HARSHIL

Sr. Network Engineer

acrnfp@r.postjobfree.com

732-***-****

CCNP certified professional, delivered hands in up growing IT industry constantly for more than 7 years as Network engineer, by performing Network analysis, design, Implementing, capacity planning with focus on performance tuning and support of large Networks.

SUMMARY

Hands on experience with installation, design, configuration, administration and troubleshooting LAN/WAN infrastructure with Cisco/Juniper Routing, Switching and Security with Cisco hardware/software experience.

Profound knowledge on various WAN technologies like E1/T1/E3/T3, HDLC, Frame-Relay and PPP.

Hands on experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 and Nexus 2000, 5000, 6000, 7000 series switches and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers, Load Balancers & Cisco Firewalls.

Expertise in Configuration of Virtual Local Area Networks (VLANS) using Cisco routers and multi-layer Switches and supporting STP, RSTP, PVST, RPVST along with trouble shooting of inter-VLAN routing and VLAN Trunking using 802.1Q.

Expert level knowledge of troubleshooting, implementing, optimizing and testing of static and dynamic routing protocols such as EIGRP, OSPF, BGP,RIP V1,V2 ability to interpret and resolve complex route table problems and implemented strategies for the expansion of MPLS VPN network.

In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, SONET POS OCX / GigE circuits, Firewalls.

Proficiently implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, Route Maps and route manipulation using Offset-list.

Hands on experience in deployment of GRE tunneling, SSL, Site-Site IPSEC VPN and DMVPN.

Managed inventory of all network hardware, Management and Monitoring by use of SSH, Syslog, SNMP, NTP.

Working knowledge with monitoring tools like Solar Winds & network packet capture tools like Wire-shark and Opnet.

Strong hands on experience on PIX Firewalls, ASA (5540/5550) Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).

Expertise in OSI layer model as well as TCP/IP.

Have knowledge on various advanced technologies like VOIP, H.323, SIP, QOS, IPv6, Multicasting, and MPLS.

Knowledge in implementing and configuring F5 Big-IP LTM and GTM load balancers.

Experienced in Troubleshooting for connectivity and hardware problems on Cisco Networks.

Excellent written and oral communication skill with quick learning personality. Ability to handle multiple tasks.

Work independently as well as team member.

TECHNICAL SKILLS

Switches

Nexus 2K/5K/7K, Cisco Catalyst 2900, 3500,3700,6500, 4500, 3850,3560, 3750, 2960

Switching

LAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switch, Ether channels, Transparent Bridging.

Routers

Cisco 7600, 7200, 3800, 3600, 2900, 2800, 2600,1800,1700

Routing

OSPF, EIGRP, BGP, RIP v1/v2, PBR, Route Filtering, Redistribution, Summarization, and Static Routing.

LAN

Ethernet (IEEE 802.3), Fast Ethernet, Gigabit Ethernet

WAN

PPP, HDLC, Channelized links (T1/T3), Fiber Optic Circuits, Frame Relay

Network Security

Cisco ASA 5500-X, ACL, IPSEC, F5 Load Balancer, Checkpoint

Load Balancer

Cisco CSM, F5 Networks (Big-IP) LTM and GTM.

Gateway Redundancy

HSRP and GLBP

WAN Optimizer

Riverbed Steelhead Appliance

DHCP and DNS

Infoblox

Various Features & Services

IOS and Features, IRDP, NAT, CDN, SNMP, SYSLOG, NTP, DHCP, CDP, TFTP, FTP.

AAA Architecture

TACACS+, RADIUS, Cisco ACS.

Network Management

Wireshark, SNMP, Netflow, Solarwinds, VMware, Opnet

Operating System

Windows 7/ XP, MAC OS X, Linux, UNIX, Windows Server 2003/2008.

Professional EXPERIENCE

CVS Caremark, Providence, RI Jun 2014 to till date

Sr. Network Engineer

Responsibilities:

Deploying and decommissioning Cisco switches and their respective software upgrades.

Experience with design and implementation of Data center migration.

Worked on migration of existing PIX firewall to ASA firewall, PIX OS upgrade from 6.3 to 7.0.

Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.

Deploying and decommission of VLANs on core Nexus 7000 and its downstream devices.

Assisted in MPLS migrations, implemented a backup for the existing WAN connection using site-to-site IP sec VPN tunnels.

Involved in the deployment of content delivery networks (CDN).

Switches Replace branch hardware with new 2851 routers and 2960 switches.

Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.

Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPsec/GRE to GetVPN.

Configuring HSRP between VLANs, Configuring Ether-Channels, and Port Channel on 6500 catalyst.

To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.

Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, Spanning Tree, 802.1q. Configured IP access filter policies.

Involved in configuring and implementing Checkpoint VSX firewalls.

Performing the ACL requests change by collecting source and destination information from them.

Supported wireless networking team working on Aruba wireless.

Maintained complex LAN/WAN networks with several VLANS and provided support for routing protocols and also provided secure sessions over internet using IPsec and SSL encryption.

Performing troubleshooting on slow network connectivity issues, routing issues that involves OSPF, BGP and identifying the root cause of the issues.

Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations.

Design and Implement DMZ for FTP, Web and Mail Servers with CISCO PIX 506, PIX515

Building the VPN tunnel and VPN encryption.

Involved in Configuration of Access lists (ACL) on ASA firewall for the proper network routing for the B2B network connectivity.

Environment: Cisco Catalyst 2960/3750/4500/6500 Series Switches, Cisco 2800/2900/3000 Series ISR’s and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco Nexus 7K, Cisco ASA 5500, Checkpoint, windows server 2003/2008, F5 BIGIP LTM/GTM, ACL, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.

Home depot, Atlanta, GA Feb 2013 – May 2014

Network Engineer

Responsibilities:

Experienced Firewall Administration, Rule Analysis and Rule Modification.

Creating and provisioning Juniper SRX firewall policies.

Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.

Troubleshoot traffic passing managed firewalls via logs and packet captures.

Configured RIP, PPP, BGP and OSPF routing.

Provide support in configuring network access servers and routers for AAA Security (RADIUS/ TACACS+).

Identify, design and implement flexible, responsive, and secure technology services.

Implementation of F5 GTM solutions

Worked on leveraging F5 LTMs & GTMs to improve web application delivery speed and replication.

Created LAB setup with 7k and 5K NEXUS switches for application testing.

Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.

Implemented Positive Enforcement Model with the help of Palo Alto Networks.

Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.

Created standard access lists to allow SNMP, NTP and logging servers.

Documented new VPN enrollments in a database and create standard procedures for further improvement.

Negotiate VPN tunnels using IPsec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.

Involved in working on various layer 7 protocols like DNS, HTTP.

Provided proactive threat defense with ASA that stops attacks before they spread through the network.

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Co-ordinated with the Data Network and Security team and came up with possible solutions.

Work on Physical site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book.

Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.

Monitoring and troubleshooting network issues between client site and 85 remote sites with legacy switches and routers.

Performed and presented network analysis as a part of network migration. Involved in knowledge transfer to vendors and provided them network support as required

Configuration and maintenance of EIGRP and BGP network on router 7200 and 6500 MLS.

Environment: Cisco3750/3550/3500/2960 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, Cisco Nexus7K/5K, ASA, Checkpoint, LAN, OSPF, BGP, RIP, EIGRP.

Bank of Oklahoma, Tulsa, OK Dec 2011 to Jan 2013

Network Engineer

Responsibilities:

Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO.

Experienced working with security issue like applying ACL’s, configuring NAT and VPN

Responsible for implementation and day to day operations of all associated hubs, routers, bridges, gateways and related equipment

Troubleshoot wireless backhaul network providing MPLS, PNNI, VPLS, Layer3 VPN, Layer2 VPN and ATM services to product carrying 160 GB traffic. Multi service routers that perform Layer 2 and Layer3 functionality.

Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.

Perform service assured upgrades on Multi Service router caring 160 GB traffic capacity. Troubleshoot and recover traffic outages within average recovery timeframe.

Collect crash info files from routers and execute system engineer command to analyze logs for root cause analysis (RCA), traffic affecting outages and trouble causing nodes.

Implemented the security architecture for highly complex transport and application architectures addressing well known vulnerabilities and using access control lists that would serve as their primary security on their core & failover firewalls

Build customer wireless network backhaul for root cause analysis of network using knowledge management solution.

Involved in documentation for WAN technologies T1/T3.

Test production and database in lab by rebuilding production network scenario to determine bug from router system.

Used Wire-shark as scanning and sniffing tools.

Delivered hand in Creating load balancing policies using BGP attributes like Local Preference, AS-Path, MED, Community etc.

Experience with Infoblox technologies.

Maintained LAN and gave support on Layer 1 and Layer 2.

Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

Environment: Cisco 2960/3550/3750 switches and Cisco 1200/7200/3845/2800 routers, LAN, WAN, infoblox, VPN.

IPCL, Gujarat, India Aug 2009 to Oct 2011 Networks and System Engineer

Responsibilities:

Configured OSPF on CISCO devices with multiple routing processes and redistributed them. Tested and hands on experience in multi area OSPF topologies.

Configuring, managing and troubleshooting networks using routing protocols like RIP, EIGRP and OSPF (Single Area and Multi Area).

Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client.

Monitor, troubleshoot, test and resolve Frame Relay, ATM, MLPPP, PPP, and Dial-up.

Configuring/Troubleshoot issues with the following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 series), to include: bridging, switching, routing, Ethernet, NAT, and DHCP, as well as assisting with customer LAN /MAN.

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.

Installation and Configuration of various types of Personal Computers and Printers. Installation of different operating systems on Intel based PC's.

Configuring Vlan’s, VTP’s, enabling trunks between switches.

Assisted in network engineering efforts consistent with the infrastructure of an Internet Service Provider and support of such network services. Helped in designing and implementation of VLAN for the new users.

Plans, coordinates, implements and supports the LAN / WAN hardware, software and Internet /Intranet integration network connectivity, diagnose network failures and resolve any problems.

Troubleshoot Frame Relay; T1, T3, IP and OSPF related router and circuit issues.

Documenting and Log analyzing the Cisco PIX series firewall.

Excellent Troubleshooting Skills and Customer Centric approach.

Environment: Cisco 2990/3550/6550 switches, Cisco 7200/3845/3600/2800 routers, EIGRP, RIP, OSPF, BGP, VPN, Ether Channels, and Sniffer.

Ontos information systems Pvt. Ltd, Gujarat, India Feb 2008 to July 2009

Jr. Network Engineer

Responsibilities:

Installed Hard disks, Floppy drives, CD Drives, Sound Blaster cards, CPU, Memory, Power supply unit, Network card, Video graphics card, Hard disk controller card on PC systems.

Troubleshooting of personal computers. On line Support to customers concerning their computer problems.

Involved in troubleshooting of DNS, DHCP and other IP conflict problems.

Responsible for reporting day to day operations of all associated hubs, routers, bridges, gateways and related equipment.

Configured BGP for CE to PE route advertisement inside the lab environment

Monitoring the network, troubleshooting network problems, implementing changes, communicating and working closely with vendors, customers, system administrators.

Spearheaded meetings & discussions with team members regarding network optimization and regarding BGP issues.

Plans, coordinates, implements and supports the LAN / WAN hardware, software and Internet /Intranet integration network connectivity, diagnose network failures and resolve any problems.

Responsible for LAN and internet connection file and print server.

Maintained and installed new internet connections for customers.

Validate existing infrastructure and recommend new network designs.

Created scripts to monitor CPU/Memory on various low end routers in the network.

Installed and maintained local printer as well as network printers.

Handled Tech Support as it relates to LAN & WAN systems.

Handled installation of Windows NT Server and Windows NT Workstations.

Maintained and installed new internet connections for customers.

Used various scanning and sniffing tools like Wire-shark

Environment: Cisco catalyst 2960/4550/5550 switch, Cisco 2880/3700/3880 router, LAN, MAN, BGP and DHCP.

EDUCATION

Bachelor of Engineering(BE)

Electronics and Communication Engineering

Gujarat Technological University

Vadodara, Gujarat, India.

Contact this candidate