SUMMARY:

• I am a very accomplished Senior Systems Engineer/Architect and Desktop Engineering Manager with a proven hands - on technical background and knowledge in all areas of Desktop Engineering/design and Windows Server including: server builds, configuration, server software, imaging, virtualization, and governance.
• I am considered a subject matter expert with Windows 7/10 systems, Windows Server 2012 R2, SCCM 2007/2012/2016 (1511, 1602, 1606, 1608, 1609, 1610, 1702, 1706), MDT 2010/2013 U2/CB, Group Policies, Windows Intune, Windows Azure (Public), Windows Azure Pack (Private), SCOM 2007/2012/2016 , SCVMM 2012/2016, SCDPM 2012/2016, SCSM 2012/2016, Hyper-V 2012/2016, the whole Systems Center 2012/2016 stack & Citrix ZenDesktop 6/7+.
• I have worked on large enterprise migrations and deployments of over 38,000 machines from XP to Windows 7 and over 10 projects from Windows 7 to Windows 10.
• I was in charge of developing the migration plans, preparing, and deploying Windows 7/10 desktops in the environment.
• I was instrumental in helping them develop a 120-page training document for the desktop techs/engineers on Windows 7 deployments using SCCM 2007/2012.
• I am comfortable with internal/external customer facing and problem resolution. I am much focused, think outside the box, technically skilled, stay current with all technologies, see projects through to completion & am very passionate about every aspect of what I do in my job functions.
• Network monitoring and preventative inspection.
• Mobile technologies - BES 5/10, GOOD & Mobile Iron.
• Knowledge and experience writing windows VB & PowerShell scripts.
• Windows administration (desktop and server side).
• Backup and disaster recovery planning.
• Server Room, Data Center Build-outs, and Layouts.
• Managing security for enterprise servers and workstations.
• Experience setting up & configuring Bloomberg terminal’s.
• Experience with the whole System Center 2012 SP1/R2 Stack.
• Experience with Hyper-V 2012 R2.
• Experience with all 1E products.
• Windows Server 2003 to Windows Server 2012/2016 migrations.
• Windows XP to Windows 7/Windows 10 CB using SCCM CB.
• Experience with Active Directory.
• Experience with Group Policy & Advanced Group Policy Management (AGPM).
• Experience with the Confidential Desktop Optimization Pack (MDOP), App-V, UE-V, MED-V, MBAM & DaRT.
• Experience with Citrix XenDesktop 7.5/7.6‎.
• Experience with Apple, OS X, OS X Server, Casper management, Chef Management, Puppet management, & software packaging using PowerShell/Admin Studio.
• Experience with MDT 2012/2013 & the Windows Assessment and Deployment Kit (ADK).
• 7+ years of experience performing penetration testing, forensic image capturing using raw data formats, analysis/reporting of forensic images, cybersecurity, DLP solutions and application vulnerability testing on small to large networks and personal devices. 7+ years working with Law firms and private investigators on various forensic/security projects.
• 8+ working with EnCase up to version 8 along with Autopsy (The Sleuth Kit), CAINE 8, SANS SIFT, FTK, DD for RAW images.
• 6+ years testifying in court on the raw image capture of any type of hard drive or other information gathered from a device such as a mobile phone that pertains to a case or to a company sponsored security assessment testing. Provide timelines, evidence, reports, charts, tools used, how the tools were exactly used, what commands had to be ran to gather the information and then provide detailed remediation documents for all security concerns/vulnerabilities that were found, etc.

TECHNICAL SKILLS:

Windows server 2000/2003/2008/2012/2016 : A/D. group policy, ADNS, DHCP.

Windows 3.1/95/ME/98/VISTA, 7, 8/8.1 and Windows 10 desktop management.

MS Exchange 2000/2003/2008/2010/2013 : DB maintenance, SMTP hosting, OWA/OMA.

Manage/setup SQL 2000/2005/2008/2012/2014/2016 servers.

Altiris, SMS, SCCM 2007/2012

Server and application virtualization; VMware, Hyper-V, Citrix, APP-V, MED-V.

McAfee/Symantec Endpoint Protection Anti-virus/Anti-Malware & DLP solutions.

Linux desktop installs with Windows Server as the backend.

Knowledge of UNIX and Linux Operating Systems: REDHAT, MANDRIVA, SUSE, UBUNTU, Backtrack and Kali.

Experience using Linux to find & fix security holes in WAN and LAN networks using the latest tools available.

Design/install backup strategies using Symantec VERITAS & Veeam.

Firewall technologies - Cisco, Cisco pix, check point, and others.

VPN technologies - Juniper Networks SSL LAN/VPN, Cisco VPN, Setup VPN Tunnels.

PROFESSIONAL EXPERIENCE:

Confidential, Fort Mill, SC

Systems Architect/System Center/SCCM/Windows 10 SME

Responsibilities:

• Design, Architect, Implement and support SCCM 2012 SP1/R2/Current Branch (1610, 1702, 1706), Windows 10 511, 1603, 1703, Hyper-V 2012/2016, SCVMM 2012/2016, SCSM 2012/2016, Private and public clouds using System Center, SCOM 2012/2016, App Controller, DPM 2012/2016, Orchestrator, Service Manager, Citrix ZenDesktop 6/7+, ADCS PKI 2/3-Tier internal/external & SCCM/ServiceNow Integration, Intune, OMS, EMS + Security.
• Attend Pre-Sales calls & meetings as the SME on the System Center 2012/2016 stack along with Hyper-V 2012/2016, Windows 10/Server 2016, private and public clouds, Windows Azure & Windows Intune along with many other Confidential or 3rd party products.
• Package applications using AdminStudio.
• Follow best practices for any project that was assigned to me.
• Design, review & create SOW’s.
• Design, review & create ROM’s.
• Design, review & create LOE’s.
• Design Technology and Product roadmaps.
• Design, implement and manage GPO best practices along with coming up with solutions for various situations.
• Automate using PowerShell and/or System Center Orchestrator.
• Lead all projects, do Project Management work. Manage teams of Engineers/Architects

Confidential, Charlotte, NC

Operations Engineering Subject Matter Expert

Responsibilities:

• Manage all aspects of the System Center 2012 R2 stack (SCVMM, DPM, SCOM) related to the six CPS STAMPS fabric (Compute, EDGE, Management and Scale-out File Servers/Storage) on my shifts.
• Manage Hyper-V 2012 R2 & failover clustering.
• Manage the Windows Azure Pack (Admin Portal & Tenant Portal)
• Manage, edit and run SMA runbooks for different Confidential hardware replacements (Motherboards, Memory, Hard Drives, Network Cards, iDRAC/BMC).
• Action all SCOM Alert Monitors and Rules, show all of the action views and how they work, show all of the different managements packs, show how to perform overrides and best practices on tuning the (noise) from alerts.
• Use PowerShell to manage the Windows Server 2012 R2 core operating systems and perform various troubleshooting/resolution tasks. Monitor services on OpenStack/Debian/Redhat/Lunux/Unix. Some Python scripting along with Perl.
• Provide SME Knowledge Transfer to level one server staff related to all features and functions in the CPS fabric, SCVMM, DPM, SCOM, Hyper-V 2012, Failover Cluster Manager, PowerShell, SMA Runbooks, SPF, WSUS, WDS, SR, SQL, Katal (Windows Azure Pack), Scale-Out File Servers (SMB Storage) and Hyper-V Manager.
• Hold whiteboard sessions for the various components within the CPS STAMPS.
• Hand off operations of the CPS STAMPS to level one server support (DTO) and watch as they perform day to day operations related to the CPS fabric and tenant VM’s, answer any questions or issues they come across and resolve issues at the SME level support.
• Manage and mentor 8 DTO staff members on my shift and the night shift. Level 1, 2 & 3.
• Use BMC Remedy as the ticketing system for issues related to the CPS Fabric and tenants.

Confidential, NJ

Senior Enterprise Desktop Systems Architect SME

Responsibilities:

• Installed and configured MDT 2012 U2 with BUILD and DEPLOY deployment shares for Windows 10.
• Setup a local instance of Hyper-V to create the Windows 10 GOLD image.
• Created a task sequence in MDT 2013 U2 to capture the gold image within the Hyper-V VM.
• Created a task sequence to install the Windows 10 Enterprise OEM image (Install.WIM) which included steps to install all of the current updates with a pause to check that all updates were installed.
• Captured the Windows 10 Enterprise GOLD image from the VM inside the local Hyper-V instance using the MDT U2 capture task sequence.
• Imported the newly captured Windows 10 Enterprise GOLD image into MDT 2013 U2 under its own folder under Operating Systems.
• Created a PowerShell script to remove all of the built-in apps, set registry entries, set privacy settings and created a separate PowerShell script for branding and System branding with Confidential as the company name and the help desk name and phone number, also added the power configuration settings for when a laptop is in the docking station and the lid is closed so it doesn’t go to sleep or into hibernation mode.
• Imported all of the drivers for the Confidential Surface Pro 4 along with the Lenovo models and created a sub structure of folders for each model and make.
• Imported all of the WinPE 10 boot drivers and created a separate folder in the sub structure.
• Created the Windows 10 Enterprise Master Task Sequence with all of the base applications, Confidential applications, runtimes and customizations.
• Designed and implemented DFS-R for MDT 2012 U2 deployment shares across the US and other countries.
• Worked with the network team to implement PXE/WDS on the sites that had physical servers.
• Created the customsettings.ini rules and bootstrap.ini settings for the different deployment shares, regional settings, machine naming, AD OU’s, admin usernames and passwords for the service accounts, etc.
• Worked with the server team to import the Windows 10/Office 2016 group polices.
• Designed and created new Windows 10 and Office 2016 GPO’s.
• Created the Office 2016 click to run package with a custom .MSP and imported it into MDT2013 U2 and added it to the master task sequence.
• Customized USMT 10 for upgrades from Windows 7 to Windows 10.
• Tested all makes and models and worked out any issues before the project close out.

Confidential, NJ

Systems Architect SME

Responsibilities:

• Design, Architect, Implement and support SCCM 2012 SP1/R2, Hyper-V 2012 R2, SCVMM 2012 R2, Private and public clouds using System Center, SCOM 2012, App Controller, DPM, Orchestrator, Service Manager, Citrix ZenDesktop 6/7+ & ADCS PKI 2/3-Tier internal/external. SCCM/ServiceNow Integration
• Attend Pre-Sales calls & meetings as the SME on the System Center 2012 stack along with Hyper-V 2012, 1E products, private and public clouds, Windows Azure & Windows Intune along with many other products.
• Follow best practices for any project that was assigned to me.
• Design, review & create SOW’s.
• Design, review & create ROM’s.
• Design, implement and manage GPO best practices along with coming up with a solution for various situations.
• Design, Implement and support SCCM 2012, configure OSD task sequences, software deployments, windows updates, out of band management of assets, importing of drivers to the OSD process, USMT customization, Reporting & creating WQL queries.
• Provide level 3/4 support for all desktop & SCCM 2012 related issues for various clients.
• Develop SLA’s & Metrics, Identify KPI’s, manage/train current help desk/desktop staff then transition staff back to management.
• Test OSD deployments, software deployments, software packaging, GPO changes & Windows Updates in the lab environments before releasing into production. Implement MDT into SCCM along with ADK 10.
• Use MDT 2013 U2 for offline USB Windows 10 only deployments.
• Develop strategies & solutions for issues encountered from day to day operations using knowledge, research, and people.
• Develop the Windows 10 SOE, the base gold image, create VM machines so that the base gold image could be updated every 3 months with security updates & service packs as well as adding any standard software to be included with base gold image.
• Implement, configure and use 1E Nomad Branch for software, WSUS & operating system migrations along with 1E shopping.
• Created multiple custom MSI’s for Windows Intune projects using Admin Studio and PowerShell scripting.
• Design/Implement Windows Intune as well as Windows Azure solutions with or without SCCM 2012.
• Act as the technical lead for various Windows 10, SCCM 2012 (1511) and MDT 2013 projects.

Confidential, New York, NY

Consultant SR Systems Engineer/Architect

Responsibilities:

• Design & configure SCCM/SCOM 2012 R2 SP1 CU1/CU2 at various client locations.
• Configure & capture Windows 10 Enterprise gold images using MDT 2013 U1.
• Design the Office 365 ProPlus 2016 Click to Run deployments at various client locations.
• Configure and deploy the Office 2016 Telemetry Dashboard.

Confidential, New York, NY

Senior Systems Engineer/Architect SME

Responsibilities:

• Delegate the work load, Projects/Assignments/Incidents/Problems.
• Recruit, Interview, Hire, Fire, Motivate, Mentor, develop, schedule the work load and conduct performance evaluations every six months which include pay increases and bonuses for my direct reports.
• Develop training programs and career paths for my direct reports, provide learning material, teach and conduct lunch and learns.
• Manage the Confidential EDGE globalization project for New York, Singapore, London & Hong Kong.
• Assist with the Toronto migration from SCCM 2007 to SCCM 2012, consult the ITS team as a SME on SCCM 2012.
• Manage IT audit findings (Open shares, security vulnerability scanning & software licenses) design Queries in SCCM 2012 as well as create reports in SSRS. Complete myself or Delegate each specific task/finding to my team to remediate within the allotted time frame.
• Design processes and procedures and put them in place within the organization.
• Build a lab with all of the TDS hardware for SCCM 2012 R2 OSD testing for new Lenovo and HP hardware.
• Design, Create, test and manage Group Polices.
• Designed and Implemented SCCM 2012 RBA (Role Based Administration) access for The Service Desk, Application/trading support, Asset Management, the server team and created a read-only web based role for management reporting.
• Create/Manage policies for SEP.
• Finalize/approve all Windows Updates, Applications/packages in the SCCM 2012 PROD and DR environment.
• Designed and implemented the SCCM 2012 SP1 DR solution.
• Own and maintain all of the Desktop infrastructure for TDS USA. Group Policies, Active Directory, MDT, Sophos Safeguard 6/7, SEP/End Point Encryption 12, the gold Windows 7/8/10 image and the SCCM 2012 R2 CU4 PROD and DR environments, all design, architect changes and new objects are reviewed and signed off by myself and my Director.
• Upgraded SCCM 2012 SP1 to R2 CU5 for the NY Primary server.
• Expanded Secondary sites to London and Singapore until Toronto is ready with SCCM 2012/2016.
• Created the corporate standard Task Sequence, built the MDT 2013 server/database, integrated into SCCM 2012 for monitoring, added DaRT 8.1 to the boot image, imported all of the new drivers for our new Lenovo machines (X230’s, X240’s, X250’s, M93P/SFF, P500’s, P700’s).
• Use PowerShell to gather reporting information, use SCCM 2012 Cmdlet’s, and develop scripts, one with a GUI and one without. One was for the service desk to create and add a new machine into SCCM 2012 and the other was to create collections and add machines/users, they were both combined later on.
• Manage the Forgot Password project for New York, UK & AP as the technical lead.
• Manage the DLP project for New York, London & Singapore as the technical lead.
• Manage all desktop related projects globally.
• Apple, OS X, OS X Server, Casper management, Chef Management, Puppet management, & software packaging using PowerShell/Admin Studio.
• Work on forensic cases, create raw images, and analyze them using Encase/FTK/Autopsy, create detailed reports directly for the CIO/CTO.

Confidential, NJ

Senior Systems Engineer/Architect SME / System Center, Office 365 & Intune Practices Manager

Responsibilities:

• Manage Global System Center, Office 365, & Intune Architects/Engineers.
• Design, Architect, Implement and support SCCM 2012 SP1/R2, Hyper-V 2012 R2, SCVMM 2012 R2, Private and public clouds using System Center, SCOM, App Controller, DPM, Orchestrator, Service Manager & Citrix ZenDesktop 6/7+.
• Attend Pre-Sales calls & meetings as the SME on the System Center 2012 stack along with Hyper-V 2012, 1E products, private and public clouds, Windows Azure & Windows Intune along with many other products. SCCM/ServiceNow Integration.
• Follow best practices for any project that was assigned to me.
• Design & review SOW’s.
• Design, implement and manage GPO best practices along with coming up with a solution for offline files/folders.
• Design, Implement and support SCCM 2012, configure OSD task sequences, software deployments, windows updates, out of band management of assets, importing of drivers to the OSD process, USMT customization, Reporting & creating WQL queries.
• Assess current environments, Develop, plan & execute the Windows XP to Windows 7 migration for various clients.
• Provide level 3/4 support for all desktop & SCCM 2012 related issues for various clients. Develop SLA’s & Metrics, Identify KPI’s, manage/train current help desk/desktop staff then transition staff back to management.
• Test OSD deployments, software deployments, software packaging, GPO changes & windows updates in the lab environments before releasing into production. Implement MDT into SCCM along with WAIK/ADK.
• Develop strategies & solutions for issues encountered from day to day operations using knowledge, research, and people.
• Develop the SOE, the base gold image, create VM machines so that the base gold image could be updated every 3 months with security updates & service packs as well as adding any standard software to be included with base gold image.
• Implement, configure and use 1E Nomad Branch for software, WSUS & operating system migrations along with 1E shopping.
• Design/Implement Windows Intune as well as Windows Azure solutions with or without SCCM 2012.

Confidential, New York, NY

Senior Systems Engineer/Architect / Team Lead / Consultant

Responsibilities:

• Hold weekly status meetings, conduct performance evaluations every 6 months & develop training programs for staff.
• Design, Implement and support SCCM 2012, configure OSD task sequences, software deployments, windows updates, out of band management of assets, importing of drivers to the OSD process, USMT customization, Reporting & creating WQL queries.
• Assess current environments, Develop, plan & execute the Windows XP to Windows 7 migration for various clients.
• Provide level 3/4 support for all desktops & SCCM 2012 related issues for various clients. Develop SLA’s & Metrics, Identify KPI’s, manage/train current help desk/desktop staff then transition staff back to management.
• Setup lab environments at each client location with all the hardware within the corporation.
• Test OSD deployments, software deployments, software packaging, GPO changes & windows updates in the lab environments before releasing into production. Implement MDT into SCCM along with WAIK.
• Design and implement SCOM 2012 at various client locations.
• Develop strategies & solutions for issues encountered from day to day operations using knowledge, research, and people.
• Develop the SOE, the base gold image, create VM machines so that the base gold image could be updated every 3 months with security updates & service packs as well as adding any standard software to be included with base gold image.
• Design, Configure and install Citrix ZenDesktop 6+, VDI, add desktops, applications and administer the environment for various clients.
• The Computer Merchant CSC (Client: Zurich North America) New York, NY June 2012 - December 2012
• Senior Systems Engineer, Global Software & distribution team / Consultant (6 Month contract)
• Manage & deploy all software installs to Zurich NA & Farmers Insurance.
• Create AD software PUSH and PULL groups.
• Used BMC BladeLogic Client Automation suite as the software deployment tool.
• Level 3 support for software and operating system issues.
• Manage & update SLA & non SLA spreadsheets daily.
• Attend software approval conference calls 2 days out of the week.
• Generate reports for the software installs using BMC reporting custom SQL queries.
• Use Bomgar and RDP to remote into the users PC’s and rectify software issues.
• Check packages status to see if the packages passed UAT.
• Remediate issues level 1 & 2 were not able too.

Confidential, New York, NY

Senior Desktop Engineer Team Lead / End User Support Manager

Responsibilities:

• Team lead for 42 desktop engineers for the Windows 7 migration of over 38,000 computers throughout all of the hospitals and central office. Recruit, Hire, Fire, Motivate, Mentor, develop, schedule and conduct performance evaluations.
• Assist with the development of the SCCM Operating System Deployment process.
• Assist with the development of the McAfee End Point Encryption.
• Developed the Windows 7 migration plan for our engineering team.
• Developed a 120 page training document for the Windows 7 Desktop and Server Engineers.
• Team lead for 8 Desktop Engineers & 2 SCCM Engineers within central office with a user base of over 3,500 users including the COO, CIO, CFO, and the President’s Office along with the Chairpersons Office.
• Prepare, Design & deployed windows 7 in our enterprise environment.
• Hold daily status update conference calls.
• Hold morning conference calls for pending issues that have not been resolved.
• Resolve any outstanding support issues.
• Identify the root cause of support issues encountered in day to day operations throughout the Entire Corporation and work with various departments to find permanent solutions to the issues.
• Provide above and beyond customer satisfaction.
• Manage and lead the multifunction printer remediation project, discover all of the MFP printers with hard drives throughout the entire corporation using reports from the security team and having the Desktop Engineers at every location manually identify each printer name, manufacturer name/model/serial number, IP address and exact location.
• Go to each printers IP address and check the configuration to see if the printer does in fact have a HD and verify if the secure overwrite feature is already installed/enabled.
• Compile both lists, remove or add printers from the list and create an Excel spreadsheet to better manage the project. Work with all of the printer manufacturers/leasing companies directly.
• Replace any MFP’s that the manufacturers/leasing companies did not have a kit for or software up date to enable the secure overwrite HD feature.
• Issue PO’s. Coordinate all of the kits/firmware updates throughout the entire corporation.
• The project was completed and all of the 800 or so printers were in compliance within 8 months.
• Manage multiple projects for the help desk & desktop support teams.
• Performed updates to hardware (Memory, Hard drives, etc.) on HP & Confidential blade servers along with troubleshooting performance issue, hardware issues, and services issues.
• Manage Corporation wide desktop updates, bug fixes, & security patches.
• Manage the entire build out for White Hall St. Manage every aspect of the project/all trades to meet a strict deadline for the space to be occupied by over 200 employees. Manage all network connectivity WAN/LAN/WWAN and do extensive testing of the network before going live. The project deadline was a month under schedule and was under budget.
• Manage the entire build out for the new IG and People Soft space. Manage every aspect of the project/all trades.
• Manage/Supervise the build out for the new Consolidated Helpdesk & NOC at Bellevue hospital. Manage the cabling vendor/electricians. Coordinate the fiber installations, LAN room setup, and connectivity.
• Manage/Supervise network cabling, Computer layout and overall network design for the state of the art NYCHHC Institute for Medical Simulation and Advanced Learning Center at Jacobi Hospital.
• Manage the lotus to excel project for the Finance department. Convert over 400,000 lotus files dating to Lotus 2.1 for DOS using a conversion tool and writing custom VBA code for files that did not convert successfully.
• Test and roll out tablet laptops for the Chairpersons Office and the members of the board for the Q&A sessions.
• Setup/Manage the Windows 2008 VM File Sever for the Q&A shared drive. Setup & Manage advanced permission’s for the
• Central Office staff and the Hospital staff.
• Design, setup & configure McAfee EPO, Host Data Loss Prevention (DLP) & Endpoint encryption for staff in the central office along with the hospitals with a user base of 35,000.
• Design & maintain the standard operating environment (SOE) for the corporate offices along with all the hospitals.
• Install, Configure & train the support staff on Confidential Systems Center Configuration Manager (SCCM).
• Design, Build & configure Citrix servers/applications used at the hospitals and other city agencies.
• Work exclusively with the law department on E-discovery cases. (Chain of custody reports, Forensics using Encase, The Sleuth Kit & Backtrack 4 & 5).
• Provide day to day troubleshooting for all different types of Confidential & HP Computers, RIM Blackberry’s, Printers and Servers.
• Setup/Manage VMware servers & install/configure Wyse workstations.
• Support over 5 different locations, the corporate offices along with the hospitals using a centralized ticket system (BMC Remedy) with over 15,000 users.
• Act as a team lead for various projects; Active Directory Migration, Data Center Migration as well as other projects. exclusively manage and support the President’s Office along with the Chairpersons office & all AVP and higher executives within central office.
• Test Confidential and RIM prototypes within the environment.
• Manage the Novell Environment, AD, DNS, GPO, Blue Coat Proxy, GroupWise, E-Directory and one Confidential Exchange 2007 server.
• Desktop and server hardware troubleshooting including changing hard drives, motherboards, memory & network adapters.
• Software support for windows XP / Vista / 7, windows server 2000 / 2003 / 2008 along with Law Manager, JANUS and the city comptrollers web based law manager software, Hot Docs, all Adobe products, and all Confidential products along with all Novell products including OTPS Payroll software and payroll LaserJet printer rollouts.
• Create solutions for every type of issue encountered day to day using experience, knowledge and the c current information available along with the latest tools available.
• Use Linux as an advanced recovery tool for corrupt and deleted files on local hard drives, along with using Linux to find security holes in WAN/LAN/WWAN environments.