Network Engineer Cisco

Saketh

Senior Network Engineer

******.******************@*****.*** 908-***-****

SUMMARY

8+ years of professional experience in Planning, Implementing, Configuring, Troubleshooting of networking system on Cisco devices.

Experience with the escalation problems for Routing, Switching and WAN connectivity issues using ticketing systems like remedy.

Experience of routing protocols like EIGRP, OSPF and BGP.

Excellent knowledge of TCP/IP protocols IPV-4 and IPV-6.

Experience working on CISCO NEXUS data center infrastructure with 2000, 5000 and 7000, 9000 series switches includes (5548, 7010, 9396, 9572) including CISCO NEXUS Fabric Extender (2248).

Experience working with Cisco Nexus 2248 Fabric Extender and Nexus 5000 series to provide a Flexible Access Solution for datacenter access architecture.

Strong knowledge in HSRP, VRRP redundancy Protocols.

Worked on Cisco 7200, 6500, 3800, 3600, 2800, 2600, 1800 series Routers and Cisco 2900, 3500, 4500, 5500, 6500 series switches.

Advanced knowledge in design, installation and configuration of ASA 5520, 5555, 5585-X Administration.

Experience in Network LAN/WAN deployment,

Experience with DNS/DHCP/WINS Standardizations and Implementation

Extensive hands-on experience with complex routed LAN and WAN networks, routers and switches.

Hands-on configuration and experience in setting up Cisco routers to perform functions at the Access, Distribution, and Core layers.

Experience in the setup of Access-Lists, and RIP, EIGRP, and tunnel installations.

Proficiency in configuration of VLAN setup on various Cisco Routers and Switches.

Hands-on experience in using network stimulator tools like OPNET, SolarWinds Orion.

Experience in Network Management Tools and sniffers like SNMP, Wireshark and Cisco works.

Access control server configuration for RADIUS & TACACS+.

Cisco Router and Switch configuration using Cisco 6509's running VSS.

Knowledge of advanced technologies like Multicasting, MPLS and MPLS-VPN.

Sound knowledge of virtual firewalls like checkpoint VSX, IDS, IPS, encryption techniques including virtual systems.

Design, configure, troubleshoot and implement wireless and/or data networking (LAN/WAN) solutions for mid-sized to enterprise-level clients

Develop comprehensive project-based System Designs, Network Diagrams, Migration Plans, and Test plans.

Effectively communicate with internal Account Executives and potential clients to assess and make solution recommendations

Extensive knowledge of computer hardware and software applications.

Excellent leadership with good written and oral communication. Great team player and able to work under pressure 24x7 duty rotation.

Configuring cisco switches with NX-OS and IOS-XE& implementing VLANs

Work as Layer 3 IP Network Engineer on ASR9k Edge router with IOS-XE Platform in a network lab environment.

Research and apply Cisco IOS-XE images to L3 Catalyst 3650 switches

Supporting and running four Cisco catalyst Switches 4500, 6500, 3650, 3560, 3750 (inter VLAN routing and EIGRP)

Configuration of IPSEC, DMVPN and GRE tunneling technologies.

Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/ GRE to GetVPN

Technical Skills:

Cisco routers: Cisco 2800,2600,3800,3600(ISO -Version 12.0, 12.2)

Cisco Switches: Cisco Catalyst 6509,6513,3500,5500,5000,2900(IOS- Version 12.4)

Cisco nexus data center switches: 9000, 7000, 5000 (NX- OS version 5.1,5.2)

Load Balancer: F5 Networks (Big-IP)

WAN Optimization: Cisco WAAS, PPP Multilink

Routing: EIGRP, BGP, OSPF, PBR, Route Filtering, Redistribution

Switching: VLAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing,

Multicast Operations, Layer 3, Switches, Ether-channels

Tools: Net Scout, Genius One and Performance Manager

Features & Services: IOS features, HSRP, GLBP, NAT, SNMP, NTP, DHCP, CDP, DNS, FTP, TFTP

AAA Architecture: TACACS+, RADIUS

Cryptographic Algorithms: DES, 3DES, RSA, SHA, MD5, Diffie-Hellman Key exchange.

Firewalls: Cisco ASA, Cisco PIX

Other Networking technologies: TCP/IP, MPLS, VoIP, H.323, VPN, IKE, IPsec

Application Software: Packet tracer, GNS3.

Operating Systems: Windows XP/Win 7, Linux.

Network Management tools: HPNA, BMC Remedy, Proteus, Solar winds

PROFESSIONAL EXPERIENCE

Allstate Insurance, Charlotte NC Aug 2018- Present

Sr. Network Engineer

Responsibilities:

Responsible for design, Implementation and Maintenance of datacenter on CISCO ISR 4300, CISCO 3560.

Migrated legacy Catalyst 6509 distribution switches to Nexus 7700 c7718.

Responsible for configuring, maintenance and troubleshooting of cisco 3650, 4948.

Installed new software releases, system upgrades. Evaluated and installed patches resolved software related problems. Performed system backups and recovery.

Configured Cisco routers provided technical support for the configuration and installation for the customers.

Duties included monitoring network performance using various network tools to ensure the availability, integrity and confidentiality of application and equipment.

Planned migration of servers from traditional Nexus environment to ACI.

Worked on migration of HP Blade chassis to ACI.

Upgraded HP Procurve switches to cisco 3650’s which support ISE.

Created Interface profile and Interface policy groups on ACI.

Configured Access policies, static bindings, EPG’s, Bridge Domain and VRF.

Worked on remote site switch replacement project where I replaced HP Switch to cisco 3650 along with Access points.

Audited all the VLAN’s and found servers to migrate them to ACI.

Took part in migration of core routers from legacy to Nexus 9508.

Providing Layer-3 redundancy by implementing HSRP in the network.

Configure the layer 2 and layer 3 on Cisco Nexus 7K, 5K, 6500, 3850, 3950, ASR and 2960.

Created Visio diagrams documentation to give complete picture of network design for each site.

DST Systems, Kansas City, MO Sept 2017- Jul 2018

Sr. Network Engineer

Responsibilities:

Worked with Cisco Layer 3 switches 6500, 4948; Cisco Nexus 9396 and 7010 with the use of inter-VLAN routing, 802.1Q trunk, ether channel.

Installation of core Cisco Catalyst 4948 to Nexus 9396.

Worked on TACACS/RADIUS server for VPN user authentication and network devices authentication.

Troubleshooting & implementation of VLAN, STP, MSTP, RSTP, HSRP, ACL, AAA, TACACS, RADIUS, SVI.

Experience in L2/L3 protocols like VLAN, STP, VTP, ISL, MPLS, 802.1q and Trunking protocols

Migrated whole datacenter environment from Cisco Catalyst 6500 to Nexus 9K’s and 2K’s.

Installing and configuring Cisco ASA 5520 to ASA 5585-X with Firepower Module.

Installed major production firewall in the environment by consolidating the legacy design.

Migration of Checkpoint to ASA 55XX-X.

Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/Routing/NATing with the firewalls as per design.

Implementing, maintaining and troubleshooting switching tasks such as VLANs, VTP, VLAN Trunking using ISL & 802.1Q, STP, RSTP, PVST+, Ether channel using LACP, Inter-Vlan routing.

Worked on migration of Inter Datacenter routers from ASR 1001 to 1002-X.

Extensive experience with Cisco IOS, IOS-XR, NX-OS.

Hands on experience in configuring Cisco Nexus2232, 2248, 5548, 6001 and 7018(Sup 2E) and worked on nexus protocols VPC, VRF, VDC and FEX Links.

Worked on troubleshooting port issues regarding QSFP, CRC errors, Cable replacements in Production.

Providing technical support on Nexus 2000/9000 switches and operating systems (NX-OS) create vpc domain, design single sided vPC, design double sided vPC, design vPC peer-keepalive, vPC peer-link, vPC member ports.

Tier 3 Troubleshooting of Layer 3 issues related to EIGRP, BGP.

Migrated servers connected from Legacy Switch environment to 9K’s.

Involved in planning and design of various environments.

US Foods, Rosemont, IL Jul 2016 – Jul 2017

Sr. Network Engineer

Responsibilities:

Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF & EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers 7613, 7201 and 3945E.

Experience working on CISCO NEXUS data center infrastructure with 2000, 5000 and 7000 series switches by enabling networked devices to communicate effectively

Hands-on knowledge in configuring cisco 3500, 4500 series switches to implement information sharing and resource allocation for increased productivity.

Automated network implementations and tasks and designed monitoring tools using python scripting

Configured networks using routing protocols such as OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure

Working on troubleshooting, implementing and configuring new devices and helping them to build new data center and moving devices from one data center to another by moving all devices.

Working on to set up OSPF dynamic routing on Cisco ASA Firewalls by using and following their current network infrastructure.

Worked on Deep Packet Inspection (DPI) with riverbed Steelhead platform.

Supported the design, development and implementation of the Riverbed Steelhead and Interceptor architecture for WAN optimization.

Monitor, operate and support network security devices such as cisco ASA and checkpoint VSX firewalls

Experience configuring VPC, VDC and ISSU software upgrade in Nexus 7010.

Deployed Cisco UCS, Cisco ACI Data Center switches like N9K, N5K, Cisco 6200 and 3850 switches, etc.

Deployed VXLAN on the Nexus 9000 to map the physical VLANs to the Virtual Overlay VLANs.

Deployed the Nexus 9000 Application Virtual switch to support network telemetry applications and 9000 Core with VPC and 3172 TOR.

Configuring rules and Maintaining checkpoint VSX, Palo Alto Firewalls & Analysis of firewall logs using various tools

Configuring IPSEC VPN (Site-Site to Remote Access) on SRX series firewalls.

Firewall policy configuration on Checkpoint, ASA and Palo Alto Firewalls. Site to site VPN configuration checkpoint firewall ASA and Palo alto Firewalls.

Used McAfee ePolicy Orchestrator to monitor and identify potential intrusions and attacks for the Cyber Security Operations Center (CSOC).

Migrated firewall rules from Cisco ASA to Palo Alto and Checkpoint Firewalls. Remote access VPN configuration and administration on Cisco ASA 5540 firewalls.

Establishing VPN Tunnels using IPSec encryption standards and configuring and implementing site-to-site VPN, Remote VPN.

Providing daily network support for national wide area network consisting of MPLS, VPN and point-to-point site.

Designed & implemented VPN connectivity for customer premise equipment to Cisco VPN 3000 series concentrator.

Experience in site-to-site and remote access VPN solutions. Configured security policies including NAT, PAT, and VPN, Route-maps, Prefix lists and Access Control Lists.

Managing & administering Cisco WSA. Experience Network security concepts and systems including F5, WSA, Palo Alto, ASA.

Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations

Documenting workflow process, managing and implementing standard policy and procedures.

Involved in migrating applications from NetScaler to F5 Big - IP environment.

Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Dealt with creating VIP (virtual servers), pools, nodes and applying iRules for the virtual servers like cookie persistency, redirection of the URL.

NiSource, Merrillville, IN Jan 2015 – Jul 2016

Network Engineer

Responsibilities:

Implementation and Troubleshooting Cisco Routers such as Cisco 1900, 2900, Cisco ASR 1k and Cisco 9k.

Experience working with ASR 9000 series switches with IOS-XR

Experience with migrating from Cisco ASA 8.2 version to Cisco ASA 8.4 Version

Migrated juniper firewalls to Palo Alto and carried out troubleshooting and configuration.

Configuring Cisco Switches Such as 4500, 6500, stack switches 3750.

Experience setting up MPLS VPN cloud in data center and working with BGP WAN towards customer

Hands on Experience testing I Rules using Browser (IE), HTTP watch for f5 load balancers.

Configure and Juniper EX and MX series switches and routers

Worked on Network Layer technologies including Routing & Signaling protocols, Layer3 VPN and Multicast supported by juniper core and edge, MX series routers

Experience working with JUNOS OS on juniper routers and Switches

Configured LDP, OSPF, and BGP for new deployments of core/edge routers (Cisco and juniper).

Implemented antivirus and web filtering on Juniper SRX 240 at the web server

Migrated Juniper EX series switches to Cisco 3500 series and 6500 series switches

Network Redesign for Small Office/Campus Locations. This includes changes to both the voice and data Environment

Created documents for various platforms including Nexus 7k, ASR1k enabling successful deployment of new devices on the network

Expertise in VPN configuration, routing, NAT, access-list, security contexts in ASA firewalls.

All-encompassing execution& configuration proficiency of Firewalls, Cisco ASA Appliance ASA 5510.

Implemented security policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS).

Experience in analyzing security logs generated by Intrusion Detection/Prevention Systems (IDS/IPS), firewalls, network flow systems, Anti-Virus, and/or other security logging sources.

Monitor SIEM and IDS/IPS feeds to identify possible enterprise threats. Actively investigate, respond to and remediate security incidents.

Network security including NAT/PAT, ACL, and ASA Firewalls.

Replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliances serving as Firewalls and URL and application inspection.

Good knowledge with the technology’s VPN, WLAN and Multicast.

Well Experienced in configuring protocols HSRP, GLBP, ICMP, IGMP, PPP, PAP, CHAP, and SNMP.

Experience with communicating with different with different customers, IT teams in gathering the details for the project.

Managing Citrix NetScaler load balancer

Upgrade from Cisco Catalyst switches to Juniper EX4200 & EX3200 switches across multiple offices.

Design, implement and administer enterprise network infrastructure utilizing Juniper routers across locations.

Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs using various tools

Experience in migration with both Checkpoint and Cisco ASA VPN.

Hands-on experience with converting Checkpoint VPN rules over to the Cisco ASA solution.

Configured, Monitored and Troubleshot Cisco's ASA Security appliances

Switching tasks include VTP, ISL/ 802.1q, IPSec and GRE Tunneling, VLANs, Ether Channel, Trunking, Port \Security, STP and RSTP.

Experience in installing and configuring DNS (BT Diamond), DHCP servers.

Replace branch hardware with new 3900 routers and 2960 switches.

Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used

for local routing only) which involves new wan links.

Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPSec/GRE to Get VPN.

Responsible for layer 2 securities which was implemented using a dedicated VLAN ID for all trunk ports,

Setting the user ports to non-trunking, deployed port security when possible for user ports

DesigningF5 solutions/support for migration work of applications and websites from Cisco CSS Load Balancers to the F5 Big-IP Load Balancers.

Installed and Configured the F5 BIG-IP LTM, configured virtual servers and associate them with pools for Internal web servers.

Involved in the TACACS+ implementation.

Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP,

Disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention

Worked on configuration commissioning and upgradation of the MPLS circuits for various branch offices.

Knowledge of modifying and maintaining bluecoat proxy pac files

Added websites to the URL filtering blocklist in bluecoat proxies.

Configured DNS entries using Infoblox. Used Infoblox to create and manage newly created DHCP scopes.

Responsible for Enterprise DHCP Server (InfoBlox) and VPN, SSL, and Net Motion Accounts.

Citibank, Jersey City, NJ Oct 2013 – Dec 2014

Network Engineer

Responsibilities:

Implemented antivirus and web filtering on Juniper SRX 240 at the web server

Dealt with creating VIP (virtual servers), pools, nodes and applying I Rules for the virtual servers

Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5585 Security appliance

Configured Cisco ASA 5510 firewall to establish logical separation between Legacy & lab environment.

Performed network monitoring, troubleshooting, implementation and maintenance of firewalls

Migrating the policy from cisco ASA firewalls into Palo-Alto & vice versa.

Implemented Zone Based firewall and Security Rules on the Palo Alto Firewalls

Regularly performed firewall audits around CheckPoint firewall solutions for customers.

Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Experience with converting cisco catalyst 6500 switches to Cisco Nexus in the data Center environment

Associate. Responsible for design, installation, configuration, administration and troubleshooting of LAN/WAN network infrastructure and security using Cisco and juniper routers

Implementation and Configuration (Profiles, I Rules) of F5 Big-IP LTM-3600 load balancers

Routine Administration (Design, Implementation & Operations support) of Citrix, BIG-IP and F5 LB.

Provided Layer-3 redundancy by implementing HSRP and GLBP for High availability

Experience configuring VPC, VDC and ISSU software upgrade in Nexus 7010

Troubleshooting of complex LAN/WAN infrastructure that include routing protocols OSPF & BGP, MPLS

Worked on external customer wireless network infrastructure

Supported day to day operational needs for customer infrastructure

Leverage understanding of LAN/WAN technologies to support, design and integrate wireless LANs.

Worked on planning, designing, configurations, deployments and support of network infrastructure.

Participated in the evaluation of vendor hardware, software, and wireless communications products

Operational support and troubleshooting of production wireless network issues

Provided technical support case escalation for customer wireless infrastructure

Documentation of advanced enterprise wireless solutions and designs

Wireless design and validation, including RF site surveys of complex indoor and outdoor deployments

Supported internal wireless network infrastructure operational requirements

Maintaining Checkpoint security policies including NAT, VPN and Secure Remote access

Experience with deploying PIM Sparse-mode/Dense-mode multicasting in Campus locations.

Design, implement and administer enterprise network infrastructure utilizing Juniper routers across locations.

Reliance Communications, Mumbai, India Aug 2009 – Oct 2013

Network Assistant

Responsibilities:

Implement Cisco IOS Firewall IDS using 2600 series router.

Configuring VLAN, Spanning tree, VSTP, SNMP on EX series switches.

Configured VLAN Trucking 802.1Q, STP, and Port Security on Catalyst 6500 switches.

Performed OSPF, BGP routing protocol administration.

IOS upgrade with TFTP.

Assessment and Documentation (including technical, operational, and economic assessment).

Responsible for designing and implementation of customers network infrastructure.

Help negotiate hardware, software, and circuit contracts for customers.

Redesign customers office copper and fiber cable plant for scalability.

Build and maintain Visio documentations for Clients.

Was Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches, fixes, and all around technical support.

Ensured network, system and data availability through preventative maintenance and upgrade.

Support for new store rollout, circuit and wan installations.

Configured and supported multiple remote site installations.

IP Address management using IPAM.

Maintain and troubleshoot Hub and spoke frame relay with EIGRP.

Implement port security on Cisco switches.

Responsible for monitoring & operations of all data network related products and services.

Contact this candidate