SUMMARY

• 7 years of professional experience in Network Engineering with Cisco Certified Network Engineer, performing Network analysis, design, Implementing, capacity planning with a focus on performance tuning and support of large Networks.
• Strong knowledge in Cisco Routing, Switching and Security with Cisco hardware/software (heavy Cisco shop) experience.
• Experience working on Cisco Catalyst Series 3750, 4500, 4900, 6500; Nexus 2000, 5000, 6000 and 7000 series switches.
• Extensive work experience with Cisco Routers, Cisco Switches, Load Balancers and Firewalls.
• Experience in layer - 3 Routing and layer-2 Switching. Dealt with Nexus models like 7K, 5K, 2Kseries, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy.
• ConfigureVRRP & GLBP andVLANTrunking802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.
• Responsible for Check Point and Cisco ASA firewall administration across global networks.
• Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX Firewalls(SRX240, SRX550).
• In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.
• Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.
• Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.
• Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a Flexible Access Solution for a datacenter access architecture Expertise in installing, configuring and troubleshooting Juniper EX Switches (EX2200, EX2500, EX3200, EX4200, EX4500, EX8200 series).
• Deployed Juniper switches EX4500 and EX4200, routers M7i and M10i and Junos OS
• Implementing security policies using Cryptography, ACL, SDM, PIX Firewall, IPSec, VPN and AAA Security on different series of routers.
• Experience with different Network Management Tools and Sniffers like Wireshark (ethereal), HP-Open view, RSA envision and Cisco works to support 24 x 7 Network Operation Center.
• Experience with F5 load balancers andCiscoload balancers (CSM, ACE and GSS).
• Basic and advance F5 load balancer configurations, including migrating configurations fromCiscoACEto F5 and general troubleshooting of the F5 load balancers.
• Excellent customer management/resolution, problem solving, debugging skills and capable of quickly learning, effectively analyses results and implement and delivering solutions as an individual and as part of a team.
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.
• Knowledge of JUNOS platform and worked with IOS upgrade of Juniper devices.
• Experience with different Network Management Tools and Sniffers like Wireshark (ethereal), HP-Open view, RSA envision and Cisco Works to support 24 x 7 Network Operation Center.

TECHNICAL SKILLS

CISCO Platforms: Nexus 7K, 5K, 2K & 1K, Cisco routers (7600, 7200, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900 series).

JUNIPER Platforms: SRX, MX, EX Series Routers and Switches.

Networking Concepts: Access-lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPSec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi.

Firewall: ASA Firewall (5505/5510), Checkpoint, Cisco ASA.

Network Tools: Solar Winds, SNMP, Cisco Works, Wireshark.

WAN Technologies: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 / T3 & SONET.

LAN Technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port-channel, VLANS, VTP, STP, RSTP, 802.1Q.

Security Protocols: IKE, IPSEC, SSL-VPN.

Networking Protocols: RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA.

Languages: C, C++, Python.

Operating System: Windows 10/87/XP, MAC OS X, Windows Server 2016/2012/2008/2003 , Linux, UNIX.

PROFESSIONAL EXPERIENCE

Confidential, CA

Sr. Network Engineer

Responsibilities:

• Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF & EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers 7613, 7201 and 3945E.
• Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NATTING, Subnetting, also including DNS, LDAP, DHCP, http, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, WISM, STP (Spanning tree Protocol), RTSP & Multicasting protocols.
• Experience with design and implementation of Data center migration.
• Worked on Migration of Juniper SRX firewalls for isolation of network segments and VPN's, ASR(9k, 901,903).
• Designing, Implementing and Troubleshooting Cisco 3750, 3550, 3560, 2924, 6509-V-E, 6513, 6504, 6503, 6506, 6500 series switches, GSR, ASR routers with Cisco IOS and IOS-XR.
• Installed, configured and managed Cisco routers such as 7200 series, 3800 series, 3700 series, 2800 series and Cisco Catalyst switch series 6500, 4500, 3500, and 2900.
• Upgraded the data center network environment with Cisco ASA 5520. Configured ACL’s on Cisco Switches as well as configured routers as terminal servers.
• Monitoring the traffic through Cisco catalyst switches for Detection of Intrusion using IDSM2 and its Prevention IPS.
• Knowledge in new technologies like SDN,Open flowprotocol and NOX controller Python based
• Training sessions forOpenStack, Open Contrail, SDN and NFV at domestic and international level. Working on future CRAN architecture and design and Small cell migration to NFV
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution and worked on RSA secure IDs to providing VPN Token to Company USERS, Migration with Cisco ASA VPN experience.
• Worked on Layer 2 protocols such as STP, VTP, STP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment.
• Involved in supporting and troubleshooting WAN solutions between multiple platforms to include broadband, T1 circuit infrastructure and Wi-Fi networks
• Involved in designing and implementing QOS and policy map to 2800 series routers for all the branches.
• Performed IP address planning, designing, installation, configuration, testing, maintenance and troubleshooting in complete LAN, WAN development.
• Involved in operations and administration of WAN consisting Ethernet Handoffs, T1, DS3, and Optic Fiber Handoffs.
• Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations.
• Hands-on experience withJuniperSRX -JuniperSSL VPN
• Strong knowledge of Cisco andJunipersoftware (IOS/XR and JunOS) and hardware.
• Racking, Stacking, configuring Nexus 5K, 2K and 7K.
• Installed wireless access points (WAP) at various locations in the company.
• Actively involved in switching technology Administration including creating and managing VLANS, Port security - 802.1x, Trunking 802.1Q, RPVST+, Inter-VLAN routing and LAN security on Cisco Catalyst Switches 4507R+E, 6509-E and Cisco Nexus Switches 2232, 5596, 7009.
• Created dedicated VLANs for Voice & Data with QOS for prioritizing VOICE over DATA.
• Configured Voice ports and Dial peers on the call manager for the VOIP call to reach remote destination.
• Configured WIFI APs connected in LAN to reduce cable costing by creating AP, worked on Cisco SP Wi-Fi, troubleshoot in Cisco Aironet 3700, 1700 and 600 series.
• Worked on configuration and commissioning of the MPLS circuits for various branch offices.
• Providing Daily network support for national wide area network consisting of MPLS, VPN and point-to-point site.
• Performed Network Security Assessment and implemented security improvements such as network filtering, SSH, AAA, SMTP, SNMP access lists, VTY access lists, EIGRP MD5 authentication, and HSRP authentication.
• Configured of ACL’s in Cisco 5520 ASA firewall for internet Access requests for servers, Protocol Handling, Object Grouping and NAT.
• Managing and providing support to various project teams with regards to the addition of new equipment such as routers switches and firewalls to the DMZs.
• Responsible for Data Center Migrations and its operations.
• Implemented antivirus and web filtering on Juniper SRX 240 at the web server as well as configuration of F5 load balancers andCiscoload balancers (CSM, ACE and GSS).
• Documenting workflow process, managing and implementing standard policy and procedures.

Confidential, Atlanta GA

Sr. Network Engineer

Responsibilities:

• Worked as part of a team to manage Enterprise Network Infrastructure as a Tier 3 Support Engineer.
• Helped to update IOS of ASR901.
• Involved in configuring and implementing of Composite Network models consists of Cisco 7600, 7200, 3800 series routers and Cisco 2950, 3500, 5000, 6500 Series switches.
• Conversions to BGP WAN routing, which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.
• Migration from Cisco toPaloAltofirewall & Cisco to Checkpoint firewall
• Replace branch hardware with new 3900 routers and 2960 switches.
• Configuring firewall switch module on Cisco 6506 distribution layer switches, configuring VTPs, trunking, inter-VLan routing, port fast, uplink fast, backbone fast on access layer switches.
• Enable STP attack mitigation (BPDU Guard, Root Guard), Using MD5 authentication for VTP
• Planned and installed Frame Relay WAN links to the branch offices.
• Maintained and setup wireless access points at various locations in the company.
• Great understanding of WLAN including 802.11 standards, Lightweight and Autonomous systems, WPA, PEAP.
• Good knowledge onjuniperSRX240, SRX220 and SRX550 series Firewalls.
• Assisted in MPLS migrations, implemented a backup for the existing WAN connection using site-to-site IP sec VPN tunnels.
• OpenStackMitaka with integration of Open Contrail 3.1.0
• Installation ofPaloAlto(Web Application and URL filtering, Threat Prevention, Data Filtering).
• Performed upgradation ofPaloAltofirewall from old platforms to new platforms 6.1.5 to 6.1.10.
• Juniper ContrailSDNdeployment assistance to the senior engineering team
• Knowledgeable in configuration of Voice VLAN’s (VOIP), prioritizing the voice traffic over the data traffic, Telecom, using Dark fiber created fast speed line between two campuses, Wireless networks.
• Worked on Network Traffic sizing of cloud to network through security firewalls.
• Load Balancing from the client side.
• Involved in configuringJuniperSSG-140, Cisco pix firewall and Check point firewall.
• Responsible for everyday tasks related toJuniperSRX Firewalls, Space Changes, and Iron Port Proxy Traffic.
• Implement the firewall rules using Netscreen manager (NSM).
• Monitoring the network traffic with the help of QRadar and Cisco IPS event viewer.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Helped in troubleshooting in DDoS.
• Configuring and troubleshooting OSPF routing protocol on the corporate network.
• Tested and implemented various BGP attributes such as Local Preference, MED, AS-PATH, Community, Extended community using route-maps.
• Worked on migration of Frame Relay based branches to MPLS based VPN for customer’s WAN infrastructure.
• Worked on migration of existing PIX firewall to ASA firewall, PIX OS upgrade from 6.3 to 7.0, also configured on BIG IP (F5) Load balancers and also monitored the Packet Flow in the load balancers.
• Have good working experience with the Trouble Tickets on F5 Load Balancers.
• Managing enterprise BGP setup by configuring and troubleshooting BGP related issues.
• Scaling of BGP and IGP in the core, dealt with implementation of deployment related to Cisco devices and applying security policies on it.
• Troubleshoot issues related to VLAN, VLAN Trunking, HSRP failovers, related issues.
• Configuration of NAT.
• Maintain effective communications with vendors, peers and clients in resolution of trouble-tickets, equipment RMAs, and support requests.
• Managed data back-ups, scheduled data back-up, and preparation for disaster recovery files.
• Planning for upgrade of IOS on devices and performing the upgrade.
• Assisted in the architecture, evaluation and recommendations related to purchasing and installing hardware, software related to IP Networking.

Confidential, York, PA

Network Engineer

Responsibilities:

• Experience in configuring Site-to-site and remote access VPN solutions.
• Installed and configured Cisco 7200 series router and Cisco 2950, 4500, 6500 Series switches.
• Configured network using routing protocols such as RIP, OSPF and BGP and troubleshooting L2/L3 issues.
• Worked on multiple projects related to Branch networks, Campus networks, extranet clients and Data Center Environments involving in data center migrations from one data center to another.
• Provided estimated bandwidth requirements for data replication, to best determine adequate timing for migration service levels.
• Created data migration strategies to help with completion of migration of data center from one point to another.
• Configuration of Cisco 6500 (SUP 720), 4500 (SUP 6) & 3750 Catalyst Switches for network access.
• Worked extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.
• Configuring RIP, OSPF and Static routing on Juniper M and MX series Routers.
• Configuring VLAN, Spanning tree, VSTP, SNMP on EX series switches.
• Time to time upgrade network connectivity between branch office and regional office with multiple link paths and routers running HSRP, EIGRP in unequal cost load balancing to build resilient network.
• Design and implement Catalyst/ASA Firewall Service Module for various LAN’s.
• Configured Blue Coat ProxySG Web Application Reverse Proxy for securing and accelerate public web applications.
• Key contribution includes troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP.
• Troubleshoots in Cisco Aironet 2700 and 600 series.
• Configured Client VPN and RSA Token ID technologies including Cisco’s VPN client via IPSEC.
• Configuring ACL to allow only authorized users to access the servers.
• Participated in on call support in troubleshooting the configuration and installation issues.
• Installation, maintenance, troubleshooting local and Wide Areas Network (ISDN, Frame relay, DDR, NAT, DHCP, TCP/IP).
• Provided technical support in terms of upgrading, improving and expanding the network.
• Providing technical security proposals, detailed RFP responses and security presentation, installing and configuring ASA firewalls, VPN networks and redesigning customer security architectures.

Confidential

Network Engineer

Responsibilities:

• Responsible for the configuration of Cisco Routers (7000, 5300, 4000, 2500, 3000, 2600) using RIP, IGRP, OSPF, EIGRP, BGP.
• Implement Cisco IOS Firewall IDS using 2600 series router.
• Configured and installed multi-protocol (IP, IPX) multi-interface Cisco routers.
• Managed office network with Cisco devices with network devices including 2500 and 3600 series routers and 3500, 2900, 1900 series switches.
• Escalating customer problems to management and support groups utilizing standard escalation model.
• Extensive experience in configuring and implementing OSPF and BGP.
• Supported core network consisting of Cisco 7200 series routers running multi area OSPF.
• Configuration of EIGRP and OSPF as interior gateway protocol with route filtering and route redistribution, installed and maintained Cisco 3600, 2600 and 7200 backbone routes with HSRP.
• Implemented stub/Totally stub areas, implemented various OSPF features like route-summarization and SPF throttling.
• Experience in WAN technologies like T1/T3, DS3, STM1 and STM4 circuit types.
• Configured Security policies including NAT, PAT, VPN, Route-maps and Access Control Lists.
• Implement Cisco Secure Access Control Server (ACS 3.0) for TACACS+/RADIUS.
• Redistribution of routing protocols and Frame-Relay configuration.
• Network Migration from RIP to OSPF.
• Analyzing and resolving a high percentage of initial customer contact in the areas of PC/LAN.
• Implementation of TCP/IP and related Services-DHCP/ DNS/ WINS.
• Experience Branch Relocation: Connect workstation, servers, etc. Rack and stack Pre-configured new hardware and connect the circuits. Work with Carrier to test and turn-up circuits.
• Pinpointing physical network conditions that are contributing to call quality issues.
• Configuring, maintaining and troubleshooting routing protocols such as OSPF, EIGRP and BGP.

Confidential

Network Engineer

Responsibilities:

• Engaged in office moves, helped in identifying network requirements of new building, installed new networking hardware, and coordinated with vendors for cabling/wiring.
• Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external
• Escalation procedures and customer notifications.
• Used DHCP to automatically assign reusable IP addresses to DHCP clients.
• Upgrade Cisco Routers, Switches and Firewall (PIX) IOS using TFTP.
• Acted as Tier 3 support for connectivity, failures, configuration, implementation, and troubleshooting.
• Provide project management for data center cabling, documented all network drawings using Visio.
• Design, test, and implement global Next Generation MPLS network (150 sites) using Cisco 3800, 2800, 2600 and 1721 routers using BGP and EIGRP protocols.
• Implementing traffic policy changes with Cisco PIX Firewall appliance switch WAP configuration and installations.
• Interfacing with C level executives to understand technology vision, gather requirements and develop technical specifications to align with business roadmaps.
• Hands on Experience in Configuring L2 and L3 security features on devices.
• Write network critical documentation: backup procedures, server specs, installation details, etc.