Network Engineer resume example

• Developed the L2/L3 network design for hybrid customer connectivity between colocation handoffs and cloud gateways; configured BGP prefix filters and maximum-prefix limits, then checked advertised routes against the address plan before circuit acceptance.
• Performed root cause analysis of an intermittent TCP/IP failure using packet captures and routing tables; reproduced asymmetric return traffic across redundant paths, corrected the reviewed route policy, and attached successful bidirectional tests to the incident record.
• Implemented VLAN and VRF separation for customer and management traffic on Cisco IOS XE and NX-OS devices; tested allowed flows, denied cross-segment traffic, and rollback commands with the security team before the maintenance window.
• Built Python and Ansible checks that compare interface descriptions, VLAN assignments, and BGP neighbors with REST API inventory responses; validated pagination and missing fields, generated reviewable diffs, and stopped changes when device state disagreed with the plan.
• Combined syslog log analysis with SNMP interface counters, BGP state changes, and NetFlow traffic; used the maintenance record to distinguish expected link events from an emerging fault and gave the on-call engineer a reproducible escalation or rollback decision.
• Compared BGP route advertisements before and after a peering change, checked prefix filters and maximum-prefix limits, and rehearsed withdrawal without affecting unrelated peers.
• Owned a BGP network-design validation using isolated routing fixtures, resolved asymmetric paths and completed redundancy tests before the migration review.
• Built Python log-analysis checks using REST inventory data, reduced root-cause-analysis preparation from 50 to 20 minutes and published the capacity-management worksheet.

• Performed preventive maintenance on customer cross-connects from patch panel to switch port; compared optical levels and error counters with the accepted baseline, checked labels and VLAN tagging, and scheduled deteriorating components for a reviewed replacement.
• Diagnosed OSPF adjacency resets by comparing area settings, hello/dead timers, and MTU across a routed access pair; reproduced the mismatch in a lab and verified stable adjacency after the approved correction.
• Coordinated staged network migrations to IPv6 dual-stack access, aligning address allocation, router advertisements, and firewall rules; checked DNS AAAA resolution and application reachability at each gate, retaining the tested IPv4 path for rollback.
• Owned the capacity management review before circuit renewal; compared utilization and queue drops with demand forecasts, separated bursts from sustained load, and documented the headroom needed to carry traffic after a redundant link failed.

• Triaged WAN connectivity tickets using link status, ICMP tests, traceroute, and TCP port checks; separated customer LAN, carrier circuit, and application symptoms before assigning the incident to the responsible team.
• Maintained IP address and switch-port records for branch changes; reconciled DHCP reservations with the assigned subnet and caught a duplicate gateway address during the pre-change review.
• Prepared incident handovers with timestamps, affected paths, tests already run, and outstanding carrier actions; checked service recovery with the requester before closing the ticket rather than relying only on a green device alarm.

• Built repeatable SIT and UAT checks for an IPv4/IPv6 interconnection test topology with BGP uplinks, OSPF internal routes, and management VLANs; documented the expected next hop and user-path acceptance before injecting failures.
• Used Python probes and packet captures to compare the route table with actual TCP sessions during recovery; found an IPv6 firewall omission that the IPv4 checks missed and added it to the release acceptance checklist.
• Packaged sanitized configurations, route snapshots, and rollback steps with the test results; another engineer reran the suite from the handover without using customer traffic or production credentials.
• Owned the recovery rehearsal using an isolated test account, resolved a missing permission prerequisite and completed the restore without changing the working baseline.

Relevant coursework: Algorithms, operating systems, databases, computer networks

BGP route policy · OSPF troubleshooting · IPv6 dual-stack validation · VLAN / VRF segmentation

Python · Ansible · TCP/IP · SNMP · syslog · NetFlow

Incident diagnosis · Change and rollback testing · Capacity review · Circuit acceptance

• Published an independent troubleshooting guide using annotated logs, separating connectivity, authentication and application failures and documenting the rollback decision at each step.