SUMMARY:

• Microsoft Certified Systems Engineer (MCSE)
• A results - driven, customer-focused, and articulate Senior Active Directory/Wintel Engineer.
• In-depth knowledge of Microsoft Active Directory- design, migration, configuration, and integration experience
• Strong interpersonal, written, and oral communication skills.
• Ability to apply technology to improve existing products and systems at customers and for internal use.
• Highly self motivated and directed, with keen attention to detail.
• Ability to adapt quickly to changing circumstances, direction, and strategy.
• Demonstrate strategic thinking with value-add contributions.
• Proven group presentation skills, ability to field questions and engage appropriate resources to meet the objective.

TECHNICAL SKILLS:

• Blackbird/BeyondTrust
• Active Directory Migration Tool (ADMT)
• Quest Migration Manager
• ADAM
• MIIS / FIM 2010
• Quest: ChangeAuditor, Active Roles, RestoreAdmin.
• Advanced Group Policy Management (AGPM)
• McAfee EPO, HIPS
• Symantec Endpoint Protection
• Altiris suite for software distribution and patch management.
• SCOM.
• DoubleTake real time file replicator.
• Utilities from sysinternals.
• Vbscript, powershell

PROFESSIONAL EXPERIENCE:

Confidential

Responsibilities:

• Active Directory Hardening/Security
• Upgrade Domain/Forest Functional levels to 2012R2
• Upgrade Domain Controllers to 2016.
• Powershell scripting
• Provisioning domain controllers in AWS
• Fine Grained Password Policy
• Active Directory Port Standardization.
• Custom AD Schema Extensions
• Review and optimize existing Global Active Directory design.
• Kerberos: Design and deployment of Kerberos delegation, constrained delegation, troubleshooting Kerberos authentication failures.
• Manage Lingering objects, USN rollback, morphed folders, NTFS journal wrap.
• Troubleshooting NTLM & Kerberos authentication issues.
• Manage enterprise DNS/ Confidential /DFS.
• Experience with AD RAP
• Review, redesign and optimize secure channel architecture globally to provide optimal inter and intra forest Kerberos and NTLM authentication.
• Troubleshoot and resolve complex authentication failures arising from the use of multivalued sidHistory attribute.
• Optimal OU and group policy infrastructure, group policy preferences with item level targeting, user loopback group policy processing, GPO central store, co-existence of ADM and ADMX files.
• Active directory replication topology, site links, site link bridges.
• Group Policy planning, management and deployment with Advanced Group Policy Management (AGPM) infrastructure.
• Configuring Kerberos authentication & delegation.
• Active Directory delegation model design.
• Optimizing AD authentication performance.
• Proactive Active Directory monitoring.
• Secure channel and DC Locator optimisation.
• AD disaster recovery, forest recovery strategies and methodologies.
• AD migrations and consolidations involving large, complex multi-domain and multi-forest enterprises.
• Consolidation and coexistence of separate AD forests in mergers and acquisitions.
• Establishment of Active Directory performance baselines.

Confidential

Senior Active Directory Consultant

Responsibilities:

• Upgrade Domain/Forest Functional levels to 2012R2 in all the development and production forests.
• Upgrade domain controllers in all the forests to 2016.
• Provision/Rehydrate domain controllers in AWS.
• Support migrating applications to Cloud (AWS)
• AD Custom Schema extensions
• Group Policy management
• Powershell/Vbscript - extensive scripting

Confidential

Active Directory Engineer

Responsibilities:

• Responsible for the AD infrastructure comprising of 10 AD forests and 600+ domain controllers.
• FGPP, Port Standards.
• Deploy BlackBird Auditor component globally.
• Deploy/Manage GPO’s.
• Design/Implement a solution for sharepoint UPS in DMZ from a DNS/AD perspective.
• Implement SSO solutions for applications using Active Directory/Kerberos Delegation.
• Assist in L4 support, troubleshooting complex problems, the one recent problem I worked was identifying “USN rollback” issue.
• Powershell scripting.
• SSO implementation using keytab files.
• Deploy PowerBroker/BeyondTrust Audit tool in 4 forests.

Confidential

Consultant, Active Directory Engineer

Responsibilities:

• Responsible and accountable for Active Directory Infrastructure. There are about 350 domain controllers and 135,000 users.
• Deploy/Manage GPO’s using Advanced Group Policy Management (AGPM). Responsible for AGPM infrastructure.
• Provide controlled access to system administrators / help desk personnel.
• Manage Group Policy auditing with SCOM. Evaluate Auditing tools for Active Directory.
• Working with network team, Integrate Cisco and Riverbed devices in AD for Kerberos traffic optimization to improve upon low latency. (Sharepoint)
• Manage FIM 2010R2 operations.
• Design/Manage DFS name space.
• Account migrations using ADMT.
• Near term - implemented using keytab files. Long term solution was to use ADFS.
• Implement/Manage LDAP over SSL.
• Plan Upgrade from Windows 2003 to Windows 2012.
• Level 4 support for Active Directory issues.
• Scripting with VBScript / Powershell.
• Run DR tests twice a year, recovering Domain Controllers.
• Work on complex issues involving Active Directory, Servers, Group Policy, Kerberos.
• Work with application teams to integrate the applications in Active Directory.

Confidential

Senior Active Directory/Wintel Engineer

Responsibilities:

• Consolidated 4 Active Directory 2003 forests into a single Forest. Tools used in consolidation were ADMT, custom migration scripts written using VB/ADSI. Designed a unified GAL using MIIS ( Confidential component), and came up with a way of using a single LDAP server for application authentications in a multi forest scenario by using ADAM repositories and MMIS to sync objects across forests. Plan/Design Active Directory forest integration during Merger/Acquisition.
• Consolidated well connected networks into a single logical AD site. Redesigned the way the branch sites were communicating with the hub site using AD site costing.
• Deploy Active Directory Monitoring/Auditing tools using Netpro suite.
• Deploy/Manage Microsoft DNS (2008 R2) for the Windows environment
• Design/Manage DFS namespace.
• Migrated 1200 users to AD using ADMT and custom scripting.
• Extend schema for Exchange 2007. Assist exchange team with AD tasks.
• Designed a Global Directory combining the different entities from Multiple Forests using MIIS and ADAM including the Password Sync. This involved writing a custom Provisioning DLL.
• Manage/Deploy Group Policies. Wrote Custom Group Policy templates.
• Deploy/Manage ADAM instances.
• Responsible and accountable for Windows Infrastructure (Active Directory, SCCM, SCOM and Enterprise Applications) operating at peak performance 7 days a week
• Deploy/Manage 2003/2008 Microsoft Cluster Servers for File/Print/ Confidential . Deploy SQL 2005 Cluster servers.
• Server deployment/automation using WDS/MDT.
• Manage/Deploy Altiris Deployment solution, used to deploy 100’s of machines for BCP deployment using multicast option.
• Deployed Altiris Inventory solution firm wide.Manage/Deploy firm wide Patch Management. Manage firm-wide Software Distribution.
• Extensive scripting using VB/ADSI/.Net.
• Deploy Systems Center Operation Manager (SCOM) 2007.
• Create and maintain documentation as it relates to system configuration, mapping, processes and service records
• Work with executive team members, decision makers and stakeholders to define business requirements and system goals, and to identify and resolve business systems issues
• Review existing technology implementations and suggest and implement improvements and upgrades
• Conduct research on software and systems products to justify recommendations and to support purchasing efforts
• Manage HP x64/x86 servers.
• Upgrade existing Windows 2003 Forest to Windows 2008 R2..
• Deployed “Windows for SharePoint services 3.0” and MOSS to assist with team collaboration tasks.
• Manage Windows Servers.
• Manage VM’s using Virtual Center Console.
• Provide level 4 support to the systems administrators
• Ability to work ONCALL and under pressure while troubleshooting and resolving server related problems

Confidential

Consultant, Senior Wintel Engineer

Responsibilities:

• Responsible for Integrating/Migrating Trading applications/Servers into “Active Directory” Domain.
• Implementation of Microsoft Cluster. Deploying Trading application using Microsoft Cluster.
• Server Consolidation with VMWare Virtual Infrastructure.
• Windows Automation using Windows Scripting Host and VBScript
• Supporting IBM/HP Servers.

Confidential

Senior Systems Engineer

Responsibilities:

• A member of the global Active Directory/Wintel Engineering team. The environment consisting of 100+ Domain Controllers and 1000+ Windows Servers and multiple forests.
• Windows 2003 Active Directory Design and Integration
• Active Directory Specialist with in-depth knowledge of Active Directory design including domain design and architecture, GPO design and OU design.
• Responsible for the planning, implementation, managing and operating the world wide Active Directory and IT infrastructure implementations.
• Windows Automation using Windows Scripting Host and VBScript.
• Good understanding about AD replication and how to troubleshoot replication problems.
• Regularly review operational processes for efficiency, effectiveness and compliance with a view to instigate a continuous process of improvement.
• Hands-on experience administering AD Group Policy and understanding how Group Policy works.
• Understanding of database clients such as Oracle and SQL Server.
• Upgraded existing Windows 2000 domain (Active Directory) to Windows 2003 domain. Part of "Active Directory Engineering" team.
• Worked with the Exchange Team to integrate Exchange 2000 with AD. Assisted the Exchange Team with setting up ADC connection agreements.
• Consolidated NT4 account domains (from 12) into two account domains.
• Consolidated 400+ login scripts from NT4 domains into one login script (Written in VBScript) and one text file for drive mappings.
• Migrated 4000+ user accounts from NT4 domains to "Active Directory" domain with sidHistory. Wrote custom scripts to assist in Migration.
• Written custom scripts to help in the Migration and other operational tasks using VB and ADSI. Have programmed in VB and ADSI extensively.
• Implemented SFU “Password Synch” component.
• Assisted development teams who are now taking advantage of “Active Directory” for authentication and sometimes authorization, with “Active Directory” related issues.
• Modified the Microsoft DLL to enforce Password Complexity requirements to suit our requirements.
• Implemented “Active Roles” for AD administration, for “Help Desk”
• Extensive Knowledge of scripting models such as ADSI, VBScript and WMI.
• Engineer/Maintain WINS architecture for the enterprise. Consolidated 40+ WINS servers to 5.
• Responsible for Design and implementation of the Business Recovery Strategy, used Multicast technology to push the image simultaneously to 200+ PC's.
• Responsible for Design/Implementation of a third party product for pushing Microsoft Security patches to Servers.
• Design and Implement Real Time replication of data across file servers using third party product..
• Superior problem solving and troubleshooting skills in technical areas.

Confidential

Senior Systems Engineer

Responsibilities:

• Responsible for designing, implementing and managing NT domains.
• Design, Install, configure and maintain Microsoft Cluster Servers. Setup an IIS server as an FTP server using MSCS in an Active/Passive configuration.
• Worked extensively with WINS and Confidential servers.
• Involved in the design of Exchange 5.5 architecture for the Enterprise and I oversee the duties of the Senior Exchange Admin and other systems admins.
• Worked with Lotus Notes 4.6. Project involved the Mail Exchange and Directory Sync between Exchange and Notes by implementing Connector Services.
• One of the applications was an outlook form to page users in outlook which is being used throughout the enterprise.
• A form for the department admins to modify the phone number and the location for the employees.
• Used Active Server Pages to maintain and extend the functions of a Web based applications that enable paging users via http.
• Build images using Ghost for Laptops/Desktops.

Confidential

Senior Systems Analyst

Responsibilities:

• Manage projects and a team of 5 employees.
• Install/Support NT servers. Installed NT servers with backend services like IIS 3.0, SQL server etc. Got involved in Domain related issues.
• Worked with WINS and Confidential servers.
• Worked with CITRIX servers.
• Responsible for about 20 Netware 3.x servers. Currently involved in migrating NetWare users/data/printers to NT servers.
• Worked on Sybase/ODBC connectivity issues with NT.
• Managed a 60+ node OS/2 LanManager 2.1x network.
• Currently supporting around 1000 users.
• Involved in standardization of Laptop configurations. Roll out Laptops with NT/95 for remote access.