Network Engineer Cisco

Rahul Y

+1-609-***-**** *****.*******@*****.***

Professional Summary:

Around 9 years of experience in Cisco/Juniper Networking, Security which includes designing, Deployment and providing network support, installation, and analysis for a broad range of LAN / WAN protocols.

Hands On experience Cisco IOS/IOS-XR/NX-OS, Juniper JUNOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, EIGRP, RIP, BGP v4.

In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.

Involved in troubleshooting of DNS, DHCP and other IP conflict problems.

Good knowledge of Palo Alto Firewalls and the Panorama Network Security Management Box.

Configuring Virtual Chassis for Juniper switches EX-4200, Firewalls SRX-210

Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.

Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.

Extensive work experience with Cisco Routers, Cisco Switches, Load Balancers and Firewalls.

Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 7010, 5000 series to provide a Flexible Access Solution for a datacenter access architecture

Responsible for Check Point (Secure Platform R70) and Cisco ASA firewall administration across global networks.

Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.

Implemented and maintained Sourcefire intrusion detection/ prevention (IDS/IPS) system and hardened protection standards, IDS/IPS signatures on Firewall for Fine-tuning of TCP and UDP services.

Implemented traffic filters using standard and extended access-lists, distribute-lists and route maps.

Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST.

Implementation of HSRP, VRRP for Default Gateway Redundancy.

Proficiency in Cisco ASAs, ISRs, Catalyst/Nexus, HP Switches, Cisco Meraki, Aruba, EIGRP, OSPF, BGP.

Experience in testing Cisco routers and switches in laboratory and deploy them on site production.

Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000.

Deployed, Managed, monitored and supported Bluecoat Proxy for content filtering, internet access between sites and VPN client users, forward proxy scenario and reverse proxy scenario for security and worked on adding URLs in Bluecoat Proxy SG's for URL filtering.

Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NAT with the firewalls as per the design.

Worked extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series.

Knowledge in preparing Technical Documentation and presentations using Microsoft VISIO/Office.

Worked on MPLS while ensuring secure networking, improving the network performance by prioritizing network traffic and allocating bandwidth according to usage and service requirements.

Knowledge of WAN Optimization Technology, Riverbed.

Worked on Cisco Firewalls Cisco ASA 5500(5510/5540) Series and Checkpoint R75, 76, NGX R70 Firewalls.

Worked with the Python 2 & 3 version

Worked with Automation script with Python module like Chef & Ansible.

Configuring Cisco Wireless Controllers and AP’s.

Configuring the Network Admission Control (NAC).

Configuring Cisco WAAS.

Excellent customer management/resolution, problem solving, debugging skills and capable of quick learning, effectively analyze results, and implement and delivering solutions as an individual and as part of a team.

Hands on Experience testing iRules using Browser(IE), HTTP watch

In-Depth Knowledge and experience of various wireless 802.11 standards, controllers, Access Points, Wi-Fi analytics from various vendors (Cisco Meraki, HPE /Aruba, D-Link and Netgear), SD-WAN (MX 65, MX100, MX400).

Provided support that included resolving day-to-day operational issues with tickets generated by a server.

Good understanding of SNMP, IP SLA and Network Monitoring with experience in tools like PRTG.

Technical Skills:

Networking Technologies

LAN/WAN Architecture, TCP/IP, Frame Relay, VPN, VLAN, VTP, NAT, PAT, STP, RSTP, PVST, MSTP

Networking Hardware

Cisco Switches, Cisco Routers, ASA/Pix firewalls, IronPort

Routing Protocols

OSPF, IGRP, EIGRP, RIP, MPLS, IS-IS, BGP, Multicasting

Security Technologies

PAP, CHAP, Cisco PIX, Blue Coat

Network Monitoring

Cisco Works 2000, Wireshark, HRping

Operating Systems

Windows 7, Vista, XP, 2000, LINUX, Cisco IOS, IOS XR

Routers

CISCO 2600, 2800,3600,3800,7200, Juniper M & T Series, Cisco CRS-1, CRS -3, GSR

Load Balancers

Cisco CSM, F5 Networks (BIG-IP)

Capacity & performance

Cisco works

Switches

CISCO 2900, 3500,4500,5000,6500, Nexus 7k,5k,2k

Programming Languages

C, C++, Perl, Power Shell, Python

Simulation Tools

GNS3, VMware, OPNET IT GURU, OPNET Modeler, Cadence

Firewalls

Juniper Net Screen (500/5200), Juniper SRX (650/3600), Pix (525/535), ASA (5520/5550/5580), McAfee Web Gateway, Checkpoint, Palo Alto firewalls.

AAA Architecture

TACACS+, RADIUS, Cisco ACS

Features & Services

IOS and Features, HSRP, GLBP, IPAM IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP Management, Open Stack, IVR’s, HLD and LLD documents, Dell equal logics

Summary of Professional Experience

Elavon Sr. Network Engineer Sep 2016 – Present

State of New Jersey Sr. Network Engineer Jan 2015 – Aug 2016

Abacus Federal Savings Bank Sr. Network Engineer Jul 2013 – Dec 2014

Hitachi Network Engineer Oct 2011 – Jun 2013

Polygon, India Network Engineer May 2009 – Sep 2011

Professional Experience:

Elavon, Atlanta, GA Sep 16 - Present

Sr. Network Engineer

Responsibilities:

Configuration and Administration of Cisco and Juniper Routers and Switches

Performed Configuration on ASR 9K Pairs includes HSRP, Bundle Ethernet Configuration, Assigning DHCP profiles

Experience working with Nexus 7010, 5548, 5596, 2148, 2248 devices.

Deploying and decommission of VLANs on core ASR 9K, Nexus 9K, 7K, 5K and its downstream devices and also configure 2k, 3k, 7k series Routers

Experience configuring VPC (Virtual Port Channel), VDC (Virtual Device Context) in Nexus 7010/7018

Configuring and managing F5 ASM (Application security manager). Developed security policies.

Configure and troubleshoot Juniper EX series switches.

Experience with configuring FCOE using Cisco nexus 5548

Created documents for various platforms including Nexus 7k, ASR9k, and ASR1k enabling successful deployment of new devices on the network

Configured Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000 to connect servers and storage devices.

Experience with setting up MPLS Layer 3 VPN cloud in data center and also working with BGP WAN towards customer

Experience with configuring Cisco 6500 VSS in Distribution layer of the Data center network

Migrated to Juniper EX series switches from Cisco 3500 series and 6500 series switches

Experience with moving data center from one location to another location, from 6500 based data centers to Nexus based data center

Network security including NAT/PAT, ACL, and ASA/SRX Firewalls.

Good knowledge with the technologies VPN, WLAN and Multicast.

Well Experienced in configuring protocols HSRP, GLBP, PPP, PAP, CHAP, and SNMP.

Work with Load Balancing team to build connectivity to production and disaster recovery servers through F5 Big IP LTM load balancers

Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy it also includes the configuration of port channel between core switches and server distribution switches

Install, manage and monitored Palo Alto Firewalls in Panorama.

Implement changes on switches, routers, load balancers (F5 and CSS), wireless devices per engineer’s instructions and troubleshooting any related issues

Worked with HP switches, Extrahop, F5 Load Balancer.

Experience with communicating with different customers, IT teams in gathering the details for the project

Switching tasks include VTP, ISL/ 802.1q, IP Sec and GRE Tunneling, VLANs, Ether Channel, Trucking, Port Security, STP and RSTP.

Experience in installing and configuring DNS, DHCP servers.

Replace branch hardware with new 3900 routers and 2960 switches.

Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IP Sec/GRE to Get VPN.

Worked with Palo Alto firewalls PA250, PA4050, PA3020 using Panorama servers, performing changes to monitor/block/allow the traffic on the firewall. Technical assistance for LAN/WAN management and complex customer issues.

Responsible for layer 2 securities which was implemented using a dedicated VLAN ID for all trunk ports, setting the user ports to non-trucking, deployed port security when possible for user ports.

Involved in configuring Juniper SSG-140 and Cisco ASA firewall.

Strong hands on experience on, ASA Firewalls, Palo Alto Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL VPN, IPS/IDS, AAA (TACACS+ & RADIUS).

Implemented Zone Based Firewalls and Security Rules on the Palo Alto Firewall. Exposure to wildfire feature of Palo Alto. Supported Blue Coat Proxy in explicit mode for users trying to access Internet from Corp Network.

Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering). Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls.

Worked with the Python 2 & 3 version

Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, prevention where needed.

Environment: Cisco ASA Firewalls, F5 ADC, Cisco 3900 Routers, Cisco Catalyst switches 6500, 3750, 3550, 2960 Switches, Juniper SSG-140, Palo Alto Wildfire, Juniper EX series switches, Nexus 9k, 7k, 5k, ASR 9k, ASR 1k, Nexus 2000 FEX, Juniper SRX, Routing Protocols: BGP, OSPF, AAA (TACACS+ & RADIUS), TCL Scripting, ACL Configuration.

State of New Jersey, Trenton, New Jersey Jan 15 – Aug 16

Sr. Network Engineer

Responsibilities:

Configure / Troubleshoot CISCO 12000, 7500, 3800 series routers and 3560 series switch for LAN/WAN connectivity.

Involved in design and implementation of Data Center Migration, worked on implementation strategies for the expansion of the MPLS VPN networks

Experience in configuring VPC, VDC and ISSU software upgrade in Nexus 7010

Actively involved in Switching Technology Administration including creating and managing VLANS, Port security- 802.1x, Trucking 802.1Q, RPVST+, Inter-VLAN routing, and LAN security on Cisco Catalyst Switches4507R+E, 6509-E and Cisco Nexus Switches 2232, 5596, 7009.

Troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP, MPLS

Experience with deploying PIM Sparse-mode/Dense-mode multicasting in Campus locations.

Serve as part of a team of network engineers responsible for base wide network upgrade from Cisco Layer 3 Catalyst switches to Juniper Layer 3 EX4200 & EX3200 switches.

Design, implement and administer IPv4 enterprise network infrastructure utilizing Juniper routers like Juniper MX80, MX 480 and MX960.

Design and implement Catalyst/ASA Firewall Service Module for various LAN’s.

responsible for managing Cisco routers, switches, HP switches, F5 load-balancers using SNMP MIBs for fault detection and for fault isolation.

Involved in Configuration of Access lists (ACL) on checkpoint firewall for the proper network routing for the B2B network connectivity.

Integrate Microsoft active directory (LDAP) into checkpoint for identity awareness and user authentication.

Configure and manage LDAP User management with Checkpoint Smart Directory. Implemented the policy rules and DMZ for multiple clients of the state on the Checkpoint firewall.

Worked with several network engineers for the understanding of Juniper SRX firewalls along with the changeover to Palo Alto. Palo Alto Firewall Management-Panorama.

Experienced in handling and installing Palo Alto Firewalls

Serve as part of a team of network engineers responsible for base wide network upgrade from Cisco Layer 3 Catalyst switches to Juniper Layer 3 EX4200 & EX3200 switches.

Experience working with ASR 9000 series switches with IOS-XR

Involved in configuring Juniper SSG-140 and Check point firewall.

Provided Layer-3 redundancy by implementing HSRP and GLBP for High availability

Implementation and Configuration (Profiles, iRules) of F5 Big-IP LTM-6400 load balancers

Implemented Access lists and policy mapping on Juniper router installed in each branch across all the states.

Worked on configuration commissioning and upgradation of the MPLS circuits for various branch offices. Disabling all unused ports and putting them in unused VLAN.

Implemented, analyzed and recommended appropriate system for the out of band management monitoring. Utilizing SolarWinds for primary and disaster recovery site.

Monitored and responded to network anomalies utilizing SolarWinds/Orion's software and recommended appropriate network solutions for issues.

Environment: Cisco 12000, 7500, 3800 series routers and Cisco 3560 series switches, Juniper EX4200, EX3200 Switches, Juniper MX80, MX480, MX960 Routers, F5 ADC, FHRP: HSRP, GLBP, ASR 9000, Juniper SSG-140, Cisco Nexus Switches 2232, 5596, 7009, Checkpoint Firewall, VLAN, 802.1Q Trunking.

Abacus Federal Savings Bank, New York, NY Jul 2013 – Dec 2014

Network Engineer

Responsibilities:

Assisted in troubleshooting LAN connectivity and hardware issues in the network of 500 hosts.

Studied and analyzed client requirements to provide solutions for network design, configuration, administration, and security.

Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.

Maintained redundancy on Cisco 2600, 2800 and 3600 routers with HSRP.

Monitor performance of network and servers to identify potential problems and bottleneck.

Performed RIP & OSPF routing protocol administration.

Interacted with support services to reduce the downtime on leased lines.

Maintenance and Troubleshooting of connectivity problems using Ping, Trace route.

Daily responsibilities included monitoring remote site using network management tools, assisted in design guidance for infrastructure upgrade & help LAN administrator with backbone connection and connectivity issue Other responsibilities included documentation and support other teams

Configured OSPF over frame relay networks for NBMA and point to multipoint strategies

Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).

Troubleshooting of Cisco 2800,2900, 3900, 7200, 7600, ASR9k, CRS, GSR 12k Series routers

Implementing the necessary changes such as adding, moving and changing as per the requirements of business lines in a data center environment.

Configure BGP features such as as-override, Local pre, EBGP load sharing on client connections

Configured and resolved various OSPF issues in an OSPF multi area environment between multiple branch routers.

Working with Juniper JUNOS on M and MX series routers.

Providing daily network support for national wide area network consisting of MPLS, VPN and point-to-point site.

Configuring HSRP between the 3845 router pairs of Gateway redundancy for the client desktops.

Configuring GLBP, VLAN Trunking 802.1Q, STP, Port security on Catalyst 6500 switches.

Provided redundancy in a multi homed Border Gateway Protocol (BGP) network by tunings AS-path

Hand on experience the configuration and implementation of various Cisco Routers and L2 Switches.

Designed and implemented VLAN using Cisco switch catalyst 1900, 2900, 5000 & 6000 series.

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Built site-to-site IPSec VPNs over Frame-relay & MPLS circuits on various models of Cisco routers to facilitate adding new business partners to new and existing infrastructures.

Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost-effective network solutions to accommodate customer requirements and project scope.

Configured routers and coordinated with LD Carriers and LECs to turn-up new WAN circuits. Configuring, Maintaining the Routers and Switches and Implementation of RIP, EIGRP, OSPF, BGP routing protocols and trouble shooting.

Possess good experience in configuring and troubleshooting WAN technologies like MPLS, T1, T3, DS3 and ISDN.

Worked with Load balancing device like F5 Big-IP local traffic manager (LTM) 1600

Responsible for implementing QOS parameter on switching configuration.

Involved in Design and Implementation of complex networks related to extranet clients.

Knowledge and experience of 802.11 a/b/g/n Ethernet standard for wireless Technology.

Worked with other team members in testing of the network architecture.

Troubleshooting the Network Routing protocols (BGP, EIGRP and OSPF) during the Migrations and new client connections.

Manage operational monitoring of equipment capacity/utilization and evaluate the need for upgrades; develop methods for gathering data needed to monitor hardware, software, and communications network performance.

Worked towards the key areas of the project to meet SLA’s and to ensure business continuity. Involved in meetings with engineering teams to prepare the configurations according to the requirement.

Creating change tickets according to the scheduled network changes and implementing the changes.

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, F5 Load Balancer Cisco Nexus7K/5K, Checkpoint, Cisco ASA

Hitachi, Englewood, CO Oct 11 – Jun 13

Sr Network Engineer

Responsibilities:

Involved in implementation of trunking using Dot1Q, and ISL on Cisco Catalyst Switches.

Involved in Local Area Network (LAN) design, troubleshooting, and maintenance as per company’s requirements.

Worked with sniffing tools like Ethereal to analyze the network problems.

Maintenance and troubleshooting of network connectivity problems using PING, Trace Route.

Performed replacements of failed hardware and upgraded software.

Configured VLANS to isolate different departments.

Troubleshoot issues related to VLAN, VLAN Trunking, HSRP failovers, related issues.

Configured IPSEC VPN on SRX series firewalls.

Used TFTP server to backup Cisco configuration files.

Network layer tasks included configuration of IP Addressing using FLSM, VLSM for all applications and servers throughout the company.

Performed scheduled Virus Checks & Updates on all Servers & Desktops.

Implementing Routing using the following protocols; IS-IS, OSPF, BGP on Juniper M series routers.

Design, installation and troubleshooting networks with hand-on experience with OSPF, ISIS, BGP, VPLS, Multicast, VPN, MPLS, & Traffic engineering.

Configured VTP to manage VLAN database throughout the network for Inter-VLAN Routing.

Worked in setting up Inter-VLAN routing, redistribution, access-lists and dynamic routing.

Involved in configuring and implementing of Composite Network models consists of Cisco 2620 and, 1900 series routers and Cisco 2950, 3500 Series switches.

Implemented various Switch Port Security features as per the company’s policy

Configured RIP, and EIGRP on 2901 and 3925 Cisco routers.

Provided technical support for expansion of the existing network architecture to incorporate new users.

Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500.

Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.

Environment: Cisco 3750/3550/3500/2960 switches and Cisco 3640/12000 /7200/3845/3600/2800 routers, Cisco ASA5510, Checkpoint, F5 Load Balancer Cisco Nexus7K/5K,Checkpoint,Cisco ASA, Nexus 5k and 7k, NX-OS, Meraki, BIG-IP, LTM/GTM, ADC, Citrix NetScaler, Juniper EX4600, EX3400, EX4300, ACX1000, JunOS, Infoblox, DNS, DHCP, Web Application firewall (WAF), POP3, HTTP, NNTP, ICMP, SNMP, FTP, SSH, Wireshark, NAC, Cisco ACE 4710, OSPF, Frame Relay, MPLS, BGP,VLAN, IPSec, QOS,RIP.

Polygon, Hyderabad, India May 09 – Sep 11

Network Engineer

Responsibilities:

Used TFTP server to backup Cisco configuration files.

Provided technical support for expansion of the existing network architecture to incorporate new users.

Network layer tasks included configuration of IP Addressing using FLSM, VLSM for all applications and servers throughout the company

Configured STP for loop prevention on Cisco Catalyst Switches

Configured VTP to manage VLAN database throughout the network for Inter-VLAN Routing.

Worked in setting up inter-vlan routing, redistribution, access-lists and dynamic routing.

Involved in configuring and implementing of Composite Network models consists of Cisco 2620 and, 1900 series routers and Cisco 2950, 3500 Series switches.

Implemented various Switch Port Security features as per the company’s policy

Configured VLANS to isolate different departments.

Configured IPSEC VPN on SRX series firewalls

Design, installation and troubleshooting networks with hand-on experience with OSPF, BGP, VPLS, Multicast, VPN, MPLS, & Traffic engineering.

Involved in implementation of trunking using Dot1Q, and ISL on Cisco Catalyst Switches

Worked with snipping tools like Ethereal (Wireshark) to analyze the network problems.

Maintenance and troubleshooting of network connectivity problems using PING, Trace Route.

Performed replacements of failed hardware and upgraded software

Performed scheduled Virus Checks & Updates on all Servers & Desktops.

Implementing Routing and Switching using the following protocols; OSPF, BGP on Juniper M series routers.

Involved in Local Area Network (LAN) implementation, troubleshooting, and maintenance as per company’s requirements.

Environment: Cisco 3750, 2950 series switches, Cisco 2620, 1900 series routers, VLAN’s, 802.1Q Trunking, HSRP, Sniffing Tools: Ethereal, Wireshark, Routing Protocols: OSPF, BGP. TFTP Server.

Education Details:

Bachelor’s in Electronics & Communication Engineering.

Contact this candidate