SUMMARY

• Senior Network/Network Security/Application Delivery Engineer/Wireless Engineer with overall experience of almost 10+ years in Healthcare, Financial, Retail, and Product Clients.
• Experience with various Network Topologies, LAN, MAN, WAN, Campus, Data Center, ISP Connectivity, WLAN, VOIP environments.
• Worked in Global environments with network spanned across globe in multiple regions.
• Worked on Next - generation Network Engineering trends and have hands on experience in migration projects from legacy to latest technologies and equipment.
• Very flexible and enthusiastic to learn new technologies and work on any new vendor equipment.
• Switching experience which includes campus and Data Center Switching, Worked on Cisco, Juniper, Arista, Aruba and Dell Switching gear.
• Campus Switching and Routing Hardware includes - Cisco 3750, 3850, Cat 9K, 4500, cisco ISR routers, 2300, 7200 series routers Juniper EX 4300, 3400 in access and EX 4600 in Distribution.
• Aruba 2530, 2540, 3810 and 5400R switches. Cisco Layer 2/3 networking knowledge.
• Data Center Switching and Routing Hardware Includes Cisco Nexus 2K, 5K, 3K, 7K and 9k modules.
• High Level understanding and implementation experience in VLAN, STP, RSTP, MST, 802.1X, DHCP, DNS, HSRP, VRRP, GLBP, IPv4, IPv6, OSPF, EIGRP, IS-IS, BGP, RIP, Static Routing, VSS, MLAG- VPC, MEC, VDC, VXLAN, EVPN Protocols.
• Successfully designed and delivered secure cloud solutions for some of the Major organizations on AWS Cloud.
• Experience in testing of Cisco high end products C12000, CRS and ASR9K platform routers running advanced IOS-XR Software.
• Experience working with Network Firewalls. Worked on Cisco ASA, Cisco Firepower, Palo Alto Next Gen Firewalls, Checkpoint, Fortigate and Sonic Firewalls.
• Experience with Perimeter Firewalls, VPN firewalls, Server Farm Firewalls using Standard and Extended ACL, All types of NAT, URL Filtering, SSL Forward Proxy, SSL Decryption, Threat ID, User ID and APP ID based Security policies.
• Used Cisco ACI (Application Centric Infrastructure) SDN architecture to reduce operating costs, automate IT tasks, for greater scalability and visibility in a data center environment.
• Worked on Cisco ISE, Aruba ClearPass for RADIUS and TACACS Authentication. Integration with WLAN controllers. Wired and Wireless Authentication using Cert based and MAB.
• Enhanced level of knowledge with PPP, PAP, CHAP, ATM, T1 /T3 Frame-Relay, MPLS.
• Experience with DNS and DHCP servers which Include Infoblox, Windows DNS and DHCP, BlueCat DNS. DHCP scopes, IPAM, DNS Zones, Forwarders, Delegations to F5 GTM for WideIP, sub-Domains, External, Internal and Cache grids for DNS.

TECHNICAL SKILLS

Networking Technologies: LAN/WAN Architecture, TCP/IP, Frame Relay, VPN, VLAN, VTP, NAT, PAT, STP, RSTP, PVST, MSTP

Networking Hardware: Cisco Switches, Cisco Routers, ASA/Pix/Palo Alto/Fortinet/Juniper firewalls.

Routing Protocols: OSPF, ISIS, EIGRP, RIP, MPLS, IS-IS, BGP, Multicasting

Security Technologies: PAP, CHAP, Cisco PIX, Blue Coat, Palo Alto, ASA, Fortinet, Checkpoint

Network Monitoring: Solarwinds, Wireshark, HRping, Whatsupgold, Infoblox

Operating Systems: Windows 7, Vista, XP, 2000, LINUX, Cisco IOS, IOS XR, IOS-XE, NX-OS

Routers: CISCO 4300, 4400, 4500,2600, 2800,3800,7200, Juniper M & T Series, ASR 1000

Load Balancers: F5 Networks (BIG-IP), Netscaler (Citrix)

Capacity & performance: Cascade Riverbed (Flow Monitor), WAN Killer

Switches: CISCO 2960,3750,3850, CAT 9300, CAT9400, CAT 9500,4500,6500,6800 Nexus 9k 7k,5k,2k

Firewalls: Juniper Net Screen (500/5200), Juniper SRX (650/3600), Pix (525/535), ASA (5520/5550/5580 ), McAfee Web Gateway, Checkpoint, Palo Alto firewalls.

AAA Architecture: TACACS+, RADIUS, Cisco ACS

Features & Services: IOS and Features, HSRP, GLBP, VRRP, IPAM IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP Management, Open Stack, IVR’s, HLD and LLD documents.

PROFESSIONAL EXPERIENCE

Confidential, FL

Sr Network Engineer

Responsibilities:

• Configuration and Administration of Cisco and Juniper Routers, Switches, and mixed vendor Firewalls.
• Experience working with Nexus 7010, 5548, 5596, 2148, 2248 devices. Worked on 40 gig and 100 gig switching chassis with QSFP. Worked on Cumulus Switching POC on Mellanox devices.
• Deploying and decommission of VLANs on core ASR 9K, Nexus 9K, 7K, 5K and its downstream devices also configure 2k, 3k, 7k series Routers.
• Supported end user network cisco ACI infrastructure and trouble shot several implementations of LTM and APM configuration.
• Configuring TCP/IP IPv4 addresses and IPv6 addresses for Layer 3 testing.
• Created documents for various platforms including Nexus 7k, ASR9k, and ASR1k enabling successful deployment of new devices on the network.
• Thorough understanding of TCP/IP, virtual LAN, HSRP, STP, DNS, SNMP, SMTP and a myriad of other protocols and technologies.
• Experience Branch Relocation: Connect workstation, servers, etc. Rack and stack pre-configured new hardware and connect the circuits. Work with Carrier to test and turn-up circuits.
• Designed, Installed & configured LAN, WAN components Cisco Catalyst switches 6500, 4500, 3750 series and Cisco ASR routers 9001, 1006 according to the Network Design along with the Data Center topology.
• Deployed & decommissioned VLANs on Cisco ASR 9k, Nexus 9k, 7K, 5K and its downstream devices.
• Implement changes on switches, routers, load balancers (F5 and CSS), wireless devices per engineer’s instructions and troubleshooting any related issues.
• Currently working on performing circuit and satellite turn-ups, migrations from ALU7450 to 7750, configurations and installations, configuring IPV4/IPV6 address on new installation turn-ups.
• Extensive experience in deploying OSPF, BGP, LDP, MPLS-VPN, IPV4/6.
• Worked, configured and troubleshoot Cisco ACI, Layer 2/Layer 3-out, BGP and OSFP.
• Experience with setting up MPLS Layer 3 VPN cloud in data center and working with BGP WAN towards customer.
• Experience with configuring Cisco 6500, 6800, 4500 VSS in Distribution layer. Configuring and managing F5 LTM (Local Traffic manager) in large scale environment.
• Network security including NAT/PAT, ACL, and ASA/SRX/Palo Alto/Fortinet Firewalls.
• Good knowledge with the technologies Site to Site VPN, DMVPN, SSL VPN, WLAN and Multicast.
• Well Experienced in configuring protocols HSRP, GLBP, PPP, PAP, CHAP, and SNMP.
• Experience in installing and configuring DNS, DHCP servers.
• Convert WAN links from TDM circuits to MPLS and to convert encryption from IP Sec/GRE to Get VPN.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Dealt with Aruba wireless access points 200,300 series supporting 802.11 ac.

Environment: Cisco ASA Firewalls, F5 ADC, Cisco 3900,4300,4400,4500 Routers, DNS, DHCP, Cisco Catalyst switches 6500, 3750, 3550, 2960,4500,6500,6800,9300,9400 Switches, Juniper SSG-140, Palo Alto Wildfire, Juniper EX series switches, Nexus 9k, 7k, 5k, ASR 9k, ASR 1k, Nexus 2000 FEX, Juniper SRX, Routing Protocols: BGP, OSPF, AAA (TACACS+ & RADIUS), TCL Scripting, ACL Configuration.

Confidential, TX

Sr. Network Engineer

Responsibilities:

• Installed and configured LAN/WAN Networks, Hardware, Software, and Telecommunication services- Cisco Routers and Switches. Implemented IPv4 and IPv6 on PTX platforms.
• Deploying and decommission of VLANs on core Cisco ASR 9K, Nexus 9K, 7K, 5K and its downstream devices and configure 2k, 3k,7k series Routers.
• Configuring TCP/IP IPv4 addresses and IPv6 addresses for Layer 3 testing.
• Used Cisco ACI (Application Centric Infrastructure) SDN architecture to reduce operating costs, automate IT tasks, for greater scalability and visibility in a data center environment.
• Worked on SD-WAN implementation for remote site connectivity using Viptella. Configuration of Application policies, vEdge, vManage, vSmart and vBond in Viptella.
• Configure LAN/WAN core Nexus 7K's, 5K's, and 2K's. This includes VPC’s, IP routing using EIGRP and BGP, Layer 2/3 VLANs, FEX ports for top of the rack network/storage switches.
• Supported end user network cisco ACI infrastructure and trouble shot several implementations of LTM and APM configuration.
• Experienced on working with Palo Alto Next Generation firewall with security, networking, and management features such as URL filtering, Anti-virus, IPsec VPN, SSL VPN, IPS, Log Management.
• Experience working with Juniper devices like EX-2200, EX-4200, EX-4500, MX-480, M Series, SRX650, SRX240 and Juniper J series j230, M 320 and MX960 routers.
• Infrastructure configuration and troubleshooting for Windows Azure environments.
• Strong experience in Networking, including hands-on experience in providing network support, installation, and analysis for a broad range of LAN/WAN communication systems.
• Configuring and implementing Remote Access Solution: IPsec VPN, AnyConnect, SSL VPN.
• Provided technical support services for DNS and IPAM services.
• Establishing and maintaining of setup to Build and deploy the application to the Cloud AWS.
• Integrate services appliances to Cisco ACI deployments to include Application Delivery Controllers and Firewalls
• Involved in Network Designing, Routing, DNS, IP Subnetting, TCP/IP protocol.
• Worked with Cisco Catalyst 6500, 4500, 3750, 3500, 2960 switches and Cisco 2800, 3600, 3800, 7200, 7600 and ASR 1000, 2000.3000,7000,9000 series Routers.
• Designed and implemented a set of tools to provide fully automated configuration of F5.
• Installed and Configured A10 (AX2500) load balancer as SLB for various application in backend.
• Troubleshoot layer1, layer2 and layer3 technologies for customer escalations.
• Experience with converting Cisco 6500 IOS to Cisco Nexus NX-OS in the data center environment.

Environment: Cisco 12000, 7500, 3800 series routers and Cisco 3560 series switches, Juniper EX4200, EX3200 Switches, Juniper MX80, MX480, MX960 Routers, F5 ADC, FHRP: HSRP, GLBP, ASR 9000, Juniper SSG-140, Cisco Nexus Switches 2232, 5596, 7009, Checkpoint Firewall, VLAN, 802.1Q Trunking.

Confidential, NJ

Network Security Engineer

Responsibilities:

• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls, installing and configuring new juniper EX, MX, SRX series firewalls to meet day to day work.
• Configure and implement voice gateways (H323/MGCP/SIP), SRST for remote sites, CUCME and CUE distributed design.
• Troubleshoot and Worked with Security issues related to Cisco ASA/PIX, Checkpoint, IDS/IPS and Palo Alto firewalls.
• Key contributions include troubleshooting of complex LAN /WAN infrastructure that includes routing protocols EIGRP.
• Experienced working with security issues related to Cisco ASR 9K, Checkpoint and Juniper Netscreen firewalls.
• Responsible for turning up new BGP peering and customer sessions, as well as debugging BGP routing.
• Managed, operated, and analyzed data from corporate security systems including Sourcefire IDS.
• Performed extensive traffic engineering to best utilize upstream transit providers and peering relationships, resulting in significant fiscal savings.
• Configuring rules and maintaining Palo Alto Firewalls & Analysis of Firewall logs.
• Configured and managed Cisco access layer routers and switches.
• Support Network Technicians as they require training & support for problem resolution including performing diagnostics, & configuring network devices.
• Ensured that data center stayed as immaculate as possible to prevent unnecessary damage to computer.
• Recommended Security considerations for the Intranet data center, integrating security, providing solution design details and configuration details.
• Maintenance and troubleshooting of connectivity problems using Ping, Trace route.
• Planning and Implementation of Subnetting, VLSM to conserve IP addresses.
• Troubleshooting issues and outages on Trunks and Router interfaces extensively.
• Technical assistance for LAN/WAN management and complex customer issues.
• Performed route redistribution & manipulated route updates using distribute lists, route-maps & AD.
• Worked on load balancers like F5 10050s, 10250v to troubleshoot and monitor DNS issues and traffic related to DNS and avoid DDoS.
• Installed and configured SSH (Secure Shell) encryption to access securely on Ubuntu and Red hat Linux.
• Configured network access servers and routers for AAA security (RADIUS/ TACACS+)

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, F5 Load Balancer Cisco Nexus9k/7K/5K, Checkpoint, Cisco ASA

Confidential, CA

Network Engineer

Responsibilities:

• Installing and configuring juniper M series router along with juniper switches QFX series.
• Working Knowledge of frame relay, MPLS services, IPSec VPN's, OSPF, BGP and EIGRP routing protocols, NATing, sub-netting, also including DNS, WINS, LDAP, DHCP, TCP/IP, UDP, SNMP, OSPF, IPSEC, PPP, VLAN, VTP, STP (Spanning tree Protocol), RSTP & Multicasting protocols.
• Installed, configured, and maintained several Cisco DMVPN routers servicing smaller sites, several Edge routers running BGP and MPLS to Internet service providers.
• Experience on F5 load balancer to maintain balance in the network system with application specific usage.
• Experience with Firewall administration, Rule analysis, Rule modification.
• Responsible for reviewing current and planned network designs, particularly F5 load balancer implementations. Identified opportunities for implementation of network best practices.
• Worked and engaged with Service Providers like AT&T, Verizon to test and turn up the CER routers throughout different sites in California.
• Implemented Quality of Service (QOS), Policy Maps, Class-maps, Policy Routing in the network infrastructure throughout all the different sites.
• Worked with Cisco Layer 3 switches 3560, 3750, 4500, 6500; Cisco Nexus 5000 and 7000 in multi VLAN environment with the use of inter-VLAN routing, 802.1Q trunk, ether channel.
• Key contributions include troubleshooting of complex LAN /WAN infrastructure that include routing protocols EIGRP, OSPF & BGP. established peering relationships with external ISPs, transit providers and partner networks at national Internet exchanges.
• Performed route filtering and route manipulation by applying distribute-lists, route-maps & offset lists respectively.
• Installed redundant BigIP F5 LTM and GTM load balancers to provide uninterrupted service to customers.
• Configured and deployed BIG-IP LTM 8900 for providing application redundancy and load balancing.
• Involved in design, implementation, and configuration of HSRP for load balancing on L3 switches on different location of office on the switched network.

Environment: Cisco 3925, 2620, 1900 routers, Cisco 3750, 2950 Switches, Routing protocols: EIGRP, RIP, OSPF, BGP, FHRP: HSRP, Sniffing Tools: Ethereal, Wireshark, Port Security, SRX Firewall, VLAN, 802.1Q Trunking, Cisco ASA 5500.

Confidential

Network Engineer

Responsibilities:

• Configuring/Troubleshoot issues with the following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 series), to include: bridging, switching, routing, Ethernet, NAT, DNS, DNAT, NTP, IPAM, DHCP and SNMP, as well as assisting with customer LAN /WAN.
• Hands-on experience with WAN (ATM/Frame Relay), routers, switches, TCP/IP, routing Protocols (BGP/OSPF), and IP addressing.
• Configured firewall logging, DMZs, related security policies and monitoring.
• Creating private VLANs & preventing VLAN hopping attacks and mitigating spoofing with snooping & IP source guard.
• Worked with Cisco Catalyst 6500, 4500, 3500, 4900 switches and Cisco 2800, 3600, 3800, 7200, 7600 series and ASR 5k/9k series Routers.
• Responsible for entire LAN and WAN maintenance and troubleshooting of the company network. Involved in the Team of Data Center Operations to perform duties like administration and deployment of Cisco Routers and Switches according to the organization requirements.
• Involved in Network Designing, Routing, DNS, IP Subnetting, TCP/IP protocol.
• Worked with Routing Protocols of EIGRP and BGP.
• Verified IDS platform coverage using multiple testing suites.
• Developing scripts for automating the deployment process/ config push into Cisco devices using python.
• Provided port binding, port security and router redundancy through HSRP.
• Hands on experience working with security issue like applying ACL’s, configuring NAT and VPN.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Experience in Cisco switches and routers, Physical cabling, IP addressing, WAN configurations.
• Responsible for the installation, configuration, maintenance and troubleshooting of the company network.
• Duties included monitoring network performance using various network tools to ensure the availability, integrity and confidentiality of application and equipment.