SUMMARY

• Around 7 years of experience in networking, security, installing, configuring and maintaining network devices.
• Good understanding of networking concepts such as routing protocols, VLANs, IP address management and network security.
• Experience in cisco Routing, Switching and Security with strong Cisco hardware/software experiences with Cisco Routers such as 1900, 2900, 3900, Cisco ASR - 1k/9k, Cisco Multilayer Switches 4500, 6500, Cisco Nexus 2k/5k/7k/9k.
• Expertise in Configuration of VLANS, using Cisco Multilayer switches and supporting STP, RSTP, PVST, RPVST along with troubleshooting of inter-VLAN routing and VLAN Trunking using 802.1Q.
• Proficient in using firewall technologies including general configuration, security policy, rules creation and modification of cisco ASA, SRX and checkpoint.
• Strong understanding of current and future technologies including TCP/IP, IPv4/v6, RIP, EIGRP, OSPF, BGP, Frame Relay, ACL, VPN, Wireless LAN and configuration of VLANs.
• Experience with Cisco IOS, cat OS, Cisco IOS XR and JUNOS.
• Hands-on experience with Cisco Nexus 7000, Nexus 5000 and Nexus 2000 platform.
• Experience working with Nexus 7K, 5K, 3K, 2K devices.
• Proficiently implemented traffic filters using Standard and Extended access-lists, Distribution lists, Route-maps and Route Manipulation using offset-list.
• Great knowledge and good hands on experience in CISCO source fire and its products.
• Expertise in IP Subnetting and worked on various designing and allocating various classes of IP address to the domain.
• Experience with configuring Nexus 2000 Fabric Extender (FEX), which acts as a remote line card (module) for the Nexus 5000.
• Configured Infoblox failover using infloblox DHCP that is based upon ISC DHCP modes on F5 management system.
• Network security including NAT/PAT, ACL, VPN and IPSEC on DMVPN (GRE Mode).
• Extensively worked on Cisco catalyst 6509 and implemented VSS along with VDC and VPC on Nexus 5505, 7009 switches.
• Experience in configuring and Troubleshooting BIG-IP F-5 load balancer LTM.
• Expertise in OSI layer model/TCP/IP.
• In-depth understanding of UDP and TCP protocols.
• Strong Knowledge in working with F5 Load Balancers and their Implementation in various Networks.
• Basic and advance F5 load balancer configurations, including migrating configurations fromCiscoACEto F5 and general troubleshooting of the F5 load balancers
• Access control server configuration for RADIUS and TACACS+.
• Responsible for check point and Cisco ASA firewall administration across global networks.
• Worked on ASR 1000 series routers.
• Worked on Load balancer F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.
• Detailed technical knowledge of either Cisco ACE, F5 load balancer technology
• Established relationships and network connectivity with vendors via site to site VPN.
• In-depth knowledge and hands on experience in Tier-2 ISP Routing policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, Firewalls.
• Design, Build, and Implement various solutions on Check Point Firewalls, Blue Coat Proxies, F5 Load balancers and F5 Global Traffic Managers.
• Adept in handling network monitoring tools such as Wireshark, Netflow, SNMP and SYSLOG.
• Highly motivated with the ability to work independently or as an integral part of a team and committed to highest levels of profession.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Migration of Palo Alto firewalls from ASA.
• Experience on project management, implementation and customer requirements.
• Good interpersonal and communication skills, working with customers on solving network problems in a timely manner.

TECHNICAL SKILLS

Cisco Routers: 2600, 2900, 3600, 3800, 7200 and 7600.

Cisco L2 and L3 Switches: 2900, 3560, 3750, 3850, 4500, 4900, 6500 series.

LAN Technologist: Ethernet, Fast Ethernet, Gigabit Ethernet, SMTP, VLAN, Inter-VLAN Routing, STP, RSTP, Light weight access point, WLC.

WAN Technologies: Frame Relay, PPP, HDLC, MPLS, T1, T3, OC Standard.

Firewalls: Cisco PIX, ASA, Secure Access VPN Appliance, Fortigate 40c.

Wireless/Voice Technologies: Cisco WLC, IEEE 802.1x and 802.11, WLAN, WAP, AP, SSID, LWAPP, VoIP/SIP, CUCM, UCCM, UCCX, MGCP, RTP, PoE, CCK, DSSS.

Load Balancing: F5 6400, 6800, 8800 with LTM, GTM, ASM, APM, Access Gateway, Secure Gateway.

VoIP: Call Manager, Call Manager Express, SIP Trunking.

Applications: Wireshark, Cisco packet tracer, GNS 3, Active Directory, Cisco IOS, Cisco prime Infrastructure, Cisco UCS, Microsoft Office, PowerPoint, Excel .

Services: Done Configuration for VLANs, STP, SNMP, ELRP, DMZ and Redundancy protocol (HSRP and VRRP).

Other Technologies: VMware, Mat Lab, VISIO, Oracle DBMS, Microsoft word, Excel.

PROFESSIONAL EXPERIENCE

Confidential, Dallas, TX

Sr. Network Engineer

Responsibilities:

• Design and architect traffic flows in BGP using standard and extended access-lists, Distribute-list and Route Maps, MED and Local Preference to load balance traffic across multiple ISP links.
• Design and develop infrastructure software for network management system and monitoring for one of the largest networks, containing SDN, traditional routed and traditional optical mode.
• Design and implemented Cisco VoIP infrastructure for a large enterprise and multi-unit office environment
• Designing, Implementing LAN/WAN configurations on Cisco Nexus 5k, Catalyst 6500 switch.
• Cisco network gear. Experience with convert PIX rules over to the Cisco ASA solution.
• Configuring and resolving various OSPF issues in an OSPF multi area environment.
• Configured and designed Access layer switches such as Cisco 4510, 4948, 4507 switches.
• Configured IPSEC VPN (site to site remote access) on SRX series firewall.
• Configuration and maintenance of PIX and ASA firewall systems.
• Multi-vendor hardware installation: servers and networking gear, rack and cable dressing.
• Configured DHCP scopes for voice and data VLAN segments.
• Responsible for checkpoint and Cisco ASA firewall administration across our global networks.
• Update IOS for Cisco and Fast Path for Broadcom Quanta network gear via TFTP, Modem.
• Primary responsibility is to design and deploy various network security & High Availability products like Cisco ASA and other security products.
• Negotiate VPN tunnels using IPSec encryption standards and configured and implemented site-to-site VPN, Remote VPN using ASA 5520.
• Implementation of Dynamic VPN via SRX Firewalls and Pulse Secure Clients.
• Configuration of Cisco 6500 (sup 720), 4500 (SUP 6) & 3750 Catalyst Switches for network access.
• Worked extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.
• Build various network technologies from the ground up specifically Bluecoat Web proxies and ASA VPN.
• Installation, Configuration, Upgradation, Monitoring, Troubleshooting and Testing activities performed on Checkpoint and ASA Firewalls.
• Network gear consists of Cisco Systems like Cisco Catalyst 2950, 2960, 2960-X for Switching, Cisco 2800 for Routing, & ASA 5510, 5520, Net screen SSG-140, SonicWALL TZ-180 for firewalls.
• Planned and implemented the perimeter refresh project. Worked on replacing Cisco 6509 switches.
• Network Consultant for Nexus Next-Generation project. Built out several MPLS/BGP VRF for multiple clients.
• Included implementation of 9K, 7K, 5K, 3Kand 2K configuration for integration witch UCS and legacy systems
• Consolidation was in preparation to upgrade datacenters to Nexus 7000, 5000, 2000, and ASR 1000 backbone infrastructure.
• Including providing Level 3 and vendor level troubleshooting of all LAN and WAN related issues.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• We used cisco to access the gear. Familiar with settings of logon ids.
• Architected 4 co-location facilities with ASA/PIX, SSG, SRX firewalls, layer 3 switches, F5 and NetScaler load balancers.
• Provide Tier III Level Load Balancer expertise on F5 BigIP Local Traffic Managers (LTM).
• Designing F5 solutions/support for migration work of applications and websites from Cisco CSS Load Balancers to the F5 BigIP Load Balancers.
• Have good working experience with the Trouble Tickets on F5 Load Balancers.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Redistribution of OSPF and EIGRP into BGP with the correct tagging parameters from the old legacy network to route and to utilize the correct MPLS VRF VPN’s provided from the bearers.
• Configured Cisco 7204 routers which were also connected to Cisco ASA Firewall (5505) security appliances providing perimeter based firewall security.
• Implemented, Configured BGP WAN routing, converting OSPF routes to BGP (OSPF in local routing).
• Expertise in maintenance of layer 2 switching tasks- VLAN, VTP, RSTP, configuration of etherchannel with LACP and PAGP along with troubleshooting of inter-VLAN routing.
• Implemented Cisco Ironport Security Management Appliance and Ironport ESA in DR site to provide redundancy across data centers for email flow.
• Created documents for various platforms including Nexus 7k, ASR9k, and ASR1k enabling successful deployment of new devices on the network.
• Implemented Positive Enforcement Model with the help of Palo Alto Networks
• Conducted site surveys and installation of wireless Area network.
• Guided a team of 15 junior Network Engineers for deployment of Cisco LAN/WAN/WLAN infrastructure.
• Responsible for service request tickets generated by helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support.
• Supporting EIGRP and BGP based PwC network by resolving level 2 and 3 problems of internal teams and external customers of all locations.
• Estimated project cost and created documentation for project funding approvals.
• Created and delivered internal training on BGP.
• Responsible for creating network configurations for Cisco ASR9k, CRS, Nexus 7000, 7609, 7613, 6509, 4509, 5500, 3550, 2620, 2621, 1720.
• Global Team Lead for datacenter consolidation project. Consolidated 16 global datacenters consisting of Cisco 6500, 4500, 2800, ASA 5540, F5 BIG-IP 3600, and Palo Alto 2000.
• Administering multiple Firewall of ASA/Net Screen, in a managed distributed environment.
• Experience with Cisco LAN controllers (8500, 5760, 5500) Cisco Aironet Access Points (3700, 2700, 1600, 700W), Cisco Mobility Platform.
• Planning, deploying LANs/WANs voice interconnection using protocols VoIP, H.323, SIP, ISDN, L1-L3.
• Experience with converting checkpoints VPN rules over to the Cisco ASA Solution. Migration with Cisco ASA VPN experience.
• Worked on Route-Reflectors to troubleshoot BGP issues related to customer route prefixes and route filtering using Route-maps.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.
• Have applied ACLs for Internet access to servers using Cisco 5550 ASA firewall and performed NAT.
• Worked on WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing protocols (BGP/OSPF) and IP addressing.

Confidential, Anaheim, CA

Network Engineer

Responsibilities:

• Design MPLS VPN and QoS for the architecture using Cisco multi-layer switches.
• Design and implemented campus switch network with Layer 3 switches (3750, 4500 and 6500) in multi VLANs environment and inter-VLAN routing, HSRP, ISL trunk, Etherchannel.
• Configured and troubleshoot Enterprise Routers, CISCO ASR 9K, CISCO 2900 and 2800 series Routers. Hands on experience with Cisco call Manager Express, Cisco Voice over IP.
• Creation of Firewall policies as per the requirements on Checkpoint, ASA.
• Configuration scenarios include routing (RIP, EIGRP, OSPF, BGP), bridging (STP, VLAN, HSRP), MPLS VPN, Network Security (VPN, Firewall, IDS), IP telephony (call manager, CME, voice Gateways).
• Configuration and maintenance of routers, firewalls and load-balancers.
• Firewall Cisco ASA/PIX, Checkpoint.
• Hands on experience on CISCO PIX ASA Firewalls, Troubleshooting Skills, Log Analysis and Review, Compliance Audit.
• Review monitoring and security risks for our network infrastructure, update security policies using Palo Alto firewalls
• Configured IP RIP, PPP, BGP and OSPF routing.
• Proficient user of various Space Platform applications such as Edge services director, Security Director, Network Director, Virtual Director, Service Insight, Service Now and content Director.
• Installing, Configuring and troubleshooting Cisco Routers (ASR1002X, 3945,3845, 2800, 3600) and switches to perform functions at Access, Distribution and Core layers.
• Experience with 6800 Series 16-port 10 Gigabit Ethernet Fiber module, 4500 E-Series Supervisor Engine 8-E, Supervisor Engine 8T.
• Experience with Firewall Administration, Rule Analysis, Rule Modification.
• Troubleshoot traffic passing managed firewalls via logs and packet captures.
• Maintaining Checkpoint security policies including NAT, VPN and Secure Remote access, Configuring IPSEC VPN (Site-Site to Remote Access) on SRX series Firewalls
• Worked with customers to define, plan and execute technology solutions that are specific to their needs.
• Deployment and configuration of F5 BIG IP load balancer (LTM, GTM, ASM, and APM Modules).
• Implement and configured VRRP/GLBP (on distro/core switches), HSRP on different location of office on the switched network and managing the entire multilayer switched network.
• Configuring, administering and troubleshooting the Check Point, Palo Alto and ASA Firewall.
• Implemented Voice VLANS, UDP, SIP and RTP and provide QOS by DSCP and IP precedence.
• Identify, design and implement flexible, responsive and secure technology services.
• Have configured ACI for remote Authentication in the respective organization, manage project task to migrate from Cisco ASA firewalls to Checkpoint firewalls.
• IOS upgrade in Nexus 7010 through ISSU (In service Software Upgrade)
• Experience supporting Cisco/Arista Routers and switches and ASA Firewalls.
• Implementing and designing Citrix Secure Gateway, Configuring Access Gateway, Securing XenApp, STA and XML servers.
• Strong experience working with Cisco routers IOS-XR, ASR1k, 7600, 7206vxr, 7505, 7507, 4540, 3645, 2621, and … 2550, 2950, Nexus 7k switches.
• Experience using Checkpoint R65.4, Cisco PIX and ASA5520, 5540, 5585, along with Intrusion Prevention Systems.
• Adept installing, configuring and troubleshooting Citrix Secure Gateway, Clustering, Citrix Resource Manager, Citrix password manager, Edge-sight tools and good knowledge about Net-Scaler tools.
• Manage Cisco ACS entries for Wireless Connectivity.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.
• Implement changes on switches, routers, load balancer (F5 and CSS), wireless devices per engineer’s instructions and troubleshooting any related issues.
• Upgraded Roger Management Network Security appliances with Cisco Firewall ASA 5580, IDS, network management tools Ciscoworks (VMS, LMS, CSM), IDS/IPS.

Confidential

Network Engineer

Responsibilities:

• Designed Configured, Installed, and Maintained and provided T-Shoot the network infrastructure for Cisco platform for more than 300 devices i.e. 2800, 3600 series Routers and switches for office and for various Customers.
• Migration of RIPv2 to OSPF, BGP routing protocols.
• Troubleshoot problems on a day to day basis and providing solutions that would fix the problems within their network.
• Configured RSTP, LACP and VTP on Cisco devises.
• Created VLAN and Inter-VLAN routing with Multilayer Switching.
• Designing Solutions for frozen requirements using Cisco Routers and Switches.
• Implemented ISL and 802.1Q for communicating through VTP.
• Working with client team to find out requirements for their network.
• Fourth tier troubleshooting, support and implementation for DNS/DHCP.
• Involved in Troubleshooting IP addressing Issues and Updating IOS Images using TFTP.
• Experience in deploying EIGRP/BGP redistribution and the changing the metrics for the primary and back up.
• Performed RIP and OSPF Routing Protocol Administration.
• Installing, Configuring Cisco Catalyst switches 6500, 3750 and 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control Lists implemented as per Network Design.
• Maintained Redundancy on Cisco 2600, 2800 and 3600 routers with HSRP.
• Other responsibilities included documentation and support other teams.

Confidential

Network Engineer

Responsibilities:

• Designed VLAN’s set up both L2 and L3 logical to have it communicate to Enterprise network.
• Configuration and maintenance of Cisco 2900 series including VLANS and TRUNKING protocols.
• Implemented load balancing between Cisco L3 switch by HSRP and GLBP.
• Delivered Departmental Efficiency through advanced engineering, technical support and documentation procedures.
• Performed the general activities of LAN administration on switches, routers, hubs and WI-FI and network printers.
• Provided high level technical support, including identifying and resolving problems on Cisco supported products for e-commerce infrastructure.
• This included external routing and internal routing for DMZ servers.
• Provided Technical support to the entire organization on software, hardware and network.
• Involved in troubleshooting of DHCP and IP conflict problems.
• Installing computer hardware, software, printers, wired, wireless network management, maintenance and troubleshooting devises and network problems.