Ravi Madala

acza6l@r.postjobfree.com

916-***-****

Professional Summary:

Having 8 year’s experience in Design, Implementation, troubleshooting and Migration of Service Provider (ISP) and Enterprise Networks.

Extensive work experience with Cisco Routers, Cisco Switches, Alcatel-lucent Service router, Juniper routers,Nexus routers, HP and Brocade switches, Load Balancers and Palo Alto Firewalls.

Experience in Broadband and enterprise internet services using DSLAMs.

Strong in understanding the customer requirement and making a network design, Network Addressing (IP Subnet Mask & Gateways), MPLS, L3VPN, L2VPN, MPLS-TE, Redistributing of routes, Redundancy Protocols (HSRP, VRRP), MPLS applications like MPLS VPN (VRF), Leased lines (VLL) and VPLS, MPLS Protocols: LDP and RSVP.

Better understanding of ISP architecture for various services.

Dealt with the escalation problems for Routing, Switching and WAN connectivity issues using ticketing system like Remedy Ticketing System

Expertise in L2- Ethernet, STP, PVST, RSTP, VLAN, SVLAN, VTP, Port Mirroring (Local Span), Policer configuration, IP Routing, NAT.

Better hands-on implementing the QoS for different services at different priorities.

Expertise in Designing & implementing Network Switching over Access, distribution layers, various vendor platforms like Cisco, Alcatel lucent, H3C and HP procurve switches.

Implementing the QOS as per the customer requirement for sensitive traffic.

Handling of faults related to L2 data circuits (Ethernet over SDH technology) in network.

Configuring VLAN, IP as per the customer requirement.

Handling the Firewalls for controlling the traffic with different policies and have a hold on IPSEC for site to site VPN.

Implemented NG Palo Alto firewall in corporate and Date centre. Implemented all security profiles including PAN DB, WildFire Submissions.

Worked on high end cisco devices like ASR 1k, 5K, ASR 9000, CRS-X, Cisco 7200 series and Juniper Routers .

Experience on implementing & simulating the design before implementing in real network.

Strong hands on experience on PIX Firewalls, ASA (5540/5550) Firewalls, Palo Alto Firewalls. Implemented Security Policies using ACL, Firewall, IPSEC, SSL, VPN, IPS/IDS, AAA (TACACS+ & RADIUS)

Attending the customer calls for issues like band width issues, performance related things and provided the prompt responses accordingly.

Perform provisioning data update /date inventory after e2e circuit design.

Having expertise on upgrading the devices, line card replacements and upgradation and troubleshooting them with field tech’s coordination.

Knowledge on Data center design and operations, Cisco Nexus switches, Load balancing technologies, configuring & troubleshooting of MPLS, BGP, OSPF& EIGRP, ASIC design of a device and line cards /Modules, network elements of the telecom space & understanding of service delivery platforms.

Having good understanding of ACI (Cisco Application Centric Infrastructure)

Planning, implementing and testing of MPLS for Mobile services i.e. 2G, 3G and LTE(MPLS over Transport) backhaul network.

Have good understanding of VM ware.

Coordinate with vendors for changes network, adhered to the SLAs, trained new joiners, timely field support, holding planned events for any major events or Outages

PROFESSIONAL CERTIFICATION

Cisco Certified Network Associate (CCNA)

Cisco Certified Network Professional: (CCNP)

Cisco Certified Security Professional (CCSP) – Feb 2011

CCIE Written

EDUCATION

B-Tech in Computer Science & Engineering from Jawaharlal Nehru Technological University, Kakinada, India.

SKILLS

Routing

OSPF, EIGRP, BGP, RIP-2, PBR, IS-IS, Route Filtering, Redistribution, Summarization, Static Routing, PBR

Switching

VLAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switch, Multicast operations, Layer 3 Switches, Ether channels, Transparent Bridging

Network security

ACL, IPSEC, VPN, Security context, IPSEC,MPLS VPN,VLL,VPLS(L2VPN)

Load Balancer

F5 Networks (Big-IP), Cisco Load balancers.

LAN

Ethernet (IEEE 802.3), Fast Ethernet, Gigabit Ethernet

WAN

Leased lines 64k - 155Mb (PPP / HDLC), Channelized links (E1/T1/E3/T3),

Fiber Optic Circuits, Frame Relay, ISDN, Load Balancing

Operating Systems

Windows (98, ME, 2000, XP, Server 2003/2008, Vista, Windows 7), Basic Linux

Routers

Cisco 17XX, 18XX, 26XX, 28XX, 37XX, 38XX, 39XX &72XX series, CRS-X, ASR 1k, 5K, and ASR 9000.NX-OS & Wireless LAN

Switches

Cisco : Access and Core (6500,4500,3750,3500,2960,2950),, HP Procurve, Brocade ICX 6430, 6450&6940 Switches, & H3C switches

DSLAMs

Alcatel –Lucent 7302 ISAM,7342 GPON

CISCO Switches

Cisco 29XX,3550, 3750, 45XX, 65XX series

Security

Cisco ASA 55XX series,, Checkpoint NG (Gaia), Juniper Netscreen& ISG 2000 & Fortinet Firewalls, Palo Alto FireWalls, ASA Firewall, Bluecoat proxies, Cisco Iron Port .

Various Features & Services

IOS and Features, HSRP, GLBP, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, LLDP, TFTP and FTP Management

AAA Architecture

TACACS+, RADIUS, Cisco ACS

Reports

Microsoft (Visio pro.), Microsoft Ppt,Excel and MS Word, Solarwinds, Whatsup Gold, Kiwi Backup, Netcool, BMC Remedy ITSM.

PROFESSIONAL EXPERIENCE

Sr. Network and Security Engineer

BD Pharmacy, Raleigh, NC Aug 2015 to Present

Responsibilities:

Experience with Network Redesign for Company Campus Locations and Moving from 6500 based Data Center to Nexus based Data Center.

Experience with design and configuring Overlay Transport Virtualization (OTV) on Cisco NX-OS devices like Nexus 7000

Experience working with ASR 9000 series switches with IOS-XR

Experience working with design and deployment of MPLS Layer 3 VPN cloud, involving VRF, Route Distinguisher(RD), Route Target(RT), Label Distribution Protocol (LDP) & MP-BGP

Experience with LAN protocols like STP, RSTP, MST, VTP, VLAN and Port Channel Protocols like LACP, PAGP

Worked extensively in Configuring, Monitoring and Troubleshooting Palo Alto with ACL, NAT, Object Groups, Failover, Multi-Contexts

Responsible for Palo Alto and Cisco ASA firewall administration across our global networks.

Implemented Site-to- Site VPNs over the internet utilizing 3DES, AES/AES-256 with ASA Firewalls.

Migration of existing IPSEC VPN tunnels from one Data Center to another Data Center, due to decomssion of existing Data Center, which involved working with Partner Companies.

Experience with converting WAN routing from EIGRP/OSPF to BGP (OSPF is used for local routing only) which also involved converting from Point to point circuits to MPLS circuits.

Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN

Implement and configured VRRP/GLBP (on distro/core switching), HSRP on different location of office on the switched network and managing the entire multilayer switched network

Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a Flexible Access Solution for a datacenter access architecture

Experience configuring VPC, VDC and ISSU software upgrade in Nexus 7010

Experience in Configuring, upgrading and verifyingNX-OS operation system with OSPF, BGP

Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP

Implemented Site-to-Site VPNs over the internet utilizing Palo Alto Firewalls

Migrated, created, and managed pools and clusters in F5 BigIP GTM 3DNS load balancers across multiple Datacenters.

Experience on working with the trouble tickets on F5 Load Balancers

Configured, installed, &managed

Provide front end on-call network support 24x7x365 for all network infrastructures in the co-operation

Environment: In Corporate office architecture with highly reliable & secured network including

Palo Alto Firewalls (PA-5060 & PA-3060), Cisco ASA (5505,5510) Firewalls, Ciscorouters (7200, 3800, 2800) and Cisco switches (6500, 3700, 4900, 2900), Nexus routers (7K, 5K & 2K) Routing Protocols (EIGRP, OSPF, BGP), Switching protocols (VTP, STP, GLBP, HSRP), Cisco PIX (525, 535), F5 BigIP GTM

Sr. Network and Security Engineer

Alcatel-Lucent USA Inc,New Providence,NJ May 2013 – July 2015

Responsibilities

Involved in design and implementation of Data Center Migration, worked on implementation strategies for the expansion of the MPLS VPN networks.

Designed MPLS VPN and QoS for the architecture using Cisco multi-layer switches

Configuring IP, RIP, EIGRP, OSPF and BGP in routers.

Experience in deploying EIGRP/BGP redistribution and the changing the metrics for the primary and backuppathsfor the packet prioritization and EIGRP tuning

Experience in migration of Frame-relay based branches to MPLS based technology using multi-layer stackable switch like 6500 series and 2800 series router

Configured OSPF redistribution and authentication with type 3 LSA filtering and to prevent LSA flooding.

Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).

Configuring RIP, OSPF and Static routing on Juniper M and MX series Routers

Configuring VLAN, Spanning tree, VSTP, SNMP on EX series switches

Design and configuring of OSPF, BGP on Juniper Routers and SRX Firewalls.

Responsible to manage, configure and implement Checkpoint, Cisco ASA and Palo Alto firewall

Provided redundancy in a multi homed Border Gateway Protocol (BGP) network by tunings AS-path.

Worked on Juniper J series j230, M 320 routers and EX 3200 series switch.

Created and edited the Knowledge base articles related to Palo Alto Networks.

Involved in diagnosing and troubleshooting the issues related to Palo Alto Network firewalls

Troubleshooting and installing of CRS, ISR, GSR, ASR9000 and Nexus devices.

Installation, Configuration and Administration of ADS, DNS, DHCP and Web proxy(ISA)server

Upgrade Cisco Routers, Switches and Firewall (PIX) IOS using TFTP

Implemented the concept of Route Redistribution between different routing protocols

Switching related tasks included implementing VLANS, VTP, STP and configuring on Fast Ethernet

Experience working with Nexus 7010,7018, 5020, 2148, 2248 devices

Experience working with High performance data center switch like nexus 7000 series

Manage Cisco Routers and troubleshoot layer1, layer2 and layer3 technologies for customer escalations

Managing a TACACS server for VPN user authentication and network devices authentication

VLAN Configurations, troubleshooting and Firewall ACLs and Object-Groups configuration and support

Configured IPSec site-to-site VPN connection between Cisco VPN 3000 Concentrator and Cisco 3800

Upgrades load balancers from Radware to F5 BigIP v9 which improved the functionality and scalability in the enterprise.

Managed the F5 BigIP GTM/LTM appliances to include writing iRules, SSL offload and everyday tasks of creating WIP and VIPs.

Environment: Router series (2800, 3800, 7200) and switch series (3750, 3550, 4509E,6509E), Cisco PIX(525, 535), Palo Alto Firewall (PA-5020/PA-3020), Routing Protocols (EIGRP, OSPF, BGP), Switching protocols (VTP, STP), Site to Site VPN, Remote Access VPN, Cisco VPN 3000 Concentrator,Cisco ACS 4.x, F5 BigIP v9

Sr.Network Engineer

Hormel, Austin, MN Dec 2010 – Apr 2013

Responsibilities:

Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy It also includes the configuration of port channel between core switches and server distribution switches

Involved in Configuring and implementing of Composite Network models consists of Cisco7600, 7200, 3800 series and ASR 9k, GSR 12K routers and Cisco 2950, 3500, 5000, 6500 Series switches.

Responsible for day to day management of Cisco Devices, Traffic management and monitoring.

Experience in HSRP standby troubleshooting, configuring & upgrading of Cisco IOS

Installation, Configuration and troubleshooting Cisco switches and Firewall on multi-mode context based environments

Implemented various OSPF scenarios on networks consisting of 7600 routers.

Configured policy based routing for BGP for complex network systems.

Configured Multiprotocol Label Switching (MPLS) VPN with Routing Information Protocol (RIP) on the customer’s Site.

Router/ Microsoft VPN Server in order to access certain limited network resources from customer locations

Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.

Designing and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.

Installed and configured fourPIX525 and two ASA 5505 in customer locations. In addition to that, two PIX firewall configured for the Guest access

Key contributions include troubleshooting of complex LAN/WAN infrastructure that include routing protocols EIGRP, OSPF & BGP

Involved in the redistribution into OSPF on the core ASA firewall.

Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.

Involved in designing L2VPN services and VPN-IPSEC authentication & encryption system.

Tuned BGP internal and external peers with manipulation of attributes such as metric, origin and local Preference.

Cisco Secure Access Control Server (ACS) for Windows to authenticate users that connects to a VPN 3000 Concentrator.

Configuring, Installing and troubleshooting on Check Point Devices.

Deploying and configuring F5 3DNS and Big-IP-LTM for global and local traffic management.

Good knowledge on Intrusion Detection and Intrusion Prevention System.

Knowledge on multiplex techniques such as DWDM.

Troubleshoot and Worked with Security issues related to Cisco ASA/PIX, Checkpoint, IDS/IPS and Juniper Netscreen firewalls.

Configured networks using routing protocols such as RIP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure.

Implemented Hot Standby Router Protocol (HSRP) by tuning parameters like preemption.

Environment: In Corporate office architecture with highly reliable & secured network including Cisco routers (7200,3800,2800), Cisco switches (4900,2900), Cisco ASA Firewall (5510), Routing Protocols (EIGRP, RIP, BGP), Switching protocols (VTP, STP, GLBP)

Cisco Network Engineer

Lupin Limited,Mumbai, India July 2008 – Nov 2010

Responsibilities

Installed and configured Cisco ASA 5500 series firewall and configured remote access IPSEC VPN on Cisco ASA 5500 series

Involved in troubleshooting of DNS, DHCP and other IP conflict problems

Implementation of name resolution using WINS & DNS in TCP/IP environment

Configured FTP server for inside/outside users & vendors

Used various scanning and sniffing tools like Wire-shark

Enabled STP Enhancements to speed up the network convergence that include Port-fast, Uplink-fast and Backbone-fast

Configured network access servers and routers for AAA Security (RADIUS/ TACACS+)

Other responsibilities included documentation and change control

Worked on Cisco routers 7200, 3800, 2800 and Cisco switches 4900, 2900

Key contributions include troubleshooting of complex LAN/WAN infrastructure that include

Configured Firewall logging, DMZs & related security policies & monitoring

Creating Private VLANs & preventing VLAN hopping attacks & mitigating spoofing with snooping & IP source guard

Hands on Experience working with security issue like applying ACL’s, configuring NAT and VPN

Documenting and Log analyzing the Cisco ASA 5500 series firewall

Responsible for Internal and external accounts and, managing LAN/WAN and checking for Security

Settings of the networking devices (Cisco Router, switches) co-coordinating with the system/Network administrator during any major changes and implementation

Routing protocols OSPF, RIP & BGP

Configured BGP for CE to PE route advertisement inside the lab environment

Spearheaded meetings & discussions with team members regarding network optimization and regarding BGP issues

Responsible for Configuring SITE_TO_SITE VPN on Cisco Routers between Head Quarters and Branch locations

Provided Load Balancing towards access layer from core layer using F5 Network Load Balancers.

Configured with F5 Load balancers in Failover for Load balancing

Implemented the security architecture for highly complex transport and application architectures addressing well known vulnerabilities and using access control lists that would serve as their primary security on their core & failover firewalls

Installation & configuration of Cisco VPN concentrator 3060for VPN tunnel with Cisco VPN hardware & software client and PIX firewall

References on request * Available for relocation and travel

Contact this candidate