Bikramjit Randhawa Email and Phone Number

Responsibilities: . Worked Procedures and Technologies for F5, ISE , Riverbed , Cisco Prime , WUG, DHCP and IPAM, DMVPN. . Worked in Cloud Networking for EC2 , VPC, TGW, IGW, C2, Beanstalk, EFS, EBS, ELB, ALB, NLB, ASG, RDS, Aurora, ElasticCache, Route53, CloudFront, AWS- Accelerator, AWSAmlify, LAMBDA, APIGateways, ECS, DynamoDB, Neptune, S3, ElasticCache, OLDB, Redshift, Kinesis Data Analytics, Glue, CloudWatch logs, CloudWatch Alarms, Event bridge, Cloud Trail, VPC , DDoS Protection, VPC Peering, VPC Flow Logs, VPC,Endpoint, Direct-Connect, Disaster recovery- DMS, Kinesis, CloudFormation, SNS, SSM, SQS ,Active MQ.. Creating external facing NLB , ALB and F5 instances with Terraform using Github Workflow.. Creating ISE policy for Blocked list Identity Group, Maintenance and upgrade Activity on ISE Cluster.. Configuring Integration of CloudWatch Metrics and Dynatrace and creating Activegate in Networking Account for Transit Gateways in Dynatrace.. Experience with configuring BGP, OSPF ,IPAM (IP Address management) system for a very large WAN/LAN network (QIP) using Solarwinds IPAM and Infoblox DNS/DHCP servers.. Routers (4800, ASR 9K, 800), and Firewalls, Nexus 7k,5k & 2k, f5 BIG IP, Palo Alto Firewalls, Zscaler Proxy and Versa SD-WAN appliances,Migrated Nexus 7Ks & Nexus 5Ks to an ACI Fabric consisting of 9336PQ Spines & 9332PQLeafs.Worked with Cisco Channel partners to build practices around Cisco ACI, worked on configuring tenant policies, VXLAN, VTEPS, VNI, Bridge Domains. Automated network implementations and tasks and designed monitoring tools using python scripting.Worked on Riverbed steelhead appliance to troubleshoot delay, jitter issues. Captured traffic and analyzed for root cause. Wrote policies and rules in steelhead.. Worked on critical applications on Layer 4 and layer 7 load balancing. Experience with Virtual server, Pool, Node, Profiles – TCP, http, https, ftp, fastl4, Persistence –

• Installing, configuring Cisco Catalyst switches 9300,6500, 3750 & 3550 series, Access control lists, ISDN, ATM, load balancing switches and configured IPX/SPX, HDLC, BGP, EIGRP, OSPF and VRRP on various sites. • Worked on stacking of the devices based on the network requirement with Cisco Catalyst 9300 series depending on the requirement with a stack count of 8, 6, 2, 3.• Created S3 buckets in the AWS environment to store files, sometimes which are required to serve static content.• Used security groups, network ACL’s, internet gateways and route tables to ensure a secure zone for organization in AWS public cloud.• Configured L2 and L3 security features on devices • Experience with design and implementation of Virtual Switching System (VSS) on 9400 Switches• Implemented Cisco Meraki Enterprise Wireless solutions for corporate infrastructures.• Performed upgrade process for Cisco ISE software from version 1.0.4 to 1.1 ADE-OS• Hands on experience installing and configuring Cisco ISE 1.3 and later upgrading to 1.4. • Intensive applications of Network automation tools and testing for network automation and configuration management using Ansible , Python scripting.• Installing, Configuring and troubleshooting Cisco Routers (ASR1002X, 3945, 3845, 2800, 3600) and Switches to perform functions at the Access, Distribution, and Core layers.• Configuring HSRP between VLANs, Configuring Ether-Channels and Port Channel on Cisco 9300 catalyst switches• Experience with Cisco ACI (Application Centric Infrastructure) SDN architecture to reduce operating costs, automate IT tasks, for greater visibility and scalability in a data center environment.• Worked with Cisco Channel partners to build practices around Cisco ACI, worked on configuring tenant policies, VXLAN, VTEPS, VNI, Bridge Doamins.• Worked with Tufin secure change-firewall optimization tool to implement rules.

• Scripting for automation of processes for Windows Servers. Familiarity with main script languages like Power Shell, PHP, Shell, Perl, Python.• Proficient in Palo Alto Next-Generation Bluecoat web proxy, HP ArcSight, Splunk Enterprise, Wireshark, FireEye, and various internet tools to assist in analysis.• Responsible in troubleshooting on Cisco ISE added new devices on network based on policies on ISE.• Performed site refreshes on Cisco switching and Aruba wireless infrastructure.• Used Bluecoat Proxy SG Appliances to effectively secure Web communications and accelerate the delivery of business applications.• Hands on experience in Aruba S2500 switches, Aruba 7200, 3600 series wireless controllers.• Migrated from Cisco 3650 switches to Aruba 3810 series switches.• Integrating Panorama with Palo Alto Firewalls, managing multiple Palo Alto Firewall using Panorama.• Worked with Enterprise Intrusion Detection / IPS (Snort, Source fire, Juniper IDP, IBM ISS).• Implementation of L3 MPLS-VPN and Migration of branches to the new MPLS cloud4.• Expert in configuring, implementing and troubleshooting A10 load balancer in the enterprise network• Test and implement cisco ACI based network infrastructure as open stack underlay network• Update customer networks by configuring routers, switches, and incorporate the SDWAN into the network design.• Configured Site to Site IPsec VPN tunnels to peer with different clients and each of client having different specifications of Phase 1 and Phase 2 policies using Cisco ASA 5500 series firewalls.• Optimized IPS signatures on the Cisco Fire Power management center to reduce false positives by disabling unnecessary rules and using the threshold, suppression, and pass rules features.

• Configuring and troubleshooting multi-customer network environment.• Involved in network monitoring, alarm notification, andacknowledgment.• Implementing new/changing existing data networks for various projects as per the requirement.• Troubleshooting complex networks layer 1, 2to layer 3 (routing with BGP, EIGRP, OSPF protocols) technical issues.• Performing troubleshooting for IOS related bugs by analyzing history and related notes.• Carrying out the documentation for tracking network issue symptoms and large-scale technical escalations. • Managing the service request tickets within the phases of troubleshooting, maintenance, upgrades, fixes, patches and providing all-around technical support.• Commissioning and Decommissioning of the MPLS circuits for various field offices.• Preparing feasibility report for various upgrades and installations.• Ensure Network, system and data availability and integrity through preventive maintenance and upgrade.• Involved in L2/L3 Switching Technology Administration including creating and managing VLANs, Port security, Trunking, STP, Inter-VLAN routing, LAN security