Engineer Network
Resume:
Manoj T
Sr Network Engineer
**********************@*****.***
Professional Summary:
* ***** ** ********** ** Networking, including hands-on experience in providing network support, installation and analysis for broad range of LAN/WAN/MAN communication systems.
Successfully deployed Gigamon Appliances onsite according to the requirement.
Hands On experience Cisco IOS/IOS-XR/NX-OS, Juniper JUNOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4, MPLS.
In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.
Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.
Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.
Extensive work experience with Cisco Routers, Cisco Switches, Load Balancers and Firewalls.
Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000.
Hands on experience on network monitoring and analysis tools like, Packet sniffer, TCP DUMP and WireShark, Cisco Works, Riverbed, WireShark, Gigamon.
Worked on USP, SDM/HSS, SDM/DRA SDS 1360 COM for CVOIP,F5 Load Balancer, Gigamon and Inflobox, Bluecat and Bluecoat proxy
Responsible for Check Point and Cisco ASA firewall administration across global networks.
Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.
Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether-channel, STP, RSTP and MST.
Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
Spanning Tree, VLANs, 802.1Q, ACI.
Responsible for Check Point (Secure Platform R70) and Cisco ASA firewall administration across global networks.
Experience working on Voice Based Networks.
Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.
Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy.
Implemented Cisco Application Centric Infrastructure (ACI) as a solution for data centers using a Spine and Leaf architecture.
Security Product testing (Gigamon w/Fireeye,, Spirent Mu Dynamics/ Avalanche, Carbon Black Netwitness, etc.)
Successfully deployed all the Gigamon devices in onsite production.
Used Cisco ACI (Application Centric Infrastructure) SDN architecture to reduce operating costs, automate IT tasks, for greater scalability and visibility in a data center environment.
Experience in testing Cisco routers and switches in laboratory and deploy them on site production.
Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NAT with the firewalls as per the design.
Involved in Configuration of Access lists (ACL) on checkpoint firewall for the proper network routing for the B2B network connectivity
Created effective network security by migrating from Check Point FW-1 NG to ASA 5510 Firewalls
Designed and configured of OSPF, BGP on Juniper Routers and SRX Firewalls
Worked extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series
Knowledge in preparing Technical Documentation and presentations using Microsoft VISIO/Office.
Worked on MPLS while ensuring secure networking, improving the network performance by prioritizing network traffic and allocating bandwidth according to usage and service requirements.
Worked on Multicast to use the bandwidth more effectively while reducing the load on the sender.
Cisco ACI for provides a network that is deployed, monitored, and managed in a way that benefits different teams in the IT organization including SDN Network, and Security.
Configuring the Network Admission Control (NAC).
Excellent customer management/resolution, problem solving, debugging skills and capable of quickly learning, effectively analyzes results and implement and delivering solutions as an individual and as part of a team.
Education:
B. Tech in Electrical & Electronics Engineering from JNTU, from India.
Technical Skills:
Networking Technologies
LAN/WAN Architecture, TCP/IP, Frame Relay, VPN, VLAN, VTP, NAT, PAT, STP, RSTP, PVST, MSTP
Networking Hardware
Cisco Switches, Cisco Routers, ASA/Pix firewalls, Vmware, Ironport,Gigamon-TA10,HC2 devices
Routing Protocols
OSPF, IGRP, EIGRP, RIP, MPLS, IS-IS, BGP, Multicasting
Security Technologies
PAP, CHAP, Cisco PIX, Blue Coat
Network Monitoring
Cisco Works 2000, Wire Shark, HRPing, Gigamon w/fireeye,Solarwinds,Stealthwatch
Operating Systems
Windows 7, Vista, XP, 2000, LINUX, Cisco IOS, IOS XR
Routers
CISCO 2600, 2800,3600,3800,7200, Juniper M & T Series, Cisco CRS-1, CRS -3, GSR
Load Balancers
Cisco CSM, F5 Networks (BIG-IP), Citrix Netscalar
Capacity & performance
IXIA, Spirent, Cisco works, IPerf, IXChariot
Switches
CISCO 2900, 3500,4500,5000,6500, Nexus 7k,5k,2k
Switching
LAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing& Multi-layer switch, ether channels.
Gateway Redundancy
HSRP and GLBP
Firewalls
juniper net screen (500/5200), Juniper SRX (650/3600), Pix(525/535), ASA(5520/5550/5580), McAfee Web Gateway,Checkpoint (15400,12k Series).
AAA Architecture
TACACS+, RADIUS, Cisco ACS,RSA two factor Authentication
Features & Services
IOS and Features, HSRP, GLBP, IPAM IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP Management, Open Stack, IVR’s, HLD and LLD documents, Dell equal logics
Professional Experience:
Elavon, Sandy Spring, GA Jan 2017 – Present
Network Engineer.
Responsibilities:
Configured and deployed Gigamon devices from scratch in onsite production.
Extensive Knowledge on Mapping the rules in Gigamon according to the requirement. Deployed all the devices in various locations.
involved in accepting trace request from developer's team which involved tools like Gigamon Application Trans/OPNET and analyzing trace in Wireshark.
Deployed Gigavue-FM and VM on the TA10 and HC2 devices in SMT-HC0 and BPS.
Built site-to-site IPSec VPNs over Frame-relay & MPLS circuits on various models of Cisco routers to facilitate adding new business partners to new and existing infrastructures.
Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
Deploying and decommissioning Cisco switches and their respective software upgrades.
Configuring, troubleshooting and working with 2600, 2900, 3600, 3900, 7200, 7600 series Cisco Routers.
Working on Layer-2 Ethernet Switching deployment with technologies like STP, RSTP, PVST, RPVST along with troubleshooting of inter-VLAN routing and VLAN Trunking using 802.1Q. Hands on troubleshooting experience with First Hop redundancy protocol like HSRP and GLBP.
Well Experienced in configuring protocols HSRP, GLBP, ICMP, IGMP, PPP, PAP, CHAP, and SNMP.
Work with Load Balancing team to build connectivity to production and disaster recovery servers through F5 Big IP LTM load balancers
Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches
Implement changes on switches, routers, load balancers (F5 and CSS), wireless devices per engineers instructions and troubleshooting any related issues
Experience with communicating with different with different customers, IT teams in gathering the details for the project
Switching tasks include VTP, ISL/ 802.1q, IPSec and GRE Tunneling, VLANs, Ether Channel, Trunking, Port Security, STP and RSTP.
Route configuration and point code checks for System Technician and Network Technician.
Knowledge and experience of 802.11 a/b/g/n Ethernet standard for wireless Technology.
Worked with other team members in testing of the network architecture.
Implemented, configured redundancy protocols HSRP, VRRP, GLBP for Default Gateway Redundancy.
Implementing, configuring, and troubleshooting various routing protocols like RIP, EIGRP, OSPF and BGP etc.
Upgrade multiple Checkpoint firewall and NG on distributed NT environment. And manage network security policies which include access control, NAT, content security and authentication.
Performing network monitoring, providing analysis using various tools like WireShark, Solarwinds,Gigamon etc.
Responsible for Cisco ASA firewall administration, Rule Analysis, Rule Modification.
Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500.
Experience in migration of VLANS.
Primary responsibility is to design and deploy various network security & High Availability products like Checkpoint, Cisco ASA other security products
Installed various network hardware including concentrators, bridges, and hubs to establish communication connections with remote locations.
Environment: Cisco2948/3560/4500/3560/3750/3550/3500/2960/6500 Switches and Cisco 3640/1200/7200/3845/3600/2800 routers, Cisco 1200 Aironet Access Points, Cisco Nexus 7K/5K/2K, Cisco ASA 500, Checkpoint, Gigamon,windows server 2003/2008: F5 BIGIP LTM, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.
US Foods, Rosemont, IL Aug’15 – Dec’16
Sr. Network Engineer
Key Responsibilities:
Configuring Static, IGRP, EIGRP, BGP and OSPF Routing Protocols on Cisco1600, 2600, 2800, 3600, 7300 series Routers.
Responsible for entire company network infrastructure that includes Cisco Switches, Routers, Firewalls, Access Points, Servers and PBX.
Configured Site to Site IPsec VPN tunnels to peer with different clients and each of client having different specifications of Phase 1 and Phase 2 policies using Cisco ASA 5500 series firewalls.
Configured Easy VPN server and SSL VPN to facilitate various employees’ access internal servers and resources with access restrictions.
Prep and monitor over 2,000 handheld devices and Cisco Access Points
Provided day to day and remote support using Kayako ticketing system, supporting all users, building, upgrading, repairing, Windows 7 & 10 desktops, laptops, Microsoft Surface Pro's, iPads, iPhone and Android mobile phones, thin clients, MFP printers, Cisco VoIP phone system, VeriFone credit card machines, Topaz signature pads, access points, VPN, etc.
Building the VPN tunnel and VPN encryption.
Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN.
Network Security PCI Compliance policies on all Cisco/Gigamon/Riverbed.
Support, administration and installation of F5 Load Balancers, Gigamon Network TAP, FireEye IDS, VMWare ESX/NSX (vSphere, vCenter and SDN Network Long-Term Strategy planning), HP Blade Enclosures, Hitachi Storage Solutions and Office 365 Migration.
Deploying and decommission of VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices
Configuration and troubleshooting of CSM, integration with ASA devices.
Worked extensively in Configuring, Monitoring and Troubleshooting Cisco ASA 5500.
Provided proactive threat defense with ASA that stops attacks before they spread through the network.
Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls, CISCO PIX 506, PIX515.
Configured various LAN switches such as CISCO CAT 2900, 3550, 4500, 6509 switches and Access layer switches such as Cisco 4510, 4948, 4507 switches for VLAN, Fast Ether Channel configuration.
Implemented VPC, VDC on Nexus Switches and also configured FEX.
Implementation of Access Lists for allowing/blocking desired traffic.
Troubleshoot Network flow and application performance with Wireshark Gigamon and net flow.
Gigamon configuration for map updates on new TAP ports,Gigamon OS upgrades from v2.8 to v4.7.DoS.
Ability to analyze, configure and troubleshoot networks.
Troubleshoot end-to-end call flow issues in enterprise market involving various VoIP elements.
Configured inside ACL, outside ACL, inside/outside interfaces.
Configuring VLANs/routing/NATing with the firewalls as per the network design.
Responsible for the secure development lifecycle for Cisco's Nexus line of products, including Application Centric Infrastructure (ACI), Application Policy Infrastructure Controller (APIC) - Cisco's Software Defined Network (SDN) solution, as well as the Cisco Nexus 9k, 7k, 6k, 5k, 4k, & 2k.
Configured EBGP load balancing and ensured stability of BGP peering interfaces.
Worked on Route-Reflectors to troubleshoot BGP issues related to customer route prefixes also route filtering using Route-maps.
Support, administration and installation of F5 Load Balancers, Gigamon Network TAP, FireEye IDS, VMWare ESX/NSX (vSphere, vCenter and SDN Network Long-Term Strategy planning), HP Blade Enclosures, Hitachi Storage Solutions and Office 365 Migration.
Deploying and decommission of VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices
Configuration and troubleshooting of CSM, integration with ASA devices.
Worked extensively in Configuring, Monitoring and Troubleshooting Cisco ASA 5500.
Provided proactive threat defense with ASA that stops attacks before they spread through the network.
Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls, CISCO PIX 506, PIX515.
Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.
Oversees the activities that involve design/build/support of ACI Hosting and Operations network environments, to include Greenfield build of 2 data centers in Europe from Cisco ACI SDN Network to NX-OS SDN network.
Worked on datacenter migration of existing PIX firewall to ASA firewall, PIX OS upgrade from 6.3 to 7.0.
Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert datacenter PIX rules over to the Cisco ASA solution.
Mapped, Network Diagrams and physical identification in MS Visio.
Server load-balancing utilizing F5 LTM-BigIP, including, AFM, APM and ASM modules.
Install and configured S-JRSS Stack to include Juniper, Cisco, Palo Alto, Gigamon and Dell 380 series server equipment.
Maintaining and load balancing: web server traffic for customers using F5 load balancers.
Propose network redesign based on client hardware guidelines, network policies and individual site’s unique characteristics.
Environment: Cisco2948/3560/4500/3560/3750/3550/3500/2960/6500 Switches and Cisco 3640/1200/7200/3845/3600/2800 routers, Cisco 1200 Aironet Access Points, Cisco Nexus 7K/5K/2K, Cisco ASA 500, Checkpoint, Gigamon,windows server 2003/2008: F5 BIGIP LTM, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.
BBVA Compass, Birmingham AL Mar’12 – Jul’15
Sr. Network Engineer
Responsibilities:
Responsible for implementing, supporting, and maintaining 24x7 network services.
Coordinated efforts with Engineer’s to ensure all network devices conformed to defined network standards.
Configured and troubleshooting HSRP, BGP, OSPF, EIGRP, MPLS WAN, QoS and Route Maps.
Configured and maintaining Cisco 7200, 4400, 5000 and 6500 platforms.
Troubleshoot connectivity issues involving VLAN’s, OSPF, QoS etc.
Support, monitor and manage the IP network.
Experience with configuring Nexus 5000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 7000.
Performance monitoring of various applications and web servers to maintain quality of service and network stability.
Extensive Knowledge on Cisco ITIL.
Second level support for Help Desk for wireless applications, Cisco wireless access points, and symbol wireless scanners .
Install and support Aruba wireless project including access points in all locations
Maintained core switches, creating VLAN’s and configuring VTP.
Designed IP Addressing schemes, VLAN tables and Switchport assignments, Trunking and Ether-channel implementation.
Designing and configured Gigamon420for our network and deployed successfully in our data center as a replacement of fluke taps.
Performed system administration of the Orion Solarwinds ( SNMP ), Infoblox Grid Manager ( DHCP, IPAM and NTP ), NetMRI, Gigamon Traffic Visibility
Experience with F5 load balancers and Cisco load balancers (CSM, ACE and GSS).
Gained hands on experience with VLSM, STP, VTP, VLAN Trunking.
Implemented features in an IVR system that invites and notifies users of the IPICS system of certain events and enables them to join the system using their phones. Wrote CTI modules such as Cisco Contact Center IVR scripts on Cisco UCCX.
Installed and set up Cisco routers and switches according to deployment plans.
Configured/maintained Cisco 1121 Secure Access Control System for the Combat Information Transport System and test procedure red lines. Configured Palo Alto NEXGEN Firewall, HP switch, and Gigamon Taps.
Change management, monitoring network performance with network tools.
IP Distribution for existing devices and new devices as they were added.
Preformed maintenance on equipment as necessary, performing device upgrades, modification of configurations, password changes and diagnostic testing.
Deployed a large-scale HSRP solution to improve the uptime of collocation customers, in an event where a core router became unreachable.
Responsible for maintenance of multiple CheckPoint-1 firewalls on NT environment
Worked with vendors and Engineering team to test new hardware and procedures.
Prepared and maintained documentation using MS Visio.
Basic and advanced F5 load balancer configurations, general troubleshooting of the F5 load balancers.
Environment: Cisco4400/7200/3900/7600 Routers, Cisco3650, 6800/6500/3560 Switches, Nexus 7k/5k RIP, OSPF, BGP, EIGRP, LAN, WAN, Gigamon,CISCO ASA 5500, HSRP, VRRP, GLBP, VLAN, QoS, Wireshark, Solarwinds.
Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/2960 6500 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco Nexus 7K/5K, Cisco ASA5510, Checkpoint, Aruba Controllers 6000, 3600, 3400,650: windows server 2003/2008: F5 BIGIP LTM.
Accenture, India Jul’10 – Dec’11
Network Engineer
Responsibilities
Troubleshoot traffic passing managed firewalls via logs and packet captures
Configured and resolved various OSPF issues in an OSPF multi area environment.
Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.
Worked with telecom vendors in regards to network fault isolation.
Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.
Configured CIDR IP RIP, PPP, BGP and OSPF routing.
Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, MPLS, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
Management and Deployment on Checkpoint Firewall.
Use Checkpoint to establish Point-to-Point tunnels.
Ability to use NAT and Firewall security policies in Checkpoint.
Experience In working on Configuring Multicast.
Identify, design and implement flexible, responsive, and secure technology services
Experience with Firewall Administration, Rule Analysis, Rule Modification
Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
Deployed 7613 as PE and CE router and Configured and troubleshoot the Edge Routers.
Excellent troubleshooting knowledge on T1, T3, OC-3 and OC-12.
Configured egress and ingress queues for ISP facing routers using CBWFQ.
Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.
Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO
Estimated Project costs and created documentation for project funding approvals.
Environment: Net Flow, TACACS, EIGRP, RIP, OSPF, BGP, VPN, MPLS, CSM, SUP720, Ether Channels, Cisco 7200/3845/3600/2800 routers, Fluke and Sniffer, Cisco 6509/ 3750/3550/3500/2950 switches, Checkpoint firewalls (SPLAT).
Honeywell, India Sep’08 – Jun’10
System/Network Administrator
As a network administrator, my job was to setup the network routers and keep them up for work and responsible for the routing protocols of the routers.
Responsibilities:
Configured and supported TCP/IP networks.
Monitored the network with Cisco Works 2000.
Documented the design, implementation and troubleshooting procedures.
Configured and troubleshoot VLAN, VTP, STP and Trunks.
Responsible for procurement and installation of H/W, network drives and other IT infrastructure.
Network Administrator responsible for the full Planning, designing, installation and administration of the Corporate WAN (wide area network).
Worked on the datacenter environment, with routers and switches.
Configuration, Management, Troubleshooting of Network devices (Routers, Switches, Firewalls, Servers, DSL Modems etc.). Maintained the Telecommunication Connectivity using DSL and T1 Lines.
Maintained complex LAN/WAN networks with several VLANS and provided support for routing protocols.
Managed IP addressing and implemented IP Access Lists.
Evaluate and recommend inter-connectivity hardware, software, and services to fulfill various businesses needs as requirements develop.
Worked on Routers Cisco 2620, 3750 and 2950 Switches & Link sys wireless access points.
Environment: TCP/IP networks, Cisco Works 2000, VLAN, VTP, STP, Trunks H/W, network drives, DSL, T1 Lines LAN, WAN, VLANs, IP Access List, Cisco 2620, 3750, 2950 and Link sys.
Contact this candidate