SUMMARY:

• 6+ years of experience in Linux and Windows administration, 3+ years of engineering multi - vendor cross-platforms IT systems for automation, scalability, high-availability while complying with security requirements and supporting overall organizational objectives.
• Continual demonstration of success in learning, comprehending, and taking ownership of new systems and methods.
• Extremely detail-oriented and self-motivated.

TECHNICAL SKILLS:

UNIX/Linux Administration and Engineering: Ubuntu, Debian, CentOS

Log Analytics and Visualization: Elasticsearch, FluentD, Logstash, Kibana

Cloud and Virtualization Infrastructure: AWS, OpenStack, VMWare

Database Cluster Tuning and Deployment: MySQL, MariaDB, Oracle, PostgreSQL

Network Traffic Monitoring & Balancing: A10 Load Balancing, keepalived

Monitoring Solution: Zabbix, Kibana Metrics

LDAP/Active Directory Architecture and Deployment: OpenLDAP, MS Active Directory

Configuration Management: Ansible, CFEngine2, CFEngine3, Chef

Scripting Language: Bash, Python

Linux Technologies: Apache2, Nginx, curl, tcpdump, git, etc.

Backup Technologies: Bacula, VEEAM

Network Implementation & Support: Juniper ScreenOS/JunOS, Cisco

Hardware Implementation: Nutanix, Dell PowerEdge, NetApp

PROFESSIONAL EXPERIENCE:

Infrastructure System Engineer III

Confidential, San Diego, CA

Responsibilities:

• Participated in planning, designing, and executing builds of world-deployable full-serviced server stacks, capable of providing application services without hand-on support from internal infrastructure.
• Fully automates from the ground up full-stack deployment of AWS public facing web applications using Ansible: AWS VPC Gateways, Subnets, Security Groups, Certificates, Load Balancers, and Apache2/Nginx instances in multiple Availability Zones.
• Deployed and engineered migration path for full Nutanix/Prism/VMware clusters from the ground up, allowing upgrading and migrating virtual machines from legacy to new cluster, old VSS to VDS.
• Maintained existing Elasticsearch/TDAgent clusters; engineered and deployed new Elasticsearch, Logstash, and Kibana stack with Filebeat for log retention and Metricbeat for time-series data trending.
• Designed and deployed new Ansible configuration management system in Operation, using vars/group vars, roles, and dependencies to gradually replace on-premise CFEngine2/3 tools.
• Project: Engineered and deployed, using Ansible playbooks, full-stack development/test environment Openstack Ocata with Nova, Cinder LVM, Neutron with Layer3 self-service network, Glance, etc., and eventual migration to Ceph RBD and object storage; assisted in maintaining corporate Openstack Juno.
• Maintains and administers instances in cloud-based Infrastructure AWS: administering EC2 instances, modifying VPC, and piping storage objects into GovCloud S3 buckets and Glacier for backups.
• Monitors and deploys new VMWare ESXI 6.0+ nodes/NetApp shelves as needed to accommodate growing infrastructure.

Junior Infrastructure System Engineer

Confidential, San Diego, CA

Responsibilities:

• Deployed and maintained a mix of vendor equipment, operating systems, and software including Juniper, OpenStack, Nutanix, Linux, Microsoft, and VMware, Oracle.
• Mass-overhauled legacy Linux Debian-based servers in Operation to more recent LTS Ubuntu servers, including updating package dependencies, rewriting configurations, updating configuration management, etc.
• Maintained and update configuration management tools such as CFEngine2/3, Ansible; deployed new CFEngine2/3 classes; stood up stand-alone CFEngine client-server systems; wrote and deployed Ansible playbooks.
• Overhauled legacy OpenLDAP systems and integration for the multiple products, from pre-production, through QA, to production.
• Engineered, configured, bench-tested, deployed, and automated load-balanced Galera clusters of MariaDB servers to be the standard DB solution for the company; fine-tuned and deployed PostgreSQL for smaller applications.
• Headed data-migration and re-building effort for the entire Atlassian product line—JIRA, Confluence, Bamboo, Crowd, etc., from legacy to latest version, including OS migration, DB migration, and configuration management.
• Maintained Zabbix monitoring servers, web servers, databases; customized and deployed Zabbix userparameters, keys, items, templates, for continuous monitoring of systems.
• Performed low-level Operation tasks such as building servers for developers, account management, bash script writing, troubleshooting defunct services, etc.

NOC System Administrator

Confidential, San Diego, CA

Responsibilities:

• Worked in 24/7/365 Operation Center to monitor critical hardware and software infrastructure for multiple applications.
• Performed administration of core operation items via Zabbix/Nagios monitoring, bind9 DNS, CFEngine2/3, Racktables, VMWare virtual machines, and LDAP.
• Built and deployed complex application via documentations on Debian and Juniper based systems involving Java, tomcat6, Cassandra, iptables, A10 SLB, Mysql, keepalived, ScreenOS/JunOS, etc.
• Liaison and facilitated complex application troubleshooting between multiple departments: Network, Operation System, Developers, etc., by providing tier-1 support.
• Took ownership and became the department’s expert on several in-house applications and products, including creating and maintaining documents, training new-hires, and becoming the escalation point-of-contact.

IT System Administrator

Confidential, San Diego, CA

Responsibilities:

• Administered, troubleshot, and ensured functionality of complex IT infrastructure for developers including LDAP, Active Directory, demo servers, backup system, DMZ, mail infrastructure, internal chat system, and workstations of Windows, MAC OS, and Linux.
• Installed, configured, and administered Ubuntu, Debian, and CentOS Linux servers and workstations. Installed, configured, and maintained a small-scale ESXi hypervisors with vSphere and VMs.
• Deployed and troubleshot Apache2 server issues. Assisted developers in deploying War files using Tomcat. Maintained Jenkins server with add-ons.
• Extensively configured and deployed bind DNS servers, proxy Apache server, Vyatta firewall rules, Vyatta DHCP service, various Tomcat web server applications, and NFS in various UNIX environments.
• Configured from the ground up Active Directory system for 30+ users, and deployed ADSelfService web server via Tomcat for self-administering password management.
• Implemented certification-based authentication for web-access via Apache SSL Certification, integrated with Active Directory Certification Services. Wrote shell backup scripts for MySQL databases and crontab automation.
• Troubleshot network issues via ICPM, SSH, VPN, tcpdump, and Wireshark. Managed and maintained JIRA access for 25 users. Forecasted annual IT budget and maintained IT inventory. Provided daily IT technical assistance to staffs.

Production Technician

Confidential, San Diego, CA

Responsibilities:

• Documented processing batch-records for a range of production processes. Reviewed and made recommendations for improvement upon Manufacturing Operation Procedures and Manufacturing Process Instructions.
• Aseptically and accurately processed raw materials into finished products following strict SAN Instructions and Standard Operating Procedure in cGMP-compliant cleanrooms up to Class 100.
• Provided internal IT support, comprising of hardware maintenance and Exchange mail support.

Confidential, CA

Responsibilities:

• Installed, configured, and managed a small AD LAN which includes server racks, workstations, projectors, KVM, switches, routers, and remote-control apparatuses. Installed, configured, and administered CentOS 5.x Linux server.
• Assisted in design and tested virtual training applications (VBS and VBS2).
• Provided technical support for training units in training exercises.
• Troubleshot LAN protocols connectivity and functionality in a network consisting of both Linux and Windows.
• Managed teams of Junior Marines, including training supervision, evaluation, and discipline. Prepared, conducted, and maintained monthly inventories of over $3 million in specialized tools and equipment.
• Oversaw operation of classified military training, ensuring functionalities and availability of over $7 million of electronics, weaponry, and ammunition on daily-basis.
• Prepared and installed several thousand feet of coaxial and Cat5e cable.
• Developed a computerized system to efficiently manage an inventory of diverse and highly sensitive products worth over $10 million.