Network Engineer Sd-Wan

PROFESSIONAL SUMMARY:

Cisco Certified Network Engineer with 10+ years of experience in the industry, which includes expertise in the areas of Routing, Switching, SD-WAN, Firewall and Load Balancing.

sExpert level knowledge of troubleshooting, implementing, optimizing and testing of static and dynamic routing protocols such as EIGRP, OSPF, BGP, ability to interpret and resolve complex route table problems.

sImplementation traffic filters on Cisco routes using Standard, extended Access list and expert level knowledge about TCP/IP and OSI models.

sIn-depth expertise in the analysis, implementation, troubleshooting & documentation of LAN/WAN architecture and good experience on services.

sIn-Depth Knowledge and experience of various wireless 802.11 standards, controllers, Access Points, Wi-Fi analytics from various vendors (Cisco Meraki, HPE /Aruba, D-Link and NetGear), SD WAN (MX 65, MX100, MX400).

sCisco ASA Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network.

sExtensive Knowledge on the implementation of Cisco ASA 5500 series and checkpoint R75 firewalls.

sInstalled Palo Alto PA-3060 firewalls to protects Data Centre and provided L3 support for routers/switches/firewalls

sGood hands-on experience in data center migration from legacy to new Cisco ACI fabric infrastructure.

sHelped in creating BDs in Cisco ACI that are mapped to Vlans in ‘Network’ centric migrations.

sImplemented and configured Prisma Access & Panorama

sTroubleshooting SD-WAN queries through Router based SD-WAN technologies.

sHands on experience working with Cisco Nexus 7K, 5K & 2K Switches.

sComprehensive knowledge of wireless networking systems and protocols.

sWorked on NXOS, IOS, and IOS-XR BXB to N7K-NXOS (MPLS) system test.

sExperience in F5, Cisco ACE 4710 Load balancers, Aruba wireless access points and controllers.

sExperience deploying BIG-IP F5LTM Load Balancers for load balancing and traffic management of business application.

sIn depth knowledge and technical proficiency in TCP/IP protocol stack and other network protocols such as: DNS, DHCP, Direct Access 2012/2016, VPN, and IPV4/IPV6.

sDesign expertise for the SD-WAN(Versa), SD LAN and WAN optimization technologies for efficient delivery of the application data across LAN and WAN.

sImplementing, monitoring, testing and management of different telecom services – voice, data and video.

sKnowledge in Testing and Quality assurance, End to end testing of network connections and services.

sStrong hands on experience in installing, troubleshooting, configuring of Cisco 7200, 3800, 3600, 3400, 2800, 2600, 2500, 1900, 1941, 1921 and 1800 series Routers, Cisco Catalyst 6800, 6807, 6500, 4500, 3750, 2950, 2960 and 3500XL series switches.

sIn-depth knowledge and hands-on experience on IP Addressing, Sub netting, VLSM, DNS, DHCP and ARP, reverse & proxy ARP, Ping Concepts.

sKnowledge of implementing and troubleshooting complex L2 technologies such as VLAN Trunks, VTP Ether channel, STP, RSTP and MST.

TECHNICAL SKILLS

Networking Technologies

LAN/WAN Architecture, TCP/IP, Frame Relay, VPN, VLAN, VTP, NAT, PAT, STP, RSTP, PVST, MSTP

Networking Hardware

Cisco Switches, Cisco Routers, ASA/Pix/Palo Alto/Fortinet/Juniper firewalls.

Routing Protocols

OSPF, ISIS, EIGRP, RIP, MPLS, IS-IS, BGP, Multicasting

Security Technologies

PAP, CHAP, Cisco PIX, Blue Coat, Palo Alto, ASA, Fortinet, Checkpoint

Network Monitoring

SolarWinds, Wireshark, HR ping, What’s up gold, Infoblox

Operating Systems

Windows 7, Vista, XP, 2000, LINUX, Cisco IOS, IOS XR, IOS-XE, NX-OS

Routers

CISCO 4300, 4400, 4500,2600, 2800,3800,7200, Juniper M & T Series, ASR 1000

Load Balancers

F5 Networks (BIG-IP), NetScaler (Citrix)

Capacity & performance

Cascade Riverbed (Flow Monitor), WAN Killer

Switches

CISCO 2960,3750,3850, CAT 9300, CAT9400, CAT 9500,4500,6500,6800 Nexus 7k,5k,2k

Programming Languages

C, C++, Perl, Python

Simulation Tools

GNS3, VMware, OPNET IT GURU, OPNET Modeler, Cadence

Firewalls

Juniper Net Screen (500/5200), Juniper SRX (650/3600), Pix (525/535), ASA (5520/5550/5580), McAfee Web Gateway, Checkpoint, Palo Alto firewalls.

AAA Architecture

TACACS+, RADIUS, Cisco ACS

sSD-WAN

Cisco (Viptela and Meraki),VMware (Velocloud),Fortinet (Secure SD-WAN),Palo Alto Networks (Prisma SD-WAN, formerly CloudGenix),Silver Peak(now part of Aruba, a Hewlett Packard Enterprise company),Citrix (Citrix SD-WAN),Versa Networks, Juniper Networks (MistAI and 128 Technology),Barracuda(CloudGen WAN),Aryaka Networks, Riverbed(SteelConnect),Cato Networks

Features & Services

IOS and Features, HSRP, GLBP, VRRP, IPAM IRDP, NAT, SNMP, SYSLOG, NTP, DHCP, CDP, DNS, TFTP and FTP Management, Open Stack, IVR’s, HLD and LLD documents, Dell equal logics

PROFESSIONAL EXPERIENCE

Ceva Logistics, San Antonio, TX Sep 2023 – Till Date.

Senior Network Engineer

sDesigned and supported the consolidation of data centres utilizing Nexus 2K, 5K and 7K infrastructure.

sInvolved in configuring and implementing of composite Network models consists of Cisco 5000,5500 series routers and Cisco 3200, 3500, 3550, 5000, 6500 Series switches.

sMonitored L2/ L3 and intra VLAN routing with N7K new feature with Virtualized Device Context VDC and VPC

sDeployment, configuration, and management of 802.1x solutions to include Cisco Identity Services Engine (ISE), ACS (Radius and TACACS+), and Cisco Prime Infrastructure.

sProviding L2/L3 technical support for ACI, APIC technologies.

sTroubleshoot OSPF, Cisco ACI, OTV, Cisco ISR 4431, L2/L3 DCI issues, L2 issues, MPLS

sConfigured Nexus 7010, 5020 and 2148, 2248 Tor(Top-Of-Rack) switches to connect servers downstream.

sConfigured Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for Nexus 5000.

sConfigured VPC, VDC, and VPC peer links with Cisco 7010 devices as leaf and Nexus 5020 devices as spine.

sConfigured Fabric path between leaf and spine switches to Connect non-Fabric path supporting devices with VPC+.

sConfiguring & managing around 500+ Network &Security Devices that includes Juniper SRX Firewalls, F5 BigIP Load balancers and Nexus Devices. Experience working with JUNOS OSon Juniper Routers and Switches

sConfigured Virtual Networks, Network Security Groups, User defined routes and Established Peering between the Virtual Networks.

sConfigured WAN connections with Meraki and FortiGate SD-WAN

sExperience with zscaler Internet security and Zscaler private access

sUpgraded Nexus 7010 devices with NX-OS 6.1 with parallel upgrades to the FEX devices and troubleshot any failure conditions.

sWorked on F5 and A10's GTMs to troubleshoot DNS issues and actively participated in A10 to F5 GTM migrations.

sMigrated legacy F5 LTM and GTM appliance to newer version appliances.

sParticipated in troubleshooting SDN/SD-WAN deployments

sAssisted in migration from DMVPN to Cisco Meraki SD-WAN.

sMonitoring Network infrastructure using SNMP tools HP NNM, Solar-winds and OpNet.

HSBC - SCARSDALE, NY Nov 2022 – Aug 2023

Network Engineer

sWorked on resolving the latency issue regarding the Microsoft O365 services. The O365 data which was exiting our network was not able to direct the traffic to the west coast DNS of Microsoft instead it was hitting the east coast and causing huge latency to the overall experience of using applications like Skype, Microsoft Teams, Outlook.

sInvolved in design and implementation of Data Center Segmentation and worked on implementation strategies for the expansion of the MPLS VPN networks

sResponsible in troubleshooting on Cisco ISE added new devices on network based on policies on ISE.

sImplemented Cisco ISE 2.4 for Wireless 802.1x Authentication and Authorization with Flex Connect

sSuccessfully installed Palo Alto PA-5000, PA-3000 firewalls to protect Data Center and provided L3 support for routers/switches/firewalls and configured and maintained IPSEC and SSL VPN on Palo Alto firewalls

sAs a part of the new wireless deployment over all the corporate sites and PBOs, this project involved installing 9800s, 8540s Wireless Controller across all the locations to introduce the faster and more user-oriented internet. This included migration, working very closely with Cisco for installing and configuring the controllers. Further testing every configurational change and based upon feedback, pushing the configuration to more users and make it all over corporate.

sCreate new BTS’s, eNB’s on routers, RNC, MME and 3G core networks and troubleshooting sites with Fiber, Ethernet, and microwave backhaul network connectivity’s.

sProviding a single portal for all operations tools improving the efficiency of the NOC

sWorked closely with Cisco in installing Cisco Any Connect 4.7 Supplicant pushed to pilot users, for overcoming the challenges we got the Cisco cleanup tool and tested with our networking team.

sWorked on providing Cisco Any Connect to the organization, as a part of this worked with Cisco on the XML file, whitelisted devices on Cisco ISE for providing authentication. For SSO access, switching from Gemalto as MFA to integrate Ping ID Federate and later creating two profiles for this MFA on Cisco Any Connect.

sWorking with 3GPP standards, protocols, procedures, implementations, and acceptance call flow testing.

sWorking with F5 APM sessions and manipulating session using iRule and configuring and maintaining Webtops and Portal Access

CMS IT Services - India Feb 2020- May 2022

Network Support Engineer

sDaily analyzed network traffic looking for trends and or malicious activities, created vulnerability report with action plans.

sImplemented IPsec Site-to-Site VPNs over the internet utilizing 3DES, AES/AES-256 with Cisco PIX and Cisco ASA Firewalls.

sDeployment and administration of Cisco routers and switches, upgrade and migration routers 4200,3600, 2800 and, Catalyst Switches 3750, Cisco NEXUS 5K/2K

sMigrating Cisco ASA firewall AnyConnect with secured VPN Users Group, including deployment of Two-Factor Authentication (LDAP+Soft Token) for VPN Clients

sConfigured Security policies including NAT, PAT, VPN, route-maps and Access Control Lists.

sResponsible for installation and configuration of Cisco Catalyst switches 6500, 3750 & 3550 series and configuring OSPF, EIGRP, BGP with ACLs planned in Network Design Document following the ITSM change process.

sResponsible for L2 & L3 support of customer’s Network and Security Infrastructure devices.

sConfigured port channel connectivity between core switches and server distribution switches connecting to storage devices.

sImplemented BGP features such as AS-override, Local preference, eBGP multipath load balancing.

sWorking knowledge and hands on experience on Cisco GSR, Catalyst 6500, 7600/7200 series enterprise routers/switches while configuring RP.

Wipro InfoTech - India Jan 2015 – Feb 2020

Jr. Network Engineer

sWorked with Cisco Catalyst 3500, 4500 switches and Cisco 2800, 3600, 3800 series and 2500, 3550 series Routers.

sPerformed tasks that include Configuring and constant administration of Static routing, Default Routing & dynamic Routing Protocols.

sConfigured new WAN links and monitored network performance

sWorked on troubleshooting customer related issues related to router configuration, L1/L2 issues.

sManage, Install, configure and troubleshoot DHCP, DNS, TCP/IP, RAS, VPN & Linux servers.

sHands-on Experience in VLAN and Inter-VLAN routing, redistribution, access-lists and dynamic NAT.

sWorked to set up the TFTP server for backing up the IOS images and configuration files of Cisco Routers and Switches and troubleshooting the file servers.

sPerformed network evaluations, troubleshooting a variety of network problems, and implementing various software and hardware upgrades.

sExtensive experience of deploying and troubleshooting L2, TCP/IP, Multilayer Switches.

sInvolved in Network Designing, Routing, DNS, IP Subnetting, TCP/IP protocol.

sTroubleshoot Cisco hardware: Inspected devices, Read device LEDs, loose connections, cards, OS upgrade, switch configuration usage of Visual Switch Manager, Switch port configuration, Port monitoring.

sIdentified and resolved VLAN, VTP, STP, RSTP and IP subnet issues using Ping, Trace route.

sInstalled and configured LAN/WAN as per organizational / client requirements, governed by communication protocols

sPerformed configuration of LAN\WAN technologies such as Ethernet, Fast Ethernet, & Gigabit Ethernet.

Contact this candidate