Krishna

SUMMARY OF QUALIFICATIONS:

●Cisco Certified Network Engineer with 7+ years of professional experience in Network engineering, performing Network analysis, design, Implementing, capacity planning with focus on performance tuning and support of large Networks.

●Experience in layer-3 Routing and layer-2 Switching. Dealt with Nexus models like 7K, 5K, 2K series, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches

●Strong knowledge in Cisco Routing, Switching and Security with Cisco hardware/software (heavy Cisco shop) experience.

●Profound knowledge on various WAN technologies like E1/T1/E3/T3, HDLC, Frame-Relay and PPP.

●Configuration and troubleshooting of CSM, integration with ASA devices.

●Experience in managing security policies with CSM, integrated with ASA 5500 devices.

●Strong Knowledge in WAN technologies including T1,T3, ISDN, HDLC, Point to Point, ATM and Frame Relay.

●Experience in Configuring and implementing VLAN, VTP, LAN switching, STP and 802.x authentication in access layer switches.

●Access Control Server configuration for RADIUS and TACACS+.

●Have knowledge on various advanced technologies like VOIP, H.323, SIP, QOS, IPv6, Multicasting, and MPLS.

●Experience with designing, deploying and troubleshooting LAN, WAN, Frame-Relay, Ether-channel, IP Routing Protocols - (RIPV2, OSPF, EIGRP & BGP), ACL's, NAT, VLAN, VTP, BPDU, STP, HSRP & GLBP.

●Designing and implementing F5 BIG-IP load balancer.

●Strong knowledge and experience in implementing, configuring VPN technologies like IPSEC, MPLS.

●Strong problem-analysis talent, driven by global view/attention-to-detail approach. “Hands on” technical knowledge. Dealt with the escalation problems for Routing, Switching and WAN connectivity issues using ticketing system like Remedy Ticketing System.

●Experience with Project documentation tools & implementing and maintaining network monitoring systems and experience with developing network design documentation and presentations using VISIO

●Experience in monitoring and analyzing the load balancing of network traffic using Wireshark and Solarwinds.

●Experience in Physical cabling, IP addressing, configuring and supporting TCP/IP.

●Strong general management, negotiation, inter-personal, communication and team building skills.

●Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.

●Experience with F5 load balancers – LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

●Experience in Configuring and implementing VLAN, VTP, LAN switching, STP and 802.x authentication in access layer switches.

●Switching tasks include VTP, ISL/802.1q, IPSec and GRE Tunneling, VLANs, Ether Channel, Trunking, Port Security, STP and RSTP.

●Experience in testing Cisco routers and switches in laboratory and deploy them on site production.

●Highly enthusiastic, creative team player, project implementation, analytical, interpersonal and communication skills.

●Excellent customer management/resolution, problem solving, debugging skills and capable of quickly learning, effectively analyses results and implement and delivering solutions as an individual and as part of a team.

●In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Sub netting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.

●Strong hands on experience on PIX Firewalls, ASA (5540/5550) Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).

CERTIFICATIONS:

●Cisco Certified Network Associate (CCNA)

●Cisco certified network professional(CCNP)

●Information Technology Infrastructure Library(ITIL)

TECHNICAL SKILLS:

LAN Technologies : VLAN, VTP, Inter-Vlan routing, STP, RSTP, PVST, 802.1x

WAN Technologies : Frame Relay, ISDN, PPP, ATM, MPLS, Channel & Leased lines

Network Securities : NAT/PAT, VPN, Filtering, Load Balancing using f5 and Cisco ace,

Cisco ASA Firewalls 5580-20, IPSEC and SSL VPNs, IPS/IDS, DMZ Setup,

CBAC, Cisco NAC, ACL, IOS Firewall features, IOS Setup and Security

Features, Checkpoint, Palo Alto

Routing Protocols : RIP, IGRP, EIGRP, OSPF, BGP, IS-IS, HSRP, IPv6

Routed Protocols : TCP/IP, IPX/SPX

Infrastructure Services : DHCP, DNS, SMTP, POP3, FTP, TFTP

Network Managements : SNMP, SSH, Telnet, ICMP

Network Peripherals : Nexus 7K, 5K, 2K & 1K, PIX Firewall (506/515/525/535),

Cisco switches (2900, 2924, 2950, 3550, 3560, 4000, 4948, 5500, 6500, 6509)

Cisco routers (2600, 2800, 3640, 3700, 3825, 7200, 7204, 7206

ASA Firewall (5505/5510), Cisco ACE Load Balancers

Operating System : Cisco IOS-XR, Cisco Cat OS, Cisco IOS (11.x, 12.x), PIX IOS (6.7.x), CAT-

OS, UNIX, LINUX, Windows XP, NT, 2000, 2003

Monitoring : Wireshark, Solar Winds, and TCP Dump.

AAA Architecture : TACACS+, RADIUS, Cisco ACS.

PROFESSIONAL EXPERIENCE:

Synchrony Financial, Stamford, CT Jan 2014 – Till Date

Sr. Network Engineer

Responsibilities:

●Configured and deploying Cisco catalyst 6506, 4948E, 4510 switches and Cisco 3660, 3845, and 7609 series Routers.

●Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500.

●Experience in migration of VLANS.

●Involved in the troubleshooting aspects of complex network infrastructure using the routing protocols like EIGRP, OSPF & BGP.

●Implementation of Access Lists for allowing/blocking desired traffic.

●Configuring VLANs/routing/NATing with the firewalls as per the network design.

●Responsible for Cisco ASA firewall administration, Rule Analysis, Rule Modification.

●Configuration and maintenance of PIX and ASA firewall systems.

●Good knowledge in systems integration, software hardware emulation experience.

●Worked on change management documentation of Network infrastructure design using Microsoft Visio.

●Perform setup of test scenarios, both hardware and software components, and perform troubleshooting.

●Experience working in Datacenter environment, configuration changes as per the needs of company.

●Worked on Citrix NetScaler Access Gateway.

●Manage project task to migrate from Cisco ASA firewalls to Check Point firewalls

●Configured and performed troubleshooting on link state protocols like OSPF in single area and multiple areas.

●Redesigned Internet connectivity infrastructure for meeting bandwidth requirements.

●Configuring, implementing and troubleshooting VLAN’s, VTP, STP, Trunking, Ether channels.

●Designing, implementing LAN/WAN configurations on Cisco 5K, catalyst 6500 switches.

●Installing, configuring Cisco Catalyst switches 6500, 4948, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design.

●Experience in configuring, upgrading and verifying the NX-OS operation system.

●Experience working with Nexus 7010, 5020, 2148, 2248 switches.

●Experience configuring Virtual Device Context in Nexus 7k series switch.

●Strong knowledge on networking concepts like TCP/IP, Routing and Switching.

●Designed, configured, implemented site-site VPN on cisco ASA 5500 firewall.

●Implemented, configured redundancy protocols HSRP, VRRP, GLBP for Default Gateway Redundancy.

●Worked in projects converting P2P circuits into MPLS circuits, commissioning and decommissioning of the MPLS circuits for branch offices.

●Configuring and resolving various OSPF issues in an OSPF multi area environment,

●Implemented, configured BGP WAN routing, converting OSPF routes to BGP (OSPF in local routing).

●Expertise in maintenance of layer2 switching tasks which advocate VLAN, VTP, STP, RSTP, PVST, RPVST, configuring of ether channel with LACP and PAGP along with troubleshooting of inter-VLAN routing.

●Packet capturing, troubleshooting on network problems with Wireshark, identifying and fixing problems

●Implementing, configuring, and troubleshooting various routing protocols like RIP, EIGRP, OSPF, and BGP.

●Performing network monitoring, providing analysis using various tools like WireShark, Solarwinds etc.

Environment: Cisco 6506/4948/4510 switches, Cisco 3660/3845/7609 Routers, VLAN, Checkpoint, F5 Load Balancers, OSPF, RIP, RIRP, BGP, MPLS, HSRP, VRRP, GLBP, ASA 5500,Nexus 2K,5K,7K.

Gen Re, Stamford, CT March 2012 to Dec 2013 Sr. Network Engineer

Responsibilities:

Working with Network Design and implementation teams on various projects across North America and South America.

Experience with manipulating various BGP attributes such as Local Preference, MED, Extended Communities, Route-Reflector clusters, Route-maps and route policy implementation.

Experience with design and implementation of Data center migration

Deploying and decommission of VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices.

Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.

Configured CIDR IP RIP, PPP, BGP, MPLS and OSPF routing.

Assisted in MPLS migrations, implemented a backup for the existing WAN connection using site-to-site IP sec VPN tunnels.

Configuring and installing 6500, 4500 in Campus networks.

Knowledge and experience with Citrix NetScaler responder policy configuration and Citrix NetScaler Access Gateway configurations.

Experience with WCS predictive maps and RF Engineering Planning.

Switches Replace branch hardware with new 2851 routers and 2960 switches.

Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.

Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/GRE to GetVPN.

Lead Engineer for Network refresh project for Multinational insurance company. Providing remote assistance for replacing exiting switches with new Cisco switches.

Configuring routing protocols OSPF, EIGRP,RIP, MPBGP, LDP and BGPV4

Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalyst

Build Logical design and Implementation of Wireless Solution

Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability

Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.

Deploying and decommissioning Cisco switches and their respective software upgrades.

Performing the ACL requests change for various clients by collecting source and destination information from them.

Maintained complex LAN/WAN networks with several VLANS and provided support for routing protocols and also providing secure sessions over internet using IPSec and SSL encryption.

Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.

Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations

Performing troubleshooting on slow network connectivity issues, routing issues that involves OSPF, BGP and identifying the root cause of the issues.

Worked on migration of existing PIX firewall to ASA firewall, PIX OS upgrade from 6.3 to 7.0.

Design and Implement DMZ for FTP, Web and Mail Servers with CISCO PIX 506, PIX515

Building the VPN tunnel and VPN encryption.

Involved in Configuration of Access lists (ACL) on ASA firewall for the proper network routing for the B2B network connectivity.

To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.

Provided proactive threat defense with ASA that stops attacks before they spread through the network.

Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls.

Troubleshoot the Network Issues onsite and remotely depending on the severity of the issues.

Performed Break Fix support through driving to different buildings, identifying the root cause of the hardware issues with switches, routers.

Design, implementation and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.

Worked with creating VIP (virtual servers), pools, nodes and applying iRules for the virtual servers like cookie persistency, redirection of the URL.

Created Visio Dean / Visio Documentation to give complete picture of network design for each building.

Experience in Configuring, upgrading and verifying the NX-OS operation system.

Environment:Cisco 2948/3560/4500/3560/3750/3550/3500/2960 6500 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco Nexus 7K/5K, Cisco ASA 500, Checkpoint, windows server 2003/2008: F5 BIGIP LTM,RIP,OSPF,BGP,EIGRP,LAN,WAN,VPN,HSRP

Cox Communications, Atlanta, GA Jan 2011 to Feb 2012

Sr. Network Engineer

Responsibilities:

Configured RIP, PPP, BGP and OSPF routing, and Involving in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies, and Creating and provisioning Juniper SRX firewall policies.

Identify, design and implement flexible, responsive, and secure technology services

Experience with Firewall Administration, Rule Analysis, Rule Modification

Implemented Positive Enforcement Model with the help of Palo Alto Networks.

Documented new VPN enrolments in a database and create standard procedures for further improvement.

Troubleshoot traffic passing managed firewalls via logs and packet captures

Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.

Worked on F5 load balancing in F5, SSL/VPN connections.

Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.

Created standard access lists to allow SNMP, NTP and logging servers.

Configure VRRP & GLBP and VLAN Trunking 802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.

Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.

experience on Tier II ISP Routing Policies.

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Responsible for Checkpoint and Cisco ASA firewall administration across global networks.

Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.

Co-ordinated with the Data Network and Security team and came up with possible solutions.

Work on Physical site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book.

Provided proactive threat defense with ASA that stops attacks before they spread through the network.

Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.

Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO

Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.

Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.

Estimated Project costs and created documentation for project funding approvals.

Environment: Cisco 3750/3550/3500/2960 switches, Cisco ISE and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, Palo Alto,Cisco Nexus7K/5K.

Mascon, Hyderabad, India June 2010 – Dec 2010

Jr Network Engineer.

Responsibilities:

Worked on Cisco routers 7200, 3700 and Cisco switches 4900, 2900

Key contributions include troubleshooting of complex LAN/WAN infrastructure that include

Configured Firewall logging, DMZs & related security policies & monitoring

Creating Private VLANs & preventing VLAN hopping attacks & mitigating spoofing with snooping & IP source guard

Installed and configured Cisco PIX 535 series firewall and configured remote access IPSEC VPN on Cisco PIX Firewall.

Enabled STP Enhancements to speed up the network convergence that include Port-fast, Uplink-fast and Backbone-fa

Establishing VPN Tunnels using IPSec encryption standards and also configuring and implementing site-to-site VPN, Remote VPN.

Configured network access servers and routers for AAA Security (RADIUS/ TACACS+)

Other responsibilities included documentation and change control

Responsible for Configuring SITE_TO_SITE VPN on Cisco Routers between Head Quarters and Branch locations

Implemented the security architecture for highly complex transport and application architectures addressing well known vulnerabilities and using access control lists that would serve as their primary security on their core & failover firewalls

Installation & configuration of Cisco VPN concentrator 3060 for VPN tunnel with Cisco VPN hardware & software client and PIX firewall

Involved in troubleshooting of DNS, DHCP and other IP conflict problems

Used various scanning and sniffing tools like Wire-shark.

Experience with Infoblox technologies.

Hands on Experience working with security issue like applying ACL’s, configuring NAT and VPN

Documenting and Log analyzing the Cisco PIX series firewall

Configured BGP for CE to PE route advertisement inside the lab environment

Spearheaded meetings & discussions with team members regarding network optimization and regarding BGP issues.

Vsoft, Hyderabad, India Jan 2008 to May 2010

Jr Network Engineer

Responsibilities:

Provided estimated bandwidth requirements for data replication, to best determine adequate timing for migration service levels

Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalyst

Switches Replace branch hardware with new 2851 routers and 2960 switches.

Implemented WLAN Aruba Wireless Access Points and its Controllers at various corporate sites fort 11n Infrastructure and its legacy technologies.

Experience in working with Cisco Nexus 5000 series switches for data center.

Configured OSPF on CISCO devices with multiple routing processes and redistributed them. Tested and hands on experience in multi area OSPF topologies.

Configuring, managing and troubleshooting networks using routing protocols like RIP, EIGRP and OSPF (Single Area and Multi Area).

Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client.

Monitor, troubleshoot, test and resolve Frame Relay, ATM, MLPPP, PPP, and Dial-up.

Configuring/Troubleshoot issues with the following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 series), to include: bridging, switching, routing, Ethernet, NAT, and DHCP, as well as assisting with customer LAN /MAN, router/firewalls.

Wrote IOS and CAT OS upgrade procedures and Pre/Post checks for customer production upgrades.

Excellent Troubleshooting Skills and Customer Centric approach.

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.

Configuring Vlan’s, VTP’s, enabling trunks between switches.

Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

Assisted in network engineering efforts consistent with the infrastructure of an Internet Service Provider and support of such network services. Helped in designing and implementation of VLAN for the new users.

Installation and Configuration of various types of Personal Computers and Printers. Installation of different operating systems on Intel based PC's.

Installed Hard disks, Floppy drives, CD Drives, Sound Blaster cards, CPU, Memory, Power supply unit, Network card, Video graphics card, Hard disk controller card on PC systems.

Troubleshooting of personal computers. On line Support to customers concerning their computer problems.

Contact this candidate