SUMMARY:

• Confidential is an accomplished systems administrator with over 10 years experience in Unix and Linux operating systems with expertise in VMWare VSphere Virtualization and Red Hat Enterprise Linux.
• He also has experience in managing Cisco networks with extensive security expertise.
• He has demonstrated proven ability to effectively plan, install, configure and optimize IT infrastructure to consistently achieve high availability and performance.
• With his strong grasp of computer security, assorted operating systems, numerous applications and mixed platforms he is able to effectively manage even the most challenging environments.

TECHNICAL SKILLS:

Hardware: HP DL380, HP DL580, HP C7000, IBM x3650, IBM System Storage, EMC Clariion Storage, Dell PowerVault TL2000.

Network: Cisco Catalyst and Nexus, Arista, Brocade VDX switches, Cisco Router 1800, 2900, 7200, ASR1000, Alcatel LS6224, HP 6120XG, Mikrotik, Ubiquiti.

Web Servers: Apache, IIS, nginx.

Operating Systems: Red Hat Enterprise Linux (RHEL) v4,5,6,7; Suse Enterprise Linux v8,9,10,11; Debian Linux; Ubuntu Linux; CoreOS; Windows Server 2003, 2008, 2012.

Protocols: TCP/IP, UDP, EIGRP, OSPF, VLAN, STP, RSTP, VPN, PPP, DNS, FTP, SSH, NFS, SMB, HTTP 1.1, LDAP, IPSec, VRRP, HSRP, TACACS+, SNMP, NTP/PTP, VRF.

Services: DNS, DHCP, Squid, Postfix, Courier, IMAP, SAMS, SpamAssassin, Apache, ejabberd, Snort, SSH, NAT, Docker containers.

Security: Cisco ASA/FWSM, Cisco ACS, Cisco ISE, Cisco IPS, Juniper SRX, CheckPoint appliances, Palo Alto, iptables, Kaspersky InfoWatch, DeviceLock, zLock, SSH, SSL, TCP Wrappers.

Network monitoring: SolarWinds Orion, MRTG, Nagios, Icinga2, zabbix, Cacti, nmap, tcpdump, WireShark, Nessus, Netflow.

Database: MS SQL 2008/2012/2014 , PostgreSQL.

Virtualization: Red Hat Enterprise Virtualization (RHEV) v2.2 and v3.0; Hyper - V 2008 and 2012 , KVM, VMware, vSphere ESX 3.5, 4.1, 5.0, 5.5, 6.0. vSphere PowerCLI. AWS. VMware VSAN, HP VSA, EMC ScaleIO.

Languages: bash, C, C++.

PROFESSIONAL EXPERIENCE:

Fremont, CA

Linux and Network Administrator

Responsibilities:

• Deployed Icinga 2 monitoring system with InfluxDB and Grafana metric visualization.
• Deployed app logging (nginx, tomcat, cassandra, spark) through Logstash to external ELK stack.
• Deployed and managed VPN to AWS and Azure clouds.

Mountain View, CA

Linux and Network Administrator

• Deployed and managed Marathon/Mesos clusters for Docker microservices (running on top of CoreOS Linux and later Mesosphere DC/OS).
• Deployed and managed corporate DNS/DHCP servers on Linux.
• Used kickstart and network boot for mass RHEL install/update.
• Deployed and managed EMC Elastic Cloud Storage.
• Developed bash/expect scripts to automate mass backup of configuration files and firmware upgrade of active network equipment.
• Developed Ansible playbooks for repetitive tasks (Hadoop deployment, services management on CoreOS, Nagios NRPE agent installation).
• Deployed and managed corporate JIRA ticketing and Confluence wiki systems.
• Managed Arista, Brocade and Nexus switches.
• Redesigned network to leaf - spine topology.
• Deployed and managed VXRail vSphere cluster (also worked with other Hyper Converged systems: HP VSA and EMC ScaleIO).
• Managed Hyper-V cluster.
• Performed daily routine tasks.

Confidential

Lead Network Administrator

• Developed scripts to automate mass backup of configuration files and firmware upgrade of active network equipment.
• Maintained production networks.
• Deployed PRTG at the main office.
• Deployed port - based 802.1x network access control in customer s production network.
• Deployed guest VLAN with the VLAN ACL to simplify deployment of wired 802.1x access control in customer s production network.
• Deployed Cisco ACS to restrict permissions of junior stuff.
• Reconstructed customer s network from bunch of bare unmanaged network switches to classic 3-tier network architecture with multiple VLAN s, firewall (Cisco ASA 5510) and IPS (Cisco IPS 4255).
• Deployed and maintained Colubris controlled Wi-Fi network.
• Troubleshooted network connectivity issues.
• Mentored junior staff.

Senior Systems Administrator

• Performed migration from bare metal servers to redundant virtual environment (VSphere cluster).
• Deployed and managed Active Directory domain and integrated open - source e-mail server with it.
• Managed MS SQL Server (scheduled backups, monitoring of replication, performance monitoring, collaborated with software developers to improve performance of slow queries, performed migration from MS SQL 2012 to MS SQL 2014, performed migration from replication to geographically dispersed Always-On cluster)
• Managed multisite network (more than 500 remote sites over OpenVPN and IPSec).
• Managed employer s website (LAMP Linux/Apache/PHPMysql stack).
• Deployed Zabbix monitoring suite.
• Remotely troubleshooted network connectivity issues with branches.
• Deployed and maintained Ubiquiti controlled Wi-Fi network.
• Developed unix shell scripts / utilities to automate repetitive tasks (back-ups, refreshes, failovers, etc.)

IT consultant

• Participated in deployment of citywide Open WiFi project.
• Participated in deployment of citywide Safe City video surveillance system.
• Collaborated with software developers to elaborate requirements to Smart City integration platform.
• Mentored junior staff and provided technical consulting to large - scale projects.

Systems Administrator

• Performed routine maintenance of servers and network equipment on a daily basis.
• Performed tests of advanced system network settings to achieve better network latency.
• Collaborated with IT staff of futures exchanges (MICEX, CME), data providers (CQG, Rithmic) and ISP to fix network latency issues.
• Upgraded server software from WinServer 2003 to Server 2008 , ESX4 to ESXi5.5.
• Deployed centralized AAA for active network equipment.
• Managed MS SQL Server (futures market tick data collector).

Systems Administrator

• Maintained server equipment.
• Installed, configured and administered terminal server for accounting department.
• Installed, configured and administered Linux proxy server and gateway (Squid, SAMS, dhcpd, iptables)

Senior Systems Administrator

Responsibilities:

• Maintained network (Cisco switches and routers, ASA with IPS and CSC modules, MARS, WAAS) and server equipment.
• Maintained worldwide Cisco DMVPN network with redundant hubs and EIGRP as the routing protocol.
• Remotely troubleshooted network connectivity issues in embassies.
• Created and managed VMware cluster utilizing HA/DRS, with EMC AX4 FC back end.
• Reconstructed LAN from single VLAN to Cisco 3 - tier model.
• Deployed and performed scheduled backups with Dell PowerVault TL2000 library.
• Deployed and managed Active Directory domain with Exchange 2007.
• Deployed port-based 802.1x network access control (against AD).
• Deployed centralized AAA for active network equipment (Cisco ACS).
• Installed, configured and maintained Squid proxy server with complex policies (network throughput limitation, accounting, authentication against AD, automatically updated URL blacklists)
• Deployed and performed network performance monitoring with SolarWinds Orion and PRTG.
• Maintained Alcatel OmniPCX PBX.

IT Security officer

Responsibilities:

• Performed hardening of firewall and proxy policies.
• Deployed port - based 802.1x network access control (against AD).
• Deployed centralized AAA for active network equipment (Cisco ACS).
• Collaborated to implement security policy in accordance with ISO 27000.
• Performed pen-testing, log analysis and reporting.

Confidential

Systems Administrator

• Maintained Novell Netware 6.5 domain with ZENWorks suite and Network Border Manager as proxy server.
• Installed, configured and maintained cluster of Terminal servers (RDP, 2X TerminalServer)
• Deployed Active Directory domain and MS ISA 2006 proxy server.
• Provided support to end users relating to hardware and software, computer applications, LAN components and peripherals.
• Carried out on - site analysis, identification, and resolution of difficult desktop problems for end users.
• Installed, organized, tested, maintained, checked and troubleshooted end user workstations and interrelated hardware and software.