TRISHALA

Sr Network Engineer

Mobile: 732-***-****

E-mail: acw17w@r.postjobfree.com

PROFESSIONAL SUMMARY

CCNP Certified Professional with nearly 8 years of experience in Networking and Security including hands-on experience in providing network support, installation and analysis for a broad range of LAN / WAN/MAN communication systems.

Expert level knowledge in troubleshooting, implementing and testing of static and dynamic routing protocols such as EIGRP, OSPF, RIP and BGP.

In-depth knowledge and hands-on experience on IP Addressing, Sub netting, VLSM and ARP, reverse and proxy ARP, Ping concepts.

Manage monitoring of equipment capacity/utilization and evaluate the need for upgrades; develop methods for gathering data needed to monitor hardware, software, and communications network performance.

Working on Cisco Routers and Switches and Wireless networks 802.11a/n at Enterprise level.

Cisco’s Application Centric Infrastructure (ACI) implementation (Nexus 9K, APIC).

Configuring Cisco switches including Nexus9K, Nexus7K, Nexus5K and Nexus2K.

Hands on experience in configuring Cisco Catalyst 2960, 3750, 4500, 6500 and Nexus 3000, 5000, 6000, 7000 series switches and Cisco 2600, 2800, 3600, 3800, 7200, 7600 series routers, Load Balancers & Cisco Firewalls.

Hands on experience with Checkpoint Firewalls. Hands on experience with configuring firewalls and managing issues.

3 years WAN experience with ATM, Frame Relay, SMDS, DSL, ISDN, DDS, T1 and T3, VPN, Cisco routers, PIX firewalls, RIP, IGRP, EIGRP, OSPF, BGP, HSRP, TACACS+ and Cisco Works

Extensive knowledge of firewall Checkpoint, McAfee, Juniper Net Screen on SRX 550, 650 Series and IPS/WAF (Tipping Point, Imperva, and Citrix NetScaler) Technologies.

Experience with Cisco ACI fabric networks

Experience with F5 load balancers and Cisco load balancers (CSM, ACE and GSS)

Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs

Wide experience in implementing and managing F5 BIG-IP load balancing, including GTM, APM, ASM, and custom iRule development.

Planned and worked on design with Network team to re-architect F5 load-balancers to load-balance traffic anywhere in the company network.

Network analysis and capacity planning experience using tools like Sniffer, Wireshark, and tcpdump.

Strong hands on experience and expertise configuring cisco routers, switches, firewall, and ISE (Guest access/Radius)

Integrated ForeScout product to work together with Cisco, Juniper, Aruba, or other 3rd party network equipment.

Perform installs, configure and troubleshooting on stateful inspection firewalls and inline/passive IPS/IDS sensors.

Install, Upgrade and Configure Next-Gen Palo alto Firewall series PA-200,500, Panorama M500

Deploy, configure, and support Aruba wireless controller and AP devices globally, also a direct escalation path for all wireless issues.

Constructed IPSEC VPN tunnels in PA Firewalls in different locations. Perform firewall migration projects between different technologies.

Troubleshoot routing protocols OSPF and BGP on company’s complex multiprotocol architecture

Good knowledge on Active Directory, Group Policy. Involved in troubleshooting of DNS, DHCP and other IP conflict problems

Ensures the project will achieve targeted dates to ensure business continuity. Involved in meetings with engineering teams to prepare the configurations according to the client requirement

Excellent communication, interpersonal and analytical skills and a highly motivated team player.

Ability to learn and adapt quickly to the emerging new technologies and paradigms.

Committed to continual performance development in the workplace, thus adding value to the organization.

Exceptional experience working in fast-paced, deadline-oriented environments.

PROFESSIONAL SKILLS

Routers:

Cisco 7600, 3800, 3600, 2900, 2800, 2600,1800, 4400, ASR 9K

Routing:

OSPF, EIGRP, BGP, RIP v1/v2, PBR, Route Filtering, Redistribution, Summarization, and Static Routing.

Switches:

Nexus 2K/5K/7K,9K Cisco Catalyst 2900, 3500,3700,6500, 4500, 3850,3560, 3750, 2960

Switching:

LAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switch, Ether channels, Transparent Bridging.

Network Security:

Cisco ASA 5540, ACL, IPSEC, F5 Load Balancer, Checkpoint

Load Balancer:

F5 Networks (Big-IP) LTM 8900 and 6400.

LAN:

Ethernet (IEEE 802.3), Fast Ethernet, Gigabit Ethernet

WAN:

PPP, HDLC, Channelized links (T1/T3), Fiber Optic Circuits, Frame Relay, VOIP

Gateway Redundancy:

HSRP and GLBP

WAN Optimizer

Riverbed Steelhead Appliance

DHCP and DNS

Infoblox

Various Features & Services:

IOS and Features, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, TFTP, FTP.

AAA Architecture:

TACACS+, RADIUS, Cisco ACS.

Network Management:

Wireshark, SNMP, Solar winds

Operating Systems

Microsoft XP/Vista/7, UNIX, Linux (Red hat, Opens use, Fedora), Windows Servers 2003/2008Windows MS-Office. VMware ESX 5.1, VMware VSphere client.

Language

MATLAB, basic C, C++, Verilog

PROFESSIONAL CERTIFICATION

Cisco Certified Network Associate (CCNA)

Cisco Certified Network Professional (CCNP)

PROFESSIONAL EXPERIENCE

Key Bank, Cleveland, OH June 2015 – Till date

Sr. Network Engineer

Responsibilities:

Design and implementation of Main Data Center Move project from one location to another location with minimal down time using traditional DCI with vPC and In-box configurations with same HSRP group for redundancy on four Nexus 7k switches, two on each side.

Design and Implementation of Disaster Recovery Co-location consisting of Nexus 7K switches, ASR 1002, Cisco ASA Firewalls, Cisco 3925 routers etc. Successfully implemented OTV for VLAN Extension.

Experienced in installation, configuration and maintenance of Cisco Nexus 7K, 5K switches in standalone as well as in V-BLOCK infrastructure

Extensive knowledge and experience in vPC, ether channel, STP, VTP, and HSRP also VRRP protocols.

Experienced in Cisco ASR 1000, 7200, 2700, 2900, 3900, 1800 Routers, Cisco Catalyst 4500, 2900, 3700 Switches.

Hands on Experience in Checkpoint UTM-1, Checkpoint Smart Center R.75, Nokia Voyager IPSO-390.

Applied ACLs for Internet access to the servers using Cisco 5520 ASA firewall, performed NAT.

Deployment and Management of Bluecoat proxies in forward proxy scenario as well as for security in reverse proxy scenario.

Implementing and troubleshooting (on-call) IPsec VPNs tunneling and SSL for various business lines and making sure everything is in place.

Hand on experience in Juniper secure gateway SA-4500 7 SA-2500 for VPN.

Deliver in-depth diagnostics and root-cause analysis for network impacting issues on Juniper Networks routing products (Internet backbone routers) to large Internet Service Provider and/or enterprise customers;

Deployment and configuration of Sourcefire 3D Sensor 8250 and Defense Center 3500 with Port SPAN also creating IPS/IDS policies and intrusion report generation and monitoring.

Configured and Maintained BGP features such as load balancing, Route Reflectors, BGP metrics such as maintaining the Enterprise IP Addressing scheme with allocation of new IP Pools for user subnets, and updating the port on the switches MED, AS Path, Local Preference, Communities.

Create and test Cisco router and switching operations using OSPF routing protocol, and MPLS switching for stable VPNs

Worked on Cisco Routers, Active/Passive Hubs, Switches, Cisco PIX Firewall, Nortel VPN Concentrators TCP/IP, NAT and Checkpoint ESX/GSX firewall

Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA

Redesign of Internet connectivity infrastructure for meeting bandwidth requirements.

Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.

Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.

Involved in the troubleshooting aspects of complex network infrastructure using the routing protocols like RIP, EIGRP, OSPF, ISIS and BGP.

Performed load balancing and application level redundancy by deploying F5 BIG-IP LTM 3900.

Worked on F5 BIG-IP LTM 8900, configured profiles, provided and ensured high availability.

Involved in the configuration and maintenance of IPsec Site-Site VPN.

Environments: Nexus 7k, 5k, Cisco ASR, Checkpoint firewall, Cisco ASA, Bluecoat proxy, Reverbed, IPS/IDS, BGP, OSPF, MPLS, VPN, F5 load balancer, Cisco prime, Juniper Switches and Routers.

Keolis, Boston, MA July 2014 - May 2015

Sr. Network Engineer

Key Responsibilities:

Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client.

Validate existing infrastructure and recommend new network designs.

Installed and maintained Cisco and F5 Load Balancer documentation.

Responsible for network design, bandwidth allocation, IP address allocation, supervising installation, configuration and maintenance on major network technologies.

Worked with various internal organizations during pre/post deployment phase of different type of circuits.

Installed and configured Cisco 2600, 2800, 3600, 3800 routers and 2950, 3700, 6500 switches.

Maintained and managed networks running OSPF and BGP routing protocols.

Configured route redistribution between OSPF and EIGRP in a multi-area OSPF network.

Daily monitoring of network traffic using sniffers (Wireshark) and access logs to troubleshoot and identify network issues.

Performed switching technology administration including VLANs, inter-VLAN routing, Trunking, port aggregation

Route redistribution and route update manipulation using route-maps; distribute lists and AD manipulation and link negotiation.

Providing Tier II support in the provisioning, end-to-end test and turn-ups and maintenance of the major accounts. Optimizing Network by continuously and extensively working with customer to upgrade and optimize network and Circuit Move Add Changes including detailed design documentation.

Performed Layer I, II and III troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. Configured Cisco Routers for BGP, OSPF, RIP, RIPv2, EIGRP, Static and default route in a VPN environment using MPLS.

Implemented and troubleshooted the MPLS network.

Implemented changes and upgrades to network equipment and perform quality assurance reviews of those upgrades. Reviewed all changes to network configuration for technical accuracy and impact.

Provided Network Support in the designing and implementation of Point to Point over T1s Frame Relay, DSL over ATM and IP over Frame Relay and Gigabit Ethernet.

Documentation of network resources, systems, peripherals, procedures and policies for optimization of IT resources and security.

Performed troubleshooting, while maintaining trouble ticket tracking, following internal/external escalation procedures and customer notifications. Configured Cisco Routers for OSPF, RIP, IGRP RIPv2, EIGRP, Static and default route.

Responsible for Checkpoint and Cisco ASA firewall administration across global networks.

Generating RCA (Root Cause Analysis) for critical issues of layer1/layer2/layer3 problems.

Co-ordinated with the Data Network and Security team and came up with possible solutions.

Work on Physical Site Inventory verification, gather information of various Cisco Network devices and Security Devices to develop Run book and Spec Book.

Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.

Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.

Experience with implementing and maintaining network monitoring systems (Cisco works and HP Open view) and experience with developing complex network design documentation and presentations using VISIO

Estimated Project costs and created documentation for project funding approvals.

Environment: Cisco Routers, Cisco switches, Cisco ASA, Firewall, RIPv2, OSPF, BGP, EIGRP, LAN, WAN, MPLS, F5 Load Balancer, VLAN, Trunking, ATM, PPP.

State Farm, Bloomington, IL Apr 2013 – June 2014

Network Engineer

Key Responsibilities:

Installed and tested Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.

Worked on Heterogeneous networks such as Frame Relay, Ethernet, Fiber, etc.

Prepared Check Point firewall configurations for conversion to Cisco ASA 5585-series firewalls.

Primary Network Security Engineer for Fiserv Firewall/VPN Support and Management on Checkpoint (Crossbeam and VSX), PIX, ASA.

Involved in Configuring and implementing of Composite Network models which consists of Cisco7600, 7200, 3800 series routers.

Configured Routing protocols such as OSPF, BGP, RIP, static routing and policy based routing.

Team member of Configuration of Cisco 7206 router with VPN and Configuration of Catalyst switches.

Configured Nexus 7010 including NX-OS Virtual Port Channels, Nexus port profiles, Nexus Version 4.2 and 5.0, Nexus VPC peer links

Deployed Cisco Nexus 5K Series to support Virtualization, SAN Infrastructure, and high performance computing environments.

Implementation and Proactive Monitoring of MPLS (MPLS-VPN), QoS (Layer2 and Layer3) and BGP technology.

Designed 10 gigabit networks using Cisco Nexus 7000 series switches, and Cisco 3800 series routers

Involved in Configuring and implementing of Composite Network models consists of Cisco7600, 7200, 3800 series and Cisco 2950, 3500, 5500, 6500 Series switches.

Responsible for Network Support Cisco ASA 5500 firewalls.

Analyzed and tested network protocols (Ethernet, TCP/IP) using Wireshark tool.

Experience using diagnostic security and networking tools such as NMAP, WireShark etc.

Utilize Wireshark, NMAP and Command Line Prompts on a daily basis.

Involved in a project for a re-design of the LAN network (Cisco Catalyst 2960 and Nexus 5000 switches) and the virtualization of some systems

Working with vendors such as Cisco to address any configuration issues.

Worked with Juniper Net Screen 500/5200 and also Juniper SRX 650/3600.

Installed and tested Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.

Worked on Heterogeneous networks such as Frame Relay, Ethernet, Fiber, etc.

Prepared Check Point firewall configurations for conversion to Cisco ASA 5585-series firewalls.

Primary Network Security Engineer for Fiserv Firewall/VPN Support and Management on Checkpoint (Crossbeam and VSX), PIX, ASA

Redesigned Internet connectivity infrastructure for meeting bandwidth requirements.

Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.

Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.

Experience with hardware load balancer administration and support, preferably with F5 and Cisco ACE load balancers.

Experience in configuring Load balancers and Riverbed WAN optimizers.

Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

Monitored and analyzed Intrusion Detection Systems (IDS) & Intrusion Prevention System (IPS) to identify security issues for remediation.

Configuration and troubleshooting of Cisco switches 2000, 3000, 6500, 7004, 7009, 7700 Series.

Environment: Cisco Routing and Switching, Nexus 5k, Cisco ASA, PIX, OSPF, BGP, MPLS, Juniper SRX, Juniper NetScreen, Riverbed, IPS/IDS, Cisco ACE, Cisco prime.

Goldstone Technologies Limited, Bangalore, India Apr 2010 - Mar 2013

Jr. Network Engineer

Key Responsibilities:

Provided estimated bandwidth requirements for data replication, to best determine adequate timing for migration service levels

Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalyst

Switches Replace branch hardware with new 2851 routers and 2960 switches.

Implemented Wireless Access Points and its Controllers at various corporate sites fort 11n Infrastructure and its legacy technologies.

Experience in working with Cisco Nexus 5000 series switches for data center.

Configured OSPF on CISCO devices with multiple routing processes and redistributed them. Tested and hands on experience in multi area OSPF topologies.

Configuring, managing and troubleshooting networks using routing protocols like RIP, EIGRP and OSPF (Single Area and Multi Area).

Assisted with troubleshooting all network issues with routers and switches when necessary and consulted with on call tech as needed for client.

Monitor, troubleshoot, test and resolve Frame Relay, ATM, MLPPP, PPP, and Dial-up.

Configuring/Troubleshoot issues with the following types of routers Cisco (7200, 6500, 4500, 1700, 2600 and 3500 series), to include: bridging, switching, routing, Ethernet, NAT, and DHCP, as well as assisting with customer LAN /MAN, router/firewalls.

Wrote IOS and CAT OS upgrade procedures and Pre/Post checks for customer production upgrades.

Excellent Troubleshooting Skills and Customer Centric approach.

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.

Configuring Vlan’s, VTP’s, enabling trunks between switches.

Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

Assisted in network engineering efforts consistent with the infrastructure of an Internet Service Provider and support of such network services. Helped in designing and implementation of VLAN for the new users.

Installation and Configuration of various types of Personal Computers and Printers. Installation of different operating systems on Intel based PC's.

Installed Hard disks, Floppy drives, CD Drives, Sound Blaster cards, CPU, Memory, Power supply unit, Network card, Video graphics card, Hard disk controller card on PC systems.

Troubleshooting of personal computers. On line Support to customers concerning their computer problems.

Axon Network Solutions, Bangalore, India Feb 2008 - Mar 2010

Network Administrator

Responsibilities:

Worked on Cisco routers 7200, 3700 and Cisco switches 4900, 2900

Key contributions include troubleshooting of complex LAN/WAN infrastructure that include

Configured Firewall logging, DMZs & related security policies & monitoring

Creating Private VLANs & preventing VLAN hopping attacks & mitigating spoofing with snooping & IP source guard

Installed and configured Cisco PIX 535 series firewall and configured remote access IPSEC VPN on Cisco PIX Firewall.

Enabled STP Enhancements to speed up the network convergence that include Port-fast, Uplink-fast and Backbone-fa

Establishing VPN Tunnels using IPsec encryption standards and also configuring and implementing site-to-site VPN, Remote VPN.

Configured network access servers and routers for AAA Security (RADIUS/ TACACS+)

Other responsibilities included documentation and change control

Responsible for Configuring SITE_TO_SITE VPN on Cisco Routers between Head Quarters and Branch locations

Implemented the security architecture for highly complex transport and application architectures addressing well known vulnerabilities and using access control lists that would serve as their primary security on their core & failover firewalls

Active participation on operational support for routing/switching protocols in complex environments including BGP, OSPF, EIGRP, Spanning Tree, 802.1q, etc.

Troubleshooting traffic passing managed firewalls via logs and packet captures.

Strong working knowledge and troubleshooting of T1, T3, OC-3 and OC-12.

Estimated Project costs and created documentation for project funding approvals.

Managed various teams involved in site surveys, cabling specifications, Network equipment installation and configuration.

Identify design, configuring and managing flexible, responsive, and secure technology services.

Configuration and troubleshooting of EIGRP, OSPF, BGP.

Design OSPF areas for reliable Access Distribution and for Core IP Routing.

Support the project manager in defining the work and the associated effort, duration, and resource needs to deliver the solution.

Extensively used TCP/IP tool like TELNET for remote login to the routers and SSH for secure login.

EDUCATION

Bachelors in Electronics and Communications

Contact this candidate