SUMMARY:

• Over 10 years of progressive experience in Designing and Implementations of new Active Directory Root Domains, OU structure, Namespace and Schema rules. LDAP Integration and Identity Management
• General application security APIs and protocols: MS CryptoAPI, PAM, Kerberos, SSL/TLS, SAML, S/MIME, PKCS.

TECHNICAL SKILLS:

OS’s: Windows 2.x,Solaris 9, Solaris 10, Linux

DIRECTORIES: Sun Directory, Active Directory, eDirectory, ADAM

CLUSTERING: Microsoft Clustering Services, Novell Cluster Services.

CLOUD: AWS

Automation: Rundeck, Monitoring. Compass, Tivoli

Languages: VBscript, Python

Databases: MySQL, MSSQL

Identity Management: Sun Identity Manager, Microsoft Identity Integration\Identity Life Cycle Manager, Novell NSURE.

PROFESSIONAL EXPERIENCE:

Implementation & Application Support Engineer

Confidential

Responsibilities:

• Managed multiple projects and ensured that they met or exceeded stake holder expectations. Excelled at gathering feedback and requirements; communicating needed changes to development team; and overseeing seamless, high - quality rollouts to on-time and on-budget conclusion.
• Conducted Operational Acceptance validation tests on HP Hardware and in-house developed market data applications
• Worked extensively on Clustering. Troubleshooting production issues.
• Experience in MS SQL 2012 R2 Batch processes, Import, Export, Backup, and Application support.
• Supported and configured Bluecoat Directors
• Interfaced with Development groups to determine deficiencies in market data applications
• Installation and configuration Market Data Traffic Management Systems Data Analysis Server DCS
• Administered and support Compass Monitoring system.
• Managed Reverse Proxy Services to direct traffic for market data applications
• Monitored the health of Amazon EC2 instances and other AWS services.
• Deployed EC2 Instances using Github
• Configured Amazon EC2 instances and Autoscaling
• Used Wireshark to examined network traffic to troubleshoot packet loss.
• Configured, HP C7000 Server Blade Chassis Enclosures. Virtual Connect Cards & Onboard Administrators
• Produced detailed Visio Diagrams for Data Allocations for Market Data Systems
• Writing Lucene Query Language statements for Kibana to search and correlate log events
• Analysing data within Hbase to track down data loss
• Worked with development to backfill missing market data in hbase
• Administration of IBM Websphere clusters hosting market data applications
• Use of Fiddler to examine data between market data desktop application (Eikon) and backend exchange data services
• Performing and Analysing Soap Requests to verify data connectivity and permissions.

Independent Consultant

Confidential

Responsibilities:

• Upgrade of Citrix 4.0 to Citrix 4.5
• Upgrade of Windows 2003 forest to Windows 2008. This is a mixed mode domain. Universal group caching controller will be converted to RODC’s
• Performed POC for SIEM solution for Mid-tier Company. Evaluated Q1 Labs “QRadar” and LogRythm LRX2.
• Analysed Disaster Recovery solutions. Analysed competing solutions from Sungard and Cervalis utilizing DoubleTake, SecureToDisk, and PlateSpin Replication solutions. Exchange 2007 HA solutions explored where CCR combined with SCR
• Configuration of Symantec Endpoint Protection\IPS
• Installation & configuration of Microsoft 2008 Cluster Server
• Coordinated Firewall Penetration Testing with Trustwave
• Integration of vendor applications into Solaris environment to receive NYSE, Nasdaq data
• Technical Project Manager for Multi-Site organization in securing remote access

Active Directory/Identity Management Analyst

Confidential

Responsibilities:

• 3rd level support for Sun Identity Manager Entrust GetAccess on Solaris 9/10, Linux with Weblogic and Oracle RDBMS Backend.
• SUN IDM integration with Entrust Getaccess
• Modifications of workflows\user provisioning using XML Express language
• Centralized user provisioning and de-provisioning to meet regulatory compliance and greatly reducing the need for human intervention there reducing costs
• Implementation of Security Event Management solution (Intellitactics). Used to analyse enterprise security events.
• Developed Identity methodologies, processes and procedures to secure corporate identities and roles
• 3rd level support for multi-domain forest. Upgraded Windows 2000 DHCP server to Windows 2003. Solved Windows Time Service issues. Reset Windows time to use NT5DS
• Outlook web access integration and customization with SSL VPN.
• Automation of the creation of Exchange mailboxes through SUN IDM
• Automation of the deletion of Exchange mailboxes when user has been disabled after 14 days.
• Setup of RPC over http Exchange FE server
• Script development. Ex. Developed VBSCRIPTS to check if OU structure and changed. Comparison was made against Oracle table. Script created to delete mailboxes from a user 14 days after termination.
• Maintained and managed extensive MS DNS topology which consisted of over 100 primary and secondary zones

Senior Server Engineer

Confidential

Responsibilities:

• Successfully deployed a complex Identity Management solution utilizing Microsoft Identity Integration Server\Identity Life Cycle Manager. The current configuration integrates SAP Active Directory\Exchange 2003 and AD\AM.
• Deployed Password Self Service Application from MTEC - ROI projected within a 12 month time frame.
• Extensive experience in vendor relations, which includes contract negotiations, SLA’s, emerging technologies, etc.
• Researched CITRIX Presentation server to replace Windows XP PC’s at JFK terminal.
• Created a test lab to facilitate the implementation of new technologies using VMWARE ESX.
• Upgraded forest\domain to Windows 2003 R2. Migrated large DFS infrastructure to DFS-R. Designed a custom topology encompassing over 65 servers to distribute sensitive data to end users. This infrastructure created the first paperless cockpit in the Airline Industry.
• Redesigned Active Directory Structure for future growth. Modified site designed to match physical network topology change. Used scripting techniques and Group Policies to increase security at the domain level. Located and deleted thousands of stale accounts, which presented an inherent security threat to the Jetblue network.
• Managed ISA 2004.and worked with Microsoft Engineers in conducting a risk analysis for Jetblue’s ISA infrastructure

Senior Network Architect\Engineer

Confidential

Responsibilities:

• Developed project plans for migration from Netware 5.1, 6.0 NT 4.0 to Windows 2003 AD
• Created AD sites, configured replication topology
• Created GPO policies for Forest, Domain, OU security and Software Deployment
• Designed and implemented OU structure, Namespace and Schema rules
• Designed and implements Window 2003 DNS infrastructure.
• Designed Active Directory Forest, Domain GPO, FSMO and Site Structures
• Used Microsoft Clustering Services for MS SQL 2000 and File server High Availability
• Used Novell Cluster Services for File and NDPS High Availability.
• Developed LDAP data replication schemes between application and directory structures.
• Administered and installed Citrix Metaframe 1.8 and XPE. Tuned server to Citrix Best Practices documentation.. Configured load balancing. Rolling application upgrades.
• Upgraded Netware 5.1 to Netware 6 on Compaq San. Installed iFolder, iManager, NetDrive, Webaccess, Installed and configured CIFS.

Senior Engineer/Project Manager

Confidential

Responsibilities:

• Project Tracking, time estimation, release management and configuration control of various tasks.
• Analyzed network infrastructure and recommended best practices.
• Meeting with and presenting documentation for network changes to CIO.
• Review and optimizing directory synchronization locally and over wan links. Modified object transfer, synchronization times for optimal bandwidth conservation.
• Installed Netvision’s Synchronicity Meta-directory product to integrate NDS, NT DOMAIN structure and Exchange 5.5.
• Application packaging using Zenworks in mixed Windows Novell environment
• Advised on disaster recovery using CA, Microsoft clustering Solutions.
• Advised network team on ways to decrease multicast traffic. Blocked multicast traffic at routers.

Senior Engineer/Project Manager

Confidential

Responsibilities:

• Project Tracking, time estimation, release management and configuration control of various tasks
• Developed project plans for Active Directory Migration Plan for Confidential
• Developed DNS migration plan.
• Designed Active Directory Forest, Domain GPO, FSMO and Site Structures
• Performed Windows 2000 Upgrade Analysis. Active Directory tree Design Migration path from NDS eDirectory, NTDS
• Exchange 5.5 integration using the Active Directory Connector
• Windows 2000 Security hardening. IPSEC, Kerberos rules.
• ADSI programming with Vbscript, created scripts for applying and removing local security credentials.

Senior Engineer/Manager/Project Manager

Confidential

Responsibilities:

• Redesigned and performed restacking of servers to new data center
• Developed new Change Control Policies
• Designed Project Plans for Phase out of Netware 4.11, Dbase FoxPro Applications. Conducted weekly status reviews with department heads.
• Designed Disaster Recovery plan using hot sites, replication software and clustering.
• Implementing Passlogix Single-Sign on.
• Participated in managers meetings. Established goals. Project life Span.
• Design and tested and planned Windows 2000 Migration over multiple sites. Performed pilot migration.
• Developed budget and spending priorities for fiscal year.

Senior Systems Architect

Confidential

Responsibilities:

• Member of JPMorgan’s “Directory Initiative” Team. Assisted in developing project plans for comparative testing of eDirectory, IPLANET directory server 4.11, Critical Path, IBM Directory server and Active Directory. Developed testing procedures, timelines, and benchmarks.
• Designed Security model for multi-tree information exchange
• Designed and implemented disaster recovery mechanisms
• Designed schema matching rules, supplier consumer roles, and replication. Iplanet rollout
• Tested benchmarked documented Novell’s DIRXML meta-directory solution. Developed XML documents and XSLT stylesheets to respond and modify directory events.
• Developed and tested project plan for migration of Netware 4.11 to 5.1
• Developed strategy client to resolve over 20,000 stuck obituaries with a client.