Cisco Network Engineer

UMESH SINGH

Sr. Network Analyst

Mobile: 219-***-**** Email: *****.*******@*****.***

PROFESSIONAL SUMMARY:

• CCNA Certified & CCNP Trained Sr. Network Analyst with an experience of 10+ years in Information Technology. Experienced in design, install, support, troubleshoot including a broad range of LAN/WAN/MAN, enterprise networks and service provider systems.

• Experience in Cisco: Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay & MPLS), Routing protocol configurations (RIP, EIGRP, OSPF, BGP)

• Experience in implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether- channel, STP, Port-Channels.

• Hands on experience in implementation and deploying BIG-IP F5 LTM load balancers for load balancing and network traffic management for business applications.

• Worked on F5 LTM, ASM for the corporate applications and their availability.

• Implementation of HSRP, VRRP for Default Gateway Redundancy.

• Expert level knowledge on OSI model and TCP/IP protocol suite.

• Implementation and maintained Sourcefire intrusion detection/ prevention (IDS/IPS) system.

• Experience in Data Center Design with Cisco Nexus in troubleshooting of DNS, DHCP and other IP conflict problems.

• Experience with hardware load balancer administration and support, preferably with F5 and Cisco ACE load balancers.

• Experience with the conversion of Cisco rules over to the Checkpoint technology. Migration experience with both Checkpoint and Cisco ASA.

• Experience in layer-3 Routing and layer-2 Switching.

• Provided administration on Bluecoat Proxy for content filtering and internet access between site and VPN client users.

TECHNICAL SKILLS: +-

Router platforms

Cisco routers (7600, 7200, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900, 6807 series), Nexus 9K, 7K, 5K, 2K & 1K.

Switch platforms

Cisco 2900XL, 2950, 2960, 3560, 3750, 4500 and 6500, Nexus (2K, 5K, 7K and 9K)

Firewall Platforms Cisco ASA, Firepower, Checkpoint, Palo Alto, Fortinet. Networking Concepts

Access-lists, Routing, Switching, Subnetting, Designing, IPSec, VLAN, VPN.

Network

Management/Monitoring

Spectrum, Thousand Eyes, Solar winds, HP Omi, Site Scope, Cisco Tetration, Net flow, Cisco prime, Splunk, Wireshark, TCP Dump, Cisco NPM. WAN technologies MPLS, leased lines & exposure to T1 /T3. LAN technologies

Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Port- channel, VLANS, VTP, STP, RSTP, 802.1Q

PROFESSIONAL EXPERIENCE:

Global Payments, Tempe, AZ Feb 2018 – Present

Sr. Network Analyst

Responsibilities:

• Installation and Configuration of Composite Network models consisting of Cisco7600, 7200, 3800 series routers and ASR 9k and Cisco 2950, 3500, 5000, 6500 Series switches.

• Configured routing protocols such as OSPF, EIGRP, and BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy. It also includes the configuration of the port channel between core switches and server distribution switches.

• Key contributions include troubleshooting of complex LAN/WAN infrastructure that includes routing protocols EIGRP, OSPF & BGP.

• Experience configuring Virtual Device Context & Virtual Port Channel in Nexus 7k, 9k.

• Responsible for day to day management of Cisco Devices, Traffic management and monitoring.

• Experience in HSRP standby troubleshooting & Experience in configuring & upgrading of Cisco IOS.

• Configured policy-based routing for BGP for complex network systems.

• Configured Multiprotocol Label Switching (MPLS), VPN on the customer’s Site.

• Provided application level redundancy and availability by deploying F5 load balancers LTM.

• Configuration, Troubleshooting, and Maintenance of Palo Alto Firewalls PA2000 series, PA3000 series, PA4000 series and PA5000 series.

• Configuration and providing management support for ASA, Palo Alto and Checkpoint Firewalls (R80.10).

• Providing production support for F5-ASM during on or off business hours.

• Upgrading system images on Nexus 5 and 7 multi-layer switches using kick start and FTP server.

• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems during production calls.

• Designing and Implementation of (LAN) VLANs, VTP, Spanning Tree (STP), Trunking (dot1q and ISL) and Ether channel.

• Good Knowledge in using IPS/IDS devices (Tipping Point).

• Implemented many security policy rules and NAT policy rules on Palo Alto, created zones, implemented Palo Alto Firewall interface.

• Managed Infoblox Grid Manager to manage DNS Forward and Reverse Lookup zones.

• Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.

• Performed installation and configuration Cisco Secure Access Control Server (ACS) configuration for AAA

(RADIUS) authentication.

• Involved in designing L2VPN services and VPN-IPSEC authentication & encryption system.

• Tuned BGP internal and external peers with manipulation of attributes such as metric, origin and local Preference.

• Configuring and implementing F5 BIG-IP, LTM, GTM load balancers to maintain global and local traffic.

• Configuring, Installing and troubleshooting on Check Point Devices and Involved in the migration of Cisco Pix Firewall to Cisco ASA.

Configured networks using routing protocols such as OSPF, BGP and manipulated routing updates using route- map, distribute list and administrative distance for on-demand Infrastructure.

• Experience with design and implementation of Data center migration for one of our data centers.

• Single handily built multiple racks for the production environment. Ran and Managed projects

• Implemented Hot Standby Router Protocol (HSRP) by tuning parameters like preemption.

• Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.

Networking Protocols

OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA, IPv4 and IPv6 Operating System Windows 7/XP, MAC OS X, Windows Server 2008/2003, Linux, Unix

• Monitor performance of network appliances and WAN utilizing using network analyzer like Wireshark.

• Monitor performance of WAN using THOUSAND EYES tool.

• Working on Enterprise AV Solutions, SIEM (HP ArcSight, SiteScope) tools.

• Configured all network devices to remote logging for SPLUNK project.

• Used Tcpdump to analyze packets on the TCP/IP and provides brief display of packet. 04D Private Limited, India May 2014 – May 2016

Network Engineer

Responsibilities:

• Configured and installed Cisco routers 2500, 2600, 3601 and 4000 series. 2950 Switches & Linksys wireless access points.

• Handled the upgrades and replacement of network components like NIC cards, display cards, RAM, keyboard, mouse and other peripherals/ devices.

• Worked extensively on Cisco ASA 5500 (5510/5540) Series.

• Handled installation of operating systems (NT/2000, XP), troubleshooting of operating systems and configuration of the servers.

• Gained knowledge in IP Subnetting for Class A, B, and C networks.

• Documented the design, implementation and troubleshooting procedures.

• Configured and troubleshot VLAN, VTP, STP and Trunks.

• Remote testing of links up to 1.5 Mbps using tools like FLUKE.

• Configured routing protocols like RIP, EIGRP, OSPF and BGP on Cisco devices.

• Good knowledge on troubleshooting the routing protocols.

• Recovered lost passwords and created standard access lists and extended access-list to new users.

• Monitoring network performance to improve the backup strategy using Netrep, SolarWinds. CERTIFICATIONS:

• CCNA - Cisco Certified Network Associate

Contact this candidate