MPLS Traffic Engineering, MPLS QOS
• Performed troubleshooting, fixed and deployed many Python bug fixes of the two main applications that are main source of data for both customers and internal customer service team.
• Diverse industry exposure - telecom, consumer goods, health care and IT consulting
• Knowledge on complex, Cisco ASA & Palo Alto firewalls Environment.
• Proficient in setting up IT infrastructure including wide area networks (WAN) local area networks (LAN), security management systems network device administration.
• Experience on Solarwinds tool to monitor all the devices in AACC.
• Good working experience on Cisco iOS XR and NX-OS including migration services, policy up gradation and IOS management on Cisco CRS-1, CRS-3 and ASR 9K.
• Worked on implementation of the basic F5 ASM, F5 LTM and F5 APM.
• Creating Virtual Servers, Nodes, Pools, I apps and I rules on BIG-IP F5 in LTM module.
• Configuring and troubleshooting F5BIGIP LTM load balancing and implementing, Creating I rules, Virtual servers, Pools, Nodes with health, Profiles, SNAT, SSL, NAT, Traffic Policies.

Confidential, Chicago IL.

Sr. Network Engineer

Responsibilities:

• Working with data centre deployment group for data centre refresh project
• Implementation and upgrading core and distribution layer including multiple server farms silos with Nexus 5K and 7K.
• Involved in the deployment of Cisco Nexus 7k, 5k and 2K along with ASR 9K, 6509s (Sup 720), Cisco 4900, 3750, 2960 switches.
• Experience configuring VDC, VPC in Nexus 7010.
• Configuration of routing protocols OSPF, BGP and policy based routing
• Providing support for the Layer 2 and Layer 3 devices in the Network Perform IOS upgrades in Cisco Routers and Switches including Nexus 3K and 5K.
• Design and Managed Cisco Nexus, ASR9K routers, ASA firewalls, and VPN for Cisco, Arista, and Juniper
• Design OSPF Areas for reliable Access Distribution and for Core IP Routing.
• Redistribution of routing protocols and Frame-Relay configurations
• Involved in networkMigration from EIGRP to OSPF
• Responsible for Implementation and configuration of VPN Tunnels.
• Configured HSRP and VLAN trunking 802.1Q, VLAN routing on catalyst 6500 switches.
• Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.
• Study single point failures & design WAN structure in such a way that there are no failures in network in case of any device or link failure
• Implementing security Solutions using Palo Alto PA-500, PA-2020, Check Point Firewalls R75, R77.20 GAIA.
• Troubleshooting of complex network systems including high-end routers: CISCO GSR, ASR1K, ASR9K, 2600, 2800, 3600, 7200, 12000 Series Routers, and Catalyst 4500, 6500, and 7600 switches.
• Creating Python scripts to automate daily networking tasks (Ex. auto config generation, retrieving information from networkdevices, parsing data, etc.) - including a custom Fortigate firewall config generator (which included multi-threaded functionality to generate configs for multiple firewalls at once).
• Worked on Migration of Juniper SRX firewalls for isolation of network segments and VPN's, ASR (9k, 901 and 903)
• Aided in troubleshooting potential network issues in rolling out ISE.
• Setting up VLANS and configuring inter-VLAN routing, Trucking, STP, RSTP, port aggregation & link negotiation on Ethernet channel between switches
• Implementing, Monitoring, Troubleshooting and Convergence in Frame-Mode MPLS in the core.
• Maintained oversight of assigned NMStools to ensure 365 x 24/7 monitoring and tracking of all network infrastructure device.
• Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.
• Experience with BGP community Strings, Autonomous Numbering system
• Worked on GTM, LTM 3600 load balancers to configure Nodes, Pools and VIP's on a need basis.
• Implemented and maintained Big-IP F5 load balancing solution (LTM and GTM) across multiple datacentres using OTV.
• Implementing and Maintaining Network Management tools (Fluke Network, Nortel ENMS, JFFNMS, SNMP, MRTG, and NMIS).
• Installed and configured Cisco ASA 5508 series firewall and configured remote access IPSEC VPN on Cisco ASA 5508 series.
• Responsible for Configuring SITE-TO SITE VPN on Cisco ASA 5508 series firewall between Head office and Branch office
• Created security policy according to user's requirement in Cisco ASA-5580, Juniper-SRX-5800&ISG-1000 fire-wall using CLI & GUI.
• Configuration and set up of Juniper SRX firewalls for policy mgmt. and VPN's
• Provided firewall policy configuration and services with Juniper SRX 240 & 650 service gateways
• Understanding the JUNOS platform and worked with JUNOS upgrade of Juniper devices
• Troubleshoot and Worked with Security issues related to Cisco ASA, and IDS/IPS firewalls
• Perform Wireless Administration and troubleshooting for the corporate Wireless infrastructure.
• Understanding of IPSEC & GRE tunnels in VPN technology implementation using Cisco IOS and have checkpoint r80 firewall /VPN.
• Build Logical design and Implementation of Wireless Solution
• Working on various 802.11x technologies for additional regulatory domains, Quality of Service, Inter Access Point Protocol etc.
• Performed day to day networkoperations using Remedy and HP Service Manager Tool for ticketing system and change management.
• Policy provisioning, access to specific segments of the networks through Cisco ISE.
• Engineered, configured and deployed routers using Cisco ISE.
• Installed 3502 Wireless Access Points WAPs at various locations in the company

Confidential, Raymond OH

Senior Network Engineer

Responsibilities:

• Develop and implement strategies to support the current and future needs of the company.
• Daily work includes handling DNS, IP management and DHCP tickets using Vital QIP. Assigning and maintaining IP addresses for UHG internal external and tricare environments.
• Handling DNS, Subnet and IP requests expeditiously but carefully from work intake buckets (various).
• Ability to perform problem solving on DNS issuesand take turn with on-call support.
• DNS and IPAM Infoblox device configuration, management and operations in an enterprise environment.
• Review, perform network assessment for including but not limited to Series Routers, ISR and ASR routers (1Ks, 9Ks)
• Planning, Designing &implementing various solutions in distributed environment using Check Point firewalls.
• Maintained disaster recovery site including server, storage, windows for applying various network related configurations, patches, service packs (ASR 9K) and implementing best practices.
• Configured the Cisco ASR to use the VRF routing functions to completely split the traffic through the network.
• Working as Sr. Network engineer supporting Cisco routers, switches, Net screen Firewalls, Bluecoat proxy servers and BIGIP load balancers.
• Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS, switching (VLANS, VTP Domains, STP, and Trunking).
• Performing troubleshooting on slow network Performance/connectivity issues, routing issues that involves OSPF, BGP and identifying the Root Cause Analysis of the issues.
• Planning, designing, Installing and Configuring of Cisco Routers (1700, 1800, 2500, 2600, 3200, 3600, 3700, 3800 and 7200, 7609) & Cisco L2 & L3 Switches (2900, 3560, 4500 & 6500), Raritan Dominion SX 32 console router, Infoblox TE-2220, ND 2200, Netscaler SDX 13500, MPX 8200, VPX NSSX 18500.
• Monitoring Cisco ASR9Kseries aggregation services router which are running with Cisco IOS XR Version 4.3
• Administration and diagnostics of LAN and WAN with in-depth knowledge of TCP/IP, NAT, PPP, ISDN and associates network protocols and services.
• Experienced in F5 LTM and GTM series 6400, 6800, 8800, 7250 ( VIPRION) for corporate applications and their availability.
• Configure and troubleshoot Aruba Network Access Points 225 & 315 for Guest Access and internal Employee networks.
• Managing and administering Juniper SRXand Checkpoint Firewalls at various zones including DMZ, Extranet (Various Business Partners) and ASZ and internal.
• Configure Access list for routers/switches and Access Points (internal Firewall)
• Document networks using Visio network drawings.
• Acted as the liaison between the client and Huawei technical and sales teams to formulate a topology approach which addressed the client's current network infrastructure and Datacomnetwork issues.
• Provide post breach firewall analysis on checkpoint R80
• Palo Alto firewalls to recommend two-factor authentication solution.
• Assessed solution risk focusing on customer network/Datacom points of failure, power consumption and physical space requirements.
• Provide Hands-On Network, Linux, Velocloud solutions Support for Service Provider customers.
• Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).
• Responsible for OSPF, BGP and static routing using Nexus, Cat6k, ISR, ASR.
• Replaced Cisco Switches and Routers with HP 2003 Routers/HP 5510 Switches and ViptelaV-Edge 100 SDWAN Routers at all Branch locations.
• Conducted site surveys to address client performance issues by architecting new Datacom/network designs.
• Monitored and maintained the performance of Datacom/network systems and reconfigured when required using Linux.
• Performed Dual-homing on nexus based platforms using the feature VPC and also managed to do Virtualization on the nexus platforms using the feature VDC and also maintained VRF’s in those VDC’s.
• Configured EBGP load balancing and ensured stability of BGP peering interfaces
• Understanding of IPSEC & GRE tunnels in VPN technology implementation using Cisco IOS and have checkpoint firewall /VPN.
• Collaborate with application owners to define dependencies, map dependencies for better application workflow within ACI or public cloud use.
• Architecting and building Complex solution based on Cisco Openstack NFV platform.
• Design and integrate end-to-end solution with Cisco Suite of NFV and NFVI product.
• Provided pro-active fault monitoring of Cisco routers and switches utilizing HP overview, Cisco Works and Cisco IOS commands.
• Extensive experience in configuring and troubleshooting of protocols RIP v1/v2, EIGRP, OSPF, BGP, ISIS, STP, RSTP and MPLS.
• Worked on Extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series. Configuration and maintenance of OSPF protocol which was the enterprise IGP.
• Cisco ASA/Checkpoint aruba Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Provide network support for the core network including MPLS, DMVPN and Datacenters. L2VPN, L3VPN and VPLS setup on the MPLS cloud. Deployment of Back offices leased lines links and their integration with MPLS. Deployment of branch links over DMVPN and AT&T AVPN.
• Experienced in configuring First Hop redundancy routing protocols Involved in supporting on MPLS VPN and QoS for architecture using Cisco multi-layer switches.
• Dealt with monitoring tools like (Solarwinds, Infoblox, and Kiwi-cat tool), network packet capture tools like Wire-shark.
• Working experience with current network technology: MPLS, BGP, EIGRP, VDC, EvPC, vPC, Cisco Fabric Path, OTV, Rapid Spanning-Tree (RSTP)/ Spanning-Tree (STP), Virtual Route Forwarders (VRF), QoS, CoS, etc.
• Performing design and assisting the team on understand the ONOScontroller framework.
• Managed DMVPN Initiative for Global Atmos Energy Network, Config/Replacing AVPN Circuits/Router/Switch - Upgrades.
• Key contribution includes troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF, & BGP.
• Design and configuring of OSPF, BGP on Juniper Routers (MX960) and SRX Firewalls(SRX240)
• Working on Core Devices which is mention as Network Planner (OPNET).

Confidential

Network Engineer

Responsibilities:

• Assisted in troubleshooting LAN connectivity and hardware issues in the network.
• Studied and analyzed client requirements to provide solutions for network design, configuration, administration, and security.
• Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.
• Monitor performance of network and servers to identify potential problems and bottleneck.
• Performed RIP & OSPF routing protocol administration.
• Interacted with support services to reduce the downtime on leased lines.
• Troubleshoot problems on a day to day basis; provide solutions to fix the problems.
• Monitor the operability and reliability of the network.
• Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF and EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers 7613, 7201, and 3945E.
• Designed a test manual and automated test cases are perform the over Network testing tool IXIA and Spirent.
• Automate test cases for carrier grade, provider Edge and Core Routers. Validate the IP/MPLS features are consistent with client’s design and behave as expected in a multi-vendor, scaled environment
• Configure the access-list and patch on the Juniper router and Firewall for customer support.
• Maintenance and Troubleshooting of connectivity problems using Ping, Trace route.
• Managed the IP address space using subnets and variable length subnet masks (VLSM).
• Worked along with the team in ticketing issues; responsibilities included documentation and support other teams.
• Configured and installed Cisco 2500, 3640, 7200, and 7940 Routers.
• Troubleshot network bandwidth performance, mismatched framing and line coding.
• Coordinated with LAN/WAN engineers the development and implements security policy.
• Monitored usage of network resources with Cisco works, and using sidewinder in PIX Firewall.
• Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.
• Configured remote users to access corporate LAN with VPN connectivity.
• Interfaced with various vendors for company products.
• Configured Frame-Relay, ISDN, ATM, Protocols, & load balancing switches.
• Configured IPX/SPX, HDLC, PPP, TCP/IP, BGP, EIGRP, RIP, & HSRP.
• Coordinated the routing of data for Internet access via diversity, load balancing on MPLS.
• Versed in proxy servers, web servers, and VPN networks on Windows and Unix OS