SUMMARY

• 8+ years of professional experience in Network Designing, Deployment, Administration, Configuring, Troubleshooting and Testing of networking system
• 4 years of Hands on experience in installation and configuration of Cisco ACS and Cisco ISE 1.x
• Expert level Knowledge on working with Wireless LAN Controller’s, Cisco Meraki, Cisco NCS, Cisco AP’s, LWAPS, Standalone AP’s and Mesh AP’s.
• Excellent working knowledge of TCP/IP protocol suite and OSI layers
• Excellent Knowledge on TCP/IP, SNMP, FIBRE, Ethernet, Gigabit/10 - Gigabit, RADIUS/AAA.
• Good Knowledge on VoIP, VLAN, STP, 802.1Q, QoS, IPSEC, L2TP, L2CP, LACP.
• Good knowledge and experience in Installation, Configuration and Administration of Windows Servers 2000/2003, Active Directory, FTP, DNS, DHCP, TFTP, Linux OS under various LAN and WAN environments
• RSA SecurID Two-Factor authentication using RSA SecurID Authentication Manager 8.x.
• In-depth knowledge and hands-on experience on IP Addressing, Sub netting, VLSM and ARP, reverse & proxy ARP, Ping Concepts.
• Well experienced in troubleshooting and optimizing performance in CISCO based routers and switches. Have worked in NOC environment for more than 5 years.
• Excellent problem solving and debugging skills with good verbal/written communication and presentation skills.
• Cisco Routers, Cisco Switches, Cisco IOS, Layer 2, Layer 3, IPv4, IPv6, RIP v2. Advanced IP addressing and Routing, Configuration of secure routing solutions, WLAN, LAN and WAN.
• Worked on F5 LTM/GTM, Big-IP, load balancing and WAN acceleration.
• Expert level knowledge of troubleshooting, implementing, optimizing and testing of static and dynamic routing protocols such as EIGRP, OSPF, BGP ability to interpret and resolve complex route table problems.
• Hands on experience with site-to-site and remote access VPNs.
• In-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.
• Enhanced level of knowledge with PPP, ATM, T1 /T3 Frame-Relay, MPLS, GRE tunneling between two sites.
• Good knowledge on installation and basic configuration of VMware ESXi 5.1 and Active Directory
• Experience in installation and administration of Windows server 2003 and 2008.
• In-depth knowledge and hands-on experience on IP Addressing, Subnetting, VLSM and ARP, reverse & proxy ARP, Ping and Traceroute concepts.
• Hands on Experience of almost 3 years with Cisco ASA 5500 series and Juniper SRX Firewalls.
• Expertise in implementing security policies like NAT, PAT, IPS, VPN and Access lists.
• Expertise in Cisco ACS, Juniper Steel Belt, Radiator and Cisco ISE Authentication, Authorization and Accounting Protocols. Expert Hands on Experience in Cisco ACS & Cisco ISE for 802.1x, AAA Configurations.
• Experience with designing, deploying and troubleshooting LAN, WAN, Ether Channel, IP Routing Protocols - (RIPV2, OSPF, EIGRP & BGP), ACL's, NAT, VLAN, STP, VTP
• Experience in layer-3 Routing and layer-2 Switching. Cisco router models like 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches
• Strong hands on experience on ASA (5540/5550) & Checkpoint Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, NIPS/IDS, AAA(TACACS+ & RADIUS)
• Working knowledge with monitoring tools like Solar Winds &network packet capture tools like Wire-shark
• Provided 24x7x365 availability and on-call support as required by the projects.
• Well experienced in troubleshooting and optimizing performance in CISCO based routers and switches. Have worked in NOC environment for more than 5 years.
• Excellent problem solving and debugging skills with good verbal/written communication and presentation skills.

TECHNICAL SKILLS

Routers: Cisco 7600, 7200, 3800, 3700, 3600, 2900, 2800, 2600, ASR 9K, ASR 12K, CRS

Routing Protocols: OSPF, EIGRP, BGP, RIP v1/v2, MPLS PBR, Route Filtering, Redistribution, Summarization, and Static Routing

Switches: Nexus 2K/5K/7K, Cisco Catalyst 6500, 4500, 3850,3560, 3750, 2960

Switching Protocols: LAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switch, Ether channels, Transparent Bridging

Multicast Protocols: IGMP, IGMP version 2 and 3, CGMP, PIM-Sparse and Dense Mode. DHCP, FTP, TFTP

LAN technologies: Ethernet, Fast & Gigabit Ethernet, VLANS, VTP, STP, RSTP, 802.1W, Cisco Prime

WAN technologies: Leased lines 128k - 155Mb (PPP / HDLC), Channelized links (T1/DS3/OC3/OC12), Fiber Optic Circuits, Frame Relay, ISDN and ATM

Wireless Technologies: Prime Infrastructure, Air Magnet, Airwatch&WLC’s(8510, 5508, 5706), Cisco AironetAP’s ( 2600, 3600, 3700), ISE, MSE, Aruba 225, Aruba 3000 controller & Airwave.

Load Balancer: F5 Networks (Big-IP) LTM 8900 and 6400

Network security: Cisco ASA 5540, ACL, IPSEC, F5 Load Balancer, ISE, IPSec, VPN, GRE VPN

Network Management: SolarWinds, Proteus, Xilinx 9.21, HP Open-view, Wireshark, Spirent, SNMP

Operating systems: Windows XP/ 7/ 8, Windows Server 2003/ 2008, Mac OS X and Linux

Language skills: C, C++, Python, SQL

Various Features & Services: IOS and Features, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, TFTP, FTP

Applications: MS (Office, Word, Outlook, Excel, PowerPoint, Visio), VMware, Adobe Photoshop and Illustrator

PROFESSIONAL EXPERIENCE

Confidential, Glen Allen, Virginia

Sr. Network Engineer

RESPONSIBILITIES:

• Secure, manage, and document the local area network consisting of a Cisco 2811 router, an FTP Server running Windows Server 2012, multiple wireless routers, and all cisco access switches.
• Implement, troubleshoot and engineer IP Telephony infrastructure.
• Configure network devices including routers, switches, and servers to accommodate company growth and demand while maintaining a high level of security and availability.
• Apply knowledge of the TCP/IP suite, Cisco IOS, and satellite theory to solve complex networking issues including IP routing protocols, ACLs, VLANs, VPNs, and AAA.
• Utilize in depth testing procedures to update firmware, apply current security patches, verify functionality of all devices, and test configurations for equipment such as Cisco routers, ASA firewalls, switches, and Windows OS computers.
• Review, modify, and test advanced network configuration files during the development process of prototype systems to ensure proper functionality before presenting it to the customer for purchase.
• Design, implement and troubleshoot LAN, WLAN & WAN solution to suite client’s needs.
• Design OSPF Areas for reliable Access Distribution and for Core IP Routing.
• Implementing, Monitoring, Troubleshooting and Convergence in Frame-Mode MPLS inside the core.
• Good understanding of operations, maintenance of Cisco ISE
• Ethernet network designincluding routing, switching, configuration, performance, and fault tolerance of Servers, Switches, Storage hardware and software architectures.
• Performed Troubleshooting and monitored routing protocols such RIP, OSPF, EIGRP & BGP.
• Designing and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.
• Implemented TCP/IP and related services like DHCP/DNS/WINS.
• Implemented Multicast solution about video streaming services by coordinating activities with various teams
• Configured and troubleshooting of HSRP on Cisco routers.
• Good understanding of 802.11 and its applications.
• Experience with WiFi design and software.
• Experience working with ADVA, Citrix and Infoblox
• Experience in automating network actions across data center, cloud using Infoblox DNS, DHCP.
• Install, design, configure and maintaining network services and devices.
• Good understanding of VMWare NSX configuration operations and troubleshooting
• Worked on Advanced troubleshooting skills, including the ability to capture and analyst packet level data such as Wireshark and worked with network systems management monitoring tools such as the latest version of Prime, SolarWinds, NetScout, Netflow, TAPs, and SPANs
• Working with customers Site-to-Site and Remote Site VPNs using Cisco routers to Cisco routers, ASA Firewall to ASA Firewall, Cisco Router to ASA Firewall and troubleshoot and modify existingVPN.
• Maintaining and troubleshooting of Network security environment.
• Windows 2000, 2003, 2008 R2, 2012 Servers

Confidential, Bloomington, IL

Sr. Network Engineer

Responsibilities:

• Working as Network Access Controls (NAC) Administrator in planning and designing our Clients global network for Network Access Solution.
• Worked extensively on policy design and implementation for NAC solution and integrated NAC with various Network infrastructures for successful deployment of NAC solution.
• Worked on ForeScout policies for auto-remediation of non-compliant devices, classification of devices, etc.,
• Configuring and Maintenance of Checkpoint UTM 1040,1070 and 2200 Next Generation with R70/R75/R80 Series.
• Configuring policies, Firewall rules, Web filtering using checkpoint smart dashboard and Initial configuration of Palo Alto Firewall.
• Troubleshooting, analyzing network connectivity and Application and URL filtering using Smart track viewer and Smart track monitor.
• Design and Implementation of 802.1x Wired/Wireless User Authentication using Cisco ISE Radius Server.
• Configuration & Maintenance of Cisco ISE for Certificate based authentication for BYOD and Corporate Mobile Device Authentication using Xenmobile MDM
• Worked extensively on data center upgrades of Cisco Catalyst Switch 6500s, 4500s,
• Worked on NX-OS series 2000,3000,4000,5000,6000,7000 switches by configuring and upgrading in data centers
• Worked on upgrading Cisco ISE 3300 Appliances and 1.0.4 Cisco ISE software on VMware’s.
• Performed IOS Software upgrades on switches 6500, 3750 and 4500s and Cisco ASR for compatibility with Cisco ISE 1.0.3/1.0.4 setup.
• Worked on Cisco Unity, Unity Express, Call Manager & Call Manager Express.
• Configured 6500, 3750 and 4500 for Network Access Solution integration with Cisco Identity Service Engine on ESX 5.0 VMware and physically with Cisco ISE appliances.
• Involved datacenter migration and consolidation project.
• Configured and performed software upgrades on Cisco Wireless LAN Controllers 5508 for Wireless Network Access Control integration with Cisco ISE.
• Planning, designing and Configuration of various Policy Configurations, Profile Authorizations, End device Profiling, User Identities, Cisco ISE and AD mapping with various attributes and levels of authorizations and Network Access.
• Configuration of Cisco IP phones (7900s, 6961s, 9900s) for device profiling and Cisco Call Manager phone registration via Cisco ISE, Printer Profiling, Mobile device profiling etc.,
• Planning, designing and configuration of various Cisco ISE & Forescout NAC deployment strategies (Standalone, Distributed Setups) and rollout to production environment.
• Worked Extensively on Access Control Policies consisting of VLAN switching through SNMP, applying downloadable ACLs through Cisco ISE, and Configuring Standard and Extended ACLs locally and on the upstream switch’s for Cisco NAC & Forescout NAC Solution
• Assisted Tier 4 support on support issues and also involved while configuring BIG IP F5 Load balancers.
• IP addressing and design schemas for a variety of IP Pools using DHCP scope or local IP pools for NAC Controls.
• Aided in configure policies and documented the entire deployment notes and policy set.

Confidential, Irvine, CA

Network Engineer

Responsibilities:

• Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches.
• Authentication, authorization, accounting (AAA), posture, and profiler configuration and implementation using Cisco ISE 1.1/1.2/1.3.
• Configured Cisco ASA 5510 for VPN Network Access Control integration with Cisco ISE (Inline PEPs).
• Configured and performed software upgrades on Cisco Wireless LAN Controllers 5508 for Wireless Network Access Control integration with Cisco ISE.
• Configuration of Cisco IP phones (7900s, 6961s, 9900s) for device profiling and Cisco Call Manager phone registration via Cisco ISE, Printer Profiling, Mobile device profiling etc.,
• Planning, designing and configuration of various Cisco ISE deployment strategies (Standalone, Distributed Setups) and rollout to production environment.
• Provided comprehensive guest access management for Cisco ISE administrators, sanctioned sponsor administrators using BYOD & Guest Management Portal Configuration.
• Experience with Synchronous Optical Networking (SONET) over optical fiber.
• Involved in Configuring and implementing of Composite Network models consists of Cisco7600, 7200, 3800 series and ASR 9k, GSR 12K routers and Cisco 2950, 3500, 5000, 6500 Series switches.
• Responsible for day to day management of Cisco Devices, Traffic management and monitoring.
• Managing health check of Network devices this is involves upgrading IOS on every quarter after checking the vulnerability of IOS and reviewing the configuration
• Experience in HSRP standby troubleshooting & Experience in configuring & upgrading of Cisco IOS
• Installation, Configuration and troubleshooting Cisco switches and Firewall on multi-mode context based environments
• Implemented various OSPF scenarios on networks consisting of 7600 routers.
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Designing and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.
• Installed and configured fourPIX525 and two ASA 5505 in customer locations. In addition to that, two PIX firewall configured for the Guest access
• Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP
• Involved in the redistribution into OSPF on the core ASA firewall.
• Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.
• Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.
• Involved in designing L2VPN services and VPN-IPSEC authentication & encryption system.
• Tuned BGP internal and external peers with manipulation of attributes such as metric, origin and local Preference.
• Cisco Secure Access Control Server (ACS) for Windows to authenticate users that connects to a VPN 3000 Concentrator.
• Troubleshoot and Worked with Security issues related to Cisco ASA/PIX, Checkpoint, IDS/NIPS and Juniper Netscreen firewalls.
• Configured networks using routing protocols such as RIP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure.
• Implemented Hot Standby Router Protocol (HSRP) by tuning parameters like preemption.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.

Confidential

Network Engineer

Responsibilities:

• Analyzed, configured and troubleshoot the LAN/WAN networks. Monitor Network traffic and access logs to troubleshoot network access issues. Use network analysis tools to monitor and shape traffic for optimum performance.
• Perform configuration and maintenance of LAN\WAN technologies such as Ethernet and Fast Ethernet. Securing the network with access lists applied on interfaces.
• Planning designing, Installation, configuration and maintenance of 802.11a/b/g Wireless Networks and Wireless Access points.
• Implemented traffic filters using Standard and Extended Access-lists. Handled Route-map, Re-distribution list & access-list configurations.
• Implementing IP Routing protocols EIGRP, OSPF, RIPv1 and RIPv2.
• Configuring and managing Windows Firewalls, Cisco PIX and Checkpoint firewalls.
• Performed IOS Software upgrades on switches 6500, 3750 and 4500s
• Cisco Load balancers, VPN concentrators and implementing QoS and performing traffic engineering.
• Daily administration of Windows servers including creation/deletion of new user accounts, print services, backups. Installed and Maintained software license agreements.
• Handled all orders as per the company needs, Add, Change, Terminate, Relocate etc. Coordinated with engineering team and onsite technician for remote configuration of Cisco routers and Switches
• Providing End-user support for configuration and troubleshooting of hardware, software and Windows operating systems related issues, Network connectivity issues, Remote access setup and VPN connection issues.
• Participating in disaster recovery testing, maintaining system documentation logs and assisting in troubleshooting and diagnosis of system problems.
• Executing email administration, backup, data recovery, and preventive maintenance in addition to routine software installation and troubleshooting functions.
• Experience with Cisco Voice and Unified Communications Solutions (CUCM 8).
• Deployed unified communication solutions for the corporation with Cisco 2900, 3900, 3900E routers.
• Hands on experience with voice protocols like MGCP, H323 and SIP.
• Served in computer maintenance, performed all types of hardware, software maintenance and engineering in addition to systems selection, backup and technical support.
• Installing, Configuring and updating of Antivirus packages (Kaspersky and AVG).
• Installation, maintenance and troubleshooting of various laser and Network and Local Printers.

Confidential

Network Engineer

Responsibilities:

• Thenetworkinfrastructure for Cisco platform for more than 300 devices i.e. 2800, 3600 series Routers and switches for office and for various Customers.
• Migration of RIPv2 to OSPF, BGP routing protocols.
• Designed Configured, Installed, and Maintained and provided T-Shoot.
• Troubleshoot problems on a day to day basis and providing solutions that would fix the problems within theirnetwork.
• Designing Solutions for frozen requirements using Cisco Routers and Switches.
• Configured EIGRP for Lab Environment.
• Maintained Redundancy on Cisco 2600, 2800 and 3600 routers with HSRP.
• Created VLAN and Inter-VLAN routing with Multilayer Switching.
• Designing Solutions for frozen requirements usingCisco Routers and Switches.
• Implemented ISL and 802.1Q for communicating through VTP.
• Working with client team to find out requirements for theirnetwork.
• Configured RSTP, LACP and VTP on Cisco devices.
• Installing, Configuring Cisco Catalyst switches 6500, 3750 and 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control Lists implemented as per Network Design.
• Experience in deploying EIGRP/BGP redistribution and the changing the metrics for the primary and back up.
• Fourth tier troubleshooting, support and implementation for DNS/DHCP.
• Involved in Troubleshooting IP addressing Issues and Updating IOS Images using TFTP.
• Performed RIP and OSPF Routing Protocol Administration.
• Other responsibilities included documentation and support other teams.