Active Directory Management

RESUME

Gene Dockal, MCSA, MCSE

*** ******* ****

Dickinson, Texas 77539

Work: 409-***-****

Cell: 409-***-****

E-mail: *******@*****.***

LinkedIn URL: www.linkedin.com/in/genedockal

EMPLOYMENT

Mar. 2014 - Present - Business LAN Systems Administrator

Marathon Petroleum Corporation - Support of Marathon Petroleum's Galveston

Bay Refinery Business LAN. Responsible for supporting corporate network

presence spread across the continental US. Primary duties include

configuration management, project development/execution, leadership and

overall infrastructure administration. Several enterprise technologies are

supported including:

. Project Management - Take on new projects and drive them through to

completion based on established budgets and timelines

. Active Directory - Administration of user & computer objects, group

policy, OU administration. Participation in distributed Active

Directory environment spanning multiple states across nation.

. Windows Server Administration (Server 2000/Server 2003/Server

2008[R2]/2012) - OS Installations/upgrades; network configuration; OS

patching; system monitoring

. VMWare ESX/ESXi - Installation/configuration of virtual

machines/appliances; data store management and expansion, I/O control;

vMotion (VM and Storage); resource monitoring/management; virtual

networking; vSphere; PowerCLI scripts; use of OVA templates.

. VMWare vCenter Configuration Manager - Compliance, reporting,

patching, administration

. SAN and CIFS storage/DFS - LUN Configurations (MetaLuns/Expansion);

fiber switch configuration/zoning; Unisphere,

RecoverPoint/Replication, NetApp Filer, aggregates, quotas. EMC VNX

and VNX2 storage platforms. CIFS file share permissions. DFS

namespace management; folder redirection

. Symantec NetBackup - Media servers; backup policies; volume pools;

tape rotation; offsite tape storage; NDMP backups

. Citrix - Xenapp Presentation Server - Farm consists of 9 servers

including 32-bit and 64-bit systems; Application publication,

licensing, installation/configuration.

. HP Blades - iLO administration, redundancy, network connectivity,

virtual connection manager.

. System Center Configuration Manager (SCCM) 2007 - Collections;

packages; advertisements; software deployment

. ActiveBatch - Enterprise task scheduling; job

creation/troubleshooting, scheduling, service accounts

. Quest Change Auditor for Active Directory - Search creation/publishing

to SQL Server Reporting Services, alert configurations

. Quest Recovery Manager for Active Directory - Collections, backups,

restores of AD objects including groups, users, and computers.

. Remedy - Address tickets assigned to Galveston Bay Refinery IT Support

queue.

. Print Server Management - Establish new print queues for users who

have undergone Windows 7 migration

. Enterprise Resource Password Manager (ERPM) - Managed passwords,

unmanaged passwords. Ensuring adherence to corporate password change

policy.

Accomplishments:

Data center relocation. Acted as primary IT point of contact spear

heading project to relocate data center from existing location into new

building. Tasks for this effort included: scheduling, budget management,

resource management, delegation/coordination of efforts and holding weekly

status update meetings.

Current Project:

Acting as a project lead to take internal IP TV signal and distribute

it via unicast/multicast to various workstations across refinery leveraging

Microsoft Media Services.

Jan. 2007-March 2014 - Sr. Systems Engineer

Wyle Life Sciences - Support NASA's Space Medicine network infrastructure

and development team. Responsibilities include environment

architecture/build-out, .Net application deployments, upgrades and

troubleshooting and project management. Skills required of this position

include project management, budget oversight, professionalism, effective

communication and mentoring. Responsibilities & technologies include but

are not limited to:

. Windows Server Administration (Server 2000/Server 2003/Server

2008[R2]/2012) - OS Installations/upgrades; network configuration; OS

patching; system monitoring

. Active Directory Administration - Migrations; FSMO roles; OU

administration; group policy; user security

. VMWARE ESX/ESXi - Installation/configuration of virtual machines; data

store management and expansion, I/O control; vMotion (VM and Storage);

resource monitoring/management; virtual networking; vSphere; PowerCLI

scripts

. SAN (EMC/NetApp) - LUN Configurations (MetaLuns/Expansion); fiber

switch configuration/zoning; Unisphere, RecoverPoint/Replication,

NetApp Filer, aggregates, quotas.

. Check Point/Cisco Firewalls - Management/monitoring; encryption; point-

to-point tunnels; rule creation/modifications/updates; logging; NAT's

(static/hide); IPSO installation, package management/installation,

clustering, automated (shell script) backups and firewall management

. Juniper SSL VPN - User realms; network connect policies; LDAP

authentication; split-tunneling; internal/external port configurations

. HP/Cisco switch configuration - VLANs; trunk ports

. RSA Secure ID Appliance Management - Token assignment; PIN reset;

Active Directory Authentication; User management

. System Hardening - Use of CIS benchmarks for hardening of Microsoft-

based systems; Leverage group policy and security templates to ensure

compliance

. Microsoft Office SharePoint Server (MOSS) 2007/2010 - Farms, central

administration; installation/configuration; shared service providers;

applications; search; database backup/restores

. Quarterly vulnerability scanning - Use of McAfee's Vulnerability

Manager for performing environment vulnerability scanning; credential

sets; vuln filters; asset discovery; ticketing; template creation;

scan reports generated and provided to JSC IT Security; working to

establish virtual appliance that will have visibility into all

segments of network for more efficient scanning

. .Net & C# - Assist development team with minor coding and

troubleshooting

. SQL Server 2005/SQL 2008/Oracle 10gR2 - Database creation; security;

backup/restores; log management; maintenance plans; write small

queries/scripts; typical DBA responsibilities

. Biztalk Server 2006 - Installation/configuration; interface management

. Clustering (Typical/Network Load Balanced) - Shared storage; quorum;

fail-over; virtual and physical clustering, network configuration,

heartbeat

. Symantec NetBackup - Media servers; backup policies; volume pools;

tape rotation; offsite tape storage

. Microsoft Terminal Services - Gateway configuration; farm

configuration; session broker; network load balanced clustering;

remote application publishing; profile management.

. F5 Big IP - Load balancing; iRules; Self-Ip addresses, Virtual IP

addresses

. Centricity EMR - GE Centricity electronic medical records Oracle

database and application administration and upgrades. EMR

virtualization, backup and restoration.

. Heartrak/Benson - Heartrak implementation and use with Benson CCA-Mini

audiology hardware and associated software.

. Scripting - vbscript, batch file creation, etc. as needed to automate

administrative tasks.

. Encryption - Whole disk encryption using Symantec's PGP; Email

encryption using Entrust; Web server certificates IIS.

. Antiviral Solutions - Familiar with Symantec Endpoint Protection as

well as Trend Micro ServerProtect.

. Systems monitoring - Familiar with SNMP and system and application

monitoring using Solar Winds and Bel Manage.

Major accomplishments in this role:

. Implementation of first-ever terminal server solution that

allows secure access to NASA's electronic medical records

system from virtually any global location

. Upgrade of storage area network (HP MSA1000) to enterprise

class system (EMC Clariion CX4-120).

. Implementation of F5 load balancer for routing traffic

between SharePoint 2007 and SharePoint 2010 for migration

efforts.

. Upgrade of Centricity EMR software from 9.2 to 9.5 with

virtually no vendor assistance. Since no onsite consultant

was required, this was a significant cost savings to

Wyle/NASA.

2000-2007- Systems Administrator III/MCSE-Server 2003

Boeing Aerospace Corp./Cimarron- Systems Maintenance and Operations

Division

Lead Microsoft Systems Administrator supporting all flavors of Microsoft

operating systems. Responsible for upgrading and replacing obsolete

technologies in a world-class NASA facility. Scope of position is

expansive and includes departmental direction, installation, engineering,

support, training and management for:

Microsoft Server Systems

Baseline Configuration Management

Application Systems

Web/internet Design and Operations

PC Desktop Systems

Database Administration

Successfully spearheaded the implementation of facility's first Windows NT

4.0 domain. This domain was then migrated to a Windows Server 2003 Active

Directory Environment. All desktop systems were upgraded from Windows NT

4.0 to Windows XP Pro via unattended upgrades. Attained 99% uptime after

introduction of new Server 2003 Windows environment. Moved away from using

WINS infrastructure to a purely DNS environment.

Active Directory - Configure all aspects of Active Directory including

OU's, group policy and respective FSMO roles fore the various servers.

User Administration - Management of user accounts.

Project Server - Installation/configuration of Project Enterprise Server

system for enterprise level project-based scheduling and management.

Systems Hardening/Security - Using Secure Element's C5 Compliance Platform,

automated policies for system hardening and patch deployment for

Windows-based systems.

Configured Active Directory infrastructure to utilize RSA's Secure ID for

2-factor authentication for all domain clients.

Expanded personal responsibilities to include Solaris/Linux, network and

database administration.

Currently working with the following technologies: LDAP, Active Directory,

TCP/IP, Checkpoint Firewalls, Terminal Services, Veritas Net Backup, DNS,

WINS, RSA Secure ID Clients and Servers, NIS, NFS and all flavors of IIS.

Other responsibilities include but are not limited to:

Database Administration/Development - Accountable for all facets of SQL

Server 7.0, 2000 and 2005 as well as FileMaker Pro database administration.

Developed inventory tracking database using Microsoft Access.

Web/SharePoint Administration - Development/Administration of websites

utilizing .Net applications. Familiar with application pools, security and

various forms of authentication. Installation, administration and

configuration of SharePoint Web Portal server.

Enterprise Antiviral Server (Symantec) - Push antiviral software

application as well as updates to clients from central antiviral server.

Established central quarantine for infected files. These infected files

would be removed from local workstation and relocated to central quarantine

on the Symantec Antiviral Server.

Maintain Perl and Java displays for data recovery room for the purpose of

receiving real-time data from the International Space Station and Space

Shuttle.

Printers - Configuration/Administration of TCP/IP printers for

Unix/Windows-based printing.

Imaging (Symantec Ghost) - Use of imaging software to maintain baseline

configuration.

Security - All facets of security including setup of RSA Secure ID

servers/clients, antiviral updates, security patches and service packs.

Group Policy - Use of group policy to establish locked down configurations

to prevent variations in the PC environment.

Login Script Administration - Configuration of login script processing tool

to facilitate policies, security and patch management

Budget Management - Spec out necessary hardware within budget constraints

Windows Internet Naming Service (WINS) - Setup/administration of WINS

server for NetBIOS name resolution for down-level windows clients.

User Administration - Manage user accounts on Primary Domain Controller as

well as local workstations.

Web administrator - Development/Administration of the Maintenance and

Operations website. Responsible for security, updates and access.

1997-2000- Microsoft Certified Systems Engineer (MCSE)/Network Support

Specialist III

University of Texas Medical Branch (UTMB), Department of Internal Medicine.

Responsibilities: Network/Web administrator for ~450 users in mixed

Windows NT 4.0 server environment. Responsible for all server maintenance

and administration including directory rights/security, user maintenance

and backup/restoration. Also responsible for supervision of divisional

contacts who act as first level of support. Accountable for

setup/installation of all printers. Currently working with Internet

Information Server 4.0/5.0 (IIS 4.0/5.0) and protocols such as IPX/SPX,

TCPIP, WINS and DNS.

Troubleshoot and configure workstations (Dos/Windows, Windows 9X, Windows

NT and Windows 2000), network connectivity, e-mail, software, printers and

any additional hardware. I am fully qualified in all Microsoft Office

applications including Outlook.

Design, develop and administer required Microsoft Access Databases.

Developed multiple databases for departmental use. Thorough understanding

of MS Access workgroup administrator/security. Began converting all

Microsoft Access databases into one master client/server environment using

Microsoft SQL Server.

Design, develop and maintain departmental and private industry web pages.

1995-1997- Computer Users Support Specialist I

University of Texas Medical Branch (UTMB), Department of Surgery

Responsibilities: Maintenance of all user accounts on Novell 3.1x server,

directory rights/security. All facets of desktop support including

software installation, configuration and troubleshooting. All hardware and

printer installation/troubleshooting.

1993-1995- Computer Users Support Specialist Asst./Training Coordinator

University of Texas Medical Branch (UTMB), Department of Surgery

Support of day-to-day desktop operations with guidance from system

administrator. Install software and assist with any desktop trouble call.

Training Coordinator

Responsible for the scheduling and training of over 150 users in

independent video sessions. Maintain steady flow of users through

designated training area and accurate records of each user's training.

Answer questions not resolved by video instruction. Design, create and

present formal multimedia presentations in classroom-style teaching

environment.

EDUCATION

University of Houston: BS Computer Information Systems Degree, 2012

Alvin Community College: Associate Degree, Computer Sciences, 1990.

ADDITIONAL EDUCATION/SKILLS/CERTIFICATIONS

Title Date

Achieved

Microsoft Certified Systems Engineer - Server 2003 March 2008

Brain Bench Certified - MS Server 2000 Administrator June 2,

2004

Brain Bench Masters Certification - Windows 2000 Computing July 5,

Fundamentals 2004

Brainbench Certified - Internet Information Server 4.0 May 25,

2000

Appointments:

Appointed position of departmental Year 2000 coordinator.

Appointed to the Slow Nocturnal Hemodialysis committee as a technical

advisor.

Programming skills: Java, JavaScript, C#, Visual Studio, C++, SQL,

Assembly, HTML, FORTRAN, COBOL, PASCAL and BASIC.

Wireless Network Configuration: Familiar with locking down wireless

networks by disabling SID broadcast, limiting DHCP address scope range, MAC

address filtering and limiting signal strength.

Database Development: Design, develop and support Microsoft Access

databases.

Basic Electronics: Assembled and wired Programmable Controller Interface

(I/O) panels for a gas transmission pipeline compressor station Emergency

Shutdown System. Familiar with the use of Digital Volt-Ohm-Milliammeter and

the reading of wiring schematics.

Sales Experience: Excellent interpersonal skills.

Scuba Diver: Hold Open Water Certification through Professional Association

of Divers International (PADI)

Spanish: Three total years high school and college level courses.

Typing Computer Keyboard: 60 - 65wpm.

References upon request.

Contact this candidate