SUMMARY:

• High performing and self - motivated, extensive professional experience in designing, implementing and managing a network, and also in providing network support.
• Strong expertise in the areas of Routing, Switching, security and troubleshooting.
• Experience of cisco routers including 1800, 2800, 3700, 7200 series and cisco catalyst switches including 2960, 3500, 3750, 6500 series.
• Data Center consisted of Cisco APIC, ASA/FMC, multiple VPNs & SilverPeak orchestrator.
• Configuring routing protocols and deployment of OSPF, EIGRP, BGP and performed traffic filtering by implementing policy based routing, standard and extended access lists, distribute lists and route manipulation using offset lists over Cisco routers.
• Hands-on experience with TCP/IP, LANs, WANs, and WLANs (Wi-Fi)
• Cisco VPN Concentrators, F5 Fire pass SSL VPN, 6509 Core Datacenter designs.
• Experience with layer 2 security and different kinds of attacks.
• Verify the layer 2 WAN PPP authentication using PAP-CHAP and PPPOE.
• Knowledge of configuring the WAN protocols including HDLC, PPP, Frame Relay.
• Good knowledge with Datacenter products such as vmware vSphere, vmware SRM, Cisco UCS Manager, Cisco Nexus, EMC VNX, Recoverpoint etc.
• Handling Switches, Routers and Firewalls over Management Plane, Control Plane and Data Plane.
• Configured/Designed MPLS ISP network consisting of Nokia and Calix equipment for 30k+ customers via vprn/vpls configuration.
• Experience in Cisco networks involving Cisco Unified Communication Portfolio, Cisco Unified Communications Manager (CUCM), Call Manager Express (CUCME), Cisco Unity Connection (CUC), Unified Contact Center Express (UCCX), IM and Presence, UCCE, Microsoft Lync.
• Performed VOIP issues on gateways, CUCM, Cisco Unity connection (CUC). Gathering and analyzing CUCM traces, ISDN debugs with Cisco routers and related VoIP protocols-SIP, H.323, MGCP
• Performed system upgrades, phone provisioning and patches based on request, schedule or events
• Experience on working with Silverpeak SD-WAN circuit
• Configured the advance Spanning-Tree concepts like uplink fast, RSTP, PVST, Port-Fast features for fasting convergence.
• Good knowledge in designing, engineering, configuring, and maintaining of large enterprise firewalls such as Fortinet UTMs
• Enable the First Hope Redundancy Protocol (FHRP) including HSRP, VRRP, and GLBP.
• Knowledge of VTP modes and VTP Pruning.
• Knowledge of the VPN technology and tunneling protocol including GRE, DMVPN, L2TP, MPLS, IPSec.
• Administration of IBM QRadar SIEM systems.
• Configuring ClusterXL on 23500 appliances.
• F5 Load balancing - GTM/LTM
• Knowledge of network security principles, cloud infrastructure and applications, TCP/IP, security protocols such at IPSec, SSH, and network services such as DNS, SMTP, HTTPS
• Exposure to wild fire feature of Palo Alto.
• Blacklisting and White listing of web URL on Blue coat proxy Servers.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.
• Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NATing, Subnetting, also including DNS, WINS, LDAP, DHCP, http, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, STP (Spanning tree Protocol), RTSP & Multicasting protocols.
• Configured traffic filtering using standard and extended Access-List, Prefix-list, Distribution-list, and Route-map Technique.
• Demonstrated abilities in working with team to deliver projects to clients within specified timeframe and as per specifications.
• Good knowledge in CISCO firewalls, CISCO PIX, ASA 5500 series and CISCO ASA as well as encryption techniques.
• Sound knowledge of virtual firewalls like checkpoint VSX, IDS, IPS as well as encryption techniques. Network Management Protocols including SNMP, SYSLOG. Sniffer tools like Wire Shark, Packet Capture.
• Experience working in Data Center environment by doing Physical Cabling, labeling, Patch Paneling, Mount & Rack the devices, assembling servers and maintain inventory as well
• Consulting on UTM aspects of network designs - Including working in Visio.
• Worked on Microsoft and Bluecat DHCP servers.
• Integrated web application delivery controller (ADC).
• Worked on Algosec for firewall rule analysis and firewall rules cleanup.
• Configure Syslog server in the network for capturing and log's from firewalls.
• Performed troubleshooting of Site to Site as well as Remote Access VPN on Checkpoint firewalls.
• Experience with Cisco Web Security Appliance (WSA) in an enterprise environment.

TECHNICAL SKILLS:

Routers & Switches: cisco routers 1800, 2800, 3600, 3700, 7200, 7600 series cisco catalyst switches 2960, 3500, 3750, 4500, 6500 series

Protocols: OSPF, RIP, EIGRP, VLAN, STP, WAN, LAN, BGP, TCP/IP, VPN, HSRP, VRRP, GLBP, RSTP, SPAN, Net Flow, SNMP, VTP

Network Devices: CISCO Routers 1700.1800, 2500, 2600, 2800, CISCO high End Router 3600, 3800, 7200, 12010. CISCO switches 1900, 2950, 2960, Campus Switches: 3550XL, 4984 Core Catalyst 4503,4507 RE, Catalyst 6500/6503/6507.

Security & VPN: Firewall, ASA 5505 Firewall, AIP SSM,CSC SSM, FWSM, Fortigate, CISCO CSM, ACL-SS Control List, IPS/IDS, NAT, PAT, CISCO ACS, Check Point (3200, 5800,15400 and 15600) sonicwall, RSAA SecureID, SRX, SSG, series firewalls, CISCO ISE.

Network Management Tools: Wire shark, Net Scout, Cisco Works, and Ethereal, TCPdump

Storage (SAN &NAS): EMC, HP, NetApp: VNX, VMAX, XTREMIO, 3Par and EVA.

Security Server Protocols: TACACS+, RADIUS

Operating Systems: Microsoft Windows, Linux, Unix, Junos

PROFESSIONAL EXPERIENCE:

Confidential, Waco, TX

Sr. Network Engineer

Responsibilities:

• Worked extensively with Nexus 7000, 5000, 2000, Cisco 6500 series multilayer switches, Cisco 2960s series switches and Cisco 3560/3750s switches and configured routing protocols like OSPF, EIGRP and BGP
• Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels and Spanning tree for creating Access/distribution and core layer switching architecture
• Performed a wide range of network administration duties including installations, debugging, maintenance, upgrades, and support for various network devices
• Responsible for configuring Virtual Servers and Configuring Load balancing methods in F5 LTM worked on creating iRules and iApps
• Support senior wireless network engineer in researching, planning and implementing wireless network security protocols and technologies.
• Deployed and managed MPLS Layer 3 VPN Tunnel over iBGP Backbone
• Working Knowledge of SD-WAN technologies Such as Meraki, OpenStack and Silverpeak.
• Involved in the Team of Data Center Operations to perform duties like administration and monitoring of Cisco Routers and Switches according to the organization requirements.
• Performed network administration tasks such as creation and management of VLANS, Port security, Trunking, STP, Inter-VLAN routing, and LAN security.
• Managed network routing protocol (BGP, OSPF, EIGRP, RIP) network control protocols (QOS, PoE, NTP, DHCP), network management protocols (CDP, FTP, TFTP, SNMP) and security protocols (SSH, HTTPS, AAA, IPSec)
• Configured and maintained F5 load balancing Big-IP devices for Local Traffic Management (LTM) and WAN Optimization (WOM)
• Configuring, Maintaining the Routers and Switches and Implementation of RIP, EIGRP, OSPF, BGP routing protocols and troubleshooting Remote infrastructure management of offices in different locations nationwide.
• Installed and configured Cisco switches to merge voice and Data network infrastructure
• Updated training SilverPeak SDWAN, SolarWinds, Splunk, Aruba wireless, F5 LTM/GTM & Cisco.
• Data Center consisted of Cisco APIC, ASA/FMC, multiple VPNs & SilverPeak orchestrator Resolved Avaya & Cisco CME IP Phone issues for over 60 branch offices. Mixture of SIP & PRI.
• Executed configurations for routers, switches, wireless AP's, and WLAN controllers using Cisco/HP hardware.
• Performed Migration of Cisco catalyst switches IOS configuration to Juniper MX routers JUNOS platform.
• Worked with F5 Load balancing, IDS/IPS, Bluecoat proxy servers and Administrating.
• Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing
• Responsible for Check Point, Cisco ASA and Palo-Alto firewalls configuration and administration across global networks.
• Deployed Zone Based Firewalling and Security Rules on the Palo Alto Firewall
• Created and configured management report and dashboards using splunk.
• Work with SD WAN solutions such as Cisco iWAN, Meraki, Cloudgenix and Silverpeak.
• Monitor IDS for active alerts and determine priority of response.
• Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
• Documented and maintained all the network changes, topology diagrams and implementations through MS VISIO tool
• Worked on Arista 70XX DC switches, configured VLAN, MLAG’s and Port channels for redundancy
• Carried out network performance monitoring and planning and troubleshooting and end-user support.
• Maintained 3PAR SAN environment, Performed zoning and LUN allocation for ESXI hosts
• Stood as primary support contact for all test teams regarding architecture, network topology and connectivity.
• Coordinated new site integration with customers and provided router configuration scripts as needed.
• Created and maintained network topology documentation as new sites were integrated.
• Create and maintain documentation and Visio diagrams as it relates to network configuration, network mapping, processes, and service records.

Confidential, San Fransisco, CA

Network Engineer

Responsibilities:

• Worked on the design and architecture team with creating network design, IP space allocation, procuring PO's for devices associated with the network infrastructure performed virtual lab based testing of network before deployment and implementation.
• Configure switch ports connecting to the WAN and LAN networks with separate subnets and VLAN's
• Configure network devices F5 load balancing for GTM/LTM traffic monitoring. Add/modify/delete VIPS/WIPS.
• Working technical knowledge of network control protocols (QOS, PfR, PoE, NTP, DHCP), network management protocols (CDP, FTP, TFTP, SNMP) and security protocols (SSH, HTTPS, AAA, IPSec, TustSec) Advanced knowledge of tunneling technologies such as L2 and L3 VPN's.
• Worked on the network team to re-route BGP routes during maintenance and FW upgrades.
• Troubleshooting with field technicians on access points, Small cell switches issues and backhaul connectivity issues with ISP.
• Configuring AAA for Cisco Routers and Switches using TACACS+.
• Used Network monitoring tools to ensure network connectivity and Protocol analysis tools to assess and pinpoint networking issues causing service disruption.
• Firewall policy clean up using Firemon.
• Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls.
• Deployed and managed MPLS Layer 3 VPN Tunnel over iBGP Backbone
• Configured packet capturing and SSL decryption on Palo Alto.
• Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.
• Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site to site VPN and remote VPN.
• Configured the routing network on the Silverpeak SD-WAN for the organization.
• Configured policy-based routing for specific traffic, route filtering with route maps and route redistribution.
• Experience with network management protocols/tools (TACACS, NTP, SNMP, SYSLOG, etc.)
• Configured and troubleshoot default route and implemented DNS, DHCP, SNMP and FTP.
• Responsible for service request tickets generated by the helpdesk in all phase such as troubleshooting, maintenance, upgrades, patches, fixes.
• Planning & Implementation of different Network activity for streamline the Network Services With proper approval from Change Management.
• Designed configuration and layout of WAN to include IPT, Internet facing VPNs and wireless subnet.
• Responsible for researching new technology directions and making recommendations for improving the reliability & functionality of LAN & WAN.
• Prepare Design documents Visio diagrams & Implementation plan for all projects on network environment.

Confidential

Network Engineer

Responsibilities:

• Configured basic protocol on devices like Static Routing, RIP, EIGRP, OSPF, and BGP.
• Racking, stacking, and cabling network-based, IT systems.
• Configuring and deployment of Juniper ERX310 router.
• Configuring of IP Allocation and sub netting for all applications and servers and other needs throughout company using FLSM, VLSM addressing.
• Maintained redundancy on Cisco 2600, 2800 and 3600 routers with HSRP.
• Hands on experience in Cisco Routers and Switches.
• Configuration of Cisco firewalls, VPN Configuration and support.
• Design and create dedicated VLANs for Voice and Data with QOS for prioritizing VOICE over the DATA on Catalyst switches and basic VOIP configurations.
• Managed control protocols for LAN / WAN infrastructure.
• Configuration of Voice Interfaces like FXS, FXO, ISDN T1/E1 PRI, T1/E1 CAS
• Configuration of Call Manager Express (CME) on 2800 and 3800 series Routers Troubleshooting site issues.
• Deployed and administered Blue Coat proxy and Silverpeak WAN optimizers for local and remote sites
• Supporting CUCM. CUC and UCCX of Call center.
• Move add changes on CUCM, CUC and UCCX.
• Desktop responsibilities included software & hardware installation & configuration.
• Creating & administering user accounts & their permissions.
• Utilized Cisco ICM Bulk load, Cisco ICM Script Editor export and import tools to migrate ICM data and SQL custom queries to move scripting and ICM data objects to Cisco ICM 7.5.(10) PG on transition instance without the benefit of documentation of production scripting and configuration.
• Assisted in implementation of SilverPeak and Riverbed WAN Optimization appliances.
• Troubleshoot the issues related to routing protocols.
• Perform routine network maintenance checks as well as configure and manage printers, copiers, and another miscellaneous network equipment.
• Performed the planning and hands on configuration of a 9-site enterprise MSP migration which included migrating Juniper SRX firewalls and Juniper switches to FortiGate firewalls and Aruba switches with PoE/VoIP configuration. The Aruba APs and AP controllers at each site were replaced with Meraki MR53s and cloud management. The Juniper fiber switches at the data center were replaced with Cisco Nexus 9K fiber switches.
• Implemented Solarwinds NCM for automatic backup of switch configurations
• Monitoring the traffic through Solarwinds and take the switch backup with the Solarwinds NCM.
• Implement monitoring alerts of production servers with Nagios and Solarwinds.
• Built IPSec based Site-to-Site (B2B) VPN tunnels between various client locations using cisco ASA firewall.
• Implementing the service based on assign user role and grants authenticated users with access to specific segments of Network using Cisco ISE.
• Installing operating systems, software and hardware on computers.
• Responsible for Data Backup, System Update, Recovery and Restore, and Spyware removal.
• Assisting Junior and Senior Engineers, on-site management of cable-wiring technicians.
• Troubleshoot problems on a day to day basis and documented every issue to share it with design teams.

Confidential

Jr. Network Engineer

Responsibilities:

• Providing technical assistance and support to Cisco customers on 3925, 3800 routers.
• Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 4500 series Cisco Catalyst switches.
• Monitor the ticket queue for incoming tickets, update tickets in accordance to Service Level Agreement (SLAs) requirements and, escalate based on severity levels using Axios Assyst.
• Worked on Cisco Layer 2 switches (spanning tree, GRE Tunnel, VLAN).
• Tested authentication in RIPv2, OSPF and BGP.
• Install, maintain and network copy machines and printers
• Tested BGP features such as EBGP load balancing.
• Perform Active Directory administration including group policy and (moves/adds/changes) of user accounts, security groups, and distribution lists.
• Responsible for the deployment of the Operating System and core (“base setup”) files as instructed in the Setup Guide.
• Configured and troubleshoot RIPv2, OSPF, BGP and EIGRP.
• Configured and supported Multicast customers.
• Planning and configuring the entire IP addressing plan for the client's network.
• Configured redundant interfaces, DHCP server, DHCP relay, ntp settings, and sub interfaces on firewalls.
• Assist the certification team and perform configuration of LAN\WAN technologies such as Ethernet, Fast Ethernet and Gigabit Ethernet.
• Used DHCP to automatically assign reusable IP addresses to DHCP clients.