Network Engineer Hands-On

Asha Reddy Mandadi

Sr. Network Engineer

Email : **************@*****.***

Phone no: 971-***-****

Professional Summary:

●Cisco Network Engineer with 7+ years of extensive experience in Network Engineering, performing Network analysis, design, implementation, and capacity planning with a focus on performance tuning and support of large Networks.

●Extensive experience in Cisco Routing, Switching, and Security with strong Cisco hardware/software experiences with Cisco Routers such as 1900, 2900, 3900, Cisco ASA, Cisco Multilayer Switches 4500, 6500, and knowledge of Cisco Nexus 2k/5k/7k.

●Experience with deploying and troubleshooting LAN, WAN, Frame-Relay, and Ether-channel Experience in Configuring & implementing VLAN, VTP, LAN switching, STP, and 802. X authentication in access layer switches.

●Strong understanding of DNS, NFS, SMTP, HTTP/HTTPS, TCP/IP, and UDP upgrades & configurations for Cisco products.

●Experience configuring and troubleshooting routing protocols RIP, OSPF, EIGRP, BGP, and MPLS.

●Good experience monitoring and troubleshooting Cisco's ASA Firewalls and Checkpoint firewalls.

●Hands-on experience on Cisco 2960, 3650, 3750, 3850, Cat 4500X, Cat 6500, Cat 6880, and Cat 9k series switches in an Enterprise environment. Experience Installing, configuring, and troubleshooting Nexus 2k, 3K, 5K, 7K, and 9K in Datacenter.

●Experienced in resolving, creating, and repairing tickets.

●Good understanding of F5 APM, AFM, and ASM modules.

●Managed URL filtering, File blocking, and Data filtering by Palo Alto firewall, and Barracuda NG Firewalls

●Good knowledge and hands-on experience in IP Addressing, Subnetting, and Ping Concepts and Traceroute.

●Hands-on experience configuring Viptela devices and creating device and feature templates on vManage required for SD-WAN implementation.

●Providing troubleshooting solutions to the second level and resolving randomly occurring problems.

●Sound knowledge of Routing and Switching concepts and MPLS design.

●Monitoring of firewalls and Configuring and Managing Firewall Clusters.

●Strong hands-on experience on PIX Firewalls, ASA (5540/5550) Firewalls, and Palo Alto Firewalls.

●Configured Citrix ICA policy for multiple apps on NetScaler and F5 APM devices.

●Working knowledge on configuring access lists. Troubleshooting DNS/DHCP issues within the LAN network.

●Worked on the configuration and installation of Cisco Nexus 3k, 5k, and 7k series switches.

●Expertise in IP subnetting and worked on various designing and allocating various classes of IP addresses to the domain.

●Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NATing, sub-netting including DNS, WINS, LDAP, DHCP, FTP, TFTP, HTTP, HTML, HTTPS, SMTP, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, STP (Spanning tree Protocol), RTSP & Multicasting protocols.

●Participated actively in proof-of-concept projects implementation which included storage and backup solutions from private cloud providers Amazon AWS & Microsoft Azure.

●Upgrading system images on Nexus 5k and 7k multi-layer switches using kick start and FTP server.

●Efficient use of Microsoft VISIO/Office as technical documentation and presentation tools.

●Extensive knowledge of computer hardware and software applications.

●Expertise in installing, configuring, and troubleshooting of Cisco Routers (ASR1K, 7200vxr, 3900, 3800, 3600, 2900, 2800, 1800, 800 series), Juniper MX series routers, Arista 7000 Series Routers.

Technical Skills:

LAN/WAN Technologies

IEEE 802.1q, HSRP, GLBP, Ether-Channel, NAT/PAT, IPSEC VPN, SSL VPN, AAA, BGP, OSPF, MPLS, WAAS

Routing Protocols

OSPF, EIGRP, BGP, RIP for IPv4/IPv6, PBR, Route redistribution, Route filtering, Summarization, Static route

Routers/Switches

Cisco 7200, 3845, 3660, 2921, 2691 series routers/3500, 3800, 4500, 6500, 6880 switches, JUNOS, IOS, IOS-XR, Arista EOS

Switching Technologies

VLANs, Inter VLAN routing and Port Channels, VTP, Spanning Tree Protocols like PVST+, RSTP+, Multi-Layer Switching, Port security

Network Security Technologies

Cisco ASA, Cisco Firepower, Checkpoint, Palo Alto (PA-4000/PA-2000), Fortinet, Sophos XG

Cloud

AWS, Azure

Networking Concepts

TCP/IP, DNS, STP, NAT, PAT, DHCP, VPN, FTP, VLAN

Operating Systems

Windows XP, Vista, Windows 7, 8, 10, Linux, Mac

Monitoring Tools

Wireshark, Splunk

Virtualization

VMware

Education:

Professional Experience:

I2U Sytems Inc, Missouri city, TX Dec 2021 – Till date

Network Engineer Consultant

Responsibilities:

●Managed Cisco Layer 2 and 3 switches (6513, 4510, 3948) and routers within a multi-VLAN environment.

●Managed and deployed Cisco Voice Contact Center solutions (on-prem and cloud), ensuring seamless integration and high availability of customer support services.

●Integrated Microsoft Teams with Cisco Voice Contact Center solutions, enabling seamless communication and collaboration for agents and supervisors.

●Designed, deployed, and managed Amazon Connect contact center environments, optimizing call routing, IVR, and agent workflows for better customer service delivery.

●Managed and optimized customer voice infrastructure, ensuring high availability, scalability, and performance of telecommunication systems.

●Proactively develop and present new technologies or methods to improve efficiency or profitability.

●Installation and configuration of new and operational support of existing corporate networking infrastructure includes LAN, WAN, wireless and security appliances.

●Managed dynamic routing protocols (OSPF and EIGRP), static routing, and resolved DNS, NTP, DHCP, and IP conflict issues.

●Familiarity with access control models and network security, knowledge of coding languages for scripting (e.g., Python)

●Proficient in administering F5 Load Balancers, including tasks such as configuring virtual servers, managing certifications, and more.

●Experience with routers, switches, firewalls, VPN, net flow, and other network security tools.

●Strong analytical and problem-solving skills with an ability to assimilate, analyze, and correlate large amounts of forensic data from various networks, operating systems, application, and security devices, logs, and alerts.

●Participate in incident triage, analysis, response, and remediation for network outages, intrusions, attacks, and other incidents.

●Provide hands-on troubleshooting and support for network-related issues. Leverage SolarWinds to effectively monitor, troubleshoot, and optimize network performance.

●Initiated and worked on the transition of public-facing websites to Cloudflare with the objective of enhancing the security and optimizing the performance of websites.

●Create a change request and incident request via Ivanti Service Desk to address and resolve ticketed network problems and application performance issues.

●Identified and prioritized vulnerabilities in systems and applications and coordinated remediation efforts using different tools such as Nessus.

●Ensure compliance with IT security policy by supporting and administering Sophos XG firewall.

●Experience in deploying Network Based Antivirus, URL Filtering, DLP solution on Next generation Firewalls.

●Report network operational status by gathering and prioritizing information and managing projects.

●Upgrade data network equipment to the latest stable firmware releases.

●Provide remote support to on-site engineers and end users/customers during installation.

●Maximize network performance by monitoring performance, troubleshooting network problems and outages, scheduling upgrades, and collaborating with network architects on network optimization.

●Experienced in the administration and management of Cisco 5500 and 5200 Series Wireless Controllers.

●Configure and deploy Cisco routers and switches to establish connectivity and bring the sites online.

●Proficient in deploying diverse switching infrastructure to facilitate 802.1Q VLAN configurations in support of the Wi-Fi network.

●Create and update network diagrams, configurations, and procedures.

●Conducting daily monitoring and optimization of security tool sets encompassing vulnerability management, identity and access management, and email protection.

●Analyzing cyber threats and vulnerabilities to understand their impact on the organization and devise appropriate countermeasures.

●Worked extensively on Access, Distribution and Core layers in Data center, IDF and MDF environments. Experience with Spine and Leaf Architecture using Cisco ACI and Arista Cloud Vision

●Continuously monitoring networks and systems utilizing FireEye NX for security breaches and suspicious activity.

●Developing and implementing incident response plans to address security incidents promptly and effectively.

Fusion Life sciences, Alpharetta, GA Sep 2020- Nov 2021

Network Engineer Consultant

Responsibilities:

●Complete configuration, installation, and support of equipment to the specifications of the business.

●Manage assigned projects and program components to deliver services per established objectives.

●Experience in Azure public cloud technologies including Managed Database services, Storage, Networking, Docker, AKS, Security, Azure Functions, Logic Apps, and Logging and Monitoring and in AWS skills (Networking: Route53, Direct Connect, etc.) and (Security: WAF, Config, CloudWatch, etc.)

●Experience in migrating policies from Cisco ASA to FTD & Checkpoint & Palo alto firewalls. Auditing security policies with existing configuration and add/whitelist, modify & delete/blacklist networks at on-prem and cloud firewalls.

●Involved in the Network Segmentation project, multiple VLANs were moved behind the firewall.

●Configured VLANs with IP addresses and DHCP-Relays using CLI and published and pushed the policies in Checkpoint FW using Smart Console.

●Cleaning up unnecessary configuration in Cisco routers and switches manually and using scripts in HPNA.

●Worked with HPNA (Network Automation) tool to run a compliance report and clean up the ones that were non-compliance.

●Upgraded Cisco ASR 1000, CAT 9K, CAT 3650, 4500, ISR 4300, and 2960x switches to a new Cisco IOS software code.

●Create a Change request and incident request in Cherwell Client.

●Resolve all ticketing issues relating to network problems and application performance issues associated with them.

●Opening Cisco TAC cases for escalation and raising the priority and working with TAC (Technical Assistance Center) to solve the network related issues.

●Maintain software applications and operating systems through regular maintenance.

●Maintain configuration and support documentation.

●Provide technical support for workstations/Laptops/tablets, printers, mobile devices, and office infrastructure.

●Configuration and Integration of Cisco Identity Services Engine (ISE) 2.0.

●Support client network connectivity through wireless, wired, guest, DMZ and mobile networks with NAC policies.

●Have an eye for detail, ability to multitask, organize priorities, and work in a systematic style following Standard Operating Procedures (SOPs) and guides.

I3 Infotek Inc, Edison, NJ May 2017– Oct 2020

Network Engineer

Responsibilities:

●Assisting in the design, implementation, troubleshooting, and maintenance of the network (Layer 2 & Layer 3) and network security system in the Energy management system environment (EMS).

●Comprehensive knowledge of the methodologies and principles of the Change Control Process.

●Involved in LAN and WAN development including IP address planning, designing, installation, configuration, testing, maintenance, etc.

●Worked on Cisco Layer 3 legacy switches 6509, 4510, 3948, and Cisco ASR 1000 (1002, 1001 WAN platforms) routers in a multi VLAN environment.

●Providing support to multi-site critical EMS networks with MPLS L3VPN connectivity.

●Designed, configured, and trouble-shoot protocols such as MP-BGP, OSPF, LDP, EIGRP, BGP v4, VLANs, Trunking, and VTP for new network infrastructure.

●Administered Local VLANs based on department requirements, and configured switch static VLAN assignment, static 802.1Q trunks for layer 2 forwarding.

●Utilize VLAN Spanning Tree in conjunction with PVST+ for Cisco switches. Configure edge ports for fast transitioning into the forwarding state to fasten workstation startup connectivity delays.

●Modify spanning tree parameters for manual root bridge assignment. Implement ether channels between each switch. Modify the ether-channel load balancing method.

●Security Device – Palo Alto/ASA Firewalls, Fortinet, Source fire IPS/IDS, Cisco Identity Services Engine (ISE), VPN.

●Successful Data Center Migration Planning and Successfully developed Python automation scripts to perform Cisco firewall rule assessments.

●Have hands on exp on AWS services like EC2, Database, VPC, Route 53, Access Group, IAM, Direct Connect.

●Worked on most of the main technology brands such as Cisco, nexus, Palo Alto, Fortinet, F5, bluecoat, silver peak, A10, AWS, Aerohive, Aruba, Meraki.

●Worked with Juniper (Net screen/SRX), Proofpoint, IronPort, Bluecoat (Proxy/Reverse Proxy), Zscaler, Barracuda.

●Configuring all the devices per their traffic type with AAA commands for the device authentication using AD, and the ISE internal users.

●Performed Rack/Stack, mounting, cabling of switches, Cisco UCS B/C servers, and IT hardware in EMS Data Center for network refresh project.

●Working closely with the Network architect to migrate Cisco EOL/EOS switches with new next-gen Nexus 9K (93108, 93180 EX/FX) in the production data center.

●Implementing features like FEX Links, VPC, VRF, VDC, OTV, and Fabric Path on Nexus-based data centers.

●Experienced in deploying Palo alto, F5 load balancer in Azure and control traffic flow back and forth in Hybrid cloud model.

●Configured HSRP between Layer 3 devices to avoid single-point-of-failure issues at access layer switches and servers.

●Working on scripting language Python to create scripts for Data center and ranch networks.

●Regularly update Cisco IOS, NX-OS, and FX-OS on different Cisco Switches, Routers, and Firewalls with zero downtime to avoid vulnerabilities.

●Deployed FTD code on ASA platform, Firepower appliances (4110, 2110) running on FXOS and managed through Firepower Management Center (FMC).

●Migrated 10 production Cisco legacy Firewall modules including FWSM, ASA 5515, 5525,5540 with Next generation Cisco Firepower 2110 and 4110 (ASA, FTD code) for deep packet inspection.

●Implemented standard, extended ACL, object groups, and NATs to control traffic and configured VPN (SSL, IPsec, AnyConnect, and Site-to-Site) for remote connectivity and work-from-home users.

●Designed and deployed DMZ for SMUD’s corporate Web and Application servers.

●Implemented Cisco ISE (Standalone, Distributed Setups) for delivering consistent, highly secure access control across wired and multi-vendor wireless networks and remote VPN connections.

●Upgraded Cisco ISE 2.0 version with ISE 2.2 code.

●Integrated Cisco ISE with LDAP server and configured different features such as wireless onboarding (BYOD), posture assessment settings, wired/wireless NAC, etc.

●Configured profiling, probing, and MAB (MAC Address Bypassing) for different categories of devices using Cisco ISE.

●Installed and configured various Cisco wireless equipment such as 4400 and 5500 series Controllers (WLC), 1850, 28and 00, and 3800 series APs, and various wireless antennas such as omnidirectional and panel-type antennas.

●Worked on AWS and Azure cloud configurations with respect to network connectivity and Security.

●Setting up Palo Alto firewalls as Cloud exchange firewalls between on-prem and cloud environments which include AWS, Azure and GCP.

●Configured and Deployed Cisco Meraki Firewalls, Switches and Access Points.

●Prepared documentation for site surveys such as site and building floor plans and diagrams and the development of heat maps for current and future wireless deployments.

●Managing and monitoring all network devices using Solar Winds and IBM QRadar solution. Performed fault analysis, availability, and performance review of SMUD’s critical infrastructure using SolarWinds SNMP tool.

●Worked on ISE 802.1X, ISE wired/wireless guest and ISE Trustsec implementations.

●Managing IP addresses, and DNS/DHCP server IP reservations through SolarWinds centralized solution.

●Prepared and updated documents and network diagrams using Microsoft Visio for new installation and design updates.

●Install Windows Server 2003, configure IP addresses, and network printers, and configure Client Access for PCs.

●Work with BGP routing protocol for communication with business partners and influence routing decisions based on AS Path Prepend and other attributes.

●Administer and support Cisco-based Routing and switching environments.

●Physical cabling, IP addressing, Wide Area Network configurations (Frame-relay).

●Deployed a Syslog server to allow proactive network monitoring.

●Implemented VLANS between different departments and connected them using trunk by keeping one VLAN under server mode and the rest falling under client mode.

●Configured Client VPN technologies such as Cisco’s VPN client via IPSEC.

●Configured Firewall logging, DMZs, and related security policies and monitoring.

●Switching-related tasks included implementing VLANS and configuring the ISL trunk on the Fast Ethernet channel between switches.

Education:

Master’s in Information Technology and Management- University of Campbellsville, USA-2019

Master’s in Health Services Administration- Mississippi College, USA, 2016

Bachelor’s of Pharmacy- JNTUH- 2011

Contact this candidate