SUMMARY

• Cisco Certified Network Engineer with 8+ years of professional experience in Network engineering, performing Network analysis, design, implementing, capacity planning with focus on performance tuning and support of large Networks.
• Strong knowledge in Cisco Routing, Switching and Security with Cisco hardware/software (heavy Cisco shop) experience.
• Expertise in OSI layer model and TCP/IP model.
• Experience in layer - 3 Routing and layer-2 Switching
• Experience working on Cisco Catalyst Series 3750, 4500, 4900, 6500; Nexus 2000, 5000, 6000 and 7000 series switches, Cisco WAAS, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series
• Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX Firewalls (SRX240, SRX550)
• Experience with designing, deploying and troubleshooting LAN, WAN, Frame-Relay, Ether-channel, IP Routing Protocols - (RIPV2, OSPF, EIGRP & BGP), ACL's, NAT, VLAN, VTP, BPDU, STP, HSRP & GLBP.
• Experience in Configuring and implementing VLAN, VTP, LAN switching, STP and 802.x authentication in access layer switches.
• Experience in monitoring and analysing the load balancing of network traffic using Wireshark and Solarwinds.
• In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.
• Expertise in installing, configuring and troubleshooting Juniper Routers.
• Profound knowledge on various WAN technologies like T1/E1, T3/E3, HDLC, Frame-Relay and PPP.
• Configuration and troubleshooting of CSM, integration with ASA devices.
• Experience in managing security policies with CSM, integrated with ASA 5500 devices.
• Having exposer on Blue Coat Proxy.
• Work experience onBlue Coat Proxyfor Content filtering and URL filtering.
• Experience in Citrix NetScaler application delivery controller.
• Access Control Server configuration for RADIUS and TACACS+.
• Strong knowledge and experience in implementing, configuring VPN technologies like IPSEC, MPLS.
• Experience with F5 load balancers andCiscoload balancers (CSM, ACE and GSS).
• Basic and advance F5 load balancer configurations, LTM, GTM, including migrating configurations fromCiscoACEto F5 and general troubleshooting of the F5 load balancers
• Experience in Physical cabling, IP addressing, configuring and supporting TCP/IP.
• Experience cisco wireless controllers 2500,4400, 5500 and 5700 Series
• Managed LAN and Wireless Network and performed troubleshooting On LAN, WLAN, Customer Modems (NTL 250, TERAYON, and MOTOROLA) And CPE Router (Cisco-Linksys, Belkin, D-LINK and Dynamode).
• Configured and worked with Aruba and Meru wireless devices.
• Have knowledge on various advanced technologies like VOIP, H.323, SIP, QOS, IPv6, Multicasting, and MPLS.
• Strong general management, negotiation, inter-personal, communication and team building skills.
• Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.

TECHNICAL SKILLS

Cisco Platforms: Nexus 7K, 5K, 2K & 1K, Cisco routers (7600,7200, 3900, 3600, 2800, 2600, 2500, 2000,1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900 series), ASR (9K, 901, 903), GRS 12k, ISR G1’s & G2’s, Nexus 3ks, 6500 SUP720 & SUP 2T, Cisco unified call manager, Cisco VOIP phones 7940, 7960, Cisco Wireless controller 2500,5500,5700

Juniper Platforms: SRX, MX, EX Series Routers and Switches

Networking concepts: Access-lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPsec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi

Load Balancers: Cisco CSM, F5 Networks (Big-IP),LTM,GTM, Citrix NetScaler

WAN Technologies: Frame Relay, ISDN, ATM, MPLS, Leased line & exposure to PPP, DS1,DS3,OC3,WAAS,T1/T3, & SONET, CRS 4 slot

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q

Security Protocols: IKE, IPSEC, SSL-VPN

Networking protocols: RIP, OSPF, EIGRP, BGP, MP-BGP, LDP STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA,RSVP-TE,MP-BGP, MCAST - NG, ASM, SSM, IGMP, MVR, FHRP

Communication Protocols: TCP/IP, UDP, DHCP, DNS, ICMP, SNMP, ARP, RARP, PPP, HDLC and ISDN

Firewall Security: Cisco PIX 500 series, Cisco ASA 5500 series, Checkpoint, Juniper SRX

Sniffers: WireShark, Solarwinds

Operating Systems: DOS, Windows 95/98, Windows NT/2000/XP/Vista/7/8

PROFESSIONAL EXPERIENCE

Confidential, Cambridge - MA

Sr. Network Engineer

Responsibilities:

• Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF & EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers 7613, 7201, and 3945E.
• Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NAT’ing, sub-netting, also including DNS, LDAP, DHCP, http, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN,WISM, STP (Spanning tree Protocol), RTSP & Multicasting protocols.
• Experience with design and implementation of Virtual Switching System (VSS) for both User segment and server segment using 6509-V-E catalyst switches
• Experience with managing the completed end to end site solutions with design and implementation of Data center migration.
• Responsible for Data Center Migrations and its operations.
• Designing, Implementing and Troubleshooting Cisco 3750, 3550, 3560, 2924, 6509-V-E, 6513, 6504, 6503, 6506, 6500 series switches, GSR, ASR routers with Cisco IOS and IOS-XR.
• Installed, configured and managed Cisco routers such as 7200 series, 3800 series, 3700 series, 2800 series and Cisco Catalyst switch series 6500, 4500, 3500, and 2900.
• Racking, Stacking, configuring, Nexus 5K and 2K and 7K, Static pinning fabric interface connection, PortChannel fabric interface connection, Configuring a Fabric PortChanneling.
• Implementing 3750 Stackable switches using Cisco Stack Wise technology. Experience to review and evaluate current and future design issues as required maintaining network integrity, efficient data flow.
• Worked on Layer 2 protocols such as STP, VTP, STP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment.
• Configured ACL’s on Cisco Switches as well as configured routers as terminal servers.
• Monitoring the traffic through Cisco catalyst switches for Detection of Intrusion using IDSM2 and its Prevention IPS.
• Actively involved in switching technology Administration including creating and managing VLANS, Port security - 802.1x, Trunking 802.1Q, RPVST+, Inter-VLAN routing, and LAN security on Cisco Catalyst Switches 4507R+E, 6509-E and Cisco Nexus Switches 2232, 5596, 7009.
• Involved in designing and implementing QOS and policy map to 2800 series routers for all the branches
• Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all location.
• Worked on configuration and commissioning of the MPLS circuits for various branch offices.
• Providing Daily network support for national wide area network consisting of MPLS, VPN and point-to-point site.
• Performed IP address planning, designing, installation, configuration, testing, maintenance, and troubleshooting in complete LAN, WAN development.
• Involved in operations and administration of WAN consisting Ethernet Handoffs, T1, DS3, and Optic Fiber Handoffs.
• Worked on DWDM, SONET.
• Upgraded the data center network environment with Cisco ASA 5520.
• Customized the inbound update policy for any member of a peer group.
• Worked on Migration of Juniper SRX firewalls for isolation of network segments and VPN's, ASR (9k, 901,903).
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution and worked on RSA secure IDs to providing VPN token to company’s user.
• Migration with Cisco ASA VPN experience.
• For troubleshooting firewallrelated packet drops and reachability issues, we would use Netscout or Checkpoint'sSmart Tracker.
• Manage Netscaler MPX load balancing and content switching policies.
• Establish application firewall policies on the NetscalerMPX.
• Configured of ACL’s in Cisco 5520 ASA firewall for internet Access requests for servers, Protocol Handling, Object Grouping and NAT.
• Managing and providing support to various project teams with regards to the addition of new equipment such as routers switches and firewalls to the DMZs.
• Configured and implement proxy related devices including restricting HTTP/ HTML protocol validation from server and client using blue coat proxy server.
• Experience Branch Relocation: Connect workstation, servers, etc. Rack and stack Pre-configured new hardware and connect the circuits. Work with Carrier to test and turn-up circuits.
• Apply policy to inbound connections based on different parameters such as IP address, user agents, client location using blue coat proxy.
• Performed Network Security Assessment and implemented security improvements such as network filtering, SSH, AAA, SMTP, SNMP access lists, VTY access lists, EIGRP MD5 authentication, and HSRP authentication.
• VIP Pool/Profile/SSL/iRule/ASM Configurations in BIG IP.
• Troubleshooting VIP load balancing issues.
• Subnet designing and allocation for server & client side network in BigIP.
• Configured F5 load balancer GTM at data center environment as a name resolver.
• In data center environment configured F5 LTM and GTM load balancer as a sever where GTM dynamically resolve VIPs and provided to LTM server.
• F5 LTM and GTM can work as application delivery machines.
• Implemented antivirus and web filtering on Juniper SRX 240 at the web server as well as configuration of F5 load balancers andCiscoload balancers (CSM, ACE and GSS).
• Implemented antivirus and web filtering as well as configuration of F5 load balancers andCiscoload balancers (CSM, ACE and GSS), monitored the Packet Flow in the Load balancers.
• Installed wireless access points (WAP) at various locations in the company.
• Worked with cisco wireless series controller.
• Configured WIFI APs connected in LAN to reduce cable costing by creating AP, worked on Cisco SP Wifi, troubleshoot in Cisco Aironet 3700, 1700 and 600 series.
• Configured Voice ports and Dial peers on the call manager for the VOIP call to reach remote destination.
• Created dedicated VLANs for Voice & Data with QOS for prioritizing VOICE over DATA.
• Documenting workflow process, managing and implementing standard policy and procedures.

Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/2960/6500 switches and Cisco 3640/ 0/3845/3600/2800 routers, Cisco Nexus 7K/5K/2K, Cisco ASA5510, Cisco Aironet, Checkpoint, Citrix Netscape9.x,10.x windows server 2003/2008: F5 BIGIP, LTM, OSPF, EIGRP, RIP, BGP, VLAN, VPN, Juniper SRX.

Confidential, Menlo Park - CA

Sr. Network Engineer

Responsibilities:

• Configured RIP, PPP, BGP and OSPF routing.
• Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.
• ConfigureVRRP & GLBP andVLANTrunking802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.
• Worked as a single point of contact for the whole migration.
• Performed and presented network analysis as a part of network migration.
• Monitoring and troubleshooting network issues between client site and 85 remote sites with legacy switches and routers
• Involved in knowledge transfer to vendors and provided them network support as required
• Configuration and maintenance of EIGRP and BGP network on router 7200 and 6500 MLS.
• Configuration and maintenance of 3750 stack and 6500 VSS for improved efficiency of the data plane.
• Configuration and management of NEXUS network in the existing network infrastructure.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• Created LAB setup with 7k and 5K NEXUS switches for application testing
• Co-ordinated with the Data Network and Security team and came up with possible solutions.
• Work on Physical Site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Identify, design and implement flexible, responsive, and secure technology services
• Experience with Firewall Administration, Rule Analysis, Rule Modification
• Creating and provisioning Juniper SRX firewall policies.
• Created standard access lists to allow SNMP, NTP and logging servers.
• Documented new VPN enrollments in a database and create standard procedures for further improvement.
• Troubleshoot traffic passing managed firewalls via logs and packet captures
• Negotiate VPN tunnels using IPsec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.
• Provided proactive threat defence with ASA that stops attacks before they spread through the network.
• Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Responsible for Checkpoint and Cisco ASA firewall administration across global networks.
• Configured loadbalancing methods
• Configuring and implementing F5 BIG-IP, LTM, GTM load balancers to maintain global and local traffic
• Implementation and configuration of F5 Big-IP LTM-6400 load balancers.
• Installed high availability Big IP F5 LTM and GTM load balancer to provide uninterrupted service to customers.
• Administer and troubleshoot Blue coat proxy or firewalls for connectivity issues and policy enforcement.
• Apply different rules using blue coat proxy server.
• Blue Coat Web proxies - ProxySG, proxy AV, Content Analysis System, PacketShaper, threat detection ProxyCAS.
• Worked on cisco wireless environment.
• Performed regular Wireless Access Point analysis and WiFinetwork monitoring and troubleshooting for wireless network fault detection within the wireless network infrastructure utilizing RF Site Survey-Spectrum, Air Magnet WiFiAnalyzer, and Wireshark survey tools for wireless packet captures and analysis.
• Configured and managed Cisco Unified Communication Manager (6.x, 7.x, & 8.x),Cisco call manager express and CiscoUnity express in a Lab environment
• Configuring Voice VLANS with respect to Cisco VOIP phones 7940, 7960.
• Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 36 0/3845/3600/2800 routers, Cisco ASA5510, Checkpoint Cisco Nexus 7K/5K, 2248/3560/5020/6509 , ASA, Checkpoint, LAN, OSPF, BGP, RIP, EIGRP

Confidential - Seattle WA

Sr. Network Engineer

Responsibilities:

• Planned and implemented Subnetting, VLSM to conserve IP addresses
• Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 4500 series Cisco Catalyst switches.
• Troubleshooting of Cisco 2800, 2900, 3900, 7200, 7600, ASR 9k, CRS and GSR 12k Series routers.
• Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX, Firewalls (SRX240, SRX550)
• Network Migration from RIP to OSPF and EIGRP.
• Configured STP for loop prevention and VTP for Inter-VLAN Routing.
• Redistribute routing protocols and Frame-Relay configuration.
• Configured Standard, Extended, and Named Access Lists to allow users all over the company to access different applications and blocking others.
• Troubleshoot and resolved dynamic routing, Ethernet switching and host connectivity issues in a window and network environment.
• Back up a Cisco IOS to a TFTP server and Upgraded and restored a Cisco IOS from TFTP server.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems
• Provided on-call support for installation and troubleshooting of the configuration issues.
• Network infrastructure support to routing and switching equipment.
• Provide Tier1 technical support; assist users facing network problems. Perform advanced troubleshooting, diagnostics and provide tier/level-1 solutions to network failures.
• Design the layout for cable installations
• Troubleshoot wiring problems and serial communication lines.
• Configure IT LAN/WAN elements and held responsibility of maintaining and monitoring performance of network.
• Develop, plan and maintain documentation necessary for operation in support of LAN to WAN connectivity.
• Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.
• Involved in design and deploying various network security & High availability products like Cisco ASA and other security products.
• Support customer with the configuration and maintenance of ASA firewall systems.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Black listing and White listing of web URL on Blue coat proxy servers and web security gateway.
• Worked on Blue coat proxySG to safeguard web applications in extremely untrusted environments such as guest Wi-Fi zones.
• Configure the Cisco IOS XR security features in both owner SDR and non-owner SDRs
• Basic and advance F5 load balancer configurations, including migrating configurations fromCiscoACEto F5 and general troubleshooting of the F5 load balancers.
• Configure wireless routers on enterprise network.
• Knowledge and experience of 802.11 a/b/g/n Ethernet standard for wireless Technology.
• Participated in quality system implementation project.
• Configured and installed VOIP devices and IP Phones such as 7841, 7942, 7960, 7961, 7971G-Ge, 7975G.
• Worked with other team members in testing of the network architecture.
• Maintain excellent communication with the IT Manager on all tasks and projects.

Environment: Cisco 2950/3500/5000/6500 switches, Cisco 7600/7200/3800 Routers, IP Phones 7841, 7942, 7960, 7961, 7971G-Ge, 7975G, ACL, LAN, WAN, RIP, OSPF, BGP, IPV4, Solar winds, Juniper SRX, RIP, OSPF, BGP, EIGRP, TFTP, F5 Load Balancer, Cisco ASA

Confidential

Network Support Engineer

Responsibilities:

• Worked on Cisco routers 7200, 3700 and Cisco switches 4900, 2900
• Configured Firewall logging, DMZs & related security policies & monitoring
• Configuring/Troubleshoot issues with the following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 series), to include: bridging, switching, routing, Ethernet, NAT, and DHCP, as well as assisting with customer LAN /MAN, router/firewalls.
• Configured BGP for CE to PE route advertisement inside the lab environment
• Creating Private VLANs & preventing VLAN hopping attacks & mitigating spoofing with snooping & IP source guard
• Key contributions include troubleshooting of complex LAN/WAN infrastructure.
• Enabled STP Enhancements to speed up the network convergence that include Port-fast, Uplink-fast.
• Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client
• Monitor, troubleshoot, test and resolve Frame Relay, ATM, MLPPP, PPP, and Dial-up.
• Used various scanning and sniffing tools like Wire-shark.
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems
• Used Infoblox to manage and optimize DNS, DHCP and other solutions
• Hands on Experience working with security issue like applying ACL’s, configuring NAT and VPN.
• Establishing VPN Tunnels using IPsec encryption standards and also configuring and implementing site-to-site VPN, Remote VPN.
• Responsible for Configuring SITE TO SITE VPN on Cisco Routers between Head Quarters and Branch locations.
• Documenting and Log analyzing the Cisco PIX series firewall
• Installed and configured Cisco PIX 535 series firewall and configured remote access IPSEC VPN on Cisco PIX Firewall.
• Installation & configuration of Cisco VPN concentrator 3060 for VPN tunnel with Cisco VPN hardware & software client and PIX firewall
• Configured network access servers and routers for AAA Security (RADIUS/ TACACS+)
• Implemented the security architecture for highly complex transport and application architectures addressing well known vulnerabilities and using access control lists that would serve as their primary security on their core & failover firewalls.
• Spearheaded meetings & discussions with team members regarding network optimization and regarding BGP issues.
• Other responsibilities included documentation and change control.

Confidential

Network Engineer

Responsibilities:

• Configuring OSPF, RIP, EIGRP protocols and IP sub-netting, Routers and Switches.
• Install and managing network devices including Hubs, Switches.
• Layer 2 switching technology architecture, implementation and operations including L2 and L3 switching and related functionality.
• This includes the use of VLANS, STP, VTP and their functions as they relate to networking infrastructure requirements including internal and external treatment, configuration and security.
• Maintained systems up to date with the latest OS patches.
• Supported and maintained networking devices, cabling and standalone systems as part of job duties.
• Installed and Configured Active Directory in Windows Server 2003 and helped System Admins to set up LAN network in the company.
• Installed different software on the systems.