SUMMARY

• Cisco certified senior network engineer with 8+ years of experience in routing, switching, firewall technologies, system design, implementation and troubleshooting of complex network systems.
• Strong hands on experience in installing, configuring and troubleshooting of Cisco 7600, 7200, 3900, 3600, 2900, 2600, 2500 and 1800 series routers, Cisco Catalyst 6500, 4500, 3750, 2950 and 3500XL series switches.
• Hands - on experience on 6500,7600, ASR 1000, ISR routers and Cisco Cloud Services RouterCSR1000v.
• Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP-BGP, ISIS, OSPF, LDP, EIGRP, RIP, MPLS, VRF and BGP v4.
• In-depth knowledge and hands-on experience in ISP Routing Policies, Network Architecture, IP Sub netting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.
• Designed and implemented Spanning-Tree Feature - Port Fast, Backbone Fast, Uplink Fast Loop Guards, BPDU Guards, and Root Guard’s.
• Hands on experience in deployment of GRE tunneling, SSL, Site-Site IPSEC VPN and DMVPN.
• Designed, Configured and successfully implemented Port Security for Source based MAC Filtering, HSRP, VRRP, GLBP, and Ether Channel for network redundancy and load-balancing.
• Working Experience working with Nexus 7010, 5020, 2148, 2248 devices.
• Worked extensively on Cisco Firewalls, Cisco PIX (506E/515E/525) and ASA 10/5540) series.
• Configured security policies including NAT, PAT, and VPN, Route-maps, Prefix lists and Access Control Lists.
• Hands on experience on PPP Authentication protocols (CHAP, PAP).
• Worked on Network Topologies and Configurations, Routers, Frame Relay, Token Ring, ATM, Bridges, Switches, Hubs and Repeaters.
• Extensive experience in WAN Technologies, Switching Technologies along with Failover Mechanisms and Inter VLAN Routing types.
• Great exposure toSDNand Network Function Virtualization (NFV) technologies like Cisco ACI.
• Well experienced in configuring HSRP, GLBP, ICMP, PPP, PAP, CHAP and SNMP.
• Worked on Infoblox for managing core network services like DNS, DHCP and IP address.
• Experience in Implementing, administrating, migration, up gradation and troubleshooting of F5 BIGIP LTM, GTM modules.
• Experience with the escalation problems for Routing, Switching and WAN connectivity issues using ticketing systems likeremedy and servicenow.
• Worked withArubaWLAN, Cisco WLAN, Meraki Wireless control modules.
• Highly motivated with the ability to work independently or as an integral part of a team and committed to highest levels of professional.
• Experience in Systems & Networking including installation, configuration, and troubleshooting of computers, Network devices such as Routers, Switches, Modems, CAT5 cables and identify the network related problems and support for network services.
• Implementing security policies using Cryptography, ACL, SDM, PIX Firewall, IPsec, VPN, and AAA Security on different series of routers.
• Configuration, Troubleshooting and Maintenance of Palo Alto Firewalls - PA200, PA2000 series, PA3000 series, PA4000 series and PA5000 series.
• Monitored network traffic using tools like Solarwinds, Wireshark, NetScaler, Netflow and Tcpdump.
• Knowledge onpythonscripting for automated implementation techniques.
• Experience with Change management process and Project documentation tools like Excel and VISIO.

TECHNICAL SKILLS

Protocols & Standards: LAN, WAN, WLAN, VRF, VDC, TCP/IP, NAT, PAT, MPLS, GETVPN, GDOI, DMVPN, IPv4, IPv6, VPN, L2TP, IPsec / ISAKMP, IKE, VoIP, VSS, OSPF, OSPFv3, EIGRP, BGPv4, VLANs, Layer 3, Switching, HSRP, GLBP, VRRP, QoS, TACACS+, RADIUS, 802.1X, PKI, LDAP, POE:

Cisco Platforms: Nexus 7K, 5K, 2K & 1K, Cisco routers (7600, 7200, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900 series) Huawei AR series Routers:

Juniper Platforms: M, J and MX Series Routers:

Networking Concepts: Access-lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPsec, VLAN, VPN and Wireless Technology:

Firewalls: Cisco ASA, Palo alto Juniper NetScreen and Juniper SRX:

Security Protocols: IKE, IPSEC, SSL-VPN:

Load Balancers: F5 Networks (Big-IP) LTM 8900 and 6400.:

LAN technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q:

WAN technologies: Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONET:

Network Tools: IBM ITNM, Splunk, Stealth Watch, Solar Winds, SNMP, Cisco Works, Wireshark:

Networking Protocols: RIP, OSPF, ISIS, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA:

Operating System: Windows 7/XP, Windows Server 2008/2003, Linux, UNIX:

PROFESSIONAL EXPERIENCE

Confidential, Boston, MA

Sr Network Engineer

Responsibilities:

• Hands-on expertise with routers 2600, 2900, 3600, 3900, 7200, 7600, ASR-901, ASR-903, ASR 5500, ASR-9010 and Juniper ACX, E, M, MX960 series.
• Worked on Nexus platform 7010, 5K series and FEX (2248, and 2232) and deployed VPC, VDC andOTV, Fabric Path and successfully implemented VSS on the Cisco catalyst switches (6500, 6509,6800).
• Implemented and validated various cloud solutions based on Cisco and 3rd party products such as Nexus 9K/7K/1Kv,CSR1000v, ASAv, NetScaler 1000v, UCS VMware vSphere and NetApp.
• Implementing, configuring, and troubleshooting various routing protocols PPP, HDLC, BGPv4, EIGRP, MPLS,ISISand OSPF.
• Installing, configuring Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design.
• Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
• Implemented Site-site IPSECVPNat our new integration to allow connectivity to our resources until we could deployMPLS.
• Configured policy statements, and routing instances and support on MPLS-VPN,VRF.
• Expertise in maintenance of layer2 switching tasks - VLAN, VTP, RSTP, configuration of ether channel with LACP and PAGP along with troubleshooting of inter-VLAN routing.
• Configure VRRP & GLBP and VLAN Trunking 802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.
• Well Experienced in configuring protocols HSRP, GLBP, VRRP, ICMP,IGMP, PPP, HDLC, PAP, CHAP, and SNMP.
• Experience with designing and configuring secure Virtual Private Cloud (VPC) through private and public networks in AWS by creating various subnets, routing table, Network ACL, NAT gateways.
• Experience with convert Checkpoint VPN rules over to the Cisco ASA solution and migrating with Cisco ASA VPN experience.
• Worked on F5 BIG-IP LTM 8900,Citrixand Netscalar configured profiles, provided and ensured high availability.
• Experienced with deployingJuniperSRX 240, SRS 220 Firewalls with zone based security, URL filtering and IDS/IPS.
• Developed redundant load-balancing design based on four Juniper MX 960 and twoSRX5600 using route leaking and policy routing.
• Experience in VPN, Checkpoint IDS-IPS andMcAfeeAntivirus Endpoint Protection Solution.
• Worked withPaloAltofirewalls PA250, PA4050, PA3020 using Panorama servers, performing changes to monitor/block/allow the traffic on the firewall.
• Design Next generation data centers with Nexus,ACI, Openstack, DCI, EPGs/bridge domains, OTV, and VXLAN.
• ConfiguringVMwareand managing and maintenance of VMs (virtual server) and ServerVirtualizationusing VMware vSphere, Microsoft Hyper-V.
• Proactively monitored and managed all productions network systems to maximize system availability in CitrixNetScaler.
• Worked with monitoring tools like SolarWinds,Ciscoprime and network packet capture tools like Wire-shark.
• Maintain and assign IP addresses and DNS entries for high visibility projects usingSolarwindsIP manager. (IPAM).
• Implementation of Site-to-Site VPNs andDMVPNover the internet using IKE Phase 1 and IKE Phase 2 based on traffic with ASA 5500 series Firewalls.
• Provided full visibility and notification of authorized and unauthorized network access with integration of CISCO ASA/FWSM andNetwork Access Control (NAC)solution.
• Configured DHCP scope intoInfobloxfor new sites which includes subnets for wireless, voice, security and data centers.
• Performed Network Security Assessment and implemented security features such as network filtering, SSH,AAA, SNMP access lists, VTY access lists and HSRP authentication.
• Worked on Layer 3 routing and EVPN/VXLANversus Layer 2 VLAN spanning to enhance productivity.
• Setup user and group policies usingActiveDirectoryand implemented system and data security using Windows Firewall.
• Worked onBluecoatproxyserver, Tipping Point Intrusion Protection System (IPS) management
• Involved in designing of LAN (Ethernet) and WAN infrastructure for the new Data Centre Using MS Visio.
• Configured Cisco 1231 Access points with 5959 and 4941 antennas (802.11/a/g).
• Configuring and managingArubaInstant Access Points 215, 225 and troubleshoot network connectivity issues.
• Planning, deploying LANs/WANs voice interconnection using protocols VoIP, H.323, SIP, ISDN, L1-L3.

Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/2960/6500 switches and Cisco 3640/12000/7200/ 0 / 2800 routers, Cisco Nexus 7K/5K, Cisco ASA 500, F5 BIGIP LTM, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, ASM, APM.

Confidential, Austin, TX

Network Engineer

Responsibilities:

• Installation and Configuration of Composite Network models consists of Cisco 7600, 7200, 3800 series routers and Cisco 2950, 3500, 5000, 6500 Series switches.
• Experience in layer-3 Routing with,ASR9K,ASR10K, Nexus 7k,5k,3k,2k Cisco 7600, 7200, 3925 series.
• Migrated existing devices fromCisco Catalyst 6500 series to Nexus 7k, 5k, 2k in Data Center.
• Experience with designing, implementing and troubleshooting Cisco routers and switches using different routing protocols like OSPF, EIGRP, BGP, ISIS and MPLS L3 VPN,VRF.
• Providing daily network support for national wide area network consisting ofMPLS,VPNand point-to-point site.
• Convert Branch WAN links from TDM circuits to MPLS and to convert encryption fromIPsec/GREtoGetVPN
• Performing troubleshooting on slow network connectivity issues, routing issues involves OSPF, BGP and identifying the root cause of the issues.
• Modified internal infrastructure by adding switches to support server farms and added servers to existingDMZenvironments to support new and existing application platforms.
• Knowledgeable about IP Multicast,IGMP V2 and V3, CGMP,IGMPSnooping, PIM-Sparse and Dense Mode, F5/Big-IP Load Balancer.
• Implementing Security Solutions in Juniper SRX andNetScreenSSG firewalls by using NSM.
• Implemented antivirus and web filtering onJuniperSRX240 and migrated firewalls fromJuniperNet screen 500 toSRX650.
• Experience in HSRP standby troubleshooting & Experience in configuring & upgrading of Cisco IOS.
• Performed switching technology administration including VLANs, inter-VLAN routing, Trucking,STP, RSTP, IGMP, port aggregation and link negotiation.
• Implementation of HSRP, IPsec, Static Route, IPSEC over GRE, Dynamic routing, DHCP, DNS, FTP, TFTP.
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Experience inPaloAlto (PA 2000, PA 3000)design and installation (Application and URL filtering, Threat Prevention, Data Filtering)
• Worked on Multi-vendor platform with Checkpoint,Fortinetand Cisco firewalls requesting net flow for security compliance, coding, and pushing firewall rules after approval and troubleshoot incidents as required.
• PerformedF5appliance (LTM, GTM,APM, and ASM) maintenance and system upgrades including hot fixes and security configurations.
• Performing network monitoring of LAN/WAN and providing analysis using various tools like Wireshark,Solarwinds, SNMP and NetFlow.
• Redesign current security network and implement Cisco IDS/IPS andNetwork Access Control (NAC)to insure the maximum security.
• Managing the changes through export/import of CSV spreadsheets onInfobloxweb interface.
• Monitor Performance & capacity of the WAN links usingSolarWindsand NetQoS report analyzer.
• Utilize BMCremedyticketing system to monitor, troubleshoot and resolve alarms on sites.
• TroubleshootingArubaWireless issues like slow performance, intermittent connectivity, authentication failure, low signal strength, Replacing AP's and controllers.
• Implemented GRE tunneling, Site-to Site VPN and multipointDMVPNusing IPSEC.
• Installed, configured, and maintained aVMwareESX 5.5 virtual server/desktop environment.
• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network
• Create, Run, and DebugPythonscripts and apply that knowledge to handling common networking tasks.

Environment: Cisco Catalyst 2960/3750/4500/6500 Series Switches, Cisco 2800/2900/3000 Series ISR’s and Cisco 3640/ 00/3845/3600/2800 routers, Cisco Nexus 7K, Cisco ASA 5500, Checkpoint, windows server 2003/2008, F5 BIGIP LTM/GTM, ACL, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP

Confidential, Scarborough, ME

Network Engineer

Responsibilities:

• Installing, Configuring and troubleshooting Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers.
• Implemented Juniper MX 240, 480, andMX960routers into the IP/MPLS core network, along with EX4200 switches.
• Design, implementation and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Implemented Cisco Layer 2Switches3750, 4500, 6500 in multiple VLAN environment with the use of inter- VLAN, HSRP, ether channel.
• Deploying and decommissioning the TOR switches and their respective software upgrades and Configuring HSRP for network redundancy and High availability.
• Responsible for Configuring SITE TO SITE VPN on Cisco ASA 5500 series firewall between Head office and Branch office
• Configured Juniper SRX series firewalls for policy management, and Juniper SSL VPNs.
• Provide second/third level technical support forACI(Application Centric Infrastructure) technologies.
• Assisted with modifying, and improving the company wide LANQoSpolicy; updating & adding class/policy maps, and assigning service policies to appropriate interface
• Installation & configuration of Cisco VPN concentrator 3060 for VPN tunnel with Cisco VPN hardware & software client and PIX firewall.
• Design and implementation of GETVPNarchitecture used formulticastand unicast communication on an existing IPVPN.
• Configure and InstallF5 Big IP 4200sNew Virtual Servers, Profiles, IRules, Pools, Nodes, Generate CSR Certificate, SSL Certificates Etc.,
• Configuring rules and MaintainingPaloAlto (PA 200, PA 400)Firewalls & Analysis of firewall logs using various tools.
• Installing new equipment to RADIUS and worked with MPLS-VPN and TACACS configurations.
• Installed and configured Cisco ASA 5500 series firewall and configured remote access IPSEC VPN on Cisco ASA 5500 series.
• Working withIGMPv1, v2, v3 TroubleshootingIGMPissues at Layer 2 network.
• Analyze, document and manage issue resolutions within the Service Desk ticketing system, BMCRemedy.
• SupportedInfobloxappliances grid environment for DNS, DHCP and IP Address Management IPAM tools (IPv4).
• Worked on SIP protocol on TCP and UDP connections and proficient withVOIPtechnologies
• Performed Site Surveys and DeployedArubaWireless Controllers 7010.
• InstallWindowsServer2003, configure IP addresses, network printers and configure Client Access for PCs.
• Performed the maintenance ofActiveDirectoryand replication scheme, DNS/DHCP services.
• Updating the SNMP string for various Routers and Switches inSolarWindsfor monitoring purpose.
• Working knowledge in the field of SNMP monitoring based on SNMP get, SNMP walk,MIB.
• Configuration and troubleshooting of many link types i.e. SONET Controllers for sub E1/T1, E3/T3 and POS controllers for STM1 links.

Environment: Cisco 7200/3845/3600/2800 routers, Cisco 6509/ 3750/3550/3500/2950 switches, Cisco ASA 5500, windows server 2003/2008, Net Flow, TACACS, EIGRP, RIP, OSPF, BGP, VPN, MPLS, CSM, Ether Channels, HSRP, SONET and POS controllers

Confidential

Network Engineer

Responsibilities:

• Configuring Static, IGRP, EIGRP, and OSPF Routing Protocols on Cisco 1600, 2600, 2800, 3600, 7300 series Routers.
• Configuring access layer switches such as Cisco 4510, 4948, 4507 switches for VLAN, Fast Ether Channel configuration.
• In depth understanding of IPV4, implementation of Subnetting, VLSM, ARP, reverse proxy ARP & Ping Concepts.
• Perform hardware and software diagnostics, fault isolation and coordinate repairs and/or replacement of faulty equipment.
• Worked on network topologies and configurations, TCP/IP, UDP, Frame Relay,Tokenring, ATM, bridges, routers, hubs and Switches.
• Design network and create physical and logical network layout diagrams
• Write and maintain technical documents describing implemented technologies and architecture
• Provided consultation services to clients for installing and configuring Cisco routers and switches
• Implementation of TCP/IP and related Services-DHCP/ DNS/ WINS Configured VLAN’s, Private VLAN’s.
• Configure various LAN switches such as CISCO CAT 2900, 3550, 4500, 6509 switches.
• Configured NAT(Network address translation) configurations and its analysis on troubleshooting issues related access lists (ACL).
• Monitoring network traffic using tools likeSolarwinds, Wireshark, etc
• Design OSPF areas for reliable Access Distribution and for Core IP Routing.
• Extensively used TCP/IP tool like TELNET for remote login to the routers and SSH for secure login.
• Has expertise in LAN/WAN technologies (fast Ethernet, Layer2 & 3 switched/routed LAN, and Frame Relay).

Environment: Cisco 00 / 3600 Cisco 60 series switches, Cisco Routers 7000, 5300, 4000, 2500, 3000, 2600, NAT, PAT, DHCP, DNS, OSPF, EIGRP, ACL, TCP/IP, LAN, WAN.

Confidential

Network Engineer

Responsibilities:

• Configured and installed Cisco routers 2500, 2600, 3601 and 4000 series. 2950 Switches & Link sys wireless access points.
• Handled the up gradation and replacement of network components like NIC cards, display cards, RAM, keyboard, mouse and other peripherals/ devices.
• Handled installation of operating systems (NT/2000, MS Office, and XP), troubleshooting of operating systems and configuring the servers.
• Maintained redundancy on Cisco 2600, 2800 and 3600 routers with HSRP.
• Real time monitoring and network management using Cisco Works LMS.
• Documented the design, implementation and troubleshooting procedures.
• Configured and troubleshoot VLAN, VTP, STP and Trunks.
• Remotely testing links up to 1.5 Mbps using tools like REACTS.
• Configured routing protocols like RIP, EIGRP, OSPF and BGP on Cisco devices.
• Good knowledge on troubleshooting the routing protocols.
• Recovered lost passwords and created standard access-lists and extended access list to new users.
• Monitoring network performance to improve the backup strategy using Netrep, Solar winds.

Environment: Cisco 00 / 00 routers, Cisco 2950 switches, link sys access points