Technical skills
OS - Sun Solaris (up to **), HP UX (up to 11.31), AIX (up to 7.1), Linux, RedHat Enterprise (RHEL - up to 7).
Databases - Oracle (up to 12g), Sybase, MySQL, PostgresSQL,, SQL language, PLSQL, Sybase, DB2.
High availability -Veritas cluster server, Veritas cluster FS, HP service guard, Oracle RAC, Redhat HA, HACMP, VIO, HMC, Veritas DMP, IPMP, bonding/teaming, PowerPath, SecurePath, Hitachi Dynamic Link Manager, multipathd
Virtualization - Containers, Zones, LDoms, HP VMware, VMware ESX(5.1, 5.5), nPARS, vPARS, KVM.
Volume managers - Veritas Volume Manager, Disk Suite, Raid manager, LVM, ZFS.
Data storage technologies - EMC Symmetrix Remote Data Facility, IBM MetroMirror (Peer to Peer Remote Copy), Data Center Fabric Manager, FC zoning, NetApp, SAN, NAS,
Server provisioning - Redhat Satellite server up to 6.1, Docker, Kickstart, Jumpstart, HP Ignite, NIM
Programming - C language, shell scripts, Perl, Ruby, Python, Java script, Jquery, PHP, HTML, CGI, CSS, awk, sed, extended regular expressions, Intel / ARM assembler, reverse engineering.
Configuration management - puppet, CF engine, OPSware, ansible.
Code management - GIT, GITlab, SVN, IBM Clearcase, Issue tracking - Jira
Application servers - Websphere, IBM MQ, JBoss, Tomcat, RabbitMQ
Grid computing - Hadoop, Apache pig, GemFire, Armanta
TCP/IP networking - F5 load balancers, LDAP, Sendmail, Samba/ CIFS, NIS/NIS+.
Security - Etrust, Iptables, packet filters, security scanners, Checkpoint Firewall1, intrusion detection, tripwire.
Other - Axway Secure transport, Netbackup, Autosys scheduler, Quest authentication services, Centrify
SUMMARY
Senior infrastructure engineer with experience in areas of Unix/Linux systems, storage, development, networking and security. 15+ years of programming and automation (lately DevOps), 15+ years of Unix administration, 7 years of SAN administration, 15+ years of design and implementation of highly available clusters, 5 years of Oracle DBA administration experience, extensive experience with implementation of industry standards, processes and procedures in enterprise environments. Solaris and HP-UX certified administrator, Hitachi storage certified professional and Oracle certified professional. Masters degree in computer science from Technical University Brno, Czech Republic.
CAREER HISTORY
IT Infrastructure architect
Bank of Montreal, Toronto, Canada - contract
03/2014
Design, deployment and configuration of Redhat Satellite server 6 (RHS6), migration of 670 servers from RH Satellite 5 to RHS6, developed customized Ruby GEM reporting, containers set up using Docker, configuration of access insights.
Design and build of Puppet infrastructure, set up of safe automated code deployment policies and procedures, code versioning and sharing using GITlab repository, design of the coding guidelines and best practises.
Design of configuration management rules and processes to streamline ongoing maintenance and configuration, using Puppet, developing and implementing policies towards automated audit compliance using Devops approach.
Installation, initial configuration and management of Atlassian JIRA bug and project tracking system.
Creating provisioning processes utilizing RHS6 with Puppet, coding of supporting build classes and facts, build of remote capsule servers and delegation of privileges to remote locations.
Development of puppet modules and custom facts using Ruby, extending RHS6 GUI with custom BMO compliance dashboard pages written in Ruby and Python.
Managing IBM Websphere, MQ and JBoss application servers, building and deploying new application packages, troubleshooting server issues, making changes to configuration to support new applications.
Building Hadoop grid infrastructure, GemFire and Armanta, working with users on change requests, troubleshooting.
Building packages with ClearCase, deploying them in UAT, committing them to Compass package control system.
Managing Solaris and Redhat enterprise servers (700+ servers), troubleshooting problems, suggesting and implementing changes to ensure high availability of the servers and compliance with BMO standards.
Administration of VMware infrastructure, suggesting improvements, supporting VMware for RHEL and Windows.
Performing difficult root cause analysis, debugging problems on the level of system library calls, problem solving.
Administration of Autosys 11.3.5, creating new policies for new jobs, troubleshooting, maintaining jobs.
Working on projects, guiding projects to ensure compliance with internal standards and industry best practices.
Unix / storage consultant
Wind mobile, Toronto, Canada - contract
11/2013 – 12/2013
Administration of Linux, AIX, HP-UX (200+ servers), Hitachi modular storage, Hitachi Virtual storage Platform (VSP), HP EVA 3400 storage, Brocade FC switches, VMware, Redhat HA clusters.
Security unix consultant
TD bank, Mississauga, Canada - contract
12/2013 – 02/2014
08/2013 – 11/2013
For audit remediation project documented current processes gaps related to Unix audit findings, proposed changes, planned and implemented fixes for all Unix environments (Solaris, AIX, Redhat and HP-UX).
Scripted reporting and data gathering, automated change deployment where permissible.
Senior consultant (Unix/SAN)
Resmor Trust (RBC), Etobicoke, Canada - contract
06/2011 – 07/2013
Administration of RHEL Linux servers, Hitachi modular storage, Brocade FC switches, VMware ESX servers, F5 load balancers, problem troubleshooting, compliance, patch and vulnerability management, change management.
Designed, installed and configured Hitachi AMS 2300 and associated SAN components, executed AMS500 to AMS2300 storage migration project for all Redhat Enterprise Linux servers, configured storage auto-tiering.
Designed, implemented and supported Redhat HA clusters, built custom cluster script resources.
Built a Kickstart server for automated Linux builds with PXE boot and custom scripting to complete post installation tasks. Built CFengine server with all configuration rulesets for compliance enforcement, centralized server management and post install configuration.
Designed encapsulation of Oracle RAC cluster into Linux HA cluster ensuring high availability of all Oracle failover components and ETL applications.
Planned and implemented with DBAs a project of Oracle RAC 11g upgrade and migration from old storage to a new one with minimal disruption of service, using Oracle ASM while changing tablespace sizes at the same time. Introduced Oracle mirroring on storage level as a safe guard for major changes where roll back is done by switching to preserved side of the mirror. Work with DBAs on Oracle performance tuning.
Built local Redhat satellite server for centralized package management with an option of supporting custom packages.
Performed storage analysis, capacity and performance planning, recommended enhancements and configuration changes to improve and optimize storage, LUN creation and zoning, troubleshooting.
Participated in DR improvement project using Vmware SRM solution.
Designed central file feedhub solution using Axway (Tumbleweed) Secure transport server and migrated all the feeds off legacy systems, developed Perl scripts for some ETL jobs.
Developed a Perl script to simplify storage tasks and remote replication pair control using Hitachi CLI.
Configured Quest authentication services for Linux allowing central account authentication against Active Directory.
Evaluated options of moving some services into private cloud using VMware Vcloud technology.
Worked closely with auditors, provided them with system reports and helped with remediation of audit issues, identified few major security gaps and implemented fixes, documented policies and procedures.
Participated in project planning and execution of infrastructure migration to Royal Bank of Canada.
Senior Unix /SAN consultant
Intria Items (CIBC), Mississauga, Canada - contract
03/2009 – 05/2011
Managed Solaris, HP-UX, AIX and Linux servers (200+ servers), participated in on-call duties, troubleshoot problems, suggested and implemented changes to ensure compliance with Intria and CIBC standards, patch managent.
Acted as a SAN storage consultant, helping with routine tasks on IBM Shark DS8300 like LUN allocation, LUN masking, Brocade FC switch zoning, acted as a vendor contact, managed Veritas netbackup and ACLS.
Planned and implemented a physical storage migration (25TB) from Montreal to Markham with minimal downtime. It was executed using IBM virtualized SVC storage, because a long distance frame replication wasn’t a feasible option.
Worked on design and implementation of cheque processing application virtualization, Sybase upgrade and hardware refresh, using virtualization technologies as LDOMs, Solaris zones and HP Vmware.
Tuned configuration of existing HP Service guard and Veritas clusters with focus on accurate and comprehensive fault detection and flawless failover operation, designed monitoring and reporting framework to ensure identical configuration on every node of the cluster.
Host based migration of AIX lpars to SVC using AIX LVM, creation, activation, lpar profile modification, lpar builds, configuration of IBM P6 series, lpar patching, managed VIO server
Designed, tested and applied Netiq monitoring policies for Unix with focus on centralized management and reporting, developed Netiq knowledge scripts in Perl to monitor specifics of the environment.
Managed Audit remediation project, transformed audit findings into executable plan, participated in the remediation, implemented reporting tool to identify gaps, report progress and ensure sustainability.
Built servers and executed migration of major application to HP blade servers BL870C and BL860C.
Designed a script framework to simplify Unix managements tasks in environment utilizing Opsware.
Created Unix operational documentation, proposed and implemented new procedures and processes.
Designed and implemented many significant improvements to Unix environment in highly secured and complex network environment (15 internal firewalls) as NTP service, central access point for Unix management with dual factor authentication, DNS forwarding service, Unix account management policies and processes with tracking and labelling on the systems,
Unix security consultant
Rogers, Brampton, Canada - contract
08/2008 – 02/2009
Administered Solaris, HP-UX and Tru64 servers in large scale environment (approximately 500 servers), participated in on-call duties, troubleshot problems and suggested recommendations for improvements.
Participated in project of automated patch and configuration management using CFengine with intention to automate provisioning of HP-UX and Solaris servers, enforcing server configuration changes to assure compliance with Rogers’ security standards.
AIX server builds using NIM server, server management, troubleshooting, performance testing and tuning.
Automated SUN explorer image collection, reviewing ORI scores with SUN, proposing changes to be made to environment, co-ordinating implementation.
Managed project of root disk mirroring for legacy servers (about 80 servers) using SUN Disk Suite, created implementation plan and procedures, tested procedures in LAB, co-ordinated and participated in implementation.
Senior unix consultant
CIBC, Toronto, Canada
10/2005 – 08/2008
Administered Solaris, AIX and HP-UX servers in large scale environment (700 servers), kept operating systems and system applications at most recent patch levels, troubleshot, ensured that servers comply with CIBC standards.
Designed Veritas clusters (VCS) as part of projects, troubleshot cluster related issues, developed custom VCS monitoring, start and stop scripts, led an initiative of development and deployment of Tidal monitoring script to replace existing one prone to generate false positive alerts.
Operated IBM PPRC (Global Metro Mirror) and EMC SRDF links between storage frames, performed suspend, resume, fail-over, fail-back, flash copy operations. Scripted PPRC operations for all volumes on all servers.
Worked as a technical lead for Card products business, acted as a single point of contact for them.
Documented new procedures, participated in testing of new procedures, updated documentation and procedures as they got outdated, documented and transferred knowledge to the second level support.
Worked on projects, provided technical expertise to project teams, proposed technical solutions, guided projects, ensuring that they comply with CIBC standards and best practises in the industry, helped customers to form technical requests based on their requirements.
Wrote shell and Perl scripts to simplify Unix administration, audit reports, automated routine tasks, participated in the project of designing framework and guidelines for writing automated scripts.
Developed Perl based framework designed to highlight cluster configuration discrepancies potentially causing applications not to function properly after service group failover which could lead to outages.
Re-wrote web based interface to LDAP server written in Perl allowing batch manipulation of stored information, improving security, expanding user features, built LDAP server as a part of hardware refresh project.
Highlighted potential security risks and suggested improvements to shell scripts written by Unix team.
Participated in change management process, provided technical details for other users opening tickets for Unix team.
Senior System Administrator
Ryanair, Dublin, Ireland
03/2001 – 09/2005
Administered web site (HA Geo Cluster 12 + 10 + 4 servers spread across three geographical locations) with a booking engine (24x7 operation, circa 750 000 000 hits/month), ensured high availability, monitored performance.
Administered HP-UX servers (HP service guard clusters) running mission critical applications, managed Oracle RAC and Sybase databases, implemented and maintained SAN storage using HP EVA frames and HP FC switches, designed policies and managed Checkpoint Firewall-1 appliances, maintained security of the systems and networks.
Senior Unix administrator
Commercial bank, Brno, Czech Republic
01/1997 – 02/2001
Senior System Specialist
Pragodata a.s. Brno, Czech Republic
07/1994 – 01/1997
PROFESSIONAL EDUCATION
Masters Degree in computer science (5 years)
Technical University, Department of computers and electronics, Brno, Czech Republic 1989 1994
Certificates, Exams
Hitachi Data Systems Certified Professional 2012
Sun Solaris 10 certified system administrator 2008
Exams ( Sun Certified System Administrator Solaris 10 part I/II )
Sun Solaris 9 certified system administrator 2004
Sun Certified System Administrator Solaris 9 part I and part II
Oracle Certified Professional 2004
Oracle Network Administration, Oracle Backup and Recovery, Oracle Performance and Tuning,
Oracle Architecture and AdministrationOracle SQL and PL/SQL
HP-UX 11 certified system administrator 2003
HP-UX 11 system administration
Checkpoint firewall I administrator 1999
Checkpoint firewall-1 administration
HP-UX 10.20 certified system administrator 1998
HP UX System Professional II, HP UX System Professional I
Courses
BIG-IP Local Traffic Manager (LTM) Essentials 2013
Hitachi Storage Provisioning Solutions - TSE2100 2012
Hitachi - Managing Storage Performance with Hitachi Tuning Manager v7.x 2012
Hitachi Adaptable Modular Storage 2000 Family Architecture and Operations 2012
Hitachi Data Systems Foundations - Modular - THE1860 2012
Axway SecureTransport Administration with Technical Certification 2012
Axway SecureTransport Advanced with Technical Certification 2012
AIX refresh course 2008
Solaris 10 for Unix administrators 2007
SUN high end server administration – E20k 2006
Checkpoint VPN-1/FireWall-1 NG with Application Intelligence - Management I, II and III 2005 2005
Extreme hacking – Web – courses 2003
Extreme hacking – Unix – courses 2002
HP-UX high availability – HP service guard 2001
Oracle DBA, performance and tuning 2001
Oracle advance SQL and PL/SQL 2000
Windows 2000 server administration, MS Exchange server administration 2000
Project management courses, Linux courses, Internet gateway, networking and security 1995 - 1997