Global Encryption Administrator Resume
New York, NY
SUMMARY:
Certified Microsoft and data storage Engineer with extensive hands - on experience seeking a potential long-term Storage Engineer position. Demonstrated ability to deliver and implement technical solutions to meet critical business needs. Highly motivated in acquiring new skills and achieving higher certification level while contributing to the growth of the company.
TECHNICAL SKILLS:
Operating Systems: Windows Server 2008/2003, Exchange Server 2003, Windows 7/XP/2000, UNIX
Technologies: Active Directory, Exchange, LAN/WAN, DHCP, DNS, WINS, VPN, Firewall, Virus Scanner, Load Balancing, VMware, NetApp FAS 6000/3000/2000 series, Data ONTAP, WAFL, RAID-DP, Virtual filers, Snapshots, Snap Mirror, Deduplication, Operations Manager (DFM), Performance Advisor, Shadow Image, Snap Vault, OSSV, VERITAS Backup
Protocols: TCP/IP, LDAP, SNMP, POP, SMTP, IPSec, CIFS, FTP, SSL/TLS
Languages: Java, HTML, C++, C, Visual Basic, SQL
Applications: Norton Ghost and Anti-virus, Adobe Photoshop CS, MS SQL Server, MS Office Suite (Word, Excel, Access, Outlook, Visio, PowerPoint)
PROFESSIONAL EXPERIENCE:
Confidential, New York, NY
Global Encryption Administrator
Responsibilities:
- Provide Identity Administration on various platforms, applications and systems across Citi (PKI, NetApp Data Fort Security systems and Secure Transport).
- Lead NetApp Data fort migration and decommission project. Establish guidelines for safe and secure decommissioning and disposal. Propose options for Data fort Replacement. Investigate and present next-generation Data Encryption and key management solutions.
- Assist Backup team to migrate Data fort legacy encryption environment to IBM Jaguar drive.
- Provide technical support to Citi’s 100+ Data fort environments globally. Activities include Data fort reconfigurations, migrations, upgrades, and data backups and restorations. Engage Network, Storage, Backup teams and vendors to proactively resolve issues prior to production impact.
- As a Subject Matter Expert (SME), efficiently provide support to a global community of over 20,000 users for all problems regarding registration and distribution of certificate processing for both Entrust and VeriSign platforms.
- Develop project plans and update procedure manuals. Organize weekly meetings. Assist corporate project teams and provide security guidance, to assure adherence to industry standards and corporate polices.
Confidential, New York, NY
UNIX/Systems Administrator / Consultant
Responsibilities:
- Configured and delivered NetApp FAS 6000/3000/2000 filers to support bank’s NAS infrastructure.
- Collaborated with Project Managers and Storage Services Engagement Representatives to review capacity and DR requirements. Created NFS exports and CIFS shares. Managed share and NTFS permissions, deduplication and compression. Setup Snap Mirror to manage and protect mission-critical data.
- Continually assessed, monitored and mitigated technical issues that represent financial or reputational impact. Created change controls to address replication and performance issues.
- Engaged various teams to proactively resolve configurations and issues prior to user impact.
Confidential, New York, NY
Professional Services Engineer
Responsibilities:
- Installed, configured and supported NetApp storage controllers that serve HSBC user home directories, roaming profiles, shared directories and Video Surveillance. Helped customer define a high-throughput and high-growth NAS architecture for storage, backup and DR.
- Managed over 500 TB of storage. Provided support to a domestic community of over 12000 users. Performed daily monitoring and diagnostics using Operations Manager. Provided in-depth performance analysis and solutions to enhance application performance.
- Promptly responded to system failover and hardware failures. Ran diagnostics and cooperate with NetApp Technical Support Engineers on core file analysis. Coordinated between customer and NetApp Global Support Center on hardware replacement. Provided incident report and recommended new technical controls to improve system stability.
- Created installation procedures and Visio. Performed on-site installations and upgrades. Configured remote management interface (RLM) and virtual network interfaces (VIF). Assigned ownership of disks to the system. Created aggregates, volumes and shares. Managed share permissions.
- Backed up volumes and qtrees using NetApp disk to disk Snap Vault backup. Backed up Windows servers, UNIX servers and VMware ESX servers using Open System Snap Vault (OSSV). Managed backups and restores using Protection Manager. Generated utilization, chargeback and growth trends reports.
- Assisted with business continuity (COB) planning, capacity planning, and DR testing. Helped plan, design and execute regional data migrations (500+ TB) with zero data loss and minimal downtime.
- Performed integration testing for Data ONTAP upgrades, firmware and hardware upgrades.
- Served as company liaison on implementation requirements, recommendations, issues, questions and follow-up. Developed strong relationships with sales, delivery, and support teams to effectively and efficiently resolve customer’s challenges.
- Designed, implemented and supported NetApp data encryption appliance (Data Fort) for customers like Merrill Lynch on a project basis.
Confidential, New York, NY
Information Security Specialist / Consultant
Responsibilities:
- Implemented a global deployment of NetApp Data Fort to protect sensitive data with secure access controls, storage encryption and secure logging. Ensured accuracy and efficiency of remote data backup.
- Collaborated on the design, administration and development of key management database. Extracted cryptographic keys from static keyset based on secure facility requirement. Imported keys into Lifetime Key Management (LKM) server.
- Created and distributed system recovery cards and two-factor authentication administrator credentials. Configured appliance and built image in a standalone network environment. Performed remote deployment over the network. Retrieved and imported SSL certificates into deployed Data Fort.
- Supported and troubleshot Data Fort related issues raised by Virtual Tech ticketing system. Activities include image upgrade, cluster integrity maintenance, keyset modification and system recovery.
- Developed and updated procedure manuals based on Citi’s Public Key Infrastructure (PKI) standard. Streamlined the deployment process and made recommendations to upper management.
- Conforming to ISO 27001 requirements, managed and administered Entrust and VeriSign certificates as Certification Authority (CA) for e-mail clients, web servers and web browsers.
- Issued digital certificates and performed certificate key recoveries on a 24/6 basis. Tracked and reviewed validity period of certificates. Reissued expired certificates or revoked compromised profiles, accordingly.
- Generated Distinguish Names (DN) for certificates. Manipulated Entrust root search base for easy queries. Retrieved certificates and revocation information via LDAP.
- Imported data daily to the certificate off-line database and was responsible for the data accuracy for Entrust and VeriSign certificates that were issued. Coordinated entitlement review.
- Adherence to published policies and procedures. Incorporated in new ISA staff training. Participated in ISA and Engineer group meetings regarding testing and functionality enhancement.
- Established secure connection in CitiSFT for uploading and downloading from Internet or internal network. Created and managed accounts for CitiSFT live (production) and testing (development) servers, route configurations, protocols, password resets, etc.
Confidential, New York, NY
Broadband Technical Support Level 2
Responsibilities:
- Provided technical assistance to Internet and digital phone customers in a timely and professional manner.
- Diagnosed LAN/WAN connections using Mac to IP tool, Storm Watch and Cable Modem Information Tool. Identify troubled network segments through analyzing customer service patterns.
- Troubleshot network connectivity and email accessibility problems. Escalated the unresolved tickets to corresponding department. Coordinated and scheduled field technicians to service home cable connections.
- Generated 18 % revenue growth for company by actively promoting products and services to potential customers. Received high acclamations for efforts and diligence from management.
Confidential, Brooklyn, NY
Desktop Support / CIS Mentor
Responsibilities:
- Administered, configured and maintained over 100 Windows XP based computers. Monitored and optimized the system performance using network administration tools (MMC).
- Diagnosed and troubleshot hardware problems with CPU, memory, hard drive, NIC, CD-ROM, etc.
- Constantly updated security patches, anti-virus software. Performed backups and system restoration.
- Assisted students with Microsoft applications and advanced programming concepts and designs.
