SUMMARY

• Network Engineer with 7+ years of hands - on experience in Network Deployment, Configuration and Troubleshooting, and supporting production environment.
• High level of knowledge in design, maintenance, implementation, development and troubleshooting of complex network systems.
• Experienced in designing, implementing and supporting internetworks using Cisco products.
• Extensive knowledge and troubleshooting in static and dynamic IP Routing Protocols like RIP, OSPF, EIGRP,BGP and & MPLS-VPN.
• Extensive working experience on various Switching Technologies - Spanning Tree Protocol (STP), PVSTP+, VLAN & VLAN Trunking Protocol (VTP) along with Failover mechanisms such as HSRP & GLBP on Layer 2 Setup, Inter-VLAN routing.
• Hands on experience with up gradation of Cisco IOS & Firmware on different Cisco devices & modules.
• Extensive working experience on Ether Channels and Spanning tree Protocol, HSRP and VRRP.
• Good experience in designing, testing and deploying LAN and WAN connections.
• Worked extensively in Configuring, Monitoring and Troubleshooting like Palo Alto, Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the Firewalls as per the design.
• Experience in Cisco Routing and Switching using 3600, 3700, 3800, 5300, 6500, 7200, 7600 Nexus 7k, Nexus 5k, Nexus 2k & ASR 9000,1000 series routers.
• Experience in implementation of Cisco ACS, Servers & configuration of TACACS protocols.
• Hand-full of knowledge on IPv6 conversation, planning and implementation.
• Experience in implementing, configuring & troubleshooting of 802.1q, ISL, IP Tunneling, Sub-netting, Access Control Lists (ACL), and Cisco IOS.
• Expert Level Knowledge of application migrations from cisco ACE to F5 Load balancer
• Experience in Cisco ACI(Application Centric Infrastructure)framework and SDN (software-defined networking ).
• Security Incident handling, SIEM (ESEM) using RSA Envision/ArcSight products.
• Responsible for designing, implementation and troubleshooting all kind of network requirements pertaining to the Data center environment.
• Implemented traffic filters using Standard and Extended Access-lists, Distribute-Lists and Route-Maps.
• VPN Concentrator 3000 series, Cisco IOS Firewall feature set (IOS 12.X).
• NAT Implementation on Cisco routers and Pix firewalls.
• Implement Cisco Secure Access Control Server (ACS) for Tacacs+/ Radius.
• Cisco wireless client adapters and wireless LAN controllers.
• Microsoft office: Word, Excel, PowerPoint.
• Have good skills in motivating and managing technical and non-technical teams to achieve the desired results on time and within budget.
• Self-motivated, quick learner, zealous and hardworking, making it easy to handle multiple demands and competing priorities.

TECHNICAL SKILLS

Network Protocols: EIGRP, OSPF, BGP, RIPv2, ISIS, IGRP, TFTP, FTP, HTTP, SSH, HSRP, VRRP, ISL, CDP, SNMP, NAT, ICMP, TCP/IP, DNS, DHCP, ACL, VACL, VoIP

Network Topologies: Frame Relay, ISDN, Gigabit Ethernet, OSI and TCP/IP layered architecture.

Routers and Switches: 7k,5k,2k, 6509, 4609, 7609, 7201, 184, 2811, 2911, 2926, 2960, 3560, 4948 Series Nexus Routers and Nexus Switches, CRAN, Juniper SRX Service Gateways.

Cisco Equipment Expertise: Router models of experience: 1800, 2500, 2600, 3600. Cisco ASA5585X, ASA5525, ASA5510, Pix525,535.

Switch Series 1900, 2900, 3500.: Switch models of experience: Cat 2800s, 3550s, 3750-E, 3800s, 4500s, 6500s, Nexus 7010.

Load Balancer: Cisco CSS, ACE, Citrix Netscaler, F5 Networks (Big-IP LTM & GTM), A10 Networks (Big-IP LTM & GTM)

Network Monitoring Tools: Netscout, HP OVO and Node Manager, Solar winds, Splunk, Cascade, Wire shark, Packet tracer,Arcsight, Tripwire, Skybox.

Security Protocols: IKE, ACL, IPSEC, MD5, SHA, RSA, DES, 3DES, AH, ESP.

Switching Concepts: VTP, STP, RSTP, MST, VPC, VLANs, Ether Channel, Port Fast, LACP, IP Access control lists.

WAN Technologies: MPLS, FRAME RELAY, ISDN T1/E1 (PRI- BRI), LEASED LINES, PPP, HDLC, ATM, DSL MODEMS, CABLE MODEMS.

LAN Technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, WiFi, FDDI, Token Ring.

WLAN Technologies: IEEE 802.11, PHY and MAC layer functionality, WLAN controller/Aruba/Meru

Firewalls: Cisco ASA(PIX),FORTIGATE,CHECKPOINT, Palo Alto, Bluecoat proxyNetscreen.

Design Tools: MS Visio Network Professional, MS-Project.

Traffic Generators: Versed with traffic generators tools like Spirent andIxia.

PROFESSIONAL EXPERIENCE

Confidential, Winston Salem, NC

Network Deployment Engineer

Responsibilities:

• Develop data system architectures, and recommends modifications to the data system configurations that reduce costs or improves services.
• Participate in the research, analysis, design, testing and implementation of large and complex data systems.
• Load Balancing on Web Applications using BIG-IP's F5 LTM and Cisco ACE 4710 load balancer. Leveraging F5 LTMs & GTMs to improve web application delivery speed and replication through global data centers.
• Demonstrated leadership in the development and planning for the roll-out of future hardware and software versions of CRAN/Commercial network devices.
• Configured and monitored ASA5585X with 10GB connectivity to Nexus 7010.
• Design, configuration and operational support of Nexus 7k,5k,2k, 6509, 4609, 7609, 7201, 184, 2811, 2911, 2926, 2960, 3560, 4948 Series Nexus Routers and Nexus Switches
• Troubleshooting of Nexus 7k series NX-OS.
• Participates in evaluation of vendor proposals, data system studies and traffic analysis.
• Supporting an enterprise network for Data Center LAN.
• Installation and Configuration of LAN/ WAN set up for Clients with support of Data Center LAN.
• Build Plan and management of Cisco ACI services.
• Developed an ACI adoption strategy based on business and technology needs.
• Designed application-centric data centers based on ACI fabric PODs and policy templates
• Performed automated configuring and provisioning all security devices according to the centrally managed application policies and requirements through Cisco ACI.
• Participate in enterprise level projects from an engineering perspective & responsible for creating/updating data system designs.
• Responsible for implementing, testing, and researching industry best practices.
• Responsible for network deployment plan’s, design, research and hardware procurement for the overall network.
• Involved in 2 Data Center migrations including re-architecture of network infrastructure.
• Implemented Security policies using ACL, and Cisco PIX firewalls
• Analyzed security logs collected using ArcSight.
• Performed other related duties as assigned or requested to include network hardware and software, network infrastructure and design, topologies, and protocols
• Configured and Supported network performance and configuration management and analyze net flow traffic.
• Involved in configuring Cisco routers and switch administration with enterprise level Cisco Routers such as 7200 series, 3800 series, 3700 series, 2800series, and Cisco catalyst series switches like 6500, 3750 and 4500.
• Configuration of Access lists (ACL) for the proper network routing for the B2B network connectivity.
• Dealt with NAT configuration and troubleshooting issues related access lists and DNS/DHCP issues within the LAN network.
• Monitoring Network infrastructure using SNMP tools like HP Openview.
• Dealt with the escalation problems from Leve1, Leve2 & level 3 for routing, switching and WAN connectivity issues.
• Worked with Operations in troubleshooting issues related to connectivity, STP, VLANs, Inter-VLAN routing, VTP, Ether channels, Layer 2/3 switching, log messages.

Confidential, Pleasanton, CA

Network Engineer

Responsibilities:

• Design and implement campus switch network with Cisco Layer 3 switches (3750, 4500, 6500 & Nexus 7000, 5000, 2000 series) in multi VLANs environment and inter-VLAN routing, HSRP, 802.1q trunk, ether channel.
• Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.
• Design, configuration and operational support of Nexus 7k,5k,2k Series Nexus Routers and Nexus Switches.
• Maintain and troubleshoot switch applications and Network connectivity including DNS, DHCP, LAN and TCP/IP issues.
• Configured RIP, EIGRP, OSPF and BGP in routers.
• Configured MPLS L3 and L2 VPNs for customers.
• Rack and Stack, Installed and configured new routers and switches.
• Used DHCP to automatically assign reusable IP addresses to DHCP clients.
• Upgrade 12K GSR’S running IOS to IOS-XR
• Upgrade IOS, Flash memory and DRAM on core routers and field routers.
• Configured and maintain VPN tunnels as required by the business and maintain secure firewall routing tables. Also maintained all policies pertaining to the Unified Threat Management suite.
• Build network documentation which includes accurate site inventory, site network diagrams, logical LAN/WAN diagram, network device list (routers/switches), server information sheets, network administration information document.
• Worked on Router series such as 2800, 2600, 2900, 3600, 3700, 3900, switches such as Cisco 3725, 3560, 3550, 2960, 2950, 4500 & 6500 and Firewalls like Cisco PIX 515, 525 and ASA 5510 in failover mode.
• Worked with TACACS+ and RADIUS servers for managing user authentication.
• Monitored T1/T3 frame-Relay, PPP, ISDN and Leased lines.
• Implementing NAT solution's on WAN applications.
• Configuration of VLAN, Port assignment. End server Network related problems.
• Cisco ASA firewall, switches and router configuration.
• Extensive knowledge and experience of Cisco Network Security, including the design, configuration, and tuning of Cisco security appliances: ASA Firewalls and FWSMs - NAT, ACL configuration.
• Configured IPSec VPN’s, Policies, Adding Routes, and Debugging Traffic.
• Coordinating with Vendor regarding Link status and reporting on timely bases to Superiors.
• Performed IOS upgrades on Catalyst 2900, 3500, 4500 series switches and 2500, 2600, 3600 series routers.
• Maintaining Network Documents, updating on a timely basis.
• Creating Network uptime report and sending to the management as per weekly schedule.

Confidential

Network engineer

Responsibilities:

• Key contributions include troubleshooting of complex LAN /WAN infrastructure that includes routing protocols EIGRP, OSPF & BGP.
• Support Network Technicians as they require training and support for problem resolution including performing diagnostics, and configuring network devices.
• Participate in 24 x 7 incident and problem support.
• Substantial lab testing & validation prior to implementation of new technologies.
• Migration of existing IPSEC VPN tunnels from Pre-Shared key to Certificate Authority for purpose of scaling.
• Secured network access with Cisco Secure (RADIUS/ TACACS+).
• Performed basic security audit of perimeter routers, identifying missing ACL’s, writing and applying ACL’s
• Responsible for layer 2 security which was implemented using a dedicated VLAN ID for all trunk ports, setting the user ports to non-trunking, deployed port security when possible for user ports.
• Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed.
• Implemented Security policies using ACL, and Cisco PIX firewalls
• Deployed a Syslog server to allow proactive network monitoring.
• Implemented VLANS between different departments and connected them using trunk by keeping one VLAN under server mode and rest falling under client modes.
• Perform planning, testing, & evaluate new devices and troubleshooting.
• Configured, installed, & managed DHCP, DNS.
• Work with the data center planning groups, assisting with network capacity and high availability requirements.
• Review all changes to network configuration for technical accuracy and impact and provide Multi-Protocol Network problem resolutions.

Confidential 

Network Engineer Intern

Responsibilities:

• Managed LAN/WAN infrastructure as a member of Network Team with Cisco 3550 at Access Layer and Cisco 6513 at the Distribution/Core layers.
• Configured HSRP, Ether Channel in the LAN environment.
• Configured multi-area OSPF on the WAN side.
• Configured VLANs, STP, VTP.
• Implementation of NAT with a pool of 2 public IP addresses.
• Designed and implemented an IP addressing scheme with subnets for different departments.
• Implementation of TCP/IP & related Services-DHCP/DNS/WINS
• Redistribution of routing protocols and Frame-Relay configuration
• Network Migration from RIP to OSPF
• Upgraded and restored a Cisco IOS from TFTP server
• Recovered password for Cisco routers 2500, 2600 and 3640 and 4000 series
• Install Windows 2000, configure IP addresses, network printers, configure Client Access for PCs
• Provide users’ technical support, analyze and troubleshoot problems that cause operational delays
• LAN/WAN level 3 support (diagnose and troubleshoot layer 1, 2, 3 problems)
• Cisco 6509 layer 2 and Layer 3 Switches
• Cisco 3660 Routers and 1900, 2924, 2948 switches
• EIGRP and RIP version 1 & 2 Routing Protocols