Security Software

******@*****.*** HAROLD CHEN (***) ***-

**** (C)

CAREER OBJECTIVE:

An Unix Operations/Administration position in a dynamic environment.

QUALIFICATIONS:

. Strong background in Unix Administration and operational supports for

DEV/QA/PROD environments with result-oriented accomplishment.

Experience and working knowledge in ITIL related processes,

configuration/release management, Oracle RDMS, and web application

servers.

. Constantly took on high-severity tickets, volunteered in critical

issues resolution, and implemented various security controls to harden

systems and conducted comprehensive application/infrastructure

reviews to ensure a secure and comprehensive deployment.

. Broad experiences in utilizing shell scripts or system tools to

achieve high productivity, security and availability.

. Capability to multi-task, juggle multiple projects and effectively

determine priorities under pressure to meet tight deadlines.

Familiarity with 24/7 on-call support environments for various mission

critical platforms/applications.

. Proven ability to work with minor supervision in multiple functional

areas. Attention to details, continuing learner, good team player,

and great communication skills.

TECHNICAL PROFICIENCY:

Hardware/OS: Sun Servers (V280, V480, V880, 6800, E15K, etc), UNIX

(Solaris 8-10, Redhat/Suse Linux, HP-UX)

Software/DB: Business Objects XI, Oracle, Apache/Tomcat, JAVA,

Scripting (Shell, Expect, Perl), iPlanet, Weblogic, EMC-

PowerPath, Remedy, Peregrine, BMC-Patrol, NetCool.

Network/Security: TCP/IP, DNS, DHCP, NFS, SNMP, SSH, SSL, AppScan, SNORT,

NMAP, Nessus3, PGP

WORK EXPERIENCE:

Senior UNIX Administration/Operations Engineer, AT&T, Middletown, NJ

(5/2007 - 6/2009)

. Supported administration on 250+ LINUX/Solaris Servers (Performance,

Clustering, SENDMAIL, BIND, NTP, Apache/Tomcat, PERL, iPlanet, Samba).

Troubleshooting SunCluster/Capacity/Networking/OS performance related

issues. Actively involved in documenting or reviews of high level

designs, applications interface agreements, web systems

configurations, deployment plans, capacity analysis documents,

operational procedures, etc.

. Produced security analysis reports based on applications and UNIX

security checklists from the corporate Chief Security Office to

identify and evaluate existing security safeguards/vulnerabilities in

new/existing applications developed by in-house/third-parties. The

checklists measured effectiveness of security controls and procedures

that protect the assets of the applications as well as determined the

level of compliance to Corporate Security Policy and Best Security

Practices in terms of critical issues such as security patches, access

controls, logs management, etc

. Implemented Unix-Unix or MVS-Unix secure file transfers by customizing

SSH/Connect:Direct configurations (e.g., scp-only/no-ssh, logs

analysis, automated configuration, etc.). Performed system time

synchronization (NTP), system changes logs management, SUDO

specialized configuration, etc. Evaluated functionalities of Business

Intelligence/Reporting Software such as Crystal Reports 2008, Business

Objects Enterprise XI R2/3, JasperSoft, etc.

. Improved information security software and devices; Performed

applications security vulnerability analysis by utilizing AppScan7.6

and Nessus3 based on results from Axent scanning, national CVE/CCE

Vulnerability Databases; Generated pre/post-upgrades reports to

identify SQL-injections, cross-site scripting, Trojan horses attacks,

etc.; Recommended secure coding practices to software development

teams. Installed/upgraded/managed enterprise encryption products and

processes such as PGP, OpenSSL, OpenSSH, etc.

. Participated in various DEV/UAT/production environment configuration

and troubleshooting issues, such as system software upgrades;

constantly updating an Oracle-based reporting/analysis tools

(SQL*Plus, SQL*Loader, Cross-tabular) to generate daily metrics

reports. Implemented KSH/PERL scripts for deployment procedures

automating, BusinessObjects6.5 server alarming, accounts ID

synchronizing across 100+ servers, post-outage systems integrity

validation, ETL Flip/Flop, Oracle database dynamic password

management, etc.

Unix System Administrator, AIG Technologies, Livingston, NJ (1/2006 -

3/2007)

. Actively involved in help desk problem tickets responses and

resolution by using Remedy and Peregrine Software. Performed AutoSys

and VxVM upgrades/maintenance works on SUN servers.

. Provided operational/engineering support for 200+ Sun Solaris and SuSe

Linux production servers with EMC Storages; 24/7 on-call support

rotation. Carried out system maintenance duties such as

rebuilding/upgrading Solaris 8/9 server s with backup restoration,

NetCool alerts remediation, software packages/patches administration,

failed disks/HBA cards replacement, firmware upgrades, power

supply/system board's replacement (Shell scripts for automating tasks,

such as system configuration captures, NIC parameters, and SDS meta-

devices.

. Served as one of main implementers in a mission-critical capacity

expansion projects that Includes TPC-C capacity analysis report, VCS

clustered nodes break-off and rejoining, CPU/memory upgrades on

Fujitsu/SUN servers, disk mirroring, SAN disks allocation/de-

allocation (including four-node SUN Clusters and two-node VERITAS

Clusters); participated actively in configuring DNS, SENDMAIL, NTP,

SNMP, file systems remote sharing, etc.

. Worked closely with other operational and engineering support groups

or vendors, such as Unix engineering, network engineering, information

security, DBA, messaging, AutoSys, backup/restore, storage engineering

in order to resolve a wide variety of technical problems; Implemented

monitoring, backup, and disaster recovery for infrastructure and

engineering environments; Responsible for performance tuning,

analysis, proactive problem detection, circumvention and resolution to

root causes, 4-node clusters resources failures troubleshooting, etc.

Medical IT Operation Support/Compliance Engineer, Radiation Oncology

Facilities, NJ/NY/MD (3/2004 - 11/2004)

. Coordinated medical physicists, network engineers and

vendor support personnel to resolve a wide variety of

security or technology related problems such as: CT

Scanners to Sun Workstations images transfers.

. Monitored and tuned the systems to achieve optimum performance levels.

Ensured workstation/server data integrity by evaluating, implementing

and managing appropriate software and hardware solutions.

Technical Consultant/IT Operation Manager, Institute for Information

Industries, Taiwan (10/2001 - 7/2003)

. Evaluated commercial information security products and services to

determine which of these should be adopted by or tested by the

organization. Provided technical guidance and recommendations to the

information technology department and top management about the risks

and countermeasures associated with emerging information systems

technologies such as IPSec, PKI, B2BI, EAI, etc.

. Coordinated among various teams to redefine J2EE software development

processes in DEV/QA/PROD enrionments in order to mitigate projects and

systems risks and to ensure compliance with MIS policies and

procedures during each phase.

. Major contributor of a pilot project team responsible for a $6M

Maritime Transport Hub (MTNet) government project. Analyzed and

consolidated input from clients, vendors and top management; Developed

system requirement specification (SRS) and request for proposal (RFP)

with critical initial phase completed in two months. Evaluated

technology alternatives and optimized solution design; Streamlined

requirements and implementation plan with success in cutting the

initial scope to 30%.

Operational Environments Administrator, iNautix Associates, East Brunswick,

NJ (8/2000 - 8/2001)

. Coordinated systems architects, Java developers, UNIX administrators

and release management team in resolving critical issues related to

software installation, system configuration, network security, load

balancing, and server/database performance to ensure real-time and

accurate delivery of web applications; re-engineered communication

channels by sharing information between the software developers,

system integration testers, hardware engineers and sales/marketing

groups for various applications.

. Hands-on implementation of Korn Shell scripts for builds/release

processes and dynamic deployment of iPlanet-based web applications

across multiple Solaris8 platforms (DEV, QA, UAT, XAT, PROD) by

working closely with company's software engineering and system

administration teams; utilized NMAKE, ANT Build tools..

UNIX Administration/Configuration Management/Production Support, AT&T, NJ

(4/1996 - 8/2000)

. Managed, implemented and tested upgrades of Solaris platforms, such as

development, testing and Production environments; analyzed impacts on

new features, releases and patches; scheduled installations and

upgrades, and maintained them in accordance with established IT

policies and procedures.

. Implemented performance monitoring/tuning, process management, SW/HW

installation, upgrades, configuration, and troubleshooting; file

system monitoring/ backup, Unix Shell script development and

maintenance; updated and maintained Standard Operating Procedures

(SOP) and documentation for system administration and three-tired

production support mechanism; coordinated and implemented Y2K-

compliance of hardware, software, database, operating systems for

various telecomm applications; created and maintained proper project

plans, tracked progress with various team representatives to address

potential issues.

. Utilized Solaris, HP-UX, Korn Shell, Sablime, Tivoli, BMC-

Patrol, Oracle/PLSQL and Informix/ESQL on tasks including

requirements document reviews, detailed designs, coding,

unit/integration tests, system configuration and production

supports.

EDUCATION:

UNIVERSITY OF HOUSTON M.S. Electrical Engineering

NATIONAL TAIWAN UNIVERSITY M.S. Applied Geophysics

Contact this candidate