Pranith

aczovs@r.postjobfree.com

412-***-****

SUMMARY

* ***** ** ********* ********** in network design, implementation, troubleshooting, engineering, managing & migration of large-scale enterprise Campus networks and Data Center networks

Excellent knowledge and experience on different platforms like Cisco, Juniper, Checkpoint, F5 Big-IP LTM load balancers and VMware

Experience in layer-3 Routing and layer-2 Switching. Dealt with Nexus models like 7K, 5K, 2K series, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500 and 1800 series and Cisco catalyst 6500, 4500, 3750, 3500 and 2900 series switches

Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NAT’ing, sub-netting, also including DNS, WINS, LDAP, DHCP, http, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, STP (Spanning tree Protocol), RTSP & Multicasting protocols

Configured Client-to-Site VPN using SSL Client on Cisco ASA 5520 ver8.2

Experience in installing and troubleshooting of WAN technologies like T1/T3, DS3, STM1, OC3, SONET, Gigabit and STM4 circuit types

F5 knowledge on LTM, GTM, APM.

Strong knowledge of TACACS+, RADIUS implementation in Access Control Network

Configured Checkpoint, Sonic wall and Juniper firewalls.

Experience with Cisco ACI fabric networks.

Developed and presented LAN/WAN/WLAN network engineering design packages

Responsible for executing the implementation and service around critical corporate network(s) (LAN and WLAN)

Knowledge of network monitoring and configuration tools such as Cisco Prime

Experience in Network Protocol Testing and analyzing the Signaling of VoIP Protocols H323 and SIP as per standard RFCs.

Checkpoint Firewalls, configure IPS modules, failovers, firewall exception requests

Participated in a 24/7 working environment to resolve urgent trouble tickets filed by customer security admins.

Experience in a multi-vendor environment (Brocade, Juniper, Cisco, etc.)

Worked on F5 and CSM load balancers deploying many load balancing techniques with multiple components for efficient performance

GTM deployment architecture, Upgraded and relicensed F5 LTM

Operate Cisco NAC appliance on both client end and Manager Server

Involved in troubleshooting of DNS, DHCP and other IP conflict problems

Manage deployment and testing of code updates for wireless systems, such as WCS, WiSM, and WLC

Provided testing and supporting documentation of products integrated into the wireless implementation

Managed the upgrade of the wireless systems

Provided Technical Support to customers and partners on Crossbeam and Checkpoint appliances.

Tier II Support Engineer providing technical assistance to Checkpoint's customer base and partners.

Extensive knowledge of switch functionalities and multilayer switching network like STP, RSTP, CEF, Ether Channel (PAGP and LACP)

Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST.

Implementation of HSRP, VRRP for Default Gateway Redundancy.

In depth knowledge with network monitoring and performance tools such as Solar Winds and Wireshark

Experienced configuring Virtual Local Area Network (VLAN), VLAN Trunking Protocol (VTP), Dynamic Trunking Protocol (DTP), Spanning Tree Protocol (STP), RSTP, MST and Per VLAN Spanning Tree (PVST), Virtual routing and Forwarding (VRF)

Experience working with different routing RIP, RIP2, OSPF, BGP, EIGRP, ISIS

Worked on network topologies and configurations, TCP/IP, UDP, Frame Relay, Token ring, ATM, bridges, routers, and Switches

Extensive experience using Microsoft suite like Word, Visio, Excel, PowerPoint

TECHNICAL SKILLS

Operating Systems

Cisco IOS, Windows NT 4.0 (Desktop/Server), Windows 2000/2003/2008/2012 Server, Windows XP/Windows 7/8, LINUX,UNIX, MS Exchange server, Solaris, Active Directory.

Equipments (Switches & Routers)

Cisco routers (7600, 7200, 3900, 3600, 2800, 2600, 2500, 1800 series, ASR 1K, 9K) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900 series, juniper SRX, MX480, 240, 80 series, EX Series Routers and Switches.

Routing

OSPF, EIGRP, BGP (EBGP/IBGP), RIP, RIP-2, PBR, Route Filtering, Redistribution, Summarization, Static Routing, IPV4, IPV6.

Switching

VLAN, VTP, STP, PVST+, RPVST+, Inter VLAN routing &Multi-Layer Switching, Multicast operations, Layer 3 Switches, Ether channels, Transparent Bridging.

Firewalls

ASA 5500 series, checkpoint, Juniper Netscreen Firewall ISG100, 2000, SSG, SRX, Palo Alto.

Load Balancer

ACE Module, GSS & F5 LTM

LAN Technology

Workgroup, Domain, HSRP, DNS, DHCP, Static, VLAN, STP, VTP, Ether Channel, Trunks.

WAN technology

Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONET.

Various Features &Services

HSRP, VRRP, GLBP, NAT, SNMP, SYSLOG, NTP, CDP, DNS, TFTP, FTP, IOS and Features, Management. Wireshark, IXIA chariot, Packet Sniffer, Packet Analyzer and Solar Winds Breaking Point, TCPDump, Python.

Wireless & Wi-Fi

Canopy Wireless Device (point to point/point to multipoint), DLink Wireless (point to point), DLink Access Point, CISCO 1200 series Access Point, and Linksys Wireless/Wi-Fi Router.

CERTIFICATIONS

Cisco Certified Network Administrator (CCNA)

Cisco Certified Network Professional (CCNP)

Work Experience

State of Tennessee, Nashville, TN January 2015 – Present

Sr. Network Engineer

Responsibilities:

Responsible for designing and implementation of network and Security in a large infrastructure consisting of 2500-3000 users

Designed, validated and implemented LAN, WLAN & WAN solution to client’s needs.

Expertise experience in implementing and troubleshooting VLANs, VTP, STP, RSTP, DTP, Root Guard, BPDU Guard, Port Fast, Uplink Fast, Backbone Fast, Ether Channel, PAGP, LACP and 802.1Q.

Experience in Cisco Routing and Switching using 3600, 3700, 3800, 4500, 5300, 6500, 7200, 7600 Nexus 7k, Nexus 5k, and Nexus 2k & ASR 9000, 1000 series routers.

Designed 10 gigabit networks using Cisco Nexus 7000 series switches, Checkpoint firewall and Cisco 3800 series routers.

Experience configuring Virtual Device Context in Nexus 7010 in the Data center design and deployment.

Migrating firewalls from Juniper Net screen 500 to SRX 650.

Deployment of Bluecoat as proxy and firewall solution to provide secure and optimum access of web service.

Maintained BIG IP F5 APM VPN and provided solutions for intricate issues.

Worked on Extensively on Checkpoint Smart Dashboard R75, R75.20 & R75.40 versions, Cisco Firewalls, Cisco ASA 5500(5510/5540) Series.

Administering Bluecoat integrated with Cisco for secured proxy solution.

Knowledge in Cisco ASA 5000 series and PIX installation, configuration and maintenance.

Configured ACLs in Cisco 5540 ASA firewall for Internet Access requests for servers, Protocol Handling, Object Grouping and NAT.

Integrating Configuring Cisco ASA Firewalls with ISE to the Posture policy compliance perform CoA for remote VPN IPsec, SSL AnyConnect users.

Monitored and analyzed Intrusion Detection Systems (IDS) & Intrusion Prevention System (IPS) to identify security issues for remediation.

Migrated, created, and managed pools and clusters in F5 BigIP GTM 3DNS load balancers across multiple Datacenters.

Implement and administered Wireless authentication method using Cisco Identity Service Engine (ISE) for 802.1x enterprise environment using any connect NAM.

Configured and maintained Cisco PIX/ASA Firewalls, routers, AP's and switches.

Hands on experience on configuring IPsec VPNs like dealing with PFS, reverse route, inbound/outbound NATs.

Extensive implementation of firewall rules on Juniper SRX 3600, SRX 3400, 650 SRX and SSG140 on a daily basis, using NSM.

Implemented Juniper SRX FW Interface, MIP and VLAN using NSM.

Troubleshooting resources such as Wire shark, Solar winds and Net flow.

Configuration of new Juniper SRX firewalls for remote site implementation.

Advance knowledge and experience from designing to troubleshooting Cisco Security (ISE) and Networking solutions.

Work with IT Security to design the SSL VPN through different network tunnels for corporate employees, vendors, and contractors by leveraging F5 APM and its ACL's.

Participate as Design Engineer for enterprise COPP, ARBAC and Guest wireless/wired internet access using Cisco ISE, WLC and 3850/switches, DMZ, and ASA.

Responsible for monitoring Client's network topology including LAN, WAN and Internet Security System.

Experience using Infoblox for configuring DNS and DHCP scoops.

Integrating Configuring RSA SecurID with ISE for Token based authentications using RSA Native method RSA RADIUS method for user's remote VPN users.

Configured and managed Syslog and SNMP traps.

Performed migration from Cisco PIX 535 to Net screen 5000 Series as a solution to converged, multifunction security and VPN services within a single platform.

Crossbeam hardware to Checkpoint hardware migrations, Cisco ASA to Checkpoint migrations, Panorama setup, Firewall.

Designed and implemented an information security solution to secure access to enterprise resources using TACACS+ authentication, authorization, and accounting via Cisco Access Control Servers (ACS).

Experience with Extreme Purview, HPE/Aruba switches, Juniper Network switches (QFX/EX Series) as well as a strong background in Cisco (Routing/Switching WAN/LAN)

Providing technical support on Nexus 2000/5000 switches and operating systems (NX-OS).

Tested VoIP client builds and compared them against POC Interoperability standards.

Provided design, engineering, and implementation of new F5 deployment and transition from Cisco ACE and CSS environment. Implement F5 APM for new SSL VPN access with F5 GTM

Licensing and provisioning of F5 modules such as LTM, GTM, VCMP (Virtual Cluster Multi Processing

Configured different load balancing methods on F5 LTM & GTM and worked on one-connect profiles and HTTP compression and several persistence profiles.

Performed migration of legacy Bigip and 3-DNS devices to newer version of LTM 8900 boxer.

Monitor F5 network and report on traffic and statistics to maintain appropriate performance

Evaluated customer's security needs, and provided suggestions / solutions on NAC policy configurations.

Installed and Configured Juniper and Cisco Routers – GSR 12000, 7600series, 4500, 2800s.

Do have experience on Configuring NAT onto the Juniper SRX firewalls using Infoblox.

Configured routing policies and service profiles for separate levels in an organizational hierarchy using a Cisco Prime Network Services Controller virtual machine.

Knowledge on IEEE 802.1q, VTP, STP, PVST, MST, RSTP, HSRP, GLBP, VRRP, Ether-Channel.

WAN optimization POC utilizing Riverbed Steelhead, Cisco WAAS and Silver peak appliances.

Created and configured dashboards in What's Up Gold and OPNET/Riverbed tools to assist with identifying network failures or application performance issues on CDC internal network

Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers.

Prepare design documents, drawing and technical presentations for senior management and applications teams

Responsible for comprehensive testing of all carrier-technologies used in the company using Wireshark.

Involved in migration from Frame-Relay/ATM network to MPLS-based VPN for customer’s WAN infrastructure.

Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.

Use and maintain routing protocols OSPF and BGP on the Routers in the network & also worked on BGP Route Reflectors, Confederations.

T-Mobile, Seattle, WA Dec 2012 – Nov 2014

Sr. Network Engineer

Responsibilities:

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550. This project also involved in configuring and testing EIGRP and BGP protocols.

Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Nexus 9k, 7k, 6k, 5k switches and Catalyst 4500 switches.

Implemented and Maintained IP Telephony & Cisco 7940 and 7960 VoIP systems.

Installed and configured F5 BigIP to provide Load Balancing for server.

Migrated distribution Switches 6509 to Nexus 7010.

Worked on Cisco PIX 500 series and ASA 5500 series Firewall providing support and configuring for NAT, PAT & advanced Firewall rules implementation. IPS on ASA’s with Botnet protection.

Planning and designing to incorporate McAfee’s IDS/IPS devices into Lowes network at optimized network locations.

Integrating Configuring Cisco Wireless LAN Controllers WLC with ISE to perform Dot1x authentication for Wireless users.

Responsible for reviewing current and planned network designs, particularly F5 load balancer implementations. Identified opportunities for implementation of network best practices.

Migrated from Checkpoint to Cisco ASA firewall. Implemented Bluecoat Proxy 810 security devices. Third Party security appliances to Cisco technologies.

Configuring Site-Site VPN on Checkpoint Firewall with R77 GAIA.

Implemented Checkpoint FW Interface, NAT and VLAN using R77 GAIA Smart Dashboard.

Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.

Worked on Extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5520/5540) Series.

Testing for Functionality and convergence of the network.

Experience on deploying Cisco ISE and ACI, Cisco NGFW/Sourcefire.

Configuration of Access List ACL (Std., Ext, Named) to allow users all over the company to access different applications and blocking others.

Implemented MPLS VPN (RFC 2547) Mechanisms on Cisco IOS and Juniper Platforms

Configured policy statements, routing instances, firewall filters.

Involved in Replacement of FPCs, PICs on Juniper M320 and T640 routers

Implementing fabric path, spine and leaf Data center.

Experience within a large, Windows & Linux-based Data Center environment.

Hands on experience on Infoblox DNS infrastructure like forwarding, caching, and delegation.

Configured ASA 5540 to ensure high-end security on the network with ACLs and Firewall.

Configured & maintained IPSEC Site-to-Site VPN.

Plan, design and test the application migration from F5 load balancer to new A10 load balancers

Creating App by APP configuration conversions from F5 to A10 load balancers and test it in Lab.

Created WIDE-IPs, WIDE-IP Pools and corresponding members in GTM’s.

Assist in configuration of F5 APM LTM modules for BIG IP networking equipment.

Configuring IPSEC VPN on Juniper SRX 650 series firewalls.

Experience with Firewall Administration, Rule Analysis, Rule Modification.

Experience in network performance testing using IXIA and Spirent Traffic generators.

Managed all Cisco security infrastructure including ASA firewalls, Identity Services Engine (ISE), Prime and IronPort Web Filters.

Experience on working with Checkpoint Application and URL filtering, Threat Prevention, Data Filtering)

Ability to work independently and also as part of a team, following established guidelines.

Worked with Cisco Layer 3 switches 3560, 3750, 4500, 6500; Cisco Nexus 5000 and 7000 in multi VLAN environment with the use of inter-VLAN routing, 802.1Q trunk, ether channel.

Key contributions include troubleshooting of complex LAN /WAN infrastructure that include routing protocols EIGRP, OSPF & BGP.

Experience Working on Cisco ASR routers like 1002, 1006, 9001 series as a core and configured HSRP for active-active redundancy.

Switches standardization- Includes replacing old switches with standard Cisco 3500 switches, upgrading Cisco IOS/Cat OS on Cisco 3500, modifying switch configuration, adding authentication, logging and SNMP configuration parts.

Design, configure and implement complex revenue recognition scheme for software subscription-related

Direct facilities staff and coordinate/oversee internal construction projects, and building by Palo Alto

Develop SOPs for Win-PAK and Lenel access control systems to ensure accountability on a global

Worked on troubleshooting customer issues related to MPLS VPN related issues involving PE configuration issues, PE-CE link issues such as routing protocol configuration, Layer1 / Layer2 issues, BGP4 address-family related issues, MP-BGP.

Worked on Route-Reflectors to troubleshoot BGP issues related to customer route prefixes, BGP route filtering policy problems, ORF etc.

Worked on deploying Multicast to various customers, that involved PIM- Sparse and Dense modes.

Worked on routing protocol related issues such as static, RIP, EIGRP (Variance and un equal cost load balancing)

Worked on issues related to customer access-lists and various security feature

Worked on Gigabit Ethernet service related issues troubleshooting Catalyst 6500, 3560 switches,

Issues related to VLAN, VLAN Trunking, HSRP failovers, related issues

Orange Research Labs, Hyderabad Jan 2009 – Oct 2012

Network Engineer

Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.

Created OSPF multi area summarization plan. Created stub, totally stub areas.

Tested routers and Line Cards using SmartBits and done Performance Analysis of both LAN/WAN infrastructures.

Upgraded distribution switches from 4500 to 6500.

Interacted with business users from a service delivery and service support perspective.

Hands-on experience with WAN (ATM/Frame Relay), Routers, Switches, TCP/IP, Routing Protocols (BGP/OSPF), and IP addressing.

Configured Routing protocols such as VLANs, VTP, STP, MSTP, VRRP and HSRP

Configured STP for switching loop prevention, and VLANs for data and voice along with configuring port security for users connecting to the switches.

Negotiate VPN tunnels using IPsec encryption standards and also configured and implemented site to site VPN and remote VPN

Configured NATs, ACL and routing on Cisco routers, firewalls, and layer 2 & layer 3 switches.

Configured policy based routing for specific traffic, route filtering with route maps and route redistribution.

Implemented Network monitoring tools Wire shark and Manage Engine IT360.

Implemented IP Telephony and Cisco VoIP 7960 phone systems in the company.

Worked in Multi-vendor environment containing Juniper, Cisco and Nortel routers.

Worked as a member of NOC and involved in troubleshooting LAN/WAN issues.

Configuring, managing and troubleshooting networks using routing protocols like RIP, EIGRP and OSPF (Single Area and Multi Area).

Troubleshoot MPLS issues with in the core and edge.

Contact this candidate