Category: Network Security Engineer

jessica claire 100 montgomery st 10th floor 555 4321000 resumesampleexamplecom summary 7 years experience senior networksecurity engineer worked multiple clients global network presence worked various teams includes operations deployment engineeringarchitecture multivendor equipment experience verticals include lan wan data centre campus switching routing remote site connectivity firewalls proxies ssl vpn application delivery controllers wireless networks automation cloud connectivity cloud security masters degree focused telecommunications network engineering passionate learn new technologies implement ideas enhance various data connectivity security schema networks actively looking challenging role networknetwork security engineering routers cisco based mx ex2950296036003750 450065001700 18002600880 switches cisco 3850 3550 3750 4500 4900 6500 cisco nexus 2k 5k 7k series firewalls cisco asa brocade vyatta juniper srx100 palo alto load balancers cisco ace f5 citrix netscaler cloud technologies meraki azure virtualization vmware routing ospf eigrp bgp rip pbr route filtering redistribution summarization static routing skills lanwan technologies ethernet frame relay mpls hdlc ppp t1 t3 oc standard isdn protocols ip tcp udp icmp nat pat dhcp snmp ipsec ssl http ssh fhrp vrrp hsrp glbp activestandby vpn technologies ipsec ssl dmvpn open vpn mpls vpn split tunnel tunnel tools powershell wireshark gns3 infoblox ipam ipplan netbox device expert solar winds osm netflow visio kiwi programming languages c matlab python operating system windows linux switching vlans dot1q vtp stp rstp vlan maps hsrp glbp cef dcef port security career highlights experience legacy highend switching technologies campus data center environments worked cisco juniper arubahp gear campus environments worked cisco arista dell cumulus juniper gear data center environment experience interior exterior routing protocols includes rip ospf eigrp isis bgp worked cisco juniper arista routers experience network security includes perimeter security internet extranet dmz internal server farms webtraffic security proxies web application firewalls worked migrated multivendor equipment next generation firewall technologies worked asa firepower checkpoint palo alto firewalls experience mwg bluecoat zscaler proxies experience highlevel understanding application delivery controllers local global load balancing techniques redundancy solutions high availability options mission critical internal vendor public facing applications experience f5 ltm gtm apm netscalers cisco ace a10 worked campus wireless environments 1000 access points wireless lan controllers anchor controllers authentication policies byod policies integration radius experience aruba cisco wlan experience tacacsradius severs migration acs aruba clearpass ise experience windows infoblox dns dhcp servers ipam internal external grids experience wan connectivity mpls circuits leased lines metro ethernet site site ipsec tunnels isp circuits customer edge configurations experience sdwan solutions include viptella versa experience setting troubleshooting ssl vpn solution using cisco anyconnect juniper pulse secure zero trust network access knowledge operational experience sdn cisco aci vxlan vteps vni bridge domain arista cloud vision evpn mp bgp spine leaf architecture experience zscaler cloud proxy architecture zia traffic forwarding using gre tunnels zcloud azure ad authentication access policies zapp experience network monitoring tools snmp log collectors splunk ticketing tools thorough understanding workflows corporate environments include financial healthcare retail clients enthusiastic explore implement innovative ideas network automation configuration documentation troubleshooting workflow integration api integration multiple tools using python ansible basic exposure python ansible support jenkins integrate ansible playbooks performed poc building sddc software defined dc using vmware nsxv nsxt worked building gcp vpcs cloud routers vpns security experience networkcloud engineer consultant 082020 current colsa corporation worked aws cloud networking security experience cloud exchange providers like equinix worked direct connect ipsec tunnels configuration bgp peer onpremises internet experience setting direct connect worked cross connects virtual interfaces routing policies bgp communities gateways lags accessing remote aws site using ipsec tunnels etc worked installation f5 lb palo alto firewalls shared services control traffic flow premises cloud cloud internet worked vpc configuration end end subnets internet gateways carrier gateways nat devices dhcp route tables vpc peering vpn connections etc worked security groups network acls vpc configuration private public subnets worked high availability features using availability zones network firewalls rule groups firewall policies worked route53 aws register domain names route internet traffic resources aws health monitoring resources dns failover experience dns resolution vpcs premises worked elastic load balancing options aws configuring load balancing availability zones updating security groups configuring listeners tags target groups expertise aws cli experience aws global accelerator worked standard global accelerators using routing customizing dns addressing domains preserving client ip addresses document design manage wired wireless networks multiple campuses sites callaway golf country seamless data connectivity accessibility security work various teams vendors wireless network connectivity perform wireless surveys recommend best practices wireless network environment several access points end points achieve connectivity various campuses using switching routing firewall devices design operate redundancy failover topologies remote site isp connectivity high level low level design methodology wireless network includes extensive work skills understanding configuring wireless lan controllers wireless access points authentication using radius rf parameter configuration end point end systems configuration 80211 standards enterprise radio frequencies include 24 5ghz provide detailed engineering skills data center architecture operations include multivendor switches routers firewalls load balancers wireless lan controllers network monitors logging servers operations include regular frequent software upgrade procedures troubleshooting connectivity issues application delivery mechanisms include callaways proprietary vendor based applications internal external access implement various security authentication mechanisms strategies protect data transfers connectivity proprietary byod devices coordinate management cab business units server team application team data base team mission critical changes implementations deployment network engineering projects include life cycle devices deployment new strategies migration new devices etc network engineer tech lead 012017 072020 pae government services inc hartford ct role worked network operations deployment tech lead multiple clients ipsoft switching routing firewalls load balancers wireless lan riverbed remote site setup connectivity issues proxies dns dhcp monitoring worked global networks various migration projects software upgrades installations lifecycle projects data centre builds design manage network infrastructures fortune 500 companies across globe network engineering network security engineering worked cisco juniper arista palo alto check point fortigate f5 a10 citrix aruba bluecoat zscaler riverbed infoblox solarwinds splunk vendor equipment various verticals network security domains worked cisco catalyst 3750 3850 9k series 4500x 6500 nexus 2k 5k 7k 9k asr ik 9k switches routers campus data center topologies worked lan wan networks isp connectivity worked layer protocols setup troubleshooting includes stp rstp mst hsrp vrrp glbp lacp pagp vpc vss vlan 8021q vtp worked layer 3 protocols configuration troubleshooting includes ospf bgp eigrp static routing mpls route redistribution prefix lists isis vxlan overlay gre tunneling mpbgp worked traditional 3 tier architecture access distribution core layers also spine leaf architecture nexus 9k arista 7000 series good understanding overlay underlay networks worked software defined networks includes cisco aci experience overlay tunneling using vxlan worked vteps vni bridge domains mpbgp tenants application profile vrfs multitenant network epg worked firewalls perimeter server farm well versed traffic flows inside dmz outside extranet respect zones worked security policies include acl nat url filtering app id threat id user id worked palo alto 5000 500 300 series firewalls panorama m100 check point series fortinet series cisco asa 5500 series firepower series next gen firewall features worked centralized managers firewalls include panorama central manger juniper forti manager experience config templates software upgrade procedures logging management firewall policies using centralized management troubleshooting experience ipsec tunnels ssl vpn remote access worked phase 1 phase 2 ipsec tunnel setup worked juniper pulse cisco anyconnect ssl vpn worked f5 ltm gtm modules load balancing various internal external applications migrations ace f5 netscalers worked virtual servers pools health monitors snat persistence ssl profiles irules iquery wideip listeners zones various load balancing algorithms experience integrating ltm gtm modules delegations dns server gtm worked windows infoblox dns dhcp configure various dns zones sub domains delegations forwarding etc worked configuration dhcp scopes options worked cisco wlan controllers configuration ap profiles access points rf parameters 8021x integration ise ssid byod policies wireless vlans distribution switches worked deploying site site vpn tunnels security policies nat policies url filtering vdom forti manager user id based security policies ssl forward proxy ssl decryption worked sdwan remote site connectivity mpls worked viptela solution assisting architecture team deploying vmanage vedge vbond vsmart components worked bluecoat zscaler internet access proxies manage polices user groupbased whitelist blacklist policies integration azure ad saml auth assertions pac file changes traffic logs splunk explicit proxy setup experience documentation network monitoring using solarwinds log collection analyzing using splunk dns dhcp diagramming using visio netbrain inventory reports change management ticketing tools like service remedy worked automation using ansible scripting python automate inventory reports back configs config templates integration tools network engineer 082015 012017 custom computer specialists inc mount vernon ny role worked mckesson global network engineering team worked data centre refresh project cisco juniper devices asa checkpointfortigate firewalls worked load balancer migration project netscaler ace f5 configuring eigrp ospf bgp cisco routers l3 switches well nexus environment implemented policy rules dmz multiple vdoms multiple clients state fortigate firewall extensive use cisco routers switches using lan wan routing protocol eigrp ospf bgp manage network infrastructure worked complex routing switching issues experience working nexus 7010 5020 2148 2248 devices setup separate esx 30 environment facilitate migration nsx 251 configured maintained f5 load balancing bigip devices local traffic management ltm wan optimization wom blacklisting white listing web url panorama knowledge different kinds cables used connect different devices data centers within industry experience vss vrf vpc vdc technologies experience gateway redundant protocols hsrp vrrp glbp experience access distribution core layer architecture work ironport log files routing protocols experience infoblox installation extensively worked tcpip protocols transport protocols like tcp udp implemented sitetosite vpns internet utilizing security standards 3des aesaes256 asa 5580 firewalls knowledge juniper srx220 srx240 srx550 fortinet 200d series firewalls troubleshot documented installed variety equipment arista switching fabric fortinet firewalls worked implementation basic f5 ltm local traffic manager excellent customer managementresolution organizational analytic problem solving debugging skills capable quickly learning effectively analyses results implement delivering solutions individual part team creating priority list type attacks focus vs accomplished identifying timeline accomplish functionality asm provide install configure maintain fortinet version 40 60 managed multiple fortinet firewalls using fortimanager researched designed replaced checkpoint firewall architecture new next generation palo alto pa3000 pa5000 appliances serving firewalls url application inspection managed companies wireless infrastructure includes create new ssid flexhrep wlc managed palo altoasa firewall security policies rule base security control points device mapping using network address translation objects management administrative tasks worked lan protocols vlan vtp stp rstp mst port channel protocols lacp pagp experience working cisco nexus 2148 fabric extender nexus 5000 series provide flexible access solution datacenter access architecture expertise installing configuring troubleshooting juniper ex switches ex2200 ex2500 ex3200 ex4200 ex4500 series worked lan protocols vlan vtp stp rstp mst port channel protocols lacp pagp experience working cisco nexus 2148 fabric extender nexus 5000 series provide flexible access solution datacenter access architecture expertise installing configuring troubleshooting juniper ex switches ex2200 ex2500 ex3200 ex4200 ex4500 series proficient f5 ltm cisco csm load balancer inbetween servers inside server farm dmz assisted transition current cisco asa fw platform cisco firepower fpr 4150 ngfw asapa firewall log maintenance policy maintenance troubleshooting complex checkpoint issues sitetosite vpn related implemented inter vdom routing fortigate firewalls router responsible enabling bgp peering relationships debugging bgp routing problems experience ltm f5 component provide high availability providing services across data centers experience wireless aruba cisco controllers based enterprise networks experience arubaruckus wireless controllers access points iap responsible layer 2 securities implemented using dedicated vlan id trunk ports setting user ports non trucking deployed port security possible user ports enabled stp attack mitigation bpdu guard root guard using md5 authentication vtp disabling unused ports putting unused vlan designed implemented dmz web servers mail servers ftp servers using cisco asa5500 firewalls cisco pix 506 pix 515 experience migrating partner ipsec vpn tunnels one data center another worked extensively configuring monitoring troubleshooting ciscos asa 5500 acl nat object groups failover multi contexts implemented vmware management software virtual center 20 manage new environment connected nsx 30 servers three different lab environments emc external storage space publix also used compaqs msa1000 modular san array supply chain test environments networksystem administrator 052014 042015 southern methodist university city state worked system network admin smu configure various access distribution core switches campus idfmdf troubleshooting setting wireless lan worked cisco wireless lan infrastructure multiple campuses configured ssid authentication rf parameters wireless survey heat maps byod policies guest wifi access worked cisco 3750 6500 series switches configured gateway redundancy ospf routing worked end user computing pushing gpo policies system level software upgrades provisioning access various ad groups system level requirements worked layer 1 copper fiber cabling worked single mode multimode cat 5 cat 6 cabling campus junior network administrator 072012 072013 bharat sanchar nigam limited bsnl city state learned various aspects telecom industry gained valuable experience assisted netsupptie2 team worked architecture functioning cisco 2600 series routers configured vlans different impetus switches performed investigating tcpip system issues administered framerelay systems got familiarized collaborated dynamic call routing features multiprovider environment number portability internet routing evolution worked cabling idfmdf data centers copper fiber involved customer escalations troubleshooting issues related connectivity stp vlan trunking vtp layer 23 switching ether channels intervlan routing log messages high cpu utilization parameters degrade performance network familiar networking tools like cisco ios wireshark ping trace route speed test experience troubleshooting layer 2 features vlan stp rstp vrrp ether channel support network technicians require training support problem resolution including performing diagnostics configuring network devices strong knowledge cisco 1921k9 3750 1800 series routers 2950 2960 series switches nexus 2k 5k 7k configuring stp switching loop prevention vlans data voice along configuring port security users connecting switches configured vlans multiple catalyst switches performed troubleshooting tcpip network problems administered framerelay networks implemented vtp trunking protocols 8021q isl 3560 3750 6500 series cisco catalyst switches managed system backup restoration protocols escalating issue higher network teams education training master science telecommunications networking 052015 southern methodist university dallas tx 37 gpa bachelor science electronics communications engineering 052013 stmartins engineering college hyderabad india 32 gpa