SUMMARY

• Acquired 7 years of expertise asNetworkEngineerin designing, performingNetworkanalysis, troubleshooting, maintaining and supporting complexnetworksystems. Capable of adapting any environment or situation to resolve any issue that I have myhands in.
• Networkfocused hands - on technical role working with Layer 2, Layer 3 and Security technologies
• Gained knowledge on testing routers and switches in laboratory scenarios and then deploy them on site for production.
• Configured Cisco routers/switches for VoIP including quality of service (QOS) guarantee of voice and data integrity using ONOS (operating System)
• Hands on various operating systems based on Linux, Linux based ONOS and Mac OS.
• Day-to- day administration, management, maintained and monitored network and network security devices using Cisco Works, SDM, PDM, ASDM-IDM.
• Have significant understanding on Troubleshoot TCP/IP problems; troubleshoot connectivity issues in multi-protocol Ethernet, Environment.
• Penetration Testing and Applicationssecurityassessments.
• Hands on experience in upgrading Cisco IOS & Firmware on different Cisco devices & modules.
• Proficiency in configuration of Layer2 and Layer3 Virtual Local Area Networks (VLANS) using Cisco multi-layer Switches supporting STP, RSTP, PVST along with inter VLAN routing and VLAN trunking 802.1q.
• Worked on Network security skills include NAT/PAT, ACLs, AAA and ASA firewall.
• Familiar with Cisco Security Telnet, NAT/ACLs, AAA, Layer 2 Security, Layer 3 Security,Firewall Filtering’s, IPS/IDS,Cisco (ASA, PIX) 5510,Cryptography, VPN, IPsec.
• Extraordinary skills towards IPv4 (subnetting & supernetting); Familiar about IPv6 address management.
• Experienced in DNS, DHCP, SMTP,FTP, HTTPS and web security architecture.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Good knowledge working on Big IP/F5 load balancer, Checkpoint and Palo Alto Firewalls.
• Establishednetworkwithin and between the offices, taking care of the connectivity, data and voice and security.
• Troubleshoot the connectivity problems and track thenetworkactivities.
• Excellent Verbal, written communication skills and Interpersonal skills with ability to work with teams as well as independently with minimum supervision.
• Capable of analyzing &understanding problems, with a combination of logical thinking and experience in solving unique complications to find out better solutions.

TECHNICAL SKILLS

Cisco Router & Switching Platforms: Cisco Routers (7300, 3900, 3800, 2900, 2800, 2600, 1900, 1600), Switches (3560, 3750, 4500, 4900 & 6500), Juniper J series, MX, EX, QFX, SRX Series Routers, Switches and Firewalls.

Firewalls: Cisco ASA 5505, 5510,5520, Checkpoint and Palo Alto

Protocols: OSI Model, TCP/IP, UDP, DHCP, DNS, HSRP, ETHERNET, RIP v2, OSPF, EIGRP, BGP, NAT, PAT, VTP, STP, VSTP

Port: channel, VLANS, VTP, STP, RSTP, 802.1Q

Operating Systems: Linux, Windows, Mac OS, Cisco IOS, ONOS.

LAN Technologies: Ethernet, Fast Ethernet, and Gigabit Ethernet, SMTP, VLAN, Inter-VLAN

Additional Courses: Cisco Certified Network Associate (CCNA) Routing and Switching & Security

PROFESSIONAL EXPERIENCE

Confidential, Chicago

Network Engineer

Responsibilities:

• Participated in projects requiring installation, configuration and support for network routers and switches, firewalls and effective application load balancing.
• Experienced in Configuring Site-to- Site and Remote Access VPNs, NAT/PAT policies on Palo Alto Firewalls.
• Worked on Layer 2 protocols such as VTP, STP, RSTP, PVST, MSTP and other VLAN troubleshooting issues and configuring switches from scratch and deployment.
• Implemented a backup for the existing WAN connection using site to site IPsec VPN tunnels.
• Involved in IOS upgrades for different switches in the environment.
• Networking protocols worked with included but not limited to TCP/IP, DNS, WINS, DHCP, VPN, Terminal Services, Routing and Remote Access, Network Design, wiring and cabling.
• Configuring various protocols using Arista EOS (Extensible Operating System) and ONOS (Open Network Operating System).
• Migration of network devices (Palo Alto, F5, Juniper, Aruba, Riverbed, Routers; switches) from one zone to other. Changing the management IP address.
• Co-ordinate with the Data Network and Security team and come up with possible solutions.
• Commissioning and decommissioning, configuring, URL and Web filtering, SSL Certificates monitoring, SNMP traps, logging, blocking on Palo Alto devices, migrating from one network to other.
• Implemented redundancy for Routers, Switches and Firewalls.
• Configured ASA 5520/5500 to ensures high-end security on the network with ACLs and Firewall.
• Worked on F5 LTMs to create Virtual servers (VIPs), Configure nodes into a Pool for load balancing traffic to the high-end bank applications.
• Day to day responsibilities include tasks like configuring and troubleshooting Wireless Access Points, Switches and Routers.
• Configuring of new VLANs and extension of existing VLANs on/to the necessary equipment to have connectivity between two different data centers.

Confidential, SFO, CA

Network Security Engineer

Responsibilities:

• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols (EIGRP, OSPF and BGP).
• Daily monitoring of network traffic using sniffers (Wireshark) and access logs to troubleshoot and identify network issues.
• Configured route redistribution between OSPF and EIGRP in a multi-area OSPF network.
• Implementing NAT solutions on CISCO IOS (7600,2600,3800) routers.
• Generating Malware Reports and troubleshooting it on Sourcefire.
• Configuring Authentication Profiles, Enabling IPsec, monitoring the live traffic in the network.
• Maintained thenetworksystems and services, ensuring service levels are sustained that include routers, switches and firewall, as well Penetration Testing and Applicationssecurityassessment.
• Experienced in configuring and troubleshooting MPLS, building MPLS-VPN and Multicast support.
• Performed network administration tasks such as creation and management of VLANS, Port security, Trunking, RPVST+, Inter-VLAN routing, and LAN security, Packet sniffing.
• Configuring network access servers and routers for AAA Security.
• Network/Data Storage related responsibilities:
• VLAN configurations of switches.
• Trunking and port aggregation of switches.
• Resolve connectivity issues with IP telephones.
• Played responsible role for implementing, engineering, & level 2 support of existing network technologies / services & integration of new network technologies /services on Cisco 3750,4500, 4900 switches and Cisco 2800,2900, 3800, 7200 & 7600 series Routers.
• Worked with Cisco Layer 3 switches 3560, 3750, 4500, 6500; Cisco Nexus 5000 and 7000 in multi VLAN environment with the use of inter-VLAN routing, 802.1Q trunk.
• Troubleshoot network security issues such as address translations, connectivity, application accesses, routing issues, low latency networking.
• Implemented and maintained Big-IP F5 load balancing solution across multiple datacenters.
• Created reports of network utilizations.
• Creates intelligence such as impact and mitigation strategies related to identified vulnerabilities.
• Responsible for the introduction and implementation of new Intrusion Detection and prevention System software such as Sourcefire, Review and analyze events from logs, generate reports.
• Configured and maintained IPSEC tunnels on Palo Alto Firewalls.
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall.
• In-depth knowledge and proven expert proficiency in designing, engineering, configuring, and maintaining of large enterprise firewalls such as Check point, ASA and Palo Alto and Blue Coat Proxy.

Confidential

Network Engineer

Responsibilities:

• Installing and maintaining ofnetworkinfrastructure and Configure, administer, firewall administration and document firewall infrastructure.
• Configuring Static, RIP, IGRP, EIGRP, and OSPF Routing Protocols on Cisco 1600, 2600, 2800, 3600, 7300 series Routers.
• Worked on Address translating protocols NAT& PAT policies.
• Has expertise in LAN/WAN technologies (fast Ethernet, Layer2 & 3 switched/routed LAN, and Frame Relay).
• Extensively used TCP/IP tool like TELNET for remote login to the routers and SSH for secure login.
• Earned knowledge to maximizenetworkperformance by tracking performance, troubleshootingnetwork problems and outages scheduling upgrades.
• Designed and configured inside &outside (Standard &Extended) ACL interfaces.
• Implementation and operational support of routing/switching protocols including RIP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Configure various LAN switches such as CISCO CAT 2900, 3550, 4500, 6509 switches.
• Analyzing traffic flow of all Cisco hardware using Cisco Works, and hands in SNMP Network management.

Confidential

System/Network Engineer

Responsibilities:

• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include.
• Configured Firewall logging, DMZs & related security policies & monitoring.
• Configured network access servers and routers for AAA Security (RADIUS/ TACACS+)
• Creating Private VLANs & preventing VLAN hopping attacks & mitigating spoofing with snooping & IP source guard.
• Other responsibilities included documentation and change control.
• Responsible for Configuring SITE TO SITE VPN on Cisco Routers between Head Quarters and Branch locations.
• Used various scanning and sniffing tools like Wire-shark.
• Hands on Experience working with security issue like applying ACL’s, configuring NAT and VPN
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Implemented the security architecture for highly complex transport and application architectures addressing well known vulnerabilities and using access control lists that would serve as their primary security on their core & failover firewalls.

Confidential

Jr. Network Engineer

Responsibilities:

• Monitor, configure changes on installed Cisco networking devices such as Routers and Switches to address network related issues/problems.
• Maintenance of client wide area networks (WAN) and local area networks (LAN).
• Analyze client system needs and requirements for the project proposal and design.
• Troubleshoot a wide range of technical support issues and connectivity problems such as authentication, connection speed, e-mail configuration, and loss of synchronization.
• Experience in new employee mentoring, training and coaching.
• Provided Technical support for improvement, upgrading and expansion of the existing network architecture.
• Gained good knowledge working on Cisco ASA firewalls configuring static routes, ACLs (standard & extended).
• Configured Access lists (Standard and Extended) to manage IP traffic for users all over the company to access different applications and blocking others.