PROFESSIONAL SUMMARY:

• Currently Supporting System, Networking, and Monitoring Enterprise Engineering Solutions.
• Initially started in system engineering, along with network engineering, and currently been working with Monitoring Engineering and Solutions.
• My career goal has been able to provide companies computer solutions from small business to large corporations.
• Experienced in all areas of IT has helped me leverage that knowledge in providing monitoring engineer and solutions.

TECHNICAL SKILLS:

Monitoring and Automation Solutions: For applications, networks, and server solutions. Expertise in Monitoring products and solutions. Expertise in utilizing Automation solutions and Engineer automation solutions. Customized automation and scripting capabilities allow me to leverage much quicker solutions involving a history of templates and customization.

Monitoring Solutions with SIEM based solutions: Specializing in SIEM that follow Mitre framework and designing log strategies and implementation plans. In all my security monitoring support, positions and solutions I have used CERT, NIST and CIS standards for policy and implementation of SIEM and security related monitoring requirements and standards. With attack frameworks of the following: NIST, HIPA, NERC, SOC2, etc.

Monitoring Products: SiteScope, Dynatrace, SolarWinds, SmokePing, Cacti, RRD Based Monitoring solutions, Splunk, Splunk SIEM, Phantom, SOAR, GrayLog, Cribl, Grafana, Qradar, Balabit. Extrahop, New Relic, Azure Sentinel, Azure Defender, OmniPeak, CatchPoint, Plixer Scrutinizer, Tenable Nessus, Wireshark, Exabeam, CA Spectrum, CA UIM, Pager DutyTivoli Live Monitoring, HP OpenView, NXLog

Networking and Firewall Products: Cisco, Cisco ASA, Checkpoint, Palo Alto, Cisco Lan Works, Aruba Wireless

Windows System Engineering: IIS, SCCM, SCOM, Active Directory, Exchange Email, SQL Server, Office 365, ADFS Hybrid connectivity

Virtualization Engineering and Public and Private Cloud environments:VMware and Vcenter, KVM, Xen. Yahoo Cloud, Amazon AWS, Microsoft Azure, Oracle Cloud, and IBM Cloud, Oracle Rac, Oracle Solaris Zones, IBM LPAR and WPAR.

Single Sign on and Directory Services and role management:Citrix Oracle Identity Manager, Sun Console One, IBM IGI, Centrify, Tivoli Identity Manager.

Linux/Opensource/Automation: Kubernetes, Docker, Elastic Search, MongoDB, Apache, Tomcat, Puppet, Ansible, CF Engine, CA AutosysBigFix, Net Backup, EMC Networker, IBM Tivoli Storage Manager, HPE OneView

Servers: HP ProLiant Server products, Oracle M Series and T Series, IBM Server Products, Lenovo Server Products, Cisco Blade ProductsNetwork Devices:Juniper Routers and Switches, Cisco Routers, Switches and ASA, Checkpoint Blades and Appliances, F5 Blades and Appliances, PA - 200 Palo Firewalls. Gigamon, Aruba Appliances.

Storage Solutions: SAN: Netapp, DELL VNX, VMAX COMPELLENT, EQUALLOGIC, Celera, Symmetrix, HP 3PAR, Clarion, Hitachi, HP StorageWorks, Brocade, Cisco MDS

VOLUME MANAGEMENT: Oracle ZFS, Open ZFS, Sun UFS, Linux Volume Management, Veritas/Solaris/Linux Clustered Filesystems.

UNIX: Solaris 9, 10, and 11. IBM AIX 5-7

Linux: RHEL 5, 6.7, CENTOS 5,6,7 OPENSUSE 11.x, 12.x, 13.x, 14.x, 15.x, Debian, FreeBSD, and OpenWRT

Microsoft Windows and MacOS: Windows 2003, 2008, 2012 and 2016, MacOS

Scripting and Development Solutions: PHP, PYTHON, BASH, KORN SHELL, SPLUNK SPL, QRADAR ARIEL, SOLARWINDS SWQL, RESTUFUL API, JAVA, PERL, RUBY, C#, .NET, VBSCRIPT, POWERSHELL, JSCRIPT, ETC.

PROFESSIONAL EXPERIENCE:

Confidential

Enterprise Monitoring Engineer

Responsibilities:

• Dashboards, System Management and Script management.
• Provided alert management, alert reporting, and scripting.
• Developed dashboards in Splunk and SolarWinds.
• Provided Application and System Support automated log rotation instrumented system alerts and monitoring alerts.
• Developed Alert Management and for Alert Metrics and Reporting.
• Created solutions for Service Now to review Assets, Alerts, and Ticket Generation Results.

Confidential

Enterprise Monitoring Engineer- SIEM

Responsibilities:

• Provided Chef/Puppet scripts for syslog configuration file changes for *NIX environments.
• Scripts utilized to deploy heavy and universal forwarders with Splunk environment.
• Puppet scripts in python to configure system resources in certain production environments within server groups.
• Review log ingestion in Splunk and used remediation scripts to review log data results.
• Develop reporting around log data result and was able to determine gaps in log data effectiveness.
• Created and designed dashboards for management teams across multiple toolsets including Splunk for review of security tickets and in progress reports from SNOW and other ticketing solution tools.
• Led efforts in documentation and with Operation Center support teams.
• Designed alert management and process documentation and procedures.
• Alert reporting and remediation process and steps for ticketing system.
• Ticketing escalation design for closing cases, escalating cases, defining Problem Management repository for current production issues.
• Designed Alert condition documentation and response for service teams for incident response requirements.
• BASH, Python and PowerShell Scripts:
• Reporting scripts that utilize Grep, PrintF formatting, etc.
• Cron Job management for updates, System Log Rotation, Log gzip management.
• Setup management repository for Security Services applications.
• Managed environment for Security Monitoring server’s applications and environments.
• SolarWinds reporting and Dashboard development.
• Dashboard for Docker repository monitoring and alerting.
• Dashboard management for cloud-based services
• Log source management and scripting for syslog and SNMP.
• Alert and Dashboard management

Confidential

Enterprise Monitoring Engineer

Responsibilities:

• Implementation of Event Collectors and Event Processors into Qradar environment.
• Performed patching and remediation services for Qradar Application. Upgraded and configured system software.
• Remediated log failures and address Qradar Wincollect log issues.
• Used NPM, NCM and NTA Solarwinds products to identify SIEM performance and reporting issues.
• Determined that the managed WinCollect agents were having connection issues and remediated issues with network ACLs to determine cause.
• Performed log, track, resolve, and report support issues to management.
• Both Qradar and SolarWinds: Python scripts for system and security-based alerts utilizing curl to push forward errors and log4.xml manipulation for Java based applications.
• Utilized CURL scripts to confirm access response to SIEM from log sources and different parts of the network to review connectivity and performance gaps.
• Docker, Ruby, and Kubernetes: Monitoring of container objects and obtaining log source and performance results within SolarWinds and Qradar SIEM monitoring for security events.
• Provided Templates for Tickets, Documentation, and Reporting.
• Provided Tier 1,2 and 3 alert routing and delegation responsibilities.
• Defined alerting dashboards for the different Tiers within groups and alert routing.

Confidential

LEAD SYSTEMS ENGINEER

Responsibilities:

• Provided day to day systems engineering support on Windows / VMWare and NetApp environment.
• IIS and Java based support for JD Edwards environment.
• Managed SCCM project included patch management, software inventory, and software distribution.
• Performed daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems, and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
• SharePoint 365 administration and group department configuration and maintenance of SharePoint.
• For and ESX servers for 400 remote users connecting into production environment.
• VDI connectivity for Warn Auto major trade partners with the major automotive manufacturers.
• Utilized the following SolarWinds Modules for this project: NCM, NPM, NTA, IPAM, SAM, Virtualization Module, SRM
• SolarWinds Virtualization module:
• Implemented SolarWinds Virtualization Module to manage VMware environment.
• Configure SolarWinds Groups and Mappings.
• Created SolarWinds Maps and Dashboard design for business and IT users.
• Defined SolarWinds NTA: Created NetFlow captures for reporting and performance alert-based reports.
• SolarWinds SAM implementation and design
• Provided Application alerting and configuration for Windows Server Environment.Cisco ASA configuration and maintenance. 5515 and in 6 pairs of corporate firewalls. Along with
• Fax solutions on Brooktrout (Dialogic) fax boards for sales and engineering departments. Integrated into Office 365.
• Network support on Juniper and Cisco LAN switches.

Confidential

ENTERPRISE MONITORING ENGINEER CONSULTANT

Responsibilities:

• 70 AIX 5.2, 5.3, 7.1 and 7.2, UNIX, and Linux Servers. That services Oracle/PeopleSoft and other solutions as required by end client.
• Centrify GPO objects definitions and creation.
• Group and role creation within the UNIX and VT environments.
• Custom role-based access solutions for users and applications.
• Utilized the following SolarWinds Modules for this project: NCM, NPM, NTA
• Configured NTA to determine network performance issue.
• Provide NCM change audit functions and approval.
• Log source management and scripting for syslog and SNMP connectivity.
• Dashboard management and Design
• Alert Management and reporting.
• Automated Jenkins and in house configuration management solution to deploy Splunk automated and configured Heavy Forwarders and Monitored results and progress of scans and updates.
• Python scripts to produce reports used for Heavy Forwarders results and performance.
• Splunk and Qradar dashboards for reporting metrics to management and Security Engineering.
• Index results from aggerated heavy forwarder results into Splunk cloud for each region-based requirements and results distributed by region.
• 3 Tier Alert management and Documentation Templates:
• For SCCM environment and work with Patch Management, Software inventory and software distribution to Windows Servers and Workstations.
• Provided alert filtering and custom dashboards and configurations based on escalation for IT operations.

Confidential

ENTERPRISE MONITORING CONSULTANT

Responsibilities:

• Designed the following for the SolarWinds Project:
• Created SolarWinds Maps and Dashboard design for business and IT users.
• SolarWinds SAM implementation and design
• Provided Application alerting and configuration for Servers and Network Devices.
• Implemented SolarWinds Virtualization Module to manage VMware environment.
• Provided and documentation on Solarwinds Implementation, Reports, Dashboard and Management.
• Designed an Extrahop monitoring solution to review it in comparison to SolarWinds in a 6-month project evaluation.
• Utilized the following SolarWinds Modules for this project: NCM, NPM, NTA, IPAM, SAM, DPAIM, Virtualization Module, VOIP, SRM
• Supported SolarWinds in a Juniper Devices, CheckPoint Firewall, Windows Server, Oracle Solaris, and Linux based Environment.
• Created sftp, tftp, and scp backup jobs for network devices.
• Utilized SolarWinds custom alerts for Curl based event forwarding to Slack and other common websites for event and system reporting.
• Implemented SolarWinds log forwarding agent.
• Migrated from using WMI/SNMP to SolarWinds Agent in 12.x
• JBOSS and JSON Alerting into SolarWinds and GrayLog Server.
• Implemented 16 Node GrayLog environment with 8 node Elastic Search with replicated MongoDB 2 DB servers.
• Create dashboards in GrayLog to correlate common views and alerts and combined it with results from Tenable Nessus Scans.

Confidential

ENTERPRISE MONITORING ENGINEER

Responsibilities:

• IIS template and security development
• Template converted from in house system over to SolarWinds NCM and provided management inventory reports for compliance purposes.
• Utilized SolarWinds to support a Cisco Network environment.
• Created sftp, tftp, and scp backup jobs for network devices.