Network Engineer - Tech Lead Resume Example

Role - Worked in Network Operations and Deployment as a Tech lead for multiple clients of IPSoft on switching, Routing, Firewalls, Load Balancers, Wireless LAN, Riverbed, remote site setup and connectivity issues, Proxies, DNS, DHCP and Monitoring. Worked on Global networks on various migration projects, Software upgrades, Installations, Lifecycle projects, Data Centre Builds.

• Design and manage network infrastructures for Fortune 500 companies across the globe in Network Engineering and Network security Engineering.
• Worked on Cisco, Juniper, Arista, Palo Alto, Check Point, FortiGate, F5, A10, Citrix, Aruba, Bluecoat, Zscaler, Riverbed, Infoblox, SolarWinds, Splunk vendor equipment in various verticals of Network and Security domains.
• Worked on cisco catalyst 3750, 3850, 9K series, 4500-X, 6500, Nexus 2K, 5K, 7K, 9K, ASR 1K and 9K switches and Routers in Campus and Data center Topologies. Worked in LAN and WAN networks and ISP connectivity.
• Worked on Layer protocols setup and troubleshooting which includes STP, RSTP, MST, HSRP, VRRP, GLBP, LACP, PAGP, VPC, VSS, VLAN, 802.1Q, VTP.
• Worked on Layer 3 Protocols configuration and troubleshooting which includes OSPF, BGP, EIGRP, Static Routing, MPLS, Route Redistribution, Prefix Lists, IS-IS, VXLAN overlay, GRE Tunneling, MP-BGP.
• Worked on traditional 3 Tier Architecture in Access, Distribution and Core Layers and also spine leaf Architecture with Nexus 9k and Arista 7000 series. Good understanding of overlay and underlay networks.
• Worked on Software Defined networks which includes cisco ACI. Experience with Overlay tunneling using VXLAN. Worked on VTEPS, VNI, Bridge Domains, MP-BGP, Tenants, Application profile, VRF's for multi-tenant network and EPG.
• Worked on Firewalls in perimeter and server Farm. Very well versed with traffic flows in Inside, DMZ, Outside, extranet with respect to Zones. Worked on Security policies that include ACL, NAT, URL filtering, APP ID, Threat ID, User ID.
• Worked on Palo Alto 5000, 500, 300 Series Firewalls, Panorama M100, Check point series, Fortinet series, Cisco ASA 5500 series and Firepower series for next gen firewall features.
• Worked on Centralized managers in Firewalls that include Panorama, Central manger in Juniper, Forti Manager. Experience with Config templates, Software upgrade procedures, logging, management of firewall policies using centralized management.
• Troubleshooting experience with IPSEC tunnels and SSL VPN for remote access. Worked on Phase 1 and Phase 2 IPSEC tunnel setup, worked on Juniper pulse and Cisco AnyConnect SSL VPN.
• Worked on F5 LTM, GTM modules in Load balancing various internal and external applications. Migrations from ACE to F5 and NetScaler's. Worked on Virtual servers, Pools, Health Monitors, SNAT, Persistence, SSL, Profiles, irules, iQuery, wideIP, Listeners, Zones and various Load balancing algorithms.
• Experience with integrating LTM and GTM modules, Delegations from DNS server to GTM. Worked on windows and Infoblox DNS and DHCP to configure various DNS Zones, Sub domains, delegations, forwarding etc. Worked on configuration of DHCP scopes and options.
• Worked on Cisco WLAN controllers for configuration of AP profiles, Access points, RF parameters, 802.1x integration with ISE, SSID, BYOD policies, wireless VLANs on Distribution switches.
• Worked on deploying site to site VPN tunnels, Security policies, NAT policies, URL filtering, VDOM, Forti Manager, User ID based Security policies, SSL forward proxy, SSL decryption.
• Worked on SD-WAN for remote site connectivity over MPLS. Worked on Viptela Solution in assisting architecture team in deploying vManage, vEdge, vBond and vSmart components.
• Worked on Bluecoat and Zscaler Internet Access Proxies. Manage polices, User group-based whitelist and blacklist policies, integration with Azure AD for SAML auth and assertions, PAC file changes, traffic logs, Splunk, explicit proxy setup.
• Experience with Documentation, Network monitoring using SolarWinds, log collection and analyzing using Splunk, DNS, DHCP, Diagramming using Visio and Netbrain, Inventory reports, Change management, Ticketing tools like Service now and remedy.
• Worked on Automation using Ansible Scripting and Python to automate inventory reports, back of configs, config templates, integration of tools.

Role – Worked on McKesson global network in Engineering team. Worked on Data centre refresh project with cisco and juniper devices, ASA and Checkpoint/Fortigate firewalls. Worked on Load Balancer migration project from NetScaler and ACE to F5.

• Configuring EIGRP, OSPF and BGP on cisco routers. L3 switches as well as Nexus environment.
• Implemented the Policy Rules, DMZ and Multiple VDOM's for Multiple Clients of the State on the FortiGate Firewall.
• Extensive use of Cisco Routers and Switches by using LAN & WAN routing protocol EIGRP, OSPF and BGP to manage network infrastructure worked with any complex routing and switching issues.
• Experience working with Nexus 7010, 5020, 2148, 2248 devices.
• Setup separate ESX 3.0 environment to facilitate the migration from NSX 2.5.1
• Configured and maintained F5 load balancing Big-IP devices for Local Traffic Management (LTM) and WAN Optimization (WOM)
• Blacklisting and White listing of web URL on Panorama.
• Knowledge on different kinds of cables used to connect different devices in data centers and within the industry.
• Experience in VSS, VRF, VPC, and VDC technologies. Experience in Gateway redundant protocols HSRP, VRRP, and GLBP. Experience with Access, Distribution & Core Layer Architecture.
• Work on the Ironport for the log files, routing protocols.
• Experience with the Infoblox Installation.
• Extensively worked on TCP/IP protocols and transport protocols like TCP and UDP.
• Implemented Site-to-Site VPNs over the internet utilizing security standards such as 3DES, AES/AES-256 with ASA 5580 Firewalls.
• Knowledge on Juniper SRX220, SRX240 and SRX550, Fortinet 200D series firewalls.
• Troubleshot documented and installed a variety of equipment Arista switching fabric, Fortinet firewalls.
• Worked on implementation of the basic F5 LTM (Local Traffic Manager)
• Excellent customer management/resolution, Organizational, analytic, problem solving, debugging skills and capable of quickly learning, effectively analyses results and implement and delivering solutions as an individual and as part of a team.
• Creating a priority list of what type of attacks to focus on vs. what can be accomplished and identifying timeline on how to accomplish all the functionality ASM can provide.
• Install, configure and maintain Fortinet Version 4.0. to 6.0.
• Managed multiple Fortinet Firewalls using Forti-manager.
• Researched, designed, and replaced Checkpoint firewall architecture with new next generation Palo Alto PA3000 and PA5000 appliances serving as firewalls and URL and application inspection.
• Managed companies Wireless Infrastructure includes to create new SSID, Flex/HREP in WLC.
• Managed Palo Alto/ASA Firewall for security policies and rule base of security control points, device mapping using network address translation, objects management, other administrative tasks.
• Worked with LAN protocols (VLAN, VTP, STP, RSTP, MST) & Port Channel Protocols (LACP, PAGP).
• Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a Flexible Access Solution for a datacenter access architecture Expertise in installing, configuring and troubleshooting Juniper EX Switches EX2200, EX2500, EX3200, EX4200, EX4500 series
• Worked with LAN protocols (VLAN, VTP, STP, RSTP, MST) & Port Channel Protocols (LACP, PAGP).
• Experience working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a Flexible Access Solution for a datacenter access architecture Expertise in installing, configuring and troubleshooting Juniper EX Switches EX2200, EX2500, EX3200, EX4200, EX4500 series
• Proficient with F5 LTM and Cisco CSM load balancer in-between the servers inside the server farm and DMZ.
• Assisted with the transition from the current Cisco ASA FW platform to the Cisco Firepower FPR 4150 NGFW.
• ASA/PA firewall Log Maintenance and Policy Maintenance. Troubleshooting complex Checkpoint issues, Site-to-Site VPN related.
• Implemented the Inter VDOM Routing through the Fortigate Firewalls and the Router.
• Responsible for enabling BGP peering relationships and debugging BGP routing problems.
• Experience with LTM F5 component to provide High Availability with providing services across data centers.
• Experience with Wireless Aruba and Cisco Controllers based Enterprise networks.
• Experience with Aruba/Ruckus Wireless Controllers, Access Points and IAP
• Responsible for layer 2 securities which was implemented using a dedicated VLAN ID for all trunk ports, setting the user ports to non-trucking, deployed port security when possible for user ports
• Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN.
• Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls, CISCO PIX 506, and PIX 515.
• Experience with migrating the Partner IPSEC VPN tunnels from one data center to another.
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500 with ACL, NAT, Object Groups, Failover, Multi-Contexts.
• Implemented VMWare management software Virtual Center 2.0 to manage the new environment.
• Connected NSX 3.0 Servers in the three different lab environments to EMC External storage space. Publix also used Compaq's MSA1000 Modular SAN Array for the Supply Chain test environments.

• Worked as a system and network Admin in SMU to configure various access, Distribution and Core Switches in Campus IDF/MDF, Troubleshooting and setting up Wireless LAN.
• Worked on Cisco Wireless LAN infrastructure in multiple campuses, configured SSID, Authentication, RF parameters, Wireless Survey, Heat maps, BYOD policies, GUEST WIFI access.
• Worked on Cisco 3750 and 6500 series switches. Configured Gateway redundancy, OSPF routing.
• Worked on end user computing on pushing GPO policies. System level software upgrades. Provisioning access to various AD groups to system level requirements.
• Worked on Layer 1 copper and Fiber cabling. Worked on Single Mode, Multi-Mode, Cat 5, Cat 6 cabling in campus.

• Learned various aspects of the telecom industry and gained valuable experience.
• Assisted the NETSUPP-TIE2 team and worked on the architecture and functioning of the Cisco 2600 series routers.
• Configured VLANS on different impetus switches performed investigating on TCP/IP system issues, Administered Frame-Relay and systems.
• Got familiarized and collaborated with dynamic call routing and its features, multi-provider environment, number portability and Internet routing evolution.
• Worked on Cabling in IDF/MDF and in Data centers with Copper and Fiber.
• Involved in customer escalations and troubleshooting issues related to connectivity, STP, VLAN, Trunking, VTP, Layer 2/3 switching, Ether channels, Inter-VLAN routing, log messages, high CPU utilization and parameters that can degrade performance of network.
• Familiar with Networking tools like CISCO IOS, Wireshark, Ping, Trace route, Speed Test.
• Experience in troubleshooting of Layer 2 features (VLAN, STP, RSTP, VRRP, and Ether Channel).
• Support Network Technicians as they require training & support for problem resolution including performing diagnostics & configuring network devices.
• Having strong Knowledge with Cisco 1921/k9, 3750, 1800 series routers & 2950, 2960 series switches, Nexus 2k, 5k, 7k.
• Configuring STP for switching loop prevention and VLANs for data and voice along with configuring port security for users connecting to the switches.
• Configured VLANS on multiple catalyst switches performed troubleshooting on TCP/IP network problems, Administered Frame-Relay and networks.
• Implemented VTP and Trunking protocols (802.1q and ISL) on 3560, 3750 and 6500 series Cisco Catalyst switches.
• Managed system backup and restoration protocols. Escalating issue to higher network teams.