SUMMARY

• Accomplished network and security engineering professional with around eight years of real time experience in designing, deploying, migrating and supporting critical multi - site redundant network environments.
• Experience in F5 load balancer infrastructure and features.
• Extensive hands-on experience with complex routed LAN and WAN networks, Cisco routers, switches, ASA and PIX firewall deployment.
• Extensive knowledge of deploying & troubleshooting L2/L3 TCP/IP, Multilayer Switching, IPsec, UDP, WLAN, MPLS, Multicasting, Ethernet, IP Routing Protocols RIP, OSPF, EIGRP & BGP Cisco routers, switches, ASA and PIX firewall deployment.
• Excellent customer management/resolution, problem solving and debugging skills with good verbal/written communications and presentation skills.
• Good experience on L1/L2 testing and simulating wide range of applications from single and multiple output system
• Good experience on Firewall Juniper Junos.
• Aptitude for strong analytical and problem solving skills with strong interpersonal, communication and organizational skills.
• Self-confident, diligent with a positive attitude, productive leader and a team member.
• Ability to learn quickly and work under pressure and comprehend and in corporate quantitative concepts quickly and easily.
• Solving complex issues quickly and blend into the environment.

TECHNICAL SKILLS

LAN Technologies: VLAN, VTP, vPC, Inter-VLAN routing, STP, RSTP, PVST

WAN Technologies: Frame Relay, ISDN, PPP, ATM, MPLS, exposure to DS1, DS3, OC3, OC12, OC48, T1 /T3 & E1/E3

WLAN Technologies: Autonomous AP’s, Lightweight AP’s, WLC, WDS, WLSE, Standards - 802.11a, 802.11b, 802.11G

Cisco and other vendor equipment: Cisco routers (10008, 7200, 3800, 3600, 2800, 2600, 2500, 1800 series) ARISTA& Cisco Catalyst switches (6500, 4900, 3750, 3500, 2900, series), Cisco Nexus series ; PIX Firewall 506/515/525/535 , ASA Firewall 5520/5550, CatOS, Cisco IOS 11.x, 12.x, PIX OS 6.x, 7.x; Load Balancers (Cisco), Junipers M320, T640,CHECKPOINT firewall

Network Security: NAT/PAT, Ingress & Egress Firewall Design, VPN Configuration(L2 and L3), Internet Content Filtering, Load Balancing, IDS/IPS, URL Filtering ALU TESTING

Routing Protocols: RIP, IGRP, EIGRP, OSPF, BGP

Infrastructure Services: DHCP, DNS, SMTP, FTP, TFTP, IIS

IP Telephony: SIP, H.323, RTP, voice gateways, CCM,SRX 240

Monitoring and other tools: Wire shark, Cisco works, vitalqip, View Point, CSS3, MS Office

PROFESSIONAL EXPERIENCE

Confidential, Orlando, Florida

Network Engineer

Responsibilities:

• Plan, install, and maintain the IP voice/video/data communications infrastructure components, including:
• Cisco Catalyst Switches (6500s, 4500s, 3750s, and 3560s)
• Cisco Integrated Services Routers (ISRs-2800, 3800, 2900, 3900s)
• Check Point Security Gateways (both software blade and appliances)
• Service provider Metropolitan Ethernet, MPLS WAN, and Internet access circuits
• Support the Network Services team in the overall execution of the telecommunications support function.
• Worked on ALU testing and L1/L2 testing and was monitoring for the smooth functioning of network.
• Interacted with support services to reduce the downtime on leased lines.
• Strong hands on experience in F5 load balancer and using F5 10250v Hardware.
• Worked on DHCP scopes and VPN configurations.
• Involved in the transition of the Connections locations into Confidential .
• Point of contact for Racking the Switches, Routers and working with system teams to verify the connectivity of the servers.
• Delivered research projects, supporting groups such as Consumer Endpoint, Network Security, SIEM, Web Security, Sales, and Marketing. Projects include: · Next generation firewall (NGFW) customer study comparing McAfee and Stonesoft customers, focusing on feature requirements, product satisfaction, and competitive insights.
• Work & Configuring experience on creating monitor, Virtual server, pool and pool members,
• Assigning server load balancing algorithms and SSL offloading.
• Involved in maintaining a detailed spread sheet of all the devices at all the sites and we also IP’d the devices based on the Confidential IP-scheme.
• Conducted Web-ex sessions with different teams to check their progress on the migration.
• Maintained a complete Blueprint of MDF and IDF at different locations and a list of all the devices and servers using a shared Static Device List.
• Worked with checkpoints at Confidential and network deployments.
• Network support and administration for Cisco Call Manger 7, Firewall management for Cisco ASA 5520 and McAfee SideWinder firewall and third party vendor network connection management.

Confidential, Albany, NYC

Network Data Center Engineer

Responsibilities:

• As a member of Global Data Center Engineering and Development, which is responsible for designing, Implementing and troubleshooting of all kind of network requirements pertaining to the data center.
• Worked on Juniper JUNOS EX Switches, Juniper Firewalls.
• Worked as Network Admin consulting with clients to specify system requirements and design solutions.
• Worked on ARISTA (7500) series routers, Comprehensive Switching and Routing Feature Set, VXLAN and 64-way multi-pathing, Health Tracer System Monitoring
• Deep experience with information security control frameworks (NERC CIP v3, ISO/27002, PCI, NIST, FISMA, COBIT)
• Design of information security programs, including policy, standards, guidelines and procedures that implement risk reduction and compliance mandate assurance. Most recent focus on NERC CIP v3.
• Worked on SRX 240 in the Unified threat management (UTM) features include: antivirus, application security, IPS, antispam, and enhancedweb filtering.
• Managing Servers using Hardware Load Balancer F5 and Cisco ACE load balancer by managing internal customized tools and creating of SSL and Digital Certificates.
• Worked on the OSI Model and worked effectively in shift management and 24*7 support.
• Isolate and diagnose network problems, SSH, HTTP, HTTPS, involving TCP/IP, DHCP, DNS, Group Policy, Deployment & support of Microsoft Active Directory Services
• Design and implementation of the LAN IP infrastructure using Layer 2 / Layer 3 switching, VLAN, VPC, HSRP, trunking /channeling technologies, and routing protocol EIGRP and OSPF.
• We worked on ALU technologies for the network assurance, complement to system and data-level security solutions, Network Assurance completes the risk management equation by measuring the impact of network change on security, availability, and compliance
• Worked on firewall Juniper Junos, dealt with secure access, applications and networks.
• Managing and implementing Layer 4 Cisco ACE and CSS load balancer, Migration of CSS to ACE load balancer and creating of SSL and Digital Certificates
• Providing support for teams in activities such as Load testing, troubleshooting and managing VIP, Sticky Ness.
• Configuring ASA and PIX Firewall to allow site to site VPN access and configuring authentication, encryption, compression, ACL to ensure better security.
• Configured standard and extended ACL’s on the servers to limit its access.
• AAA, PAP and CHAP implementation using Cisco Secure ACS (TACACS+, RADIUS)
• Configuring all the end ports as access ports using port fast and implementing BPDU guard
• Working on Cisco ACS, Cisco works, HP NNMI tools for ticketing system and authentication.

Confidential, Bohemia, NYC

Network Engineer

Responsibilities:

• My accomplishments are Network Administration and Security Infrastructure with Cisco hardware which includes data center and campus network.
• The data centers consisted of various Cisco platforms Cisco 3550, Cisco 4510, Cisco 6509, Cisco Nexus 5000 & 7010 series switches and Load Balancer Cisco ACE, CSS and Big IP.
• Writing Engineering work orders as per the changes going in data center and implement the changes as per the schedule.
• Provided real time in-depth analysis and trouble resolution of incidents associated with CISCO, Juniper, Iron Proxy, Load balancers, Infoblox, GSS and WAE associated Operations Support Systems and Data Communications Network Technology platforms.
• Worked as network administrator maintaining existing software and hardware and upgrading any which has become obsolete.
• Managing Cisco Routers 3600, 7200 series routers And Cisco Switches 3800 and 6500 series.
• Project involved was upgrading Cisco nexus 2000 series switches with Cisco nexus 5000 series switches.
• Configuring Net Screen Firewall to allow site to site VPN access and configuring authentication, encryption, compression, ACL to ensure better security.
• Worked on juniper SRX 240 series.
• Applied effectively various routing protocols including EIGRP, OSPF and BGP.
• Worked on IDS deals with Cyber security/enterprise-class distributed, disaster tolerant, data analytics, data storage, event correlation systems.
• Involved in implementation of Wireless LAN, Wireless Access Point and Hotspots for our various clients and troubleshooting of Wi-Fi related problems faced.
• Worked on ALU and L1/L2 testing to test solutions specifically for devices that include GPS L1/L2 C/A and P code receivers..
• Provided support for teams in activities such as Load testing, troubleshooting, and performance tuning.
• Configured standard and extended ACL’s on the servers to limit its access.
• Configured static NAT, dynamic NAT, inside global address overloading, TCP overload distribution, overlapping address translation.
• Provided routing support including configuration and troubleshooting of various routers.
• Implemented IP, RTP, TCP, UDP, IPV4 Packets capture and analysis using WIRESHARK (ethereal).

Confidential, Murrysville, PA

Systems/Network Engineer

Responsibilities:

• Assisted in troubleshooting LAN connectivity and hardware issues in the network.
• Studied and analyzed client requirements to provide solutions for network design, configuration, administration, and security.
• Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.
• Monitor performance of network and servers to identify potential problems and bottlenecks.
• Performed RIP & OSPF routing protocol administration.
• Provided in depth analysis using but not limited to Vitalnet, QoS, Net screen Manager (NSM), Wireshark, Netcool Monitoring and Infinistream Mgmt Console.
• Worked on ALU testing and L1/L2 testing and was monitoring for the smooth functioning of network.
• Interacted with support services to reduce the downtime on leased lines.
• Providing network administration and support.
• Troubleshoot problems on day to day basis; provide solutions to fix the problems.
• Monitor the operability and reliability of the network.
• Maintenance and Troubleshooting of connectivity problems using Ping, Trace route.
• Managed IP address space using subnets and variable length subnet masks (VLSM).
• Worked along with the team in ticketing issues; responsibilities included documentation and support other teams.

Confidential

Network Security Engineer

Responsibilities:

• Design and Implement DMZ for FTP, Web and Mail Servers with CISCO PIX 506, PIX515.
• Involved in implementation of Wireless LAN, Managing Servers using Hardware Load Balancer F5 and Cisco ACE load balancer, Design and implementation of the LAN IP infrastructure using Layer 2 / Layer 3 switching, applied effectively various routing protocols including EIGRP, OSPF and BGP.
• Configured NAT and PAT on the Cisco PIX Firewalls for the Internal Systems.
• Placed access control list (ACL) on inside and outside interfaces on the PIX Firewall.
• Configured Turbo ACL.
• Migration of PIX to ASA.
• Configured Failover for high availability.