Unix/linux/security Engineer Resume
TECHNICAL SKILLS:
Hardware: Sparc T5120, T5440, T5240. Sparc M3000, M400 HP ProLiant DL 360, 380 G7 and G7. Sun Fire V880Software: Dameware, Hyena, Blackberry Enterprise server, Acronis Enterprise server, Remedy, Symantec Netbackup, Jumpstart Toolkit( JSS). EMC
Operating Systems: Unix/Solaris, Redhat Linux, Ubuntu Server,Windows Server 2003, Windows 7, Windows XP, Windows Server 2008. Vmware ESXi 5.1
Programming Languages: Java, shell script
PROFESSIONAL EXPERIENCE:
Confidential
UNIX/Linux/Security Engineer
Responsibilities:
- Configured firewall using iptables for system/host security.
- Installed and configured nessus vulnerability scanner
- Performed vulnerability scans for Unix/Linux environment
- Prepared Scan reports and implemented solutions to eliminate/mitigate security risk.
- Installed, configure ossec intrusion & detection server and client for the entire Unix/Linux environment
- Used CA identity management to enforce strict role based access control in UNIX environment.
- Hardening Redhat Linux 6 and Solaris 10 server.
- Manage patching on redhat 6 and Solaris 10 server using, yum and pca report tool.
- Create and manage user accounts. Setting password aging and account expiration.
- Troubleshoot user account issues and network related connectivity issues
- Install and provision new servers to the network using non interactive kickstart and, jumpstart installation.
- Troubleshoot system boot issues using rescue environment and single user mode.
- Perform system monitoring; cpu, memory, I/O, hardware, jobs scheduling and processes management
- Creating new partitions, including raid partitions, logical volumes, zfs file systems for running systems nondestructively.
- Performed package management for system upgrades and updates using yum and rpm.
- Build local yum repository for internal network use.
- Create and extend physical volumes, volume groups. Resize existing logical volumes for additional space requirements.
- Restrict access to files and directories using Access Control Lists file permissions. Set suid, sgid and sticky bits on files as needed.
- Configure NFS servers for file sharing in Solaris 10 and Rhel 6 Servers.
- Troubleshoot network connectivity, hardware, cpu, memory, I/O, boot, DNS and other application issues
- Installed and configured DNS for internal name resolution.
- Installed and configure zones in Solaris 10.
- Implemented Raid 0 5 in Rhel servers and Raid 0 Z in Solaris 10 servers.
- Setup ZFS user quotas, group quotas, refquotas in Solaris 10 and user and group quotas in Rhel 6
Confidential
Analyst
Responsibilities:
- Managed a large development, test and production environment with over 200 physical and virtual servers in three separate locations.Build and configured VMware virtual machine templates for Solaris 10 and Redhat 6
- Deployed virtual machines/guest Operating system from templates.
- Modified and configured and lockdown newly deployed Guest operating systems.
- Created, exported and Deployed victuals from ovf templates.
- Installed, configured Solaris 10 operating system on Sparc and x86 architecture, using interactive method, wanboot, jumpstart and graphical user interface (GUI).
- Hardened operating system by installing 10 Recommended patches, security packages from IA team, lockdown control/master server and nodes through security scripts. Disabled services in a bid to minimize and or eliminate unauthorized server access.
- Administered user’s accounts on all servers for both software development team and systems engineering team. Configured user profiles, troubleshoot and resolved user login problems.
- Configured network settings for both physical and virtual servers. Troubleshoot server network connectivity using native Solaris tools and commands. Configured new ports and Vlans on Cisco Switches and terminal servers, added new servers on the network and terminal servers.
- Troubleshoot Sparc server hardware failures, re - enabled disabled components, ran explorer software, retrieved and transmitted reports to Oracle field Ops for analysis. Worked with Oracle/Sun Engineers to identify and replace faulty server parts.
- Build control/master servers, conducted bacn and bare metal install of GCSS-J application packages and bundles. Established repositories, NFS shares and enabled all essential services for master server functionality.
- Travelled to Pacific command and Southern Command to install GCSS-J application. Configure data powers, switches installed control node, installed Solaris OS, zones and the GCSS-J application.
- Installed, configured Solariszones cloned Solaris zones and migrated Solaris zones to different servers.
- Experienced with zpool including creating, scrubbing, replacing disks, adding space, importing and exporting zpools. Created, set mount-points and mounted ZFS for users. Setup ZFS quotas, reservation and automatic NFS-share of directories.
- Conceived, designed and implementation data migration plan from Network attached Storage (NAS) storagetek 5210 to Storagetek 5310. Managed Storage disk array (SDA) using Solaris common array manager (CAM).
- Mounted and increase NetApp partition sizes.
- Created sftp accounts and associated locked account to prevent unauthorized access by sftp users.
- Created raid 1 and raid 5 volumes/LUNs on Storage Disk array. Enabled antivirus scans, configured SMTP client on SDA and NAS for LUN and system monitoring. Created, managed user groups and hostgroups on NAS. Configured permissions on hostgroups and user groups and added master servers to trusted host group.
- Created flash archive and images of all master servers in the environment. Added flash archive to jump server in anticipation of potential server failure and restoration.
- Installed VERITAS Volume Manager. Created disk groups, configured raid 1, raid 5 and mirrored volumes. Replaced failing disk in disk group. Created plexes and subdisk, migrated data from old plex to a new plex.
- Monitor system processes, load averages and general health of systems. Conducted root password recovery, reset on inaccessible servers, and monitoring system and GCSS-J application logs for errors.
- Configured DNS client on Solaris Zones and servers. Upgraded andor delete DNS entry/record on DNS server. Used nslookup to query dns servers and obtain server/device fully qualified domain name (FQDN).
- Installed and configured EMC networker backup client on both redhat and Solaris 10 servers.
- Troubleshoot failed backups on daily basis and submitted comprehensive report on backup status to management.
Confidential
Unix/Solaris Administrator
EXPERIENCE:
- Maintained Solaris and Linux servers, evaluating needs and installed appropriate recommended patches as needed.
- Experienced with zpool including creating, replacing disks. Adding spaces, importing zpools. Creating set mounts points and user-mount points.
- Performed data management using native Solaris utilities for archiving and compression.
- Administered user accounts on Solaris 8, 9 and 10 servers. Customized user environment for users. Troubleshooting user logins using various remote login utilities. Used VI editor to edit necessary files.
- Performed administration and monitored job processes using associated commands. Proficient in troubleshooting system problems. Monitored client disk quotas and general disk space usage. System performance monitoring and tuning.
- Introduced new servers to the network. Maintaining and troubleshooting network connectivity.
- Monitored system logs. Performance Monitoring and capacity planning in anticipation f system resource usage and needs.
- Installed, configured and hardened Solaris 8, 9 and 10 servers. Installed appropriate Sun recommended patch clusters and updated as needed. Created, configured and installed Solaris zones.
- Experienced with zpool including creating, scrubbing, replacing disks, adding space, importing and exporting zpools. Created, set mount-points and mounted ZFS for users. Setup ZFS quotas, reservation and automatic NFS-share of directories
- Intimate knowledge of SMF in Solaris 10.Responsible for data management using native Solaris utilities for archiving, compression backup and restore.
- Working knowledge of VERITAS and SUN volume manager including RAID on Solaris platforms.
- Working with Symantec professional services, installed and configured Enterprise Symantec Netbackup master, media and client servers. Setup VERITAS Netbackup policies in the enterprise.
- Experience with remedy ticketing system.
- DNS client and server configuration on Solaris servers
- Monitoring clustered servers for cluster functionality and health. Added users to cluster.
Confidential
System Administrator
Responsibilities:
- Responsible for installation, configuration and overall maintenance of Sun Solaris and Linux servers.
- Responsible for Users and network security on Solaris and RedHat platforms.
- Installed and configured Solaris 7, 8 and 9 servers.
- Installed recommended SUN patch clusters.
- Performed TCP/IP and network configuration on servers.
- Performed hardware administration.
- Administered Sun disks with VERITAS Volume Manager 4.0.
- Created VERITAS file system and mount points for Oracle.
- Administered user accounts on Solaris 7, 8 and 9 servers.
- Customized user environments for users.
- Administered user accounts on RedHat Linux.
- Troubleshooting of TCP/IP, NFS issues.
- Administered NFS on Sun, Solaris and Linux servers.
- Troubleshooting of network connectivity issues.
- Performed patch administration.
- Installed Apache web server.
- Administered Apache web server.
- Troubleshooting server error messages.
- Monitored system uptime.
- Tracked disk space on servers when appropriate escalated system issues arose.
- Tracked and fixed problems using system logs.
Confidential
Helpdesk Analyst
Responsibilities:
- Provide basic first level telephone support to end-user community on hardware, software and network related problems, questions, and/or issues.
- Troubleshoot problems with operating systems, applications, remote access, email, and telephone and wireless issues. Windows 7, Windows Server 2003
- Answer, evaluate, and prioritize incoming telephone, voice mail, e-mail, and in-person requests for assistance from users experiencing problems with hardware, software, networking, and other computer-related technologies, open, track and close trouble tickets as well as input trouble calls into ticket tracking system (Numura & Remedy)
- Use remote tools such as remote desktop, Dame Ware Utility to analyze and resolve trouble issues.
- Use Active Directory (Windows Server 2003) to create, modify, reset and delete user account, reset and modify user passwords and enforcing group security and login policies.
- Configure hardware and software, installs Microsoft Windows Patches and updates, load computer with government furnished system images, perform computer reimages, and assist users with data backup and restore.
- Add and remove blackberry devices from the network, link devices with user mail accounts (exchange server), modify and reset user password on blackberry devices.
- Use Hyena Software to synchronize changes made in Active Directory to all other domain controllers on the Network.
- Assist in the research, evaluation, testing, selection, procurement, implementation and maintenance of new software/hardware/systems. Assist customers with encryption and data recovery procedures.
- Document customer and software configurations and develop and/or update standard operating procedures and materials.
- Monitoring and reporting statistics, load averages, disk usage on both UNIX and windows based servers.
Confidential
Operation Enduring
Responsibilities:
- Trained incoming Squadron personnel on the use of Global Air Transportation Executive System (GATES) web based application.
- Secured cargo yard from unauthorized access
- Processed cargo, equipments, troops to forward operating bases
- Trained incoming personal on securing cargo, machinery and ammunition
- Assisted in transportation of fallen service members
- Inspected all cargo coming into and leaving Afghanistan to forward operating basis or the U.S.
- United States Air force, Air transport apprentice Andrews Air force BaseMD
- Process passengers, cargo, weapons and material from home station to war theatre and other military installations.
- Physical fitness Flight coordinator
- Deliver relief supplies to earthquake victims in Haiti
- Prepare and process troops, weapons for air lift to OEF and AEF