SUMMARY

• Over 8+ years of experience in design, development, implementation, trouble shooting and maintenance of complex network systems and incorporating security. All the job roles I had to - date have something unique to offer which enabled me gain a wide variety of skills.
• This in addition to my, problem solving and learning ability will make me an ideal candidate to tackle a new role. Finally I would like say that I’m really passionate about the IT industry.
• Extensive experience in Layer 3 routing and Layer 2 switching and dealt with router configurations like Cisco 7200,3800, & 2800 and switches Cisco 6500, 4500, 3750,2900 and 3500XL series
• Experience testing Cisco routers and switches in laboratory scenarios and deploy on site for production
• Experience in Network Management Tools and sniffers like SNMP, HP-Open view, Wireshark, Solarwinds and Cisco works to support 24 x 7 Network Operation Centre
• Proficient in configuration of routing protocols likeRIP, EIGRP, OSPF multiple areas &BGP
• Involved in designing L2VPN services and encryption system and other VPN with IPSEC based services
• Experience in designing and troubleshooting of complex BGP and IS-IS routing problems on mock lab scenarios
• Extensive Knowledge on the implementation of Cisco ASA 5500 series firewalls
• Worked on F5 BIG-IP LTM/GTM6900, configured profiles, and provided and ensured high availability.
• Scripting in Python to automate certain network changes for scalability and flexibility of application deployment.
• Involved in troubleshooting of IP conflict problems and worked on Gigabit Ethernet and Fast Ethernet connection and applied QoS for the bandwidth delay
• Extensive experience taking copy of Cisco IOS on TFTP server and loading itback on routers and knowledge of HP Openview software
• Deployment and Support of Juniper SRX and Netscreen
• Strong linux skills for certain administration tasks.
• Involved in monitoring network traffic and its diagnosis using performance tools like Snort, Snortsnarf, ping tools, and packet player
• Monitored network congestion in frame relay connection using FECN and BECN and kept track of VC (Virtual circuit) status through LMI (Local management interface)
• Experience in deployment Nexus 9K, 7K, 5K and 2K devices in a Data Center
• Support and Troubleshoot Cisco UCS Servers in a Data Center environment.
• Working knowledge of Remedy ticketing system for case and change management.
• Worked on Avaya Voice gateways for VOIP implementation using Cisco Catalyst switches
• Maintain technical knowledge by understanding state of the art technologies, attending alworkshops and reviewing technical publications.
• Excellent communication and documentation skills and is able to work individually and as a team member.

TECHNICAL SKILLS

Vendor Platforms: Cisco2851, 3640,3660,7206,7513,1700,1841,2600,3600,2500 series Routers, Nexus 2k, 5k, and 9k switches

IP Layer3/4: TCP, UDP, DHCP, FTP, ICMP, DNS, ARP, RARP, SMTP, MPLS.

IP Routing: RIP, BGP, OSPF, IGRP, AND EIGRP.

Traffic Analyzer Tool: Netflow version 4.0.

Networking Monitoring Tool: Solarwinds, QRadar, Trustwave, Nagios, Cisco Prime

Security: VPN, NAT, Palo Alto, ASA.

IP Telephones: Cisco 7940, 7960 and 7970.

Programming Languages: C, C++, Python

Packages: MS Office (Word, PowerPoint, Excel & Outlook), MS Project, MS Visio

Platforms: Windows 7, XP, Vista, Server 2003, MAC OSX, UNIX, Linux (Ubuntu) and Cisco IOS (Internetworking Operating System).

PROFESSIONAL EXPERIENCE

Confidential, Chanhassen, MN

Sr Network Engineer

Responsibilities:

• Managing and troubleshooting Controller based enterprise wireless infrastructure that consisted of two 7500 Flex Controllers in HA mode.
• Configuring and troubleshooting of network security devices like Palo Alto and Cisco ASA involving complex network application flows between multiple hosts.
• Create heat maps of sites in Cisco Prime to view the WiFi signal coverage and to identify coverage holes.
• Use Cisco Prime to monitor, configure and manage lightweight access points.
• Design, Implementation and Support of SolarWinds based infrastructure & network Monitoring suite of tools for the enterprise network at Life Time.
• Configure and Manage Cisco Identity Services Engine (ISE) for creation and enforcement of security and access policies for end point devices connected to switches and routers.
• Configure and Manage Infoblox for DNS, DHCP and IP Address Management (IPAM).
• Document all network procedures, maps, and projects, including recording diagnosis and resolution of network faults, enhancements and modifications to networks and maintenance instructions.
• Maintaining IP addressing schema for the full enterprise network with the consideration of optimal utilization of IP range & minimizing the routing table length using route aggregation.
• Use Service Now ticketing software to manage the tickets in Network queue, create Change Requests, Root Cause Analysis and get appropriate approvals for implementation.

Confidential, Richardson, TX

Sr. Network Security Engineer

Responsibilities:

• Worked on Cisco 7500, 7200, GSR 12000, series routers, Catalyst switches like 4500,6500,7600 and Integrated Services Routers like 3945.
• Was involved in the deployment of Nexus 9396PX leaf switches in the Data Centre.
• Created mock lab scenarios for deployment of Nexus 9K Spine switches and Nexus 2k Fabric Extenders.
• Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only), which involves new wan links.
• Planning, development and implementation of hardware and software strategies to support the evolution of the enterprise network backbone
• Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/GRE to GetVPN
• As a part of Enterprise monitoring project, advised on improving network performance monitoring, including traffic optimization and device alerting
• Management of BGP peering with Service Providers to ensure availability and maintain SLA with MD5 authentications and TTL security.
• Troubleshooting traffic passing managed firewalls via logs and packet captures.
• Configuring VLAN, LAG Port Channel, HSRP and VRRP onCisco devices.
• STP attack mitigation using BPDU Guard, Root Guard, and authentication for VTP, STP, disabling all unused ports by putting them in unused VLAN and ensuring DHCP attack prevention wherever needed.
• Design VPN tunnels between locations. Implement these tunnels using IPsec and GRE protocols and maintain the tunnels.
• Active participation on operational support for routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
• Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. ConfiguredCiscoRouters for OSPF, RIP, IGRP, RIPv2, EIGRP, Static and default route.
• Involved in investigating cloud providers for Infrastructure as a Service.
• Responsible for troubleshooting T1s, DS3s, connectivity issues with carrier and circuit analyzers.Configuration/Installation Troubleshooting Load balances, writing trouble reports and test reports TCP/IP protocolanalyzerssuchasSniffer,Ethereal/Wireshark.

Confidential, Detroit, MI

Sr. Network Engineer

Responsibilities:

• Deployment of monitoring systems (Solarwinds) forCisco, Juniper and Palo Alto device at client locations.
• Administering & designing LANs, WANs, Internet and voice networks.
• Worked on Avaya Voice gateways for VOIPimplementation using Cisco Catalyst switches
• Deployment and Support of Juniper SRX and Netscreen
• Worked on F5 BIG-IP LTM/GTM6900, configured profiles, and provided and ensured high availability.
• Optimize routing using route maps, route redistribution, route filters and fine-tuning routing protocol.
• Troubleshoot TCP/IP problems; troubleshoot connectivity issues.
• Implemented SNMP onCiscoroutes to allow for network management.
• Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications.
• Maintaining & Analysis of LAN infrastructure, firewall logs, IP tables,Networkusage details etc.
• Identified IOS related bugs based on appropriate release notes and past history.
• Maintaining IP Core Networks with the consideration of high-availability network redundancy and disaster recovery.
• Once trouble ticket has been created, kept the customer informed of status of ticket and estimated time to repair.
• Coordinating with service providers for WAN link outages.
• Configuring Vlans, VTP, and enabling trunks between switches.
• Worked with customers in troubleshooting issues related to connectivity, STP, Vlans, Trunking, VTP, Layer 2/3 switching, Ether channels, Inter-Vlan routing, log messages, high CPU utilization and parameters that can degrade performance of network.

Confidential

Network Engineer

Responsibilities:

• Installation, Configuration and management of, Cisco36xx, Cisco 3800 and Cisco 76xx series routers.
• Cisco Switches Catalyst (Cisco 6600 series, 3600 series 3550 series, 2970 series 2960G series,2950 series creating remote access with cable modems and virtual private networks.
• Maintaining centralized security in remote access network.
• MD-110 PBX Monitoring Interfaces. Enabling or Disabling Interfaces Configuring Device Connections.
• Setting Interface Thresholds MD-110 PBX. Viewing Interface Address Information. Monitoring MD110 Alarms.
• Resolving Port Connections.ModelCommunications Information.Configuring Model Redundancy .Monitoring ISDN Basic Rate Extensions .Radio Exchange Information .Configuring Computer Telephony Interfaces.
• Modems Configuration of CE-1, ISDN PRI, nx64Kbps, E1 and E3 links WAN Technologies (Leased lines: 64Kbps, nx64Kbps, 2Mbps, 34Mbps, ISDN, PPP, HDLC and Frame Relay etc.).
• Responsible for Network cabling / backup UPS setup and network cable infrastructure.
• Responsible for Install of Cisco Works for remote management of L2/L3 devices including: Cisco View (6.1.5), Essentials (4.0.5) and Campus Manager (4.0.6) using Cisco LMS 2.6.
• Maintenance of Gigabit Ethernet .FC, ST, Multicore Optical Fiber patch cords.
• TCP/IP, EIGRP, BGP, HSRP, NAT, L2/L3 switching and Spanning tree and Loop Avoidance.

Confidential

Network Support Engineer

Responsibilities:

• In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, IPSec VLSM, TCP/IP, NAT, DHCP, DNS, T1 / FT3 / T3 Sonet POS OC192,GigE circuits, Firewalls
• Configured various routing protocols including EIGRP, OSPF, BGP, and analyzing throughput of WAN link
• Interoperability study between various vendor equipment and protocol implementations. Actual work involved interop testing between Cisco 7500, GSRs, and Catalyst 6500.
• Working with Corporate Customers, Tier 1 & 2 Support engineers in solving complex customer provisioning issues;
• Authentication was tested for OSPF, LDP and BGP.
• Expertise in configuring EIGRP, Frame-relay, T1 circuit, CBWFQ (QoS), NAT, BGP, LAN-to-LAN tunnel
• General routing table and per vrf routing table segregation, verified Route Distinguishers, Route Targets, Max routes per vrf.
• BGP session establishment/Authentication/Resiliency and exchange of routes and in-depth verification of required features such as Max number of prefix, Advertise interval, Prefix list AS-Override, ORF with CE as the sender and PE as the receiver, Used M320 and Cisco GSR as edge routers.
• Transparent passage of BGP community values as set by the CE, default originates, Allow-as, AS Prepend ASN, and EBGP session authentication.
• Configured a Created TCP/ IP flows for performance measurements and troubleshoot OSPF, BGP, and EIGRP.
• Used SNMP protocol for NMS configuration to detect network link failure
• Designed secure VPN architecture, including MPLS VPN (RFC2547) platforms for various customers thatinclude ISP.
• Assist the Operations team in multi area OSPF configuration.
• Configured CE routers with the team