Jagadish

Sr. Network Security Engineer

aczex1@r.postjobfree.com

Summary:

Network Engineer with 8 years of professional experience in Network engineering, performing network analysis, design, implementing, capacity planning with focus on performance tuning, high availability and support of large Networks.

In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS.

Worked on network topologies and configurations, TCP/IP, UDP, DS1/DS3, Frame Relay, Token ring, ATM, Bridges, routers, hubs and switches.

Routing and Switching: BGP, OSPF to include Route summarization, Route filtering and Route redistribution. Switching to include Spanning Tree and VLAN concepts.

Extensive knowledge in configuring and troubleshooting Layer 3 Routing protocols such as IGRP, EIGRP,OSPF, ISIS and BGP (IBGP, EBGP) and layer 2 protocols such as VTP, STP and RSTP.

Strong hands on experience in installing, configuring, and troubleshooting of Cisco 7600, 7200,3800, 3600, 2800, 2600, 2500, and 1800 series routers, Cisco Catalyst 6500, 4500, 3750 and 2960 series switches.

Competent in Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay &MPLS), Routing protocol configurations, EIGRP, OSPF, BGP).

Skilled in configuration of new VLANs and extension of existing VLANs on/to the necessary equipment to have connectivity between two different data centers.

Dexterity in writing test procedures and test plans with a strong understanding of design, implementation and execution of testing methodologies.

Ability to diagnose Layer1, Layer2 and Layer3 fault-related cases utilizing software diagnostics tools.

Familiar in using wireless technology like Wi-Fi which uses radio waves to provide wireless high speed internet and network connections. Wi-Fi can apply to products that use any 802.11 standard (802.1, 802.2, 802.3, 802.5, 802.11(a, b, g, n, ac)).

Skillful in using Wi-Fi which is supported by many applications and devices including video game consoles, home networks mobile phones and major operating systems.

Worked on Open Stack Identity service for authentication and authorization of API requests.

Implementation and Maintenance of IP features including Address Translations, Access Lists, DHCP relaying, NAT etc.

Adroit in configuring and troubleshooting of PALO ALTO, Juniper Net Screen & SRX Firewalls and their implementation. Experience in site-to- site and remote access VPN solutions.

Experience with working on switches like EX2200, EX2500, QFX switches with spanning tree and Aggregated Ethernet (AE).

Hands-on-experience in using Juniper firewalls SRX 3600 and SRX 650 for WAN edge and also configured route based VPN and policy based VPN.

Performed sustained engineering duties to support CRAN services - data, video, and voice products.

Cisco’s Intelligent Wide Area Network (IWAN) is available for Integrated Services Routers (ISR), Cisco Integrated Services Virtual Router (ISRV), Cisco ASR 1000 Series Aggregation Services Routers (ASR), Cisco Cloud Services Router (CSR) 1000V Series.

Worked on Access Policy Manager (APM) in order to provide access and security solution that provides unified global access.

Network Management: TACACS authentication, authorization and accounting protocols. Terminal Server reverse telnet configuration for remote console access.

Very strong expertise in VPN Technologies and dedicated security configurations (Firewalls, IDS/IPS) and best practices in Information Security policies/procedures.

Responsible for Check Point and Cisco ASA firewall administration across global networks.

Intelligible of Cisco networks as well as their installation and maintenance.

Experience with F5 load balancers – LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Worked on Citrix NetScaler to make apps and cloud-based services run five times better by offloading app and database servers.

Responsible for nationwide implementation of DMVPN based wide area networks. Maintain the organization’s network and security devices such as Cisco Routers, Switches, ASA’s and VPN (DMVPN, EZVPN, SSLVPN) connectivity.

Experienced with Citrix SDX for supporting data center consolidation and to enable cloud data center build outs. Data centers infrastructure migration from legacy catalyst switching to virtualized Nexus network using Nexus 7K/5k/2k.

Extensive knowledge on Citrix MPX which is used for managing web applications with multiple gigabits of traffic and for high performance web application security.

Load Balancing and High Availability. Network high-availability concepts like HSRP, RSVP, VRRP, Active-Passive and Active-Active concepts.

Expertise in Network Functions Virtualization (NFV) which offers a new way to design, deploy and manage networking services. NFV is applicable to any data plane processing function in both wired and wireless network infrastructures.

Dexterity with Software Defined Network (SDN) and Network Functions Virtualization (NFV) in making the network flexible as the virtualized server and storage infrastructure of the modern data center.

Worked on Network Functions Virtualization (NFV) in order to decouple network functions from dedicated hardware devices and allow network services.

Adroit in Software Defined Network (SDN) which offers a wide selection of competing architectures at the simplest way. Software Defined Network (SDN) centralizes control of network by separating the control logic to off-device computer resources.

Collaborated with design team to develop a working configuration of Overlay Transport virtualization in the Application Centric Infrastructure (ACI).

Tested and validated customer network designs on new released hardware including the Nexus 9000 platform and Application Centric Infrastructure (ACI).

Experience on internal Server farm build using Cisco Nexus based ACI with UCS, EMC VPLEX, EMC VNX 8000, EMC XtremIO, EMC Data Domain.

Extensive knowledge in using Software Defined Network (SDN) which provides benefits like Direct programming, Centralized management, Deliver Agility and Flexibility, reduces CapEx, OpEx.

Worked on Cisco PIX 500 series and ASA 5500 series Firewall providing support and configuring for NAT, PAT advanced Firewall rules implementation. IPS on ASA’s with Botnet protection.

Adept in preparing Technical Documentation and presentations using Microsoft VISIO/Office.

Experienced in using Python to provide higher level access to specific application level networks such as FTP, HTTP.

Worked on CISCO Prime Infrastructure for monitoring and troubleshooting with CISCO ISE and location based tracking of mobility devices with CISCO MSE.

Hands on experience with programming languages and operating systems like Python, Linux, Perl, Shell, Mac OS, Cisco IOS, JUNOS.

In depth knowledge on Ticketing systems that allows us to automate ticket assignment, routing and escalation to the right technician at the right time.

Technical Skills:

Routing

OSPF, EIGRP, BGP, PBR, IS-IS, Route Filtering, Redistribution, Summarization, Static Routing, PBR

Switching

VLAN, VTP, STP, RSTP, PVST+, RPVST+, Inter VLAN routing & Multi-Layer Switch, Virtual Port Channel.

Multicast operations, Layer 3 Switches, Ether channels, Transparent Bridging

Network security

Cisco (ASA, PIX) 5510, ACL, IPSEC, VPN, Security context

Load Balancer

Cisco ACE load balancer, F5 Networks (Big-IP), LACP, PAgP.

LAN

Ethernet (IEEE 802.3), Fast Ethernet, Gigabit Ethernet

WAN

Leased lines 64k - 155Mb (PPP / HDLC), Channelized links (E1/T1/E3/T3),

Fiber Optic Circuits, Frame Relay, ISDN, Load Balancing

Operating Systems

Windows (98, ME, 2000, XP, Server 2003/2008, Vista, Windows 7), Basic Linux, Cisco IOS, NX-OS, JUN-OS, Brocade IOS.

CISCO Routers

Cisco 17XX, 18XX, 26XX, 28XX, 37XX, 38XX, 39XX,72XX,10k,12k series, ISR, ASR

CISCO Switches

Cisco 2960,3550, 3750, 45XX, 65XX,Nexus 5k,7k,9k series

JUNIPER Routers

Juniper MX480, 240, 80 series, Juniper QFX 5100, QFX 5200 series.

JUNIPER Switches

Juniper EX4500, 4200

Firewalls

Cisco ASA 55XX series, Juniper SSG140, Checkpoint R75, R76,R77 ISA/TMG

Various Features & Services

IOS and Features, HSRP, GLBP, IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, LLDP, TFTP and FTP Management

AAA Architecture

TACACS+, RADIUS, Cisco ACS

Network Management

SNMP, Cisco works LMS, HP open view, Ethereal, MRTG/PRTG server, Network Node Manager, Infoblox for DNS Management, SolarWinds. Wireshark, Netscout.

Reports

Microsoft (Visio pro.), Checkpoint (Eventia reporter, Smart view), Network Node Manager ISPI Reporting.

Certifications:

Cisco Certified Network Associate (CCNA).

Cisco Certified Network Professional (CCNP).

Professional Experience

Tucson Electric Power, Tucson, AZ May 2015– Till date

Sr. Network Engineer

Responsibilities:

Working on Cisco 6509 and 4507 series switches for LAN requirements that include managing VLANs, Port Security and troubleshooting LAN issues.

Configuring and installation of Cisco 2500, 3640, 7200, 7500 and 7940 Routers.

Configured IPX/SPX, HDLC, PPP, TCP/IP, BGP, EIGRP, RIP, & HSRP.

Configured TCP/IP addressing scheme to assigned IP blocks.

Brocade FC 6610’s, Cisco ASA firewalls, single tenant Fortigate firewalls, multi-tenant Fortigate VDOMs (virtual domains) and Kemp & Radware load balancers.

Installed Palo Alto Network for Splunk app and ingested syslog server and different firewall logs of Panorama in to Splunk. Worked on installing Splunk DB connect app in our Splunk servers.

Developed new PBX services as well as fulfilled the duties of a VoIP engineer, software developer and Linux engineer.

Combined the duties of a Linux engineer and a VoIP engineer to successfully design and implement several key systems to improve both services to the customer and work-load for the company's employees.

VoIP debugging and troubleshooting technologies - Cisco term mon, tcpdump, Wireshark, CommuniGate Pro logs, Asterisk logger, Remote Syslog, etc.

Integrated Microsoft Lync server with Cisco Call Manager backend support to provide varying hybrid solutions to the various NIH Institutes. Responsible for High Availability, Backup, e991, and architecture of Microsoft Lync 2013 infrastructure.

Managed all aspects of the Unified Messaging infrastructure using Microsoft Office Communications Server 2007, along with all migrations plans through Microsoft Lync.

Migration from Lync 2010 to Lync 2013 and to Skype for business. Deployment of Enterprise Voice for Lync 2010/2013/Skype for business.

Perform Engineering and Operational Support for Lync 2013 / Skype for Business environment for 60K users across 16 pools.

Engineered a firewall script to allow the passing of IPv4 packets and the blocking of IPv6 packets within a network, Coded the firewall script in Python.

Over 2 years of experience in Software Defined Networking (SDN) architecture and implementation using NSX Manager, Distributed Firewall. Experience in designing various network topologies for the physical, virtual (NSX) and cloud environments.

Experience working with MS SQL server, installation, setup, working with basic SQL queries and deployment of few HP servers for ESXi 6.

Configured Windows Server 2003, Server 2008, Server 2012 and provided support for company test environment which had over 100 servers and workstations.

Migrate user data (non-PST/media) to datacenter for consolidated storage and management. Develop and maintain Regional storage and virtual storage architecture.

Cisco’s Intelligent Wide Area Network (IWAN) simplifies branch operations with a single multiple service networking platform, avoid backhauling branch traffic to the data center.

Used Cisco’s Intelligent Wide Area Network (IWAN) to protect all branch office endpoints from threats with proven security.

Adroit in using Cisco’s Intelligent Wide Area Network (IWAN) which gives IT the visibility and control over the network. Cisco’s Intelligent Wide Area Network (IWAN) delivers secure, high-performance experiences over any type of wide-area network connection.

Intelligent Wide Area Network (IWAN)-enabled routers dynamically choose network paths for your traffic based on application, endpoint, and network conditions.

Prepared documentation for various VLAN’s and Voice sub networks and worked on Visio for the same.

Responsible for LAN/WAN (BGP/DMVPN) network design, implementation and technical refresh with detailed implementation and test plan. Responsible for remote sites connectivity via VPN/site-to-site/IPsec, GRE, DMVPN.

Experience on deploying CUCM cluster and Cisco Unity 5.0/connection 7X/8X/9X/10X clusters for a broad range of business. Specialize in Cisco Call Manager gateway, Cisco Call Manager Express, Unity Express, and Cisco UC 500 series products.

Working as Cisco Unified Communication and Collaboration Engineer. Experience working with Cisco Unified Communication Manager (CUCM) 7.X, 8.X, 9.X, 10.X, 11.X.

Transfer phone calls using utilizing Cisco Unified Communication Manager Attendant Console (CUCM). Expert in Cisco Unified Communications Manager (CUCM) and Unity Connection voice mail system.

Installation, configuration, maintenance and support of Shoretel Unified Communications telephony systems, Asterisk-based systems and associated hardware, software and other peripherals.

Responsible for the engineering and administration of all activities pertinent to an enterprise class Cisco Unified Communications Manager (CUCM), Call Manager, 9.2., VoIP telephony and Unity Connection 9 voice mail system environment.

Work with carriers to terminate T1 for voice and data on Cisco router, also configure SIP trunking, PRI, ISDN, analog lines on Cisco PBX, routers and/or other brand of PBX.

Performing network monitoring, providing analysis using various tools like Wireshark, Solar winds etc.

Experienced in using Cloud delivered web security solutions, Cisco CWS which offers extensive security as a service (SaaS). Cisco CWS controls access to websites and specific content in Web pages as well as applications.

Troubleshooting OSI layers 1-7, configuration assistance, basic design assistance and software support for Comware 5, Comware 7 as well as multivendor support but not limited to Cisco, Fortinet and Riverbed platforms.

Coordinated Infoblox which is used to identify devices that are connected to network, specifically for DNS, DHCP and IP address management.

Coordinated with a team to remove EIGRP from all devices and making OSPF the primary routing protocol.

Installed and configured DNS and DHCP server.

Coordinated Microsoft Traditional Active Directory technology that stores usernames and passwords and uses them to manage and secure access to computers on a windows domain.

Troubleshoot DHCP and other IP conflict problems.

Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.

Configuring remote users to access corporate LAN with VPN connectivity.

Experienced in troubleshooting Juniper MX and QFX which can be deployed as spine, core or aggregation devices and JunOS Fusion architectures.

Experience working with JUNOS on Juniper Routers and switches. Provide support for remote connections utilizing JUNOS VPN connections. Understanding of JUNOS platform and worked with IOS upgrade of Juniper devices.

Configured Frame-Relay, ISDN, ATM, Protocols, & load balancing switches.

Configuring Virtual Device Context in Nexus 7010.

Implementation and configuration of F5 BIG-IP LTM-6400 load balancers.

Involved in the redistribution into OSPF on the core ASA firewall.

Responsible for Cisco ASA 5500 firewall administration, Rule Analysis, Rule Modification.

Cisco ASA/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.

Installation and administration of Checkpoint R 75.40 Firewall.

Environment: Cisco routers (7900,7600,4000,3600,2500), Cisco switches (6800,6500,4900,3850),Cisco ASA Firewall(5510), Routing protocols (EIGRP, RIP, BGP,OSPF), Switching protocols(VTP,STP), Load Balancer.

Novartis Pharmaceuticals, Parsippany, NJ Nov 2013 – April 2015

Sr. Network Engineer

Responsibilities:

Upgrade the whole network infrastructure hardware for hospitals and associated clinics.

Experience in design and implementation of new branch, test and turn up. 3750 and 3850 switch stack for access layer, Nexus 5k with 2k for distribution layer, and 4500 in VSS for core.

Deployed wireless using pair of 5508 controllers with 3700 series Access points (LWAP’s). Used Cisco Prime for Wireless Infrastructure Management and Syslog.

Experience working with Big-IP LTM (F5’s) for application load balancing using cookie persistence.

Proficient with F5 load balancers – LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Configured Storage Area Network in order to get high performance network to enable storage devices to communicate with other computer systems.

Supporting EIGRP and BGP based PwC network by resolving level 2 &3 problems of internal teams & external customers of all locations.

Served as customer-facing voice for Cisco clients, addressing complex technical issues. Provided technical support with focus on finding solutions for customers with Cisco VoIP products.

Deployed HP 5130 EI switches with IRF for HP servers.

Worked on IP telephony to exchange voice, fax and other forms of information.

Defined clients' business needs to align with VCE, CUCM, and Unity product and network offerings.

Performed switching technology administration including VLANs, inter-VLAN routing, Trucking, STP, RSTP, port aggregation & link negotiation.

Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.

Setup site wise monitoring system for UPS’s.

Routing changes to upgrade from ASA to Palo Alto in HA.

Cleaned router and switch configuration for efficiency, mostly routing protocols in OSPF and EIGRP.

Redistribution between EIGRP and OSPF networks.

Used SolarWinds, Netscout and Virtual true view central for monitoring Implemented BGP between sites for interconnectivity between hospitals.

Work on ISA/TMG to collect IP addresses that can directly reach a NIC on the firewall without having to traverse firewall.

Day to day troubleshooting of the infrastructure.

Manage the in-scope Disaster Recovery contracts and work orders throughout their lifecycle, including negotiating and updating the contract for modifications surrounding contractual and work order changes (including service levels, deliverables, scope changes, and technical standards, resource units).

Conduct Disaster Recovery contract document audits for compliance. Track and assess the impact of IBM agreements. Disaster Recovery contract changes, amendments, and revisions to all in-scope

Network support for ESX servers.

Experienced on Link Aggregation Control Protocol (LACP) to aggregate one or more Ethernet interfaces to form a logical point-to-point link.

Configured PAgp to prevent network error, for configuration confirmation and to prevent Failover.

Skillful in IEEE 802.11 specifications which use the Ethernet protocol and Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA) for path sharing.

Experience with Project documentation tools & implementing and maintaining network monitoring systems and experience with developing network design documentation using VISIO.

Environment: Router 2900, 3900; Cisco Catalyst Switch 4500, 3850, 3750, 3550, 3650, 2960, 5508 controllers, 3700, 2700, 1100 access points, BIG-IP LTM, Fiber and Ethernet cabling.

Office Depot, Naperville, IL Nov 2011 – Oct 2013

Network Infrastructure Engineer

Responsibilities:

Working under the guidance of the Director of Network Infrastructure as an instrumental member of the Infrastructure team ensuring all other city agencies have the critical resources and support they need to provide the best possible services to the public

Majorly responsible for configuring and deploying cisco IP phone 78XX, 79XX series and cisco 88XX, 89XX to users and documenting the same.

Responsible for configuring cisco switches using virtual switching system (VSS). Hands on with creating Voice and data VLAN’s and performing appropriate port association.

Worked under supervision for LAN/WAN routing protocols, BGP, OSPF, DNS and firewall.

Developed QoS strategy over LAN/WAN to accommodate VoIP technologies ( SIP, RTP, RTCP, IAX, ACD,IVR) utilizing Avaya Voice platform systems. Review enterprise QoS policies and configurations on all networking devices.

Troubleshooting on the devices by remote login to determine the RFO (Reason for outage) and RCA (Root cause analysis) to minimize the consequences of malfunctions.

Enabled STP Enhancements to speed up the network convergence that include Port-fast, Uplink-fast and Backbone.

Establishing VPN Tunnels using IPsec encryption standards, SSH, SSL and also configuring and implementing site-to- site VPN, Remote VPN.

Responsible for managing the TFTP logs for the VPN and firewall services and troubleshoot the VPN tunnel issues like SA, RSA, ISAKMP encryption and cleared/refresh VPN tunnel issues.

Configuring of IP Allocation and subnetting for all applications and servers and other needs throughout company using FLSM, VLSM addressing.

Hands-on configuration experience with cisco switches 2960 series, 3750 series, 3850 series creating VLAN’s, using VTP protocol and configuring the switch in server mode and client mode and associating ports to respective voice and data VLAN.

Maintain a thorough understanding of the basics behind the Internet and its workings (DNS, Security, IP Routing, HTTP, VPN, Email Routing, SPAN, etc).

In charge of VOIP phone deployment for entire NY City departments using remedy ticketing system and performing inventory checks.

Utilizing LAN/WAN network management tools like OP-Manager and Utilities for network monitoring and maintenance.

Environment: Cisco VoIP, 78XX, 79XX, 88XX, 89XX, Cisco routers, Cisco switches 2960, 3750, LAN, WAN

Growic Technologies, India Sep 2010 – Oct 2011

Network Support Engineer

Responsibilities:

Effectively responding to Monitoring Alerts and troubleshooting the incidents accurately and in low down time and providing 24/7 Network Support.

Working as a part of a team to manage Microsoft Network Incident engineering.

Proactively monitoring availability and performance of the Microsoft network and infrastructure using key tools.

Effectively respond to Monitoring alerts, incident tickets, and email requests handled by Microsoft Operations Center.

Perform application and web site troubleshooting to quickly resolve the issues per documented procedures.

Troubleshoot issues related to VLAN, VLAN Trunking, HSRP failovers, related issues

Configuration of NAT.

Good experience on troubleshooting CISCO Nexus switches like 7000 and 5000 series.

Troubleshooting and Configuring of Various routing protocols like BGP, OSPF, RIP and switching

Protocols like STP, RSTP.

Configured HSRP and VLAN Trunking 802.1Q, VLAN Routing using MSFC on Catalyst 6500 Switches.

Ensure user tickets and monitoring alerts are handled per pre-defined SLA''s for response time, updates and closure.

Installation and troubleshooting T1’s, Ethernet connections with different ISP’s using routing protocols OSPF, BGP.

Escalate issues as needed to back line production operations teams or Engineering per documented procedures.

Handling communication and notification on major site issues to the company and executive management team.

Document resolution run books and standard operating procedures.

Ensure smooth hand offs between shifts.

Assisting in tracking bugs and gathering specific technical information to be given to the developers.

Open/Track trouble tickets with various service providers.

Work closely with all technical teams to improve strategies that will increase reliability, availability, and uptime for services.

Good experience on troubleshooting and implementing MOPS on the juniper products like MX960 etc.

Environment: CISCO routers, switches, Juniper routers and switches, LB4M switches, CITRIX Netscaler, Load Balancers,, OSPF, BGP, RPST, VRRP.

Serco Global Services, India May 2008 – Aug 2010

Network Support Engineer

Responsibilities:

Part of Network security team who will be responsible for Installing/Maintaining the Firewalls.

Day to day activities includes addressing new installations/troubleshooting existing issue across Checkpoint FW (splat/Nokia), Juniper ISG1000 etc.

Responsible for assessing the vulnerability of port openings requested by business across the Globe.

Designed and implemented control and data plane features of L2/L3 QoS and ACL for SAS 7210 service routers and switches. Responsible for end-to-end convergence testing, network throughput, Quality of Service (QOS) testing, network optimization and resiliency testing

Deployed the Nexus 7000/5000/2000 architecture into production securing competitive advantage across multiple verticals.

Converting CATOS to CISCO IOS Config Conversion on distribution layer switches.

Convert Branch WAN links from TDM circuits to MPLS and to convert encryption from IPsec/GRE to GET VPN.

Conversions to BGP WAN routing which converts WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new WAN links.

Planning, Designing and assisting in deploying enterprise wide Network Security and High Availability Solutions for ASA.

Monitoring and Inspecting throughput on HP Tipping point Intrusion Prevention System (IPS) S330 series through command line interface and Intrusion Detection Systems (IDS).

Involved in Configuration of Access lists (ACL) on Juniper and Palo Alto firewall for the proper network routing for the B2Bnetwork connectivity.

Experience on switching technologies like VLAN, Inter-VLAN Routing.

Have created lot of site to site IPsec VPN tunnel with Checkpoint, Juniper NetScreen firewalls and Cisco PIX/ASA firewalls. Completed a project to update the patch HFA50 across all the firewall to overcome the bugs in the existing version of R65.

Migrated the user access switch environment which is of HP 5406 to Cisco 3750X, 3750G and 3750V2 environment to get gigabit speed.

Maintained a backup environment build out of HP8212ZL and HP5406ZL with 10G uplinks to the core.

Troubleshooting complex issues with wireshark at source and destination which can’t be resolved by the basic troubleshooting like ARP, firewall logs, switch logs and tcpdump.

Responsible for logging/Resolving the severity calls logged in by Incident management.

Environment: Routing, Switching, Firewalls, OSPF, BGP, VLAN, Access lists.

Education: Bachelors in Electronic and Communication Engineering, Jawaharlal Nehru Technological University, Kakinada, India.

Contact this candidate