Category: Network Security Engineer

experience jessica claire montgomery street san francisco ca 94105 555 4321000 resumesampleexamplecom senior network security engineer 102016 current bloomberg houston tx environment cisco 385037503500365065007600 switches 5500 firewall palo alto pa3060 firewall asr router 10021006 cisco aci cisco ise aws juniper ex2200 ex4200 m320 router juniper srx 5800 fire wall f5 ltm 16006400 citrix netscaler ospf bgp eigrp vlans lan wan work profile installing configuring new cisco equipment including cisco catalyst switches 3850 3750 nexus 5548 nexus 2k per requirement organization configure installation cisco prime infrastructure deploy iwan implementations network devices network sdwan environment designing implementation lan vlans vtp spanning tree stp trunking dotlq isl ether channel cisco catalyst switches 3500 3650 3850 6500 7600 configuring monitoring troubleshooting ciscos asa 5500 security appliance failover dmz zoning configuring vlansroutingnat firewalls per design established ipsec vpn tunnels asa 5500 series firewall branch offices headquarters successfully design installed palo alto pa3060 firewalls protect data center provided l3 support routers switches firewalls installing configuring palo alto pa500 series pa2000 series firewalls using panorama configuring rules maintaining palo alto firewalls analysis firewall logs using various tools experience working palo alto nextgeneration firewalls security profiles worked installation palo alto firewall migrated team predominantly checkpoint environment palo alto global solution managing aws security policies network configuration including aws direct connect vpn failover multiple vpcs user site access servers accounts created 53 buckets aws environment store files sometimes required serve static content used security groups network acls internet gateways route tables ensure secure zone organization aws public cloud used iam creating roles users groups implemented mfa provide additional security aws account configured implemented f5 bigip glb ltm load balancers modified reconfigured two factor authentication bigip apm authentication created access policies apm module using ad ldap authentication external clients worked f5 enterprise manager 31 version manage multiple f5 ltm devices singlepane view hands experience configuring testing f5 rules using browser ie http watch worked f5 ltm series like 1600 6400 viprions corporate applications availability installing configuring f5 load balancers firewalls lanwan configuration worked f5 ltms gtms improve web application delivery speed replication distributed global data centers working trouble tickets a10 f5 load balancer worked blue coat handled trouble tickets f5 load balancers migration cisco firewalls palo alto firewalls platforms pa 4000 pa 500 pa200 firewalls network technologies including optical voip vpn san switching routing configured troubleshooting cisco unified uc560 manager voip systems upgraded asa 55055 5525x firepower setup high availability asa pair firepower focused working cisco channel partners build practices around cisco aci implemented cisco application centric infrastructure cisco aci solution data centers using spine leaf architecture expert troubleshooting production issues resolving incident change tickets related cisco aci apply cisco ise configuration switches worked cisco ise identify threats network rapid containment remediation worked upgrading cisco ise 3300 appliances 104 cisco ise software vm wares experience dealing cisco ise secure network server 3515 network security products performed troubleshooting monitored routing protocols rip ospf eigrp bgp worked vm ware migration physical servers virtual servers managed successful delivery massive security response portfolio including splunk cisco ise used python scripting network sniffing managed parameters pool servers updated automated migrated different services software means ansible worked riverbed devices wan bandwidth optimization data centers sensitive coordinate multiple vendors cisco juniper etc troubleshoot network outages issues configuration troubleshooting csm integration asa devices configuring static bgp ospf routing protocols cisco routers network security consultant 062014 092016 verizon scottsdale az environment cisco 650045104500x49483560x switches nexus 9000 50003000 9504 9300 3200 2308 cisco asr 1k 72003925e2951e gsr 700012000 routers cisco ise aruba 72003600 wireless controller nexus 2k5k9k cisco nexus 7000 asa 550055105540 fire walls windows 200020032008r22012 juniper srx firewall mx routers palo alto firewalls sslvpn f5 load balancer ltm citrix net scalar bgp egbp vpc vdc ospf work profile installing configuring troubleshooting cisco routers asr1002x 3945 3845 2800 3600 switches perform functions access distribution core layers installing maintaining troubleshooting cisco asr 1k 7200 3925e 2951e routers cisco 6500 4510 4500x 4948 3560x 3750x 29605 switches deployment production responsibilities include software upgrade license activation configuringinstalling new gsr router 700012000 nexus switch 9000 50003000 9504 9300 3200 2308 f55050 maintaining network documentation experience working high performance data center switch like nexus 9000 7000 series configuration fabric path connectivity nexus 5k nexus 7k handson experience cisco nexus 7000 nexus 5000 nexus 2000 platforms automated network implementations tasks designed monitoring tools using python scripting worked f5 big ip ltm 3600 load balancers configure nodes pools vips need basis involved troubleshooting dns dhcp ip conflict problems configured dns dhcp servers using infoblox completed basic configurations f5 bigip ltms gtm load balancer existing network split traffic web servers expert design configuration deployment f5 solutions extensive experience working apm asm technologies creation asm policies application security f5 virtual servers configured onetime password bigip apm add security time initialization application experience using gtm apm ltm f5 component provide 247 access applications responsible configuration a10 load balancer creating configuring troubleshooting vips ebl efl extranet networks f5a10networks experience sdnnfv technologies including open stack neutron vm ware nsx open flow open daylight open v switch open contrail cisco aci configured created wireless sites using cisco meraki system dashboard implemented site site vpn cisco meraki mx64 mx65 mc84 mx400 implementing cisco meraki wireless network experience configuring dmvpn tunnels mpls isp clouds responsible transport independent design iwan experience lan protocols like vss stp rstp mst vtp vlan administrated lan wan tcpip nat ppp isdn associates network protocols services configured cisco ise domain integration active directory integration configured cisco ise wireless wired 8021x authentication cisco wireless lan controllers catalyst switches cisco asa firewalls worked cisco asa 5500x firepower services responsible troubleshooting cisco ise added new devices network based policies ise performed site refreshes cisco switching aruba wireless infrastructure hands experience aruba 52500 switches aruba 7200 3600 series wireless controllers migrated cisco 3650 switches aruba 3810 series switches experience virtualization technologies like installing configuring vmware vsphere creation management administration maintenance virtual servers clients integrating panorama palo alto firewalls managing multiple palo alto firewall using panorama worked enterprise intrusion detection ips snort source fire juniper idp ibm iss implementation l3 mplsvpn migration branches new mpls cloud4 building vpn tunnel vpn encryption configured site site ipsec vpn tunnels peer different clients client different specifications phase 1 phase 2 policies using cisco asa 5500 series firewalls optimized ips signatures cisco fire power management center reduce false positives disabling unnecessary rules using threshold suppression pass rules features configured easy vpn server ssl vpn facilitate various employees access internal servers resources access restrictions coordinating vendors creating modifying firewall nat rules maintaining site site ssl vpn configured cisco amp advanced malware protection endpoint security systems working deployment experience cisco amp clean viruses custom detection control malware outbreaks configured ebgp load balancing ensured stability bgp peering interfaces worked routereflectors troubleshoot bgp issues related customer route prefixes also route filtering using routemaps implemented site site vpn juniper srx per customer maintain configure l2 l3 services mpls worked engineering team resolve tickets troubleshoot l3l2 problems efficiently responsible service request tickets generated helpdesk phases troubleshooting maintenance upgrades patches fixes around technical support network consultant 072012 052014 capita plc durham nc environment cisco 29603750385045006500 switches cisco 3945 asr 10041002x routers cisco asa5585550055205555 firewalls palo alto pa5260506030603020500 firewalls cisco nexus 7k5k2k lan ospf bgp eigrp cisco ise f5 bigip ltm gtm responsible troubleshooting installing administering supporting network infrastructure 38 state texas agencies performed regular upgrades network infrastructure components diagnosis complex networking problems developing detailed implementation plans including communication strategies validation back procedures provided support network securityrelated issues queries including existing new technologies vendors applications coordinating network staff develop enhance processes procedures disaster recovery performed work outside normal business hours related limited oncall incident escalation offhours maintenance work responsible network uptime changes executed time accordance service level agreements state business implemented backup strategy along disaster recovery plan event servers critical network components go prevent lost revenue troubleshooting installing supporting agencies sitetosite remote asa vpn connections throughout state texas involved multiple migration projects migrated existing firewall configurations cisco asa palo alto firewalls responsible planning design implementation organization operation palo alto firewalls based perimeter security network network security devices including limited pa5200 5000 3000 series firewalls integrated cisco ise rsa multifactor vpn users across multiple state texas agencies hands experience duo multifactor solution core network migrations replacements devices endoflife endofsupport also includes cisco asa palo alto firewall migration across multiple agencies designed implemented network architecture madison yards way state office building multiple different agencies using multi vsys palo alto firewall reduce duplication maximize efficiency network services successfully installed palo alto pa5260506030603020 firewalls protect data center provided l3 support routers switchesfirewalls designed replaced aging cisco asa firewall architecture new next generation palo alto appliances serving firewalls url application inspection experience wildfire url application inspection feature palo alto implemented positive enforcement model help palo alto networks configured maintained ipsec ssl vpns palo alto firewalls experience configuring implementing managing monitoring palo alto virtual system vsys firewalls using panorama integrated configured cisco asa firewalls ise posture policy compliance perform coa remote vpn ipsec ssl anyconnect users configured cisco ise switches authenticate authorize devices users deployed bigip f5ltm load balancers load balancing traffic management business application configured f5 load balancers adding virtual ips nodes pools health monitoring managed f5 bigip gtmltm appliances include writing irules ssl offload everyday tasks creating vips provided application level redundancy availability deploying f5 load balancers ltm configuring troubleshooting cisco asa firewalls site site vpn tunnels configuring failover working sslvpn activestandby failover cisco asa managing cisco asa firewalls using asdm creating modifying rules network consultant 012010 062012 capita plc worcester environment cisco routers 16011721 1841 2505 7507 7513 cisco switches 2926 3750 6509 series ospf mpls eigrp rip work profile implemented supported local remote using cisco devices cisco routers 16011721 1841 2505 7507 7513 cisco switches 2926 3750 6509 series implemented supported disaster recovery facility failover purpose included backbone routers vpn dmz networks configured staticdynamic routing vpn customers managed router service mrs customers using proxy radius servers also implemented network address translation nat managed routers troubleshot network connectivityperformance problems serious fault investigation management resolution monitored lan wan links handled capacity planning included installation configuration maintenance cisco devices cisco routers 1603 2500 7507 7513 cisco catalyst switches 2926 5005 5505 6509 8540 troubleshot network connectivity performance problems provided resolutions tested l2 protocols vlan stp flavors stp pvst hsrp vrrp lacp routing protocols ospf mpls eigrp rip testing network features nat acls multicast traffic shaping queuing l2 l3 switches network maintenance system upgrades service packs patches hot fixes security configurations worked within established configuration change management policies ensure awareness approval success changes made network infrastructure selected implemented security tools policies procedures conjunction companys security team liaise vendors personnel problem resolution configured troubleshot ppp wan connectivity t1 nxt1 access router remote access router complexes atm switches work history 011 current 011 011 education ms computer engineering 2010 texas university kingsville tx summary network security engineer profile 8 years experience network design security tier support networks various environments responsible service request tickets generated helpdesk phases troubleshooting maintenance upgrades patches fixes around technical support extensive experience working cisco juniper routersswitches complex environments multiple isps certifications cisco certified network associate ccna cisco certified network professional ccnp aws certified solutions architect associateacsaa highlights mapped network diagrams physical identification ms visio provide hands management data center services including rack cable management cisco security telnet sdm natacls aaa layer 2 security layer 3 security ipsids cisco asa pix 5510 cryptography vpn ipsec experience physical cabling ip addressing subnetting vlsm configuring supporting tcpip dns installing configuring proxies routers switches cisco nexus 2k 6k 7k 9k asr isr juniper mx srx vsrx alcatel sr7750 o56850 nortel dms500 dms250 foundrybrocade network os software sdn opendaylight openflow virl nexus nxos aci cisco iosxe junos screenos aos sros load balancers a10 f5 bigipiq viprion ltm gtm asm afm cisco ace css11000 foundrybrocade protocols mpls vpls voip atm sonet frame relay pos bgp eigrp ospf snmp isis tcpip ipsec ssltls vxlan fabricpath aci dmvpn iwan packet analysis wireshark tbird rf analysis packet application firewalls f5 bigip asm afm checkpoint ng juniper srx palo alto cisco asapix fwsm software security reverse engineering idapro gcc gdb asm softice windbg ms visual studio ollydbg secure coding practices code review vpns cisco asa palo alto checkpoint juniper ipsec ssl encryption pki symmetrical cryptography rsa isakmp ike aes 3des des rsa rc46 blowfish dh dsa network security automation sdn sdn opendaylight aci firemon tufin openflow rest virtualization vmware esxi kvm containers zones hyperv aws gce network management hp openview prime ciscoworks tivoli netview prtg netflow sflow solarwinds rancid netmon opennms visionael enterprise pro custom written solutions programming scripting bash shell python rest java tcl perl c pascal dot net lowlevel assembly c database postgresql mysql pgsql plsql os linux solaris hpux aix skills mapped network diagrams physical identification ms visio provide hands management data center services including rack cable management cisco security telnet sdm natacls aaa layer 2 security layer 3 security ipsids cisco asa pix 5510 cryptography vpn ipsec experience physical cabling ip addressing subnetting vlsm configuring supporting tcpip dns installing configuring proxies routers switches cisco nexus 2k 6k 7k 9k asr isr juniper mx srx vsrx alcatel sr7750 os6850 nortel dms500 dms250 foundrybrocade network os software sdn opendaylight openflow virl nexus nxos aci cisco iosxe junos screenos aos sros load balancers a10 f5 bigipiq viprion ltm gtm asm afm cisco ace cs511000 foundrybrocade protocols mpls vpls voip atm sonet frame relay pos bgp eigrp ospf snmp isis tcpip ipsec ssltls vxlan fabricpath aci dmvpn iwan packet analysis wireshark tbird rf analysis packet application firewalls f5 bigip asm afm checkpoint ng juniper srx palo alto cisco asapixfwsm software security reverse engineering idapro gcc gdb asm softice windbg ms visual studio ollydbg secure coding practices code review vpns cisco asa palo alto checkpoint juniper ipsec ssl encryption pki symmetrical cryptography rsa isakmp ike aes 3des des rsa rc46 blowfish dh dsa networksecurity automationsdn sdn opendaylight aci firemon tufin openflow rest virtualization vmware esxi kvm containers zones hyperv aws gce network management hp openview prime ciscoworks tivoli netview prtg netflow sflow solarwinds rancid netmon opennms visionael enterprise pro custom written solutions programming scripting bash shell python rest java tcl perl c pascal dot net lowlevel assembly c database postgresql mysql pgsql pl sql os linux solaris hpux aix additional information experience working cisco catalyst series3750 4500 4900 6500 nexus 2000 5000 6000 7000 9000 series switches worked cisco 7200 3800 3600 2800 2600 1800 series routers cisco 2900 3500 4500 5500 6500 nexus 5k series switches sound knowledge routing switching concepts mpls design experience working cisco nexus switches virtual port channel configuration expert dealing networking protocols standards tcpip osi udp layer 2 vlans stp vtp routing protocols rip eigrp ospf bgp wan technologies frame relay ipsec vpns mpls qos configuration troubleshooting voip protocols sip rtp h248 h323 mgcp conversions bgp wan routing convert wan routing ospf bgp ospf used local routing involves new wan links experience troubleshooting nat configurations accesslists acl dnsdhcp related issues within lan network experience installing configuring dns dhcp server configure vrrp glbp vlan trunking 8021q isl stp port security catalyst 6500 switches experience working cloud computing virtualization using vm ware esxi 40 windows hyperv installed implemented troubleshoot network virtualization ucs nsx troubleshoot endtoend call flow issues enterprise market involving various voip elements intensive applications network automation tools testing network automation configuration management using ansible python scripting provided technical integration public private cloud services including aws microsoft azure office 365 rackspace voipsip providers increase infrastructure agility due business demands working experience web content filter gateways like blue coat websense extensive working experience aaa protocols radius tacacs cisco acs experience monitoring management tools hp open view splunk tcp dump solar winds wireshark ethereal cisco prime net flow net scot sniffer riverbed extensively used tcpip tool like telnet remote login routers ssh secure login working experience performing incident change management using ticketing tools servicenow remedy design implement manage security tools systems ids ips vpn waf dlp av cisco amp seim vulnerability installed configured cisco unified communications manageuc responsible configuration administration firewalls includes checkpoint juniper cisco asa firewalls experience risk analysis security policy rules creation modification cisco asa networks checkpoint firewall troubleshooting policy change requests new ip segments either come line may altered various planned network changes network replaced aging checkpoint firewall architecture new next generation palo alto appliances serving firewalls url application inspection designed security policies palo alto network firewall controlling traffic needs allowed blocked based customer requirements configure implementing fortinet security systems firewall assisted managing global fortinet fortigate firewall infrastructure experience configuration juniper security appliances srx 220 srx 240 srx 550 ns 50 ssg 550m ssg 520m established vpn tunnels cisco routers cisco firewalls palo alto firewalls performed ios software upgrades switches cisco 6509 4510 3750 cisco asr compatibility cisco ise implemented cisco application centric infrastructure aci solution data centers using spine leaf architecture used cisco aci fabric based cisco nexus 9000 series switches cisco application virtual switch avs good knowledge sdwan technology involving discovery design implementation clients network assisting design deployment cisco firepower cluster core knowledge junos platform worked junos upgrade juniper devices experience a10 f5 load balancers bigip ltm gtm modules infoblox provide dns dhcp ipam administration services