Krishna V

ac33an@r.postjobfree.com

443-***-**** *866

Network Engineer with 7+ years of experience in Design, Implementation, Administration, Operations and Troubleshooting IP networking technologies.

Extensive experience in Configuration and troubleshooting of routing protocols such as OSPF, RIP, EIGRP, BGP, LDP, MPLS

Experience in implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, STP, RSTP, MST, Ether Channel, ACLs.

Experience in IOS, IOS-XR, NX-OS upgrades/downgrades on 7600, ASR9k and Nexus 7k devices.

Implemented redundancy with HSRP, VRRP, GLBP, Ether channel technology (LACP, PAgP).

Performed various tests such as Scale testing, Convergence testing, Failure Recovery testing on Cisco Routers/Switches using IXIA, Spirent test equipment to generate end-to-end traffic flows

Extensive experience in testing various software codes in lab, raising bugs and working with Vendors such as Cisco, Juniper to get the fixes and validate them.

Experience in BMC Remedy tool to raise service change requests and work on assigned tickets

Working knowledge on Juniper M320, MX960, T640 devices.

Worked on Production Migrations from 7613 to ASR 9010 Routers.

Experience in preparing MOP’s to implementing production changes during Maintenance windows. Also on call during night/weekends and troubleshooting escalations.

Worked on Nexus 7010, 5K series (5548, 5020 and 5010), FEX (2248, 2232) and deployed VPC, VDC and OTV and successfully implemented VSS on the Cisco catalyst switches.

Worked on F5LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Configured policies on F5 ASM Created rules and scripts for automation of the environment.

Configuring, Administering and troubleshooting the Checkpoint and ASA firewall.

Worked with the installation of Palo Alto firewall, migrated with a team from predominantly Checkpoint environment to Palo Alto global solution.

Expertise in Migration of Firewalls from ASA to Checkpoint, Checkpoint to Palo alto and Vice Versa

Supporting and troubleshooting Checkpoint/Cisco site-to-site/IP Sec VPN functionality.

Checkpoint – R60/R65/R70/R75 software version with hardware Checkpoint 11000, 21000 series with VSX environment.

Strong hands on experience on PIX Firewalls, Palo alto, ASA (5540/5550) Firewalls. Implemented Security Policies using ACL, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS)

Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.

Professional Certification:

Cisco Certified Network Associate

Cisco Certified Network Professional

TECHNICAL SKILLS:

Routers and Switches

Cisco Switches (2900, 2950, 3550, 5500, 6500, 6509, 6513), Cisco routers (2600, 2800, 3825, 7200, 7204, 7206, 7600), ASR 9k, Nexus 7k, 5k, 2k

Protocols

RIP, OSPF, EIGRP, IS-IS, BGP, SNMP, HTTP, FTP, TFTP, HTTP, DHCP, SMTP, ICMP

WAN Technologies

Frame Relay, ISDN, PPP, ATM, MPLS, Channel & Leased lines

LAN Technologies

Ethernet, TCP/IP, CDP, STP, RSTP, VTP, VLAN, Trunks, Ethernet channel, MPLS.

AAA Architecture

TACACS+, RADIUS, Cisco ACS.

Firewalls

ASA, PIX, SRX, Watch guard, ASDM, CSM, Checkpoint

Operating Systems

Windows 2000/2003/2008, windows XP/7, LINUX, Redhat, UNIX, Macintosh

Servers

Domain servers, DNS servers, WINS servers, Mail Servers, Proxy Servers, Print Servers, Application servers, FTP Servers

Load balancer

ACE, F5 Load Balancer LTM & GTM series.

Monitoring Tools

Wireshark, Fiddler, Microsoft Network Monitor, solar winds and some sniffers

Cloud Technologies

Amazon Web Services (AWS)

Testing Tools

IXIA, Spirent

Professional Experience:

Safeway, California Sep 2016 – Till date

Designation: Sr. Network Engineer

Responsibilities:

Design, Configuration, Implementation and Operational support of routing protocols in complex environments including IS-IS, OSPF, BGP, MPLS on Cisco ASR 9010, CRS-1, 7600 series Routers

Worked on layer 2 protocols such as STP, VTP, RSTP, PVSTP, MST and other VLAN troubleshooting issues and configuring Cisco 6500 series switches from scratch

Was on-call during nights, weekends and involved in troubleshooting escalations.

Extensive experience in developing MOP’s and implementing changes during Maintenance windows.

Worked on production nodes Migrations from 7613 to ASR 9010 Routers.

Experience in BMC Remedy tool to raise service change requests and work on assigned tickets.

Experience in configuration and troubleshooting various OSPF issues including neighborship, LSA types, Loop Free Alternate (LFA) for both box and triangle topologies.

Worked on redistribution between OSPF and BGP including route-policies, communities for more granularity.

Provided redundancy in a multi homed BGP network by tuning attributes such as AS-path.

Enable STP attack mitigation (BPDU Guard, Root Guard), using MD5 Authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed.

Performed code upgrades, hardware upgrades, capacity augmentation on 10G line cards on ASR 9010 Routers

Involved in configuring Juniper SSG-140, SRX-240, and Cisco ASA 5585.

Configured and maintained VPCs with Nexus7010 and 5548 in the network. In addition, configured and maintained VDCs in 7010 switches, maintained VRFs in those separate VDCs.

NX-OS upgrade in Nexus 7010 through ISSU (In service software upgrade)

Worked on JuniperMX960, M320, T640 routers and EX 3200 series switch.

Heavy experience in upgrading/downgrading IOS-XRCRS-1, ASR9k Routers. Performed upgrades from 4.3.1/4.3.3 to 5.3.1 Release.

Very good understanding of Hardware of CRS Routers like LCC [Line Card Chassis], FCC [Fabric Card Chassis], cabling from LCC to FCC, Fan trays, power modules etc.

Designing MPLS VPN and QoS for architecture using Cisco multi-layer switches.

Migration from ASA to Palo Alto firewall and ASA to Checkpoint firewall

Configuring Overlay Transport Virtualization (OTV) on Nexus 7k,2k

Tested new software version before upgrading in production routers, performed various tests such as Scale testing, Regression testing, Convergence testing etc using testing tools IXIA, Spirent to generate end-to-end traffic flows.

Configured Cisco ASA 5510 for VPN Network Access Control integration with Cisco ISE (Inline PEPs).

Was part of team responsible for Cisco ASA firewall administration in the network

Implemented firewall rules in Palo Alto firewalls using Panorama for one of the environment.

Deploying the policies on firewall using the Checkpoint’s Smart Console Manager and Smart Dashboard.

Troubleshoot the FW related issues by using the Checkpoint’s client software SmartLog and Smartview Tracker.

Disney, Florida Dec 2015– Aug 2016

Designation: Sr. Network Engineer

Responsibilities:

Installed, Configured and maintained Cisco routers such as ASR 9010, 7600 series, 3800 series, 3700 series, 2800 series, Cisco switches such as Nexus 7k,5k, 2k,6500, 3750, and 4500 and Juniper devices such as M320, MX960, T640.

Configuring and troubleshooting of routing protocols such as OSPF, BGP, LDP and MPLS

Scheduled maintenance of Cisco 6509 switches so that there are no Orphan ports in the network and all Users to be dual homed so that they have sufficient redundancy.

Was on-call support during rotating shifts at nights/weekends

Developed MOP’s to deploy new features in production during maintenance windows.

Hands on experience in configuring VDC, VPC and FCOE, upgrading NX-OS for Nexus Family Switches.

Experience with configuring Nexus 2000 Fabric Extender (FEX) as a remote line card (module) for the Nexus 5k Switches.

Coordinated with senior engineers with BGP/OSPF routing policies and designs, worked on implementation strategies for the expansion of the MPLSVPN networks.

Provide reports on a weekly basis of all system design and maintenance activity

Implementing and maintaining Network Management tools (Solar Winds, Cisco Works)

Experience working with Junos OS on Juniper devices such as M320, T640, MX960

Tested various EBGP attributes such as community, Local preference, and extended community.

Performed Convergence testing with various triggers like Line Card OIR, SPA OIR, and Router reload

Setup end-to-end IXIA traffic flows for latency and packet drop calculation.

Experience with Palo alto Network firewalls such as security NAT, Threat prevention & URL filtering

Configuring Virtual Chassis for Juniper switches EX-4200, Firewalls SRX-210

Experience in Installation, configuration, and troubleshooting of Checkpoint Firewalls

Backup and restore of checkpoint Firewall policies, Experience in Firewalls policies provisioning.

Installed and configured four PIX 525 and two ASA 5505 in customer locations. In addition to that, two PIX firewall configured for the Guest access

Adding and removing checkpoint firewall policies based on the requirements.

Engaged with vendors to resolve equipment issues and identify future needs

Configured STP for loop prevention and VTP for Inter-VLAN Routing.

Perform Firewall OS upgrades using CLI, Splat and Voyager GUI.

Coordinate activities between departments to ensure uninterrupted business operation

Implemented two F5’s in Active/Standby setups on BIG-IP 10.2.4.

Involved in Configuration of Access lists (ACL) on checkpoint firewall for proper network routing for the B2B network connectivity

Velocis Systems, Bangalore Jan 2014 – May 2015

Designation: Network Engineer

Responsibilities:

Provided technical assistance for LAN/WAN management and troubleshooting complex customer issues using Network monitoring tools such as Solar winds.

Configuration of 7609, 7606 Routers with OSPF, BGP and catalyst 6505, 4500, 3550 switches with various Layer 2 features such as VLAN, VTP, STP, RSTP, Ether-Channels

Fine-tuned OSPF metrics to avoid routing loops and ensure redundancy in the network

Experience configuring Cisco switches for new site deployments, upgrades and staging of new hardware.

Configuration and troubleshooting redundancy protocols like HSRP, VRRP

Performed code upgrades/downgrades on Cisco, Juniper devices in maintenance windows.

Tested new features in lab environment before rolling out into production, Heavy usage of test tools such as Ixia, Spirent to generate end-to-end traffic flows during various phases of testing

Experience in configuration and troubleshooting of Layer 3 Routing protocols in Junos OS on M320, T640, MX960 devices

Monitored Multi-customer ISP network and troubleshooting issues in a 24 X 7 environment.

Provide design and SDN/NFV networking support using Open-Stack, Juniper Contrail and Big Switch Networks

Juniper Contrail SDN Cloud Computing Open Networking Open flow/ODL

Responsible for the secure development lifecycle environment form NX-OS to Application Centric Infrastructure (ACI) in Data center, implemented in the lab environment.

Startup Splunk Syslog for all CDC Cisco Routers/ Switch including F5’s (LTM/GTM) Analyze intrusion detection system (IDS) and intrusion prevention system (IPS). Identify detection methods and techniques such signature based detection and anomaly based detection method.

Configuration, Troubleshooting and Maintenance of Palo Alto Firewalls (160+ firewalls) - PA200, PA2000 series, PA3000 series, PA4000 series and PA5000 series.

Worked on Blue Coat Proxy SG to safeguard web applications (Black listing and White listing of web URL) in extremely untrusted environments such as guest Wi-Fi zones

Application Load Balancing with F5 BIG-IPLTM and GTM devices, Cisco ACE, and Cisco CSS appliances.

Axis Bank, Hyderabad Apr 2012 – Nov 2013

Designation: Network Operations Engineer

Responsibilities:

Involved in configuring Cisco routers and switch administration, familiar with enterprise level Cisco Routers such as 7200 series, 3800 series, 3700 series, 2800 series, and Cisco catalyst series switches like 6500, 3750, and 4500.

Worked on different networking concepts and routing protocols like BGP, EIGRP, OSPF and other LAN/WAN technologies.

Configuring and troubleshooting of routing protocols such as OSPF and BGP for effective communication.

Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS)

Implemented and configured BGP, BGPv6, using policy route-maps, prefix list to regulate advertise routes from specified Autonomous Systems. Verified BGP neighbor establishment and prefix received and converged with transit providers.

Configuring, Troubleshooting and Maintenance of Routing protocols such as OSPF, BGP and Switching protocols such as VLAN, VTP, STP etc on Cisco/Juniper devices.

Experience in troubleshooting VLAN, VTP, STP, Access lists, IP subnet issues and update IOS images and other hardware installations

Pre-Change Window work (Setting up ISE by adding Network Devices, evaluating risk of enabling authentication on a switch) in implementing ISE Monitor Mode

Installation and configuration of Citrix NetScaler MPX 8200.

Designed, implemented and maintained WAN technologies like DWDM, MPLS, VPLS and tunneling technologies.

Expert level Knowledge on working with Wireless LAN Controller's, Cisco NCS, Cisco AP's, LWAPS, Standalone AP's and Mesh AP's.

Implemented Positive Enforcement Model with the help of Palo Alto Networks.

Expert level Knowledge on working with Wireless LAN Controller's, Cisco NCS, Cisco AP's, LWAPS, Standalone AP's and Mesh AP's.

Implementation configuration and troubleshooting of Check Point Firewall R 71

Designed, validated and implemented LAN, WLAN & WAN solution to suite client's needs.

Worked on Palo alto Firewalls including PA 5000 and PA 3000 series

Configuring rules and Maintaining Palo alto Firewalls & Analysis of Firewall logs using various tools

Implemented firewalls using Cisco ASA, Cisco PIX, Check Point Provider-1 /SiteManager-1 NGX R65, Firewall-1/VPN-1 NGX R65 Gateways, Secure Platforms.

Pioneer Broadband, Hyderabad June 2010 – Mar 2012

Designation: Network Administrator

Responsibilities:

Installed, Configured OSPF, BGP on Cisco Routers and implemented various Layer 2 protocols such as VLAN, VTP, STP, RSTP on Cisco Switches

Worked as a Level 1 Support engineer and had direct interaction with customer related to various issues.

Worked with senior members of the team to review implementation changes in production

Worked with customers in troubleshooting issues related to connectivity, STP, VLANs, Inter-VLAN routing, VTP, Ether channels, Layer 2/3 switching, log messages.

Installation and configuration of Citrix access gateway.

Configuring IPSEC VPN on SRX series firewalls.

User admin on the firewalls, adding, deleting users as they come, and go.

Work in UNIX environment, verification of Logs using UNIX commands, working on Putty.

Worked on circuit speeds ranging from OC-3, OC-12, OC-192 and OC-768.

Experience in various IOS and Junos OS upgrades/downgrades

Racking and Stacking of Cisco, Juniper Switches.

Troubleshooting various application issues with respect to F5.

Configured and managed networks using L3 protocols like RIPv2.

Designed and implemented remote dial up solution for clients

Upgrading and managing Linux Kernel on Red Hat Linux 5 &6 & ESX Reboots.

Efficient in cabling as per co-location contracts with loop-back testing, including all DS1, DS3, T1, T3, CAT 6 and CAT 5 connections as per defined cabling procedures.

Contact this candidate