Markos Asfaw

E-mail: ad1dbn@r.postjobfree.com

Page * of 7

#1

Objective:

Consult, assessments, strategize, architect and implement within Information Technology needs in fast paced private sector or government agencies Professional Summary:

Over 10 years’ hands-on experience and trainings in Information Technology profession. Over the year I did architect, deployment, consultation, administration and troubleshoot issues in Software Defined Data Centers (SDDC) such as Azure VMware Solution (AWS) and On-Premises Data Centers using VMware business solutions such as VMware Cloud Foundation (VCF) to architect, provision and manage VMware vRealize Suite on Dell VxRail fabric’s, VMware Horizon View, vRealize Life Cycle Manager (vRLCM). Deployed and configured large sets of ESXi Hosts clusters, vCenters in a link and HA mode with external and internal Platform Service Controls (PSC), VMware NSX-T and NSX-V architect and deployments including NSX-T Federation with global objects, securing using micro-segmentation, architecting and deployment of IDS/IPS, NSX-T Intelligence, NSX-T Advance Networking (AVI Network) load balancers operation and analysis, migrated multiple NSX-V and legacy data center to NSX- T migration using migration assistance tools such as ReSTNSX (M.A.T) and NSX-T built-in migration tools. NSX-V cross vCenter NSX deployment, multi- tenants ESG’s deployments, Universal Distributed Logical Routers (UDLR), NSX one-arm and in-line load balancer configurations, dynamic and static routing protocols configurations such as BGP and OSPF, micro-segmentation security for tenants in a multi-tier’s layout. Using vRLCM I was able to deploy vRealize Operation Manager (vROps), vRealize Log Insight (vRLI), VMware Identity Managers (vIDM), vRealize Automations, manage certificates, tenants, patches and manage other lifecycle aspect of these solutions. Deployed and configured container-based solutions using Kubernetes (K8S), provision and manage multi- tier applications in the Kubernetes containers (PODS), integrated with vRA and vRSLCM content manager for sharing workflows and data. Architected and deployed Rancher in HA mode for container management and security. The container-based solutions use Docker, Kubernetes and Rancher server with Istio, Longhorn for persistence volumes (PV and PVC), MinIO and other management tools such as Tectonic, Docker Swarm and etc.

Architected and configured physical routers and switches as spine leaf topology using Dell, Extreme Networks routers, Arista and other vendors as aggregate routers and Top-of-Rack (TOR) switches. Additionally, configured VLT’s

(stacking technology) with different domains within the spine leaf topology, Port- Markos Asfaw

E-mail: ad1dbn@r.postjobfree.com

Page 2 of 7

#1

channel (LACP), SNMP, BGP and OSPF. Capture and analysis of traffic for troubleshooting and applied micro-segmentation security in private and Fed RAMP environments, Deployed Windows 20xx Servers, MS SQL, IPAM and private and public certificates.

Other architect and solutions entails Workspace One in high availability between two data centers with VMware Identity manager, Unified Access Gateway (UAG), Two-factor-Authentication (2FA) such as VMware Verify, Duo Security, Okta, Radius, Air Watch Devices Services, Workspace One Unified Endpoint Manager

(UEM), vIDM, VMware Horizon View Connection Servers with replica, Horizon View PODS, created and configured Virtual Desktop (VDI) pools such as instance, linked cloned, remote desktop Server (RDSH and application pools. Publishing applications and provide secure access to internal resources using Unified Gateway Access (UAG). Deployed User Environment Manager (UEM), AppVolume and published applications. Created writeable AppVolume and assigned to users, groups and machines.

Utilizing vRealize Automation (vRA) and vRealize Orchestrator (vRO) I automated processes such as tenant boarding, day 2 operations, security and decommissioning using vRO workflows and vRA extensibilities capabilities. Use curl commands and java scripts to automate NSX-T manual provisioning of network segments, security groups, security rules on North/South and East/West T1 Edges and so on.

Work Experience:

Company: SariTy, LLC October 2020 to Present

Title: Architect/Systems Matter Expert (SME)

Responsibility: Current Data Centers environment assessments, strategy advises. High-Level and Low-Level architecting designs (HLAD and LLAD) for the Software Defined Data Centers (SDDC’s). Deployment of the LLAD using VMware Cloud foundation 4.x to provision the VxRail management and workload domains for local and global infrastructure. It includes the VxRail Manager, VMware vRealize Suite such as vCenter, ESXi hosts, vSAN, NSX-T, NSX-T Federation, NSX-T Intelligence (vRNI) and NSX-T Advance Load Balancer (AVI), Tanzu Kubernetes Grid (TKG) and Ingress Load Balancing by deploying AVI Multi-Cluster Kubernetes Operator (AMKO) and AVI Kubernetes Operator (AKO). In addition, architecting and deployment of the micro-segmentation security framework for IDS/IPS, DFW, N/S Gateways, automation, documentation and trainings. Markos Asfaw

E-mail: ad1dbn@r.postjobfree.com

Page 3 of 7

#1

Company: MarkDun Systems, LLC April 2014 to Oct 2020 Title: Director, Virtualization Technology - Systems Matter Expert (SME) Responsibility: Architecting, Consultation, integration, configuration of Software Defined Datacenters (SDDC) on prem and cloud, Technical Strategy Advise and Administration on VMware Solutions, HP servers, Dell and other routing and switching, QNAP file server, Trend Micro, MS Windows Servers, Virtual Desktops’ (VDI), applicable business-related solutions and more Company: Charter Communication July 2017 to March 2019 Title: Senior Security Engineer – VMware NSX SME

Responsibility: Provided architecture, consultation and troubleshooting support Company: EMC (Express-Scripts) 02/2016 to 4/2016

Title: Consultant, System Matter Expert for vRealize Suite (vRA and vRLCM) and vRealize Operation Manager (vROps)

Responsibility: Fix vROps operation and configuration problems. Upgrade to the current version and create customer dashboards related to customer needs for management, operation and engineer teams.

Company: Dell Cloud Solutions 08/2015 to 11/2015

Title: Architect, vRealize Suite and NSX subject matter expert Responsibility: Architect vCenter 6.x with Platform Service Controller (PSC) for over 18 Co-Locations management, NSX manager, controllers and edge services and Site Recovery Manager (SRM) for software defined data centers. Company: AAMVA 04/2015 to 08/2015

Title: Consultant- Lead Engineer, Virtual Infrastructure Responsibility: Architected, installed, configured and administrate the Virtual Infrastructure for headquarter, Ashburn and Chicago Data Centers Company: Alcatel-Lucent 09/2014 to 03/2015

Title: Consultant, System Matter Expert for vCAC and Nuage Software Defined Network Engineer

Responsibility: Architected, installed and configured Alcatel-Lucent Nuage Networks such as Virtual Service Provider Solution to include Virtual Service Directory, Virtual Service Controller (VSC) in a standalone and federated mode, Virtual Router and Switch (VRS and bare metal VRS-G) and VMware vCenter Plugins

Company: Imperatis Corporation. 06/2014 to 09/2014 Title: Consultant, vCAC System Matter Expert

Markos Asfaw

E-mail: ad1dbn@r.postjobfree.com

Page 4 of 7

#1

Responsibility: Worked on the architect with Office of Management Bureau engineers for the new and advanced 3 data centers that is fault tolerance and utilize the VMware Cloud Automation Center, NSX routing and switching and Site Recovery Manager.

Company: CGI Federal. 11/2013 to 06/2014

Title: Consultant, vCloud Architect and Engineer

Responsibility: Worked as a systems matter expert in the architect, implementation and configuration of VMware vCloud Automation Center (vCAC 6) as a standalone and distributed architecture with VMware vFabric Application Director 6, vCenter Orchestrator, IT Business Manager, vCenter Operation Manager, vCenter Infrastructure Navigator, Log InSight, Chargeback, vSAN, and NSX networking capacity into virtual data centers, using guidelines from vCloud Automation Tool (vCAT) and related sites for 32 tenants and 600 VM’s Company: Working on building a family business 02/2012 to 11/2013 Title: Systems Engineer/Marketing

Responsibility: Designed the Nursing home Network infrastructure and Medical Record Administration solution

Company: Accuvant, Inc. 08/2011 to 01/2012

Title: Consultant, Technology Services

Responsibility: Provided end customers with technical support in VMware products and network projects and architecture.

Company: Calvert Cliff Nuclear Power Plant 04/2011 to 08/2011 Title: Cyber Security Specialist

Company: General Electric (GE) - Energy 12/2007 to 04/2011 Title: Network Design Engineer for Nuclear Plant Controls Company: Time Warner Inc. 09/2006 to 12/2007

Title: Senior Network Security Analyst

Company: U.S. Chemical Safety & Hazard Investigation Board 07/1999 to 11/2004

Title: Information Technology Specialist /Security Specialist Company: Atlantic Care Risk Management 02/1998 to 06/1999 Title: Director of Information Technology (CIO)

Markos Asfaw

E-mail: ad1dbn@r.postjobfree.com

Page 5 of 7

#1

Company: ComTek Communications 10/1996 to 01/1998

Title: Senior Network Engineer

Company: Integrated Computer Service 02/1992 to 09/1996 Title: Senior Systems Engineer

Education:

NSX-T Troubleshooting 3.x Jan 2022

NSX-T Federation 3.x Dec 2021

NSX-T Installation, configuration and operation 3.x Nov 2021 VMware Cloud Foundation – Planning, Managing and Operations April 2022 Double VCP – Network Virtualization & Desktop Mobility October 2020 VCP – Network Virtualization 2020 October 2020

VCP – Desktop & Mobility 2020 October 2020

Vmware vRA: Orchestration & Extensibility (8.1) Trained September 2020 Vmware NSX-T: Next Generation Cloud Networking November 2020 VMware VCP-DTM - Horizon 7 Training Completed January 2020 VMware VCIX6-NV NSX Training Completed March 2019

VMware VTSP-NV (Network Virtualization 2016 June 2017 VMware VTSP - Foundation 2017 June 2017

VMware VSP - Foundation June 2017

VMware VSP – SV (Server Virtualization 2017 June 2017 VMware NSX 6.x Switching & Routing (VCP6-NV) August 2017 VMware vCenter Operation Manager December 2013

VMware – VMware vSphere 6.x May 2016

VMware – vRealize Automation Center 7.x June 2016

VMware – vCenter Operation Manager February 2014

VMware – VMware NSX Switching & Routing 5.x March 2014 VMware – vSphere 5.5 and vCenter 5.5b November 2013 Enterasys Dragon Security (DSCC) February 2009

Enterasys Certified Inter-Networking - (ECIE) February 2008 Enterasys Security Systems Engineer

(ESSE-D and ESSE-N) December 2007

Markos Asfaw

E-mail: ad1dbn@r.postjobfree.com

Page 6 of 7

#1

McAfee Intrusion Prevention Systems (IPS) September 2006 McAfee Host Based Intrusion Prevention (HIPS) September 2006 Certified Information System Security Professional (CISSP) Completed Self-Study (Not certified yet)

INFOSEC Professional - National Security Agency July 2003 Ultimate Hacking Expert Certification - FoundStone March 2003 Ultimate Web Hacking Certification - FoundStone February 2003 Cisco Security Specialist-1 (CSSI) April 2002

Cisco Certified Network Associate (CCNA) March 2002 Microsoft SQL Administration September 1998

Microsoft SQL Implementation and Design September 1998 Computer Electronic Technology (Diploma) September 1988 All Honor Graduate – Cum Laude

Microsoft Certified System Engineer (MCSE) May 1998 Microsoft System Management Systems 1.2 March 1998 A+ Certification December 1997

Security Clearance

Secret Clearance – Active

Personality

I am goal oriented, self-motivated, sociable, flexible, hard working person with superb decision-making skills, strong analytical skills, instinctive troubleshooting skills, good judgment, and outstanding initiative. Exceptional skill demonstrated when working under high pressure. Extremely focused and motivated to achieve in a competitive, fast-paced professional setting. Enjoy various sports and nature. Markos Asfaw

E-mail: ad1dbn@r.postjobfree.com

Page 7 of 7

#1

Contact this candidate