SUMMARY

• CCNP certified Network Engineer wif 8+ years of expertise in Designing, Implementing and troubleshooting various Network Technologies.
• Experience in installation, configuration, administration and troubleshooting of LAN/WAN infrastructure and security using Alcatel routers, Cisco routers/Switches, Cisco ASA devices, Fortinet firewalls and layer 2 service delivery equipment such as ADVA and Overture.
• Strong hands on experience in layer - 3 Routing and layer-2 Switching. Dealt wif Cisco router models like 7200, 4300, 3900, 3600, 2800, 2600, 2500, 1900 series, Cisco catalyst 6500, 4500, 3750, 3650 3500, 2900 series switches, Juniper routers E, J, M & T-Series and Juniper EX switches EX8200, EX4500, EX4200, EX3200, EX2500, EX2200 Series
• Experience in installing, configuring and troubleshooting of Checkpoint Firewall and Juniper SSG series.
• Expertise in installing, configuring, and maintaining Cisco Switches (2900, 3500, 3700 series, 6500 series).
• Expertise in installing, configuring, and troubleshooting of Cisco Routers (7200, 3900, 3600, 2900, 2600, 1800, 1700, 800).
• Expertise in installing, configuring and troubleshooting Juniper EX Switches (EX2200, EX2500, EX3200, EX4200, EX4500, EX8200 series).
• Expertise in installing, configuring and troubleshooting Juniper Routers (E, J, M and T-series).
• Strong experience in configuring RIP, OSPF, EIGRP, BGP, MPLS, QOS, ATM and Frame Relay.
• Extensive experience in LAN, WAN, Routing and Switching, Software defined solutions, Plant testing (T1, T3, Ethernet (Dot1Q, QinQ circuits), Broadband Circuits), Site-Verification procedures, Network Configuration, IPSEC tunnels(NAAS), MPLS, VPLS, VPRN, SDWAN, administration, monitoring, troubleshooting, cluster building, back-up and restore planning, operation and maintenance and project management.
• Strong technical knowledge in Cisco IWAN features
• Strong experience in implementing, configuring and troubleshooting various Routing Protocols (OSPF, EIGRP, RIP, BGP etc.) and switching technologies such as VLANs, Trunking, VTP, STP, PVST, RSTP, HSRP, VRRP, and Port Security.
• Configured different switches using various techniques like VLANs, VTP, STP, RSTP and redundancy protocols like HSRP, VRRP and GLBP.
• Experience in maintaining stable STP topology using protocols such as Port fast, BPDU guard, root guard and UDLD
• Worked on autantication protocols PAP, CHAP, 802.1x and Port Security.
• Experience on Check Point Firewalls NG, NGX, NG R55, NGX 60, NGX R65, R70, R75, UTM
• Configured Check Point clusters wif Nokia box and crossbeam.
• Experience in deploying and maintain Cisco PIX and ASA firewalls
• Designed and implemented various project wif Cisco PIX firewall. Worked on Cisco PIX 506/515E and 525
• Migrated and implemented new solutions wif Cisco ASA Firewall series 5505, 5510, 5512-X
• Worked on Juniper Net screen Firewalls like, NS50, SSG 550M, SSG520M, ISG 1000, ISG 200
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX
• Involved in troubleshooting network traffic and its diagnosis using tools like ping, traceroute, Wireshark, TCP dump and Linux operating system servers.
• Proficient using the F5 based profiles, monitors, VIP’s, pools, pool members, iRules for virtual IP’s
• Implementation and configuring F5 Load balancing, proxy servers and Authorization, Autantication & Accounting (Radius, TACACS+)
• Expertise in Design, Configuration, Troubleshooting and Support of Security environment wif VPN, Firewalls, NAT, Proxy, IPsec, DMZ Solution, IPSEC, Public Key Interchange (PKI) & SSL.
• Working knowledge of CISCO NEXUS data center infrastructure wif 5000, 7000 and 9000 series switches includes (5548, 7010, 9000) including CISCO NEXUS Fabric Extender.
• Upgradation of VOIP Call Manager and by implementing Cisco WAAS.
• Experience wif Cisco and Aruba ISE/NAC environments, as well as Cisco collaboration environment
• Strong understanding of Motorola, Meraki and Aruba Wireless Environment.
• Involved in troubleshooting network traffic and its diagnosis using tools like ping, traceroute, Wireshark, TCP dump, and Linux operating system servers.
• Advanced knowledge in Linux and Unix Operating Systems, web security devices or proxy - Cisco WSA/CWS and Bluecoat, understanding of global security policies
• Good knowledge in network management using cisco works and HP open view.
• Handled building Network topologies using MS-VISIO.
• Strong understanding of DNS/DHCP/Proxy servers, and SMTP, FTP, TCP/IP Protocols.

TECHNICAL SKILLS

Routers: Cisco ISR 7200, 4300/4400 series, 2900, 2800, 2600 series routers, Cisco ASR 1001 series router, Alcatel SR 7750, Juniper Routers (E, J, M & T-Series)

Switches: Cisco Catalyst switches 2900/ 3550/ 3750/ 4500 , 4900, 6500 series, Cisco Nexus 2k, 5k, 7k Series switches, Juniper EX Switches (EX8200, EX4500, EX4200, EX2500, EX2200 Series), Layer 2 Bridges for Ethernet circuits (Adva 825,114,206) and for DS1 circuits (Overture 140/180).

Firewalls: Cisco ASA devices 5505, 5510, 5520, 5512-X, 5515-X, Fortinet

WAN technologies: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONET

SD-WAN: Fortinet 100 and 200D, Silver Peak EC-XS-SP.

Routing Protocols: EIGRP, OSPF, BGP, IP ROUTING, HDLC, PPP, RIP, NAT, HSRP, VRRP

Load Balancers: F5 load balancer, HSRP, GLBP, VRRP

Switching Protocols: VLAN, STP, RSTP, VTP, ETHERCHANNEL, VLANsAAA Protocols RADIUS, TACACS+

Troubleshooting: CDP, TELNET, SSH, ICMP, PING and TRACEROUTE, SNMP and SYSLOG

Network Management Tools: Solarwinds, Cisco works, Wireshark and Packet Sniffer

Virtualization: VMware

Software’s and Languages: Mat-lab, Java, LINUX, SQL (Database MySQL, SQL server, MS Access, IBM DB2), REMEDY, JIRA, WARP9, NEMS, LANDSCAPE, BOSS, SALES 360, SECURE CRT, PUTTY, MS Excel.

PROFESSIONAL EXPERIENCE

Confidential, Dallas TX

Sr. Network Engineer

Environment: Cisco Routers, Cisco Nexus, Cisco Catalyst Switches, F5 Load-balancer, Fortinet firewalls, Juniper Switches, Palo Alto Firewalls, Alcatel and Juniper Routers.

Responsibilities:

• Configure Routing protocols such as BGP, OSPF, EIGRP, Static Routing and policy-based routing.
• Design and implementation of Data center migration.
• Involved in configuring and implementing of composite Network models consisting of Cisco 7600, 7200, 3800 series routers and Cisco 2950, 3500, 5000, 6500 Series switches
• Participate in the installation, configuration, and post installation operational tasks such as management of the Cisco Nexus equipment
• Design different network architectures using Cisco Nexus 7000 and 9000 series switches, and Cisco 3800 series routers.
• Deployed over 120 ViptelaSDN solutions to medical facilities nationwide.
• Strong SD-WAN experience in Silver peak, Riverbed etc
• Create Virtual IP addresses, Pools and Persistence profiles on F5 LTM
• Creating Wide IPs wif various load balancing methods like, Global Availability, Topology and Round Robin
• Integrating Configuring RSA SecurID wif ISE for Token based autantications using RSA Native method RSA RADIUS method for user's remote VPN users. Integrating ISE wif external identity stores such as Windows AD, Cisco ACS LDAP.
• Managed, installed and configured different type of equipment such as Alcatel Service routers 7750, layer 2 bridges such as ADVA and Overture, Silver Peak SD-WAN and Fortinet Firewalls.
• Performed version upgradation of different equipment such as layer 2 bridges, Cisco ASR & ISR Routers, Fortinet Firewalls, Checkpoint and Silver Peak SD-WAN Devices.
• Strong work experience on MPLS & NAAS circuits along wif VPLS, IES and VPRN based clouds.
• Strong understanding of BGP and OSPF configurations on Cisco, Alcatel, Juniper and Fortinet equipment.
• Troubleshooting the Network Routing protocols (BGP, EIGRP and OSPF) during the Migrations and new client connections.
• Highly experienced inAWSCloud platform and its features which includes AmazonAWSCloud Administration which includes services like: EC2, S3, EBS, VPC, ELB, AMI, RDS, IAM, Glacier, SNS, SWF, SES, ELASTIC BEANSTALK, Route 53, Auto scaling, LAMBDA, Cloud Front, Cloud Watch, Cloud Trail, Cloud Formation, OPS Work, Security Groups.
• Configure OSPF over frame relay networks for NBMA and point to multipoint strategies
• Implement traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).
• Experience in working wif Network automation tools and testing for network change and configuration management.
• Experience wif Security- Firewalls, NAT / PAT, IPSEC, S2S.
• Work wif Management tools like CSM and Cisco ACS.
• Worked wif optimization of server resources, Amazon Elastic Cloud instances and website security, Mule ESB (EAI)/Service Mix, Web services /REST, Amazon AWS, Chef and ansible.
• Work wif MPLS to improvequality of service (QoS) by defining LSPs dat can meet specificservice level agreements (SLAs) on trafficlatency, jitter, packet loss anddowntime .
• Worked wif Load balancing device like F5 Big-IP local traffic manager(LTM) 1600
• Worked wif F5 load balancer and Cisco ACE 4710 Load balancers
• Implement various OSPF scenarios on networks consisting of 7600 routers
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment wif resource allocation to desired Virtual LANs of network.
• Provide full visibility and notification of authorized and unauthorized network access wif integration of CISCO ASA/FWSM and NAC solution.
• Established/implemented standards, processes and procedures for Cisco/ViptalaSDN deployments.
• Install, configure and set security policies on cisco and checkpoint firewalls.
• Analyze and test network protocols (Ethernet, TCP/IP) using Wireshark tool.
• Configure Cisco/Avaya Data switches using the CLI in a Wide Area Network
• Managing Amazon Web Services (AWS) infrastructure wif automation and configuration management tools such as Ansible, Puppet, or custom-built. Designing cloud-hosted solutions, specificAWSproduct suite experience
• Deploy a multisided IP Telephony, VOIP wif Cisco Unified Communications Manager (CUCM 8.6.2, 10.5.2), Cisco Unified Contact Center (UCCX 8.5, 10.5.2) and Unity Connections (CUC 8.6.2, 10.5.2).
• Testing of VOIP devices - (Lines, Router, and Server).
• Configure and troubleshoot link state protocols like OSPF in single area and multiple areas.
• Redesign of Internet connectivity infrastructure for meeting bandwidth requirements.
• Worked on ACI Fabric Path and connected ACI to Layer 3 external networks. Has configured ACI for remote Autantication in the respective organization.
• Deploying and decommission of VLANs on core ASR 1K,9K, Nexus (9K, 7K, 5K, 2k) and its downstream devices.
• Configure VLANs wif 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.
• Configure BPDU Guard, port-fast, uplink fast and other spanning tree features.
• Configure and manage Cisco 2500, 2600,2900,4300, 6500, 7500, 7200 Series routers.
• Worked on Nexus 7010, 5020, 2148, 2248 switches.
• Implementation and configuration of F5 Big-IP LTM 6400 Load balancers.
• Installation and administration of Checkpoint R 75.40 Firewall. Implemented firewall policy change on the Checkpoint clusters.
• Design, install and support Cisco wireless LWAPP environment, supporting both 802.11ac (5GHz) and 802.11b/g (2.4GHz) environments.
• Implemented, configured BGP WAN routing, converting OSPF routes to BGP (OSPF in local routing)
• Technical assistance for LAN/WAN management and complex customer issues.
• Proactively/actively monitored customer network related issues using all tools available such as NEMS, WARP9, Wireshark and Cisco Works.
• Remotely support customer and/or onsite technicians test and turn-ups of WAN and LAN equipment.
• Act as escalation point for Service Desk and Network and Systems Administrators to ensure quick and effective resolutions

Confidential, Alexandria, VA

Network Engineer Consultant/Research

Environment: Routing and Switching, Load balancing, Firewall Security (Checkpoint, Cisco, Juniper)Nexus equipment, QOS, IPSEC Tunnels, VRF, LAN/WAN administration.

Responsibilities:

• Experienced in working wif Cisco Nexus 7010, 5548, 5020, 2148, 2248 devices.
• Responsible for packet capture analysis, syslog and firewall log analysis.
• Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 autantication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed
• Involved in deployment of new F5 LTM for Datacenter.
• Experienced wif F5 load balancers and reverse proxy design and setup.
• Implemented Changes on Existing configurations for the applications on F5 and A10 load balancers.
• Configured Virtual server, service groups, Session persistence, Health monitors and Load balancing methods in new F5 and A10 LTMs.
• Hands on experience wif Catalyst layer 2, layer 3 switches, Nexus switches, UCS blades, Aruba, Viptela SDWAN, cisco umbrella, MDS, ASAs, Firepower firewalls
• Configured and implemented voice gateways (H323/MGCP/SIP), SRST for remote sites
• Configured WIDE IP and WIDE IP pool on F5 GTM's to support load balancing between data centers.
• High-level network troubleshooting using Packet capture tools like Wireshark.
• Supported Operations team when complex changes were done by developing MOPs for network devices (routers, switches and A10 Load balancers) code upgrades, VLAN/IP migrations from old to new network topology wifout any service disruption.
• Experienced wif migrating the Partner IPSEC VPN tunnels from one data center to another data center.
• Experience wif deploying the Layer 3 MPLS VPN in all the Branches and Campus locations.
• Regular upgrade and maintenance of Infrastructure such as Cisco Switches (2900, 3500, 7600, 3700 series, 6500 series) Cisco Routers (4800, 3800, 3600, 2800, 2600, 2900, 1900, 800), Juniper Routers and Firewalls, Nexus 9K,7k,5k & 2k, f5 BIG IP, Palo Alto Firewalls, Bluecoat Proxy and Riverbed Steelhead appliances
• Worked on Cisco IOS, NX-OS check point firewalls.
• Worked on Juniper J series j230, M 320 routers and EX 3200 series switch.
• Detect and repair potential provisioning and configuration issues on Juniper Routers.
• Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.
• Responsible for Checkpoint firewall management and operations across our global networks.
• Working wif Checkpoint Support for resolving escalated issues.
• Provided management and troubleshooting of all network’s Bluecoat proxy devices.
• Developed and maintained Network Documentation (Visio diagrams, Excel spreadsheets, Word documents, etc.).
• Configured & managed around 500+ Network &Security Devices dat includes Cisco Routers & Switches, Nexus Switches, Juniper and Palo Alto Firewalls, F5 BigIP Load balancers, Blue Coat Proxies and Riverbed WAN/MAN Optimizers.
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Designed, validated and implemented LAN, WLAN & WAN solution to suite client’s needs.
• Designed and configured the commands for QoS and Access Lists for Nexus 7K and 5K.
• Configuring Virtual Chassis for Juniper switches EX-4200, Firewalls SRX-210
• Worked on Layer 2 protocols such as STP, VTP, STP, RSTP, PVSTP+, MST etc.
• Experience wif Project documentation tools & implementing and maintaining network monitoring systems and experience wif developing network design documentation and presentations using VISIO.
• Installed & monitored T1, MUXES, CSU/DSU and data circuits.
• Involved in configuring IP Quality of service (QoS).
• Worked on F5 GTM, AFM, ASM and other F5 components to protect against advanced DDoS attacks.
• Installation and Configuration of firewalls and VPN Concentrators.
• Worked wif Gateway protocols: H323, SIP, MGCP, SCC Cisco SRST
• Worked on Orion (Solar Winds) for mapping network diagrams, updated Orion wif commissioned and decommissioned network devices.

Confidential, New Jersey

Network Security Engineer

Responsibilities:

• Implementation, configuration and support of Juniper, ASA and Palo Alto firewalls for clients.
• Complete renaming of all firewall objects and rules.
• Reviewed and optimized firewall rules using Secure Track Tufin tool and run firewall audit reports.
• Configured Multiprotocol Label Switching (MPLS) VPN wif BGP on the customer’s site
• Negotiate VPN tunnels using IPsec encryption standards and configured and implemented site-to-site VPN, Remote VPN.
• Tuned BGP internal and external peers wif manipulation of attributes such as metric, origin and local preference.
• Supported the implementation and ongoing operations of network access control devices to include firewalls, web proxies, and SSL VPN devices.
• Deployed and supported Checkpoint Provider 1
• Daily responsibilities included design, implementation, support and administration of multiple security products running Check Point Provider-1.
• Installation of Juniper SRX firewalls (Application and URL filtering, Threat Prevention, Data Filtering). Managing of Juniper SRX, CISCO ASA 5550 Firewall in Active/stand-by mode
• Administered multiple firewall of Juniper/ Net Screen, in a managed distributed environment and Policies between secure zones using NSM (Network Security Manager).
• Knowledge on Juniper SRX 240 Firewalls.
• Server load-balancing utilizing F5 LTM-Big IP.
• Configured policies on ASM using manual policy enforcement and auto policy enforcement wif F5 ASM.
• Working experience on F5 load balancer for load balancing, redirect URL, managing URL for servers.
• Provided best practice security consulting for multiple compliance initiatives, wif a focus on highly resilient solutions.
• Performed network monitoring, and analysis using various tools like Wireshark, SolarWinds.
• Primary responsibility is to design and deploy various network security products like Checkpoint, Cisco ASA etc.
• Responsible for Cisco ASA firewall administration, Rule Analysis, Rule Modification.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500 series.
• Creating technical implementation plans, project plans, and worked closely wif internal and external customers to supply solutions dat fulfill their needs.
• Configured, administered and troubleshot the Check Point, Palo Alto and ASA Firewall.
• Regularly performed firewall audits around Checkpoint Firewall-1 solutions for customers.
• Provided tier 3 support for Checkpoint Firewall-1 software to support customers.
• Worked on Checkpoint Platform including Provider Smart Domain Manager. Worked on configuring, managing and supporting Checkpoint Gateways.
• Configuration and troubleshooting of Site to Site as well as Remote Access VPN on Cisco ASA and Check Point firewalls.
• Deployment of Palo Alto firewall into the network. Configured and wrote Access-list policies on protocol-based services.
• Troubleshooting of protocol-based policies on Palo Alto firewalls and changing the policies as per the requirement and as per traffic flow.
• Researched, designed, and replaced aging Checkpoint firewall architecture wif new next generation Palo Alto appliances serving as firewalls and URL and application inspection.
• Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls.
• Implemented Zone Based Firewall and Security Rules on the Palo Alto Firewall
• Configured rules and maintained Palo Alto Firewalls & analysis of Firewall logs using various tools.

Confidential

Network Operations Engineer

Responsibilities:

• Designed, Installed and configured LAN, WAN, Networksecurity system and carried out configuration of Cisco Catalyst switches 4900,3550 and 3750 series and Cisco routers 4300, 3900, and 2900 series per theNetworkDesign.
• Carried Patch up gradation activities on Routers and Switches to provide maximum performance and maintained the patching software.
• Performed Version up gradation on Firewalls, Routers and Switches to improve network efficiency.
• Worked wif equipment from various vendors like Cisco, Alcatel and juniper.
• Strong work experience in MPLS, VPLS, QoS, VPN, VOIP and WLAN technologies
• Configured network by using routing protocols such as BGP, EIGRP, OSPF, RIP and by troubleshooting L2/L3 issues
• Configured OSPF, BGP protocols on Juniper routers (MX960, MX480) and maintained them.
• Worked wif Citrix NetScaler Load balancers to provide efficient switching and routing for local traffic
• Configured networking hardware to the latest IT standards being used in Data Center.
• Implemented security solutions using Cisco ASA devices, Fortinet Firewalls, ACL Configuration, VPN technologies (IP Sec), and Radius on different series of routers.
• Implemented CTP using TACAS+ and RADIUS on Cisco ASA Firewall.
• Migration from Juniper, Cisco ASA to Palo Alto firewall.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
• Troubleshooting and Configuration of Cisco ASA 5580, 5540 firewalls for all the agencies connecting to City net.
• Implemented clustering wif IP addresses (IPV4 & IPV6) on ASA Firewall.
• Troubleshooting and monitored routing protocols such OSPF, EIGRP & BGP.
• Configuring OSPF and Static routing on Juniper M and MX series Routers.
• Gathering details from customers and providing best security infrastructure solutions wif F5 load balancers, Check Point/Net screen firewalls and Blue Coat Proxies
• Created various B2B environments using Blue Coat Proxies.
• Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
• Identify/correct Active Directory deficiencies and performance issues
• Managing cabled LAN and wireless access, wif switching technologies and wireless technologies
• Monitored the Email and Active Directory components and whole systems and proactively fixed potential issues before they cause service disruption
• Performed IP address planning, designing, installation, configuration, testing, maintenance, and troubleshooting in complete LAN, WAN development.
• Ensured the integrity of company’s data systems security to prevent unauthorized access to its technology resources
• Assisted development teams on architecting web interfaces dat efficiently power the cloud environment.
• Executed QA services for improving the efficiency of cloud system and storage applications.
• Held weekly meetings to check the QOS improvements through various Optimization trials.

Confidential

Network Operations Consultant

Responsibilities:

• Provided technical support to the customers and maintained strong, professional relationships wif the customers.
• Assisted other system and technical engineers in the installation and modification of LAN, WAN, Wireless Network architecture, Email client software system and Routers.
• Maintained the complex networking systems by troubleshooting the network through Network management and monitoring system such as solar winds.
• Analyzed Network Interface Traffic based on data throughput, success rate, Traffic flow in & Traffic flow out.
• Administered L2 technologies such as VLANs, inter-VLAN routing, Trunking, STP, RSTP, port aggregation & link negotiation
• Served as an escalation point to Tier 2 support groups
• Logged customer calls onto a database by issuing tickets and followed efficient escalation procedures to resolve their problems.
• Diagnosed and resolved network issues for the customers and ensured dat the network services were per current and future needs of the customers/Clients.
• Addressed issues like routing problems, route announcements/advertisements, and security access issues.
• Implemented security solutions by designing and configuring Firewall, VPN rules etc.
• Ensured end-to-end network quality of service through statistical performance analysis