Linux System Administrator

Muhammad Hasan Bin Jamal Siddiqui

*******@*******.***, *******@*****.***

Public Sector Govt. Organization Manager IT

(Aug 2011 to Current) Reporting to Director IT

Responsibilities:

. Responsible for managing heterogeneous environment that include Linux,

Microsoft, Cisco, Juniper and Avaya platforms.

. Acting lead for cyber security department.

. Responsible for performing weekly vulnerability and security scan for

whole network to make sure no sensitive data can be leaked out.

. Planning, proposal development and team management for specific

projects.

. Process improvement.

. Project documentation for ISO 9001audit.

PixSense Inc. Lead System Administrator (Feb 2008 to July 2011)

Reporting to VP - Deployment Engineering

Responsibilities:

. Responsible for installing, updating and patching Linux & Windows

servers for Development, QA, Staging and Production (Live).

. Install and update latest releases, patches and hot fixes of PixSense

web application on Development, QA, Staging and Production

environments

. Provide complete hosting solution to client.

. Troubleshooting of application running on Production, QA and Staging

servers.

. Provide redundant and fault tolerant solution for running PixSense web

application, using HA and failover techniques

. Maintenance of Linux & Windows based servers in US datacenter (ACCEL

NETWORKS, LLC and Hurricane Electric) to ensure 24x7 operations and

99% uptime.

. Management, monitoring, backup and complete reporting of data center

servers.

. Weekly Vulnerability testing of all servers available in PixSense and

client's datacenter.

. Communication with client about technical requirements w.r.t. network

infrastructure and connectivity.

. Fulfilling security requirements for communication between client's

SMSCs and PixSense data center by tightening up security with

firewalls available on Windows, Linux and Cisco platform.

. Planning and implementation of IT policies for Pakistan office as per

agreement with management.

. Design, install and update network infrastructure.

. Management and task scheduling of network and system support

engineering team in Pakistan office to complete tasks in timely

manner.

. Efficiently providing estimations for technical tasks.

. Coordination and communication with PixSense team in US office.

. Conduct Technical interviews for hiring new resources in System /

Network department.

. Budget planning for recurring and monthly expenses like bandwidth

charges and accessories purchasing.

. Communication with all vendors for accessories, UPS and internet

bandwidth.

Projects & Details

Distributed Storage & No SQL databases

* Setup Glusterfs, (distributed filesystem capable of scaling to several

petabytes) by using storage available on different nodes for

preserving logs and backups

* Deployed Tahoe-LAFS, cloud storage system having more advanced

features than gluster specially encryption at storage level.

* Installed Cassandra distributed db for saving metadata and result sets

from DB.

* Deployed Redis in master/slave setup.

Gangwars Social game (http://gmwiz.net)

Integration of gangwars game with Excelcomindo Pratama Telecom, 3 Indonesia

Telecom, Globe telecom and Smartfren Telecom

* Deployed Windows Server 2008 R2 Hype-V for setting up virtualization

on Xeon servers

* Installed windows server 2008 for setting up virtual machines

* Deployed active directory on Windows Server 2008 for improved

administration of VMs

* Deployed ASP .net application on IIS 7

* Configured Web Deploy and used power shell for automated deployment

and synchronization of application on all IIS servers.

* Provided load balancing for web application by using Network Load

balancer (NLB)

* Integrated gangwars application with PixSense native PSP platform

* Deployed MySQL server 5.1 and configured master/slave replication for

improved scalability and availability.

* Performance enhancement by setting up database connection pooling on

IIS.

* Scheduled database and application server daily backup

* Configures WSUS server for getting centralized updates.

Excelcomindo Pratama Telecom (http://funspot.co.id)

Funspot is a social networking website, providing service to Indonesian

Telecom operator popularly known as XL which is developed on LAMP serving 4

million users. Having a lead role from deployment department on this

product.

* Created site-to-site VPN tunnel between PixSense data center and XL

SMSC using Cisco ASA 5505.

* Deployed PHP based web application using Apache, PHP and MySQL.

* Deployed PF firewall on openBSD and tighten security as per

requirement from client.

* Provided redundancy for web servers, database, caching servers and

media servers.

* Used HAproxy for load balancing and failover solution for Web, and

caching servers.

* Applied ACLs in HAproxy to restrict access based on client's WAP &

GPRS IP pool

* Deployed layered caching approach with memcache and varnish on

different levels.

* Served media through fast and 'resource cost effective' thttpd server.

* Installed ffmpeg and mencoder for media conversion into different

formats.

* Fast application deployment using Capistrano.

* Deployed MySQL in master-slave replication mode.

* Scheduling of per hour replication checking with mk-table-checksum

utility.

* Scheduled database backup, configuration files backup, logs rotation

and backup, user's media backup etc.

* Written DB queries for reports generation from database and scheduling

of scripts execution for reports generation every day.

* Installed monit and munin for monitoring of individual server.

* Vulnerability checking of Web servers with Nessus and Nikto.

* Intrusion detection with AIDE and git.

Globe Telecom (http://www.pixllink.com.ph)

Viettel Telecom (http://www.pixshare.vn)

Maxis Telecom (http://chantique.net )

* Setup QA, Staging and Production environment.

* Installed LAMP environment for application deployment

* Deployed latest PixSense PSP code and patches on all servers.

* Mounted SAN storage on storage servers to store all content.

* Integration and troubleshooting with SMSC through SMPP protocol.

* Applied ACLs in HAproxy to restrict access based on client's WAP &

GPRS IP pool

Telenor Norway (http://tnno.pixsense.com) (http://djno.pixsense.com)

* Implemented Shorewal firewall on FC8 along with Pix Firewall in front

of data center

* Deployed PixSense JAVA based Web application supporting more than

100,000 users using JBoss application server, apache web server and

MySQL server with redundant and virtualized environment.

* Provided load balancing for a cluster of apache servers using IPVS

with health checking using keepalived and md5sum technique.

* Fine tuned JBoss for performance enhancement and security

* Apache server deployment with virtual hosting along with mod_deflate,

mod_rewrite and other different modules.

* Used mod_jk Apache tomcat connector for load balancing requests

between tomcat workers.

* Fine tuned apache for serving request at best possible rate.

* Installed memcache for performance improvement.

* Deployed MySQL server in master-master replication mode.

* Deployed MogileFS providing cost effective storage with automated

replication.

* Installation of FFmpeg for conversion of mp4, 3gp and 3g2 videos into

flv and providing support of water marking on videos.

* Installation of ImageMagick and Jmagick for supporting image

transformation in application.

* Installation of monit, munin, Nagios and MRTG for monitoring.

* Installed awstats for web site statistics collection.

PixSense Inc. System/Network Administrator (Apr 2006- Jan 2008)

Reporting to Chief Operating Officer

Responsibilities:

Linux Platform (Jul06 onwards)

* Deployed Shorewall firewall with LAN, WAN and DMZ zones and Squid

Proxy server for replacing ISA server 2000.

* Exposed all internal development web servers through DMZ.

* Implemented upload, download, bandwith and browsing access rights for

management and employees groups through Squid caching server.

* Implemented DHCP server for automatic address assignment binded with

MAC address.

* Deployed BIND DNS for name serving of internal and external network.

* Deployed OpenVPN for secure connectivity to home users.

* Installed CUPS and SMB for printing and sharing.

* Installed SVN.

* Installed postfix for mailing 'internal server's logs'.

* Installed AIDE, Tiger, logwatch and other tools for auditing and

intrusion detection.

Windows Platform (Jan 06-June06)

. Designing, planning, implementation and maintenance of network

infrastructure

. Terminate WAN links at PixSense end including Radio and DSL links

. To provide secure internet connectivity to users and in-house

development servers with ISA server

. Application of company internet usage policies on ISA server.

(Bandwidth, downloading, blocked websites, blocked messengers etc.)

. To administer user accounts on windows server 2003 domain and active

directory.

. Assist technical/non technical staff providing support in resolving

network related problems and software support

. Provision of virus free network with centralized Mcafee and node32

server and client program installation on all users' PCs

. Tracking of IT assets including manageable and non-manageable

switches, routers, wireless access points, accessories, desktops,

laptops, printers and UPS

. Deployed PixSense internal Domain with Active Directory and DNS.

. Installed PixSense wired and wireless network infrastructure from

scratch with firewalled connectivity of 80+ users over LAN and

internet.

. Configuration of Cisco 2600 Router, Cisco PIX 501l and Linksys

wireless access point.

. Coordination and communication with vendors and ISPs.

Deployment and management of following applications on Linux & Windows

platform

* Flyspray,CVS, OTRS, Test Director, Test Quest, VSS

Tools & Technologies

Worked on following Tools, Technologies and Operating Systems

Windows Server 2008 R2, 2003, 7, ISA server 200, 2004

XP

Fedora 5, 6, 8,10,11,12,13,14 Iptables, Shorewall, pf

CentOS 5, RedHat 9, OpenBSD 4, BASH scripting

Open Indiana

MySQL 5, MariaDB, Mongodb, MS SQL BIND split DNS

2005,

JBoss 4.2 DHCP, SAMBA, NFS, thttpd, ntp,

vsftpd

Apache 2.2, SOLR full text search OpenSSH, OpenVPN

Ffmpeg, Mencoder Munin, Monit, MRTG, Nagios

Memcache, Cassandra, Redis, Kernel recompilation &

Varnish configuration

HAproxy, Squid as forward and Software RAID. LVM

reverse

CVS, SVN ext3, jfs, mogilefs, glusterfs

Postfix, Courier, Sasl, Webalizer, Awstat

SpamAssassin

Worked on following hardware platforms

SUN Fire X4100, X4200, V40z Cisco ASA 5505, PIX 501

Supermicro X7DBT with Xeon Cisco 1841

processor

Dell PowerEdge R710 Linksys WRT54G

Academic Qualification

o MS Computer Network & Comm. Hamdard University

o B.S Computer Engineering (2005) Sir Syed University of

Engineering & Technology

o IELTS Academic Certified 7.0 Band Candidate #: 000288

Trainings

o Windows Server 2003 Active directory

o Linux Red Hat Servers & System administration training

o CCNA (640-801) training

o Pix Firewall training

o ISA Server 2000 training

o A+ training

o Exchange Server 2007 training

Awards & Achievements

o Hafiz-e-Quraan

o Received Employee of the month (Must Clone) Award at PixSense Inc. for

outstanding services.

o Trained RHCE students at CTTC Institute

References

References shall be furnished on requirement.[pic]

Contact this candidate