EXECUTIVE SUMMARY

• As an IT network and servers and security with experience in $500M data center in financial firm, data center solutions through virtualization, MaaS/SaaS and Cloud environment. Comprehensive monitoring and IT service management functionality—integrated capabilities that enable continual infrastructure optimization and accelerated problem resolution. Business Continuity Process, disaster recovery testing, trading and desktop supports. Strengths include design, implementation, and identification and incidents handling
• Serve as subject matter expert for network security with the GNS (General Network Service)) maintain IT Security infrastructure solutions, implemented Incidents handling with priority/severity level for all devices. Data center virtualization use VM ware and Cloud Computing
• Implement, install, configure, monitor and support all servers, network devices, routers, firewalls, switches, telecommunication devices and equipment, WAN connections and circuit extension
• Build and maintain an IT platform for Business Recovery Facilities, supported multi business groups
• Work as team efforts and self motivation, received 15 awards for excellence in service

TECHNICAL SKILLS

• ISO 27000/1,ISMS CobiT framework(ISACA) IT Governance, SAS - 70(I/II),SIEM, PCI-DSS, SOX, GLBA, GINA, HIPAA, FISMA, NIST Risk Management Framework
• SSL, SSH, RSA, IPSec, VPN, PKI, Kerberos, TACTAC+,AAA, 802.1x, Wireless security, VOIP, IP telephone, SMTP, DNA, FTP, IPsec, all mainstream web browsers, ISO and DoD model
• Knowledge of follows program language: C/C++, JAVA, VBScript, VB, LUA .NET, PROLOG, LISP PASCAL, FORTRAN

PROFESSIONAL EXPERIENCE:

Confidential

Data Center, Information Monitor and IT Security

Responsibilities:

• 7x24x365 build, secure, support and maintain of 15000 servers, switches, routers, firewalls, storages, communication devices auxiliary equipment to ensure maximum efficiency in enterprise level data center
• Install and administrate Network based on Cisco Catalyst ASA/PIX(7.0),FWSM security appliances and VPN product lines, such as set up Firewall rules, DMZ and logging, Use MPF to control layer ¾ connections, perform QoS Queuing/Policing and tune application engines
• Test security policies with Packet Tracer and capture network traffics for further analysis use CLI and ASDM
• Design Network configuration for an ESXi host. Plan, install and configure ESXi/vSphere5, vCenter. Deploy a virtual machine from template. Create new vcenter, datacenter, vSwitch(vSs and vDs) through the vSphere client, Create cluster enabled for vSphere HA and add ESXi host to a cluster
• Implement the connections From HBA/FA to Cisco MDS SAN Switch, Zoning to connect HBA and FA together and LunMasking (let LUNs map to FA to be seen by HBA) through the management station. Assign LUN to VMware server through vSphere client
• Use Nimsoft Monitor(console) to monitor and manage all the elements of IT environment such as response time and availability —including Cisco UCS, networking devices, audit messages, alarms handling, applications, databases, servers, storage systems, virtualization platforms, cloud-based infrastructure
• Create customizable views and reports that provide the end user need using UMP(Unified
• Configure Network load balancing in windows and Adapter Bonding(teaming) in Linux
• Using Tripwire for VMware ESX servers and Tripwire Log Center(6.2) for every activity and create reports for internal auditor
• Install Symantec ESM (Enterprise Security Manger) manager, console and agent. Run ESM Scan to meet security compliance state after new server installation
• Initiate the move to external and on-premise cloud computing and as a result virtualize 500 servers with VMware to reduce hardware, maintenance, electrical, and cooling costs by $1.25M a year
• Use IBM XIV GUI console management configures, monitor IBM storage through Ethernet and iSCSI ports. EMC2 Symmetrix/CLARiiON through IP SAN, FCIP/iSCSI. Configure (including post configuration) SAN for New Installations on Solaris, Linux and Windows servers
• Configure and verify NAS for file-sharing both Unix and Windows(NFS and CIFS), NBU(Veritas,NetBackup) Client, static route on Unix Solaris, Linux
• Deploy, plan and install SAN Boxes for HITACHI, NetApp, IBM
• Implement, Install, configure and support servers. Use Opsware, Ilo, jumpstart and CDI build to install Solaris, Linux and Windows on Sun, Fujitsu HP, Dell and IBM servers
• Hands-on experience on the highest priority incident handling, such as P1/S1 with critical servers, network devices and troubleshooting the problems, follow up the problems. Also update the incident logs
• Install Cisco switches and routers implement VLANS and configured ISL trunk on Fa/Gi-Ethernet channel between switches, Manage and configure IP addresses, switch ports, Vlan trunking, Static/Default route, RIP, Spanning Tree, OSPF,EIGRP, NAT and Port Securities
• Hands-on experience use bank standard tools such as: T-Span, SEEF, Prime/TAM, RT, Apture Vista, I-patch, ECM, AIMS, EURC, SSO, SBRF, TACACS+, Kerberos, LiveLink, Service Center (Peregrine, HP) and labeling system
• High level customer support and vendor relationship management. Manage access control assist data center security controls and vendor escorts
• Provide details technical requirements to business project managers, Evaluate compatibility of the servers’ ports, devices ports, cabinets, panel ports and space availabilities using. Apteure, Ipatch and APC. Write daily turnover report, Participate in weekly change Management Meeting and Implement enterprise change management
• Involve in merge related projects such as Bear Stearns and Washington Mutual Data Centers migrations, such as Avaya PBX dialing systems, devices connections and signing and maintaining IP Addresses

Confidential

Sr. Technical Officer/JPMorgan Chase

Responsibilities:

• Plan, build, manage and maintained Business Recovery Facilities (BRF) with 100+ subscribers, servers, gateways, Hubs and 1000+ PCs on different floors and two remote sites using Windows Resource Kit utilities, VB scripts, Netware login scripts, client32/VLM for Windows
• Develop approaches to transferring hardware, networks, storage, servers, applications, and data, including disaster recovery and contingency planning policies and procedures
• Use Symantec Ghost(v6.5) deploy on Novell and MS Client/servers, based on TCP/IP, VMware, NDS/AD structures for BRF. Created, implemented and configured multicast environment for BRF images automatic download and refresh for all BRF clients
• Provide DRP design template for Disaster recovery and Business Continuity Plan, designed the Infrastructure requirements based on each application group’s requirements, project plan, capacity planning, scaling requirements for cost benefit.
• Member of Contingency Planning Team (including disaster recovery and business continuity methodology), responsible for recommending effective Safeguards and Countermeasures, Security Management and Monitoring Design and implementation for our clients
• Administrate of Domain Controllers, Active Directory, NDS, SNA, BindView, Rabbit Gateway SQL, Netware, QIP, DHCP Services and windows service pack installation
• Responsible for design and implementation of enterprise backup system.(such as full, differential, incremental and GFS) inclusive of job scheduling, data/tier classifications, conflict resolution policies, alert notifications, database optimization settings, remote monitoring and scalability factors for BRF using Arcserver
• Support Trading and business applications for Prime Brokerage, Security Lending, Broker Dealer and Investment Bank, including Reuters, SLAM, Trade Web, Boss Bloomberg Terminal, Market Data
• Assist Business liaisons ensured timely removal or modification of access based upon termination listings, emergency requests, and change request forms within SLAs
• Install, configure and support dedicated links (client machine and telecommunication devices) connect outside bank clients. Such as Goldman Sachs, Prudential, First Boston, Lehman Brothers, Solomon Brothers, Amex and Morgan Stanley and Merrill Lynch for commercial papers business group

Confidential

On site Systems Engineer

Responsibilities:

• Install, configure and support Novell servers and clients. Designed, implemented Local Area Networks base on Token Ring/Ethernet and Novell Netware. Installed and implement Apple Talk and Local Talk for Macintosh systems
• Install and configure Banyan network systems based on Vines 4.0 including 24 nodes
• Install, Create and maintain Novell server backup
• Application support Installed Windows V3.1, Lotus 1.2.3, Word Perfect, Excel, Word 2.0 and PowerPoint for windows, and cc: Mail onto the Novell servers. Provided technical support for 2000+ clients