Mohan Krishna
Raleigh,USA
Summary
Network Engineer (SME) with 12+ years of experience in designing, implementing, and troubleshooting complex network architectures, specializing in Cisco Application Centric Infrastructure (ACI) and data center solutions. Proven expertise in optimizing network performance, enhancing security, and driving technological advancements.
Overview
11
11
years of professional experience
1
1
Certification
Work History
Sr. Network Engineer
State of North Carolina
12.2021 - Current
- Implemented and maintained DNS/IPAM solutions to support robust network operations and address management
- Configured and managed multiple firewall platforms, including Palo Alto Networks, FortiGate, Cisco ASA, and FTD, enhancing network security posture
- Administered load balancing systems, including F5, to ensure high availability and optimal performance of network services
- Managed tapping/sniffing infrastructures, providing critical network traffic and performance insights
- Ensured precise timekeeping across network devices by configuring and monitoring NTP servers and clients
- Optimized network performance and redundancy using EIGRP, BGP4, RIP, VPLS, and MPLS in multi-vendor environments, including Cisco and Juniper Networks
- Actively maintained Cisco CCNP certification, keeping current with the latest networking technologies and best practices
- Utilized Dynatrace for network performance management
- Specialized in designing and implementing large-scale network solutions, including DNS/IPAM, NAC, and load balancing in support of daily business operational requirements
- Successfully managed and executed network system upgrades and maintenance across various platforms, including Cisco Nexus and Catalyst switches
- Provided high-level troubleshooting and analytical work to ensure network security and integrity, utilizing Cisco firewall platforms, IDS, IPS, and integrated third-party authentication services
- Enhanced network performance through comprehensive knowledge and management of telecommunications, network software/hardware, and transport systems
- Conducted thorough evaluations and recommendations for resolving complex operational problems within WAN/LAN systems
- Designed and implemented robust security logging systems, VLAN security, and IP telephony security measures
- Spearheaded the IPv4 migration to IPv6, ensuring seamless transition and network compatibility
DLP Security Engineer
State of Maryland
01.2019 - 12.2021
- Experience working with Cisco IOS-XR on ASR9000 devices for MPLS deployments
- Involved in troubleshooting complex network infrastructure using routing protocols like EIGRP, OSPF, and BGP
- Installed and configured Cisco Catalyst switches (6500, 3750, 3550 series) and configured routing protocols (OSPF, EIGRP, BGP) with Access Control Lists
- Incorporated Cisco Nexus 9000 NXOS into ACI fabric to integrate with existing Nexus 7000s and ASRs for MPLS
- Tested JUNOS images on Juniper MX and T series router platforms, covering protocols and technologies like OSPF, BGP, LDP, MPLS, Layer3 VPNs, and VPLS
- Certified different lab setups, including layer3 protocols (BGP, OSPF, MPLS, VPN, VPLS, ISIS)
- Experienced with traffic generators such as IXIA/SPIRENT
- Implemented L2 and L3 switching functionality, including VLANs, STP, and VTP, for network infrastructure requirements and security
- Configured Site-to-Site VPN tunnels and DMVPNs
- Configured tunnels to AWS and resolved related troubleshooting issues
- Troubleshot SAN-related issues and performed firmware upgrades of SANs in VMware
- Responsible for setting up infrastructure environments with Cisco and Palo Alto appliances
- Implemented Zone Based Firewalling and Security Rules on Palo Alto firewalls
- Monitored and troubleshot traffic on Palo Alto-5250 firewalls
- Deployed 7613 as PE and CE routers and configured and troubleshot edge routers
- Created and delivered internal trainings for BGP
Sr. Network Engineer
BMO Harris Bank
06.2018 - 12.2018
- Optimized WAN performance by configuring VLANs on Cisco 3550/4500/6500 switches
- Coordinated with engineers to ensure network device compliance with defined network standards
- Demonstrated dedication and personal responsibility in delivering and managing VOIP systems
- Configured routing protocols including RIP, OSPF, EIGRP, and static routing
- Maintained core switches, created VLANs, and configured VTP
- Performed redistribution with OSPF, EIGRP, RIP versions 1 and 2 for backbone communication
- Troubleshot Cisco 2900, 3900, 6500, 7500, and 7200 series routers
- Configured static NAT, dynamic NAT, and dynamic NAT overloading
- Backed up and restored Cisco IOS from a TFTP server
- Possessed in-depth expertise in LAN/WAN system implementation, optimization, troubleshooting, and documentation
- Designed, implemented, and troubleshot temporary infrastructures for live webcasting events
- Involved in F5 BIG IP LTM administration, with familiarity in enterprise-level traffic managers (6800, 3600, 1600, 3400 series)
- Updated VIPs for pools and pool members and updated iRules for new DNS entries
- Upgraded Cisco routers and switches IOS using TFTP
- Installed and configured Cisco IP Phones (794x, 796x, 7937) and IP Communicator
- Created dedicated VLANs for voice and data with QoS for voice prioritization
- Installed and managed LAN/WAN systems, including network layout design, configuration, maintenance, and commissioning of routers, switches, firewalls, and IPS, ensuring maximum uptime for VoIP deployments
- Configured and managed various IP phones (7941, 7961, 7971)
- Possessed knowledge of VOIP protocols like H.323, RTP, and SIP, with a strong understanding of VOIP devices
- Performed packet capture and troubleshooting of network problems using Wireshark
- Conducted network monitoring and analysis using tools such as Wireshark and SolarWinds
- Implemented and configured F5 Big-IP LTM-6400 load balancers
- Experienced in converting Checkpoint VPN rules to Cisco ASA solutions, with migration experience in both platforms
- Responsible for Cisco ASA firewall administration across global networks
Sr Network Engineer
Purdue Pharma
06.2016 - 05.2018
- Experience working with Cisco IOS-XR on the ASR9000 devices for MPLS deployments
- Involved in the troubleshooting aspects of complex network infrastructure using the routing protocols like EIGRP, OSPF & BGP
- Installing, configuring Cisco Catalyst switches 6500, 3750 & 3550 series and configured routing protocol OSPF, EIGRP, BGP with Access Control lists implemented as per Network Design
- Management of SolarWinds Orion Suite - Network Performance Monitor, Network Configuration Manager
- Experience on dealing with Cisco Application Centric Infrastructure (ACI) by integration hardware and software products as per network layout
- Incorporate Cisco Nexus 9000 NXOS to ACI fabric to work in concert with existing Nexus 7000s and ASRs for Multi-Protocol Label Switching (MPLS)
- Testing JUNOS images on Juniper MX & T series router platforms covering various protocols and technologies like OSPF, BGP, LDP, MPLS, Layer3 VPNs, and VPLS
- Configuring the 3700 Access point and 5508 Wireless LAN Controller and Monitoring them by adding to the Cisco Prime Infrastructure
- Troubleshooting Citrix NetScaler content switching configurations
- Installed SolarWinds Network Performance Monitor with emphasis on traffic analysis, application and virtualization management
- Design, implementation, and proficiency in configuring various Fortinet firewalls Fortigate-620C,60B, 60D, Forti WI-FI 60D
- Have hands on experience with CISCO unified wireless testing network CISCO WCS, and on CISCO PRIME
- Have experience on wireless software’s TRUVIEW AND WLC GUI
- Experience in layer-3 Routing and layer-2 Switching
- Dealt with Nexus models like 7K, 5K, 2K series
- Upgrading and deployment of Nexus 7k, 5k and 2k
- Experience with Cisco ASR’s, Catalyst 6500 series switches, 2800 series, and 3800 series
- 2900 series and 3900 series routers
- Coordinating with service providers like AT&T, Verizon etc
- For all network outages /restoration/new implementations
- Experience of Administer Infoblox DNS/DHCP/IPAM environment
- Configuration and maintain DNS, DHCP and Domain Controllers
Sr Network Engineer
State Farm Insurance
06.2014 - 08.2016
- Experience configuring and implementing of composite Network models consists of Cisco ASR 1K, 7600, 7200, 3800 series routers and Cisco 2950, 3500, 5000, 6500 Series switches
- Designing and implementing LAN/WAN solutions across locations
- Experience in Data centers consolidation, design, management and supporting network activities
- Configuring the LAN/WAN devices across locations for day-to-day operations
- Networks using routing protocols such as RIP, OSPF, BGP, EIGRP and manipulated routing updates using route-map, distribute list and administrative distance
- Good Experience in configuration of routing protocols and deployment of OSPF, EIGRP, BGP and policy routing over Cisco routers
- Design, implementation, and proficiency in configuring various Fortinet firewalls Fortigate-620C,60B, 60D, Forti WI-FI 60D
- Design and define Cloud solutions in a Virtualized environment using cloud controllers such as Juniper Contrail and Cisco Tail-F using SDN network elements
- Configure Cisco Nexus 9k,7k,5k and 2k in a Spine and Leaf network
- VPC/Port channel configuration, OTV/Fabric Path between data Centers Vlans
- Continuous monitoring of FortiGate firewalls installed in more than 2000 franchise stores in various locations worldwide using an IP-monitor monitoring tool
- Maintaining Checkpoint security policies, including NAT, VPN, and Secure Remote access, Configuring IPSEC VPN (Site-Site to Remote Access) on SRX series firewalls
- Interact with various ISP's and vendors like Cisco, FortiGate, F5, Level 3 to consider physical circuit and hardware related problems in MSIT network infrastructure
- Experience on Checkpoint Firewalls NG, NGX R65, R70, R75, R77, NSX (VMware Network)
- Integrated VMware virtual machines to the test lab environment
- Implemented and administered Websense Web Security Gateway for web content filtering and DLP
Education
B. TECH - ECE
JNTU
01.2012
Masters in EE -
university of Bridgeport
Bridgeport, CT01.2014
Skills
- Network Architecture & Design
- Cisco ACI & DNAC
- Security & Firewalls
- Load Balancing & Network Services
- Network Monitoring & Troubleshooting
- Routing & Switching
- Project Management & Implementation
- Customer & Technical Support
- Technical & Operational Expertise
- Performance Testing
Certification
- Cisco Certified Network Associate (CCNA)
- Palo Alto Certified Network Security Engineer (PCNSE)
- Cisco Certified Specialist Enterprise Core (CCNP)
- Symantec Certified Specialist
- Certified Fortinet FortiGate 7.2 Administrator
Timeline
Sr. Network Engineer
State of North Carolina
12.2021 - Current
DLP Security Engineer
State of Maryland
01.2019 - 12.2021
Sr. Network Engineer
BMO Harris Bank
06.2018 - 12.2018
Sr Network Engineer
Purdue Pharma
06.2016 - 05.2018
Sr Network Engineer
State Farm Insurance
06.2014 - 08.2016
Masters in EE -
university of Bridgeport
- Cisco Certified Network Associate (CCNA)
- Palo Alto Certified Network Security Engineer (PCNSE)
- Cisco Certified Specialist Enterprise Core (CCNP)
- Symantec Certified Specialist
- Certified Fortinet FortiGate 7.2 Administrator
B. TECH - ECE
JNTU
Similar Profiles
Ashley CameronAshley Cameron
Revenue Administrative Officer at State of North Carolina, Department of RevenueRevenue Administrative Officer at State of North Carolina, Department of Revenue
Blake HillBlake Hill
Probation Officer at State of North CarolinaProbation Officer at State of North Carolina
Todd LamimanTodd Lamiman
Juvenile Detention Officer at State Of North Carolina, Dept. Of Public SafetyJuvenile Detention Officer at State Of North Carolina, Dept. Of Public Safety