Security Active Directory
Resume:
Thomas N. Lacher
**********@*****.***
Professional Profile
Analytical-minded IT professional with 10+ years of experience, including secure enterprise application deployment, system administration, process efficiency, programming, and. technical support
Skills Summary
Active Directory security administration, auditing and management
Process automation and documentation of security processes
SCCM application packaging, application deployment and security patch management
PowerShell, VBA, Autoit, VBScript, InstallShield, AdminStudio
SQL scripting
Network security monitoring and reporting
VMware administration, VDI deployment, configuration of VMware ThinApp for application virtualization
Certifications
CISSP Associate - (ISC) - 11/2016
Certified Ethical Hacker – EC-Council – 12/2017
CCNA – CISCO - 3/2014
Security+ - CompTIA – 2/2013
Imprivata Certified Single Sign On Engineer – Imprivata – 5/2015
MCSA 2003 – Microsoft – 5/2004
MCTS Windows 7 – Microsoft – 5/2010
Network+ - CompTIA – 5/1999
A+ - CompTIA – 5/1997
Work History
IT Security Compliance Analyst II, 3/2015 to 10/2017
Catholic Health Initiatives
Managed, documented and automated processes to deliver Role Based Access using SQL scripting and Excel automation. This allowed the collection and organization of over 12,000 job roles.
Supported and managed privileged account audits by creating an automated Outlook email and Excel process. This created privileged access accountability for 5,000 accounts.
Used PowerShell and SQL scripting, removed stale admin accounts and efficiently organized active directory. This effectively removed 500 unused admin accounts.
Lead technician on project to update network file share permissions using Data Insight. This project effectively restructured network file share access to utilize secure group memberships.
Security Engineer, 3/2014 to 3/2015
Catholic Health Initiatives
Led the development of a single file executable for the Single Sign-On solution that saved the organization over $20,000 in travel expenses. This included creating a process to use SCCM as an efficient and reliable deployment and reporting tool.
Created a successful deployment process that resolved Windows 7 compatibility issues with the Imprivata single sign-on program. This allowed the project to run concurrent with the system-wide Windows 7 deployment project.
Security Analyst, 5/2013 to 3/2014
University of Louisville Hospital
Increased the efficiency of account provisioning by automating and documenting the account setup process using SharePoint. This increased reliability of account setups, and allowed for quick and consistent training of new security staff.
Monitored web filtering and antivirus systems to detect and isolate potential malware and virus infected hosts; assisted with incident response including investigative follow-up, assigning responsibility for corrective action, and auditing.
Worked with the security staff to implement and continuously improve the user account sponsorship process that creates secure management of external user account access.
Added automation and documented the user termination/account audit procedures, which created a consistent and accurate process that could be performed by other security staff.
Supervised team of contractors, who worked to transition the identity management process, over to a corporate partner.
IT Support Analyst, 7/2011 to 5/2013
Invensys Rail
Monitored and created reports for the company's intrusion detection system. This included monitoring of employee internet usage and for the identification for network hacking attempts, virus and malware attacks. Resolved desktop virus removal based on intrusion detection system reports.
Documented security policies and automated security procedures for identify access management, including new user on-boarding and terminations. This allowed for increased accuracy in account setup and the ability to audit the user account access.
Created Zero-Touch Windows 7 deployment using Microsoft Deployment Toolkit utilizing MSI and MST files.
Resolved several software compatibility issues that allowed the completion of the upgrade to Windows 7 on 600 desktops.
Performed day to day VMware and Windows system administration. This allowed our current administrator, the time to work on other network design projects.
Created various automated scripted processes that moved excel files received by email, into a UNIX system. This replaced the previous manual order entry system and ran as a scheduled task allowed the process to run at night, so that work orders were ready the next day to be shipped.
Utilized SCCM reporting tools for software, and hardware inventory. This increased security by accounting for all hardware and software installations that previously had an unknown location.
Developed a touch-screen based time clock application, running in a Citrix environment that replaced the current unreliable time clock system in the factory's production environment.
Led project for VDI deployment, configuration of VMware ThinApp for application virtualization.
Software Support Analyst, 12/1997 to 4/2011
Farm Credit Services of Mid-America
Deployed and administered the Enterprise Symantec server. This achieved successful antivirus administration across 800 desktops.
Created and implemented process that automated the set up of users, and computers, including installing necessary applications, and setting up security in Active Directory. This created a time savings of 1.5 hours per set up, and increased reliability of user role based security.
Developed processes for software deployment, patch management, image builds OS hardening, and antivirus management using, scripted utilities, InstallShield, AdminStudio and SCCM. This eliminated previous manual processes and increased efficiency.
Computer Programmer, 10/1995 to 12/1997
Winston Manufacturing Co
Lead programmer that was responsible for the accounting, inventory, and payroll systems. Corrected and improved many on-going system problems. Performed system administrative tasks, including user account provisioning, and backups.
Education
Bachelor of Arts: Computer Science Concentration, 2011
Indiana Wesleyan University
Associate of Science: Computer Information Systems, 1994
Jefferson Community College
Professional Memberships
Information Systems Security Association (ISSA), VP Membership Services, 1/2014 to Present
Contact this candidate