VARUN

DUGGALEMAIL:vdccfd1e@westpost.net,VARUN.DUGGAL@CREDIT-SUISSE.COMNETWORK
INFRASTRUCTURE MGMT LEAD201-745-5555SUMMARY:-*
Extensive 8 plus years experience in designing new networks from the
ground-up utilizing various technology, strategies and implementation
methods. Provided evaluation of new network technologies, management,
and analytical tools, as well as tool-based design verification
utilizing network simulation tools.* Expertise in
the area of Networking concepts such as TCP/IP, BGP, OSPF, RIP, IGRP,
EIGRP, PPP, L2TP, IPSec, H.323, SS7, MGCP, SGCP, Wi-Fi, 802.11a,
802.11b, VPN, MPLS, NAT, Cable modem, DOCSIS 1.0, ADSL modem ,VSAT
and VoIP. Hands-on expertise with products from Cisco, Nortel/Althea,
Juniper, Net screen, Nokia, F5, Blue Coat, Foundry,
Avaya,Niksun,Sevone,BMC Patrol,Corvil,HP Open
View.* Designed and Implemented Cisco VoIP and
Managed the Cisco Avvid VoIP network, including Unity Voice Mail,
Unified Messaging, IPCC Express for worldwide
system.* Performed Wireless network site survey,
installation, setup and troubleshooting and Wireless Security setup
WPA 2, WPA, WEP 64, 128 Bit.* Implemented security
using Cisco routers/Switches/ Cisco PIX, Checkpoint Firewall and
authenticated local-net and DMZ.* Experience in
performing detailed technical network security evaluations and
recommendations via vulnerability analysis and penetration
testing.* Applied experience in developing,
testing and monitoring banking & financial software systems
utilizing, industry wide accepted best practices &
technologies.* Fix protocols, live data collection
from trading application, alerting mechanism, Network Infrastructure
management & proactive health prediction, trading strategies & market
data technologies.* Adept in conceptualizing,
analyzing software system needs, evaluating end-user requirements,
custom designing solutions & troubleshooting for complex software
systems. * Hands-on experience of designing
complex software systems using OOPS.* Expertise in
C, C++, C#, Perl scripting on Linux application programming utilizing
waterfall and extreme (Agile: Scrum models) programming
methodology.* Experience in design, installation,
configuration, administration and troubleshooting of LAN/WAN
infrastructure.* Designed and Configuring the WAN
infrastructure, consisting of multiple T1 and T3 lines, Cisco
routers, Cisco switches, Load balancers, Dell and Sun
servers.SKILLS:-Networking:
TCP/IP, Routing
Protocols (RIP, OSPF, BGP, IGRP, EIGRP), PPP, PPTP, L2TP, NAT, IPSec,
H.323, SS7, SGCP, MGCP.LAN, WAN, WLAN, VPN, Frame Relay, Ethernet,
Ether Channel, RIP, EIGRP, OSPF, BGP, ACL, NAT, STP, VTP, VLAN, HSRP,
GLBP, VoIP, multicast protocols, ISIS, LDP, IPSEC, L2TP, QoS, wireless
LAN Network administration.Technologies:
MPLS, VPN, NAT, Multicast,
Routing, ATM, Frame relay, VoIP, SNMP, Broadcast.Traffic Tools:
IXIA, Smartbits, Adtech,
QA-Robot, MGEN, fore switch, iPerf, netPerf, netChariot.Engineering
Tools: DDTS,
Extra view, GNATS, FogBugz, CVS, EDCS.SNMP Tools:
IWL, HP OpenView, UNIX
binariesVoIP Tools:
Cisco Call
Manager, Abacus, AmeriteckFirewall:
 Netscreen, PIX, and Checkpoint
FirewallsCisco Tools:
CSCCON, Pagent,
MibCheckOperating System:
Linux / UNIX / Solaris, Windows NT /
2000 / XP/7, Citrix Hardware:
Cisco 1841,
2100 series, 7200 series, 3550, 4000/5000, 2600, 2950, 2500, 1900
routers and switches, ISE cables, WIC cards, smart serial, ATM cards,
CSU/DSU, T1, DS3 (IMA), OC3, fractional T1, ISDN, V.35, Pairgain,
Cisco Access points and bridges, Cisco Secure
ACSLanguages:
C,C++ with DS, Multi threading, Socket Programming, Perl with
CGI,Shell scripting,VBA,C#,XML and
SQL.Databases:
DB2, ORACLE, SYBASE AND MS SQL 2005
Repository:
Tortoise SVN, TFS and CVS.CLIENT: CREDIT
SUISSE
JULY08 a" PRESENTEXPERIENCE: NETWORK INFRASTRUCTURE MGMT
LEAD* Configuring static NAT, dynamic NAT, inside
Global Address Overloading, TCP overload distribution, Overlapping
Address Translation for connectivity with Exchanges across US and
UK.* Member of Security Assessment and audits,
security policy review and development, Authentication, secure
Client Access, Password Management, Firewalls, Intrusion Detection
and Protection, Virtual private Networks a" including Web VPN,
Anti-Virus, Anti-Spam, Content filtering and Management solution,
Wireless Security.* Designing, requirement
analysis, application development, production deployment, rollout in
Production and proactive Monitoring for three functional areas: -
collection, aggregation and presentation for the application Triana
(Trader infrastructure application and network analysis). Product to
provide holistic monitoring of trading applications and network
infrastructure. Helps taking proactive measures & enhances
effectiveness of Arbitrage trading infrastructure. Target users
include, both Global Arbitrage Traders & its IT support team.
* Lead the initiative in implementing the
Collection function that covers measuring and reporting these
measurements on our infrastructure of Global Arbitrage Trading.
Measurement and collection of metrics covers network (Tier2 Coverage
SNMP Polling Niksun, Corvil Probes), server (Tier 2 Capture utilizes
the Ganglia, Firescope, BMC Patrol Services). and application
transaction latency(Implemented (ARM) and Latency Watchers for
Tier 1 , performance and load. Aggregation covers pulling this
information together into a single consistent data model, including
triggered alerts. Presentation covers presenting this information
to the user through reports, dashboards and programmatic APIs.
* Lead the initiative of managing Application,
Network, and Server Infrastructure Support team in Mumbai COE for US,
UK and APAC Region for Global Arbitrage Trading with TIS Team
(Technology Infrastructure Services) as L3 Support. Monitoring Gaps
for Market data applications like Pulse, Pi.( This system primarily
feeds some Prop Desk Traders, AES ( SOR), Various AMM Desks, and
whole RMDS infrastructure across Globe)* Leading
the initiative for Coordinating with Major World Exchanges
like(NASDAQ,NYSE,BATS,NSX,DIRECT EDGE,PURE,CHIX and many small
Exchanges) for Ultra low latency expectation ( 50-60 microsecond) as
a part of Exchange Connectivity solutions for our world known
Applications like PF(pathfinder),PFD( Pathinfinder
Direct),PF-FX(Pathfinder Foreign Exchange).All are High
performance/low latency/High Capacity system, Product Type Supported
a" Stocks, Future & Options. Supporting Exchange connectivity for
Morning Checks & Evening checks Reports.* Review
all changes to network configuration for technical accuracy and
impact and provide Multi-Protocol Network problem resolutions.
* Core member of security information and event
mgmt technology to evaluate products wit h different vendors like
ArcSight, CA, Cisco, IBM,LogLogic, NetIQ, Novell, Q1 Labs, RSA (EMC),
SenSage and Symantec.* Implemented ArcSight ESM
plus Logger for log management, compliance Reporting, SEM, User and
Resource access monitoring, deployment and support
simplicity.* JIRA Administrator which is used as
an incident management tool to complete the support cycle. As per our
incident management process we are follow the best practices describe
in ITIL standard.* Voice for GAT in Disaster
Recovery and Contingency planning for developing strategic plans
for operations, scaling, processes, cordinatnating with Stake
holders(IT Owners and Managers for QMW for Applications, Servers,
Databases, Networks, Firewall for migration, reporting, setup,
checkouts, Upgrades and record keeping for our Centralized inventory
across CS (CATI) Common Application and Technical
Inventory.* Planned and implemented data center
move With TIS Team from EMA to PDC.Planned, negotiated, implemented
backup co-location facility installation as part ofbusiness
continuity planning for SAVVIS Data Center.*
Celoxica is an early stage next generation accelerated ticker plant,
evaluated the new market data system Celoxica to replace the existing
systems like PI, Pulse and Exegy.* SPOC for GAT for
I Desktop initiative for migrating a Credit Suisse globally consistent
desktop environment, replacing both Omni & FiT desktops with Windows
7,IE 8,Office 2010,One Bank Active Directory, MSI and App/V
Packaging.* SharePoint Administrator 2003 for GAT
Equities site for collaboration and document management as Standard
operating procedures for the support team in Mumbai COE India to
follow process as a Level -1 Support, Deployed SharePoint WIKI
servers allowing document coordination and experience sharing among
Traders.* Core Member for IT4 Free Project
initiative by Equities IT to help NGO and develop application to
prototype across Wall StreetCLIENT: JP MORGAN CHASE, WILMINGTON,
DE
SEPT 05 a" JUN
08EXPERIENCE: NETWORK ARCHITECT* Primary Network
Engineer and Team Leader in the Architect team for a Data Center
migration project.* Led a team of Network
Engineers to implement various sections of the Data Center. Acted
as project managers for projects being worked on by team
members.* Architected the Data Center layout and
network design, including the Network Operation Centers, Network
Management Centers, Network Control Centers, and Security Operations
Centers.* Developed approaches to transferring
hardware, networks, storage, servers, applications, and data,
including disaster recovery and contingency planning policies and
procedures.* Designed Technology Plan that
provides a complete pre-and post-migration infrastructure including
power, HVAC, safety, LAN/WAN and voice, circuit provisioning,
hardware and software.* Designed solutions for
network & support infrastructure monitoring and/or managed services
which monitor operations of all backbone links and network devices to
ensure continuous operation of servers and
services.* Member of the Data and Network Security
Strategy team, responsible for the design, prototype and
implementation of Network Security for the Data Center. Performed a
complete Security Assessment, including audits of security policies
and implementation.* Designed and executed Network
Security Penetration testing and utilized Network tools to configure
Pix Firewall appliances a" PIX 535, 525, 515E, 501, Checkpoint
Firewall NG/AI to implement network security
solutions.* Member of Contingency Planning Team
(including disaster recovery and business continuity methodology),
responsible for recommending effective Safeguards and
Countermeasures, Security Management and Monitoring Design and
implementation for our clients.* Designed the
database, programmed all local and remote sites, and ported sites
over from older version Call Manager servers to the new System.
* Worked with remote offices to implement their
new VoIP phones, Unity Voice Mail, Voice Gateways - worked with Local
Telephone companies to bring up PRI and POT lines to each site.
* Configured all Voice Gateways within Call
Manager (MGCP), including set up of all Media
Resources.* Lead the initiative responsible as a
Network Security specialist, including the design and configuration
of IPSEC on Cisco PIX 525 series firewalls and 2600 series
routers.* Implemented and configured Cisco VPN
concentrators including 3005, 3030, 3060, and
3080.* Responsible for Network Security
implementation efforts, including the installation of IDS Cisco
sensors to examine signatures and monitor for specific attack
signatures using Cisco CSPM policy manager, as well as the
authentication of routing protocols such as OSPF, EIGRP, and BGP
using MD5 hash encryption.* Member of Blue Coat
web proxy infrastructure that has been fully deployed to all global
locations (RoW), users have now had their Internet Explorer web
browsing migrated onto the new web proxy
platform.* Configured web proxy farm with a local
name, the recommended entry point into the service is through the new
globally load balanced name: proxy.hedani.net.*
Completed Web proxy Migration of existing WMP & RP proxies, Enable
WMP RTSP proxying & Enable support for enhanced streaming
functionality in phases with the team.* Performed
redistribution of OSPF and RIP version 1 and 2 to enable
communication with backbone, analyzed network traffic with Sniffer
Pro 4.7.* Implemented TCP flood attacks prevention
with access-lists designed with ICMP rate limiting and TCP intercept
on Cisco perimeter firewalls.* Configured CBAC to
prevent IP Spoof attacks on perimeter routers. CLIENT:
INSTINET, NEW YORK, NY
NOV
04 a" SEPT 05EXPERIENCE:-SR NETWORK ENGINEER.*
As a Network Engineer, worked with Instinet VPs and other business
managers on numerous projects simultaneously, documented and
researched processes and hardware. * Installed and
supported PIX 520, 525, 535 series firewalls and Cisco IDS blades,
configured standard and extended access-lists and policy-based
filters.* Utilized network management software to
detect problems with HP Openview, Incharge, CiscoWorks2000 and
QIP.* Configured basic PIX outbound access
configuration for access control, NAT and PAT, IPSEC encryption, and
security levels for inside network, outside network and
DMZ.* Installed Cisco switch probes for network
management utilizing SNMP, RMON and HP Open view to monitor router
interfaces for alarms, organized QIP database for IP address
allocation and management.* Maintained numerous
Cisco routers and Catalyst switches including 1600s, 2500s, 3620s,
3640s, 4000s, 7507s, and 7513 series routers also 1900s, 2900s 5500s,
5505s, and 6509s Catalyst switches.* Upgraded
Catalyst OS images on 5505s from 4.5 to 6.5 for a multicast
implementation project using TFTP, installed Supervisor 3 engine
modules, Fast Ethernet, and RSMs for layer 3 switching on
5505s.* Worked with Cisco engineers in testing
6509s and BIG Iron 8000 switches.* Implemented and
configured a 3640 for reverse Telnet connections, installed a sync
cards and octopus cables as well as terminal emulation program on
workstations and servers.* Performed advanced
troubleshooting on ISDN connections on 2500 series routers at the
access layer using Debug commands to resolve issues with CHAP and
SPIDs.* Effectively utilized troubleshooting tools
like Fluke meters for patch panels and CAT5, crimp tools, RS232 and
V.35 breakout boxes, ISDN SPID test set, and Dolce network analyzer
for monitoring network utilization levels on Ethernet
segments.* Performed hardware upgrades on 7507s
and 7513s including VIP, RSP, HSSI, FSSI and Fast Ethernet module
configuration and installation in core layer routing redistribution
project running OSPF, BGP, and EIGRP.* Adjusted
misconfigured port duplex settings, VLAN troubleshooting and
configuration, as well as analysis of spanning-tree timers, worked
with protocols like VTP, ISL, HSRP, on Catalyst 5500s, 5505s and
6509s.* Reviewed technical specifications and
modification proposals for all Network configuration related
requirements to ensure technical accuracy. Assessed the impact of
proposed changes and provide resolutions for Multi-Protocol Network
design issues.* Provided high level technical
support, including identifying and resolving problems on Cisco
supported products for e-Commerce infrastructure. This included
external routing and internal/intranet routing for DMZ
servers.* Responsible for Routing related tasks
including reviewing, recommending, and implementing Cisco router
configuration and change management, providing technical support for
Cisco Router configurations and installation for Customers.
* Responsible for Switching related tasks
including the implementation of VLANS and configuring ISL trunk on
Fast-Ethernet channel between switches and configuring CGMP, IGMP and
PIM.* Designed and configured static NAT, dynamic
NAT, inside Global Address Overloading, TCP overload distribution,
Overlapping Address Translation.CLIENT: HCL TECHNOLOGIES, NEW
DELHI
INDIA.
OCT 03 a" NOV 04EXPERIENCE:
NETWORK
ENGINEER
*
Primarily responsible for the installation and configuration of Cisco
networking devices according to customer's
requirement.* Utilized monitoring tools such as
NNM and Service IT to monitor internal HCL Network dedicated to
various customers and also on NMS Server.*
Responsible for the procurement and management of MLLN and
conventional leased line and ISDN circuits.*
Designed and implemented different multicasting technologies in
customer network.* Configuring and implementing
VLANS in the internal network of HCL for proper isolation of various
customer networks from each other and also from the Internal HCL
Network.* Adding/Configuring network devices
(Routers/switches/Access point) in NNM, Cisco work,
NMS.* Generating reports for network performance
of devices to provide Level 2 Support to Network team and Network
Operations team. * Conducted weekly Customer
Review Meeting to discuss the various networking equipments
performance and provided the uptime/downtime reports to the
customer.EDUCATIONB. Tech a" Computer Science, U P Tech
University India.