Network Engineer

Kartheek Reddy

Network Engineer

********.*********@*****.***

(732) - 258 - 0369

PROFESSIONAL SUMMARY:

8+ years of experience in Network Engineering and Administration which includes expertise in the areas of Design, implementation, and support. Routing, switching, firewall technologies, and troubleshooting of complex network systems.

Designing, implementing and troubleshooting Cisco routers (7600, 7200, 6500, 3900, 3600, 2800, 2600, 2500, 1800 series) using Static, RIP, IGRP, OSPF, EIGRP & experience with Cisco PIX & ASA devices.

Experience in Cisco security: Telnet, SDM, NAT/ACLs, AAA, Layer 2 Security, Layer 3 Security, IPS/IDS, Cisco (ASA, PIX) 5510, Cryptography, VPN, IPsec.

Well experienced in configuring HSRP, GLBP, ICMP, PPP, PAP, CHAP and SNMP.

Experience in installing and configuring DNS, DHCP server.

In-depth knowledge and hands-on experience in ISP Routing Policies, Network Architecture, IP Sub netting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.

Experience in Cisco: Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay & MPLS), Routing protocol configurations (RIP, EIGRP, OSPF, BGP)

Experience securing and managing remote access using various VPN technologies like IPSec, SSL, and GRE.

Utilizing management tools cisco works, solar winds, HP, IMC, Riverbed/mazu, Visio, Sniffer and Network Analyzer.

Proficiency in configuration of VLAN setup on various CISCO Routers and Switches.

Migrated and implemented new solutions with Cisco ASA Firewall series 5505, 5510, 5512-X

Migration from other firewall platforms (Cisco, Juniper, Checkpoint) to Fortinet

Configuring Checkpoint Firewall in IPSO, Secure Platform and GAIA platforms.

Configuring Site-Site VPN on Checkpoint Firewall with R77 GAIA.

In-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.

Troubleshoot and Worked with Security issues related to Cisco ASR 9K, Checkpoint, IDS/IPS and Juniper ASA firewalls.

Experienced in handling and installing Palo Alto Firewalls and juniper SRX firewall.

Handled Panorama firewall management tool to administer Palo Alto firewalls.

Worked with Aruba WLAN, Cisco WLAN, Meraki Wireless control modules.

Worked with F5 Load balancers and Cisco Load balancers (CSM, ACE and GSS).

Experience in deploying BIG-IP F5LTM Load Balancers for load balancing and traffic management of business application.

Access control server configuration for RADIUS & TACAS+.

Experience in configuring and Troubleshooting BIG-IP F5 LTM load balancer.

Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security.

Proficiency in configuration of VLAN setup on varied Cisco Routers and Switches.

Experience with design and deployment of MPLS Layer 3 VPN, MPLS Traffic Engineering, and MPLS QOS.

Responsible for Check Point and Cisco ASA & Palo Alto Firewalls environment.

Advanced knowledge, design, installation, configuration, maintenance and administration of Juniper SRX Firewall, Juniper EX and Juniper MX devices.

In-depth knowledge and experience in WAN technologies including OC3, E3/T3, E1/T1, Point to Point, MPLS and Frame Relay

Reviewing all changes to network configuration for technical accuracy and provide solutions to Multi-Protocol.

TECHNICAL SKILLS:

Routing Protocols

RIP, RIPV2, IGRP, EIGRP, OSPF, BGP, TCP/IP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACASS+, Radius, AAA

CISCO Routers

Nexus 7K, 5K, 2K & 1K, Cisco routers (7600, 7200, 6500, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900 series) Huawei AR Series Routers

Antivirus & Endpoint protection

Cisco CSA, Symantec Enterprise Edition, Mcafee enterprise edition.

Security & VPN

PIX 500 Firewall, ASA 5505 Firewall, ASA firepower, AIP SSM, CSC, SSM, FWSM, FortiGate, Cisco CSM, ACL-Access Control List, IPS/IDS, NAT, PAT, Cisco ACS, and Juniper Net screen firewall, Windows Patch Management (WSUS).

LAN Technology

Workgroup, Domain, RSTP, VLAN, STP, VTP, Ethernet, Fast Ethernet, Gigabit Ethernet&10 Gigabit Ethernet,802.1q

WAN Infrastructure

Leased Line, ISDN/Dial-Up, and Frame Relay circuits, Metro Ethernet.

WAN Technologies

HDLC, PPP, ATM, SONET, MPLS, VPN, IPsec-VPN.

Juniper

EX-2200, EX-4200, EX-4500, MX-480, M Series, SRX210, SRX240

Operating Systems & Tools

Cisco IOS, Check Point r60, checkpoint r65 Windows NT 4.0 (Desktop/Server), Windows 2000/2003/2008 Server, Windows XP/Windows 7/8, LINUX, Solaris, Active Directory, Apache Server

Network Security

ACL, IPSec, VPN, Port-security, AAA, Zone-Based Firewalls, IOS based router security firewalls, IDS/IPS, Palo Alto firewalls.

Network Technologies

MANET, SONET, TDMA, FDMA, CDMA. DSL, POP3

EDUCATION:

Bachelor’s degree in Electronics and Communication Engineering

PROFESSIONAL EXPERIENCE:

Santander Bank, Boston, MA Dec 2015 - Till date

Sr. Network Engineer

Responsibilities:

Troubleshooting problems associated with Layer 1/2/3 skills like shift / routing, WAN Hardware and important network links by coordinative with the ISP.

Troubleshooting the Juniper SRX100 and a hundred and ten series, Juniper Net Screen routers with Site-Site VPN, and firewalls for Supervalu Retail sites.

Installing, configuring Cisco Catalyst switches 6500,3750&3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design.

Designing, implementing and troubleshooting Cisco 6500, 4900, 3750, 3500, 4500, 2900 series switches and ARISTA (7100, 7500) Series switches.

Installing and configuring new cisco instrumentation as well as Cisco catalyst switches 6500, Nexus 7010, Nexus 5548 and Nexus 2k as per the need of the corporate.

24x7 on-call step-up support as a part of the safety operations team.

Working closely with knowledge center management to investigate the information center sites for cabling necessities of assorted network instrumentation.

Worked on Multi-vendor platform with Checkpoint, Fortinet and Cisco firewalls requesting net flow for security compliance, coding, and pushing firewall rules after approval and troubleshoot incidents as required.

Provided application level redundancy and accessibility by deploying F5 load balancers long-term memory.

Having knowledge Center style expertise, putting in and Configuring Network Devices in a very knowledge Center as well as mend the cables within the Patch Panel. style and enforced network.

Hands-on expertise within the network management of circuits mistreatment TDM and Frame Relay Managing and providing support to numerous project groups with regards to the addition of recent instrumentation like routers switches and firewalls to the DMZs.

Implementing traffic engineering on high of Associate in Nursing Existing Multiprotocol Label shift (MPLS) network mistreatment Frame Relay and Open Shortest Path initial (OSPF).

Configuring, testing, troubleshooting multiple vendor device platforms like Cisco routing and switching: Cisco ASR9010, ASR901, ASR903, Catalyst Cisco 7609, 2960, and Juniper routing and switching devices: MX960, MX 480 and SRX5200, ACX2200, ALU service aggregation router: 7705 SAR 8 and 7750 service routers.

Configuring Site-Site VPN on Checkpoint Firewall with R77 GAIA.

Experience with designing, implementing and troubleshooting Cisco routers and switches using different routing protocols like OSPF, EIGRP, BGP, ISIS and MPLS L3 VPN, VRF.

Experience on working with Palo Alto Next Generation firewall with security, networking, and management features such as URL filtering, Anti-virus, IPsec VPN, SSL VPN, IPS, Log Management etc.

Implemented the security architecture for highly complex transport and application architectures addressing well known vulnerabilities and using access control lists that would serve as their primary security on their core & failover firewalls.

Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall.

Worked on Checkpoint Firewalls, create the policies and push the policies on checkpoint and as well as other firewalls like Cisco ASA and Fortinet firewalls.

Creating Virtual Servers, Nodes, Pools and iRules on BIG-IP F5 LTM module.

Configured and deployed BIG-IP LTM 6900 for providing application redundancy and Load balancing.

Basic and advance F5 load balancer configurations, including migrating configurations from Cisco ACE to F5 and general troubleshooting of the F5 load balancers.

Providing coaching to new comers and effectively operating towards a method quality improvement within the Team.

Supporting EIGRP and BGP supported the network by partitioning level two & three issues of internal groups & external customers of all locations

Performing troubleshooting on slow network property problems, routing problems that involves OSPF, BGP and distinctive the foundation reason for the problems.

Extensive active expertise with complicated routed LAN and WAN networks, routers and switches.

Done troubleshooting of TCP/IP problems and connectivity issues in multi-protocol Ethernet environment.

Setup ASA Firepower Management center and updating the modules.

Hands-on expertise with Ether Channel, Spanning Tree, Trunking, ACLs, Syslog. expertise within the setup of HSRP, Access-Lists, and RIP, EIGRP, and tunnel installations.

Monitoring, managing and troubleshooting Cisco Wireless devices using Cisco Meraki.

Proficiency in configuration of VLAN setup on varied Cisco Routers and Switches.

Analyzed and tested network protocols (Ethernet, TCP/IP) mistreatment Wireshark tool.

Provide step-up support to L1 members of network team.

Work & intensify issues effectively so as to satisfy client SLA's (service level agreements).

Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.

Environment: Nexus 2k/5k/7k, Cisco 6500/7500/7200 Routers, ASA Firepower, Cisco 3550/4500/6500 switches, Juniper SRX100, TCP/IP, LAN, WAN, OSPF, RIP, BGP, EIGRP, HSRP, PPP, VPN, Checkpoint, Cisco ASA.

Wells Fargo, San Francisco, CA Jan 2014 - Nov 2015

Sr. Network Engineer

Responsibilities:

In-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on IP services.

Working closely with Data center management to analyze the data center sites for cabling requirements of various network equipment.

Managed rules on Cisco checkpoint NGX firewall

Involved in configuring and implementing of composite Network models consists of Cisco 7600, 7200, 3800 series routers and Cisco 2950, 3500, 5000, 6500 Series switches

Configured Nexus 7010 including NX-OS Virtual Port Channels, Nexus port profiles, Nexus Version 4.2 and 5.0, Nexus VPC peer links

Security policy review and configuration in Palo Alto, Cisco ASA firewalls in US offices and data centers.

Providing training to new resources in team and effectively working towards a process quality improvement in the Team.

Hands on experience on F5 load balancers, its methods, implementation and troubleshooting on LTMs and GTMs.

Configured F5 GTM solutions, which includes WideIP, Pool Load Balancing Methods, probers and monitors.

Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.

Migrating existed bluecoat Proxy infrastructure with MacAfee Web Gateway using Parent/Child architecture across multiple Data Centers using F5 LTM load balancer.

Worked on F5 BIG-IP LTM 8900, Citrix and NetScaler configured profiles, provided and ensured high availability.

Experience with Blue Coat URL filtering with whitelisting and blacklisting URL, creating rules for content filtering hands on experience on Blue Coat Av and SG appliances.

Installed and configured bluecoat ProxySG in the network for web traffic management and Policy configuration

Expertise in configuring and troubleshooting of Palo Alto, Juniper Net Screen & Juniper SRX Firewalls and their implementation.

Successfully installed Palo Alto PA-3060 firewalls to protect Data Center and provided L3 support for routers/switches/firewalls.

Worked with network services like DNS, DHCP, DDNS, IP4, IP6, IPsec, VPN etc.

Worked with Infoblox for secure DNS, DHCP and IPAM

Worked with Cisco ACE GSS 4400 Series global site selector Appliances Experience with Security- Firewalls, NAT / PAT, IPSEC, S2S.

Experienced working with Nexus OS, IOS, CATOS and Nexus 7K, 5K & 2K Switches

Knowledge of with API’s for troubleshooting Network issues using Wireshark and NTOP

Configured static NAT, dynamic NAT, dynamic NAT overloading

Ensure that all system in the domain have McAfee Antivirus Protection Installed.

Back up a Cisco IOS to a TFTP server and Upgraded and restored a Cisco IOS from TFTP server.

Configuring ACL on ISE for making policies.

Responsible in troubleshooting on Cisco ISE added new devices on network based on policies on ISE.

Work assigned tickets to determine the point of failure and resolve problems remotely utilizing available tools and other Operation Center resources.

Documenting network configuration for all new equipment and creating equipment configuration backups and monitoring to work with existing network systems

Worked on Checkpoint Platform including Provider Smart Domain Manager. Worked on configuring, managing and supporting Checkpoint Gateways.

Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls.

Migration with both Checkpoint and Cisco ASA VPN (Checkpoint R75.30 to Gaia R77.30 GA version).

Work & escalate problems effectively to meet customer SLA's (service level agreements).

Perform problem management and root cause analysis for P1/P2/P3/P4 incident.

Environment: Nexus 2k/5k, Cisco 7600/7200/3800 Routers, Cisco 3500/5000/6500 switches, LAN, WAN, OSPF, RIP, BGP, EIGRP, HSRP, PPP, VPN, Checkpoint, Cisco ASA.

Guardian Life Insurance, Tempe, AZ Oct 2012 - Dec 2013

Network Engineer

Responsibilities:

Configured Routing protocols such as RIP, OSPF, EIGRP, MPLS, static routing and policy-based routing.

Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

Upgraded Cisco ASA 5510 firewalls using 6500/7600 catalyst modules for enhanced performance, security and reliability. Security policy review and configuration in Palo Alto and Juniper SRX Firewall in Datacenter. Troubleshooting of CISCO routers like ping, trace route and basic issues.

Experienced in working with BIG-IP Edge Portal and BIG-IP Edge Client

Create and test Cisco router and switching operations using OSPF routing protocol, ASA Firewalls for stable VPNs& trouble-shooting of routing protocols like static, dynamic

Provided on-call support for installation and troubleshooting of the configuration issues.

Worked extensively on Configuring, Monitoring and Troubleshooting Cisco's ASA 5500 with ACL, NAT, Object Groups, Failover, Multi-Contexts.

Experienced in migrating from Cisco ASA 8.2 version to Cisco ASA 8.4 Version.

Involved in Replacement of FPCs, PICs on Juniper M320 and T640 router.

Regular upgrade and maintenance of Juniper Routers and Firewalls, Nexus 7k,5k & 2k, f5 BIG IP, Palo Alto Firewalls.

Monitoring and troubleshooting network issues between client site and 85 remote sites with legacy switches and routers

Design and Implement DMZ for FTP, Web and Mail Servers with CISCO PIX 506, PIX515.

IOS upgrade 1900, 2900, 3500 series Cisco Catalyst switches and 2500, 2600, 3600 series Cisco routers using TFTP.

Worked on network topologies and configurations, TCP/IP, UDP, Frame Relay, Token ring, ATM, bridges, routers, hubs and Switches.

Migrated IPv4 addresses to IPv6 addresses using mechanisms like Tunnel Broker, Transport Relay Translation (TRT), NAT64, DS-Lite and DNS64.

Involved in troubleshooting of DHCP and other IP conflict problems.

Implementation of TCP/IP and related Services-DHCP/ DNS/ WINS Configured VLAN’s, Private VLAN’s.

Configured ACLs (Standard, Extended and Named) to allow users all over the company to access different applications and blocking others.

Participated in on call support to troubleshoot the configuration and installation issues.

Configured switches with port security and 802.1x for enhancing customers security.

Environment: Nexus 2k/5k/7k, Cisco 2500/2600/3600 Routers, Cisco 1900/2900/3500 switches, Juniper SRX100, LAN, WAN, OSPF, RIP, BGP, EIGRP, HSRP, MPLS, VPN, Cisco ASA.

MGL, Hyderabad, India Aug 2010 - Sep 2012

Network Engineer

Responsibilities:

Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.

Create and test Cisco router and switching operations using OSPF routing protocol.

Configuration and troubleshooting link state protocols like OSPF in multiple areas.

Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.

Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.

Implemented MPLS VPN networks to test various problem reproductions in lab

Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.

Configuration and troubleshooting of Cisco 6500, 7500, 7200 Series routers.

Extensively worked on Nexus 5k and 7k, configured and troubles hooted

Troubleshooting issues related to Layer 1/2/3 skills like switching / routing, WAN /Hardware and critical network links by coordinating with the vendor.

business lines in a data center environment

Design and Implement DMZ for FTP, Web and Mail Servers with CISCO PIX 506, PIX515

Involved in Configuration of Access lists (ACL) on ASA firewall for the proper network routing for the B2B network connectivity.

Provided proactive threat defense with ASA that stops attacks before they spread through the network.

Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls.

Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. Configured Cisco Routers for OSPF, RIP, IGRP RIPv2, EIGRP, Static and default route.

Having Data Center Design Experience, installing and Configuring Network Devices in a Data Center including patching the cables in the Patch Panel. Design and implemented network

Implement changes on switches, routers, load balancers (F5 and CSS), wireless devices per engineer’s instructions and troubleshooting any related issues.

Involved in Switching Technology Administration including creating and managing VLANS’s, Port security, Trunking, STP, Inter-VLAN routing, LAN security etc.

Deploying Layer 2 security in Server Farms by configuring switch for 802.1x port-based authentication.

Involved in the configuration & troubleshooting of routing protocols: MP-BGP, OSPF, LDP, EIGRP, RIP, BGP v4. Configured IP access filter policies.

Hezemon Solutions, Hyderabad, India Aug 2009 - July 2010

Network Engineer

Responsibilities:

Design, manage and troubleshoot OSPF, EIGRP and BGP

Installation and Configuration of Cisco Switches and Nortel Switches

Converted LAN from one flat scope of 600 nodes to a multi-VLAN network, segregating traffic into different classifications using access control lists to limit the traffic access to other VLANs

Implemented VLANs with Spanning tree

Cisco IOS Architecture for Cisco routers and switches

Project managing complex network implementations, including Cisco PIX firewall and Cisco Intrusion Detection System installation, Cisco VPN and Layer 3 implementations.

Installation and Configuration of Cisco firewalls and VPN Concentrators.

Monitor, improve, and support all aspects of network connectivity using SolarWinds.

Support and Administration of Windows Systems.

Coordinating with vendors in ordering new products.

Contact this candidate