Network Engineer

Jaimin.J.Patel

******.*******@*****.***

Phone: 501-***-****

PROFESSIONAL SUMMARY

* ***** ** ********** ** implementation, troubleshooting and maintenance of complex and security devices.

Experience in configuring and troubleshooting of routing protocols RIP v1/v2, EIGRP, OSPF, IS-IS BGP and MPLS.

Worked on Layer 2 technologies, Switched VLANs, Spanning Tree and WLANs.

Understanding the JUNOS platform and worked with IOS upgrade of Juniper devices.

Worked on network topologies and configurations, TCP/IP, UDP, Frame Relay, bridges, routers, hubs and switches.

Provided proactive threat defense with ASA that stops attacks before they spread through the network.

Designed and Implemented Cisco PIX525 and ASA5550 firewall’s interfaces with FTP, DNS, HTTP servers on DMZ with different security levels.

Configuring network devices, developing test standards and QoS Testing using Spirent Test Centre

Design and deploy MPLS VPNv4, Layer 2/3, OSPF, static routing, VLAN, dot1q trunks.

Load balancing and traffic shaping, MQC, QoS on Catalyst, troubleshooting and support

Switching tasks include VTP, ISL/ 802.1Q, IPsec and GRE Tunneling, VLAN, Ether Channel, STP RSTP, PVST+.

Knowledge in Microsoft Office Suite, Cisco IOS, IOS-XR, Junos, LOES/SAOS, Wireshark, Adobe Photoshop, Pro Tools Authorized to work in the US for any employer

Implemented the numerous firewalls rules on the Checkpoint with both Hide Nat and Static NAT

Migrated Check Point 680 to juniper SRX 650.

Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.

Strong hands on experience in installing, configuring, and troubleshooting of Cisco 7600, 7200, 3800, 3600, 2800, 2600, 2500, and 1800 series routers, Cisco Catalyst 6500, 4500, 3750, 2950, and 3500XL series switches.

Detailed technical knowledge of either Cisco ACE, F5 load balancer technology.

Configured Juniper SSG-550 and ISG-1000 and Cisco ASA5510 firewalls.

Experience with F5 load balancers - LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability

Implemented 4 Class QOS

Help customers with QOS design and troubleshoot voice call quality issues using Wireshark

Managed VPN token issuance via RSA implementation.

Design, Build, and Implement various solutions on Check Point Firewalls, Blue Coat Proxies, F5 Load balancers and F5 Global Traffic Managers.

Hands on experience in configuring and supporting site-to-site and remote access Cisco, IPsec, VPN solutions using ASA/PIX firewalls, Cisco, B2B VPN client in addition to providing TACACS+ and RADIUS services.

Involved in setting up Voice VLANs on distribution switches, and configuring access switches ports for AVAYA IP PHONES

Done troubleshooting of Cisco, Juniper and Arista equipment

Expertise in the configuration and troubleshooting of Routing Protocols likeRIP, OSPF,EIGRP,ODR,BGP,MP-BGP,VRF-LITE, Redundancy Protocols like VRRP and HSRP

Expertise in implementation of IP addressing schemes (includes VLSM) and IP services to meet medium level enterprise level network requirement

Experience working with Nexus 7K, 5K, 2K devices.

Experience with configuring Nexus 2000 Fabric Extender (FEX), which acts as a remote line card (module) for the Nexus 5000.

Well experienced in configuring protocols HSRP, GLBP, VRRP, ICMP, IGMP, PPP, HDLC, PAP, CHAP, and SNMP.

Migration of Palo Alto firewalls from ASA

Implemented traffic filters using Standard and Extended access-lists, Distribute-Lists, and Route Maps.

Experience with MS Word, Access, Excel, PowerPoint and MS Outlook.

Experience in installing and configuring DNS, DHCP server.

Moderate knowledge in configuring and troubleshooting Cisco Wireless Networks: LWAPP, WLC, WCS, Standalone Aps, Roaming, Wireless Security Basics, IEEE 802.11 a/b/g, RF spectrum characteristics.

Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Good knowledge and experience in installation, configuration, and Administration of Windows 2000/2003, HTTP, FTP, DNS, NTP, DHCP servers under various LAN and WAN environments.

Skilled in MS Word, Excel and PowerPoint, Legal Solutions, Internet, and Email.

Proficiency in handling Network Monitoring tools and Packet capture tools.

Adept in preparing technical documentation and presentations using Microsoft Visio/ Office.

Provides technical leadership for problem escalation and resolution.

Highly motivated with the ability to work independently or as an integral part of a team and committed to highest levels of professionalism.

Juniper: EX-2200, EX-4200, EX-4500, EX-480, M Series, SRX210, SRX240.

CERTIFICATIONS:

Cisco Certified Network Associate (CCNA)

Juniper Networks Certified Associate (JNCIA-Junos)

Technical Skills:

Cisco Routers

1700,1800,2500,2600,3600,3800,7200,7600

Cisco L2 & L3 switches

2900,3560,3750,4500,4900,6500

LAN Technologies

VLAN,VTP,Inter-vlan routing,STP,RSTP,PVST,802.1x

WAN Technologies

HDLC, PPP, ATM, SONET, MPLS, VPN, IPSec-VPN

Network Securities

NAT/PAT, VPN, Filtering LoaBalancing using F5, IPSec, Checkpoint Firewall

Routing Protocols

RIP,IGRP,EIGRP,OSPF,BGP,IS-IS,HSRP,IPv6

Load balancer

BIG IP F5 LTM/GTM/ASM

Routed Protocols

TCP/IP, IPX/SPX

Infrastructure services

DHCP,DNS,SMTP,POP3,FTP,TFTP

Network Managements

SNMP, SSH, Telnet, ICMP

IP Telephony

VOIP, FXO/FXS/E&M/T1/ISDN/PRI, Call manager Express

Operating System

Windows,MS DOS,UNIX,Linux

PROFESSIONAL EXPERIENCE

Network Engineer

Apple Inc., Elk Grove, CA (Aug 2015 – Present)

Responsibilities:

Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF & EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers 7613, 7201, and 3945E.

Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NAT’ing, sub-netting, also including DNS, LDAP, DHCP, http, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, STP (Spanning tree Protocol), RTSP & Multicasting protocols

Configuration and maintenance of routers, firewalls, and load-balancers. Included configuration of Juniper ISG 2000, Juniper EX4200, F5 BIG-IP 3600, and Cisco 6500. Includes protocols such as MPLS, BGP, OSPF, and VRRP.

Configured Multiprotocol Label Switching (MPLS) VPN with Routing Information Protocol (RIP) on the customer's stage

Installation, configuration and troubleshooting of Cisco 7200VXR, ASR1K, ASR9K series routers and Catalyst 6500, 2900 series switches

Design, Build, and Implement various solutions on Check Point Firewalls, Blue Coat Proxies, F5 Load balancers and F5 Global Traffic Managers.

Implemented Juniper EX2200, EX3200, Ex3300, EX4200 Juniper Wireless 800 series, Junos 11.4R, 12.2R Junos 7.7, Ring

Network Consultant for Nexus Next-Generation project. Built out several MPLS/BGP VRFs for multiple clients. Included implementation of 9K, 7K, 5K, and 2K configuration for integration witch UCS and legacy systems. Developed process for Network Engineering Peer review for all network related systems.

Global Team Lead for datacenter consolidation project. Consolidated 16 global datacenters consisting of Cisco 6500, 4500, 2800, ASA 5540, F5 BIG-IP 3600, and Palo Alto 2000. Consolidation was in preparation to upgrade datacenters to Nexus 7000, 5000, 2000, and ASR 1000 backbone infrastructure. Including providing Level 3 and vendor level troubleshooting of all LAN and WAN related issues.

Provide Cloud Network Infrastructure support for global clients. Included setting up new VPNs, NAT, and URL configuration.

Implemented the numerous firewalls rules on the Checkpoint with both Hide Nat and Static NAT

Migrated Check Point 680 to juniper SRX 650.

Responsible for creating network configurations for Cisco ASR9k, CRS, Nexus 7000, 7609, 7613, 6509, 4509, 5500, 3550, 2620, 2621, 1720, Junipers MX960, M320.

Provided project oversight for all network engineering projects and managed a team of network engineers.

Established development lab for testing of network equipment. Models included EX4200, EX3200, J2350, J6350, Cisco 6500, and Cisco 3560.

Integrated and tested Riverbed 2050-H and 5050-H Steelhead appliances for over 20 geographical locations. Included upgrading RIOS and network configuration. Worked with Riverbed professional services to return faulty Steelheads.

Provided BGP and firewall consulting to clients SRX240 and EX4200 implementation. Included reviewing and improving IP Plan, application requirements, and WAN failover.

Configuration and implementation of ASA 5500s, Cisco 2921s, Cisco 3560s, Cisco 2960, Cisco WAAS, and Cradle point 3g/4g routers. Implementations provided connectivity to locations throughout the USA and Caribbean.

Configuration of NAC Clean Access clients, servers, and mangers. Implementation ensured wireless devices (IPhones, IPads, Laptops, etc.) were properly quarantined before accessing corporate network.

Configuration of Cisco WCS, NCS, 5500 WLCs, and 3600/2600/1200 Access Points.

Ordered communications circuits from AT&T, Sprint, and other regional carriers.

Configuration and maintenance of routers, firewalls, and load-balancers. Included configuration of Juniper ISG 2000, Juniper EX4200, F5 BIG-IP 3600, and Cisco 6500. Includes protocols such as MPLS, BGP, OSPF, and VRRP.

Developed design and testing of EIGRP to OSPF migration.

Developed and implemented core network consolidation plan. Included redundant configuration of Juniper EX8200.

Experience with design and implementation of Virtual Switching System (VSS) for both User segment and server segment using 6509-V-E catalyst switches

Expert Level Knowledge about TCP/IP and OSI models.

Involved in the redistribution into OSPF on the core ASA firewall

Updated old Cisco switches & routers in existing data centers & installing new Cisco switches & routers.

Configuring, upgrading and managing Juniper devices like M&T series routers, EX, MX and SRX

Extensive Arista and Cisco Nexus 3000 low latency systems

Experience with managing the completed end to end site solutions

Detailed technical knowledge of F5 load balancers - LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability

Hands on experience in configuring VDC, VPC and FCOE, upgrading NX-OS for Nexus Family Switches.

Worked on Layer 2 protocols such as STP, VTP, STP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment

Configured Cisco ASR-9K, ISR 2800 & 3800 series routers with OSPF as an enterprise IGP

Implement Cisco IOS Firewall IDS using 2600 series router

Worked with installation of Palo Alto firewalls.

Worked in Primary Environment: SRX220, SRX650, SRX3600 and Checkpoint R77

Experience with design and implementation of Data center migration

Designing, Implementing and Troubleshooting Cisco 3750, 3550, 3560, 2924, 6509-V-E, 6513, 6504, 6503, 6506, 6500 series switches, GSR, ASR routers with Cisco IOS and IOS-XR

Installed, configured and managed Cisco routers such as 7200 series, 3800 series, 3700 series, 2800 series and Cisco Catalyst switch series 6500, 4500, 3500, and 2900.

Upgraded the data center network environment with Cisco ASA 5520. Configured ACL’s on Cisco Switches as well as configured routers as terminal servers.

Implementing 3750 Stackable switches using Cisco Stack Wise technology. Experience to review and evaluate current and future design issues as required maintaining network integrity, efficient data flow.

Worked on Layer 2 protocols such as STP, VTP, STP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment

Involved in designing and implementing QOS and policy map to 2800 series routers for all the branches

Implemented Juniper SRX FW Interface, NAT and VLAN using SPACE

Understanding of Juniper EX/MX/SRX series architectures and JUNOS platform including hands on configuration

Successfully engineered a 2-factor VPN using Palo Alto, AD and RSA solutions.

Implemented VoIP solutions using SIP & H.323, also have sound knowledge of Avaya VoIP products.

Maintenance and Troubleshooting of LAN connectivity problems using Ping, Trace route Environment: Cisco 3560, 4500 switches and Cisco 3825 Routers, Juniper SRX 650, F5 BIG IP 2000, EIGRP, BGP, STP, VLAN

Worked with F5 load balancers - LTM, GTM series like 6400, 6800, 8800

Configuration and Troubleshooting of core, distribution and access switches (Cisco 6500, 3750, 2950 series) in LAN and WAN network, Server Load Balancers such as Cisco CSS and Nortel Alteonwebswitch, F5 BigIP, firewalls Checkpoint (Nokia) and Cisco firewalls (PIX and ASA), Juniper Net screens.

Worked on configuring and managing wireless access points of multiple vendors like Cisco, Avaya and Aruba.

Experience Branch Relocation: Connect workstation, servers, etc. Rack and stack Pre-configured new hardware and connect the circuits. Work with Carrier to test and turn-up circuits.

Upgraded switches with updated Cisco IOS images and perform initial switch configuration including AAA security, generating RSA keys, and configuring switch ports for various end devices.

Redistributing from RIP to OSPF and vice versa by implementing Hub and Spoke topology with a Frame Relay Switch.

Extensive implementation of firewall rules on Juniper SRX 3600, SRX 650 and SRX 220, using SPACE as well as CLI when needed.

Performed IP address planning, designing, installation, configuration, testing, maintenance, and troubleshooting in complete LAN, WAN development.

Involved in operations and administration of WAN consisting Ethernet Handoffs, T1, DS3, and Optic Fiber Handoffs.

Supporting EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations

Racking, Stacking, configuring, Nexus 5K and 2K and 7K.

Enviornment: Cisco ASA 5505/5510/5520, Cisco Routers 2900 series, Cisco Switches 2950/2960/3750 Vlans, STP,RSTP,PVSTP,VTP,HSRP, Ether channel, BGP, OSPF,EIGRP, MPLS, ATM, PPP, HDLC, SNMP, DNS, DHCP, MS exchange 2010, Xenserver 6.0, Xcenter, Hyper- V 2008/2012

Network Engineer

HP, Plano TX (March 2014 – Aug 2015)

Responsibilities:

Configured the BGP as a WAN protocol, and OSPF/EIGRP as interior routing protocol.

Provide technical support for clients with dial-up internet issues.

Configuration of Access List ACL (Std, Ext, Named) to allow users all over the company to access different applications and blocking others.

Configured Cisco ASR, ISR 2800 & 3800 series routers with OSPF as an enterprise IGP

Implemented traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF)

Used Cisco ACE load balancer between the servers inside the network and in the DMZ.

Provide support to help desk for complex/major network problems. Build the rules for the application access across the IPSEC VPN tunnel.

Design the firewalls rules on Cisco ASA 5520 and 5540-X and implemented the different NAT policies

Did JUNOS and NAT migrations on Juniper SRX firewalls

Review monitoring and security risks for our network infrastructure, update security policies using Juniper NSM and Palo Alto firewalls

Installation of Cisco ASA 5500 series firewalls, Cisco 3500, 4500, 6500 series switches

Configuration and Maintenance of ASA 5550, ASA 5510, PIX 535, PIX 515E, FWSM Firewalls and Cisco IPS 4240 using Cisco Security Manager (CSM).

Expertise in VPN configuration, routing, NAT, access-list, security contexts, and failover in ASA firewalls.

Provided redundancy in a multi homed Border Gateway Protocol (BGP) network by tuning AS-path.

Innovated with support of Palo Alto for remote and mobile users and for analyzing files for malware in a separate (cloud-based) process that does not impact stream processing.

Implement and manage Geo-Location based load balancing using F5 GTM load balancers. Provide consulting services to customers recommending best practices for their security posture and their environments.

Troubleshoot and hands on experience on security related issues on Cisco ASA/PIX, Checkpoint, IDS/IPS, Palo Alto and Juniper Net screen firewalls. Installed and configured DNS and DHCP server.

Installed and maintained routers and switches in various network configurations supported VLANs, Qos, Avaya VoIP, and advanced access-lists.

Experience in configuring VDC, VPC and FCOE, upgrading NX-OS for Nexus Family Switches.

Configure, monitor and trouble-shoot Juniper Net screen firewall.

Creating Wide IPs with various load balancing methods like Global Availability, Topology and Round Robin.

Involved in troubleshooting of DHCP and other IP conflict problems.

Implementing Security Solutions in Juniper SRX and Net Screen SSG firewalls by using NSM.

Daily technical hands on experience in the configuration, troubleshooting of Juniper SRX firewalls as well as experience working directly with customer in a service/support environment.

Extensive implementation of firewall rules on Juniper SRX 3600, SRX 650 and SRX 220 on a daily basis, using SPACE as well as CLI when needed.

Responsible for overall firewall configuration implementations and policy installations across all platforms during maintenance windows including Juniper, Check Point, and Fortinet for major enterprise network.

Configuring, administering and troubleshooting the Check Point, Palo Alto and ASA Firewall.

Daily exposure to IP based network security protocols with Juniper SRX firewalls, Operating Systems and security configurations LAN/WAN/Security solutions Working on Cisco 6509 and 4507 series switches for LAN requirements, that includes managing VLANs, Port Security and troubleshooting LAN issues

Attending meetings and technical discussions related to current project.

Maintained redundancy on Cisco 2600, 2800 and 3600 router with HSRP and VRRP.

Implemented and configured routing protocols like EIGRP, OSPF.

Implemented Positive Enforcement Model with the help of Palo Alto Networks

Monitor the operability and reliability of the network.

Configured STP for loop prevention and VTP for Inter-VLAN Routing.

Configuration and troubleshooting of EIGRP, OSPF, BGP.

Configuration of Standard and Extended ACLs for Security.

Troubleshooting the issues related to routing protocols.

Managing, troubleshooting and monitoring the network using Network Monitoring tool.

Network Security implementation with Cisco IOS Feature Set, NAT, and Simple Network Management Protocol.

Involved in migration from Frame-Relay/ATM network to MPLS-based VPN for customer’s WAN infrastructure

Provided support for troubleshooting and resolving Customer reported issues.

Performed IOS upgrades on Catalyst 3550, 2950, 1900 switches, and 3600, 2600 and 2500 routers.

Provided support for global network including T1/T3, ATM connections using HDLC and Frame Relay on 2600, 4000 series Routers.

Installed wireless access points (WAP) at various locations in the company.

Technical assistance for LAN/WAN management and complex customer issues.

Environment:Cisco 3750/3550/3500/2960 switches and Cisco 2600, 2800, 3700, 3825, 7200 routers.

Network Engineer

BSNL, India (April 2012 – March 2014)

Responsibilities:

Experience in configuring routing protocols like EIGRP, RIPv2, OSPF & BGP and cisco ACS protocols.

RADIUS and TACACS+ and providing remote testing support on HDSL, T1 and T3 circuits.

Designed and implemented a network infrastructure which involve setting up Ethernet backbone, desktop switching, primary remote office DS3/OC3 ATDN peering, VPN tunneling.

Cisco IOS experience on 3600/7200 class hardware in complex WAN enviornment and experience on Cisco OS and IOS on CAT6500 in complex data center environment.

Robust experience with addressing, sub-netting, routing, switching VLANs, NAT, VPN, 802.1x, VRRP, HSRP, GLBP etc.

Coordinate with senior engineers with BGP/OSPF routing policies and designs, worked on implementation.

Strategies for the expansion of the MPLSVP networks.

Configured and tested the routing protocols like BGP, EIGRP, OSPF, RIP and switching protocol like STP, VLAN trunking 802.1Q for source and target device of migration.

Hands on experience on BGP & ISIS routing protocols.

Done configurations of Ether channel using LACP method.

Working knowledge of Firewall service module FWSM UPGRADE, FWSM RULEST conversion.

Converting access-list to Firewall rule sets on FWSM module with 6509-E catalyst switches.

Involve in setting up Voice VLANs on distribution switches, and configuring access switches ports for IP PHONES.

Controlling the Datacenter and Lab divison for design change.

Configuring HSRP between VLANs, configuring Ether-channels, Port Channel on 6500 catalyst switches.

Configuring PAGP and LACP protocol along with BFD link detection protocol

Working Knowledge of PPP Protocol with Enhanced Flex WAN module on 6500 catalyst switch

Working knowledge of configuring VOICE VLANS on core, Distribution layer switches.

Configured access ports with Voice VLANS and Service Policy for VOIP Phones

Upgrading IOS on 2960 and using 2960 switch as a PAGP between VSS

Enviornment: 3750, 3550, 3560, 2924, 6504, 6506, 6500, series switches,7206, 2611, 6748, T1 controller, DS3 Lines, Fiber and Ethernet cabling

Network Engineer (March 2009 – April 2012)

ICICI Bank, India

Responsibilities:

Experience in working wiith Nexus 7010, 5548, 5020, 2148, 2248 devices.

Designing and involved in developing sstrrategy to plan and implement new technology like Networking, Virtalization, Cloud, Application and monitoring in core Datacenter and LAB.

Member of Application Networking Team focused on Network Performance Prediction, WAN optimization.

Implementing and maintainnig Network Management tools(OPAS,Solar Winds,Cisco Works)

Enable STP attack mitigation (BPDU Guard, Root Guard), using MD5 autentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed.

Experience with migrating the partner IPSEC VPN tunnels from one datacenter to another datacenter.

Connecting multiple locations through MPLS with tunneling & ISIS configurations.

Experience with deploying the Layer 3 MPLS VPN in all Branches and campus locations.

Replace Campus Cisco 6509 End of life hardware with new 4507/4510 devices.

Analysis and Troubleshooting of network systems that include LAN, WAN, Global Datacenter, F5, Firewall & DNS/DHCP.

Leased line 64k- 155Mb (PPP/HDLC), Channelized lines(E1/T1/E3/T3), fiber optic circuit up to OC-192 speed, Frame Relay, ATM, ISDN, xDSL, Load Balancing, Multi Homing, Satellite liinks, MPLS

IOS upgrade in Nexus 7010 through ISSU (In service software upgrade)

Provided redundancy in a multi homed Border Gateway Protocol(BGP) network by tunning AS-path.

Worked on juniper J series j2330, M 320 routers and EX 3200 switches.

Configuring ISIS in L3 switches to support MPLS.

Involved in the modification and removal (wherever necessary) of BGP from MPLS routers.

Configuring IPSEC VPN (site-site to Remote Access) on SRX series firewalls.

Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card(module) for the Nexus 5000.

Configuring & Management of VLANs, 802.1q trunks, VTP, security policies.

Responsible for trning up BGP peering and customer sessions, as well as debugging BGP routing problems.

Worked on layer 2 protocol such as STP, VTP, RSTP, PVSTP+,MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment

Experience on troubleshooting of complex BGP and OSPF routing problems,

Involved in configuring IP Quality of Service(QoS)

Environment: Router 2800,3800, Cisco catalyst switch 3550, 2960. Fiber and Ethernet cabling

Contact this candidate