Network Engineer Manager
Resume:
Amarnath
SUMMARY:
CCNA and CCNP Certified Professional with 9 years of experience in routing, switching, firewall technologies, system design, implementation, troubleshooting of complex network systems, enterprise network security, wireless design, data network design, capacity management and network growth.
Have in depth knowledge and working experience on CATOS, Native IOS.
Extensive experience in configuring and troubleshooting of routing protocols RIP v1/v2, EIGRP, OSPF, BGP and TCP/IP.
Worked on network topologies and configurations, TCP/IP, UDP, Frame Relay, Token ring, ATM, bridges, routers, hubs and Switches
Strong hands on experience in installing, configuring, and troubleshooting of Cisco 7600, 7200, 3800, 3600, 2800, 2600, 2500 and 1800 series Routers, Cisco Catalyst 6500, 4500, 3750, 2950 and 3500XL series switches.
Switching tasks include VTP, ISL/ 802.1q, IPSec and GRE Tunneling, VLANs, Ether Channel, Trucking, Port Security, STP and RSTP.
Extensive knowledge working on Juniper platform - switches, routers as well as firewalls and managing them
Quite comfortable working on Checkpoint firewalls, Juniper Netscreen, Dell Sonicwalls, Palo Alto and SRX firewall architectures.
Extensive understanding and knowledge using load balancers like F5, Citrix NetScaler Load Balancer and Cisco CSM
Experience withvirtualized ISE deployment across two network enclaves
Network security including NAT/PAT, ACL, VPN Concentrator, IDS/IPS, and ASA/PIX Firewalls
Strong work experience with the following technologies MPLS, Q0S, VPN, WLAN and Multicast.
Well Experienced in configuring protocols HSRP, GLBP, VRRP, ICMP, IGMP, PPP, PAP, CHAP, and SNMP. Configured RIP, EIGRP, OSPF.
Experience in installing and configuring DNS, DHCP server
Strong experience in Active Directory, file shares and SharePoint setup, Microsoft Azure platform, DinCloud platform and management. Highly experienced in setting up Office 365 Enterprise for company and managing it thereafter.
Heavy experience in managing and setting up HyperVisor machines across many vendors.
Gained experience working with Layer-2 and Layer-3 Switching and Security
Gained expertise in writing test procedures and test plans with a strong understanding of design, implementation, and execution of testing methodologies.
Experienced with troubleshooting of various mission critical LAN/WAN technologies and applications utilizing Java Script, VBS, SQL, Python, and HTML
Extensive knowledge on scripting using various tools.
Strong knowledge in HSRP, VRRP redundancy Protocols. Fault Tolerance using HSRP and VRRP.
Good knowledge of OSI Model and TCP/IP networking standards with protocols such as SNMP, FTP, ICMP and IPv6.
Extensive hands-on experience with complex routed LAN and WAN networks, routers and switches.
Have extensive experience in setting up LAN and troubleshooting related issues. Have WAN awareness and assisted in setting up and troubleshooting various WAN related issues.
Hands-on configuration and experience in setting up Cisco routers to perform functions at the Access, Distribution, and Core layers.
Experience in the setup of Access-Lists, and RIP, EIGRP, and tunnel installations
Proficiency in configuration of VLAN setup on various Cisco Routers and Switches
Installation of retail shops equipment’s such as POS workstations and servers, Shoppers Tracking Systems and Modems.
TECHNICAL SKILLS:
Routers : Cisco 2600, 2800, 3800, 3900, 7200 & 7600 series, Juniper J series, HP MSR1000-4000 series,
HP HSR6800 and 8800 router series
Switches : Cisco 3550, 3750, 4500, 4900, 6500 & NEXUS 7K series, Cisco SMB SG200 and SG300 series,
HP switches - 5830, 5900, 5930, 7900, 12500 and 11900 series, HP Procurve
Firewalls : ASA 5500; Checkpoint; Dell Sonicwall NSA 250M, 2600, 4600, TZ 2XX, 3XX, 4XX, 5XX,
6XX series
Access Points : Dell SonicPoint N2, ACi; Cisco Meraki MR18/32/34/42/52/53/62/66/72 APs.
Load Balancer : CISCO CSM, ACE Module, GSS & F5 LTM, Citrix NetScale, Barracuda LB 390, 690.
Routing : OSPF, EIGRP, BGP, RIP, PBR, Route Filtering, Redistribution, Summarization, Static routing
Switching : VLANs, Dot1Q, VTP, STP, RSTP, MSTP, VLAN Maps, HSRP, GLBP, CEF, DCEF, VRF, VPC,
Port Security
LAN/WAN Tech’s : Ethernet, Frame Relay, T1/DS3/OC3.
Protocols : IP, IPv6, TCP, UDP, ICMP, NAT, DNS, DHCP, SNMP, Syslogs.
System Admin : Windows Server 2008/2008 R2, Server 2012/2012 R2, Windows 2000/XP/2003/Vista/Windows
7/Windows 10, Linux/Unix; Active Directory – Domain Controller, Group Policy Infrastructure
Scripting : Python, PowerShell, Visual Basic, JavaScript, HTML, XML, SQL, PERL
Desktop Applications : NSM(Juniper), CSM(Cisco), Netbrain, Solarwinds Orion, Cisco Unified Communications
Manager 7.x-10.x, Cisco Unity Connection 8.x- 10.x, Dell Sonicwall Global Management System
7/8/8.1, Symantec EndPoint Manager, System Center Configuration Manager and
Operations Manager
Ticketing Systems : TrackIT, ServiceNow, Zoho helpdesk, ManageEngine servicedesk on demand, Jira Helpdesk
PROFESSIONAL EXPERIENCE:
The Money Store (MLD Mortgage Inc.)
Florham Park, NJ 08/2016 – Current
Sr. Network Engineer
Responsibilities:
Responsible for managing, maintaining and configuring network infrastructure devices like routers, firewalls and switches for 28 locations throughout the country.
In charge of testing and upgrading Sup versions to the latest releases
Upgrade of firmwares and maintain for all network devices like Cisco Catalyst series and HP procurve switches and some dell sonicwall firewalls in some small branches.
Secure Remote Access 4300 appliance deployed for remote access for employees across the country.
Created and maintained network shared drives for different departments.
Tasked with migration and consolidation of servers in corp location to Evolve IP datacenter.
Setup network and servers in Evolve IP for use in environment.
Managed and configured F5 Load balancers for the enterprise environment.
Buildout and integrated Cisco ISE at 2 data centers
Worked on consolidating servers to keep the overhead to absolute minimum like converging DC with DNS servers and using multiple Virtual machines in Windows Server 2012 R2 Standard/Datacenter.
Worked on cleaning up Active Directory and setting up security groups for access and distribution groups for emails.
Managed Group Policy for the domain and deployed after testing them.
Implemented Roaming profiles for users via GPs.
Implemented Nagios on VMWare ESX server for network monitoring.
Managed multiple wordpress sites and maintained it regularly.
Worked for SQLServer 2012 for managing business databases.
For additional monitoring purposes used PRTG Network monitor
Home Point Financial Corporation (Maverick Funding Corporation)
Ann Arbor, MI
Sr. Network Engineer 06/2015 – 07/2016
Responsibilities:
Phase1: Migration to Dincloud from local storage solution.
Reporting to Senior Director of IT and part of a 2-man team of Sr. IT Network Engineer and along with about six helpdesk technicians forming IT operations in the company. We worked on integrating the network and system infrastructure of Maverick Funding Corporation with Home Point Capital to emerge as one Home Point Financial Corporation.
Migrating users from Maverick domain to Homepoint domain while migrating data to DinCloud platform for file storage and setting up VPNs across 26 sites to DinCloud platform.
Worked on branch buildouts and network setup for additional 10 sites in total across US. Configured Sonicwalls and HP/Cisco switches for those sites. Came up with a plan to setup VLANs in firewall and switches for segregating traffic for existing and new sites.
Setup and enforced content filtering across all 36 sites and regularly maintaining Allowed/Blocked lists of sites.
Worked on network and system issues ranging from computer updates not working in DinCloud virtual machines to bandwidth optimizations for sites to low network speeds.
Was instrumental in changing access to files from Individual permissions for file shares to permissions based on security groups for better management through active directory and thereby facilitating streamlined onboarding as well as termination of users.
Work with OpenDNS for extra security in the environment along with other measures to protect data.
Deployed Dell Global Management System 7.2 for centrally managing deployed Sonicwalls Firewalls. Reporting, Policy Management and Monitoring of VPN connections across sites.
Monitored VPNs across 36 sites and maintained them constantly
Worked on resolving lot of SIP related issues by troubleshooting using packet captures from firewall and local Wireshark data.
Phase2: Migration from DinCloud platform to Microsoft’s Azure platform for storage and remote access
After some leadership changes and new personnel in IT, worked as a Senior Network Engineer in a team with another network engineer directly reporting to new CIO.
Deployed multiple Nexus 7K switches and some 6500 and 4500 switches as per needs across branches. Did initial configuration as well as maintaining it thereafter.
F5 load balancing was setup for use going further. I set it up for use in our network.
Migrated and performed upgrade of 2008 R2 Domain Controllers virtual machine from DinCloud to Windows Server 2012 R2 Standard in Microsoft Azure virtual machine
Migrated Dell Global Management System from DinCloud and upgraded to 8.0 to virtual machine in Azure.
Setup a monitoring solution using PRTG for monitoring all network devices including firewalls, switches, desktops, laptops and printers/scanners.
Setup Site-to-Site VPNs across all 36 sites to Azure for domain logins and file share.
Part of deployment team for new sites and site remediation on figuring out how to implement VLANs after hours for each site in our domain for better segregation of network for data and phones.
Was instrumental in creating security policy for the company regarding corporate devices, internet security and data security on corporate as well as BYOD devices(laptops and smartphones/tablets inclusive)
Setup WSUS server in Azure as a HyperV machine for maintaining 900 computers and servers across the organization about timely update of devices.
Setup Symantec EndPoint Manager in Azure to maintain and push out regular updates for antivirus and deploy across the organization
Migrated data from File share in DinCloud to MS SharePoint infrastructure for better access to data across all sites without the need for IPSec VPNs. Implemented RMS and MRM for added security to maintain data access.
Also migrated data from DinCloud FileServer to a Hyper-V server in Azure for databases backup
Setup backup of all the Hyper-V Servers in Azure to local server in two locations for disaster recovery management.
Took leadership on testing and implementing LAPS (Local Administrator Password Solution) for added security of corporate devices by configuring Group Policies using LAPS to change local administrator passwords for client machines.
Well versed in Powershell scripting to manage Active Directory/Azure/Office365 and sync services from AD.
Worked on almost all 20-network remediation’s while here as the only network engineer configuring switches/firewalls and providing support to contractors in charge of re-IPing or expansion for offices.
EGS-NCO Group Horsham, PA
Sr. Network Engineer 06/2014 - 05/2015
Responsibilities:
Worked on multiple cisco network projects for clients like Best Buy, Amazon, T-Mobile, Horizon Blue Cross Blue Shield and many more.
Manage an extensive network of routers/switches/firewalls (roughly 1000+ devices currently in use) from different vendors located throughout the world.
Work on configuration for cisco routers/switches/firewall, juniper firewalls/switches, HP routers/switches and avaya ethernet routing switches as per client request.
Worked on virtualization through VMWare and also quite extensive work on Windows server 2008/12
Working with Cisco TAC, Juniper TAC, Level 3, etc for any issues with devices, opening cases with them as needed, and working with them for resolution.
Variety of Cisco Nexus and catalyst switches are deployed. Have worked on extensively throughout the project. Very well versed on NxOS, CATOS and IOS.
Worked extensively on Nexus 7k switches, 6500 and 4500 switches for deploying and initial configuration as well as changing configs later on as required. Used F5 for Load balancing
Have worked on Network Topology during the project.
Change control and Incident Management for the company using ServiceNow.
Client change requests were managed using ServiceNow with whoever on shift would proactively take up tickets/Incidents and assign to themselves to work on them.
Document everything regarding tickets and work done using the ticketing system in ServiceNow.
Create tickets in ServiceNow for changes needed in network to maintain optimal performance.
Replace EOS/EOL devices with new later devices by configuring the new devices to company guidelines and putting them in production. Adding new devices to be monitored in Solarwinds Orion.
Extensive working knowledge of Cisco Communications Manager and Cisco Unity Connection.
Design, implement, ongoing management and troubleshooting of Cisco Unified Communications Systems, including Call Manager / Unified Communications Manager 6.x through 7.x Unity, Unity Connection
Maintain knowledge of Cisco UCC/UCM (Unified Call Manager) and network enhancements through both personal and company-sponsored continual education including training courses, seminars, conferences, professional publications
Change control and Incident management. Configuring trunk port between two switches.
Worked extensively on Cisco ASA/PIX firewall infrastructure.
Upgrading of Checkpoint firewall infrastructure. Created detailed upgrade plan, systematic implementation documentation and test plan.
Managing Checkpoint NGX R65 on Nokia IP Security Platform
Managing Checkpoint firewall infrastructure along with Juniper firewall and performing changes as needed.
Creating scripts using VBS and Python to automate administrative tasks which include both wired and wireless troubleshooting, wireless infrastructure cut-overs, circuit checking, and other various support tasks.
General technical responsibilities include configuration, administrations, maintenance, and troubleshooting of various mission critical LAN/WAN technologies and applications utilizing Java Script, VBS, SQL, Python, and HTML
Use Checkpoint in addition to NSM and CSM for managing firewalls for the entire network
Assists in LAN Design & support. Experience with VPC, VRF, etc in cisco environment
Use F5 Load balancer in existing network to increase reliability
Timely deal with any alerts coming in the queue and document the same.
Provided customer support including but not limited to daily backup procedures, testing network connections, equipment installation and turn-up, and remote hands assistance
Security Benefit, Topeka, Kansas 06/2013 - 06/2014
Sr. Network Engineer
Responsibilities:
Configuration and administration of Cisco Switches and Routers.
Dynamic routing protocol configuration (RIP, RIP V2).
Installed and maintained network hardware and software.
Responsible for installing, maintaining and supporting computer communication networks within an organization or between organizations.
Troubleshooting network problems.
Configuring trunk port between two switches.
Change control management and ticketing system used was ServiceNow. Very proficient in managing ServiceNow queue.
Support to plan and execute LAN (VLAN Management) and WAN management activity.
As a LAN Support point of contact, give response to initial trouble calls.
Directly worked with customers to offer Level 2, Expertise in handling routers, servers, and switches. Responsible for support and upgrades of a 250-user network.
Designed, implemented and troubleshot Cisco unified communication solutions including call processing, voice gateways &LAN/WAN infrastructure.
Analyzed business requirements in order to design and implement an infrastructure solution using Cisco technologies. Maintained, configured, and sustained the Cisco VoIP network.
Analyzed, designed, tested, documented, implemented and supported global voice and converged network technologies. Assists in LAN Design & support.
Performed onsite data center support that includes monitoring of systems alarms, electrical power, server administration and network alerts.
Create scripts using Python for automation of administrative tasks including wired/wireless troubleshooting, checking of circuit health and cut-overs for wireless infrastructure
Provided customer support including daily backup procedures, testing network connections, equipment installation and turn-up, and remote hands assistance.
Undertook troubleshooting of network connectivity problems and day-to-day operations.
Having knowledge on OSPF & EIGRP Routing protocols.
Developed maintenance and operating standards for computer hardware and software.
Experienced with physical layer interfaces and cabling standards.
Planned and implemented IP address schemes and subnet masks.
Patch and test cables for new and existing sites.
Troubleshooting and supporting multiple OS and hardware environments.
Maintained detailed time based incident logs and technical checklists.
Responsible for documenting network related issues.
MasterCard, Kansas City, MO 10/2012-06/2013
Sr. Network Engineer
Responsibilities:
Working knowledge of installation, testing and troubleshooting of Routers, Switches, Servers and Firewalls.
Installed and configured 6509 Cisco Catalyst Switch, creating VLANs and assigning ports to the VLAN, configuration of routing protocols such as OSPF, EIGRP and RIP.
Upgrading the IOS on the 6500 switch and saving the old system configuration and running-configuration.
Configuring and troubleshooting routing protocols like OSPF, BGP and EIGRP on Cisco routers
Configured EIGRP, RIP, OSPF, BGP and static routing, MPLS WAN connectivity, Frame relay Wan Connectivity and Telnet and SSHv2 sessions.
Implemented WAN network technologies like MPLS and Frame Relay, switching technologies like STP, switch and VLAN security on L2 and L3 layer switches.
Provided BGP routing protocols for implementing multi-homing connection between two ISP’s and providing traffic flow to certain areas.
Supported to VoIP and handled VPN services as per service requirements.
Developed, executed and maintained Cisco Unified Communication networks.
Provided installation and initial user configuration of NEXUS 7K switches at the Data Center and providing IP addressing and different user session priorities on the switch.
Carried out Route-redistribution between different routing protocols like OSPF, BGP, and EIGRP for increased efficiency.
Provided an IP Addressing scheme using VLSM and maintained VLAN table, and implemented DHCP server for assigning IP address to various connecting devices.
Installs, configures and maintains Juniper EX series switches and SRX, MX, and M series routers
Implemented Port Security – MAC limiting, DHCP Snooping and IP source guard on EX series switches to make the network invulnerable to attacks.
Reduced the number of managed devices from 120 to 15 by implementing Virtual Chassis technology using Juniper EX4200 switches.
Complete upgrade of U.S. Robust modem to ShopperTrak TS600 modem at Payless store
Improved labor scheduling efficiency by Installing Orbit 5 Retail IP System to count pedestrians/shoppers foot traffic at Payless store
Installed Cisco ESW 540 Switch using Cisco Configuration System software to accommodate network devices such as IP Phones.
Implemented Static NAT and PAT for internet users.
Designed and Implemented DMZ for FTP, Web and Mail Servers with CISCO PIX 525 and PIX515E.
Configured NAT and PAT on the Cisco PIX Firewalls for the Internal Systems
Extended support and troubleshooting for the field technicians at the remote sites.
Supported remote location with site-to-site VPN, Remote access VPN such as IPSEC.
Citizen Property Insurance Group, Jacksonville, FL 03/2011-10/2012
Sr. Network Support Engineer
Responsibilities:
Responsible for the installation, configuration, maintenance and troubleshooting of the company network. Duties included monitoring network performance using various network tools to ensure the availability, integrity and confidentiality of application and equipment and to provide support for Cisco network.
Responsible for the Global design, engineering, and level 2/3 support of existing network technologies services and the integration of new network technologies / services.
Key contributions include troubleshooting of complex LAN /WAN infrastructure that include routing protocols EIGRP, OSPF & BGP.
Configuration, Testing, Planning and Design of Cisco Routers, Cisco Catalyst 2900, 3570 and 6500 Switches and Cisco AirNet Wireless appliances.
Implementation and configuration of F5 Big-IP LTM-6400 load balancers
Migration from Frame-Relay/ATM network to MPLS-based VPN for customer’s WAN infrastructure.
Troubleshooting latency and throughput issues on MPLS and Dedicated Internet Access circuits
Configured Cisco 7204 routers, which were also connected to Cisco ASA security appliances providing perimeter, based firewall security.
Upgrade Cisco Routers, Switches and Firewall (ASA) IOS using TFTP.
Configured Firewall logging, DMZs and related security policies and monitoring.
Installed and Configured a Cisco secure ACS server for AAA authentication (RADIUS).
Johnson Controls, Milwaukee, WI 01/2009-03/2011
Sr. Network Engineer
Responsibilities:
Experience working with Cisco IOS-XR on the ASR9000 devices for MPLS deployments.
Experience with migrating from OSPF to BGP WAN Routing protocol.
Implemented Site-to-Site VPNs over the internet utilizing 3DES, AES/AES-256 with PIX Firewalls
Network Redesign for Small Office/Campus Locations. This includes changes to both the voice and data environment.
Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches.
Experience with setting up MPLS Layer 3 VPN cloud in data center and working with BGP WAN towards customer.
Experience with moving data center from one location to another location, from 6500-based data center to Nexus based data center.
Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.
Create and test Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.
Redesign of Internet connectivity infrastructure for meeting bandwidth requirements.
Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.
Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.
Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.
Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers.
Experience with Juniper SRX 240 Firewalls.
Experience in WAN technologies like T1/T3, DS3, STM1 and STM4 circuit types.
Configured Security policies including NAT, PAT, VPN, Route-maps and Access Control Lists.
Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
AZSURE IT SERVICES. INDIA 07/2007-10/2008
L1 Technical Support, Senior Associate
Responsibilities:
Level one technical support for IT Enabled Services of Hewlett Packard (HP) desktop and accessories.
Responsible for providing first contact resolution meeting floor targets.
Responsible for revenue generation, excellent sales experience.
Worked over time and on weekends to meet floor targets for the team.
Installation and setup of Windows XP and Windows 7 for remote customers (North America Customers).
Installation and configuration of McAfee antivirus software.
Installation, configuration and technical support of HP printers.
Installation, configuration and technical support of HP webcams, HP keyboards, wired and wireless HP mouse, HP monitors.
HP Hardware technical support to find the root cause for black screen, blue screen; RAM failure, Processor failure, and any other hardware failure.
Responsible for escalation to L2 team or higher depending on the issues and remote login to help customer install software that customer is unable to understand.
ICICI Bank Pvt, Ltd INDIA 01/2007-06/2007
Jr Network Engineer
Responsibilities:
IOS upgrades on Catalyst 1900, 2900, 3500 series switches and 2500, 2600, 3600 series routers.
Racking, stacking, and cabling network-based, IT systems.
Configuration of Access List ACL (Std., Ext, Named) to allow users all over the company to access different applications and blocking others.
Configuring of IP Allocation and sub netting for all applications and servers and other needs throughout company using FLSM, VLSM addressing.
Troubleshot the issues related to routing protocols.
Configured Virtual Switching Systems (VSS) using two Cisco Catalyst 6500E switches to provide redundant route processors – Active-Standby Control Plane, Active-Active Data Plane.
Configured IPv4 and IPv6 PIM Sparse Mode, Source Specific Mode and Bidirectional to test Multicast in a VSS environment using Ixia as the Traffic generator.
Configured Ixia Explorer to ensure Stateful Switch over (SSO) is fine in a VSS environment.
Faster Cisco IOS version upgrades using In-Service Software Upgrade (ISSU) within a VSS environment ensuring that customers experience no downtimes and able to provide continuous access to applications, data, and content from anywhere and anytime.
Upgraded Multi Chassis Ether-channel links to 10 GE links.
Environment: Cisco 6500E Chassis (6509E, 6513E) with SUP 2T, SUP 720, Opt ixia 16, Cisco IOS Software Release 15.1(1) SY for Sup 720 and SUP 2T.
Contact this candidate