SUMMARY:

Certified Engineer on Directory Services (LDAP) with solid industry experience designing, building, administering, maintaining, and tuning Distributed and Legacy - based Identity Management Systems in various enterprise environments. In-depth understanding of Directory Server architecture and theory; experienced with various Directory Server software and versions. Strong troubleshooting and technical support capability with security and database applications.

TECHNICAL SKILLS:

Operating Systems:: Unix, Red Hat Enterprise Linux, SUSE Linux Enterprise Server (SLES), Solaris, IBM Mainframe, CICS

Languages:: Unix Shell, Perl, DB2, SQL, Cobol2, MVS/JCL

Identity Management::

Sun: Sun Java System Directory Server, Sun Java System Directory Proxy Server, Sun OpenSSO Enterprise, Sun Identity Synchronization for Windows, Sun Java System Message Queue, Sun Java System Messaging Server (v5.x, v6.x), Directory Server Enterprise Edition (DSEE 6.x, DSEE 7.0)

Oracle: Oracle Directory Server Enterprise Edition (ODSEE 11g), Oracle Virtual Directory (OVD 11g), Oracle Unified Directory (OUD 11g) Ping Identity (UnboundID): Ping Identity Directory Server, Ping Identity Sync Server (v6.x, v7.x)

CA Technologies: CA Directory (v12.x, v14.x)

Red Hat: Red Hat Directory Server (v9)

Application Servers:: Apache Tomcat, JBoss, Oracle Glassfish, BEA Weblogic, Splunk Enterprise

PROFESSIONAL EXPERIENCE:

Confidential - Roseland, NJ

Sr. Implementation Consultant

• Provide expert-level technical analysis and support for multinational extra-large LDAP databases with over 140 million users and 1.9 million clients on over 200 servers, including AWS cloud.
• Perform migration from ODSEE 11g to Ping Identity Directory Server for all users.
• Perform migration from ODSEE 11g to CA Directory Server for Siteminder Policy Store.
• Perform upgrade of Ping Directory Server.
• Manage additions to Directory Tree, schema extensions, and access control instructions (ACIs).
• Implement and maintain high performance Directory Server configuration.
• Create packages to automatically build Directory servers.
• Set up SSL communication, renew and monitor SSL certificates.
• Troubleshoot various authentication and replication issues; solve replication conflicts.
• Liaise with development and product management teams to resolve client-reported issues.
• Create and maintain LDAP environment documentation and flowcharts; develop standard operational procedures for team members.

Confidential - New York, NY

Sr. Principal Consultant

• Technical subject matter expert on providing best practice recommendations on Directory Server and related technology, such as site topology, configuration, performance, failover, security.
• Provide expert-level technical support for large scale deployments of 10 LDAP plants with more than 3000 applications on over 200 LDAP servers performing over 1.3 billion searches per day.
• Manage client support cases on a daily basis, define action plans and follow-through to case resolution.
• Execute disaster recovery plans.
• Integrate Directory Services with Splunk Enterprise.
• Formulate the overall technical strategy for the L2 team.
• Create infrastructure documentation and knowledge articles for junior team members.

Confidential - Quincy, MA

LDAP Team Lead, Consultant

• Hands-on Team Lead with overall responsibility for operational management and support of Directory Services/LDAP for Confidential and State Street Global Advisors.
• Effectively managed and guided an offshore team to provide Directory Services to approximately 2000 clients of corporate and global advisors divisions.
• Planned team activities to administer, maintain, monitor, and patch the environment. Collaborated with application managers, project managers, developers, peers, and business analysts to accomplish a coordinated implementation.
• Performed advanced troubleshooting of core database and interfaces, authentication, replication, sites and services. Successfully resolved various connectivity and account provisioning issues between Directory Services and clients’ applications.
• Designed and implemented from scratch ETF Education Module for the Australian SPDR site.
• Authoritative design and management of additions to database, schema, indexing, access control for multiple instances of Directory Services.
• Authored patching plans for all regions. Successfully executed a disaster recovery plan.
• Lead collaboration with vendor to resolve various software and server issues and bugs.
• Delivered infrastructure documentation, standard operational procedures for junior administrators.

Confidential - Reston, VA

Sr. Directory Services Engineer, Consultant

• Provided technical advisory services to securely design, implement, maintain, or modify Directory Services.
• Performed migration of Directory servers from ODSEE 11g to Oracle Unified Directory.
• Tuned operating system and application parameters to ensure high availability and performance.
• Maintained/monitored operations, availability and security of identity system.
• Assisted business and technical users in applying security policies to protect confidential information.
• Created templates, guidelines, and operational procedures.

Confidential - Radford, VA

Sr. LDAP Engineer, Federal Contractor

• Supported Acquisition Logistics and Technology Enterprise System and Services (ALTESS) that provides information management and information technology to the Army Acquisition Executive and the Office of the Assistant Secretary of the Army for Acquisition, Logistics & Technology, and DoD Joint Services Organizations.
• Supported Army Knowledge Online (AKO) / Defense Knowledge Online (DKO), the world's largest intranet that provides the enterprise information services to Army and DoD Customers on both classified (SIPRNET) and unclassified (NIPRNET) networks.
• Developed architecture, built from scratch and configured a new version of Oracle Directory Server Enterprise Edition in all environments.
• Set up and tested the load balancing and failover for high availability.
• Set up replication to external LDAP vendor.
• Managed and monitored application performance.
• Improved schema, indexing, ACIs, monitoring. Log interpretation and analysis.
• Troubleshoot authentication, authorization and replication of large-scale deployment of LDAP.
• Performed capacity management to optimize LDAP performance for internal and external users.
• Created technical documentation to provide configuration and operational information for the Directory Server application.

Confidential - New York, NY

Enterprise IDM Administrator, Consultant

• Led initial design, engineering and implementation of Identity Management System for user provisioning and account management for Confidential Headquarters.
• Installed, configured, and integrated all enterprise components for Single Sign-On environment over SSL. System Administrator for Project.
• Designed and built the LDAP infrastructure for multiple data centers.
• Produced LDAP schema designs and operational plans for populating, maintaining and enhancing the Enterprise Level Directories. Defined and implemented the access control strategy to secure directory contents.
• Engineered LDAP directory solutions for applications. Contributed to development and deployment of interfaces between the directory and directory-enabled applications.
• Provided ongoing technical maintenance and support of entire system for availability, reliability and business benefits. Identified and resolved various technical, application, network, and infrastructure compatibility issues.
• Wrote and set up scripts and notifications to monitor disk, file system, services availability status, data replication, error messages, automated startup.
• Created project-related and infrastructure documents, operational guides and procedures for network and operations teams.

Confidential - Warren, NJ

Sr. Software Systems Engineer, Consultant

• Administration, maintenance and support of Directory/Messaging services for multi-million Customer Care Enterprise System in an extra-large multi-master replication environment.
• Architected, deployed, and maintained the Oracle Directory Server Enterprise Edition in multiple data centers.
• Addressed/fixed significant operational and stability problems, including replication conflicts, component configuration, user access, schema, and access control for over 55+ million-user database.
• Initiated/improved User Acceptance Testing environment to match production environment. Consulted developers with testing and implementation of various applications.
• Designed/implemented backup, recovery, and failover strategies for Directory Server databases.
• Developed scripts to automate administration and management of the Directory Server environment. Monitored OS and applications’ resource utilization and performance.
• Wrote operational documentation for the LDAP environment. Documented defects and issues to be resolved and monitored progress on resolution.
• Liaised between operations infrastructure teams and project managers.

Confidential - Philadelphia, PA

Sr. LDAP Administrator, Consultant

• Planned/deployed Directory Server and Proxy Server in a Single Sign-on environment for Enterprise Identity Management Infrastructure.
• Architected infrastructure for Directory Services and supported Data Center Relocation Project.
• Tuned operating system, entry, and database cache sizes, indexing, logging, system resources. Improved LDAP password policy functionality.
• Provided administration of Identity Management System across the organization supporting LDAP, AD, SAP, and Identity Manager.
• Performed user account and role management, organizational changes and reporting.

Confidential - New York, NY

Sr. Software Configuration Specialist

• Oversaw Directory Server operations for a large multi-master Single Sign-On environment.
• Architected/led infrastructure design of new data centers.
• Analyzed, planned and deployed Sun Directory Server in all environments.
• Evaluated, tested, and performed upgrades of Directory Server with new software and patches.
• Conceptualized and implemented benchmarking and performance-tuning testing using SLAMD.
• Created/managed additions to Directory Tree, schema extensions, and access control instructions (ACIs). Implemented and maintained high performance Directory Server configuration.
• Secured and enforced password policies for organizational units and for individual users.
• Diagnosed authentication problems and issues. Modified and enhanced systems to meet security requirements.
• Responsible for administration and maintenance of mainframe-based Identity Management System supporting proprietary agent and employee workstations and administration systems.
• Supervised and provided technical leadership to onsite and offshore directory services team members.