SUMMARY

• IT professional with over 10 years of experience in Network administration, on - site support, escalation support, configuration and troubleshooting for various technologies for enterprise environments which include R/S, Firewall security, Design and Wireless.
• Emphasis on campus Switching & Routing, ISP edge network implementation with DR strategy, and Datacenter operations.

TECHNICAL SKILLS

• WAN Acceleration Wireless Technologies/VolP: Monitoring Tools/Protocols: Server Technologies: Languages/Software Tools: isco ISR G1/G2 Routers - 1800/2800/3800/1900/2900/3900 , ISR 4000 Routers - 4331/4351/4431 , ASR 1001 / 1001-X/ 1002-X, Catalyst (6500, 5500, 4500, 3850, 3750, 3560, 2960), Nexus N7K, N5K,
• N9K (1010/1010x, 2000 FEX, 5020, 5548P, 7009, 7010, 9300-EX/FX, 9500 r), CSR1000v over Azure Ethernet, TCP/IP, CDP, Frame-relay, PPP, ACL, NAT, PAT, RIPng, RIP, OSPF, EIGRP, BGP, MPLS, VTP, SNMPv3, SMTP, ARP, TCP, UDP, Static Routing, Stub Routing, VLAN, HSRP, STP, SVI, SPAN, CEF, Etherchannel, BPDU, GLBP, VRRP, IP Multicasting - PIM DM/SM, DVMRP, MBGP VXLAN, ACI/APIC, LISP, NX-OS, Generic Expansion Module, Sup Module 1 & 2, Line Cards — M/F, Fabric Modules, SFP, VDC, VRF, Virtual PortChannel, Module Licensing
• Cisco ASA 5505/5520/5540 , 5515-X/5525-X/5545-X/5585-X, Cisco ACS-1121, AAA, TACACS+, RADIUS, RSA Token Server (2FA), IPS/IDS, VPN, IPSec, Remote VPN, AnyConnect 3.1/4.3, Port Security, Data Management Zone, PGP, Public Key Infrastructure (PKI), MAC Filtering, NPS, Metasploit, Nmap, Cain Abel, Snort, Burp Suite, ZAP Proxy, Nessus, TCP Dump, Nikto, Immunity Debugger, BackTrack 5/Kali Linux
• SteelHead CX5055H/1555H/770M/570H/3070H - code 8.6.x/9.2, SteelCentral Controller (CMC), Multi in-path, QoS, Path Selection, Policy Push, Secure Transport, Secure Peering (SSL),
• WLC5508 & 2504, CAP3702i/3802i, LAP1252/1142, OEAP 602I/1810, 802.11 a/g/n/ac, WLAN, WAP, LWAPP, CSMA/CA, VoIP, IP Phone, CUCM, QoS, PoE, CME, CUE, Port Security, MAC Filtering, SIP, MGCP, RTP, SCCP, SRTP, UCCM, UCCX
• Solarwinds, Plixer Scrutinizer, Niksun NetVCR, PRTG, WhatsUpGold, Cisco Security Manager Suite,
• RSA Envision Syslog, Iperf, Cisco Prime Infra 2.2, CACTI, Nagios XI, Wireshark, SpiceWorks, Remedy,
• HP Openview, Netflow v5/v9, Cisco AVC, Cisco Flex-Netflow, SNMP v1/v2c, NBAR2
• Linux - CentOS 6.x, Ubuntu Server, Blade Servers, HyperConverged - Nutanix NX-3460/3260 G5,
• VMWare vSphere ESX/ESXi, F5 LTM 4200/2000/I2800/3600, F5 GTM 2000S
• Python, Java, C++, MySQL, Oracle 10/11g, PHP, Bash/KSH, Vi editor, Emacs, Eclipse/NetBeans

PROFESSIONAL EXPERIENCE

Confidential

Sr. Lead Network Engineer

Responsibilities:

• Senior member to networking team responsible for the design/architect, administration, installation, analysis, escalation support and t-shoot various mission-critical Enterprise technologies across global MPLS networks across 50+ regional offices around the world.
• Technical responsibilities include, but are not limited to, installation, implementation, platform/code upgrade, cross product analysis, and configuration of various LAN/WAN + Firewall/VPN technologies, enterprise application and server technologies for multiple hosted/cloud services for customers worldwide across NOAM, EMEA, APAC data centers.
• Tier3 responsibility for approval and review of the change control submitted by tier1 & tier2 members, and providing guidance toward the problems resolution, QC, and mentoring other team members.
• Professional responsibilities include, but are not limited to, documentation, change control management, multiple vendor relations, following company policies, extensive participation over multiple projects for Corporate and Multiple BU sectors - hosted services.
• Projects involved - Global DataCenter migration & consolidation, Skype for Business Network Design/Implementation, Global QoS implementation for Skype, HyperConverged Nutanix Network Design/Deploy, DR Design between CA and TX, Azure DRaaS, WAN Redundancy with SD-WAN, Technology Standard for Corporate IT, Multi-Tenant Hosted Firewall Upgrade/Replacement, Global Remote VPN Gateway Deployment & Load Balancing, PCI DSS Network Segmentation, Global MPLS Upgrade & QoS (CoS Profile) update, Cisco AVC & NBAR implementation over WAN Edge for UC, Global Network Inventory - Cisco SNTC & Collector, Branch Office Setup, Sub-Company Divestiture, Multi-Homing & BGP path control in major Colo, Core Switch Upgrade for Branch Office & Main Data Center, SteelHead Global Code Upgrade, WLC Code Upgrade for Global Wireless Infra
• Core technologies handled includes: Cisco Routers - ISR G1/G2, ASR1001, and Switches - Catalyst 2960, 3750, 3850, 4506E, 6509 Nexus 2K FEX, 5K, 7K, 9K | Firewall ASA - 5510, 5520, 5540, 5525-X, 5545-X, VPN Tunnels of different kinds (Remote VPN - AnyConnect, Site to Site,), VPN migrations across multiple data center (CyrusOne, Latisys, Ascend, Navisite, WestIn, Telstra etc.), F5 LTM Load Balancer, Riverbed Steel Head (CX 5055/770/570/3070/1555 ) for global WAN optimization end to end.

Confidential

Sr. Network Engineer

Responsibilities:

• Senior member to engineering team while providing in-depth technical resources and consultations for the business critical decisions/ directions based on escalated analysis - Networking design/protocols/performance, Server/Application specific issues, t-shoot.
• Technical responsibilities include, but are not limited to, datacenter administration, analysis, trouble shooting, configuration of various enterprise application and network/server technologies and devices. Extensive vendor contact on application infrastructure support (Vertafore - ImageRight), ISP (AT&T/XO/Charter/Verizon) - circuit build, test/turn up, cable extension, QoS, IOS SLAs, DNS provisioning, Cisco SmartNET - end contact for various t-shoot activities, ticket resolution etc.
• Professional responsibilities include, but are not limited to, technical documentations, network diagram/blueprint, designing steps and planning, purchasing advice, partner relationship matter with multiple vendors: Cisco/Dell/HP - account or membership matter.
• Core equipments handled includes: Cisco Routers (2800, 2900, 7200, 3900 Series), Cisco Switches (Catalyst 2960, 3560, 3750, 6500 | Nexus 1010/1010x, 2000, 5548P), ASA (5520, 5510, 5505), Aironet (1131AG, 1602i, 2702i). Barracuda LB (340, 540), WatchGuard (M400, M500), Lenovo EMC NAS px12-400r, Toshiba Strada CIX (PBX), Various Dell/HP (Blade) Servers, Dell PowerVault Tape Library, Fortinet VoIP IP-PBX etc. Additional technologies handled includes: EIGRP, HSRP, BGP, IPSec L2L VPN, SSL Remote VPN, SNMP, VTP, STP, SVI, Etherchannel, & VoIP Infra DID Administration, PRI, QSig over SIP, Netflow, SPAN monitoring, Wireshark, Syslog setup, Cacti, WhatsUp Gold, PRTG

Confidential

Tester

Responsibilities:

• Member to an engineering team of professionals responsible for the administration, installation, analysis and troubleshoot various mission-critical Enterprise technologies located within a local area network (LAN), and WAN/MPLS and ISP edge networks.
• Technical responsibilities include, but are not limited to, installation, implementation, administration, analysis, and configuration of various LAN/WAN technologies, enterprise application and server technologies. Quality testing of various Enterprise equipment.
• Professional responsibilities include, but are not limited to, documentation for technical resources, categorize and analyze vendor specific parts and systems, inventory controls, change management, vendor/client relations, following company policies and procedures, and schedule as needed reports to management.
• Core technologies handled includes: Cisco Routers (2600, 2800, 3800 Series) and Switches (Catalyst 2900,2950, 3560, 3750, 4500, 6500 | Nexus 5K, 7K), ASA 5500 series, PIX Firewall, HP 3500/3800 Switch Series, 3Com switches, Juniper Firewalls and Switches.
• Additional technologies handled includes: Solaris 9/10/11, Sun Storage CAM 6.7, Sun Consoles - ALOM/iLOM, Sun Products: Sun Fire/Netra/SPARC/x86 servers, Sun Blade System, Workstation - Sun SPARC II: Ultra 5/10/30/60, Sun SPARC III: Ultra 25/45, Sun Blade 1500/2500, StorageTek - 6180,6580,6780 Array, HP ProLiant Servers - G5/G6/G7 types, Dell PowerEdge Server series, DEC AlphaServer, DEC (2000, 3000, 4000 models), VAX (6000, 7000 models), IBM Power 520 etc.

Confidential

System Administrator

Responsibilities:

• Manager to a group of professionals responsible for the day-to-day overall support of mission-critical LAN/WAN technologies located within a local area network (LAN) - AAA, IPSec Site to Site VPN, VTP, STP, SVI, EIGRP, NAT/PAT etc.
• Built new Disaster Recovery network from the ground up with Internet and MPLS WAN connectivity and tested them.
• General technical responsibilities included the installation, implementation, administration, support, and troubleshooting of various mission-critical technologies, hardware break fixes, software resolutions, technical training of end-users as required, as well as add moves/changes. Salesforce.com CRM package implementation project working with vendor.
• Professional responsibilities included interdepartmental communications and coordination, timely reporting to appropriated groups, documentation, administration, following company policies and procedures, and project management.

Confidential

Jr. System Administrator

Responsibilities:

• Responsible for handling the implementation, troubleshooting and administration of various enterprise technologies located within a complex LAN /WAN infrastructure on multiple sites.
• Technical responsibilities included, but are not limited to the installation, configuration, implementation, analysis, upgrade and troubleshooting for various mission-critical network, server, VoIP and security technologies such as: routers and switches, AltiGen VoIP System (IP710 Telephone), SonicWall firewall and WIN 2003/2008 Servers - ADDS, GPO, DNS, Printer Server etc.
• Professional responsibilities included project management, escalation support, following corporate policies and procedures, documentation and scheduling as needed reports to management.
• Additional responsibilities and activities included but not limited to 2nd level support for general systems administration, as needed technical support/training of new technical professionals, 2nd/3rd level support of various LAN/WAN issues.