OBJECTIVE

• I love working with networks and servers, learning new concepts and expanding my area of knowledge. Nothing makes me happier than debugging an oddly broken system or understanding a quirk or glitch.

TECHNICAL SKILLS

Systems: intel - x64-linux, intel-x64-windows, sun-sparc-solaris, intel-x64-freebsd, intel-x64-esxi.

Network: TCP/IP, TCP, UDP, ICMP, SMTP, DNS, NFS, RIP, OSPF, EIGRP, BGP, frame relay, ATM/LANE, MPLS, DS1, DS3, OC3, PRI/BRI, VOIP, IPTV, 802.11a/b/g/n/ac/wave2.

Hardware: Cisco 2600/3600/7200/7500/12000 routers and 2960/3750/3850/6500 switches, Nexus 5548UP/9000, Cisco UCS 6120XP/6248UP FIs, B200 M2/M3/M5 blades, EMC CX/VMAX/VNX/VNX2/Unity, NetApp F740/F760, Ubiquiti, Routerboard, Meraki, Cisco ASA/NGFW, Brocade switches/routers.

Software: Apache/LAMP, automation and scripting using sh, perl and C, bind, tripwire/OSSEC, sendmail, Secure ID, Cisco Umbrella/Cloudlock/ISE/Stealth Watch, epage, SunOne LDAP, HP Openview, mrtg, cacti, zabbix, BEA Weblogic, Asterisk, MySQL, Veritas VCS/filesystem/VM, Oracle VirtualBox, VMware ESXi 5.x/6.x, Cisco Call Manager, Solaris, Windows Server 2012/2012R2.2016, MacOS X, Linux.

Languages: C, sh/ksh/bash, Perl, HTML, Javascript, Java, Python, PHP, SQL.

PROFESSIONAL EXPERIENCE

Confidential, Kansas City, MO

Lead Systems Administrator

Responsibilities:

• Installed and configured two EMC Unity 300F SANs supporting Hyper-V on Cisco UCS and two Isilon clusters for general file storage in HQ with replication to DR.
• Designed new desktop switching network and lead the technical aspects of our HQ building move. Participated in a new phone system evaluation and drafted the executive presentation.
• Trained to support AWS prod cluster, Puppet and Ansible to back up DevOps engineer. Migrated from Hyper-V 2012R2 to VMware 6.7 to better support growing Linux VM requirements.
• Automated deployment of Linux CentOS 7.x using kickstart and bash/perl scripting. Reconfigured and standardized remote office hardware. Designed and deployed a gigabit MAN utilizing multiple diverse ISPs, BGP, VRFs and two edge sites in a budget-neutral manner.
• Designed and deployed a new security methodology utilizing edge and data center firewalls with AMP, Cisco Umbrella/Cloud Lock, Cisco ISE/StealthWatch/Tetration and RSA two-factor authentication for VPN, O365 and critical infrastructure. Helped to move GD closer to HIPPA compliance. Worked with management to define and document standard IT operating policies.
• Implemented a puppet server for Linux config management. Wrote bash and perl scripts for Linux VM management and monitoring. Over-hauled our Windows AD infrastructure and schema. Defined an IP allocation policy to minimize routing table size. Migrated to OSPF from EIGRP + static routes. Configured MDT for Windows desktop deployment.
• Selected and purchased JAMF for Mac desktop management. Deployed ADFS for external authentication with services like Zoom. Reconfigured Cisco UCS service profiles and refreshed Cisco B200M3 blades with B200M5s. Responsible for the daily management of Windows 2012, 2012R2 and 2016 servers, CentOS6/7 servers, Meraki WiFi/VPN, Cisco UCS, Cisco ASA client VPNs, virtualization, storage, core/desktop switching and MAN/WAN routing. Completed Microsoft licensing audit. Basic management of MS SQL Server. Mentored IT staff on technology and championed the concept of “lunch and learn”.

Confidential, Overland Park, KS

Senior Systems Administrator

Responsibilities:

• Managed production CentOS Linux systems running on VMware and Cisco UCS. Upgraded prod to VMware to 5.5. Upgraded Cisco UCS firmware and added two B200 blades. Upgraded production EMC VNX 5300 software.
• Purchased, racked and configured an EMC VNX 5400. Migrated the VNX5300 to the DR site. Upgraded Dell/SonicWall switches and firewalls to Cisco 3850s and ASA 5525-Xs. Implemented a multi-tier/VLAN production network.
• Managed production MySQL databases. Provided data-at-rest AES encryption for databases. Corrected issues with MySQL replication architecture. Replicated production database to Dev for backups and reporting/billing.
• Wrote prod/stage/dev controller bash shell scripts. Implemented LDAP authentication and distributed sudo using LDAP. Migrated physical hosts in prod to VMware and repurposed physical hosts as a Dev VMware 5.5 cluster backed by a homegrown scst/qlogic SAN.
• Debugged production issues across multiple network components and servers. Migrated developers from desktops to VMs to enhance source code security. Provided a complete deployment service using kickstart and automated system configuration of OS and applications. Deployed bare metal and VMware virtual systems. Managed internal certificate authority and external SSL certs for HTTPS, LDAPS and SMTPS. Implemented OSSEC for HIDS. Implemented centralized syslog in prod and dev. Configured zabbix for alerting and cacti for trend monitoring in prod and dev.

Confidential, Lenexa, KS

Linux Systems Administrator/SAN Administrator

Responsibilities:

• Performed cleanup of OEL and CentOS Linux systems. Installed OEL 5.9 for Oracle RAC with ASM. Migrated from LVM to SAN on an EMC VMAX 20k.
• Configured Linux multipathd (CentOS/OEL). Spec’ed out an EMC VNX 5400 to replace a CX340. Installed kickstart, cacti and LDAP on VMware virtual systems.
• Integrated LDAP authentication with Windows AD. Installed VMware ESX 5.5 with SAN connectivity to migrate VMware storage from local disk to SAN.
• Reconfigured SAN fabric from cascade to star topology. Monitored SAN utilization with cacti. Installed a wiki docs server for Linux/SAN docs. Participated in an audit for the CSC banking project, ensured system security and provided supporting documentation (passwd, shadow, sudo, pam, selinux, IP, ssh).

Confidential

Owner/Operator/Architect

Responsibilities:

• Confidential was a wireless ISP covering the French side of the island of Saint Martin in the Caribbean. Service was delivered from solar-powered towers placed on hills and provided internet to 400 customers.
• I was responsible for the installation and administration of our Bind DNS servers, ISC DHCP server, Squid cache server, imap/smtp/webmail servers, MySQL database and radius-based user authentication server.
• Installed Nagios monitoring software to perform event alerting by SMS and Cacti to perform trend monitoring. Installed DNS/DHCP/Email services on virtual instances using Oracle VirtualBox running Centos Linux with failover between two hosts.
• Installed and managed LAN hardware: a redundant set of Cisco 3745 core routers and Cisco 3550 L3 switches utilizing VLANs to segregate different customer traffic. Installed an APC UPS and a standby generator.
• Connected all servers to a Cisco 2511RJ console server and APC switchable PDUs to facilitate remote management. Internet transit was provided over fiber (rare in the Caribbean) with a wireless backup. Planned a second fiber connection and tested BGP configurations for a migration to a redundant network. Built the WAN using Ubiquiti 5Ghz NanoStation radios and Routerboard 450s utilizing MPLS and OSPF for segregation and redundant routing. Confidential was sold and transferred to Dauphin Telecom in Saint Martin on 30 April 2012.

Confidential, San Jose, CA

Senior Systems and Network Admin

Responsibilities:

• Lead a team of three mid-level system admins. Implemented numerous cleanup/reorganization projects.
• Championed a new hardware standard, migrating from SuperMicro to Dell platforms based on Dell’s lower cost and better manageability. Upgraded monitoring, storage, netapp/DOT, network and kickstart infrastructure.
• Rolled out a new standard version of CentOS Linux to 600+ nodes. Rearchitected backups to improve reliability. Architected a new colo cage layout for a pending move.
• Prepared hardware and software planning lists with technical and budgetary information for the colo move.
• Managed MySQL databases running on Solaris 9 on Sun Fire 210/240s. Upgraded MySQL databases from netapp based storage to Fujitsu SAN based storage. Hired and trained two mid-level system admins.