Network security Engineer

Jagadish Krishna Marni

Phone - 804-***-****

Email – ************@*****.***

SUMMARY:

2+ years of professional experience in Network engineering with Cisco CertifiedNetwork Security Engineer performing Network analysis, design, Implementing, capacity planning with a focus on performance tuning and support of large Enterprise Networks.

Strong knowledge in Cisco Routing, Switching and Security with Cisco hardware/software (heavy Cisco shop) experience.

Experience working on Cisco Catalyst Series 3750, 4500, 6800, 6500, 9300, 9400, 9500,9600; Nexus 2000, 5000, 6000 and 7000 series switches.

Extensive work experience with Cisco Routers, Cisco Switches, Load Balancers and Firewalls.

Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP, GLBP for Default Gateway Redundancy

Involved in troubleshooting of DNS, DHCP and other IP conflict problems.

Responsible for Palo Alto and Cisco ASA firewall administration across global networks.

Experience in working with Cisco Nexus Switches and Virtual Port Channel configuration.

Worked on F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.

Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480) and SRX Firewalls (SRX240, SRX550)

In-depth knowledge and hands-on experience in Tier II ISP Routing Policies, Network Architecture, IP Subnetting, VLSM, TCP/IP, NAT, DHCP, DNS, FT1 / T1 / FT3 / T3 SONET POS OCX / GigE circuits, Firewalls.

Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.

Proficient and high-level expertise using the F5 based profiles, monitors, VIP’s, pools, SNAT, SSL offload, iRules, virtual Servers, iAPPs. Migration experience from ACE to F5/ old F5 to New F5. Expert in TMSH.

Technical Skills:

Networking Technologies

LAN/WAN Architecture, TCP/IP, Frame Relay, VPN, VLAN, VTP, NAT, PAT, STP, RSTP, PVST, MSTP

Networking Hardware

Cisco Switches, Cisco Routers, ASA/Palo Alto/Fortinet/Juniper firewalls, Wireless Cisco and Aruba.

Routing Protocols

OSPF, ISIS, EIGRP, RIP, MPLS, IS-IS, BGP, Multicasting

Security Technologies

PAP, CHAP, Cisco PIX, Blue Coat, Palo Alto, ASA, Fortinet, Checkpoint

Network Monitoring

Wireshark, HRping,, Infoblox, CA spectrum, Gigamon

Operating Systems

Windows 7, Vista, XP, 2000, LINUX, Cisco IOS, IOS XR, IOS-XE, NX-OS

Routers

CISCO 4300, 4400, 4500,2600, 2800,3800,7200, Juniper M & T Series, ASR 1000

Load Balancers

F5 Networks (BIG-IP), Netscaler (Citrix)

Capacity & performance

Cascade Riverbed (Flow Monitor), WAN Killer

Switches

CISCO 2960,3750,3850, CAT 9300, CAT9400, CAT 9500,4500,6500,6800 Nexus 7k,5k,2k

Programming Languages

C, C++, Perl, Power Shell, Python

Simulation Tools

GNS3, VMware, OPNET IT GURU, OPNET Modeler, Cadence

Firewalls

Juniper Net Screen (500/5200), Juniper SRX (650/3600), Pix (525/535), ASA (5520/5550/5580), McAfee Web Gateway, Checkpoint, Palo Alto firewalls.

AAA Architecture

TACACS+, RADIUS, Cisco ACS

Features & Services

IOS and Features, HSRP, GLBP, VRRP, IPAM IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP Management, Open Stack, IVR’s, HLD and LLD documents, Dell equal logics

Education Details:

Bachelor’s in Engineering in Computer Science from JNTU

Project Experience

Inteli Platforms INC

Client -Blue Cross Blue Shield NC (BCBSNC) Durham, NC Feb 2018 – Present

Role- Sr. Network Engineer

Project description - BCBSNC offers a complete line of Health insurance and has proven throughout its history how stable, reputable, and affordable. Working on projects to migrate BCBSNC legacy Data Center Network from traditional Routing and SW to VMware NSX and Arista Spine and Leaf architecture.

Responsibilities:

Design and migrate existing ISP circuits from outgoing DC site to new DC sites and Configuring WAN links. Provide WAN link connectivity using BGP/ MPLS.

WAN Optimization Hardware Exposure like Riverbed, CasCade, Flow monitor.

Experience with moving data center from one location to another location, from 6500 based data centers to Nexus based data center.

Worked on zia for internet web traffi security. Migrated from Ironports to Zscaler ZIA.

Worked on setting up tunnels from f5 devices to Zscaler cloud.

Involved in complete LAN, WAN development (including IP address planning, designing, installation, configuration, testing, maintenance etc.).

Involved in Switching Technology Administration including creating and managing VLANS’s, Port security, Trunking, STP, Inter VLAN routing, LAN security etc.

Implemented with Cisco Layer 3 switches 3750, 4500, 6500 in multi VLAN environment with the use of inter-VLAN routing, HSRP, ISL trunk, ether channel.

Possess good experience in configuring and troubleshooting WAN technologies like MPLS, T1, T3, DS3 and ISDN.

Implementing the necessary changes such as adding, moving and changing as per the requirements of business lines in a data center environment.

Good knowledge with the technology VPN, WLAN and Multicast.

Well Experienced in configuring protocols HSRP, GLBP, PPP, PAP, CHAP, and SNMP.

Work with Load Balancing team to build connectivity to production and disaster recovery servers through F5 Big IP LTM load balancers.

Worked on configuration of pac file. Worked on setting up pzens locally for source ip anchoring.

Installation and Configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design Document and followed the change process as per IT policy it also includes the configuration of port channel between core switches and server distribution switches.

Migrate existing VPN connections form 100’s of Business partners who connects to BCBSNC.

Migrate existing Storage /Filer /Computer to new Arista Spine and Leaf network based on Arista Dcs-7280sr leaf Sws.

Rack and stack new hardware and build them from scratch.

Provide Mgmt access from Arista TOR 7010T to all Sevres and other Business partner managed Routers/ Switches.

Experience in NSX Manager Installation and Configuration

Responsible for the implementation of corporate LAN/WAN solutions

Hands on experience in creatinga new logical switch & attach the logical switch to the NSX Edge Services Gateway.

Hands on experience in Add VMs to the logical switch and attach the logical Sw to NSX ESX Edge or NSX UDLR

Configured NSX Distributed Logical Router and its Logical Interfaces (LIFs) to enable routing between web-, app- and db- tiers of the three-tier application.

Configuring dynamic routing protocols OSPF/BGB on the NSX Distributed Logical Router and Edge NSX Services Gateway,

Design and implementation of a new Data Center which involved migration from Old Data Center to new Data Center utilizing OTV and VXLAN Technology

Providing daily network support for wide area network consisting of MPLS, VPN and point-to point site.

Designing and installing new branch network systems. Resolving network issues, running test scripts and preparing network documentation.

Actively participated in upgrading fast Ethernet, Layer 3 switched/routed LAN infrastructure from Cisco 3640 to Cisco 2811 ISR routers and switches at access level to 2950, 3550.

Converting CatOS to Cisco IOS Config Conversion on distribution layer switches

Configured various Router interfaces like ATM interface, T3 & Channelized T1 interfaces

Configuring and troubleshooting CISCO catalyst 6509, 7609, 7613 with Supervisor cards, Cisco 3640, Cisco GSR 12416,21418(with PRP and RPR processors)

Working with BGP, OSPF protocols in MPLS Cloud.

Providing daily network support for national wide area network consisting of MPLS, VPN and point-to-point site.

Configuring HSRP between the 3845 router pairs of Gateway redundancy for the client desktops.

Configuring GLBP, VLAN Trunking 802.1Q, STP, Port security on Catalyst 6500 switches.

Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Built site-to-site IPSec VPNs over Frame-relay & MPLS circuits on various models of Cisco routers to facilitate adding new business partners to new and existing infrastructures.

Analyzed customer application and bandwidth requirements, ordered hardware and circuits, and built cost-effective network solutions to accommodate customer requirements and project scope.

Configured routers and coordinated with LD Carriers and LECs to turn-up new WAN circuits. Configuring, Maintaining the Routers and Switches and Implementation of RIP, EIGRP, OSPF, BGP routing protocols and trouble shooting.

Possess good experience in configuring and troubleshooting WAN technologies like MPLS, T1, T3, DS3 and ISDN.

Worked with Load balancing device like F5 Big-IP local traffic manager (LTM) 1600

Responsible for implementing QOS parameter on switching configuration.

Involved in Design and Implementation of complex networks related to extranet clients.

Knowledge and experience of 802.11 a/b/g/n Ethernet standard for wireless Technology.

Worked with other team members in testing of the network architecture.

Contact this candidate