PIERRE NAGHA

**-** **** ***** ** NE, Apt *, Leesburg, VA 20176 adzsxy@r.postjobfree.com 443-***-****

Summary

Self-motivated Unix/Linux/Window professional seeking a full-time position with an information technology company.

Skills

SAMBA/CIFS/NFS/APACHE

SYSTEM HARDENING

IPA/LDAP/KERBEROS

ANSIBLE/PATCHING

TEAMING/AGGREGATION

MARIADB/MYSQL LEVEL 6/10

ACTIVE DIRECTORY

ServiceNow/REMEDY/JIRA

VMware/VSPHERE

AWS CLOUD

KICKSTART

TCP/IP/UDP/DNS

SELINUX/FIREWALL RULES

SYST MONITORING

NETWORK TROUBLESHOOT

IPV6/IP ROUTE

NTP/MAIL-POSTFIX/BACULA

BACKUP/RESTORE/RZINC

WINDOWS 8, 2012R2, 2016

BASH SCRIPTING

ZFS/LVM/RAID/NAS ISCSI

ZONE/APACHE/RSYSLOG

Experience

Linux Engineer Expert (Lead) Jul 2022 to Current

22nd Century (FBI-Federal Bureau of Investigation) – Vienna, VA

Install and configure Linux Operating System on Dell and HP bare metal.

Create objects and set forward/reverse lookup zones for new Linux VMs in AD.

Join new Linux servers to AD and troubleshoot those failing to sync with AD by analyzing sssd.conf, krbr5.conf, krb5.keytab files.

Sync Satellite repositories, download the latest and greatest patches and publish/promote new contents views.

Unregister and unenroll servers from Satellite and IDM before decommissioning.

Automate monotonous tasks using bash scripts and ansible playbooks.

Making recommendations for new Satellite subscriptions and entitlements reallocation.

Employ SUDO and sshd_config file to control permissions based on users’ roles.

Troubleshoot TCP/IP, DHCP, DNS, SMTP, NFS, CIFS, and SAMBA in a multi-platform LAN.

Deploy NFS sharing to allow servers within the same cluster to share the same data.

Configure LVM, regular, and swap filesystems through disk partitions.

Employ VMware ESXI for cloning, Hosts, template, new hardware, datastore, and VLANS.

Assist AWS team with services like IAM, S3, EC2, CloudWatch, Route53, NACL, CloudFront, Bucket Encryption and replication, Lambda Function, DynamoDB, VPC and VPN, ELB, and Billing.

Manage Red Hat Enterprise Linux servers Extended Life Support and open Red Hat cases when necessary.

Linux System Engineer Jun 2021 to Jun 2022

SAIC (Science Application International Corporation) – Springfield, VA

Build new systems and joining them to AD as well as registering them to Satellite and IDM.

Monitor systems vulnerabilities and compliance through the application IPOST.

Ensure all Linux endpoints follow the STIG/DISA protocol to always maintain security.

Deploy and install AIDE (Advance Intrusion Detection Environment) for files integrity using Ansible.

Provide quick support to customer in network or any major troubleshooting related to system configuration or server latency.

Build Ansible playbooks and write scripts to automate tasks to save the company time and money.

Integrate Gitlab and Ansible tower to create templates and run jobs.

Deploy patches not only for enhancement but also to get rid of security issues and bugs.

Employ SUDO to control permissions based on users’ roles.

Configure, and troubleshoot TCP/IP, DHCP, DNS, SMTP, NFS, CIFS, and SAMBA servers in a multi-platform LAN.

Install MacAfee agent using Ansible in all Linux servers to ensure proactive protection.

Manage LVM, regular, and swap filesystems through disk partitions.

Provide server administration in the AWS cloud platform with services such as IAM, S3, EC2, CloudWatch, Route53, NACL, CloudFront, Bucket Encryption and replication, Lambda Serverless, DynamoDB, VPC and VPN, ELB, and Billing

Linux System Engineer/Linux Security Administrator Jul 2019 to Dec 2021

RAYTHEON (DoMino Program) Sterling, VA

Maintain and develop Proactively all Linux infrastructure technology to maintain a 24x7x365 uptime service.

Set and implement user access controls and identity and access management systems.

Monitor network and application performance to identify and irregular activity.

Perform regular audits to ensure security practices are compliant.

Deploy endpoint detection and prevention tools to thwart malicious hacks.

Employ Nessus to generate an inventory of your open source and third-party components to determine potential security.

Implement comprehensive vulnerability management systems across all assets on-premises and in the cloud.

Work with IT operations to set up a shared disaster recovery/business continuity plan.

Work with HR and/or team leads to educate employees on how to identify suspicious activity.

Provide systems administration-related solutions for different project and operational needs.

Control closely tickets and workflow under tools such as ServiceNow, Remedy, and JIRA.

Keep best practices on managing systems and services across all environments.

Analyze logging information for reporting of performance exceptions.

Monitor system performance and capacity planning as needed.

Manage, coordinate, and implement software upgrades, patches, hot fixes on servers, workstations, and network hardware.

Enroll new servers to IDM and register them to satellite with the right activation key.

Create and modify scripts or applications to perform tasks.

Design Windows 2012R2 and 2016 active directory and domain name services as well as group policies to suit our organization.

Provide input on ways to improve the stability, security, efficiency, and scalability of the environment.

Oversee the push of MacAfee agent through Ansible to all Linux servers to ensure proactive protection at all time.

Regulate IDM in order to apply SUDO policy on users based on a specific host or a group of hosts.

Supervise cluster servers to maintain good load balance and fault tolerance at all time.

Conduct virtual machines migration from premise to the cloud while considering cloud storage costs based on the available budget.

Collaborate with other teams and team members to develop automation strategies and deployment processes.

Mentor junior system administrators by getting them involved on different projects.

US Linux Consultant Expert Apr 2019 to Oct 2019

INFOSYS Speedway, IN

Advise clients on new applications and how to deploy them in their environment.

Perform top level troubleshooting issues and sometimes teamed up with red hat support team to find quick solutions for P1 cases.

Coordinate with the cyber security team for best practices on systems hardening.

Keep a good track on Satellite and VMware license keys and their validation period.

Implement server templates on vSphere client based on the recurrent requirements for server build or deployment.

Enforce the VMware tools to be at the running state at all time in order to improve the performance and management of the virtual machines.

Conduct quarterly patches not only for enhancement but also to get rid of security issues and bugs.

Build Ansible playbooks and write scripts to automate tasks to save the company time and money.

Integrate Gitlab and Ansible tower in order to create templates and run jobs.

Analyze SolarWinds alerts and reports and make quick decision and recommendations to avoid chaos.

Set firewall rules based on Inbound/Outbound and networking requirements.

Linux/Windows System Administrator Jan 2013 to Mar 2019

Trinitech Consulting Beltsville, MD

Build, install, configure brand new virtual and physical servers, test, deploy RHEL 6&7, CentOS 6&7, Solaris 9&10, servers to the network via standard or advance installation(kickstart).

Create and modify user accounts and groups; and enforce passwords policy.

Conduct tuning on existing servers for example, increasing virtual memory via swap, increasing physical RAM, managing bottle-neck processes (ps, top, sar, glances, prstat, pgrep, kill -9, kill -15).

Perform storage, disk, swap, volume management with (LVM, SAN/NAS, CIFS, SAMBA, NFS).

Troubleshoot Satellite related issues such as wrong activation keys, certificates.

Configure multipath on physical servers to achieve fault tolerance and load balance on block devices.

Maintain the cluster environment in good shape by ensuring fencing, resources, resource groups, and quorum are well defined.

Install and manage packages using tools like pkgadd, pkgutil, yum, and rpm for archiving, compressing.

Provision SSH key authentication to ensure safe communication between server and clients.

Construct Mail server Postfix on local network and connect to it the null clients.

Provide time synchronization between NTP server and clients.

Setup, configure, and troubleshoot TCP/IP, DHCP, DNS, SMTP, NFS, CIFS, and SAMBA servers in a multi-platform LAN.

Create automated backups using BACULA software or tools like RZINC, CPIO, and TAR in a simple bash shell script via crontab.

Design Apache Web servers for some clients in a zone as well as local website applications.

Secure webservers by placing them in private directory for restricted access and secure them with SSL/TLS protocols.

Manage server environment with SaltStack for automation and maintenance.

Introduce Window server to the domain controller, perform access control and permissions.

Design virtual private network(VPN) as well as PUTTYGEN to encrypt communication among window servers.

Configure NAS (Free NAS) to create LUNs and attach to windows 2008 servers and to Solaris 10 or Linux servers using iSCSi.

Configure IPA/LDAP server and clients for single sign on or centralized login.

Connect clients to LDAP master server by using either authconfig-tui or authconfig-gtk.

Maintain TLS as an encryption tool between LDAP master server and client.

Employ sssd service as an authentication backend in LDAP master server and LDAP client.

Support and manage VMware ESXI, and Oracle VirtualBox hypervisors as well as all virtual machines being hosted.

Troubleshoot Unix/Linux servers for rogue line, file system corruption, boot loader corruption, initrd image, device driver, configuration, and password issues.

Escalate major incidents to Redhat Support Team by explaining the impact on the environment and creating and attaching the sosreport.

Update incidents and tasks on daily basis on Service-Now to keep customers informed on the resolution progress.

Coordinate non-global zones configuration, installation; perform migration, testing, as well as NICS aggregation setup.

Create or modify MariaDB databases and tables, perform queries as well as backup and restore on databases, and tables.

Maintain work ethic and professionalism at all time when dealing with clients.

Engage in helping co-workers with their projects to meet deadline as well as providing training to those in need.

Petroleum-Cementing Engineer Jan 2013 to Jun 2013

Halliburton Energy Services Lafayette, LA

Performed the cement slurry and pumping design.

Determined the volume of the lead, tail cement for surface, intermediate casing.

Estimated height of spacer and mud in squeeze, plug, liner, and multistage jobs.

Conducted safety meeting before the blending and mixing of cement and additives.

Compared my calculations with the customer before pumping schedule provided.

Acquired and Interpreted real-time data on ICEM and OPTICEM software.

Executed the rig-up and rig-down of equipment necessary for cementing job.

Student Jun 2009 to Jun 2010

Linux Academy Online Platform

Learned the Linux fundamental tools.

Managed security services.

Operated running systems.

Configured local storage, network service, database service.

Created and configured file systems.

Deployed, configured, and maintained systems.

Math-Tutor Aug 2007 to Apr 2012

Baltimore City Community College Baltimore, MD

Assisted students with their homework in Algebra and Calculus.

Provided students with easier methods to solve word problems.

Conducted math workshop on the usage of scientific calculator.

Improved students focus on how to approach a given math problem.

Tested students critical thinking ability in physics-based calculus problems.

Education/Certifications

Bachelor of Science, Petroleum and natural Gas Engineering 2012

West Virginia University Morgantown, WV, US

Petroleum and natural Gas Engineering

Certifications

TS/SCI with CI Polygraph

AWS Certified Solution Architect

Red Hat Certified Specialist in High Availability Clustering

RHCE (Red Hat Certified Engineer)

RHCSA (Red Hat Certified System Administrator)

Petroleum and Natural Gas Engineer

SaFe training Completion

DHS/DoD/DoS security compliance certificates of completion

Environment

RHEL 6&7, CentOS 6&7, VMware ESXI, Dell PowerEdge and HP ProLiant; servers HP ILO, AWS, Oracle ILOM, and Dell DRAC; Windows 7&8 servers, and blades; Syslog, Trackit, scientific calculator, Calculus, Excel, Notepad, word, PowerPoint.

Contact this candidate