SUMMARY:

• A highly skilled, creative technologist with hands - on knowledge of designing, building, and maintaining secure, high-performance, fault-tolerant enterprise infrastructures (including facilities, networks, systems, and services).
• A proven communicator and leader, with a demonstrated ability to balance technical needs with business needs in order to find and apply cost-effective solutions.
• A dedicated professional working in the IT field over 21 years as a lead, who understands the criticality of efficiency and automation in the fast-paced, high-pressure IT industry.
• A creative thinker, a self-starter, and a hard worker with strong organizational, planning, and leadership skills.

PROFESSIONAL EXPERIENCE:

Confidential, Columbia, MD

Enterprise Cloud Architect

Responsibilities:

• Architect public, private, and hybrid cloud solutions using Amazon AWS, Microsoft Azure, VMware Cloud suites (vCloud Director, vCAC, vRealize, vCloud Air), and OpenStack platforms.
• Lead architect for enterprise data center migration and transition projects for several multi-national corporations.
• Architect Multi-site/hybrid cloud solution for PasS, SasS, and IasS leveraging Microsoft Azure platform.
• Design Microsoft Azure components such as: site-to-site / point-to-site networking, internet gateway, multi-site VPN, ExpressRoute, IP address assignment, Cloud Services, Resource Groups, firewalls and NSG rules, ILB, Auto scaling, OS/ data vhd store, Cloud storage, site recovery, Application Insights, Splunk monitoring, azure automation (management interface/ review interface, CLI, PowerShell scripting), .NET, Service Bus, cloud service (web role/ worker role) and provide fundamental security & isolation methodologies features in multi subscription environment.
• Lead DevOps teams to migrate/transition on-prem client/server, mainframe, and Cots applications to the Azure cloud.
• Manage/administer Microsoft Team Foundation Server (TFS) and Microsoft Visual Studios application code deployment/ code refresh/ code merge and manage catalog items for platform automation process.
• Transition/migration IT solutions such as: web, database, messaging, AD/IDAM and business apps into Azure.
• Establish Microsoft Identity and Access Management (IAM) to create multiple users with unique security credentials, integrate with Active Directory, SSO based federated service, and manage the permissions for corporate users.
• Installed, configured, and troubleshoot Microsoft Forefront Identity Manager (FIM) 2010 R2 along with Microsoft Active Directory Single Sign on (SSO) integration.
• Designed, installed and prepare Microsoft Identity Manager (MIM) to work with Azure Active Directory including setting up Group Policies Objects (GPO), MIM 2016 Synchronization Service (Sync), MIM 2016 Service & Portal, SSPR Registration Portal, the SSPR Reset Portal, Synchronization Rules in the MIM Portal, and MIM 2016 Add-ins & Extensions.
• Setup Microsoft Identity Manager to work with the self-service account unlock and password reset using Multi-Factor Authentication (MFA) with Microsoft Azure Active Directory, and as a service for cloud and on-prem enterprise applications to regain access to end-user account and resources via SMS or telephone calls.
• Migrated platform and all its components from Microsoft Forefront Identity Manager (FIM) 2010 R2 to Microsoft Identity Manager 2016 in Windows Azure Active Directory.
• Design, deploy, and configure Sophos UTM and end-point management into AWS cloud and corporate devices.
• Establish AWS Identity and Access Management (IAM) to create multiple users with unique security credentials, integrate with Active Directory, SSO based federated service, and manage the permissions for corporate users.
• Team lead of application migration (Legacy, COTS, Mainframe, Unix/Linux, Windows, hardware- appliance to converged networking) from multidirectional data center to AWS platform without application down-time.
• Design VMware Hybrid cloud solution with vRealize and integrate with existing data center vSphere environment.
• Deploy vRealize Suite and its components, including vRealize Automation, vRealize Business for Cloud, vRealize Operation, vRealize log, and vRealize Orchestrator to establish Hybrid Cloud Management Platform (CMP).
• Provide SDDC solution with EMC product, such as Federation Enterprise Hybrid cloud (EHC) along with VMware NSX networking, vBlock components, EMC Avamar, EMC RecoveryPoint, and VCE hardware platform.
• Access, analyze, design, deploy and configure VMware network virtualization and security platform (NSX) to enterprise data centers and integrate with existing VMware vSphere environments.
• Infrastructure architect of a worldwide cloud initiative and team lead of OpenStack cloud platform deployment with compute-Nova, network-Neutron, dashboard-Horizon, block storage-Cider, identity- Keystone and orchestration service-Heat along with MongoDB, MariaDB, Cassandra databases, application configuration and automation tools such as: Chef and Puppet.
• Design and manage converged infrastructure implementation with VCE VBlock; Cisco 5108 blade hosts, Cisco UCS 6100 switches, Cisco MDS 9506, Nexus 1000v, and EMC Clariion CX4-480/Symetrix V-Max storage arrays.
• Manage the VCE platform with vSphere, UCS manager/CIMC, and EMC Navisphere/Powerpath utilities.
• Proficient with EMC, NetApp, Hitachi, and IBM enterprise FC SAN, iSCSI/NAS storage technologies.
• Deploy Citrix virtualization with XCP cloud platform/ XenCenter, Citrix Access/Secure Gateway, and Citrix NetScaler MPX/ VPX along with Xendesktop/XenMobile.
• Access enterprise infrastructure platform and provide road maps for Active-Active data center; implementing vSphere Metro Storage Cluster (vMSC) using EMC VPLEX solution and provide future migration paths to the different clouds.
• Establish Microsoft Forefront Identity Manager (FIM) and integrate with Active Directory, MS Exchange/365 platform.
• Setup AD layout for Windows 10 migration; setup GPOs, OUs, Security Groups and lead Windows 10 migration effort.
• Well versed with Windows, Red hat Enterprise Linux (RHEL), Ubuntu, CentOS, Android, iOS, and open source OS.
• Manage systems engineers and network admins to complete datacenter/cloud migration projects (up to 42 members).
• Provide security design and architectural boundary for the whole data center along with directory structure, file/document distribution, mail systems, web structure, database, and COT apps on Windows and Linux platforms.
• Participate in and follow the change control procedure to optimize SLA metric and provide highest efficient services.

Enterprise Architect/ Lead Engineer

Responsibilities:

• Architect Active Directory infrastructure with DNS and DHCP along with networking and storage components.
• Deployed multi-site Active Directory, OU, Sites, GOP, site trust, rights and securities for multi-national companies.
• Migrated to 2012 AD sites, GPOs, OU’s, and established USGCB (FDCC) compliance.
• Designed and consolidated GPOs for different business entities and clean up old GPOs and document the process.
• Logical and physical design of multi-site networks with AD, print server, file server, SQL, Exchange, Web Servers, DNS/DHCP servers, WSUS/SCCM, imaging servers, virus/spam filter servers, and IIS servers.
• Designed enterprise network backbone along with Installing and configure and upgrading Cisco switches, routers, Checkpoint firewalls, and ISS IDS.
• Accessed, project plan, designed MS Exchange 2003/2007 migration to Exchange 2010 platform.
• Migrated Exchange 2003/2007 to Exchange 2010 on dedicated servers plus VM platform; including Client Access Server, Hub Transport Server, Mailbox Server and Edge Transport Server (for MS Forefront).
• Migrated SMTP components/connectors, user mailboxes, resources accounts, security groups, distribution mailboxes, Public Folders and test to make sure everything works accordingly.
• De-commissioned old Exchange servers and phase-out old Exchange platform from the organization.
• Supported Blackberry servers (BES) for the corporate users and troubleshoot BES related issues.
• Designed, tested and implemented a university wide network migration from Novell to Windows.
• Designed university wide active directory infrastructure, including users, groups, sites and GPO’s.
• Designed and implemented University wide mail migration to Microsoft Exchange mail systems.
• Installed and managed Windows 2003/2008 PDC, BDC, files servers, print servers, DNS/DHCP, and WSUS.
• Migrated users from Novell network to Windows platform and tested/validated the migration process.
• Managed team members with different skill sets and lead infrastructure migration operation.
• Knowledge share with the team members through webinars, meetings, group sessions and presentations.

Confidential, Baltimore, MD

Lead Network Engineer/Sys Architect

Responsibilities:

• Manage, team-lead and administer networks over 5000 users, supporting 130+ servers, 5000+ workstations/laptops/ handhelds, 190+ network printer, switches, hubs and peripherals on LAN and WAN.
• Support a network of TCP/IP, DNS, WINS, DHCP, IPSec, PPTP, WWW, FTP, EAP, and Wi-Fi protocol.
• Manage State agency wide Active Directory, email solutions, file/data solutions, print solutions on Windows 2008/2003 servers, VMware ESX/ESXi, MS Exchange 2007/2003 servers, OWA, MS Outlook 2007/2003 clients and handheld devices.
• Administer Confidential Active Directory clean up and migration process for the State Agency and all other sub-sites.
• Configured VBScript/WSH to migrate users, groups and OU’s from old platform to new AD sites.
• Design a future plan to migrate Exchange 2003 to Exchange 2007 on cluster environment.
• Install and manage VMware server-firm platform on ESX/ESXi, including installing servers/workstations, creating VMware images and temples and migrate Windows 2000/2003 servers.
• Setup and administer Blackberry Enterprise Server (BES) solution for Confidential and high profile clients such as; State School Superintendent, Asst. Superintendents, and division directors.
• Manage Symantec Mail Security for Exchange, Symantec Mail Security for SMTP gateway, Symantec Mail Security for clients to mitigate virus infections and Cymtec IDS to identify infected clients.
• Support/maintain Citrix Meta frame platform including applications and printers setup.
• Administer and manage patch solutions for over 3000 servers and workstations using MS WSUS2/WSUS3.
• Install and support MS SharePoint 2007 server and participate on application migration process.
• Support/help team members to image new and old servers/workstations with industry standard products such Acronis, Ghost and VMware imaging.
• Manage PKI (SSL certificate) deployments for state agency websites.
• Install and support SQL 2000 cluster servers including server and storage management..
• Setup EMC CLARiiON Storage Systems along with Brocket CX400 fiber channel switch with Emulex/QLogic HBA for DAA on Confidential network.
• Day to day activity on Dell Blade/ ProwerEdge/Optiplex/Precision / IBM Netfinity server, Cisco switches and TeraStation; security implementations and follow the guidelines of state DBM, NIST, CERT, FISMA, etc.

Confidential, New Carrollton, MD

System Engineer/Security

Responsibilities:

• Manage and administer Confidential national critical data center and work with a team of engineers and specialists.
• Install, maintain, and troubleshoot Checkpoint NGX firewall on Linux hardware platform and SecuRemote VPN connectivity for remote offices and users; including hardware, firmware and patch upgrade, log generation/migration, install policies/rules, account creation and report generation, etc.
• Install and configure IBM Blade servers and migrate contents from Dell PowerEdge platform to blade servers.
• Manage Confidential ’s development/test and production servers (Windows 2000/2003 platform) running IIS, BES, WSUS, Citrix, SQL servers on TCP/IP/WINS/DNS environment.
• Ghost (image) Confidential ’s development, test and production servers before migration, product upgrade, application deployments, and security patch installation.
• Remote control Confidential ’s production servers using Remote Admin software and configure software perimeters.
• Support Confidential ’s two domains on different locations, including Domain Controllers, Active Directories, DNS’s, Veritas BackupExec and BrightStore backup solutions.
• Configure and troubleshoot EMC SAN storage systems to accommodate all six web servers’ storage.
• Install and manage VMware server on Dell PowerEdge servers to test web applications on Windows 2000 OS.
• Manage and edit scripts to update application patches/ software to the remote location servers and test the network connectivity using VBScripts/WSH tool.

Confidential, Washington, DC

IT Engineer/Security, DC OCTO IT Security Dept.

Responsibilities:

• Monitored and maintained physical and logical security and access to DC government citywide network.
• Created, deployed and managed incident response policies and guidelines for 35,000+ users network.
• Designed and implemented security patches and service packs (based on CERT and product vendors) for production servers/desktops; and centrally distributed them to the entire network.
• Supported McAfee EPO virus protection central systems for OCTO (15,000+ nodes).
• Audited network security breaches for DC agencies, using scanner and analyzer (nmap & ISS, LANguard).
• Tested and evaluated new security products; compare, classify and categorize different vendor’s product; bench mark final selection and provide recommendations to appropriate management.
• Installed SSL certificate on the DC Gov’s critical web servers for certificate authentication with Confidential .
• Communicated with all DC agencies servers using VNC, DameWare, Intel LANDesk, Windows Terminal Server, and Symantec PC Anywhere communication software.

Systems Engineer

Responsibilities:

• Designed and implemented Active Directories including Exchange 2000 mail platform for DC Gov. agencies.
• Provided platforms support for Win 98/2000 Pro/XP and NT/2000/2003 Servers.
• Supported AD/PDC/BDC, Print, Application, SMS 2.0, SQL, EPO Virus Protection, and GIS servers.
• Managed backup jobs using ArcserveIT 6.61 and Veritas Backup Exec 8.6.
• Migrated all servers from Windows NT 4.0 to Windows 2000 for DC government agency.
• Established and supported Microsoft mail systems (Exchange 5.5/2000 and Outlook) on cluster servers.
• Designed and implemented new file structures for the DC Office of Planning.
• Security design for PDC/BDC, TCP/IP/WINS/DNS, Exchange and file servers at DC Office of Planning.
• Maintained and provided troubleshooting for all Cisco routers, switches and hubs.
• Provided software support for the DC agencies: MS Office products, Visio, Norton/McAfee Antivirus, PCAnywhere, SQL, and IIS servers.
• Test OS, new software and special applications on VMware server platform before deployment.
• Coordinated IT support/purchase between vendors and agency managements.
• Created images of 40+ critical servers and workstations for disaster recovery.

Systems Engineer/ Technical Trainer

Responsibilities:

• Provided curriculum development and technical training of MCSE courses to the network administrators and system engineers working for the DC Government.
• Designed and developed IT training programs. Managed schedules and project development.
• Provided ongoing engineering support for the setup, preparation, and troubleshooting for the computer labs.

Confidential, Herndon, VA

Network Engineer/ IT Manager

Responsibilities:

• Administered and supported a team of desktop group on Windows NT BackOffice 4.0 including multiple Exchange 5.5 Servers, Internet Information Server 4.0, SQL Server 7.0, System Management Server 2.0 and RAS Server.
• Set up, enhanced and kept up hardware and software for ideal performance.
• Performed capacity planning of the LAN, hardware and software, backup and disaster recovery procedures.
• Recovered mailbox (calendar, contacts, inbox, and sent items) from backup tapes in case of disaster.
• Network hardware management tasks included: performing setup, configuration and upgrades of switches, routers, hubs and cable connections; managing trace routes and network traffic.
• Converted mailboxes from ccMail to MS Exchange and MS Outlook interface.

Confidential, Columbia, MD

Network/Hardware Specialist

Responsibilities:

• Built high-end computer servers, performed initial disk management tasks, installed server software and custom-developed diagnostic features for several government agencies.
• Designed, analyzed, implemented, and tested networks of user: including router, switches, hubs, and cable connections.
• Managed, configured and diagnosed Windows NT 4.0, MS Exchange 5.0, SMS 1.2. and SQL Server 6.5.
• Furnished technical support for software, hardware and connectivity problems for 56 workstations.
• Set up, enhanced and kept up hardware and software for ideal performance.

Confidential, Los Angeles, CA

Network Administrator

Responsibilities:

• Migrated all Novell Netware 4.0 servers to Windows NT 4.0 platform.
• Administered, configured and diagnosed Windows NT 4.0 servers, including MS Exchange 4.0 and IIS.
• Provided technical support for software, hardware and connectivity issues for 120 workstations.
• Configured, and supported workstations with Windows95, MS Office Suite, MS Internet Explorer, MS Front Page, MS Outlook.