ARMAND
NOURI
***********@*****.*** 310-***-**** Irvine, CA
PROFESSIONAL SUMMARY
Windows, Linux and AWS Cloud System Administrator and Cisco Network Tech
Infrastructure as Code and CI/CD pipeline administrator
Highly motivated and analytical IT System Administrator offering technical understanding, methodical problem solving and focused research
Experience in configuring, monitoring, upgrading and maintaining systems hardware, software and related infrastructure
Strong analytical skills; able to work with technicians from various IT disciplines to troubleshoot complex system-level issues
Resourceful System Administrator that is able to respond to a wide range of challenges with a focused and creative approach.
Optimizes work flow via automation and building tools to make IT operations and end-users and systems more streamlined and fool-proof SKILLS
Excellent problem-solving abilities
Planning and implementation
Windows Server (dns, dhcp, file, LDAP)
Linux Server (CentOS/Red Hat
Enterprise/Ubuntu Server)
Powershell and BASH toolmaking
AWS Cloud System Administration
Cisco IOS, Switching and Routing
Conceptual thinking
Excellent communication skills
System upgrades
Technical specifications
Network refresh
Customer focused
WORK HISTORY
System (middleware) Administrator/Jr. DevOps Engineer Kemper Insurance – Jacksonville, FL (remote)
01/2019 - Current
Configure and administer Jenkins CI/CD pipeline in development, testing and production environments, set up and troubleshoot Maven plugin and pom.xml issues
Set up and manage Jenkins triggers for automated builds
Use Jenkins master to push out recurring administrative jobs/projects for Jenkins slaves
Work with developers to analyze Jenkins logs to assess build failures and correct issues
Set up Chef environment to configure state of Linux servers, create cookbooks with Chef DSL and maintain Git source control via Stash repository, troubleshoot chef- client pull issues
Perform nightly Control-M agent upgrades on production servers, take snapshots in VMware VSphere 6.0 before agent upgrade
Configure SSH, via PKI, access for users on Red Hat Linux servers
Perform scheduled server (Windows and Linux) restarts, restart hanged Linux services and Tomcat (via WebSphere) services for Java development team in development and internal testing environment
System Administrator Linquest Corporation - Los Angeles, CA 04/2018 – 10/2018
Configure and support AWS web server resources for development team: IAM, EC2 instances, S3, ELB (Elastic Load Balancer), RDS (MySQL compatible), Route 53
(DNS)
Configure AWS security: Network Access Control Lists and EC2 security groups
(firewall) for principle of least privilege
Configure and maintain Linux boot and storage, logging, user and group permissions, networking and firewall (IPTables), network NFS share
Install and update Linux packages via repositories
Set up and support Red Hat Linux Server, Apache web server, http logging service
Write BASH scripts to automate Linux system tasks for increased efficiency and reduction of human error
Use VIM Linux text editor to manipulate files and write scripts
Use regular expressions to narrow down Linux text searches
Administer Office 365 license provisioning and Exchange mailboxes
Support remote users in Windows 10 environment with remote management tools
Train junior members of IT team regarding network security and troubleshooting of data circuits
Configure, tested and maintained network equipment
Perform Cisco switch and router upgrade for TrustSec compliance, whereby cables were tagged, replaced and re-patched, tested switches to make sure network was functional, cleaned up network closet
Recommended network security standards to management.
Via Logrhythm SIEM, ensure network, system and data availability and integrity through preventative maintenance and upgrades.
Resolve issues and escalated problems with knowledgeable support and quality service.
Diagnose and troubleshoot Windows processing problems and applied solutions to increase company efficiency.
Work with users to determine areas in need of improvement. System Administrator Episource, LLC - Gardena, CA 04/2017 - 04/2018
Support AWS IAM permissions for developer access to AWS resources and EC2 access to S3
Set up and maintained CentOS SFTP service for clients to transfer document scans
Administer email account set up, distribution list and groups via Gsuite.
Investigate Active Directory account lockouts using event viewer and Netwrix auditing tool.
Set up WDS/MDT infrastructure to accommodate Windows 10 deployment needs, using post-deployment Powershell scripts to create new local admin account, name computer, join domain and put into correct organizational unit.
Train second branch office system administrator on how to set up identical infrastructure.
Create Powershell tool to check to see if user name is in domain and if not, to then add new user to the domain and to put in appropriate organizational unit. Saved time and reduced GUI button hunting and user error
Configure and troubleshoot JIRA ticketing and project management system.
Build out Hyper-V host cluster using Failover Cluster Manager for local file server.
Perform patch management for workstations and servers via N-Central.
Work with HR to implement new ACL infrastructure, implemented AGDLAP NTFS permission scheme.
Work with Varonis NTFS auditing software to monitor NTFS share access and prepare reports for management, which gave visibility into storage usage.
Act as project lead for domain migration project where user accounts and profiles were seamlessly migrated over to new domain using vendor tools.
Develop PowerShell scripts and automation to obtain computer and user lists for above project and fixing server issues (e.g services not starting).
Configure and set up Aruba Wireless APs.
Configure Cisco Router DHCP service, configure IP helper address/relay agent on Cisco router for DHCP subnet traversal.
Recommend network security standards to management.
On Cisco equipment, restructure network infrastructure from flat network to department-based VLAN network for better performance and security (HIPIAA compliance).
Set up and configure Cisco AMP endpoint protection for more sophisticated anti- malware countermeasures. Conduct malware threat-hunting, behavioral analysis and file white and blacklisting.
Work with users to determine areas in need of improvement. Junior System Administrator Ducommun Incorporated - Carson, CA 08/2014 - 03/2017
Set up folder redirection so user data was backed up, set up and troubleshoot offline file sync issues.
Back up and troubleshoot legacy Windows NT and Windows 2000 CNC workstations.
Set up and configure WDS and MDT system so thin images are maintained and application, drivers and scripts are injected as needed, and so images are network- deployed.
Use Powershell remote sessions to make changes on remote computers.
Create small scripts via Powershell for administrative tasks.
Migrate domain controller from Server 2008 R2 to Server 2012 R2.
Decommission a DC and promoted new DC via Server 2012 R2.
Set up and configure Server 2012 R2.
Set up and configure DHCP and DNS services, set up failover for said services.
After backing up to two different storage mediums (tape and to NAS), perform monitoring and test-rebuild of RAID 10 array for file server on Dell R710 server.
Set up and configured Read-Only Domain-Controller and branch office in order to expand domain services while maintaining branch security.
Set up Unitrends system to backup mission critical CNC workstations, which greatly increased our legacy system redundancy.
Work with System Administrator to develop Group Policy Object scheme as per the needs of environment, pushed system-wide registry, configuration and .MSI packages via GPO to reduce manual configuration.
Maintain tape back-ups using grandfather-father-son method via Backup Exec 2015.
Work with Networking team to decommission old networking equipment.
Support a fleet of Dell laptops and desktop computers, work with Dell representatives for troubleshooting and fulfilment.
Support and troubleshoot Windows 7 and Windows 10 functionality and related issues, Office 2013 and Bitlocker.
Support ERP software and work with ERP developers to configure software and resolve issues.
Provision and troubleshoot Cisco IP phones via Cisco Call Manager. Desktop Support: Intratek, Inc. (Los Angeles County) - Los Angeles, CA 01/2013 - 06/2014
Support and maintain a fleet of desktops and laptops, troubleshooting software (OS, boot issues, etc.) and hardware (laptop screen replacement, mainboard swaps, etc.).
Engage end-users in a professional and helpful manner.
Provision, de-provision and migrate servers (domain controllers, file servers, patch servers (WSUS/N-Central).
Write and modify Powershell and Batch scripts to automate bulk operations, monitoring and repair broken components in server infrastructure Networking:.
Provision and manage Cisco switches and routers via Cisco IOS.
Understand and apply OSI model, subnetting and networking concepts to design and troubleshoot networks.
Create and test Ethernet cables, keystone jacks and perform cable management in MDF's patch panel and switches, Los Angeles County, ISD Field Services, Los Angeles Hall of Administration, 1/2013 - 6/2014, Desktop Support.
Create OS migration process script for other tier 1 and 2 technicians, upgraded users from Windows XP to 7 and ensured seamless application and files port-over to new OS.
Provide phone, email and in-person desktop and network support for LA County offices, which included 1000+ Windows 7 domain-connected computers.
Set up and supported WYSE thin-client devices and maintained connection to VDI back-end.
Support Office 2013 and business applications, working with ERP developers to resolve issues.
Set up Altiris imaging server and mass-deployed OS images to workstations via multicast, which greatly increased rate of image deployment over HDD cloning.
Use MMC Active Directory tools to create, modify and delete user and computer objects.
Use network utilities to troubleshoot workstation network issues and work with networking team to isolate network faults.
EDUCATION
CSU, Long Beach - Long Beach 2010
BA: Accounting
ACCOMPLISHMENTS
Took over a high-level project after the prior lead abruptly left the company and completed the project on time and within budget through dedicated oversight and better resource allocation.
Network Security
Updated network systems to support confidential company operations and eliminate hacking ability.
Assisted the senior developer regularly with various tasks, which resulted in learning Powershell scripting
My code examples from previous position:
https://github.com/synth45/ActiveDirectory-Tools
https://github.com/synth45/Windows-Logging-Tools