SR Network Engineer

Qualification Summary:

• 8 Years of experience in Design and Deployment of including hands-on experience in providing network support, installation and analysis for a broad range of LAN / WAN/MAN communication systems.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning configuring VLANs/routing/NATing with the firewalls as per the design.
• Worked on Extensively on Cisco Firewalls, Cisco PIX 506E/515E/525/ ASA 5500 5510/5540 Series
• Responsible for Check Point and Cisco ASA firewall administration across global networks.
• Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.
• Proficient in Cisco IOS for configuration troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS.
• Excellent customer management/resolution, problem solving, debugging skills and capable of quickly learning, effectively analyzes results and implement and delivering solutions as an individual and as part of a team.
• Strong knowledge of TACACS , RADIUS implementation in Access Control Network.
• Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy.
• Experience in testing cisco routers and switches in laboratory and deploy them on site production.
• In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.
• Adept in preparing Technical Documentation and presentations using Microsoft VISIO/Office
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.

Technical skills:

• Network Configuration: Advanced switch/router configuration Cisco IOS access list, Route redistribution/propagation .
• Cisco Routers: Cisco GSR 12416, 12418, Cisco 7200vxr, Cisco 3640, Cisco 3600
• Redundancy and management: HSRP, RPR, NSF/NSR
• Physical interfaces: Fast Ethernet, Gigabit Ethernet, Serial, HSSI, Sonet POS
• Layer 2 technology: VLAN, VTP, VMPS, ISL, dot1q, DTP, Spanning-tree, PVST
• Layer 3 Switching: CEF, MPLS, Ether Channel
• QOS: CBWFQ, LLQ, WRED, Policing/Shaping.
• Switches: Catalyst 6500, MSFC, MSFC2, 7600, 3700, 3500
• Routing Protocols: IGRP, EIGRP, OSPF, BGPv4, MP-BGP
• WAN Protocols: HDLC, PPP, MLPPP
• Circuit switched WAN: T1/E1 T3/E3/OCX Channelized, Fractional full .
• Packet Switched WAN: ATM, FRAME RELAY, MPLS VPNs
• Security Technologies: Cisco FWSM/PIX/ASDM, Nokia Checkpoint NG, Juniper SRX
• Operating Systems: Microsoft XP/Vista/7, UNIX, Linux Redhat, OpenSuse, Fedora
• Windows Servers 2003/2008, Windows MS-Office.

Professional Experience:

Confidential

Key Responsibilities:

• Configured CIDR IP RIP, PPP, BGP, MPLS and OSPF routing.
• Involved in the configuration troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning configuring VLANs/routing/NATing with the firewalls as per the design.
• Experience in configuring vdc, fex pinning, fex port-channel, port-channel, peer keep alive, peer link on nexus 7000 seties switches.
• Experience in working and designing configurations for vPC, vPC domain, vpc peer-gateway, vPC peer-switch, auto-discovery and vPC single sided, vPC double sided, NX-OS, VFR, Otv, fabric path.
• Deploying and decommissioning the TOR switches and their respective software upgrades.
• Performing the ACL requests changes for various clients by collecting source and destination information from them.
• Configure Corporate , Wireless and Lab Devices which includes Bandwidth Upgrade, Adding New Devices, Decom the Devices, Testing Pilot .
• Experience with converting Cisco ACE load balancer to F5 LTM load Balancer in data center environment
• Primary responsibility is to design and deploy various network security High Availability products
• Experience with upgrading SUP1 to SUP2 on cisco Nexus 7000 Series Experience working with Nexus 7010, 5020, 2148, 2248 devices
• Design, implementation and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Created Visio Documentation to give complete picture of network design for each location.
• Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.
• Involved in the modification and removal wherever necessary of BGP from the MPLS routers.
• Deploying and decommissioning the VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices.
• Configuring IPSEC VPN Site-Site to Remote Access on SRX series firewalls.
• Working with Network Design and implementation projects Across North America.
• Experience in working with Nexus 7010, 5548, 5020, 2148, 2248 devices.
• Implemented DHCP, DNS, IPAM configuration on the servers to allocate, resolute the ip addresses from Subnet.
• Worked on Load Balancer F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Troubleshoot the Network Issues onsite and remotely depending on the severity of the issues.
• Familiar with various MSIT Tools to check Networking Connectivity, Testing, Configuration and Adding or Removal of IP address blocks, DE coming or Adding the Devices.
• Experience with migrating from IOS to IOS-XR on ASR 9K
• Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
• Designed and configured the commands for QoS and Access Lists for Nexus 7K and 5K.
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Performing troubleshooting on slow network connectivity issues, routing issues involves OSPF, BGP and identifying the root cause of the issues.
• Performed Break Fix support through driving to different buildings, identifying the root cause of the hardware issues with switches, routers.

Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/2960 6500 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers , Cisco Nexus 7K/5K, Cisco ASA5510, Checkpoint, Aruba Controllers 6000, 3600, 3400,650: windows server 2003/2008: F5 BIGIP LTM.

Confidential

Sr. Network Engineer

Key Responsibilities

• Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.
• Involved in data center migration in Access, Distribution and Core layers.
• Configuring Vlan's, VTP's, enabling trunks between switches.
• Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.
• Plan Design and assist in deploying enterprise wide Network Security and High Availability Solutions for ASA.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning configuring VLANs/routing/NATing with the firewalls as per the design.
• Strong Knowledge in working with F5 Load Balancers and their Implementation in various Networks.
• Configuring various advanced features Profiles, monitors, I Rules, Redundancy, SSL Termination, Persistence, SNATs, HA on F5 BIGIP appliances SSL termination and initiation, Persistence, Digital Certificates, Executed various migration/upgrade projects across F5 and hands on with F5 BIGIP LTMs/EM.
• Configured various Router interfaces like ATM interface, T3 Channelized T1 interfaces
• Configuring and troubleshooting CISCO catalyst 6509, 7609, 7613 with Supervisor cards, Cisco 3640, Cisco GSR 12416, 21418 with PRP and RPR processors .
• Experience working in Juniper T-Series, M-Series, MX-Series, J-Series Routers.
• Implemented WLAN CIsco Wireless Access Points 3500 and its Cisco Controllers 5500 at various corporate sites fort 11n Infrastructure and its legacy technologies.
• Experience in working with cisco Nexus 5000 series switches for data center.
• Configured various BGP attributes such as Local Preference, MED, Extended Communities, Route-Reflector clusters, Route-maps and route policy implementation.
• Configuring routing protocols OSPF, EIGRP, RIP, MPBGP, LDP and BGPV4.
• Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalyst
• Worked on Extensively on Cisco Firewalls, Cisco PIX 506E/515E/525/ ASA 5500 5510/5540 Series.
• Worked On UNIX, Linux and Windows Platforms and also involved in capacity planning of Network Maintenance.
• Experience with design and implementation of Data center migration at Yellow Pages.
• Created MOPS and get approval from peers to perform configuration add/ remove changes.
• Performed Configuration on ASR 9K Pairs includes HSRP, Bundle Ethernet Config, Assigning dhcp profiles.
• Wrote IOS and CAT OS upgrade procedures and Pre/Post checks for customer production upgrades.
• Excellent Troubleshooting Skills and Customer Centric approach.

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers ,Cisco Nexus 7K/5K, 2248/3560/5020/6509, CiscoASA5510, Checkpoint, Aruba Controllers 6000, 3600, 3400,650.

Confidential

Network Engineer

Key Responsibilities

• Experience with Firewall Administration, Rule Analysis, Rule Modification.
• Installed different software on the systems. Install and managing network devices including Hubs, Switches.
• Deployed 7613 as PE and CE router and Configured and troubleshoot the Edge Routers.
• Excellent troubleshooting knowledge on T1, T3, OC-3 and OC-12.
• Configured egress and ingress queues for ISP facing routers using CBWFQ.
• Generating RCA Root Cause Analysis for critical issues of layer1/layer2/layer3 problems.
• Ability to analyze, configure and troubleshoot networks
• Design, implementation and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Estimated Project costs and created documentation for project funding approvals.
• Planned resources and presented project status to higher management.
• Configured CIDR IP RIP, PPP, BGP and OSPF routing.
• Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
• Experience with implementing and maintaining network monitoring systems Cisco works and HP Open view and experience with developing complex network design documentation and presentations using VISIO
• Worked with telecom vendors in regards to network fault isolation.
• Hands-on experience with WAN ATM/Frame Relay , Routers, Switches, TCP/IP, Routing Protocols BGP/OSPF , and IP addressing.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost effective network solutions to accommodate customer requirements and project scope
• Identify, design and implement flexible, responsive, and secure technology services
• Involved in the configuration troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
• Layer 2 switching technology architecture, implementation and operations including L2 and L3 switching and related functionality. This includes the use of VLANS, STP, VTP and their functions as they relate to networking infrastructure requirements including internal and external treatment, configuration and security.
• Troubleshoot traffic passing managed firewalls via logs and packet captures
• Configured and resolved various OSPF issues in an OSPF multi area environment.
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.

Environment: Cisco 6509/ 3750/3550/3500/2950 switches, Cisco 7200/3845/3600/2800 routers, Checkpoint firewalls SPLAT , Net Flow,TACACS,EIGRP,RIP,OSPF,BGP,VPN,MPLS,CSM,SUP720, Ether Channels, Fluke and Sniffer.

UAE Exchange Financial Services, Jersey City, NJ November 2007 December 2010

Network Engineer

Project Description: Maintain Implement network architecture connecting company's corporate office to the branch offices of around 500 users multiple servers. Establish network within and between the offices, taking care of the connectivity, data and voice and security. Troubleshoot the connectivity problems and track the network activities.

Key Responsibilities:

• Designed perimeter security policy Implemented Firewall ACL's Allowed access to specified services Enabled IDS/IPS signatures in Firewall fine-tuned TCP UDP.
• Involved in Installing and Configuring a Cisco/Microsoft secure ACS server for AAA authentication RADIUS/TACACS .
• Used load balancers ACE and load balancing technique with multiple components for efficient performance and to increase reliability through redundancy.
• Involved in migration from Frame-Relay/ATM network to MPLS-based VPN for customer's WAN infrastructure.
• Configured Cisco 7204 routers which were also connected to Cisco ASA Firewall 5505 security appliances providing perimeter based firewall security.
• Configured Client VPN technologies including Cisco's VPN client via IPSEC.
• Was responsible for designing and implementation of customer's network infrastructure.
• Supported the telephony specialist in the phased migration from PBX based systems to VOIP. Configured separate VLAN for VOIP to implement QoS and security for VOIP.
• Handled switching related tasks included implementing VLANS, VTP and configuring Fast-Ethernet channel between switches.
• Achieved proficient in Adaptive Security Device Manager ASDM and used it while performing security audit on routers.
• Created effective network security by migrating from Check Point FW-1 NG to ASA 5510 Firewalls.
• Experience with Checkpoint Firewall policy provisioning.
• Configured and Maintained the Local Network using 2900, 6500 series Switches and 2800 series Routers. Configured and installed the 3600 series Router.
• Implemented Site-to-Site VPNs over the Internet utilizing 3DES, AES/AES-256 with ASA Firewall 5505.
• Configured Protocol Handling, Object Grouping and NAT on ASA Firewalls 5505 .
• Configured Firewall logging, DMZs and related security policies and monitoring.
• Designed, Implemented and configured HSRP on different location of office on the switched Network and Managed the Entire multilayer switched network.
• Implemented and Maintained Routing Protocols EIGRP and OSPF in the Network.
• Spearheaded meetings discussions with team members regarding network optimization and regarding BGP issues.
• Troubleshoot latency and throughput issues on MPLS and Dedicated Internet Access circuits.