Gurpreet _ Network Engineer

Gurpreet Singh Certified Network Engineer _____________________________________________________________________________________ SUMMARY  7+ years of professional experience in Network Planning, Implementing, Configuring, Troubleshooting and Testing of networking system on both Cisco and Juniper Networks.  Experience of routing protocols like EIGRP, OSPF, RIP, and BGP  Experience with escalating problems for Routing, Switching and WAN connectivity issues using ticketing system remedy.  Enhanced level of experience with OSPF, BGP, and TCP/IP.  Worked on Cisco 7200, 3800, 3600, 2800, 2600, 1800 series Routers and Cisco 2900, 3500, 4500, 5500, series switches.  Hands-on Experience with CISCO Nexus 9000, Nexus 7000, Nexus 5000, and Nexus 2000 platforms.  Extensive hands-on experience with complex routed LAN and WAN networks, routers and switches.  Hands-on configuration and experience in setting up Cisco routers to perform functions at the Access, Distribution, and Core layers.  Working Experience on web content filter and gateways like Blue Coat, Websense.  Experience in the setup of Access-Lists, and RIP, EIGRP, and tunnel installations.  Proficiency in configuration of VLAN setup on various Cisco Routers and Switches.  Configure Palo Alto Networks Firewall models (PA-2k, PA-3k, PA-5k etc.) as well as a centralized management system (Panorama) to manage large-scale firewall deployments.   Network monitoring and debugging tools: Netscout, Wireshark.  Access control server configuration for RADIUS & TACAS+.  Good understanding of NAT & Firewall on Aruba Controllers.    Worked on various network projects involving Cisco Routers- ASR 1000/9000, Switches-Nexus 7K/5K/2K.  Hands-on experience in using network monitoring tool SolarWinds Orion.  Experience with BIG-IP F5 load balancers, version 9.x, 10.x, 11.x, Citix Netscalers and Web Accelerators.  Excellent leadership with good written and oral communication.  Installed, configured and deployed Cisco IP Telephony and good knowledge of Cisco RSA.  Worked extensively on Juniper MX Series Routers and EX Series Switches.  Strong experience on Juniper SSG series Firewalls and Checkpoint R75, 76 Firewalls, Juniper SRX 240 Firewalls.  Great team player and able to work under pressure 24x7 duty rotation.  Strong knowledge of HSRP, VRRP redundancy Protocols.  Experience in Network Management Tools and sniffers like SNMP, HP-Open view, Wireshark and Cisco works to support 24 x 7 Network Operation Center.  Experience in physical cabling, IP addressing and Subnetting with VLSM, configuring and supporting TCP/IP, DNS, installing and configuring proxies.  Hands-on experience using Cisco Virtual Switching System (VSS).  Good knowledge of Bluecoat proxy server SG• Knowledge of advanced technologies like VOIP, H.323, SIP, QoS, Multicasting, MPLS, and MPLS-VPN.  Ability to Install, Manage & Troubleshoot Large Networks & Systems Administration on Windows & Linux platforms in Development, Lab & Production Environments.  Good knowledge of CISCO NEXUS data center infrastructure with 5000 and 7000 series switches includes (5548, 7010) including CISCO NEXUS Fabric Extender (223, 2248)  Experience with configuring Nexus 2000 Fabric Extender (FEX), which acts as a remote line card (module) for the Nexus 5000.

Gurpreet Singh Certified Network Engineer _____________________________________________________________________________________

Technical Skills: Cisco Platforms Juniper Platforms Networking Concepts

Nexus 7K, 5K, 2K & 1K, Cisco routers (7600,7200, 3900, 3600, 2800, 2600, 2500, 1800 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 4500, 2900, 6807 series), SRX, MX, EX Series Routers and Switches

Firewall

Access-lists, Routing, Switching, Subnetting, Designing, CSU/DSU, IPSec, VLAN, VPN, WEP, WAP, MPLS, VoIP, Bluetooth, Wi-Fi ASA Firewall (5505/5510), Checkpoint, Cisco ASA

Network Tools

Solar Winds, SNMP, Cisco Works, Wireshark

Load Balancers

Cisco CSM, F5 Networks (Big-IP)

WAN technologies

Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1,DS3,OC3, T1 /T3 & SONET

LAN technologies

Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit VLANs, VTP, STP, RSTP, 802.1Q IKE, IPsec, SSL-VPN, Bluecoat

Security Protocols Networking Protocols Operating System

Ethernet, Port-channel,

RIP, OSPF, EIGRP, BGP, STP, RSTP, VLANs, VTP, PAGP, LACP, MPLS, HSRP, VRRP, GLBP, TACACS+, Radius, AAA, IPv4 and IPv6 Windows 7/XP, MAC OS X, Windows Server 2008/2003, Linux, Unix

CERTIFICATIONS 

Cisco Certified Network Associate (CCNA)

Professional Experience: Magic Leap, Plantation, FL Senior Network Engineer

Aug 2018 - Present

Responsibilities:  Responsibilities include designing, implementing, configuring, testing and monitoring the Datacenter network segmentation and migration projects.  Configuring Static, IGRP, EIGRP, and OSPF Routing Protocols on Cisco 1600, 2600, 2800, 3600, 7300 series Routers.  Performed Migration from Cisco ACE Load Balancers to F5 LTM.  Configured Easy VPN server and SSL VPN to facilitate various employees’ access internal servers and resources with access restrictions.  Successfully deployed corporate anti-spam solution based on Cisco IronPort.

Gurpreet Singh Certified Network Engineer      

     

        

     

_____________________________________________________________________________________ Deployed, from the ground up, Cisco FirePOWER NGIPS and Cisco ISE. Cisco ACI fabric networks, including python automation. Upgraded all SNMP devices from v1/2c to v3.  Engaged in implementing and deploying Cisco ASR 1000 and 9000 Series routers in the network core. Designed and implemented numerous multiple WAN solutions including Intelligent WAN (iWAN), DMVPN, PfR, BGP, OSPF, Blue Coat WAN Optimizer and Packet Shaper, ASR1000, ISR 4000. Designed and implemented Cisco Access Control Server (ACS 5.8) to provide secure access to network resources (Router, Switches, F5 load balancers, Bluecoat WAN optimizers and Packet Shapers, Palo Alto firewalls, checkpoint firewalls). ACS support both RADIUS and TACACS+ protocols. Migrated devices from old TACACS ACS 4.2 to 5.8. Responsible for Installation and Implementation of all Routing, Switching and Firewall Management and devices in front of every client primarily using Sonicwall, Cisco, Juniper and Cyan appliances. Configure EPG, update APIC, implement access and fabric policies in Cisco ACI environment. BlueCoat WAF proxy services was redeployed to provide WAF on the guests and contractors network. Certificates were issue to MobileIron to manage corporate mobile devices, to ISE to manage authentication and authorization at the edge of the network before granting access. Certificate were issued to Proxy devices, IronPort WSA, BlueCoat to manage Outbound HTTPS connections and F-5 for inbound HTTPS connections. Serve as program analyst and adjust Virtual Local Area Networks, check connectivity and evaluate vulnerabilities by performing security port management using SNMP V3 protocol through Enterprise Switch Manager.  Deployed and transition from Lotus Notes 5.5 to Exchange 2013 email system Managed Aruba Clear pass Policy Manager, Airwave, Aruba Controller 72xx, Aruba Instant AP Implementation of network security via Aruba Clear pass with 802.1x EAP-TLS and profiled access for medical devices. Administration of network security through Sonic Wall and Meraki including creating a VPN for secure traffic to our platform.  Rebuild and migration of Aruba 6.x environment to Aruba 8.x Document all network upgrades and new builds using Microsoft Visio Administer and support Cisco ISE and Aruba Clearpass for BYOD, corporate and guest authentication profiles Configure various LAN switches such as CISCO CAT 2900, 3550, 4500, 6509 switches and Access layer switches such as Cisco 4510, 4948, 4507 switches for VLAN, Fast Ether Channel configuration. Successfully implemented the datacenter segmentation project with 7K, 5K and 2K Cisco Nexus architecture, ISR and ASR 1001, 1004, 1006 series routers, F5 BIGIP 4000s and 7200v load balancers and Palo Alto Pa-5000/3000 series firewalls. Replaced Firewall solution to SonicWall TZ400 cloud-based firewall solution. Enhanced full VPN capabilities.  Hands-on experience working with Nexus core 7010, 7706, 5500 and 5600 series switches and 2000 series Fabric Extenders. Adding Websites to the URL filtering block list in Bluecoat Proxies and upgrading firmware on the bluecoat proxies. Migration of the Cisco Catalyst switches to Nexus series. Configured EBGP load balancing and ensured the stability of BGP peering interfaces. Implementation of Site-to-Site VPNs over the internet using 3DES, AES/AES-256 with ASA Firewalls.

Gurpreet Singh Certified Network Engineer _____________________________________________________________________________________  Measure the application performances across the MPLS cloud through various routing and switching methods.  Monitored LAN’s and WAN’s for Network connection and failure issues using tools such as solar winds and Microsoft network Analyzer.  Setup and configured Sonic Wall Email Security Appliances to work in conjunction with Exchange  Worked with engineering team to resolve tickets and troubleshoot L3/L2 problems efficiently.  Configured inside ACL, outside ACL, inside, outside interfaces, NAT and PAT policies.  Experience in migration of VLANS & Configured VLANs with 802.1q tagging, Ether channels, and Spanning tree for creating Access/distribution and core layer switching.  Redistributed required routes from OSPF into BGP. OSPF cloud is present in the US and is connected to all our customers over Sprint’s Frame Relay backbone.  Maintenance of Sophos, Palo Alto, and Sonic wall Firewalls .  Managed Plan of Record with PLMs/SE/Sales/Marketing and followed up and monitor product lines of Juniper routing/switching/security portfolio (MX, PTX, EX, SRX)   Implemented site to site VPN in Cisco ASA as per customer Worked on Route-Reflectors to troubleshoot BGP issues related to customer route prefixes also route filtering using Route-maps.  Designed and implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls.  Worked on Checkpoint Firewalls, Blue coat proxies, Palo Alto firewalls. Installed, configured Checkpoint via GAIA, R55 and NGX R60, R75, R77.3, 77.2.  Deployed BIG IP Enterprise manager to cluster all the F5 LTM, GTM, ASA, Net screen devices for easier management and common configurations.  Involved in the migration of F5 Local traffic managers of LTM 5100 series to LTM 6800 series for higher.  Monitor performance of network and servers to identify potential problems and troubleshoot problem areas as needed with Solar winds.  Proficient with F5 LTM and Cisco CSM load balancer in-between the servers inside the server farm and DMZ.  Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.  Worked on the migration of existing PIX firewall to ASA firewall, PIX OS upgrade from 6.3 to 7.0.  Implemented F5 hardware refresh of older 3600 hardware to Viprion.  Worked extensively on Cisco ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.  Building the VPN tunnel and VPN encryption.  Mapped, Network Diagrams and physical identification in MS Visio.  Preformed IOS upgrades on Cisco routers and switches  Configured Cisco 2800, 3800 routers and 3750, 4500, 6500 switches as part of the implementation plan. Nintendo, Redmond, WA Sr. Network Engineer

Sep 2016 – July 2018

Responsibilities:  Experience with configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card (module) for the Nexus 5000.

Gurpreet Singh Certified Network Engineer            

_____________________________________________________________________________________ Experience working with Nexus 7018/7010, 5020, 5548, 2148, 2248 devices Involved in upgrading switches from 6500 E to 4500-X. Implemented BGP to optimize WAN routing on the core and edge routers. Mutual redistribution of OSPF and BGP routes using route maps. Experience in Layer 3 routing - Cisco Routers: 2500, 2600, 3600, 3800, 3900, 7200 series, ASR 9000, 9001, 9006 series Involved in upgrades to the WAN network from existing 7200vxr with ASR1004 and 3845/3945 routers. Palo Alto design and installation (Application and URL filtering, Threat Prevention, Data Filtering).  Configuring rules and Maintaining Palo Alto & Analysis of firewall logs using various tools.  Build Cisco UCS 6200 series fabric interconnects. Involved in design and implementation of Data Center Segmentation and worked on implementation strategies for the expansion of the MPLS VPN networks. Recommend and design equipment configurations for LAN/WAN/VOIP deployment on Cisco, Adtran, Fortinet, F5, Radware, and Bluecoat. Assisted in layer 2 issues with the senior engineer as well as monitor the status of the network with Solar winds for the LAN/WAN and Cisco Prime for the wired and wireless LAN. Tools which we use in the project are DC, IDS, IPS, ASDM, CSM and traffic generator tools like BPS, IXIA.

  Adding websites to blocked list on the bluecoat proxies based upon business requirements.  Used internal network monitoring tools such as Solar Winds to ensure network connectivity and Protocol analysis tools to assess the network issues causing service disruption.  Provides direct support for all hardware moves, add and changes for the VoIP devices and troubleshot with customers on-site and remote.   In-depth knowledge of Cisco ASA and Juniper Net screen Firewall security, spanning-tree, VLANs, TCP/IP, RIP, OSPF, QoS, VRRP and VPN technologies.  Worked on F5 BIG-IP LTM 8900, configured profiles, provided and ensured high availability.  Provides Level-3 incident response and problem management support for IP Telephony platforms, interfacing with other key Corporate IT teams, such as LAN, WAN, Security and/or IT Service Center   Worked on F5 and CSM load balancers deploying many load balancing techniques with multiple components for efficient performance.  Configuration and maintenance of routers, firewalls, and load-balancers. Included configuration of Juniper ISG 2000, F5 BIG-IP 3600, and Cisco 6500. Includes protocols such as MPLS, BGP, OSPF, and VRRP.   Also worked with Cisco ASA's 5505 and 5520, 5512X, 5515X.  Developed and implemented core network consolidation plan. Included redundant configuration of Juniper EX8200.  Racking, Stacking, configuring, Nexus 5K, 7K, and 9K, Static pinning fabric interface connection, PortChannel fabric interface connection, configuring a Fabric Port Channel Created Build-Outs of New Safe Zone in Palo Alto Panorama VLANs, VIP, IP, VRF, BGP.   Configuring Static, IGRP, EIGRP, and OSPF Routing Protocols on Cisco ASR 9000, 9001, 9006, 6500 series Routers.   Rebuild and migration of Aruba 6.x environment to Aruba 8.x  Install, configure and manage Cisco ISE and Aruba Clearpass for NAC security  Created labs for F5 APM, ASM, and LTM implementations of Microsoft Exchange, Microsoft SQL, Microsoft IIS services, LAMP servers.

Gurpreet Singh Certified Network Engineer _____________________________________________________________________________________  Expert in troubleshooting F5 software modules, including BIG-IP LTM, ASM, APM, and iRules (TCL-based script).  Created VSYS Builds from Checkpoint to Palo Alto Panorama Database Zone, Access Zone.   Migrated over 50+ 3845 infrastructure to a 3945 series router. The new platform positioned corporatewide move to IPv6 to support depletion of IPv4.   Identified opportunities for implementation of network best practices, particularly F5 load balancer implementations.  Configuration and troubleshooting on HSRP, VRRP, GLBP, RSTP, MST related issues coming in network environment  Put together Cisco BoM in preparation for IP Telephony migrations.  Involved in the redesign of the routing architecture while replacing the 6500’s edge routers with ASR 9K routers in the data centers.  Migration of existing IPSec VPN tunnels from Pre-Shared key to Certificate Authority for purpose of scaling  Hands on experience in deployment of GRE tunneling, SSL, Site-Site IPSEC VPN and DMVPN.  Configuring and maintaining the Network connectivity to Cloud Providers such as AWS, Azure using AWS VPC, AWS Direct.  Experience in migration of data to Cloud environment. Good working knowledge of Azure and AWS.  Aruba Clear Pass Policy Manager configuration and installation for VMWare appliance and hardware appliance   Handling Checkpoint and Checkpoint firewalls appliances, Checkpoint Provider-1/Multi-Domain-Mgmt. the, Check point Smart Console R70.20 & R75.40, R77.10, R77.20.   Implementation and configuration of GLBP/HSRP on multilayer switches for first hop redundancy  Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed Solera Holdings, Westlake, TX

Jan 2014 – Aug 2016

Sr. Network Engineer Responsibilities:  Configuration 7609, 7606 with OSPF and catalyst 6505, 4500, 3550 switches with various VLAN.  Create and test Cisco router and switching operations using OSPF routing protocol, ASA Firewalls, and MPLS switching for stable VPNs.  Use SonicWall for inbound messaging scan's. Have also performed and full administrational duties on SonicWall also use F5 BigIP.   Configuration and troubleshooting link state protocols like OSPF in single area and multiple areas.  Redesign of Internet connectivity infrastructure for meeting bandwidth requirements.  Configured HSRP and VLAN trucking 802.1Q, VLAN Routing on Catalyst 6500 switches.  Optimized performance of the WAN network consisting of Cisco 3550/4500/6500 switches by configuring VLANs.  Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.  Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.

Gurpreet Singh Certified Network Engineer       

           

     

  

_____________________________________________________________________________________ Configuration and troubleshooting of Cisco 2500, 2600, 3000, 6500, 7500, 7200 Series routers. Providing Technical Support and solutions for Network Problems. Implementing NAT solutions on wan applications. Planned, tested and evaluated various equipment's, systems, IOSs and procedures for use within the Network / security infrastructure. Upgrading IOS, troubleshooting network outages. Continually monitor, assess and improve network security, test and implement new security technologies. Participate in all technical aspects of LAN, WAN, VPN and security Internet Service projects including, short and long term planning, implementation, project management and operations support as required. Identified opportunities for implementation of network best practices, particularly F5 load balancer implementations.  Monitor performance of network appliances and WAN utilizing using network analyzer like Wireshark. Responsible for providing support for IT infrastructure in the laboratory. Surveillance activities for physical and virtual switches. OpenFlow, 802.1x and MAC authentication test. Deployed BIG IP Enterprise manager to cluster all the F5 LTM, GTM, ASA, Netscreen devices for easier management and common configurations. Involved in the migration of F5 Local traffic managers of LTM 5100 series to LTM 6800 series for higher security. BigIP ASM Positive and Negative Policy Reinforcement, iRule, Full proxy for HTTP, Server Performance Anomaly Detection. Design and integration of Juniper SSG series firewalls, SA VPN Appliances, J series Routers and EX-series switches. Configuring Routing protocols like BGP, OSPF, MPLS, multicast and L2 protocols in ASA to check it is passing through via ASA in customer deployments. Maintenance and trouble-shooting of LAN, WAN, IP Routing, Multi-Layer Switching. Perform Packet Shaper Bluecoat 75000 OS upgrade, maintenance and configurations Shipping Aruba bundle to work with home users Palo Alto/Checkpoint Firewall troubleshooting and policy change requests for new IP segments that either come on line or that may have been altered during various planned network changes on the network. RTMT experience with VoIP and VoSIP (monitoring clusters). Configure Aruba routers for work at home Humana employees.  Responsible for providing Certification and Accreditation support for Cisco VoIP systems and helping with Voice Engineering efforts. Optimizing and monitoring the performance of a WLAN, LAN, WAN and user's segments Maintain connectivity for approximately 300 switches and routers in a 500+ node network. Troubleshooting any and all network problems involving LAN, WAN, BGP, EIGRP, MPLS/VPN, VRF – VPN Routing and Forwarding Instance, SIP Trunking, Internet ISP, Multi homed - BGP with Level-3 Datacenters. Working with MPLS Designs from the PE to CE. Involved in design and implementation of Data Center Migration, worked on implementation strategies for the expansion of the MPLS VPN networks Design and deployment of MPLS QoS, MPLS Multicasting per company standards.

Gurpreet Singh Certified Network Engineer _____________________________________________________________________________________ Virtusa, India Network Engineer

Feb 2012 - Nov 2013

Responsibilities:  Actively participated and completed many projects based on MPLS VPN, Internet Solutions for corporate customers Backbone.  Hands-on experience working with Cisco 7600, 12K, ASR routers & Juniper MX series and Juniper BRAS.  Currently working on a wireless upgrade project for Allegheny Health network and their EPIC roll out.   Verifying IPv4/IPv6 Addressing Architecture.   Verifying Dynamic Host Configuration Protocol for IPv6 (DHCPv6) and DNSv6 options.   Performed wireless network design, site surveys, as well as Troubleshooting and repairing any issues that occurred on site.  Managing proxy server for branches and head office for internet access through Bluecoat Proxy SG600 for URL Filtering, traffic acceleration and visibility reporting with Bluecoat reporter.   Configuration and troubleshooting of many link types i.e. SONET Controllers for sub E1/T1, E3/T3 and POS controllers for STM1 links.  Provided tier 3 support for Checkpoint Firewall-1 software to support customers.   Work on Checkpoint Platform including Provider Smart Domain Manager. Worked on configuring, managing and supporting Checkpoint Gateways.   Implementation and testing of ISDN BRI/PRI circuits.  Migrated Vlans from ASA (perimeter firewalls) to FWSM’s for better security management  Responsible to troubleshoot the connectivity between CPE router and the COLT's edge router (SAR).  Worked closely with RIR (Regional Internet Registry) to procure PI (Provider Independent) and PA  Responsible for troubleshooting complex networking issues in service provider MPLS & internet  Aggregately) IP addresses and AS numbers for COLT and customers.  Set up DNS Reverse Delegation according to RIPE rules in RIPE Database.