Engineer Network
Resume:
Vivek
***************@*****.***
Qualification Summary
Around 8 + years of experience in Networking and Security, including hands-on experience in providing network support, installation and analysis for a broad range of LAN / WAN/MAN communication systems.
Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, EIGRP, RIP, BGP v4, MPLS.
Experience working on Cisco ASR 9001 & ASR 1006.
F5 BIG-IP application load balancing subject matter expert with particular concentration on layer 7 load balancing using I-Rule scripting in TCL.
F5 Big-IP load balancer configuration, layer 7 load balancing using I-Rules (TCL)
Hands on experience on windows server 2007,2008,2012.
Hands on experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 and Nexus 3000, 5000, 6000, 7000 series switches and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers, Load Balancers & Cisco Firewalls, Cisco ISE.
Hands on experience in configuring and supporting site-to-site and remote access Cisco, IPSec, VPN solutions using ASA/PIX firewalls, Cisco and VPN client.
Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy
Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
Responsible for Check Point and Cisco ASA firewall administration across global networks.
Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.
Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
Experience working with Nexus 7K, 5K, 2K devices.
Experience in testing Cisco routers and switches in laboratory and deploy them on site production.
Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.
Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.
Knowledge in preparing Technical Documentation and presentations using Microsoft VISIO/Office.
Excellent customer management/resolution, problem solving, debugging skills and capable of quickly learning, effectively analyzing results and implement and delivering solutions as an individual and as part of a team.
Expertise in creating groups and pruning traffic flow using VLAN, VTP, ISL, 802.1Q.
Working experience with REMEDY for ticket change management process.
Excellent in documentation and updating client’s network documentation using VISIO.
Core Competencies
Network Configuration: Advanced switch/router configuration (Cisco IOS access list, Route redistribution/propagation).
Routing Protocols: IGRP, EIGRP, OSPF, BGP v4, MP-BGP, IS-IS, RIP, Multicast
WAN Protocols: HDLC, PPP, MLPPP
Circuit switched WAN: T1/E1 – T3/E3/OCX (Channelized, Fractional & full).
Packet Switched WAN: ATM, FRAME RELAY, MPLS VPNs
Security Technologies: Cisco FWSM/PIX/ASDM, Nokia Checkpoint NG, Juniper SRX, Palo Alto,
Checkpoint, F5 Load Balancer, ASA firewall.
Cisco Routers: Cisco GSR 12416, 12418, Cisco 7200vxr, Cisco 3640, Cisco 3600, NCS6K, ASR, CRS
Redundancy and management: HSRP, VRRP, GLBP, RPR, NSF/NSR, Wireshark, Solarwinds, SNMP
Physical interfaces: Fast Ethernet, Gigabit Ethernet, Serial, HSSI, Sonet (POS)
Layer 2 technology: VLAN, HSRP, VRRP, GLBP, STP, RSTP, PVST+, MST, PVLAN, Optimizing STP (Port Fast, Uplink Fast, Backbone Fast, Root Guard, BPDU Guard),
Layer 3 Switching: CEF, MLS, Ether channel (PAGP & LACP, Load Balancing)
Switches: Catalyst 6500, MSFC, MSFC2, 7600, 3700, 3500
Operating Systems: Microsoft XP/Vista/7, UNIX, Linux (Red hat, Opens use, Fedora), Windows Servers 2003/2008Windows MS-Office. VMware ESX 5.1, VMware Vsphere client. Windows administrator with over 5 years of hands-on and multi-tasking experience, adept at handling multiple system operations, including installation, upgrade, configuration, administration and maintenance of windows systems.
Certifications : CCNA & CCNP
PROFESSIONAL EXPERIENCE:
Cisco Systems/Comcast, Mt. Laurel, NJ June 2015 to Currently
Network Engineer
Key Responsibilities:
Responsible with analysis and diagnosis of highly complex networking problems.
Hands on Experience with simulated networks in test labs to resolve highly complex problems and compatibility issues.
Performed Configuration on ASR 9K Pairs includes HSRP, Bundle Ethernet Configuration, Assigning DHCP profiles.
Supports with technology design conversations/collaboration/workshops.
Delivering subscription optimization business to maximize customer value.
Works on standard project documentation including detailed test plan for highly complex networks.
Provide Support and Generates network configurations from Low Level for highly complex networks.
Plans and executes highly complex Network Upgrade and Network Migration activity.
Assists customer (Comcast) with deployment and strategy of highly complex technology solutions
Troubleshoots and resolves highly complex customer network problems across a broad range of technologies.
Configuring/Installing Cisco ACI fabric networks.
Worked on Application Centric Policy (based on Cisco Application Policy Infrastructure Controller or APIC).
Worked on DNS Updates/Removals/New Adds via InfoBlox DNS Appliance.
Experience with Infoblox DNS appliances.
Implement Infoblox DNS appliance and run scripts as needed.
Familiar with managing Cisco Unified Call Center Managers, UNITY voicemail systems, H323 and SIP voice gateways.
In the process of creating the team SOP covering all operational and organizations policies and procedures.
Maintained network security technologies and services.
Provided support for internal network and system related trouble tickets.
Acts as a focal point for highly complex network problem resolution.
Hands on Experience with the ATP Testing with IOS-XR.
Working with Daily Basis Reporting (Network Profiler).
Interacted with clients and analyzed operational requirements.
Hands on experience with the VPN.
Supports Customer with day-to-day Issues with the Protocols.
Experience in installing and configuring DNS, DHCP servers.
Replace branch hardware with new 3900 routers and 2960 switches.
Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only), which involves new wan links.
Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IP Sec/GRE to Get VPN.
Responsible for layer 2 securities which was implemented using a dedicated VLAN ID for all trunk ports, setting the user ports to non-trunking, deployed port security when possible for user ports
Involved in configuring Juniper SSG-140 and Cisco ASA firewall.
Environment: CRS, ASA Firewall, ASR9K, NCS6K, Network Profiler, CEC, Cisco Jabber, Splunk Access, Outlook, LAN, VPN, SecureCRT, NOS specialization, SIP Gateways, Case Kwery Tool, IP Control tool, CRAN Provisioning tool, National Engineering Tool, BMC Remedy, Skype etc.
Synchrony financial, Stamford, CT April 2014 to May 2015
Sr. Network Security Engineer
Key Responsibilities:
Responsible for playing a strategic roll by developing the team into a group of highly technical engineers, in parallel implementing procedures and actions which will act as proactive measures in providing value to our customers.
In the process of creating the team SOP covering all operational and organizations policies and procedures.
Provide Tier-3 troubleshoot support on all managed devices and supported technologies.
Responsible for handling customer escalation issues and putting together after-action reports when necessary.
Responsible for design & management of Juniper Netscreen Firewalls, Juniper Switches, Cisco Switches.
Advanced knowledge in installation and configuration of Juniper Netscreen Firewall.
Implementation and administration of Juniper WX/WXC devices for WAN Traffic acceleration.
Migrated the team to a central email inbox so work inquiry become visible to the entire group.
Perform firewall migration projects between different technologies.
Perform Q/A testing on new network security technologies and appliances.
Provided support for infrastructure FW/IPS platforms.
Provided support for internal network and system related trouble tickets.
Managed corporate Checkpoint Firewall implementing security rules and mitigating network attacks.
Provide support with implementation team to implement the rules in CISCO SECURITY MANAGER.
Hand on experience with the application migrating and creating rules to be implemented.
Planned, evaluated, and implemented network security measures
Maintained network security technologies and services
Interacted with clients and analyzed operational requirements
Familiar with managing Cisco Unified Call Center Managers, UNITY voicemail systems, H323 and SIP voice gateways.
Developed and executed networking solutions for internal and external sources.
Environment: ASA Firewall, SIP Gateways, Checkpoint, Juniper SRX, CSM (Cisco Security Manager), Splunk Access, Skybox, Net Flow, LAN, VPN, Jabber, etc.
FRONTIER COMMUNICATION, INDIANA, IN July 2013 to April 2014 Network Design Engineer
Key Responsibilities:
Working with Network Design and implementation teams on various projects across North America and South America.
Experience with manipulating various BGP attributes such as Local Preference, MED, Extended Communities, Route-Reflector clusters, Route-maps and route policy implementation.
Experience with design and implementation of Data center migration
Deploying and decommission of VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices.
Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9K redundant pair.
Configured CIDR IP RIP, PPP, BGP, MPLS and OSPF routing.
Worked on Application Centric Policy (based on Cisco Application Policy Infrastructure Controller or APIC).
Configuring and installing 6500, 4500 in Campus networks.
Worked on DNS Updates/Removals/New Adds via InfoBlox DNS Appliance.
Experience with Infoblox DNS appliances.
Experience with WCS predictive maps and RF Engineering Planning.
Switches Replace branch hardware with new 2851 routers and 2960 switches.
Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.
Configuring routing protocols OSPF, EIGRP, RIP, MPBGP, LDP and BGPV4
Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalyst
Build Logical design and Implementation of Wireless Solution
Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability
Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
Deploying and decommissioning Cisco switches and their respective software upgrades.
Performing the ACL requests change for various clients by collecting source and destination information from them.
Maintained complex LAN/WAN networks with several VLANS and provided support for routing protocols and providing secure sessions over internet using IPSec and SSL encryption.
Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.
Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations
Performing troubleshooting on slow network connectivity issues, routing issues that involves OSPF, BGP and identifying the root cause of the issues.
Implemented Positive Enforcement Model with the help of Palo Alto Networks.
Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.
Worked on migration of existing PIX firewall to ASA firewall, PIX OS upgrade from 6.3 to 7.0.
Design and Implement DMZ for FTP, Web and Mail Servers with CISCO PIX 506, PIX515
Building the VPN tunnel and VPN encryption.
Involved in Configuration of Access lists (ACL) on ASA firewall for the proper network routing for the B2B network connectivity.
To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.
Provided proactive threat defense with ASA that stops attacks before they spread through the network.
Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls.
Troubleshoot the Network Issues onsite and remotely depending on the severity of the issues.
Performed Break Fix support through driving to different buildings, identifying the root cause of the hardware issues with switches, routers.
Design, implementation and operational support of routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.
Worked with creating VIP (virtual servers), pools, nodes and applying iRules for the virtual servers like cookie persistency, redirection of the URL.
Created Visio Dean / Visio Documentation to give complete picture of network design for each building.
Experience in Configuring, upgrading and verifying the NX-OS operation system.
Environment: Cisco 2948/3560/4500/3560/3750/3550/3500/2960 6500 switches and Cisco 3640/12000
7200/3845/3600/2800 routers, Cisco Nexus 7K/5K, Cisco ASA 500, Checkpoint, windows server
2003/2008: F5 BIGIP LTM, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP.
MERCK PHARMACUTICAL, NJ Oct 2012 to June 2013
Network Engineer
Key Responsibilities:
Configured RIP, PPP, BGP and OSPF routing.
Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.
F5 Big-IP load balancer configuration, layer 7 load balancing using I-Rules (TCL)
Windows Server Administration (Windows 2000, 2003 & 2008).
Identify, design and implement flexible, responsive, and secure technology services
Creating and provisioning Juniper SRX firewall policies.
Created standard access lists to allow SNMP, NTP and logging servers.
Documented new VPN enrollments in a database and create standard procedures for further improvement.
Troubleshoot traffic passing managed firewalls via logs and packet captures
Provided proactive threat defense with ASA that stops attacks before they spread through the network.
Responsible for Checkpoint and Cisco ASA firewall administration across global networks.
Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.
Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.
Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO
Estimated Project costs and created documentation for project funding approvals.
Monitoring and troubleshooting network issues between client site and 85 remote sites with legacy switches and routers
Configuration and maintenance of EIGRP and BGP network on router 7200 and 6500 MLS.
Configuration and maintenance of 3750 stack and 6500 VSS for improved efficiency of the data plane.
Configuration and management of NEXUS network in the existing network infrastructure.
Created LAB setup with 7k and 5K NEXUS switches for application testing.
Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, Palo Alto, Cisco Nexus7K/5K,2248/3560/5020/6509, ASA, Checkpoint, LAN, OSPF, BGP, RIP, EIGRP
PNC Bank, New York City, NY Jan 2010 to Sep 2012
Network Engineer
Key Responsibilities:
Designed and implemented Cisco VoIP infrastructure for a large enterprise and multi-unit office environment. Met aggressive schedule to ensure a Multi-office reconfiguration project which was successfully delivered
Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support
Supporting EIGRP and BGP based PwC network by resolving level 2 &3 problems of internal teams & external customers of all locations.
Upgrade Cisco Routers, Switches and Firewall (PIX) IOS using TFTP
Ensure Network, system and data availability and integrity through preventive maintenance and upgrade.
Involved in L2/L3 Switching Technology Administration including creating and managing VLANs, Port security, Trunking, STP, Inter-Vlan routing, LAN security.
Worked on the security levels with RADIUS, TACACS+.
Completed service requests (i.e. – IP readdressing, bandwidth upgrades, IOS/platform upgrades, etc.)
Identify, design and implement flexible, responsive, and secure technology services
Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.
Configured switches with port security and 802.1x for enhancing customers security.
Environment: Net Flow, TACACS, EIGRP, RIP, OSPF, BGP, VPN, MPLS, CSM, SUP720, Ether Channels, Cisco
7200/3845/3600/2800 routers, Fluke and Sniffer, Cisco 6509/ 3750/3550/3500/2950 switches,
Checkpoint firewalls (SPLAT).
Education
Bachelor of Engineering in computer Science
Contact this candidate