Rajesh Kumar

• Handling small team for providing solution, deployment and operation of Network, Security and Automation.
• Maintained frequent interaction with senior management to measure goal achievement and determine areas of improvement.
• Presentation of analysis reports, and records.
• Providing engineering support at different levels.
• Automated network throughput testing based on RFC standards.
• Dynamic bandwidth configuration on Cisco routers.
• Cisco IOS upgradation with API trigger.
• Controller-less Hybrid SDWAN solution based on QoS and BGP
• SDWAN solution with SASE in mind.
• WAN Optimization solution.
• Cloud networking solution in public cloud.
• Ansible Tower, Python 3.x, REST API, VMware vSphere suite, Fortinet SDWAN, f5 LTM, AWS and Azure cloud hosting.

• Maintained a team of 6 engineers across multiple locations in India and USA.
• Migrated network and services from on premise data center to AWS public cloud with IaaS and PaaS.
• Provided VPN based solution facilitating hub-spoke topology for stores to head-end connectivity.
• Maintained Palo-Alto devices with Panorama for network security.
• Provided Prisma Access as remote vpn solution for remote workers.
• Migration of DNS from Infoblox DDI to Hybrid DNS solution.
• Configured Akamai WAF to secure e-commerce websites.
• Provisioned and defined policies in Cisco ISE for EAP-TLS based authentication for corporate users(wireless).
• Migrated f5 LTMs to AWS ELB as per requirement.
• Representing Network and Security team in Scrum calls.
• Providing guidance with Prisma Access and Fortinet SDWAN solution.
• Planning and designing migration of network services and tools to AWS cloud.

• Migrating of Data center services from physical to VXLAN EVPN based hyperconverged network.
• Planning and designing network, WAF and load-balancer changes to fulfill business requirements with cross-teams and stakeholders.
• Representing changes in CAB for approval from stakeholders.
• Authorizing changes for network, firewall, and load-balancers.
• Creating HLD, LLD, Design Briefs and network diagrams and firewalls.
• Planned and designed Barracuda WAF.
• Deployed Cisco AnyConnect as remote vpn solution to facilitate WFH.
• Keeping and updating SharePoint with latest documents.
• Providing internal training and mentorship to other technical teams.

• Designing solution based on, VMware NSX and Cisco Nexus and ACI for hyperconverged connectivity.
• Providing SDN solution (in NFV), migration from legacy to SDN.
• Migrating from legacy design to application centric design.
• Preparing HLD/LLD in MS Visio.
• Performing Capacity management for network solutions, including disaster recovery site, high-availability and backbone connectivity.
• Providing solution design for connectivity to public cloud like AWS, azure and private cloud (infrastructure services and App to DB connectivity)
• Following agile framework for solution delivery, working with stakeholders and project managers to meet the requirement.
• Designing, implementing and supervision of fabric-path, OSPF, BGP and IPSEC tunnel within DC and with cloud platforms based on kind of connectivity requested.
• Designing and overseeing implementation of Load balancer (single and dual arm) and firewall.

• Managing a team cross-cultural team of 8 (NOC and SOC) for maintaining 24*7 env and ensuring issues are resolved under agreed SLA for Datacenter and remote offices across globe.
• Creating and maintaining flow design, HLDs in MS visio.
• Configuring Load balancers, generating/configuring certs, creating, modifying and deleting VIPs as per requirement, working on custom irule to fit technical requirements.
• Build, configured and managing CISCO ACS, ISE, and PRIME for corporate network.
• Creating and managing DNS records(A,PTR,MX)C-NAME, IPAM management(IP address allocation).
• Troubleshooting with tools like TCP dumps and Wireshark.
• Sitting on bridge, working with other teams to carry out RFCs and/or troubleshooting network related issue.
• Designed and implemented multi-homed connection to DCs. Manging Public IP addresses and public BGP ASNs.(ARIN)

• Managing Data Centre network by establishing and troubleshooting connectivity for mission critical application, ensuring that customer’s traffic is passing through to server farm through LB as per standard and requirement.
• Configuring Load balancers (LTM and GTM), generating/configuring certs, creating, modifying and deleting VIPs as per requirement.
• Creating and implementing CC (Change Control) by changing the configuration at Cisco ASA55xx, Checkpoint R76, Load-balancers (F5, CSM, Array), NEXUS,6500,4500 Switches.
• Network Design as per requirement.
• Adding or removing of ACL, NAT from CISCO ASA and FWSM.
• Troubleshooting with tools like TCP dumps and Wireshark.
• Sitting on bridge, working with other teams to carry out RFCs and/or troubleshooting network related issue.

• Hardening of CISCO routers and switches (aaa model,baner,tacacs).
• Adding, deleting nodes in F5 load-balancer, adding rules at Checkpoint Smart dashboard.
• Managing Cisco ASA, IPsec tunnels.
• Making IT Auditing, IT Risk & Compliance report.
• Adding or removing of ACL from routers and switch.
• Troubleshooting of high-end Cisco devices (Cat 4500,6500 and Nexus).
• Working on RFCs ,IMAC and Remediation projects.
• Point of Contact for escalation for L1 tickets.
• Working on ASSYST( ticketing tool), and Solar-wind (Network Performance Tool )
• Adding and deleting nodes in Solar-wind.

Network monitoring using syslog and world map network tools.

Monitoring of Linux and Unix server.

Reporting L1 tickets to engineering teams as escalation.