SUMMARY:

• Over ten years of Information Technology experience in small business, start - up from 50 people scale to 1500 people corporation, focusing on infrastructure design, implementation, documentation, and long term sustainability.

Infrastructure design experience includes: hands-on testing, validation, and implementation of new systems; including Amazon AWS, Google GCP, SAML v2.0 SingleSignOn, Ruckus Wireless, Aruba Networks, Cisco Layer2/Layer3 switching and routing, and Juniper SSG/SRS, EX equipment, Fortinet Fortigate NextGen Firewall IDS IPS, CloudFlare WAP, DDoS, and HP 3PAR SAN, Dell EqualLogic SAN, NetApp NAS and Microsoft Exchange, Lync(Skype for Business), SharePoint, Office365, Windows, SQL, Active Directory, DNS, DHCP, Redhat Linux, CentOS, Ubuntu, Symantec Backup Exec, Quest BakBone, ELK stack, Graylog2 and Monitoring Tools Lead of global systems administrators, improved team skills and efficiency by implementing new processes and a cross-training regimen which resulted in quicker time to resolution on complex problems.

EXPERIENCE:

Senior IT administrator

Confidential

Responsibilities:

• Architect, implement and support Ruckus Wireless for Campus Wireless, branch, small office with WPA2/AES dot1x authentication security using AD/NPS and CloudPath for BYOD deployment and management
• Architect, implement and support Office365 Cloud suite(Email, SharePoint and Skype for Business) deployment with Microsoft ADFS SingeSignOn
• Architect, implement and support Okta SAML v2.0 SingleSignOn for corporate internal and third party applications
• Architect, implement and support Atlassian HipChat for persistent group chat and Jira/Confluence setup
• Architect, implement and support SecureVPN using Juniper/PluseSecure VPN solution with multiple endpoints for better regional experience
• Architect, implement and support ELK Stack and Graylog2 for Logging, Analysis, Archive, Alerts and Searching
• Architect, implement and support Google GCP and Amazon AWS Cloud for public customer facing applications
• Architect, implement and support Monitoring Tools with WhatsUP Gold, Nedi, PRTG, NTOPNG and MONYog to generate automated Helpdesk alerting and escalation process to ensure systems are up and running with minimal downtime
• Architect, implement and support CloudFlare to improve website performance, reliability and additional security using WAF, DDoS protection
• Architect, implement and support Microsoft Certificate Authority Root CA and Subordinate CA servers to support wireless dot1x authentication, client user certificate and internal web servers certificate requests, while keeping Root CA Offline
• Architect, implement and support ADSelfService and GroupManager for best user self-services such change user password, add/edit group memberships
• Architect, implement and support Kayako Helpdesk systems for problem, knowledge and access management
• Architect, implement and support Dell OpenManage for server deployment, update system Bios/firmware and maintains up-to-date support renewal
• Architect, implement and support Colocation Datacenter with Zayo and AT&T IP transit services between HQ and Datacenter with OSPF routing for auto failover
• Architect, implement and support BGP routing between AWS to Colocation for better Hybrid Cloud deployment
• Architect, implement and support Aryaka WAN optimization AS-A-Service to HQ, branch office and small office
• Architect, implement and support Carbonite user devices backup/restore
• Architect, implement and support Fortigate Firewall HA and Cisco HSRP for HQ and Branch office to achieve better uptime and transparent maintenance windows
• Architect, implement and support VMWare 5.5 to 6.0 with multiple Dell EqualLogic SAN’s and VCenter to manage more than 300 instances with auto failover

Lead System Administrator

Confidential

• Architect, implement and support Exchange 2010 environment with 15 servers, CAS, Hub, Transport and Mailbox store server infrastructure, and data availability group (DAG) with N+2 redundancy, cross trained team members on daily perations
• Implement AccelOps Security Information & Event Management (SIEM) for event log gathering and management, analyze threat management and incident management
• Architect, implement and support VMWare 4.0 and 5.0 environments, deploy VCenter for managing over 200 instances from Linux and Windows systems.
• Architect, implement and support Dell R series rack mount server, Dell EqualLogic, IBM Blade and IBM server storages solutions to support both physical and virtual environment
• Work with engineering on deploying source code application from purchasing equipment, implement and responsible for server backup using corporate standard disk-to-disk and disk-to-tape backup solutions
• Architect, implement and support Amazon EC2 cloud infrastructure with OpenVPN for site-to-site connection, allow internal AD/LDAP/Radius communication and allow monitoring of cloud server CPU, memory and storage utilization
• Architect, implement and support Co-Location Data Center operation with dark fiber connection to HQ office, migrate P1 applications to Co-Location and deploy Fireeye for malware detection and prevention
• Architect, implement and support backup solution with Disk-to-Disk and Disk-to-Tape with data de-duplication to Optimize local disk usage, disk saving are at 30% to 60%, with LTO5 backup tapes ship offsite for site disaster recovery
• Architect, implement and support Microsoft Lync 2010 to enhance corporate global calibration, with IM, Presence,
• Desktop sharing and Audio/Video, this offers real-time communication for the field and corporate users
• Deploy SharePoint 2010 for Intranet and marketing sale enablement team to publish sales and corporate related documentation, video demo and analysis reports thru a single managed portal
• Architect, implement and support Data Loss Prevention solution identifying and preventing malicious or unintentional transmissions of confidential data over the network. Organizations are fully secured and compliant with government data security regulations as it relates to Sarbanes Oxley, GLBA, HIPAA, PII, CA SB1386, CA AB1950, Payment Card
• Industry (PCI) Data Security Standard, The Patriot Act, FISMA, FERC/NERC, and others.
• Architect, implement and support Aruba wireless technologies for Campus Wireless, branch, small office and remote user with dot1x authentication security with AD/LDAP back-end.
• Architect, implement and support Aruba CPPM, VIA IPSec VPN with SSL failover and Airwave monitoring platform for troubleshooting and reporting
• Architect, implement and support Site-to-Site VPN solution for remote site including Aruba branch offices and partner and customer with IPSec Tunnel, also implemented source NAT routing for location with RFC1918 address space conflict
• Architect, implement and support HQ core redundant network using Juniper EX stackable switch series
• Architect, implement and support Avaya and Deltapath frSIP H.323 and SIP base PBX systems across global sites, managing 4 digit dialing, calling routing, ACD response groups, Auto attendant and unify messaging with Exchange 2010
• Architect, implement and support Symantec Enterprise Vault for Email archiving solution, implement and document archiving policy with legal department sign-off
• Architect, implement and support company audio conference solution from GlobalCross/Level3 and Citrix GoToMeeting and GoToAssist
• Architect, implement and support network load balance with F5 LTM and Microsoft NLB solutions for email, terminal server and web services
• Architect, implement and support corporate internal/external DNS, DHCP, IAS, IIS and NPS services
• Managed and support company acquisitions with in state and overseas, traveled to acquisition sites to insure smooth transaction, especially day-1 go-live.

IT consultant

Confidential, Hayward, CA

• Administrate Windows 2000 and XP workstations and server for 20 users located in main office and warehouse
• Implement Cisco VPN between sites
• Maintained Microsoft server 2000 AD/DNS/DHCP environment
• Implement Symantec Ghost from client workstation imaging

IT Consultant

Confidential, Hayward, CA

• Administrate Windows 98, 2000 and XP workstations and server for 50 users located in main office and remote locations
• Implement NetScreen NS25 as main office firewall and VPN
• Setup and configure Microsoft Active Directory, establish users, groups and file/object permissions and standard configurations, migrate Windows NT servers to Windows 2000
• Migrate Windows Exchange 5.5 to Exchange 2000 standard, implement POP/IMAP and SMTP services for remote users
• Implement Symantec pcAnywhere for office and remote user
• Implement Windows 2000 routing and remote service for internal LAN segments due to large file transfers Award:
• Aruba Networks “Customer Focus” Performance Award
• Aruba Networks MVP award