Karthik N

Experience

• 

  CITYLAND TECHNOLOGIES PRIVATE LIMITED

  Apr 2014 - Jun 2015

  Network Administrator

  I have extensive experience in deploying and managing various networking technologies across enterprise environments. This includes EIGRP/BGP redistribution, adjusting metrics for primary and backup paths to ensure optimal performance and redundancy. I have worked with Riverbed WAN optimization devices to enhance WAN bandwidth utilization in data center environments, improving overall network efficiency. Additionally, I have performed troubleshooting for DHCP and IP conflict issues, ensuring reliable network addressing.My expertise in Layer 2 switching includes configuring and managing VLANs, inter-VLAN routing, trunking, spanning tree, RSTP, and port aggregation. I have also handled Quality of Service (QoS) and VoIP configurations on Cisco Layer 2 switches to optimize traffic flow. On the routing side, I have managed and configured RIP, OSPF, and BGP protocols, ensuring efficient routing across the network. I have also configured Access Control Lists (ACLs) to regulate access and ensure the security of applications and network resources.I have provided tier 3 support for Checkpoint and Cisco ASA firewalls, including backup and restore of firewall policies, and have maintained Checkpoint security policies involving NAT, VPN, and secure remote access solutions. I designed and implemented remote access solutions using Checkpoint Firewalls Site-to-Site VPN blade, ensuring secure connections across multiple locations. In addition, I have significant experience analyzing firewall logs to troubleshoot and ensure the integrity of network security.I have worked extensively with Cisco routers (2500, 2600, 3640, 3945, 7200 series) and Catalyst switches (6500, 4500, 3560, 2950, 2924 series), configuring and troubleshooting complex network setups. My experience also includes the design and implementation of branch network systems, ensuring smooth integration and resolving network issues as they arise. Show less

• 

  IBM

  Jul 2015 - Sept 2019

  Network Engineer

  This role involves extensive experience in configuring, deploying, and maintaining a wide range of network devices and technologies across data center and enterprise environments. Responsibilities include the installation, configuration, and troubleshooting of Cisco network hardware such as Nexus switches, routers, and firewalls, along with managing and optimizing network infrastructure. The individual has hands-on experience with high-performance data center setups, including the migration from Cisco 6500 to Nexus platforms, configuring Virtual Port Channels (VPCs), Virtual Device Contexts (VDCs), and fabric path configurations. Additionally, the role requires expertise in automating network tasks using Python scripting to streamline network implementation and monitoring. In terms of security and connectivity, the role involves configuring site-to-site IPsec and DMVPN tunnels, deploying Easy VPN and SSL VPN solutions, and managing firewall and NAT rules for secure remote access. The individual also has significant experience working with Cisco ASA and Firepower firewalls, optimizing IPS signatures to reduce false positives, and coordinating the creation and modification of security policies. The individual is proficient in configuring voice ports and dial peers for VoIP systems, ensuring seamless integration with call managers. Moreover, the role includes advanced troubleshooting using network monitoring tools such as Wireshark, TCPdump, and Capsa, particularly for issues related to VPNs, BGP, and firewalls. The person has also worked on L3 MPLS-VPN implementations and migrations to newer MPLS clouds. Collaboration with vendors and engineering teams is key to resolving network issues, deploying new systems, and migrating from legacy infrastructure to modern solutions like Aruba switches and Cisco Firepower management systems. T Show less

• 

  CITI

  Oct 2019 - Aug 2022

  Network Security Engineer

  This role involves extensive experience in configuring, deploying, and maintaining a wide range of network devices and technologies across data center and enterprise environments. Responsibilities include the installation, configuration, and troubleshooting of Cisco network hardware such as Nexus switches, routers, and firewalls, along with managing and optimizing network infrastructure. The individual has hands-on experience with high-performance data center setups, including the migration from Cisco 6500 to Nexus platforms, configuring Virtual Port Channels (VPCs), Virtual Device Contexts (VDCs), and fabric path configurations. Additionally, the role requires expertise in automating network tasks using Python scripting to streamline network implementation and monitoring. In terms of security and connectivity, the role involves configuring site-to-site IPsec and DMVPN tunnels, deploying Easy VPN and SSL VPN solutions, and managing firewall and NAT rules for secure remote access. The individual also has significant experience working with Cisco ASA and Firepower firewalls, optimizing IPS signatures to reduce false positives, and coordinating the creation and modification of security policies. The individual is proficient in configuring voice ports and dial peers for VoIP systems, ensuring seamless integration with call managers. Moreover, the role includes advanced troubleshooting using network monitoring tools such as Wireshark, TCPdump, and Capsa, particularly for issues related to VPNs, BGP, and firewalls. The person has also worked on L3 MPLS-VPN implementations and migrations to newer MPLS clouds. Collaboration with vendors and engineering teams is key to resolving network issues, deploying new systems, and migrating from legacy infrastructure to modern solutions like Aruba switches and Cisco Firepower management systems. Show less

• 

  Abbot Laboratories

  Sept 2022 - Sept 2023

  Senior Network Engineer

  I have extensive experience in configuring and managing a wide range of Cisco network devices, including Cisco routers (ASR 1K, ASR 9K, 7600 series, CSR 1000V), Nexus switches (NX-9K, 7K, 5K, 2K series), and Cisco Catalyst switches (9000, 6500, 4500-X, 3560X, 3750X). My expertise spans across routing protocols such as BGP, OSPF, EIGRP, MPLS, and I have worked with advanced technologies like EVPN, QoS, DMVPN, and IPsec tunneling. I have significant experience troubleshooting Layer 1, 2, and 3 network issues and resolving complex problems related to network infrastructure, including WAN outages, hardware/software failures, and performance issues.In addition to Cisco networking, I have worked with Silver Peak SD-WAN, managing deployments and providing support for branch offices. I also have hands-on experience with Palo Alto firewalls, configuring high availability (HA) pairs, Global Protect VPN, and implementing enterprise-grade wireless security methods like WPA3, 802.1X, and RADIUS integration for secure remote user access. Furthermore, I have managed VPNs, including Site-to-Site IPsec VPNs over the internet using ASA-55xx firewalls, and performed ISSU upgrades on Nexus 7010 devices.I have been responsible for network upgrades, software installations, and license activations, along with creating and maintaining network documentation. I also have experience with the configuration and maintenance of various security features, including IPS, DLP, UTM, URL filtering, and content filtering using tools like Palo Alto and Bluecoat Proxy SG. Additionally, I have contributed to data center migrations, including moving from Frame Relay to MPLS WAN links, and have optimized wireless network setups in large environments such as hospitals and universities. Show less

• 

  Samsung

  Sept 2023 - now

  Senior Network Engineer

  I have extensive experience in configuring and maintaining various network devices and technologies, including Cisco GSR routers (7000, 12000), Nexus switches (9000, 5000, 3000 series), F5-5050, and the configuration of FabricPath between Nexus 5K and Nexus 7K. My responsibilities have included software upgrades, license activation, and creating detailed network documentation. I have worked on high-performance data center switches like the Nexus 7000 and 9000 series, and have hands-on experience configuring and managing Cisco Nexus 7010/7018, as well as VPC (Virtual Port Channel) and VDC (Virtual Device Context). Additionally, I configured Nexus 2000 Fabric Extender (FEX) to connect servers and storage devices, and supported data center deployment by transitioning from Cisco 6500 to Nexus platforms.I have worked with a wide range of network technologies, including configuring FCOE on Nexus 5548, deploying Cisco Meraki MX64/MX65/MC84/MX400, and implementing site-to-site VPNs using Cisco ASA 5500 and Meraki firewalls. I also have experience configuring and troubleshooting DMVPN tunnels for MPLS and ISP cloud integration, and managing IPsec VPN tunnels with varying Phase 1 and Phase 2 policies across different clients.In addition to network configuration, I have automated network implementations and designed monitoring tools using Python scripting, and have been involved in the upgrade and migration of firewall technologies, including Cisco ASA to Firepower 2100/4100, with ASA logical systems and FTD. I have performed advanced troubleshooting using tools like Wireshark, TCPdump, and Capsa, and have coordinated with vendors for firewall and NAT rule modifications. I also implemented L3 MPLS-VPN, migrated branches to a new MPLS cloud, and worked with engineering teams to resolve L3/L2 issues efficiently. Show less