Sai Sumanth

Sr. Network Engineer

908-***-****

acw9ie@r.postjobfree.com

Professional Summary:

Around 8 years of Experience with in designing, deploying and troubleshooting Network & Security infrastructure on routers, switches L2 firewalls of various vendor equipment.

Extensive work experience with Cisco Routers, Cisco Switches, Load Balancers and Firewalls.

Experience in layer-3 Routing and layer-2 Switching. Deals with Nexus 7K, 5K, 2K series Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches

Expertise in installing, configuring, and troubleshooting of Cisco Routers (3800, 3600, 2800, 2600, 1800, 1700, 800)

Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX Firewalls (SRX240, SRX550)

Expertise in configuration of routing protocols and deployment of OSPF, EIGRP, BGP and policy routing over Cisco routers.

Experience working on Palo alto Firewalls

Experience with design and deployment of MPLS Layer 3 VPN, MPLS Traffic Engineering, and MPLSQOS.

Experience in adding Rules and Monitoring Checkpoint Firewall traffic through Smart Dashboard and Smart View Tracker applications.

Worked on Load Balancer F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Performing onsite data center support including monitoring electrical power, switch alarms, network alerts and access logs.

Experienced with Juniper: EX-2200, EX-4200, EX-4500, MX-480, and M Series, SRX210, SRX240.

provide support for Aruba Wireless devise

Worked on F5 BIG-IP LTM 8900, Citrix and Netscalar configured profiles, provided and ensured high availability.

Implement ITIL V3.0 through a phased approach - Service Desk, Change, Incident, Problem Management and Service Catalog

Configured Client-to-Site VPN using SSL Client on Cisco ASA 5520 ver8.2

Configured ASA 5520 Firewall to support Cisco VPN Client on Windows 7/XP/Vista.

Installation, advanced configuration and troubleshooting of Cisco and F5's load balancing devices.

Experience with designing, deploying and troubleshooting LAN, WAN, Frame-Relay, Ether-channel, IP Routing Protocols - (RIPV2, OSPF, EIGRP & BGP), ACL's, NAT, VLAN, STP, VTP

Implemented redundancy with HSRP, VRRP, GLBP, Ether channel technology (LACP, PAGP) etc.

Strong hands on experience on PIX Firewalls, ASA (5540/5550) Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS)

Experience working with Cisco IOS-XR on the ASR9000 devices for MPLS deployments

Efficient designing of IP Addressing Scenario using VLSM and Subnetting.

Has done the Configuration on BIG IP (F5) Load balancers and monitored the Packet Flow in the load balancers.

Configured Security policies including NAT, PAT, VPN's and Access Control Lists.

Extensive experience using Microsoft suite like Word, Visio, Excel, PowerPoint

Excellent technical and project management skills combined with strong communication skills.

Certification:

Cisco Certified Network Associate (CCNA)

Cisco Certified Network Professional (CCNP)

Technical skills:

Cisco Platforms

Nexus 7K, 5K, 2K & 1K

Juniper Platforms

SRX, MX, EX Series Routers and Switches

Networking Concepts

Access-lists, Routing, Switching, Subnetting, Designing, IPsec, VLAN, VPN, WEP, WAP, MPLS.

Firewall

PIX Firewall (506/515/525/535), ASA Firewall (5505/5510)

Network Tools

Solar Winds, SNMP, Cisco Works, Wire shark

WAN technologies

Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, T1 /T3 & SONET

LAN technologies

Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q

Security Protocols

IKE, IPSEC, SSL-VPN

Networking Protocols

RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA

Operating System

Windows 7/XP, MAC OS X, Windows Server 2008/2003, Linux, Unix

Professional Experience

Avaya, Thornton CO Jul’15 - Present

Sr. Network Engineer

Responsibilities:

Experience working with Nexus 7018/7010, 5020, 5548, 2148, 2248 devices

Expertise in installing, configuring and troubleshooting Juniper EX switches (EX2200, EX2500, EX3200, EX4200, and EX4500 series).

Involved in upgrading switches from 6500 E to 4500-X.

Implementation of BGP to optimize WAN routing on the core and edge routers.

Mutual redistribution of OSPF and BGP routes using route maps.

Involved in upgrades to the WAN network from existing 7200vxr with ASR1004, ASR9000 and 3845/3945 routers.

Implementing security Solutions using Palo Alto PA-5000, Checkpoint Firewalls R75, R77.20 Gaia and Provider-1/MDM.

Implemented Positive Enforcement Model with the help of Palo Alto Networks.

Deployed Palo Alto Networks PAN-5050Designed and configured the commands for QoS and Access Lists for Nexus 7K and 5K

Responsible for Checkpoint firewall management and operations across our global networks.

Working with Checkpoint Support for resolving escalated issue.

Responsible for supporting the Citrix NetScaler F5 platform, configuring, implementing, and troubleshooting Citrix NetScaler VIP configuration with health check, policy configurations Access Gateway, and content switching configuration solutions.

Hands on Experience with blocking of IP's on Checkpoint, which are suspicious.

Configure and Manage site-to-site IPSEC VPN with different partners. Troubleshoot remote access services like Citrix Netscalar, Cisco VPN clients and for the users to access their enterprise network

Upgrading branch network connectivity with total refresh of the network infrastructure with new 3845 routers and 2960 switches.

Managed Checkpoint Firewalls from the command line using PuTTy sessions. (cpconfig and Sysconfig)

Implemented ADC F5 LTM and GTM hardware platforms design and deployment implementation guidelines, DMZ Network infrastructure policies, LTM Inbound SNAT configurations and outbound NAT server to IP mapping processes

Providing technical security proposals, detailed RFP responses, security presentation, installing and configuring ASA firewalls, VPN networks and redesigning customer security architectures

Configuration and troubleshooting on HSRP, VRRP, GLBP, RSTP, MST related issues coming in network environment

Responsible for nightly maintenances including Big F5, ACS, all Cisco ASAs, Citrix Netscalar.

Handled Citrix Netscalar Load Balancing using F5 Networks

Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.

Handled tickets within BMC Remedy and the ITIL environment

Implementation and Configuration (Profiles, I Rules) of F5 Big-IP LTM-6400 load balancer.

Installed high availability Big IP F5 LTM and GTM load balancers to provide uninterrupted service to customers.

Managed F5 BigIP LTM appliances to load balance server traffic in critical serval access silos.

Configuration of Virtual Servers, Nodes, and load balancing Pools

Upgraded load balancers from Radware to F5 BigIP v9, which improved functionality and scalability in the enterprise. Managed the F5 BigIP LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs.

Design and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.

Implemented load balancing in various environments using Netscalar also used NIC bonding

Configure and Manage site-to-site IPSEC VPN with different partners. Troubleshoot remote access services like Citrix Netscalar, Cisco VPN clients and for the users to access their enterprise network

Configuration and extension of VLAN from one network segment to their segment between Different vendor switches (Cisco, Juniper)

Design and troubleshoot corporate networks. Isolate issue on DMVPN, MPLS, EIGRP, BGP, Nexus, firewall etc. Migrate legacy network to new MPLS infrastructure.

Design Implement MPLS/BGP for customer

Configuring IPSEC VPN on SRX series firewalls

Convert Campus WAN links from point to point to MPLS and to convert encryption from IPsec/GRE to Get VPN.

Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed.

Involved in design and implementation of Data Center Migration, worked on implementation strategies for the expansion of the MPLS VPN networks

Experience with configuring BGP in the data center and also using BGP as a WAN protocol and manipulating BGP attributes.

Implemented load balancing in various environments using Netscalar also used NIC bonding

Performed basic security audit of perimeter routers, identifying missing ACL’s, writing and applying ACL’s.

Engineering the configurations for the different branches, campus locations

Accountable for SAN migrations, LUN creations, and masking removal; Citrix XenApp, XenServer, and XenDesktop design and implementation; and Citrix NetScaler configurations and maintenance.

Responsible for layer 2 securities which was implemented using a dedicated VLAN ID for all trunk ports, setting the user ports to non-Trunking, deployed port security when possible for user ports

Responsible for Cisco ASA firewall administration across our global networks

Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP

Involved in the redistribution into OSPF on the core ASA firewall.

Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.

Involved in the modification and removal of BGP from the MPLS routers.

Worked on Orion for analysis and monitoring purposes

Also prepared documentation for various VLAN’s and Voice subnetworks and worked on Visio for the same.

Migration of existing IPSEC VPN tunnels from Pre-Shared key to Certificate Authority for purpose of scaling

Environment: Juniper EX2200, EX2500, EX3200, Nexus 2k,5k,7k, PIX Firewall, Palo Alto, Checkpoint, F5 Load Balancer 6400

Johnson Controls, Milwaukee, WI Oct’13-Jun’15

Sr. Network Engineer

Responsibilities:

Experience with configuring Cisco 6500 VSS in Distribution layer of the Data center network

Configuration and Administration of Cisco and Juniper Routers and Switches

Experience working with Nexus 7010, 5548, 5596, 2148, 2248 devices.

Implemented Site-to-Site VPNs over the internet utilizing 3DES, AES/AES-256

Experience with setting up MPLS Layer 3 VPN cloud in data center and also working with BGP WAN towards customer

Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance.

Implementation and Configuration (Profiles, I Rules) of F5 Big-IP LTM-6400 load balancers

Configure and troubleshoot Juniper EX series switches and routers

Experience configuring VPC, VDC and ISSU software upgrade in Nexus 701

Upgraded load balancers from Radware to F5 BigIP v9, which improved functionality and scalability in the enterprise. Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday task of creating WIP and VIPs.

Installed high availability Big IP F5 LTM and GTM load balancers to provide uninterrupted service to customers

Migrated Juniper EX series switches to Cisco 3500 series and 6500 series switches

Experience with moving data center from one location to another location, from 6500-based data center to Nexus based data center.

Maintenance and configuration of Cisco ASR series routers at data center and deployment of 3900, 3800, 2951 and 2821 for branch connectivity.

Network Redesign for Small Office/Campus Locations. This includes changes to both the voice and data environment.

Administration of ASA firewalls in the DMZ and FWSM in the Server Farm to provide security and controlled/restricted access.

Configured Client VPN Technologies such as Cisco’s VPN Client via IPSEC. Configured Cisco ASR, ISR 2800 & 3800 series routers with OSPF as an enterprise IG

Deploying and decommission of VLANs on core ASR 9K, Nexus 7K, 5K and its downstream devices

Performed OSPF, BGP, DHCP Profile, HSRP, IPV6, Bundle Ethernet implementation on ASR 9Kredundant pair.

Network security including NAT/PAT, ACL, and ASA Firewalls.

Responsible to build configurations for various connectivity types, which involves port configuration on Cisco ASR for MPLS circuit termination.

Good knowledge with the technologies VPN, WLAN and Multicast.

Well Experienced in configuring protocols HSRP, GLBP, ICMP, IGMP, PPP, PAP, CHAP, and SNMP.

Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches

Experience with communicating with different with different customers, IT teams in gathering the details for the project

Installed dual DS-3 SAN replication WAN with Riverbed Interceptors and 6050 Steelhead appliances to optimize the traffic

Switching tasks include VTP, ISL/ 802.1q, IPsec and GRE Tunneling, VLANs, Ether Channel, Trunking, Port Security, STP and RSTP.

Configuring rules and Maintaining Palo Alto Firewalls& Analysis of firewall logs using various tools

Replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliances serving as firewalls and URL and application inspection.

Experience in installing and configuring DNS, DHCP servers.

Replace branch hardware with new 3900 routers and 2960 switches.

Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.

Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPsec/GRE to GetVPN.

Responsible for layer 2 securities which was implemented using a dedicated VLAN ID for all trunk ports, setting the user ports to non-trunking, deployed port security when possible for user ports

Involved in configuring Juniper SSG-140 and Check point firewall

Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed

Environment: MPLS, RIP, OSPF, BGP, EIGRP, LAN, WAN, VPN, HSRP, Cisco 6500/3500/3750/3550, Cisco ASA 500, Checkpoint, HSRP, GLBP, ICMP, IGMP, PPP, PAP, CHAP, and SNMP.

Wolters Kluwer, Tampa FL Mar’11 – Oct’13

Sr. Network Engineer

Responsibilities:

Involved in conversion of PIX firewall to ASA firewall.

Experience in adding firewall rules, Network address Translation and in creating multiple security contexts (virtual firewalls).

Worked with F5 Balancers and their Implementation in various Networks

Involved in setting up IP sec VPN between ASA firewalls.

Experience with implementing Cisco 6500 VSS on the User distribution switches.

Upgraded IOS on the ASA 555*-****-**** firewalls

Working with MPLS Designs from the PE to CE and also configuring VRF on PE routers

Experience with designing and deployment of MPLS Traffic Engineering

Configuring RIP, OSPF, EIGRP BGP, MPLS, QOS, ATM and Frame Relay.

Design and deployment of MPLS QOS, MPLS Multicasting per company standards.

Implemented site to site VPN in Juniper SRX as per customer.

Installed high availability Big IP F5 LTM and GTM load balancers to provide uninterrupted service to customers

Implemented various EX, SRX & J series Juniper devices.

Installed controller and lightweight access point coordination with JTAC.

Maintenance and trouble-shooting of LAN, WAN, IP Routing, Multilayer Switching.

Worked on different phases of testing such as Sanity Testing, Functionality Testing, Smoke Testing, System Testing, Installation Testing, Compatibility Testing, Regression Testing, Stress Testing and UAT Testing.

Writing Test cases & Test scripts for the application functionality

Testing routers and modems, troubleshot issues related to broadband technologies for Residential and Business Customers.

Configuring RIP, OSPF and Static routing on Juniper M and MX series Routers

Configuring VLAN, Spanning tree, VSTP, SNMP on EX series switches

Dealt with monitoring tools like (Solar Winds, Cisco Works), network packet capture tools like Wire shark

Maintained a Network with more than 600 Network devices, some 25,000 end hosts, and the other Network devices like DHCP, DNS servers, Firewall servers.

Co-ordination with Hardware vendors, software vendors and service Providers.

Assisted in backup, restoring and upgrading the Router and switch IOS.

Attended Team meetings and provided comments on existing network and the recommendations to improve the current network Performance.

Maintaining the health of 250+ wireless Access points in two locations.

Environment: PIX, ASA, RIP, OSPF, EIGRP, MPLS, BGP, LAN, WAN, IP ROUTING, F5 Balancers, Juniper EX2200/EX2500.

Hexaware Technologies, India Jul’08 – Feb’11

Network Engineer

Responsibilities:

Used TFTP server to backup Cisco configuration files.

Provided technical support for expansion of the existing network architecture to incorporate new users.

Network layer tasks included configuration of IP Addressing using FLSM, VLSM for all applications and servers throughout the company

Configured STP for loop prevention on Cisco Catalyst Switches

Configured VTP to manage VLAN database throughout the network for Inter-VLAN Routing.

Worked in setting up inter-vlan routing, redistribution, access-lists and dynamic routing.

Involved in configuring and implementing of Composite Network models consists of Cisco 3750, 2620 and, 1900 series routers and Cisco 2950, 3500 Series switches.

Implemented various Switch Port Security features as per the company’s policy

Configured OSPF, and EIGRP on 2901 and 3925 Cisco routers.

Configured VLANS to isolate different departments

Troubleshoot issues related to VLAN, VLAN Trunking, HSRP failovers, related issues.

Configured IPSEC VPN on SRX series firewalls

Design, installation and troubleshooting networks with hand-on experience with OSPF, BGP, VPLS, Multicast, VPN, MPLS, & Traffic engineering.

Involved in implementation of trunking using Dot1Q, and ISL on Cisco Catalyst Switches

Worked with snipping tools like Ethereal (Wireshark) to analyze the network problems.

Maintenance and troubleshooting of network connectivity problems using PING, Trace Route.

Performed replacements of failed hardware and upgraded software

Performed scheduled Virus Checks & Updates on all Servers & Desktops.

Implementing Routing and Switching using the following protocols; OSPF, BGP on Juniper M series routers.

Involved in Local Area Network (LAN) implementation, troubleshooting, and maintenance as per company’s requirements.

Environment: Cisco 3750/2620/1900 routers, Cisco 2950/3500, VLAN, HSRP, SRX, OSPF, BGP.

Contact this candidate