SUMMARY

• Network Engineer with experience in testing, troubleshooting, implementing, optimizing and maintaining enterprise data network and service provider systems.
• Strong hands on experience on Cisco Catalyst (2960, 3550, 3750, 4500, 6500) series switches, Cisco (2500, 2600, 2800, 3600, 3800, 4451, 7200, 9500, 9300) series Routers, ASA Firewall, Load Balancers using Cisco ACE, F5 LTM/GTM, Security Device Manager (SDM), Cisco Works, Confidential Open View, Solar Winds, Sniffer, Palo Alto Networks Firewall models (PA - 2k, PA-3K and PA-5K).
• Experience in Cisco: Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay & MPLS), Routing protocol configurations (RIP, EIGRP, OSPF, BGP).
• Hands-on configuration and experience in setting up Cisco routers to perform functions at teh Access, Distribution, and Core layers.
• Design and Implemented networks for various environments to support VOIP
• Expertise in working with VoIP protocols H.323, SIP & MGCP.
• Hands-on with VoIP and telecom equipment, standards and technologies.
• Wide range of successfully deployed VoIP services and applications.
• Performed installation, cabling, and cable testing. Implemented QoS for Voice traffic.
• Hands-on configuration and experience in setting up Cisco routers to perform functions at teh Access, Distribution, and Core layers.
• Proficiency in teh configuration of VLAN setup on various CISCO Routers and Switches.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP, and MST.
• Configured IDS/IPS on Cisco, Checkpoint and Fortinet Firewalls
• Access control server configuration for RADIUS & TACACS+.
• Working configuration of new VLANs and extension of existing VLANs on/to teh necessary equipment to has connectivity between two different data centers.
• Implementation, working analysis, troubleshooting and documentation of LAN, WAN & WLAN architecture with excellent work experience on IP series.
• Successfully proof-of-concept network design, implementation, and troubleshooting of a wide variety of technologies such as Firepower, ISR-WAAS, Zone Base Firewall (ZBFW) and OTV
• Experience in layer-3 Routing and layer-2 Switching. Dealt with Nexus models like 9K,7K, 5K, 2K series.
• Hands on Experience LAN/WAN topologies, Fiber, Frame Relay, ATM, Ethernet 10/100/Gigabyte, Token ring, 802.11a/b/g, 802.16 WIMAX, Terminal emulation, VPN, SecureVNC remote management, IP over KVM, VOIP, Multicast, Broadcast.
• Has In-depth noledge of deploying and troubleshooting LAN, WAN, Frame-Relay, Ether-channel, IP Routing Protocols - (RIP, OSPF, EIGRP & BGP), ACL's, NAT, VLAN, STP, VTP, HSRP & GLBP.
• Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS, switching (VLANS, VTP Domains, STP, and trunking).
• Well experienced in configuring protocols HSRP, GLBP, VRRP, ICMP, IGMP, PPP, HDLC, PAP, CHAP, and SNMP.
• Configure AD Maintenance Scripts using WMI, Vbscript and PowerShell.
• Experienced working on network monitoring and analysis tools like SOLAR WINDS, CISCO works and RIVER BED and Wireshark.
• Extensive experience in configuring and troubleshooting of protocols RIP v1/v2, EIGRP, OSPF, BGP, and MPLS.
• Has experience in Intrusion Detection, DMZ, encryption, IPsec, proxy services, Site to Site VPN tunnels, MPLS.
• Create or modify users account on Cisco Access Control Server (ACS), and troubleshoot Cisco AnyConnect Client and SSL VPN issues.
• Experienced in working with CiscoNX-OSand IOS.
• Good understanding of NAT & Firewall on Aruba Controllers
• Utilized teh Blue Coat Proxy, SIEM, SOC, Tuffin, IPS/IDS.
• Experience in CheckPoint IP Appliances R65, R70, R75, R77 & Cisco ASA Firewalls.
• Provide L3 support for checkpoint and Palo Alto firewalls.
• Involved in teh integration of F5 Big-IP load balancers with CheckPoint firewalls for firewall load balancing and was responsible was troubleshooting and maintenance.
• Experienced in Migration fromCheckpointand Cisco ASA Firewalls to Palo Alto.
• Experience with Juniper NetScreen 520M Firewall and Palo Alto network firewall.
• Involved in configuring Juniper SSG-140, SRX-240, and Cisco ASA 5585.
• Experience in configuring all Palo Alto Networks Firewall models (PA-2k, PA-3k, PA-5k etc.) as well as a centralized management system (Panorama) to manage large scale firewall deployments.
• Worked on configuration of Palo Alto firewalls including Security policies, Application & URL filtering, Data filtering, Threat prevention and File blocking.

TECHNICAL SKILLS

Router & Switches platforms: Cisco Router (4451, 3945, 3845, 3600, 2900, 2800, 2600, 2500, 1800) series & Cisco Catalyst switches (6500, 4900, 4500, 3750, 3500, 4500, 2960, 6807, 9300, 9500 series), Nexus 7K, 5K, 2K & 1K.

Networking Concepts: Access-lists, Routing, Switching, Subnetting, Designing, Bradford networks, CSU/DSU, IPSec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi.

Firewalls: Cisco ASA, Palo Alto Networks (PA-2K, PA-3K and PA-5K), Cisco IDS/IPS SourceFire, Firepower, CheckPoint (NGX, R65, R70, R77 and R71), Juniper (SRX, MX, EX Series Router and Switches)

Various Features and tools: Solar winds, Cisco VoIP, Confidential NNMi 8xi (Network Node Manager), Net flow and Cisco prime, Etheiral / Wireshark, TCP Dump. Cisco DCNM, Firemon, MS-VISIO, Infoblox, Confidential Network Automation, Gigamon-GigaVUE-OS

Load Balancers: F-5 BIG-IP LTM 2000, 3900, 5000, 6400, 6800 AND 8900, Bluecoat SG8100, AV 510.

WAN technologies: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONET.

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port-channel, VLANs, VTP, STP, RSTP, 802.1Q .

Security Protocols: IKE, IPsec, SSL, AAA, Access-lists, prefix-lists, SSL-VPN.

Networking Protocols: RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA, IPv4 and IPv6.

Operating System: Cisco IOS, Windows NT 4.0 (Desktop/Server), Windows 2000/2003/2008 Server, Windows XP/Windows 7/8, LINUX, UNIX, MS Exchange server, Solaris, Active Directory.

PROFESSIONAL EXPERIENCE

Confidential, IL

Network Engineer

Responsibilities:

• Configuring and implementing of Composite Network models consists of Cisco 7600, 7200, 3800 series and ASR 9k, GSR 12K routers and Cisco 2950, 3500, 3550,3750, 5000, 6500, 9300, 9500 Series switches.
• Upgrading system images on Nexus 5 and 7 multi-layers switches using kick start andFTPserver.
• Configured Nexus 7010 includingNX-OSVirtual Port Channels, Nexus port profiles, Nexus Version 4.2 and 5.0, Nexus VPC peer links
• Design/install/Configure Nexus 7k, 5k and 2k switches, PAN firewall and Netscaler Application load balancer
• Participated in teh installation, configuration, and post installation daily operational tasks and configuration of teh deployment of Cisco Nexus equipment
• Involved in Switching Technology Administration including creating and managing VLANS's, Port security, Trunking, STP, Inter Vlan routing, LAN security etc.
• Experience working with Layer 1-7 switching,TCP/IP, OSPF and load balancing (Cisco L2/L3 switches, firewalls, load balancers.
• Responsible for VOIP day-to-day operation and in-house IP telephony voice communication architecture and its associatednetworkconnection and component hardware and software.
• Design, implementation, and maintenance of complex VoIP call control, call routing and applications and services
• Trouble shooting VoIP issues on gateways, CUCM, Cisco unity and Unity connection. Gathering and analyzing CUCM traces, ISDN debugs with Cisco routers and relatedVoIPprotocols-SIP, H.323, MGCP
• Troubleshoot T1 PRI issues andVoIPcall setup & audio quality issues involving Cisco voice gateways in environments ranging from small business to enterprise and service provider
• Configuration teh access-list rules, network object-service group based on well-non port teh port me.e. FTP/SFTP, SSH, HTTPS/HTTPS (SSL) etc.
• Experience in Configuring and implementing VLAN, VTP, LAN switching, STP and 802.x autantication in access layer switches.
• Sought after for troubleshooting Layers 1-3, including ASA firewall with Firepower services & Management Console
• SME for IDS/IPS program, Configured and utilized Firepower IDS/IPS to ensure dat corporate systems are secure from unauthorized use, viral infection, and other vulnerabilities dat would compromise overall system security.
• Created and tested Cisco router and switching operations using OSPF routing protocol and MPLS switching for stable VPNs.
• Configure Deployment, Monitoring and Management of Fortinet, Watchgaurd, NetScreen, Cisco PIX, Cisco switches, routers and firewalls
• Created and manage VPNs for managed service clients including medical community on Cisco, Netscreen and Fortinet Cisco PIX VPN devices
• Hands on experience and in-depth noledge in Tier II ISP Routing Policies, Network Architecture, IP Sub netting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1/T1/FT3/T3 SONET POS OCX GigE circuits, Firewalls.
• Hands-on experience of working on Layer 3 protocols like Static Routing, RIP, OSPF, EIGRP, BGP and MPLS.
• Implemented HSRP on teh Cisco 3550 Layer 3 switches and OSPF on 2 Cisco 3925 routers, teh Layer 3 switch, 3 Cisco 3550 Switches, Cisco 3524XL switches for fail over.
• Experience in configuring routing protocols like EIGRP, RIP v2, OSPF & BGP and Cisco ACS protocols like RADIUS and TACACS.
• Responsible for completing a few dozens of high priorities projects, e.g. deployed 160 offices, upgraded datacenters to 40G network, migrated all servers and enclosures over dual-homed redundant (VPC / LACP) connection to network, moved a datacentre to a new location, built a few MPLS with partners, replaced PAN with ASA / Firepower firewalls.
• Worked on Layer 2 protocols such as STP, VTP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment.
• Cisco Layer 3 Routing Configuration: Filtering with BGP, OSPF and EIGRP, Redistribution between routing protocols, manual and auto summarization with EIGRP, OSPF and BGP, policy-based routing and Identification of suboptimal routing
• Configuring and verifying loop prevention mechanisms with regards to Route tagging and filtering, Split-horizon and Route poisoning
• Supporting and maintaining teh switchednetworkissues such as Trunks, VLANs, SVIs, HSRP, VTP, VTP Pruning, CDP, LLDP, UDLD
• Configuring VLAN, Spanning tree, VSTP, SNMP on EX series switches
• Worked on LAN/WAN components and systems, including switches, routers and network topologies such as ISDN, AVPN, MPLS networks
• Responsible for day to day management of Cisco Devices, Traffic management and Solarwind monitoring and configuration
• Responsible for Design and Implement Security, Network and Monitoring System Infrastructure utilizing Fortinet Technology for customers
• Engineered, Unified Threat Management (UTM) solution in Fortinet technologies
• Experience with Routers, Switches,TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
• Install, configure and maintain several CiscoDMVPNrouter servicing smaller Sites, Several Edge routers runningBGPand MPLS to Internet service providers.
• Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 autantication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed
• Configure customer's system per their request, include routing protocol, RF channel parameters, Network side configuration like DHCP lease query
• Setup simplified and traditional VPN communities, and Cisco Any connect.
• Expertise in security identity management platform such as ACS 5.x, RSA SecureID 8.x
• Network monitoring using open source tools includingRANCID, Cacti, and Nagios
• Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP,NTP.
• Monitor and Manage Network activities from Network Management tool HPOpenview.
• Working with Cisco ASA 5585-X firewalls with Firewall rules,IPSec VPN, NAT, Active-Standby Failover, OSPF and Any Connect VPN technologies
• Collaborated with tanetworkengineers to identify areas of high risk dat can be resolved using ISE
• Handled customer services like clearing and troubleshooting their network problems.
• Worked on preparing technical documentations using Microsoft VISIO and Microsoft Office.
• Convert campus WAN links from point to point to MPLS and to convert encryption from IPSec/GRE to GetVPN
• Design and implementation of Global monitoring and Alert system (Solarwind)
• Responsible for support of network security and network devices such as some routers, and wireless access points.
• Creating dedicated VLANs for Voice & Data withQoSfor prioritizing VOICE over DATA
• ConfigureCisco5508WirelessLAN Controller and 3700 Series Access Points.
• Configuring and Troubleshooting ofMulticasting. p-grading of Cisco-IOS& firmware of different Cisco devices and modules
• Experience onNTPservers andNTPsynchronization between server and client
• Configuration and troubleshooting of Site to Site as well as Remote Access VPN on Cisco ASA and Checkpoint firewalls.
• Converted Checkpoint VPN rules over to teh Cisco ASA solution.
• Migration with both Checkpoint and Cisco ASA VPN.
• Strong experience in Network security using ASA Firewall, Checkpoint, Palo Alto, Juniper, IPSEC/SSL VPN, F5 Load Balancer.
• Design, Build and Implement various solutions on F5 Load balancers and F5 Global Traffic Managers (GTM), Check Point Firewalls, Blue Coat Proxies.

Environment: Cisco switches and Cisco routers, Cisco Nexus 7K/6K/5K, MPLs, VPN, Cisco VoIP, Cisco ASA, Checkpoint, F5 Load Balancer, Bluecoat, Juniper, Palo Alto, Cisco Any connect, HPOpenview, SIEM, Solarwind, Forcepoint, Firepower, FireEye, Nessus, NMAP, Wireshark

Confidential, Houston, TX

Network Engineer

Responsibilities:

• Configuring, Maintaining teh Routers and Switches and Implementation of RIP, EIGRP, OSPF, BGP routing protocols and troubleshooting Remote infrastructure management of offices in different locations nationwide.
• Installing, Configuring and troubleshooting Cisco Routers (ASR1002X, 1006, 3945, 3845, 2800, 3600, 9001) and Switches to perform functions at teh Access, Distribution, and Core layers.
• Troubleshooting and escalation management of day-to-day issues for offices. Managing Co-location and Datacenter infrastructure.
• Experience with Project data and voice documentation tools & experience with developing network design documentation and presentations using VISIO
• Security policy review and configuration in Palo Alto and Junipers Firewall in US offices and Datacenter. Designed and configured of OSPF, BGP on Juniper Routers and SRX Firewalls.
• Analysed customer application and bandwidth requirements, ordered hardware and circuits, and built cost effectivenetworksolutions to accommodate customer requirements and project scope
• Installing, configuring, and maintaining Cisco Switches (2900, 3500, 7600, 3700 series, 6500 series) Cisco Routers (4800, 3800, 3600, 2800, 2600, 2900, 1800, 1700, 800) & ASR 1K & 9K series.
• Built site-to-site IPSec VPNs over Frame-relay & MPLS circuits on various models of Cisco routers to facilitate adding new business partners to new and existing infrastructures.
• Configured RIP, PPP, BGP and OSPF routing.
• Installation and management of overall administration of LAN, WAN, systems involving design of network layouts, configuration and maintenance, Commissioning Routers & Switches, firewalls, IPS and ensuring maximum uptime during site deployment toVoIP.
• Lead a Team of technicians tasked with design, configuration, implementation, and support of VoIP deployments.
• Experienced in SIP and SCCP VoIP architectures.
• Maintain Change Management for Enterprise VoIP Platform
• Configuring QOS for VOIP including congestion management tools, congestion avoidance tools.
• Removed cisco 3600 and 2600 series routers and cisco 2900 series switches from teh current infrastructure and replaced them with teh cisco 6509 or 3560 L2/L3 switches.
• Work with Load Balancing team to build connectivity to production and disaster recovery servers through F5 Big IP LTM load balancers.
• Data center migration was involved in Access, Distribution and Core layers
• Involved in teh configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
• Experience with design and implementation of Data center migration.
• Expert in configuring Cisco Routers, Catalyst Switches, Nexus Switches.
• Upgrade Cisco 6500, 3750, 2960s, Nexus 5000, Nexus 2000, Nexus 7000 switch IOS software
• Worked extensively with Nexus 7000, 5000, 2000, Cisco 6500 series multilayer switches, Cisco 2960s series switches and Cisco 3560/3750s, 9300/9500 switches
• Identify, design and implement flexible, responsive, and secure technology services
• Implemented Positive Enforcement Model with teh halp of Palo Alto Networks.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process dat does not impact stream processing.
• Release management of all significant public EC2 launches
• Managed complex wirelessnetworkstrategies and imparted support to operational wireless computer networks.
• Maintained wireless IPS infrastructure and coordinated with management, customers and peers regarding wirelessnetworkinnovations.
• Offered users with wirelessnetworktechnical support and handled indoor and outdoor site surveys.
• Experience with Firewall Administration, Rule Analysis, Rule Modification
• Deployed teh switches in high availability configuration with HSRP.
• Creating and provisioning Juniper SRX firewall policies.
• Development of noledge and skills innetwork and system administration.
• Corrected design flaws and symmetry in original schematics.
• Created Vizio diagrams of NOC and oversaw and hands on built, managed and maintained teh NOC.
• Providednetworkand workstation support.
• Responsible for developing and maintaining online documentation and resources pertaining to wirelessnetwork
• Practicenetworkasset management, including maintenance ofnetworkcomponent inventory and related documentation and technical specifications information.
• Interfaced with customers and senior management for problem resolution and project planning.
• Ensurenetworkconnectivity of all servers, workstations, telephony equipment, fax machines, and othernetworkappliances
• Create and maintain documentation and Visio diagrams as it relates tonetwork configuration,networkmapping, processes, and service records.
• Oversee new and existing equipment, hardware, and software upgrades.
• Supported teh enterprise UC vision deliverables by implementing viable technologies, VoIP issues and mitigation strategies, develop teh strategy for defining, deploying, and maintaining voice services with regards to teh Unified communication architecture.
• Integrated teh Cisco Unified wireless IP phones with cisco unified call manager and cisco unified CME using IEEE 802.11 over a cisco access point.
• In working with Ethernet trouble, me isolate and correct issues related to burst of traffic, where traffic shaping needs to be implemented also identify QoS issues
• Performed installation, cabling, and cable testing. Implemented QoS for Voice traffic.
• Troubleshoot connectivity, quality of service, break/fix, voice quality, and configuration (feature, services and network) issues within teh Cisco Unified C Manager Environment.
• Translating Cisco IOS Route maps to Cisco IOS XR routing policies.
• Working on Cisco 6509 and 4507 series switches for LAN requirements dat include Upgraded and updated Cisco IOS from 12.3T to 12.4. Used to DHCP to automatically assign reusable IP addresses to DHCP clients.
• Installed wireless access points (WAP) at various locations in teh company.

Environment: Cisco Routers, Cisco Switches, Nexus 7k/5k/2k Routing protocols, Cisco VoIP, F5, Load Balancer, Cisco UCM, QoS, Load balancer, Cisco ASA (5510/5520/5550 ), Palo Alto, Microsoft VPN, Forcepoint, Firepower, FireEye, RADIUS, TACACS+, Juniper SRX, ASR 9000.

Confidential

Junior Network Engineer

Responsibilities:

• Responsible for teh configuration of Cisco Routers (7000, 5300, 4000, 2500, 3000, 2600) using RIP, OSPF, EIGRP, BGP
• Managed office network with Cisco devices with network devices including 2500 and 3600 series routers and 3500, 2900, 1900 series switches
• Analyzed and resolved a high percentage of initial customer contact in teh areas of PC/LAN.
• Dealt with customer problems to management and support groups utilizing standard escalation model.
• Extensive experience in configuring and implementing OSPF and BGP.
• Supported core network consisting of Cisco 7200 series routers running multi area OSPF.
• Configured EIGRP and OSPF as interior gateway protocol with route filtering and route redistribution, installed and maintained Cisco 3600, 2600 and 7200 backbone routes with HSRP.
• Implemented stub/Totally stub areas and various OSPF features like route-summarization and SPF throttling.
• Hands-on experience with WAN technologies like T1/T3, DS3, STM1 and STM4 circuit types.
• Configured Security policies including NAT, PAT, VPN, Route-maps and Access Control Lists.
• Knowledge with redistribution of routing protocols and Frame-Relay configuration
• Handled Network Migration from RIP to OSPF.
• Implementation of TCP/IP and related Services-DHCP/ DNS/ WINS.
• Configured, maintained and troubleshot routing protocols such as OSPF, EIGRP and BGP.
• Engaged in office moves, halped in identifying network requirements of new building, installed new networking hardware, and coordinated with vendors for cabling/wiring.
• Performed troubleshooting, while maintaining trouble ticket tracking, following both internal/external routes.
• Assisted with escalation procedures and customer notifications.
• Configured Cisco Routers for OSPF, IGRP, RIPv2, EIGRP, Static and default route.
• Upgraded Cisco Routers, Switches and Firewall (PIX) IOS using TFTP.
• Configured switches with port security and 802.1x for enhancing customers security.
• Worked on teh security levels with RADIUS, TACACS+.
• Acted as Tier 3 support for connectivity, failures, configuration, implementation, and troubleshooting.
• Provided project management for data center cabling, documented all network drawings using Visio
• Design, test, and implement global Next Generation MPLS network (150 sites) using Cisco 3800, 2800, 2600, and 1721 routers using BGP and EIGRP protocols.
• Implementing traffic policy changes with Cisco PIX Firewall appliance switch WAP configuration and installations.

Environment: Cisco Routers, Cisco Switches, switch WAP, Nexus 7k/5k/2k Routing protocols, Cisco IOS VLAN's (F5, Load Balancer HSRP, VRRP, IPSEC VPN, Microsoft VPN, QOS, Cisco PIX, Load balancer, MPLS, VLANS, VTP, RSTP, ACL, NAT, IDS/IPS, SIP, RTP, RADIUS, TACACS+, Nessus, NMAP, Wireshark.