| | | 20,000+ Fresh Resumes Monthly | |
|
|
| |
Click here or scroll down to respond to this candidate Pavane ReddySenior Network Automation EngineerEmail: EMAIL AVAILABLEContact: -1PHONE NUMBER AVAILABLELinkedIn: https://LINKEDIN LINK AVAILABLEProfessional Summary: Experience in Cloud Network Security that includes perimeter security for Internet, Extranet, DMZ, Internal Server farms, Web-traffic security with Proxies, Web Application firewalls. Worked and migrated multi-vendor equipment and Next generation firewall technologies Experience with legacy and high-end switching technologies in Data Center environments. Worked on Cisco, Juniper and Aruba/HP gear in campus environments. Worked on Cisco, Arista, Dell, Cumulus, Juniper gear in Data Center environment. Experience with Interior and Exterior routing protocols that includes RIP, OSPF, EIGRP, IS-IS and BGP. Worked on Cisco, Juniper and Arista routers. Experience with SD-WAN, DMVPN, NSX, HCX, BIG-IP F5 load balancers, version 9.x, 10.x, 11.x, Citrix NetScaler and Web Accelerators. Experience working with Viptela and/or Velocloud SD-WAN elements vManage, vBond, vSmart, vEdge, and/or vCO. Worked on ASA, Firepower, Checkpoint and Palo Alto firewalls. Experience on MWG, Bluecoat and Zscaler proxies. Experience and high-level understanding in application delivery controllers, local and global load balancing techniques, redundancy solutions, high availability options for mission critical internal, vendor and public facing applications. Experience with F5 LTM, GTM, APM, Citrix NetScaler's, Cisco ACE and A10. Excellent understanding of SD-WAN Architecture on Cisco Viptela SD-WAN and/or Velocloud. Worked on Campus Wireless environments with 1000+ access points, Wireless LAN controllers (WLC), Anchor Controllers, Authentication policies, BYOD policies, Integration with RADIUS. Experience with Aruba and Cisco WLAN. Experience with TACACS/RADIUS servers, migration from ACS and Aruba ClearPass to ISE.
Experience with Infoblox DNS and DHCP servers, IPAM, internal and external grids. Experience on Fortinet FortiGate Appliances including 400E, 4400F, 120G running Latest 7.2.5 Fort iOS. Experience with WAN connectivity, MPLS circuits, leased Lines, Metro Ethernet, Site to Site IPsec tunnels, ISP circuits, Customer Edge configurations. Experience with SD-WAN solutions that include Viptela and Versa. Experience with setting up and troubleshooting SSL VPN solution using Cisco AnyConnect, Juniper Pulse Secure, Zero Trust Network Access. Aviatrix Transit Network with Palo Alto VM Network Service to provide: Firewall traffic inspection: VPC - VPC; VPC - On Premise DCs; Ingress/Egress. Experience building of private cloud infrastructures, deploying a standardized validated design leveraging Dell Technologies and VMware. Experience in Amazon web services cloud Platform AWS IAM, AWS S3, AWS EC2, EBS, EKS, Route53 and VPC Services. Designed SD-WAN (Viptela& Versa) technologies to optimize efficiency and scalability across Enterprise LAN and WAN environments. Operational experience with SDN, Cisco ACI, VXLAN, VTEPS, VNI, Bridge Domain, Arista Cloud Vision, EVPN, MP-BGP, Spine and Leaf Architecture. Filtering network traffic with a network security group and route network traffic with a route table using the Azure portal. Mentored junior team members on the effective use of monitoring tools like Sumo Logic and Thousand Eyes, sharing best practices and fostering a culture of knowledge sharing and continuous learning within the network engineering team. Experience with Network Monitoring tools, SNMP, Log collectors, Splunk, ticketing tools and thorough understanding of workflows in corporate environments that include Financial, Healthcare, Retail clients. Utilized Sumo Logic and Thousand Eyes to conduct comprehensive analysis and diagnostics of network infrastructure, identifying and resolving potential bottlenecks and vulnerabilities promptly. Expertise about ServiceNow change management processes, including submitting change requests, assessing risks, and implementing network changes following established procedures. Very enthusiastic to explore and implement innovative ideas in Network Automation in configuration, documentation, troubleshooting, workflow integration, API integration with multiple tools using Python and Ansible. Exposure to Python and Ansible.Certifications:
Cisco Certified Network Professional (CCNP) Cisco Certified Network Associate (CCNA) Cisco Certified Network Professional Security (CCNP Security)Education:
Bachelor of Engineering in Computer Science from GITAM University, India Master in Information Technology from Indiana Tech University, United States
Technical ExpertiseRouters
Cisco 5000, 8300, 4000, 900 Series, Cisco 8200 Series Edge Platforms, Cisco 8200 Series edge uCPE, IR 1101, IR 809, ASR920, ASR900, ISR800, ISR1900, ISR2900, ISR3900, ISR4321, ISR 4331, ISR4351, ISR4431, ISR4451, ASR9006, ASR9010Juniper PlatformsACX7000 Series, MX Series, CTP2056, EX Multigigabit Series, EX Multigigabit SeriesSwitchesCisco Catalyst 8500, Cisco Catalyst 8300, Cisco Catalyst 8200, Cisco 8000V Edge Software. Arista Cloud Switches- 7k series, Cisco Catalyst 9400, Cisco Catalyst 9300, Cisco Catalyst 9200, Cisco Meraki MS390, In Nexus 7k - Nexus 7706, Nexus 7710, Nexus 7718, Nexus 3k, Nexus 5k, Nexus9300IP Routing PlatformsASR920, ASR900, ISR800, ISR1900, ISR2900, ISR3900, ISR4321, ISR 4331, ISR4351, ISR4431, ISR4451, ASR9006, ASR9010WirelessCisco, Aruba Wireless LAN, 802.11 a, b, g, n and ac. 802.1X Auth, 2.4 and 5 GHZ, EAP/PEAP, Aruba airwave & Aruba clear pass.FirewallPalo Alto, Checkpoint, Cisco ASA, Firepower, FortiGate.Load BalancersCisco CSM, F5 Networks (Big-IP), Citrix NetScaler s, Cisco ACE and A10.WAN technologiesFrame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONETLAN technologiesEthernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet,40 & 100 GBE, Port- channel, VLANS, VTP, STP, RSTP, MST,802.1QSecurity ProtocolsIKE, IPSEC, SSL-VPN, ACL, NAT, PAT, URL filtering, SSL forward proxy, Blocklists,Networking ProtocolsRIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA, SNMP, VPC, VDC, MLAG,Operating SystemCAT IOS, IOS XE, XR, NX-OS, Junos, PANOS, F5 BIGIP OS, Linux, Windows
Network Monitoring & Network Management ToolInfoblox, SolarWinds, CISCO Prime, Netcool, SevOne, EMC Smarts, Nagios, Endpoint security, Loadmaster, HAProxy, WhatsUp GoldProfessional Experience:Client: JPMorgan Chase, Remote Feb 2023 - PresentRole: Senior Cloud Network EngineerProject Description: Cisco Nexus 9000 NX-OS to CISCO ACI fabric to work in concert with existing Nexus 7000s and ASRs for MPLS. Evaluate, design and document networking solution for public, private and hybrid Cloud Infrastructure for the firm and collaborate with other infrastructure teams to implement the solution will also provide all the technical guidance, design specification and solution level support to the operation team for the Cloud Connectivity, integration and application migration.Responsibilities:
Monitored network health and performance using Cumulus NetQ, proactively identifying and resolving potential issues before they impact operations. Setup Cisco ACI Fabric (Spine/Leaf/APIC) Configure ACI APIC controller. Working with VMWare SD-WAN VeloCloud Orchestrator Platform for Cloud-Hosted Application Server Management. Working with data center technologies that include spine leaf, cisco ACI, Arista cloud vision. Well versed with Nexus family switches to implement VPC and VDC. Working with a successful Cisco Partner to migrate Palo Alto 5050 firewalls to Cisco Fire Power 9300 firewalls with throughput up to 1.2Tbps crushing the current slow Palo Alto 5050s. Working extensively in Configuring, Monitoring and Troubleshooting of Cisco ENCS 5406, 5408, 5412.
Responsibilities also include technical documentation of all upgrades done.
Design expertise for the SD-WAN (Versa & Viptela), SD-LAN and WAN optimization technologies for efficient delivery of the application data across LAN and WAN. Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering). Configured and maintained IPSEC and SSL VPNs on Palo Alto Firewalls. Working on network monitoring and analysis tools like, SOLAR WINDS, CISCO works and Riverbed and Wireshark. Working on the design and implementation of proactive monitoring strategies, including custom dashboards and alerts in Sumo Logic and Thousand Eyes, to promptly detect and address performance issues, minimizing downtime and maximizing network uptime. Worked with Cisco ACI on VXLAN s, VTEPS, VNID s, EVPN, Bridge Domains, Tenants, Application profiles, Contracts etc. on ACI including Spine Leaf Architecture. Performing network monitoring, providing analysis and network topologies using various tools like NS3, Wireshark, SolarWinds. Performing regular assessments and capacity planning exercises using Thousand Eyes to forecast network growth and resource requirements, ensuring seamless scalability and efficient resource allocation. Working on products for Wi-Fi alliance and WLAN testing & pre and post deployment Wireless security WEP, WPA, EAP. Hands on experience on Azure cloud migrated number of applications from NSX private cloud to Azure. Configuring and deploying multiple vendor firewalls like Palo Alto, FortiGate, Juniper SRX and ASA firewalls. Network segmentation using Illumio and Palo Alto firewalls for traffic filtering and applying polices on Illumio central manager. Setting up, Deploying and Managing Virtual Machines on NFV Infrastructure Software (NFVIS) GUI.
Setting up and Managing Virtual Machines on AWS Cloud including working on EC2, Route53, RDS, Lambda. Working on License upgrade on Palo Alto 9.1.3. Configured Juniper MX480s, EX8200s, EX4500s, EX4200s, and SRX5800s from scratch to match design. Responsible for Cisco Palo Alto firewall administration across our global networks. Migrated Virtual Machines and applications from on premises cloud to AWS. Working on the automation for the VM deployment tool.
Conducted network audits and assessments to ensure compliance with industry standards and best practices in Cumulus environments. Performing Spirent testing for Palo Alto service chain achievable performance with or without DPDK. Using Ansible and Ansible Tower as Configuration management tool, to automate repetitive tasks, quickly deploy critical applications, and proactively manage change. Configuring and Established Express route and VPN connectivity to Microsoft Azure Cloud Upgrading 3x data centers network and fiber optic infrastructures with an Arista spine-leaf. Migration of legacy WAN network to SD-WAN with virtual firewalls on WAN routers. Helped design and build out a very large 100G Layer3 Leaf & Spine architecture (eBGP) using Arista Cloud switches to support the network consolidation in the new data center. Intensive applications of Network automation tools and testing for network automation and configuration management using Ansible, Python scripting.
Deploying applications and host websites on AWS cloud involving blackboard. Creating detailed AWS Security Groups which behaved as virtual firewalls that controlled the traffic allowed to reach one or more AWS EC2 instances. Proficiency in communications protocols, including Ethernet, Wi-Fi, Bluetooth, and cellular networks. Deploying and managing applications in Datacenter, Virtual environment, and azure platform as well. Designing and configuring OSPF, BGP on Juniper Routers and SRX Firewalls.
Managing and deploying enterprise level wireless (WLC)communications for Datacenter. Data center fabric networks required (Underlay/Overlay, VXLAN, VLAN, Ethernet VPN, Segment Routing). Configuring WI-FI APs connected in LAN to reduce cable costing by creating AP, worked on Cisco SP Wi-Fi, troubleshoot in Cisco Aironet3700,1700 and 600 series.
Working with virtual routers on Palo Alto firewalls, added NAT rules with source and destination address translations and security rules with various applications and services.
Configuring BGP/OSPF routing policies and designs, working on implementation strategies for the expansion of the MPLS VPN networks.
Working with virtual routers on Palo Alto firewalls, added NAT rules with source and destination address translations and security rules with various applications and services.
Planning and development of designs for Migrating to AWS cloud. Installing, maintaining, and administering storage area network servers in a VMware environment.
Integrate Splunk with AWS deployment using puppet to collect data from all EC2 systems into Splunk. Performing Spirent testing for Palo Alto service chain achievable performance with or without DPDK.
Working on Spirent Methodology Center RFC6349 testing for ENCS certification process.
Responsible for the secure development lifecycle for Cisco's Nexus line of products, including Application Centric Infrastructure (ACI), Application Policy Infrastructure Controller (APIC) - Cisco's Software Defined Network (SDN). Deploying Azure IaaS virtual machines (VMs) and Cloud services (PaaS role instances) into secure VNets and subnets. Troubleshooting MSX deployment on Postman tool.
Proficient in utilizing ServiceNow for network engineering tasks, including incident management, change management, and configuration management. Fortinet Firewall administration configuration of FortiGate 90G and 1100E Series as per network diagram Deploying SC19-SC21 using the latest NFV Infrastructure Software (NFVIS) release 4.2.2, both manually and with MSX and performed basic connectivity tests with Spirent.
Working on Python, shell scripting and automation Rest APIs integrations.
Replacing Checkpoint VPN and Bluecoat proxy with Zscaler and worked on implementing Zscaler in Production. Implemented and managed Infoblox solutions for DNS, DHCP, and IP Address Management, ensuring reliable and efficient network services.Environment: SDWAN, Cisco Routers, Arista, NFV Infrastructure Software (NFVIS), AWS Cloud, MPLS VPN, EIGRP, OSPF, BGP, Juniper, SRX Firewall, Cisco Aironet 3700, 1700 and 600.Client: Squadra Solutions Sep 2020 Nov 2022Location: McLean, VARole: Senior Cloud Network Engineer (Firewall & Security)Responsibilities:
Worked on checkpoint & Palo Alto design and installation of Application and URL filtering, thereat prevention, Data Filtering. Good experience in Checkpoint Firewall Operations and implementations across a diverse network with many levels of required security configurations. Created Azure Virtual Firewalls, VPNs, VLANs, Load Balancers and Route Tables. Implemented Checkpoint firewall rules according to business requirements and verifications. Designing, and implementing scalable cloud-based web applications using AWS and GCP. Set up a GCP Firewall rules to allow or deny traffic to and from the VM's instances based on specified configuration and used GCP cloud CDN (content delivery network) to deliver content from GCP cache locations drastically improving user experience and latency. Viptela SD-Wan, Versa Network Flex NFV SD-WAN, Cisco ASR 1K, Nexus 9K, ISR 2900, Cat 6500/4500, ASA5500, F5 load balancer. Designed and implemented Aruba wireless infrastructure to ensure full connectivity and continuous service. Configured and managed with Aruba/cisco wireless access points 205 series supporting 802.11 ac.
Proficient in documenting incident resolution processes and maintaining accurate records within the ServiceNow platform. Designing and directing system configuration and installation to accommodate network needs of client. Involved in migration of switches from catalyst 6500 E to catalyst 4500-X, 9500 and Nexus 9k, 7k & 9k Working in data center migration from legacy to new Cisco ACI fabric infrastructure. F5 LTM appliance with abilities to create VIP, configuration changes, troubleshoot and perform packet captures. Maintain and manage a LAN/WAN network, ensure connectivity between all datacenters including Monitor, troubleshoot and document any network issues. Used Python scripting for network sniffing and managed parameters for pool of servers and updated, automated, and migrated different services and software by means of Ansible. Extensive troubleshooting on a case-by-case basis with deep understanding of networking/firewall concepts. Configuring & managing around 500+ Network &Security Devices that includes Juniper SRX Firewalls, F5 Big-IP Load balancers and Nexus Devices. Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms. Involve in technical enhancement and deploy new changes using change management and incident management. Implement Automation best practices (Python/Ansible). Configured LACP, OSPF protocols on Arista 7250qx-64 switches. Assisted field technician over the phone to install and connect the LAN & WAN connections. Participating in troubleshooting the F5 LTM and APM and provided level 2 and 3 support. Configuring networks using routing protocols such as RIP, OSPF, EIGRP and BGP and manipulating routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure. Redundancy &Management HSRP, VRRP, Wireshark, SolarWinds, SNMP, CISCO Works, GNS3, Riverbed Managed DHCP, DNS and IP address through Infoblox, and Admin for Internet sites access through Zscaler. Worked on Azure AD SAML authentication for Zscaler authentication and AD group-based policies. Provided high availability for IaaS VMs and PaaS role instances for access from other services in the VNet with Azure Internal Load Balancer. Experience with Firewall administration, Rule analysis, Rule modification. Provided personalized support and guidance to end-users during the setup process, promoting efficient utilization of new technology resources. Conduct network modeling and analysis to construct a reliable, high-performance integrated network and recommend new solutions to improve the resilience of network operation.Environment: CISCO Catalyst PHONE NUMBER AVAILABLE switches, Cisco 2800/4331 ISR routers, Cisco ASA 5500/ 5520/ 5540, Nexus 9508, 9504, 7018/ 7010, 5020, 5548, 2148, 2248, routing protocols RIP, OSPF, BGP, EIGRP, Zscaler, Azure, VMware, AWS, F5 Load Balancer, Ansible, Palo Alto, checkpoint firewall.NCR Corporation Nov 2017 Aug 2020Role: Technical SpecialistResponsibilities:
Assist in redesigning the campus LAN, routing protocol, IP telephony, enterprise edge, IP addressing scheme for client. Lead the installation and configuration of corporate wide rollout of the Cisco Catalyst 3550, 3560, 3750, switches including VLAN configuration, VTP, 802.1q, Spanning-Tree protocol, Ether Channel, & FHRPs such as HSRP & GLBP. Provide technical expertise in troubleshooting of IP routing protocols including OSPF, EIGRP, BGP, & route redistribution. Converting ASA version 8.x to 9.x. address security hardware refresh and migration activities using Python and Ansible scripts.
Install, configure, maintain, & manage network security processes of ASA 5505 Firewalls from the CLI. Monitor device activities & LAN/WAN (Frame Relay &MPLS) utilizing Cisco Works, SNMP; coordinate new circuit installations. Diagnose & resolve complex layer 1, 2 & 3 connectivity using Wireshark analyzer & recommend solution for better performance. Develop standard operating procedure (SOP) documentation. Upgrade Cisco Routers and Switches IOS using TFTP. Configured and supported multiple remote site installations.Environment: Cisco devices, IOS, DMZ, TACACS, EIGRP, RIP, OSPF, BGP, VPN, Cisco Prime, ISE, EtherChannel, Load Balancers, SolarWinds, Palo Alto and Cisco ASA firewalls. |
