Post Job Free

Resume

Sign in

Database Security Architect ( Security GuardiuM)

Location:
Owings Mills, MD
Posted:
February 22, 2018

Contact this candidate

Resume:

DIDIAN TSONGWAIN V. MBA, PMP, ITIL, OCP, IBM Guardium

Tel: 240-***-**** ac4krn@r.postjobfree.com

Professional Summary

Over 15 years of IT experience with over 10 years as an and an Oracle Database Administrator and 2 years as IBM Guardium Administrator

Database Security Architect responsible for designing, architecting and implementing Guardium database infrastructure and monitoring solution.

Hands-on experience in installation and configuration of Guardium appliances, agents and creation of security policies for DAM, VA, CAS, FAM.

Coordinating the enterprise effort for database encryption using technologies such as TDE for data at rest and network encryption for data in motion

Coordination amongst different stakeholder groups within the enterprise necessary to implement the database security solutions ( Database group, Infrastructure) group, Unix, cyber security, network and various application owners

Hands on experience in database installation, administration, configuration, production support, upgrades, patches, performance tuning, backup and recovery, space management, database security, cloning, migration, shell scripting and documentation.

Experience in translating business requirements into conceptual, logical, and physical data models.

Experience in configuring Oracle network, RMAN, Recovery Catalog, and Performance Tuning of database by optimizing SQL and PL/SQL scripts and instance. Used statspack report, AWR report, ADDM advisors, autotrace and execution plan.

Excellent experience in installation, setup and configuration of Oracle 8i, 9i, 10g and 11g in HP-UX, Sun Solaris, AIX and Linux environments.

Proficient at performing major Database Release Upgrade (manually as well as using DBUA) along with applying various PSU patches using OPatch for 10g 11g databases.

Proficient with application of Oracle Quarterly Security Patches ( SPU’s)

Adept at routine Database Administration tasks including automated installation, creation and replication of databases, management of tablespaces, logs, grants, roles, users, indices.

Working experience in database cloning, database backup, recovery procedures and security.

Experience in application Support, SQL Loader, Data pump, Data Guard, Fine Grain Auditing (FGA), performing Flashback, transportable tablespaces.

Experience in designing and configuring high-availability systems using DATAGUARD with physical standby. Effectively used DATAGUARD BROKER utility.

Expertise in setting up Data Guard Fail-Over Switch-Over Read-Only scenarios.

Experience in the management and implementation of database models, data flow diagrams, database schemas, database scripts, to support a robust data management infrastructure.

Qualified at writing SHELL Scripts and using CRONTAB for scheduling jobs.

Adept at installation of OEM Database Control, OEM grid control and Deploying Agents

In-depth knowledge and understanding of Oracle Database features such as RMAN for backup and recovery, Materialized Views, Export/Import, Data Pump and Data Guard. Working knowledge of Auditing and Database Security.

Experienced in Designing, Installing, Configuring and Maintaining Real Application Cluster (RAC) using raw devices, OCFS, Automatic Storage Management (ASM) and SRVCTL utility.

Installation, configuration and management of Tripwire for servers on database servers and application servers ( Linux, aix and solaris)

Technical Skills

Skill

Years Used

IBM Guardium

6 months

Oracle production and application DBA Experience

8 Years

OCP certification

11 years

Oracle 11gR2 RAC Database Administration in or Linux environment

2 Years

Performance, tuning, and troubleshooting database

6 Years

RMAN backup and recovery

5 Years

Experience using ASM

3 Years

OEM Grid control

4 Years

Flashback Technology

3 Years

Oracle Change Management Pack Experience

2 Years

Data Guard (High Availability)

3Years

Apache HTTP server installation and configuration

1 year

Tripwire installation and configuration

2 years

Splunk

2 years

Databases

Oracle 8i, 9i, 10g, 11g, 12c

Database Tools

Oracle (Oracle Enterprise Manager, SQL*Plus, SQL Loader, DBA Configuration Assistant) Toad, OEM Grid, RMAN, SQL*Loader, Exp/Imp/Data Pump, Log miner, Statspack/AWR, Top, DBCA, DBUA, ADDM, Remedy, Citrix, PVCS version manager.

Operating Systems

UNIX (Solaris 8/9/10, AIX, HP-UX), LINUX

Hardware

Sun Fire 15K, Sun 6320 Storage, Sun Enterprise Servers 890/880/420/450, Sun StorEdge 6320, Hitachi, EMC, Dell

Servers Red Hat Linux 5.X

Tuning Tools

TKPROF, EXPLAIN PLAN,STATSPACK,AWR/ADDM/ASH

EDUCATIONAL QUALIFICATIONS:

MBA (FINANCE), Johns Hopkins Carey School of Business, Baltimore, MD, 2007

Mphil (Environmental Management), Cambridge University, United Kingdom, 1999

Bsc (Resources Management), University of Benin, Nigeria 1994

CERTIFICATION:

Oracle Certified Expert, Oracle real Application Clusters 11g and Grid Infrastructure Administrator

PMP Certified Project Management Professional

IBM Certified Administrator - Security Guardium V10

ITIL V3 Foundation Certification

Oracle Certified Professional (OCP) Oracle 11g Database Administrator

Oracle Certified Professional (OCP) Oracle 10g Database Administrator

Oracle Certified Professional (OCP) Oracle 8i Database Administrator

PROFESSIONAL EXPERIENCE:

CareFirst, Owings Mills, MD: February 2016 to Present

Database Security Architect (IBM Guardium Architect):

Architect infrastructure design for the deployment of Guardium Database monitoring solution for the entire enterprise ( 2500 databases on 400 servers).

Build Guardium appliances ( Central Manager, Aggregators, collectors)

Coordinate with other teams to implement encryption solutions enterprise-wide on all databases. This involves implementation of encryption of data at rest ( TDE) and data in motion (network encryption) across various database management systems such as Oracle, EXADATA MS SQL server,

Deploy and setup configuration for IBM Guardium to ensure collectors, aggregators, load balancers, agents (S-TAP, Guardium Installation Manager (GIM), and ATAP) and change Audit system (CAS) are properly installed.

Develop and ensure Database Activity Monitoring policies/rules are setup in accordance with HIPPA regulation.

Run, test and validate Guardium configuration settings and fully document technical and procedural requirements

Develop new approaches to ensure compliance with standards and identification of security anomalies through automation and implementation of enterprise database monitoring capability.

Implement advanced blocking and protection

Metropol-Tech Consulting: January 2016 to present (Part-time)

Director of Studies:

Training program design:

oDesigned the curriculum for the Oracle Database Administration, Linux RHEL systems administration, Oracle High availability and the IBM Guardium database security training programs.

Sourced and purchased all data center equipment and worked

Recruited staff to teach all approved training programs

Directed and collaborated with the System administrator to build entire server infrastructure to support all students. We currently have capacity to support over 200 students simultaneously.

Oracle DBA and Oracle High Availability instructor

United States Environmental Protection Agency (USEPA): June 2015 – Feb 2016)

Lead Oracle DBA, OASIS APPLICATIONS SUPPORT:

Supervise and Mentor a Team of two Oracle DBA’s

Designed High availability solution involving creation of standby databases and configuring Data-guard Broker. Configured fast start failover.

Assigned work to Team members based on the project schedule and urgency of databases fixes.

Upgraded 10 databases from oracle 11.2.0.4 to 12.1.0.2 in a windows server 2008R2 environment.

Develop step by step procedures for use by junior team members for implementation of various database operations.

Installed Enterprise Manager Cloud control and deployed agents to monitor 20 databases, servers and applications.

Performed Backups and Recoveries of database objects (Tables, tablespaces, instances etc.) Automated Rman backups using windows batch file and windows scheduler.

Created RMAN catalog and registered all databases into it

Created and maintain Oracle databases on database servers including the following tasks: Implementation/Development, Configuration/Optimization, Unit Testing and integration

Applied Oracle Critical Patches Updates (CPUs)

Monitored disk space usage and growth, tuning the database with the assistance of the ADDM report.

Perform database capacity planning and growth projections and Perform database security audit and maintenance

Created, updated and maintain Oracle objects (Packages, procedures, functions, triggers etc.)

Design, create, and maintain materialize views

Perform database upgraded, updates and changes as needed

Reversed Engineered Database Schemas to better understand relations and normalize database tables.

National Institute for Standards and Technology (NIST) Feb 2013 – June 2015

Role: Senior Oracle Database Administrator

Installed Oracle 12.1.0.2 on Linux and Solaris dedicated boxes and currently testing the upgrade of Oracle 11.2.0.4 to 12.1.0.2 databases including the creation of container and pluggable databases.

Installs, configures and manages Tripwire for servers for all our database and application servers (Aix, Linux and Solaris).

Installed 11.2.0.4 on al servers ( 30) and upgraded databases from 11.2.0.3 to 11.2.0.4

Working with databases in virtualized environments (VMware) running Linux 6.5.

In my test environment, I Created virtual machines (oracle virtual Box) and installed Linux OS on these boxes.

DBA supporting various production databases including data warehouse ranging in size from 100GB to 3TB (in Preprod, Dev, Training, Post Prod and Production environments) in various platforms ranging from AIX (VM’s), Solaris, Linux.

Table refreshes and schema refreshes using Datapump expdp and impdp.

Database refreshes using expdp, impdp, RMAN Duplicate and cloning.

Experienced in cloning the databases using HOT and COLD backups.

Used RMAN Duplicate and HOT/COLD backups to migrate the data from 11.1.0.7 to 11.2.0.3.

Created a stand by database by using RMAN Duplicate in order to reduce the down time for the PROD database during the migration process.

Planning Backup/Restoration Strategy, Planning and scheduling Backups, taking Logical Backups (with Export/Import Data pump utilities).

Creating & Managing Database Structures, Storage Allocations, Table/Index segments, Rollback segments, Constraints, Database Access, Roles and Privileges.

Performed SQL and PL/SQL tuning, oracle contention and monitored production database using automatic workload repository (AWR), automatic database diagnostic monitor (ADDM) and Active Session History (ASH).

Worked closely with the Oracle developers for the better performance in Applications in writing the Packages, Triggers and Indexes on the tables.

Used Secure SCP & FTP extensively for the File transfers from machines to remote server.

Cloning & duplicating databases using scripts as well as RMAN for test and developments instances.

SQL tuning and Database performance tuning has been done based on reports generated by SQL Trace, TKPROF, STATSPACK, Explain Plan, AWR, ADDM and monitor the database performance on daily basis.

Responsible for setup and implementation of 2 Node RAC on Linux in 10g and 11g R2.

Implemented Dataguard, creating both logical and physical standby databases in 10g and 11g RAC environment for production database.

Work closely with Systems Analysts, Systems Engineers/Admins & Application Developers through the SDLC from Development to Production, via Tech-Test in Needs Assessment, Requirements Gathering (Server hardware/OS specifications for Oracle Installs), Database Designing (Physical & Logical) and Implementation, database user creation and database access both at role & table levels, as well as final Project Performance Assessment/Evaluation.

Create database Objects, Tablespaces, Schemas as needed.

Schema migrations from Development to Production via Tech Test environments.

Database refresh from Production to Tech Test as needed.

Configured and deployed Tripwire and splunk on all servers as security measure to monitor changes to critical and other important database related files.

Creating TSM backup scripts and scheduling these on the crontab of both application and database servers

Installation and configuration of Apache HTTP servers and Progress Travel Manager application

Implementing Apache Security configuration to address vulnerabilities from tenable scan and Apache secure config scans

Configuring apache to control the IP addresses which can access applications ( configure httpd.conf file)

Supports the following applications Travel Manager (TM), Commerce Business Systems Core Finance (CBSCFS), Commerce Business System Data Warehouse ( CBSDW)

Prince George’s County Government, Maryland Jan 2008 – Feb 2013

Role: Oracle Database Administrator

Managed and supported multiple 9i. Oracle 10g, 11g, (15+ Oracle) databases.

Created and cloned Oracle Databases on ASM. Performed database cloning and re-location activities.

Experimented with Amazon Web services ( AWS) EC2 administration and management and the creation of databases on EC2 using EBS and s3 storage.

Maintained data integrity and created users, managed profiles, resources and password security.

Upgraded Databases from lower version to higher version.

Tuned SQL statement against database and its objects.

Installed and tested new versions of Oracle database, applications, and patches.

Performed and validated backups, performed restores and recoveries, refreshed databases and applications.

Monitored and optimized performance, resources availability, and operation of all systems using tools such as OEM

Documented and complied with company policies and standard operating procedures.

Installed 3 nodes test RAC Clusters on virtualized environments with various Linux variant OS ( Oracle Enterprise Linux, Redhat)

Successfully migrated from Oracle 10g/11g single instance databases to 11gR2 RAC (Real Application) environments.

Implemented Logical and Physical Standby Databases for RAC cluster on Sun Solaris platform using Data Guard feature of Oracle 11g R2.

Successfully performed data replication using Materialized views and Oracle Streams in Oracle 11gR2.

Created Users, Groups, Roles, Profiles and assigned the users to groups and granted necessary privileges as required.

Supported off-hour on call support for database related issues.

Constantly monitor the performance (V$ dynamic performance views at peak load) of the Databases and viewing Alert log files & Trace files.

Cloned/Migrated databases using RMAN and traditional Datapump export/import utilities in Oracle 11gR2.

Implemented recovery strategies whenever required and successfully recovered databases in case database crash, media/disk failures by using RMAN.

Scheduled Physical backups (hot & cold) in CRON tab using RMAN utility and monitored the scheduled jobs.

Executed scripts to check the status of databases such as growing table sizes, extent allocation, free space, used space, fragmentation etc.

Performed space management, capacity planning, disaster recovery and overall maintenance and monitoring of the databases using OEM ( oracle enterprise manager)

Used SQL TRACE, TKPROF, EXPLAIN PLAN utilities for optimizing and tuning SQL queries.

Maintained the data integrity and security using integrity constraints and database triggers.

Concentra Preferred Systems, Rockville, MD Jan 2004 – Jan 2006

Role: Oracle Junior DBA

Maintained production databases including Refresh into various environments.

Upgrade and configure multiple monitoring tools (Heroix Longitude and Quest Performance Analysis)

Taking Backups on scheduled time and Monitoring Scheduled Backups.

Creating and dropping of users, granting and revoking rights as and when required.

Checking of Oracle files for abnormal behaviors.

Diagnose and Troubleshoot Database Problems and failures

Involved in the Design (Logical & Physical) of Databases

Preparing Backup and Recovery Plan.

Involved in the installation of Oracle 9i on Solaris and linux platform.

Creation and maintenance of database.

Monitoring of database for growth and performance, defined backup procedures using daily hot backups and weekly cold backup.

Created Databases and all database objects. Database Designing, Designing Tablespaces and Rollback Segments. Management of table space growth, monitoring data files additions, extent growth.

Constantly monitor the performance of the Databases and viewing Alert log files & Trace files.

Using TKPROF, EXPLAIN PLAN for the Better performance.

Ensuring proper online and offline backup. Periodical reading and checking of backups taken.



Contact this candidate