Network Engineer

Location:

United States

Salary:

Posted:

February 05, 2025

Contact this candidate

Resume:

Dheeraj Kumar

Sr. Network Security Engineer

+1-609-***-****

*********.*********@*****.***

●IT professional with almost 10+ Years of extensive hands on experience in Networking Security Engineering with proven expert proficiency in designing, engineering, configuring, and maintaining of large enterprise firewalls.

●Skilled & technically proficient with multiple firewall solutions, network security, and information security practices.

●Strong understanding of TCP/IP, UDP, IPv4/IPv6 addressing, Ethernet, DHCP, DNS, ICMP, ARP, NAT, Bridging, Switching.

●Worked on different firewall & security appliance such as, Checkpoint 4400, 4600, 4800, 21700, Palo-Alto 200, 500, 3020, 3060, 5020, 5060, Panorama M-100, Cisco ASA 5505, 5510, 5512-X, 5500-X, 5585-X.

●Experience with the escalation problems for Routing, Switching and WAN connectivity issues using ticketing system remedy.

●Utilized Fortimanager, Forticlient and FortiAnalyzer to maintain and optimize FortiGate firewalls.

●Experience on security monitoring and intrusion detection with IDS/IPS and juniper SRX service devices.

●Experience of routing protocols like EIGRP, OSPF, and BGP and Meraki switches.

●Worked on Cisco 7200, 3800, 3900, 2800, 2900, 1900 series Routers and Cisco 3900, 4500, 6500, series switches and Cisco catalyst switches 4510R-E switch.

●Worked on Juniper Secure Access (SA) Solution, Juniper MX80, MX104, MX240, MX480 routers, EX2200, EX4200, EX4300 Series switches and SRX Series Firewall devices.

●Hands-on configuration and experience in setting up Cisco routers to perform functions at the Access, Distribution, and Core layers.

●Experience in the setup of Access-Lists, and RIP, EIGRP, and tunnel installations.

●Proficiency in configuration of VLAN setup on various Cisco Routers and Switches.

●Analysis, planning, design and implementation of "Cisco Based Networks" in DMZ network.

●Experienced in troubleshooting both connectivity issues and hardware problems with Cisco based networks and experienced in UNIX/LINUX.

●Participated in the management and configuration of Cisco ASA, Juniper and Palo Alto Firewalls, ACL’s, and Packet Shaping devices and rules.

●Worked on various network projects involving Cisco Routers- ASR 1000/9000, Switches-Nexus 7K/5K/2K and Arista (EOS) platforms. Handled both Cisco IOS and JUNOS.

●Migration from Fortigate firewalls to Checkpoint devices.

●Hands-on experience in using network monitoring tool Solarwinds Orion.

●Great team player and able to work under pressure 24x7 duty rotation and experienced in layer 2 and layer 3 support.

●Experience in Network Management Tools and sniffers like SNMP, HP-Open view, Wireshark and Cisco works to support 24 x 7 Network Operation Center.

●Experience in physical cabling, IP addressing and subnetting with VLSM, configuring and supporting TCP/IP, DNS, installing and configuring proxies.

●Ability to Install, Manage & Troubleshoot Large Networks & Systems Administration on Windows & Linux platforms in Development, Lab & Production Environments.

Certifications:

●CCNA

●CCNP

●PCNSE (Palo Alto Firewall)

Technical Skills:

Router and VoIP Platforms

Cisco Routers series 7300, 4000, 3800, 2000, 1900; Juniper T4000, MX10, MX40, ACX2200, ACX5000; OnSIP, Avaya products, cisco IP phones

Routing Fundamentals and Protocols

Routed and Routing protocols RIP, EIGRP, IS-IS, OSPF, BGP, IPX; MPLS, IPv4 and IPv6 addressing, subnetting, VLSM, Static routing, ICMP, ARP, HSRP, VRRP, Route Filtering, Multicast, 802.11, Policy Based Routing, Redistribution, Port forwarding, Arista.

Switch Platforms

Cisco Catalyst series 2960, series 3560, 3850, 4500, 6500, 7000; Nexus series 2K, Netgear switches,5K, 7K; Juniper EX3300, EX4600, EX4300, EX3400

Switching Fundamentals and Protocols

Ethernet technologies, LAN networks, MAC, VLAN and VTP, STP, PVST+, Multicast,

RSTP, Multi-Layer Switching, 802.1Q, EtherChannel, PAgP, LACP, CDP, HDLC, RARP

Firewall Platforms

Juniper Netscreen 6500, 6000, 5400, Juniper SSG, SRX5600, SRX5800, CheckPoint (NGX R65, 3100, 5100, 5900), Cisco Firewalls (ASA 5505, 5506-X, 5585), Netgear Firewall, Palo Alto Networks (PA series 2K, 3K and 5K), WAF,ACI.

Security Protocols

Standard and Extended ACLs, IPsec, VPN, Port-security, SSH, SSL, IKE, AAA, Prefix-lists, Zone-Based Firewalls, NAT/PAT, HIPAA standards, Ingress & Egress Firewall Design, Content Filtering, Load Balancing, IDS/IPS, Blue Coat URL Filtering, L2F, IDS, TCP Intercept, Router Security, SNMP trap.

Network Management and Monitoring

Wireshark, Infoblox, HP OpenView, Cisco Prime, Security Device Manager (SDM), CiscoWorks; TCP Dump and Sniffer; SolarWinds Netflow Traffic Analyzer, Network Performance Monitor (NPM), Network Configuration Manager (NCM), Sevone, Sitescope.

Load Balancers

F5 (BIG-IP) LTM 2000, 3900, 6400, 6800, AV 510, ASM, citrix NetScaler, APM

WAN technologies

Frame-Relay, ISDN, ATM, MPLS, PPP, DS1, DS3, OC3, T1 /T3 lines, SONET OC3-OC192, SDH, POS, PDH

Cloud Computing and Automation

AWS, Microsoft Azure, Cisco Meraki, C/C++, Python scripting, Shell, Cloud Migration.

Other Networking Protocols and Fundamentals

DHCP and DNS server, Shell, Active Directory Management, NTP, NDP, TCP, UDP, FCP, Network Implementation, Troubleshooting techniques, NHRP, NetBIOS, NFS, FTP, TFTP, HTTP, PAP, PPTP, SIP Trunking, SNMP logging, BitTorrent, SMTP, RADIUS and TACACS+, PBX servers, SDN, SAN

Operating Systems

Windows 10/7/XP, MAC OS, Windows Server, Nexus OS, Cisco IOS-XR,Linux, UNIX

Wireless Technologies

Canopy Wireless Devices, D-Link Point-to-point Wireless, D-Link APs, CISCO 1200 series APs, Aruba wireless and APs, Cisco Meraki, Linksys Wireless/Wi-Fi Routers

Microsoft Office

Visio, Excel, PowerPoint, Word

Change Management

ServiceNow, Jira

Professional Summary:

Ascension Technologies Austin, Texas June 2023 - Present

Role: Network Engineering Specialist (Data Center)

Responsibilities:

●Worked on Avaya/Extreme VSP TOR and Core switches 7K series, 8K series, 4950 GTS, 4900’ s and also on ERS for creating redundancy and upgraded it to the latest code level 8.10.3.

●Worked on Network LCM and LAN Refresh / Transformation project.

●Worked on Data center migration and Mainframe migration.

●Worked on IP remediation project (moved all 172.x to 10.x space).

●Responsible for network design and implementation on GE Carescape.

●Worked on data center hybrid cloud modernization program (DCHC).

●Worked on NLT Network Lifecycle transformation program including converting the unmanaged VXLAN buildout at xxxx facilities to a NDFC managed VXLAN-VPC design.

●Performed Firewall segmentation Palo Alto L3 interface installation where Palo Alto 5410 Firewalls was inserted in-path on the WAN traffic within the xxx market. These firewalls were deployed in routed L3 mode to enable traffic monitoring, control and visibility.

●Was a member of Data center Operations and troubleshooting various incidents and escalations related to the Texas and Wisconsin market.

●Configured TOR switches VSP-7400-48Y switches and Convergint Server for installing NVR security cameras at Parking Garages and other sites in Texas ministry.

●Worked on L2 and L3 refresh and UPS refresh project which involved replacing installing and configuring UPS and switch ports in an entire ministry.

●Worked on Equinix fast connect, express connect and OCI interface cloud fabric exchange handoff project.

●Troubleshooted various network issues related to devices in ICU’S, bedside monitors, and other medical devices.

●Configuration and troubleshooting of Aruba wireless and Cradlepoint routers and access points.

Horizon Blue Cross Blue shield- Newark, NJ November 2020 - June 2023

Role: Sr. Network Engineer

Responsibilities:

●Manage project tasks to migrate from Cisco ASA firewalls and Check Point firewalls to FTDs. Deployment of Cisco ISE on Nexus 5000/9k Cisco switches, and Cisco ASA and FTD firewalls. Executing RADIUS pre-deployment tasks like ISE setup, loading templates into Cisco Prime.

●Worked as a team with other engineers to design, install, implement, and configure ASR9K Network for internet-connectivity and egress redundancy.

●Worked on the Cisco ASR 9010 and Cisco ASR 9912 Routers at CORE level.

●Deploying and decommissioning of VLANs on core ASR9K, Nexus 9K,7K, SK and its downstream devices and also configuring 2k, 3k,7k series Routers.

●Configuring Virtual Chassis for Juniper switches EX4200, Firewalls SRX-210.

●Performed Switch upgrade of all Juniper EX, QFX and MX series switches and SRX firewall at various locations of Magic leap.

●Designed and configured Fortinet FortiGate 90D for RMV branches. Supporting the store network rebuild project initiatives and providing the customers with public Wi-Fi while in stores.

●Worked on latency issues and defects using wireshark and meraki packet capture while using wireless connection with other teams.

●Worked on FortiGate 5000-series security appliance to maintain SSL Inspection, Application control, Firewall and VPN management.

●Configuration and implementation of routing protocols including RIP, TCP/IP, RIP vl/v2, OSPF, EIGRP, ISIS and BGP.

●Worked on Juniper PTX10004, PTX10008, and PTX10016 Packet Transport Routers.

●Experience with deployment of FTD firewalls for different NAT, video conferencing traffic.

●Maintained the SD WAN for the organization and added the overlay’s using the silver peak.

●Secured all traffic flow between overlay private MPLS and performed optimization for demanding security protocols such as SSL/TLS and HTTPS.

●Troubleshooting on customer SD WAN Edge connect device, Firewall Fortigate and Palo Alto.

Caterpillar Inc, Peoria, IL April 2019 - November 2020

Role: Sr. Network Security Engineer

Responsibilities:

●Experience in management of the Checkpoint VSX environment and using VSX with Multi-Domain Security Management (SDM).

●Implemented Cisco ISE for wired and wireless user authentication utilizing certificates and MAB for all known company assets.

●Performed WLAN performance testing in all the supported Wi-Fi radio modes with different BT profiles.

●Worked on customer issues and executed all test cases for WLAN, Bluetooth and Bluetooth Wi-Fi coexistence on Mobile phones and also on Bluetooth Wi-Fi car kits.

●Analyzed network traffic and packet captures using Wireshark, Omnipeek, and Savius to troubleshoot issues and optimize network performance.

●Worked on day to day tickets on various firewalls such as Cisco ASA5585, ASA5545, ASA5580-40, ASA5585-SSP-60, ASA5585-SSP-10, ASA5585-SSP-60 Juniper srx3400, SRX3600, srx1400, srx3400, etc.

●Tested WebUI functionalities and Parental control of WLAN devices.

●Performed Configuration on ASR9K Pairs includes HSRP, Bundle Ethernet.

●Performed OSPF,BGP, HSRP, IPV6, Bundle Ethernet implementation on ASR9K redundant pair.

●SD WAN technical assistance consultant with hands-on enterprise and ISP environment.

●Integrating TACACS+ with Palo Alto Firewall and syslog server for logging and SNMP for monitoring.

●Working on different modules of Checkpoint Next Generation firewall R77.30 such as IPS, Application control and URL filtering, Identity Awareness,DLP and IPsec VPN.

●Setup/Managing ELB, Security group, ACL, VPC, Subnets; make connection between different zones/region and Blocking suspicious ip/subnet on AWS.

●Experience in working with designing, installing and troubleshooting of Palo Alto firewalls and Juniper SRX Firewalls.

●Experience with working on Palo Alto centralized management GUI PANORAMA.

●Migration from Cisco to Palo Alto firewall & Cisco to Checkpoint firewall.

●Experience with working on Palo Alto Next-Generation firewalls security profiles and Cisco ASA VPN.

Charter Communications, Denver, CO May 2018- March 2019

Role: Senior Network Security Engineer

Responsibilities:

●Implemented SNMP on Cisco routes to allow for network management.

●Completed the installation and configuration of T1, T3 & OC3 circuits.

●Troubleshoot TCP/IP problems, troubleshoot connectivity issues.

●Tested functionalities like 802.11 b/g connectivity with different securities with different radius servers.

●Updating the ACLS and maintenance of firewalls. Creating, adding, removing and updating firewall rules, resolving port assignments, ports provisioning for tools server.

●Analysis, planning, design and implementation of "Cisco Based Networks" in DMZ network.

●Advanced DMZ troubleshooting for all communication paths focusing on network firewalls, routing, servers and support environments.

●Worked on various upstream devices such as ASR 9k, Cisco Catalyst 4500-X, Cisco Catalyst 4900.Cisco Catalyst 6500/7600, Catalyst 2960, Catalyst 3850, Nexus 5k, 7k, Cisco CRS.

●Experience working on rDNS project which includes several locations on several devices such as F5 Viprion 4800 w/ 2 4450 Blades, Nexus 56128, Arista 7280SR-48C6, A10 6430S, Arista 7010T-48 which are customer facing.

●Worked on layer 1 testing regarding the cabling of devices and optics installation, and dealing with the ISP(internet service provider ) for the process.

●Configured the devices such as A10, Arista,Cisco 7609s and did code upgrades and the assignment of management ports and switches from the term servers.

●Worked on traffic shifts while reconfiguring the networks,and worked with the CORE and backbone teams in addressing issues.

●Worked on update the SLP partition configurations with IP-Helper parameters to support DHCP services.

●Worked on various tools which alarm in case of outages such as HPNA, Spectrum, MRTG, ETC.

●Worked on adding devices to TACAS, ACS servers and DNS. I have experience in scripting such as. Python, Bash or SHELL and have hands-on experience with Linux OS. Also have an understanding of Ansible.

●Worked clogin and jlogin scripts for * updating the domain name * updating the SNMP contact * updating the SNMP ACL to allow connectivity from CBO Tools, CAPC, IPC, and old Spectrum instances* updating the SNMP contact strings to all reference the same ACL * updating the VTY ACLs to allow connectivity from TWC regional bastions, CBO Tools, CAPC, IPC, and BHN bastions for almost 300 devices which I have automated which is a part of 3000 devices.

DSW, Columbus, OH November 2017 - February 2018

Role: Sr. Network Engineer(Data Center)

Responsibilities:

●Experience working with Cisco switching and routing technology mostly on Cisco2911 and Cisco 3560 and also on Cisco ISE.

●Experience working with F5 load balancing to include both GTM and LTM platforms.

●Experience with Data Center Palo Alto firewalls mostly PA 7050, PA 5020.

●Experience with Meraki cloud based products such as Mx60, Mx64, Mx65, Mx80, MS220-24P-HW, Mx 100 and MR33. MX router / firewall / IPS, MS switching, and MR is wireless.

●Created a Lab environment called Innovation Lab by migrating from Cisco 2911 to T1 conversion and Cisco 3560 to MS220-24p and replacing two access points with MR33 and integrating it with cloud.

●Support Panorama Centralized Management for Palo alto firewall PA-500, PA-200 and PA3060, to central manage the console, configure, maintain, monitor, and update firewall core, as well as back up configuration.

●Expertise knowledge on SIEM tools like QRadar to get real-time analysis of security alerts generated by network hardware and applications.

●Upgrading code on Palo alto firewalls PA 5050/3020 to meet company security policy.

●Configured Cisco 1841 and 1721 routers using ISIS, OSPF and BGP routing protocols, as well as 2950, 2960, 3560, 4000, 6500, 7K and 9K series switches to work with newly installed routers and Level 3 routers.

●Upgraded Cisco 6500-E, 3560, and 2960 switches to IOS software that is on the ISE compatibility matrix.

●Experienced with Cisco Nexus 9300 platform and the N9K-X9564TX and N9K-X9564PX line cards.

●Experienced in working with Cisco 9000 switches for Automated VLAN and Virtual Extensible LAN (VXLAN), route injection, security configuration, analytics collection, and error reporting.

●Troubleshoot network connectivity on Cisco ACE, GSS, CSM and A10 Networks load balancers.

●Designed and implemented migration from Ace to A10.

Daimler Trucks North America, Portland, OR November 2016 – November 2017

Role: Network Security/Firewall Engineer

Responsibilities:

●Experience working with Nexus 7018/7010, 5020, 5548, 2148, 2248 devices.

●Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000 and Cisco ISE 3300, 3350.

●Experience configuring VPC, VDC and ISSU software upgrade in Nexus 7010.

●Implementation of BGP to optimize WAN routing on the core and edge routers.

●Deployed the Cisco 3500 Access Points using Cisco Wireless controllers 5500 and 2500 and WCS System.

●Implementing NMS Cisco Prime Infrastructure & Career management suite from Scratch.

●Worked on frame relay, MPLS services, OSPF, ISIS, BGP and EIGRP routing protocols, NATing, subnetting, also including DNS, WINS, LDAP, DHCP, http, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, STP (Spanning tree Protocol), RTSP & Multicasting protocols.

●Implement 3850 stackwise switches in the access layer and perform IOS-XE upgrades.

●Responsibilities include utilizing network tools such as HPI, Solar Winds and testing to evaluate possible problems, opening incident records if needed, troubleshooting problems and/or escalating them to the proper contacts, and managing all open incident records.

●Experience working with Fortinet/Fortigate firewalls of different ranges from entry level Fortigate 60 series Mid range Fortigate 100, 500, 900 and high level Fortigate 9000 series and mostly dealt with End-to-end security across the full attack cycle.

●Tasked with taking over a failing project to open 3-Tiered DMZs in 4 major Datacenters in AMS and EMEA while observing all required security processes and requirements.

●Staged and configured fundamental A10 configs in preparation for load balancer migration.

●Designed and implemented VIP/Pool/Nodes for various web/app/DB server farm load-balancing on ACE and A10 1030/3230.

●Experience working with the different authentication and authorization models within ISE 1.x and 2.x. Most recently completed Cisco ISE 2.2 to ACS migrations and integration with PxGrid.

●Experience in Data Center Technologies such as VPC, VDC, VSS, STP, FCoE, OTV & FabricPath.

●Experience in Layer 3 routing – Cisco and Juniper Routers: 2900, 3900, ASR 9000, 9001, 9006 series, MX480, MX104 and MX80 Devices.

●In-depth knowledge of Cisco ASA and Juniper SRX Firewall security, spanning-tree, vlans, TCP/IP, RIP, OSPF, QOS, VRRP and VPN technologies.

●Identified opportunities for implementation of network best practices, particularly F5 load balancer/A10 Thunder implementations.

●Configuration and troubleshooting on HSRP, VRRP, GLBP, RSTP, MST related issues coming in network environment.

Tesoro, San Antonio, TX April 2016 – October 2016

Role: Network Engineer

Responsibilities:

●Responsible for the Configuration of EIGRP, OSPF and BGP Involving in the configuration & troubleshooting of routing protocols on Cisco 2900,3900, ASR 9010, ASR 1002 devices across locations and data centers, including data center migration.

●Responsible for Firewall Administration, Rule Analysis, Rule Modification on ASA 5585, SRX550 devices.

●Experience with setting up MPLS Layer 3 VPN cloud in data center and also working with BGP WAN towards customers.

●Work with Blue Coat Proxy for security and warning links of approved dispensations for server internet access, whitelisting, Non- authentication URLs and blacklisting filtering suspicious URLs.

●Maintaining the security of the organization's network perimeter and associated firewalls including CheckPoint IPS, Firewalls(CheckPoint R76 and Juniper SRX), Sourcefire IDS, Checkpoint IPSec VPN, Check Point DDoS Protector and security vulnerability scanning software such as Rapid7 Nexpose and Nessus Security Center.

●Worked on commissioning and decommissioning of the MPLS circuits for various field offices. Designed and configured the commands for QoS and Access Lists for Nexus 9K and 7K.

●Experience in LTM/GTM/ASM V:11 Production Support and Application Migration Implementation Support.

●Vigilance of the network using monitoring tools like Solar Winds and Extensive packet analysis using TCPDUMP and Wireshark packet tracer tools.

●Hands on Experience with Cisco Wireless Controllers 5500’s and 2500’s and coming to access points, worked on 3700’s, 3500’s and 1142 access points.

●Upgrade in Cisco 6500, 3750, 2960s, Nexus 5000, Nexus 9000, Nexus 7000 switch IOS software.

●Design and implementation of 50 new Data Center Aggregation Zones using Cisco Nexus 9K/7K/5K/2K with eVPC and VDCs.

●Created standard access lists to allow SNMP, NTP and logging servers.

●Migrated Cisco Catalyst 4500E Series to Cisco Catalyst 9400 Series.

●Configure VRRP & GLBP and VLAN Trunking 802.1Q & ISL, STP, Port Security on Catalyst 6509 switches.

●Enterprise management for back-end connectivity, access, distribution and core layer switches as well as the backbone routers, VPN and DMZ network.

●Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.

●Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.

●Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.

●Configuration and troubleshooting of Cisco catalyst 6509, 7613 with supervisor cards.

●Created MOPS to get approval from peers to perform configuration add/ remove changes following change management process.

Sonata Software, India June 2013 – May 2014

Role: Jr Network Engineer

Responsibilities:

Monitored the performance of the network devices. Performed Troubleshooting and observed directing conventions such as OSPF, EIGRP & BGP.

Installation and configuration of the Network of Cisco Router and Switches for EIGRP and VLANs etc.

Worked on the Cisco switches 2950, 3560 and the Cisco routers 2500, 2600, 2800

Initially involved in installations, technical support, troubleshooting and maintenance of network equipment.

Good knowledge in Configuring Access Control List (ACL).

Providing On call support after hours for public safety impacting network gear

Configured IPv4 VPNs using IPSec VPNs.

Worked on WAN and LAN infrastructure. Worked on Cabling in IDF/MDF and in Data centers with Copper and Fiber.

Managed system backup and restoration protocols. Escalating issue to higher network teams

●Worked with Blue Coat Proxy for security and warning links of approved dispensations for server internet access, whitelisting, Non- authentication URLs and blacklisting filtering suspicious URLs.