Senior Network & Security Engineer
Expedi
Total years of experience :11 years, 10 Months
Approximations 6 years of experience of NETWORKING in IT industry this includes Integrating, Troubleshooting and Maintaining Various Customers Networks
Implementation and administration of Local & Wide Area Networks (VLANs, VPNs) and Network Products - Routers, Switches, Firewalls, Load Balancers, Voice Gateways, Unified Communication Devices.
•Working on Cisco ASA 5580 Appliances and Juniper SRX firewalls & Palo Alto which include implementation of site to site VPN, Access rules, NAT.
•Implementing site to site VPN on Cisco, Checkpoint, Palo Alto.
•Architect and engineer the F5 Local Traffic Manager, GTM, Access Policy Manager Application Security Manger modules.
•Involved in the implementation of Cisco ACI Fabric deployment and good understanding of ACI tenants, EPGs, bridge domains.
•Implementation and troubleshooting of Route based VPN’s and policy based VPN’s from our VPN gateway in DC to various Partners.
•Configured DNAT for application servers hosted in DC environment as per requirement of Application teams. Also, responsible for implementation for SNAT and access rules.
•Working knowledge of AWS services, such as Elastic Compute Cloud, Elastic Block Storage, and Simple Storage Service desired
•Implementation of network infrastructure of the corporate sites of Expedia that includes routing/switching etc. This involved configuration of BGP as an exterior routing protocol and OSPF as an IGP.
•Implemented of LAN infrastructure of various branch locations that involved configuration of STP, VTP, HSRP, VSS
•Worked on POC of Tufin for Firewall CNRQ automation.
•Configured Firewall(Juniper SRX, Fortinet) on HA mode.
•Working knowledge in S3 (Cloud Storage), EC2, Load Balancer, Docker on ECS
•Configuration & Troubleshooting of Routing Protocols - RIP, EIGRP, OSPF, BGP, MPBGP
•Working on bluecoat proxies for the filtering URL which are supposed to be blacklisted as per the company policy and troubleshooting in case end not able to access any URL.
•Implementing site to site and DMVPN tunnels on Cisco ASR
•Upgrade of Nexus Devices, Firewalls (Cisco, ASA, Checkpoint, Palo-Alto, Junipe SRX, Forinet) and network switches (3750, 3850, 4500, 6500)
•Implementing VIP, Monitors on F5 load balancers as per customer requirements.
•Implementing Remote SSL VPN solutions on Juniper SSL VPN solutions.
•Implemented Multicast and troubleshoot issue’s related to Multicasting.
•Managing vendor co-ordination for handling false positives and unresolved virus issues
•Implementing ether channels, VPC and Fabric-paths on the Cisco Nexus switches.
•Also involved in the up-gradation of the IOS images on the router & switches and firewalls
U.S)
•Involved into data center support and implementation
•Working on Migration of Citrix Netscaler MPX 5500 to F5 LTM 8900 series viprion boxes .
•Implemented F5 Big IP 8900 Viprion LTM box for load balancing application and fine tuning it with use of rules, profiles, SSL offloading etc ..
•Implementing ether channels, VPC and Fabric-paths on the Cisco Nexus switches.
•Implementing VIP, Monitors on F5 & Citrix NetScaler Load balancers as per customer requirements.
•Upgrade of Nexus Devices, Firewalls (CiscoASA, Checkpoint, Palo-Alto, Juniper SRX, Forinet) and network switches (3750, 3850, 4500, 6500)
•Majorly working on BGP and OSPF issues occurring in the network.
•Implemented Multicast and troubleshoot issue’s related to Multicasting
•Implementing site to site VPN on Checkpoint, Palo Alto f/ws.
•Implementing VIP, irules on the BIG IP F5 load balancers as per the application requirement.
•Implementing ether channels, VPC and Fabric-paths on the Cisco Nexus switches.
•Whitelisting & blacklisting of URL’s as per customer requirements on Bluecoat Proxy
•Configuration of authentication for servers for accessing the application URL’s via Proxy
•Also involved in the up gradation of the IOS images on the router and switches.
•Handling wireless issues with the help of NCS and WLCs.
•Creating Visio diagrams for different LAN and WAN networks.
•Implementing Firewall Change Request (FCR) to open access for specific ports and IP addresses.
•Implementing site to site and DMVPN tunnels on Cisco ASR
Description:
•Implementing the PE to CE configuration like creating VRF’s and doing routing between the ISP and customer sites
•Creating detailed project plans for all major network projects to ensure management approval.
•Ensuring proper co-ordination with Incident Management Team & other Back-end Teams for handling ticketing issues.
•Managing Cisco routers and switches and do configuration changes as per requirement.
•Need to take back up of Network devices on daily and weekly basis.
•Attending scheduled Con-calls for discussing about the changes and configuration that is required to be done in the network.
•Providing Bandwidth utilization reports to customers.
•Providing monthly reports to customer for Link (inbound/outbound), CPU, memory utilization and link CRC captured through SNMP tool.
•Monitoring customer traffic using various SNMP enabled software’s like PRTG (shows inbound/outbound utilization on each interface) and Host Monitor (that gives the current status of interface).
•Implementing ether channels and port security on the Cisco switches
Project: Axalta Coating Services (U.S)
•Worked on higher end switches 6500, 4500, 3750, 3560.
•Troubleshooting WAN and LAN related issues.
•Applying configuration templates on network devices and troubleshooting the same if any problem arise.
•Configuration & Troubleshooting of Routing Protocols - RIP, EIGRP, OSPF, BGP
•Configured route filtering with help of distribution list, route-maps and offset-list.
•Need to take back up of Network devices on daily and weekly basis.
•Configured HSRP to support non-disruptive failure of IP traffic.
, a hub for remote infrastructure management, with Knowledge in configuration and troubleshooting of CISCO routers and switches
(
(
(