Shohel Ahmed

732-***-****

acvvve@r.postjobfree.com

SUMMARY:

Cisco certified network engineer with over 7 years of professional experience in Network engineering with Cisco Certified Network Engineer, performing Network analysis, design, Implementing, capacity planning with a focus on performance tuning and support of large Networks.

Strong knowledge in Cisco Routing, Switching and Security with Cisco hardware/software (heavy Cisco shop) experience.

Expertise in Irule/TCL design and troubleshoot.

Experience working on Cisco Catalyst Series3750, 4500, 4900, 6500; Nexus 2000, 5000, 6000 and 7000 series switches.

Extensive work experience with Cisco Routers, Cisco Switches, Load Balancers and Firewalls.

Experience in layer-3 Routing and layer-2 Switching. Dealt with Nexus models like 7K, 5K, 2Kseries, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches

Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy

Involved in troubleshooting of DNS, DHCP and other IP conflict problems.

Responsible for Check Point and Cisco ASA firewall administration across global networks.

Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.

Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX Firewalls(SRX240, SRX550)

In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.

Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.

Experience in Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.

Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a Flexible Access Solution for a datacenter access architecture Expertise in installing, configuring and troubleshooting Juniper EX Switches (EX2200, EX2500, EX3200, EX4200, EX4500, EX8200 series

Enterprise Routing experience using protocols RIP v1 & 2, EIGRP,OSPF and BGP

Expertise in installing,configuring and troubleshooting Juniper Routers ( E,J,M and T-series)

Implementing security policies using Cryptography, ACL, SDM, PIX Firewall, IPsec, VPN, and AAA Security on different series of routers.

Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy.

Experience with different Network Management Tools and Sniffers like Wireshark (ethereal), HP-Open view, RSA envision, and Cisco works to support 24 x 7 Network Operation Center.

Good knowledge of Tunneling Protocols (IPSEC/GRE).

Experience with F5 load balancers and Cisco load balancers (CSM, ACE and GSS).

Basic and advance F5 load balancer configurations, including migrating configurations from Cisco ACE to F5 and general troubleshooting of the F5 load balancers

Knowledge in design and deploy of F5 LTM,GTM,APM,ASM solutions.

Excellent customer management/resolution, problem solving, debugging skills and capable of quickly learning, effectively analyses results and implement and delivering solutions as an individual and as part of a team.

Efficient at use of Microsoft VISIO/Office as technical documentation and presentation tools.

Configure VRRP & GLBP and VLAN Trunking 802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.

Knowledge of JUNOS platform and worked with IOS upgrade of Juniper devices.

TECHNICAL SKILLS:

Cisco Platforms : Nexus 7K, 5K, 2K & 1K, Cisco routers (7600, 7200, 3900, 3600, 2800, 2600, 2500,

1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900 series)

Juniper Platforms : SRX, MX, EX Series Routers and Switches

Networking Concepts : Access-lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPsec, VPN,

WEP, WAP, MPLS, VoIP, Bluetooth, Wi –Fi, VLAN

Firewall : ASA Firewall (5505/5510), Checkpoint, Cisco ASA

Network Tools Solar Winds, SNMP, Cisco Works, Wireshark

Load Balancers : Cisco CSM, F5 Networks (Big-IP)

WAN Technologies : Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3,

T1 /T3 & SONET

LAN technologies : Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel,

VLANS, VTP, STP, RSTP, 802.1Q

Security Protocols : IKE, IPSEC, SSL-VPN

Networking Protocols : RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP,

VRRP, GLBP, TACACS+, Radius, AAA

Languages : Perl, C, C++, SQL, HTML/DHTML

Operating System : Windows 7/XP, MAC OS X, Windows Server 2008/2003, Linux, UNIX

EXPERIENCE:

Capital One, Hartford, CT July 2014 to Till Date

Sr. Network Engineer

Responsibilities:

Involved in complete LAN, WAN development (including IP address planning, designing, installation, configuration, testing, maintenance etc.).

Involved in Switching Technology Administration including creating and managing VLANS’s, Port security, Trunking, STP, Inter Vlan routing, LAN security etc.

Implemented with Cisco Layer 3 switches 3750, 4500, 6500 in multi VLAN environment with the use of inter-VLAN routing, HSRP, ISL trunk, ether channel.

Possess good experience in configuring and troubleshooting WAN technologies like MPLS, T1, T3, DS3 and ISDN.

Implementing the necessary changes such as adding, moving and changing as per the requirements of business lines in a data center environment.

Remediation of firewall rules from checkpoint firewalls to Cisco ASA firewalls and their implementation.

Monitoring the traffic through Cisco catalyst switches for Detection of Intrusion using IDSM2 and its Prevention IPS.

Managing and implementation of PORs (port open requests) based on the requirements of various departments and business lines.

Implementing and troubleshooting (on-call) IPsec VPNs for various business lines and making sure everything is in place.

Installing and configuring new Cisco equipment including Cisco catalyst switches 6500, Nexus 7010, Nexus 5548 and Nexus 2k as per the requirement of the company.

Experience with Firewall Administration, Rule Analysis, Rule Modification

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Responsible for Cisco ASA firewall administration across our global networks

Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with Cisco ASA VPN experience

Setup simplified and traditional VPN communities, and Cisco Any connect

Expertise in design and troubleshoot in Irule/TCL.

Experience with F5 load balancers and Cisco load balancers (CSM, ACE and GSS).

Implement the firewall rules using Netscreen manager (NSM).

Working configuration of new VLANs and extension of existing VLANs on/to the necessary equipment to have connectivity between two different data centers.

Managing and providing support to various project teams with regards to the addition of new equipment such as routers switches and firewalls to the DMZs.

Adding and removing checkpoint firewall policies based on the requirements of various project requirements.

Implementing IPsec and GRE tunnels in VPN technology.

Supporting project test teams in analyzing the bandwidth utilization.

Installing, configuring Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design.

Designed, configured, implemented site-site VPN on cisco ASA 5500 firewall.

Citizens Bank, Providence, RI Aug 2013 – June 2014

Sr. Network Engineer

Responsibilities:

Working in high availability Nexus Environment and provide Level 3 Network Support.

Configuring, upgrading and verifying the NX-OS operation system.

Converting PIX rules over to the Cisco ASA solution.

Basic and advance F5 load balancer and Cisco ACE configurations, general troubleshooting of the F5 load balancers.

Knowledge in design and deploy of F5 LTM,GTM,APM,ASM solutions.

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost effective network solutions to accommodate customer requirements and project scope.

Configured routers and coordinated with LD Carriers and LECs to turn-up new WAN circuits.

Experience with convert Checkpoint VPN rules over to the Cisco ASA solution. Migration with both Checkpoint and Cisco ASA VPN experience

Providing Level 3 support to customers, resolving issues by attending to conference calls.

Providing Level 3 Engineering and Support to other internal network engineers and contractors.

Designing and installing new branch network systems. Resolving network issues, running test scripts and preparing network documentation.

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.

Converting CatOS to Cisco IOS Config Conversion on distribution layer switches

Configured various Router interfaces like ATM interface, T3 & Channelized T1 interfaces

Configuring and troubleshooting CISCO catalyst 6509, 7609, 7613 with Supervisor cards, Cisco 3640, Cisco GSR 12416,21418(with PRP and RPR processors)

Excellent Troubleshooting Skills and Customer Centric approach.

Working with BGP, OSPF protocols in MPLS Cloud.

Providing daily network support for national wide area network consisting of MPLS, VPN and point-to-point site.

Configuring HSRP between the 3845 router pairs of Gateway redundancy for the client desktops.

Configuring GLBP, VLAN Trunking 802.1Q, STP, Port security on Catalyst 6500 switches.

Responsible for service request tickets generated by the helpdesk in all phases such as troubleshooting, maintenance, upgrades, patches and fixes with all around technical support.

Configuring BGP, MPLS in Cisco IOS XR.

Configuring Virtual Device Context in Nexus 7010.

Configuring multiple route reflectors within a cluster.

Working on HP open view map for Network Management System and Ticketing

Involved in Configuration of Access lists (ACL) on ASA firewall for the proper network routing for the B2Bnetwork connectivity.

To secure configurations of load balancing in F5, SSL/VPN connections, Troubleshooting CISCO ASA firewalls, and related network security measures.

Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls.

Verizon Wireless, Houston, TX Feb 2012 to July 2013

Network Engineer

Responsibilities:

Assisted in troubleshooting LAN connectivity and hardware issues in the network of 100 hosts.

Studied and analyzed client requirements to provide solutions for network design, configuration, administration, and security.

Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.

Maintained redundancy on Cisco 2600, 2800 and 3600 router with HSRP.

Created a backup and recovery policy for software application and verified peripherals are working properly.

Monitor performance of network and servers to identify potential problems and bottleneck.

Performed RIP & OSPF routing protocol administration.

Interacted with support services to reduce the downtime on leased lines.

Troubleshoot problems on a day to day basis & provide solutions that would fix the problems within their Network.

Maintenance and Troubleshooting of connectivity problems using Ping, Trace route.

Daily responsibilities included monitoring remote site using network management tools, assisted in design guidance for infrastructure upgrade & help LAN administrator with backbone connection and connectivity issue Other responsibilities included documentation and support other teams

Configured OSPF over frame relay networks for NBMA and point to multipoint strategies

Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).

Provided redundancy in a multi homed Border Gateway Protocol (BGP) network by tunings AS-path

Hand on experience the configuration and implementation of various Cisco Routers and L2 Switches.

Configured Blue Coat ProxySG Web Application Reverse Proxy for securing and accelerate public web applications.

Designed and implemented VLAN using Cisco switch catalyst 1900, 2900, 5000 & 6000 series.

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Built site-to-site IPsec VPNs over Frame-relay & MPLS circuits on various models of Cisco routers to facilitate adding new business partners to new and existing infrastructures.

Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost effective network solutions to accommodate customer requirements and project scope.

Configured routers and coordinated with LD Carriers and LECs to turn-up new WAN circuits. Configuring, Maintaining the Routers and Switches and Implementation of RIP, EIGRP, OSPF, BGP routing protocols and trouble shooting.

Possess good experience in configuring and troubleshooting WAN technologies like MPLS, T1, T3, DS3 and ISDN.

Responsible for implementing QOS parameter on switching configuration.

Involved in Design and Implementation of complex networks related to extranet clients.

Troubleshooting the Network Routing protocols (BGP, EIGRP and RIP) during the Migrations and new client connections.

Manage operational monitoring of equipment capacity/utilization and evaluate the need for upgrades; develop methods for gathering data needed to monitor hardware, software, and communications network performance.

Worked towards the key areas of the project to meet SLA’s and to ensure business continuity. Involved in meetings with engineering teams to prepare the configurations according to the requirement.

Creating change tickets according to the scheduled network changes and implementing the changes.

Bangla Tech, Kumilla, Bangladesh June 2010 to Nov 2011

Network Engineer

Responsibilities:

Configuring and troubleshooting multi-customer ISP network environment.

Involved in network monitoring, alarm notification and acknowledgement.

Implementing new/changing existing data networks for various projects as per the requirement.

Troubleshooting complex networks layer 1, 2(frame relay, ATM, Point to Point, ISDN) to layer 3 (routing with MPLS, BGP, EIGRP, OSPF and RIP protocols) technical issues.

Providing support to networks containing more than 2000 Cisco devices.

Performing troubleshooting for IOS related bugs by analyzing past history and related notes.

Carrying out documentation for tracking network issue symptoms and large scale technical escalations.

Managing the service request tickets within the phases of troubleshooting, maintenance, upgrades, fixes, patches and providing all-round technical support.

Commissioning and Decommissioning of the MPLS circuits for various field offices.

Preparing feasibility report for various upgrades and installations.

Ensure Network, system and data availability and integrity through preventive maintenance and upgrade.

Involved in L2/L3 Switching Technology Administration including creating and managing VLANs, Port security, Trunking, STP, Inter-Vlan routing, LAN security.

Worked on the security levels with RADIUS, TACACS+.

Completed service requests (i.e. – IP readdressing, bandwidth upgrades, IOS/platform upgrades, etc.)

Identify, design and implement flexible, responsive, and secure technology services

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Configured switches with port security and 802.1x for enhancing customers security.

Monitored network for optimum traffic distribution and load balancing using Solar winds.

Validate existing infrastructure and recommend new network designs.

Created scripts to monitor CPU/Memory on various low end routers in the network.

Installed and maintained local printer as well as network printers.

Handled installation of Windows NT Server and Windows NT Workstations.

Handled Tech Support as it relates to LAN & WAN systems

Grammen Tech, Gazipur, Bangladesh June2008 to May 2010

Jr. Network Engineer

Responsibilities:

Provided estimated bandwidth requirements for data replication, to best determine adequate timing for migration service levels

Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalyst

Switches Replace branch hardware with new 2851 routers and 2960 switches.

Implemented WLAN Aruba Wireless Access Points and its Controllers at various corporate sites fort 11n Infrastructure and its legacy technologies.

Experience in working with Cisco Nexus 5000 series switches for data center.

Configured OSPF on CISCO devices with multiple routing processes and redistributed them. Tested and hands on experience in multi area OSPF topologies.

Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

Assisted in network engineering efforts consistent with the infrastructure of an Internet Service Provider and support of such network services. Helped in designing and implementation of VLAN for the new users.

Installation and Configuration of various types of Personal Computers and Printers. Installation of different operating systems on Intel based PC's.

Installed Hard disks, Floppy drives, CD Drives, Sound Blaster cards, CPU, Memory, Power supply unit, Network card, Video graphics card, Hard disk controller card on PC systems.

Troubleshooting of personal computers. On line Support to customers concerning their computer problems.

Configuring, managing and troubleshooting networks using routing protocols like RIP, EIGRP and OSPF (Single Area and Multi Area).

Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client.

Monitor, troubleshoot, test and resolve Frame Relay, ATM, MLPPP, PPP, and Dial-up.

Configuring/Troubleshoot issues with the following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 series), to include: bridging, switching, routing, Ethernet, NAT, and DHCP, as well as assisting with customer LAN /MAN, router/firewalls.

Wrote IOS and CAT OS upgrade procedures and Pre/Post checks for customer production upgrades.

Excellent Troubleshooting Skills and Customer Centric approach.

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.

Configuring Vlan’s, VTP’s, enabling trunks between switches.

Certification:

Cisco Certified Network Associate (CCNA)

Cisco Certified Network Professional (CCNP)

Education:

B.S (Electrical and Electronic Engineering)

Ahsanullah University of Science and Technology, Dhaka, Bangladesh.

Contact this candidate