Engineer Cisco

RAVI

NETWORK ENGINEER

*****@*********.***

ph:732-***-****

Professional Summary:

Around 8 years of experience in Networking and Security, including hands-on experience in providing network support, installation and analysis for a broad range of LAN / WAN/MAN communication systems.

Extensive knowledge of deploying & troubleshooting TCP/IP, Implementing IPv6, Translation from IPv4 to IPv6, Multilayer Switching, UDP, Ethernet, Voice & Data Integration techniques.

Hands on experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 and Nexus 3000, 5000, 6000, 7000 series switches and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series router.

Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX Firewalls (SRX240, SRX550)

Experience configuring and troubleshooting OSPF, EIGRP, BGP, VLAN’s, Trunking, VTP, STP, PVST, RSTP, HSRP, 802.1q, and Ether-channels.

Experience securing and managing remote access using various VPN technologies like IPSec, SSL, and GRE.

Working knowledge of network monitoring/management tools like Wireshark, Tcpdump, Cisco Prime, Net Flow, PRGT, Solar Winds.

Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA using Cisco ASDM.

Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NAT with the firewalls as per the design.

Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience

Experience and advanced knowledge of design, installation, configuration, maintenance and administration of Palo Alto Firewall

Expertise in troubleshooting and configuring DNS, DHCP, TFTP, TELNET, SSH, FTP and NFS

Excellent hands-on experience in designing and implementing IP addressing that includes both IPV4 and IPV6

Performed load balancing and application level redundancy by deploying F5 BIG-IP LTM 3900.

Involved in the configuration and maintenance of IPSec Site-Site VPN.

Background in network design, including Wide Area Networking (WAN), Local Area Networking (LAN), Multiple Protocol Labeling Switching (MPLS), DS3.

Reviewing all changes to network configuration for technical accuracy and provide solutions to Multi-Protocol Network problems.

Troubleshooting the issues that were raised while upgrading the F5 LTM's from 10.2.3 to 11.3.

Basic and advance F5 load balancer configurations, including migrating configurations from Cisco ACE to F5 and general troubleshooting of F5 load balancers

Experience in working with Cisco Load Balancers

Installation & configuration of Microsoft Proxy Server 2.0 & Blue Coat Proxy

Enforced security and access policies using Cisco Ise for endpoint devices.

Experience with Racking, Stacking, configuring, Nexus 2K,5K and 7K

Involved in designing and commissioning WAN infrastructure for redundancy in case of link failure. Responsible for technical evaluation, troubleshooting, overall project management, problem solving and turn-up of the service with the ISP.

Created and design network layout and documented network system design with detail information using Visio software. Vendor co-ordination for hardware issues and assessment management.

Configuring and implementing routing protocols including RIP, TCP/IP, RIP v1/v2, OSPF, EIGRP, ISIS and BGP.

Working Experience in VMware ESX 5.x, VMware Workstation, VMware vCenter Server, Microsoft SharePoint, System Center 2012 R2, C++.

Strong interpersonal, organizational communication, customer service & presentation skills.

Performed professional level documentation using Visio diagrams.

Technical Skills:

Routers: Cisco 7600, 7200, 3800, 3600, 2900, 2800, 2600

Routing: OSPF, EIGRP, BGP, RIP v1/v2, PBR, Route Filtering, Redistribution, Summarization, and Static Routing.

Switches: Nexus 2K/5K/7K, Cisco Catalyst 6500, 4500, 3850,3560, 3750, 2960

Switching: LAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switch, Etherchannels, Transparent Bridging.

Network Security: Cisco ASA 5540, ACL, IPSEC, F5 Load Balancer, Checkpoint

Juniper Platforms SRX, MX, EX Series Routers and Switches

Security and Firewall Cisco ASA 5510, 5520, 5585, IDS/IPS (4200), Checkpoint 1100, Palo Alto- 220,5000.

Load Balancer: F5 Networks (Big-IP) LTM 8900 and 6400.

LAN: Ethernet (IEEE 802.3), Fast Ethernet, Gigabit Ethernet

WAN: PPP, HDLC, Channelized links (T1/T3), Fiber Optic Circuits, Frame Relay.

Gateway Redundancy: HSRP and GLBP

WAN Optimizer Riverbed Steelhead Appliance viz: SaaS, IaaS, DHCP and DNS Infoblox

Various Features & Services: IOS and Features, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, TFTP, FTP.

AAA Architecture: TACACS+, RADIUS, Cisco ACS.

Network Management: Wireshark, SNMP, CUCM, Solarwinds.

Education:

Electrical Engineering

Certifications

Cisco Certified Network Professional (CCNP)

Cisco Certified Network Associate (CCNA)

Professional Experience

Lowes (Raleigh, NC) Feb 2016 – Till Date

Sr. Network Design Engineer

Responsibilities:

Deploying Panorama and Dome-9 for all the AWS Palo Alto Firewalls.

Design and Implementation of Disaster Recovery Co-location consisting of Nexus 7K switches, ASR 1002, Cisco ASA Firewalls, Cisco 3925 routers etc. Successfully implemented OTV for VLAN Extension.

Design and implementation of Main Data Center Move project from one location to another location with minimal down time using traditional DCI with vPC and In-box configurations with same HSRP group for redundancy on four Nexus 7k switches, two on each side.

Experienced in installation, configuration and maintenance of Cisco Nexus 7K, 5K switches in standalone as well as in V-BLOCK infrastructure

Extensive knowledge and experience in vPC, ether channel, STP, VTP, and HSRP also VRRP protocols.

Experienced in Cisco ASR 1000, 7200, 2700, 2900, 3900, 1800 Routers,, Cisco Catalyst 4500, 2900, 3700 Switches.

Main point of contact for any Palo Alto Firewall related issues for Dev Ops teams from China, London, west and east coast of USA, Canada and WTC branch.

Hands on Experience Checkpoint UTM-1, Checkpoint Smart Center R.75, Nokia Voyager IPSO-390.

Applied ACLs for Internet access to the servers using Cisco 5520 ASA firewall, performed NAT.

Deployment and Management of Bluecoat proxies in forward proxy scenario as well as for security in reverse proxy scenario.

Managed and troubleshot the Network Security for active networks with production traffic using Cisco ASDM 7.4.

Implementing and troubleshooting (on-call) IPsec VPNs tunneling and SSL for various business lines and making sure everything is in place with Cisco Unified Communications Manager.

Effectively mitigated DDoS and worm attacks using RTBH filterine.

Hand on experience in Juniper secure gateway SA-4500 7 SA-2500 for VPN.

Deliver in-depth diagnostics and root-cause analysis for network impacting issues on Juniper Networks routing products (Internet backbone routers) to large Internet Service Provider and/or enterprise customers;

Extensive knowledge in working and deployment of Network Management systems including Riverbed, Whats Up Gold, Kiwi Sys Logs, Cisco LMS, Mazu and MRTG using SNMP trap and SNMP Polling also.

Deployment and configuration of Sourcefire 3D Sensor 8250 and Defence Center 3500 with Port SPAN also creating IPS/IDS policies and intrusion report generation and monitoring.

Configured and Maintained BGP features such as load balancing, Route Reflectors, BGP metrics such as maintaining the Enterprise IP Addressing scheme with allocation of new IP Pools for user subnets, and updating the port on the switches MED, AS Path, Local Preference, Communities.

Create and test Cisco router and switching operations using OSPF routing protocol, and MPLS switching for stable VPNs

Worked on Cisco Routers, Active/Passive Hubs, Switches, Cisco PIX Firewall, Nortel VPN Concentrators TCP/IP, NAT and Checkpoint ESX/GSX firewall

Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA

Worked on network security design and installation using Palo Alto Firewall (Application and URL filtering, Threat Prevention, Data Filtering).

Redesign of Internet connectivity infrastructure for meeting bandwidth requirements.

Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.

Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.

Involved in the troubleshooting aspects of complex network infrastructure using the routing protocols like RIP, EIGRP, OSPF, ISIS and BGP.

Worked on creating IPSEC Tunnels on Palo Alto for newly created VPC’s.

Deployment of Cisco Ise for endpoints connected to company devices and switches.

Performed load balancing and application level redundancy by deploying F5 BIG-IP LTM 3900

Worked on F5 BIG-IP LTM 8900, configured profiles, provided and ensured high availability.

Involved in the configuration and maintenance of IPSec Site-Site VPN.

PetSmart (Philadelphia, PA) Jan 2015 - Jan 2016

Role: Network Support Engineer

Responsibilities:

Worked on 2600, 3500, 7613 Cisco Routers and 4500 and 6500 series Cisco Switches.

Played responsible role for implementing, engineering, & level 2 support of existing network technologies / services & integration of new network technologies / services.

Configured and managed Cisco access layer routers and switches

Provided support for troubleshooting and resolving customer reported issues

Worked on F5 BIG-IP LTM 8900, configured profiles, provided and ensured high availability.

Worked on F5 and CSM load balancers deploying many load balancing techniques with multiple components for efficient performance.

Configured and managed OSPF redistribution and authentication with type 3 LSA filtering and to prevent LSA flooding and also configured OSPF over frame relay networks.

Designing, configuring, implementing and troubleshooting (LAN) VLAN’s, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.

Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience

Configure all Palo Alto Networks Firewall models (PA-2k, PA-3k, PA-5k etc.) as well as a centralized management system (Panorama) to manage large scale firewall deployments

Implemented site to site VPN in Juniper SRX as per customer.

Implemented various EX, SRX & J series Juniper devices.

Implementing and managing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).

Configuring HSRP for network redundancy and High availability.

Involved in designing of LAN (Ethernet) and WAN infrastructure for the new Data Centre Using MS Visio.

Configuring VPN for site-site and remote access.

Designing and configuring IP address schemes.

Maintaining Cisco hardware and Cisco IOS upgrade.

Configured Cisco 1231 Access points with 5959 and 4941 antennas (802.11/a/g).

Designing, configuring, implementing and troubleshooting (LAN) VLAN’s, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.

Implementing and managing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).

Configuring and implementing F5 BIG-IP,LTM,GTM load balancers to maintain global and local traffic

Planned, tested and evaluated various equipments, systems, IOSs and procedures for use within the Network / security infrastructure.

Upgrading IOS, troubleshooting network outages.

Deployments for use cases such as SaaS, IaaS, and data center migration, phone deployments etc .

Participate in all technical aspects of LAN, WAN, VPN and security Internet Service projects including, short and long term planning, implementation, project management and operations support as required.

Configuring RIP, OSPF and Static routing on Juniper M and MX series Routers

Configuration, support and administration of Palo Alto and Checkpoint and to migrate all gateways and management servers to new hardware and software – Checkpoint SG appliances running GAiA OS and Checkpoint R75.40

Having Data Center Design Experience, installing and Configuring Network Devices in a Data Center including patching the cables in the Patch Panel. Design and implemented network

Hands-on experience in the network management of circuits using TDM and Frame Relay network, performing configuration and provisioning management, fault management and performance monitoring

Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.

Extensively worked on Nexus 5k and 7k, configured and troubleshooted.

Expertise in developing Complex Automated Script Framework, utility functions manually for HTTP(S) Protocol as per CMMI level 5 standards using Network Sniffers like HTTT Watch, and Firebug.

Environment: Cisco 3640/1200/7200/3845/3600/2800/2600/3500/7613 Routers, Cisco Wi-Fi router ISP, 800, MSE, Cisco 3750/3550/3500/2960/4500/6500 Switches, LAN, WAN, EIGRP, OSPF, RIP, BGP, F5 Load Balancer, Palo alto,VTP, VLAN, HSRP, HTP, IPV4, Nexus 5K,7K, LTM, GTM

Barclays (Wilmington, DE) Dec 13 to Nov 14

Network Engineer

Responsibilities:

Installed and tested Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.

Worked on Heterogeneous networks such as Frame Relay, Ethernet, Fiber, etc.

Prepared Check Point firewall configurations for conversion to Cisco ASA 5585-series firewalls.

Primary Network Security Engineer for Fiserv Firewall/VPN Support and Management on Checkpoint (Crossbeam and VSX), PIX, ASA.

Involved in Configuring and implementing of Composite Network models which consists of Cisco7600, 7200, 3800 series routers.

Configured Routing protocols such as OSPF, BGP, RIP, static routing and policy based routing.

Team member of Configuration of Cisco 7206 router with VPN and Configuration of Catalyst switches.

Configured Nexus 7010 including NX-OS Virtual Port Channels, Nexus port profiles, Nexus Version 4.2 and 5.0, Nexus VPC peer links

Deployed Cisco Nexus 5K Series to support Virtualization, SAN Infrastructure, and high performance computing environments.

Implementation and Proactive Monitoring of MPLS (MPLS-VPN), QoS (Layer2 and Layer3) and BGP technology.

Designed 10 gigabit networks using Cisco Nexus 7000 series switches, and Cisco 3800 series routers

Involved in Configuring and implementing of Composite Network models consists of Cisco7600, 7200, 3800 series and Cisco 2950, 3500, 5500, 6500 Series switches.

Responsible for Network Support Cisco ASA 5500 firewalls.

Analyzed and tested network protocols (Ethernet, TCP/IP) using Wireshark tool.

Experience using diagnostic security and networking tools such as NMAP, WireShark etc.

Utilize Wireshark, NMAP and Command Line Prompts on a daily basis.

Involved in a project for a re-design of the LAN network (Cisco Catalyst 2960 and Nexus 5000 switches) and the virtualization of some systems

Working with vendors such as Cisco to address any configuration issues.

Worked with Juniper net Screen 500/5200 and also Juniper SRX 650/3600.

Installed and tested Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.

Worked with Cisco Clean Pipes to provide DDoS protection services to enterprise data connections.

Worked on Heterogeneous networks such as Frame Relay, Ethernet, Fiber, etc.

Prepared Check Point firewall configurations for conversion to Cisco ASA 5585-series firewalls.

Primary Network Security Engineer for Fiserv Firewall/VPN Support and Management on Checkpoint (Crossbeam and VSX), PIX, ASA

Redesigned Internet connectivity infrastructure for meeting bandwidth requirements.

Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.

Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.

Experience with hardware load balancer administration and support, preferably with F5 and Cisco ACE load balancers.

Experience in configuring Load balancers and Riverbed WAN optimizers.

Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

Monitored and analyzed Intrusion Detection Systems (IDS) & Intrusion Prevention System (IPS) to identify security issues for remediation.

Configuration and troubleshooting of Cisco switches 2000, 3000, 6500, 7004, 7009, 7700 Series.

Maatruka Software Technologies, Hyderabad, India June 11– Nov 13

Network Engineer.

Responsibilities:

Configured Cisco Routers for OSPF, IGRP, RIPv2, EIGRP, Static and default route.

Worked on HSRP for hop redundancy and load balancing.

Configured the Cisco router as IP Firewall and for NATing Configured RSTP, MST and used VTP with 802.1q trunk encapsulation.

Provided port binding, port security and router redundancy through HSRP.

Designed ACLs, VLANs, troubleshooting IP addressing issues and taking back up of the configurations on switches and routers.

Provided testing for network connectivity before and after install/upgrade

Switching related tasks included implementing VLANS and configuring ISL trunk on Fast-Ethernet and Gigabit Ethernet channel between switches.

Experience in Cisco switches and routers, Cisco Wireless Control Systems, Physical cabling, IP addressing, Wide Area Network configurations.

Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external.

Cyber Net Solutions, Hyderabad, IN June 10- May 11

Network Administrator

Responsibilities:

Provided Level 1 Support for Broadband Connection to Virgin Media customer

Worked As a Technical Support Executive under Virgin Media.

Received inbound calls of technical nature, independently resolved customer complaints, concerns and inquiries regarding their Internet connection.

Managed LAN and Wireless Network and performed troubleshooting On LAN, WLAN, Customer Modems (NTL 250, TERAYON, and MOTOROLA) And CPE Router (Cisco-Linksys, Belkin, D-LINK and Dynamode).

Set up Home Network and provided troubleshooting and full support on virgin- media security Software (PC-guard).

Troubleshoot a wide range of technical support issues and connectivity problems such as authentication, connection speed, e-mail configuration, and loss of synchronization.

IOS upgrades on catalyst series switches like 2900, 3560, 3750.

Troubleshoot TCP/IP problems and connectivity issues in multi-protocol Ethernet environment.

Implemented trunking protocols like 802.1q on 3750 switches.

Configured ACLs to provide accessibility and restrict unauthorized users.

Involved in maintaining STP, RSTP and PVST+ for the catalyst switches I worked on.

Configured and maintained RIP, OSPF and routing protocols on 2600 and 3600series Cisco routers.

Maintaining and troubleshooting of connectivity problems using Ping, Traceroute.

Assisted in racking and stacking.

Technical assistance for LAN/WAN management and customer issues.

Other responsibilities also included documentation.

Contact this candidate