Nonso Donald - Exchange Engineer

ProfessionaL Profile

Highly qualified I.T. professional with 5 years as a Microsoft Implementation Specialist

Specialist in Microsoft Exchange, Office 365, Skype-for-Business, Active Directory, PowerShell.

Implemented the following roles in a Microsoft Exchange environment: Edge Transport, Mailbox, CAS Array, Hub Transport and Unified Messaging

Effectively deployed Office 365 Infrastructure with ADFS 2.0 Farm & ADFS Proxy servers.

Deploy and Implementation of PowerShell scripts to efficiently fix errors for the customer's support teams found through the Active Directory environment.

Resolved Office 365 tasks with the use of PowerShell.

Effectively installed, configured and optimized IT infrastructures to achieve high availability and performance.

Extensive experience in architecting and configuring Microsoft Clusters.

Configured ADConnect and ADFS for Active Directory synchronization and single sign-on with Office 365.

In-depth experience in troubleshooting and resolving client/server issues with backup and recovery solutions for planned disaster recovery.

Deployed and implemented the different roles in the Microsoft Exchange environment: Edge transport, Mailbox, CAS array, Hub transport and unified messaging depending of the version.

Complete experience in ITIL process/Incident Management.

Planned Size and Capacity for Exchange 2013 by analyzing the Exchange statistic reports before migrating Exchange 2013 to Exchange online.

Deployed Active Directory environment including file shares, CA, AD and DNS zones.

Administration of mid- to Large-scale Exchange production environments where e-mail and messaging services are mission-critical.

Installed, configured, and maintained Active Directory and third-party migration products.

Implementation of PowerShell scripts to efficiently fix errors found through Active Directory, Exchange and o365.

In-depth knowledge of Active Directory and LDAP technologies on Windows

Implemented the following roles in a Microsoft Exchange environment: Edge Transport, Mailbox, CAS Array, Hub Transport and Unified Messaging.

Experience in Administering Exchange Online using either ECP or EAC (Exchange Admin center) or PowerShell.

Verified user functionality and access to services via Outlook, OWA, and Outlook anywhere and assisted in resolving any issues.

Strong experience in Implementing Active Directory in production environment including GPO's, DNS, WINS, DHCP, and Domain Controllers etc.

Proficient in performing administration tasks and reporting using automation PowerShell scripting.

Technical Skills

Microsoft Skills

Active Directory, AD DS, DirSync, Azure ADConnect, ADAM, AD LDS, Active Directory Schema, PowerShell Scripting, Active Directory Administration, Task Automation and Migration mailbox moves with PowerShell

Exchange Server

Exchange 2003, 2007, 2010, 2013, 2016, and Exchange Online

Windows Server: Windows Server 2003/R2, and 2008, 2008/R2, Windows Server 2012, 2012/R2

Linux Server: Unix, Linux, Red Hat, Oracle, Ubuntu

Virtualization: HyperV, VMWare/VSphere, VirtualBox, Virtual Machine

Databases: Microsoft SQL Server

Misc: VOIP, POS

Software Packages

Microsoft Visual Studio, Microsoft Office (Word, Excel, PowerPoint)

Exchange Skills

Database Availability Group (DAG) DAC Mode, CAS Array, Hub Transport Server, Continuous Cluster Replication (CCR), Standby Cluster Replication (SCR), Local Copy Replication (LCR), Exchange management console (EMC), Outlook Web App (OWA), Transport pipeline, Managed Availability, Exchange Online Protection (EOP), Exchange Admin Center (EAC), Outlook Web App (OWA)/Outlook On the Web (OOTW) for 2016, High availability, Resiliency

Office 365 Skills

Active Directory Federation Services (ADFS), DirSync, Azure AD Connect

Professional Experience

January 2019 – Present

Senior Exchange Engineer/Architect

Alcon Vision, LLC Fort Worth, Texas

Architecture and Implementation of New Environment from Scratch and separation of domains with migration to new environment.

As of April 2019 Novartis, and Alcon are split to become separately traded companies, each following its own strategic objectives. The purpose of this project is to differentiate the messaging infrastructures of each company.

Alcon has about 35K users globally while Novartis has about 100k users globally. All 35k Alcon users, mailboxes and data were migrated to a new Alcon messaging infrastructure along with approximately 2,000 devices and applications distributed globally. I led a team of six engineers and architects to implement the new messaging environment and migrate the Alcon domain and messaging.

The new Alcon infrastructure hosted all mailboxes on Office 365 cloud. I set-up a centralized email flow by implementing 2 Hybrid Exchange Servers on prem with 2 Edge (DMZ) and 2016 Mailbox Servers on AWS Cloud, keeping with Microsoft Best Practices which recommends the Edge Transport Server be deployed inside the company network.

Configured Hybrid Exchange Servers to manage internal SMTP relay and Office 365 objects such as mailboxes, Distribution Groups, Security Groups, Resource rooms, etc.

Assisted in managing domain registration transfer situation by placing an address rewrite rule on the Edge Transport Servers to rewriting outbound email from alcon365.com (temporary domain) to alcon.com to make our customers aware the email is coming from Alcon. The address rewrite rule will eventually go away once Novartis releases the domain (Alcon.com) to Alcon.

Created a solution for Novartis requirements that all inbound mail must pass through the Novartis email infrastructure by pointing Alcon’s MX record to Novartis Proofpoint POD which forwards to Alcon edge transport servers, to Exchange Online Protection (EOP), then to Alcon user mailboxes on Office 365 cloud.

Created security groups in AWS for the servers. Opened required ports for inbound and outbound communication. Assigned the security groups to both edge servers.

Attached elastic IPs to the private IPs of the edge transport servers in AWS to enable it reachable from the internet.

Installed self-signed certificates on the edge servers to match the same used by the Domain Controllers

Subscribed the edge server to the Hybrid Exchange Server by creating and exporting an Edge subscription file (.xml) to the exchange server. Imported the .XML file to the exchange servers and ran EMS script to subscribe the edge servers.

Utilized classic load balancer in AWS to load balance both servers.

Built two SMTP relay servers for printers and applications that need to send out email.

Configured IIS on the SMTP servers. Worked with the network team to open port 25 for mail relay.

Built two on premise exchange servers 2016. Configured SMTP relay on the servers for internal applications and devices to enable internal mail relay.

Ran Hybrid Configuration Wizard to connect both Exchange and Edge Transport servers and enabled centralized mail flow.

Created Send connectors on the on-premise exchange server for the Biscom fax servers to enable email to fax capability.

Configured connection filtering and defined IP allow list to only accept messages from our edge servers and partner proofpoint IP address (Novartis Proofpoint POD)

Created mail contacts for shared conference rooms that belong to Novartis but reside in a shared building occupying Alcon and Novartis employees.

Prepared CSV file and script to reapply permissions for the shared mailboxes that have been migrated.

Worked with legal department to define retention tags in Office 365 and applied the tags to Alcon retention policies.

Worked with the mobile team to implement Airwatch in Office 365 and enroll mobile devices and defined mobile device mailbox policies.

Setup Organization Sharing to enable free/busy and other calendar information between federated exchange tenants.

Synchronized Alcon security groups from Novartis Active directory to Alcon active Directory. Mail-enabled the security groups through PowerShell scripts. Used PowerShell script to set the target addresses of the security groups.

Enable alcon.com as the primary mail domain for all mail objects after domain take back (Alcon.com) from Novartis. Add alcon.com as an accepted domain in Office 365

On the hybrid Exchange server, run script to export the primary SMTP addresses from mail-enabled objects

Run another script that swaps primary and secondary SMTP, to switch alcon365.com to alcon.com for Proxy Addresses.

Run another script that exports all the MAIL attributes for mail enabled objects. Pivot and replace alcon365.com with alcon.com. Import back to AD accounts.

Run a final script that exports MAIL and Primary SMTP. Pivot to ensure both matched.

In O365, enable DKIM, DMARC. Ensure that the public DKIM certificate is published in public DNS for alcon.com. Currently, the legacy Key from Proofpoint is still published.

Verify the public alcon.com SPF record includes O365 tenant

Run Hybrid Connection Wizard on Hybrid server. Delete connectors to edge servers and turn off centralized mail flow.

Remove address rewrite rules from the edge server. Decommission edge transport servers and delete the VMs in AWS.

Point Alcon MX records to O365 ATP/EOP.

Planned SMTP migration. Migrated all devices utilizing the Old SMTP server to the 6 new Servers deployed in Azure. Three Servers Load balanced are active while the other three load balanced separately are passive

Working with the automation team to develop a tool that will automate access control for devices that intend to use the SMTP server for mail relay.

Currently working with the Automation team to automate the assigning of Security groups to shared mailbox after the mailbox is created in O365.

July 2017 – January 2019

Senior Exchange Engineer

WellStar Health System Atlanta, Georgia

Migration from Lync 2013 on-prem to Skype-for-Business Online using a cutover migration to move all users in a single pass. Used PowerShell to extract contacts and info and put it into Skype-for-Business.

Disabled on-premises services and accessed Skype-for-Business Online for the first time.

Prepared a backup/restore plan for the organization.

Exported a list of all Skype-for-Business enabled users and theirs contacts.

Confirmed that on-premises user accounts synchronized with Active Directory in Office 365 using Office 365 Admin Center using a tenant admin account.

Backed-up user accounts and settings.

Moved a test group of pilot users to Skype-for-Business online to test environment configuration, and verify that the features and services function as expected.

Using the Skype-for-Business Server Management Shell in the Microsoft Office 365 tenant, moved all users from on-premises to Skype-for-Business online in one pass.

Verified successful migration and users in Business Online Control Panel.

Cutover name space for Exchange for the 2013 environment and tested functionality.

Troubleshooting DAG issues, Mail flow and OWA connectivity issues and setup CAS Array and also archiving for the users.

Implemented DAG in DAC mode for cross site DAG configuration and recovery.

Perform diagnostics of Arrays, Transport Hubs, Mailbox Servers, CAS Servers, Domain Controllers and more.

Troubleshoot escalated issues by lower tiers for Exchange related issues to include troubleshoot log errors, connection issues, integration problems and authentication in Internet Information Services (IIS).

Performed troubleshooting on the systems to ensure optimal performance.

Identity Management and ADFS (Break/Fix situations)

Formulated and installed Lync 2013 functionalities for multiple clients.

Deployed Office Professional Plus (Word, Excel, OneNote, PowerPoint)

Utilized ActiveSync for configuration of mobile messaging services.

May 2016 – July 2017

Senior Exchange Engineer

Ameren St. Louis, Missouri

Performed an Office 365 Tenant Migration on this project.

Verified the target domain and in the Office 365 admin center, added the source domain and created TXT records in Domain Name Systems (DNS) for verification.

Created master list of user mailboxes you want to migrate.

Created mailbox mapping .CSV file for the migration tool to match the source mailbox with the target tenant mailbox and manually created users, groups and other objects of the new company in Office 365.

Scheduled TTL test and changed the TTL value to its lowest limit, and disabled directory sync in the tenant Office 365 admin center so that changes to the source tenant AD DS will no longer sync to the Office 365 tenant.

Adjusted the existing user and group provisioning process accordingly and imported users and groups into the portal using a PowerShell script.

Merged objects into Active Directory through Active Directory Domain Services (AD DS) consolidation, and imported CSV file using the bulk feature in Office 365 Admin Center.

Used Azure AD Connect tool to sync all objects from the target Active Directory Domain Services (AD DS)

Used Windows PowerShell command Get-MsolUser -DomainName to retrieve a list of all objects that are still using the domain and blocking removal.

Configured auto-discover CNAME (internal/External) and new domain in ADFS target tenant.

Configured Exchange Online Protection (EOP); recreated transport rules in the target tenant.

Synced all new users and groups to the target tenant using directory synchronization.

Migrated 250 users per pass, with mail, calendar and contact data in each pass to target tenant mailboxes.

Utilized PowerShell to perform checks for Exchange Logs, Event Logs, General Exchange Administration and various other tasks

Utilized PowerShell and other scripting skills to automate messaging processes and

March 2015 – May 2016

Microsoft Exchange/UC Engineer

Studer Group Gulf Breeze, Fl

Implemented a cutover migration from Microsoft Exchange 2007 to Exchange Online/Office 365, configuring Skype-for-Business for unified communications (UC).

Worked with stakeholders to understand business needs, and made recommendation for office 365 with Skype-for-Business.

Used Exchange Calculator to evaluate current environment and plan project based on needs.

Utilized PowerShell to perform checks for Exchange Logs, Event Logs, General Exchange Administration and various other tasks

Provided detailed plans to stakeholders describing project and how it met requirements.

Upgraded and patched the current Microsoft Exchange 2007 servers and verified the domain to prepare for migration.

Implemented Office 365, and created user mailboxes.

Created empty mail-enabled security groups on Office 365.

Configured domain in Office 365, and DNS/MX settings, and verified routing.

Used PowerShell scripts to create mailbox migration batch.

Using PowerShell moved the batch of mailboxes 150 at a time with the Exchange migration tool, per Microsoft best Practices,

Monitored migration status and adjusted as needed.

Enabled Lync/Skype-for-Business feature in Office 365 mailboxes.

Assigned user licenses for Office 365 user accounts.

Fine-times Office 365 performance and ensured compliance with corporate policy.

Captured Office 365 security alerts and integrated the feeds to log collection services.

Instructed and advised on litigation holds and eDiscovery capabilities within Office 365.

Performed validation of tenant configurations and required domains to Office 365.

Worked with technical support to configure all user workstations office 365 and Skype-for-Business and work with end-users to ensure a smooth transition.

Decommissioned Microsoft Exchange 2007 servers.

Trained support staff on end-user support and engineering staff on troubleshooting Office365.

Set up new users and reset passwords and assigned new licenses

March 2014 – March 2015

Microsoft Exchange Engineer

NRG Energy Houston, Texas

This project consisted of a prem-to-Office 365 hybrid migration resulting in hybrid deployment.

Gathered requirements and analyzed current environment consisting of Windows server 2012R2, Exchange 2013 with Outlook client.

Planned new environment analyzing needs and determining licensing needs, virtual servers and tools needed for migration, and set-up a test using Microsoft Hyper-V.

Configured DirSync (Azure AD Connect) and ADFS for Active Directory synchronization/Federation with Azure Active Directory.

Created test accounts and did a pilot migration.

Rolled-out implementation of Exchange Online and Office 365.

Utilized the Hybrid Configuration Wizard (HCW) on Exchange 2013 to establish send and receive connectors with Office 365.

Created migration batches in the Office 365 Admin Center, and used PowerShell to check the status of the migration, and get statistics.

Troubleshot migration errors, such as failed mailbox moves, and connectivity errors, etc.

Assigned licenses in Office 365.

Assisted with Exchange messaging system administration while training technical staff in daily administration and troubleshooting.

Troubleshooting of connectivity issues, calendaring, and Active Directory issues

managing groups, permissions., and shared mailboxes

Troubleshooting load balancing issues causing client connectivity and latency issues in Exchange system.

Administration of Lync 2013 for IM, A/V, and Enterprise Voice services.

Maintained the Lync Front End pool configuration for hosted services and Edge servers for external communications, allowing unified communications services both internally and for remote Exchange/Lync users.

Management and troubleshooting of the Lync 2013 server infrastructure consisting of both physical and virtual servers.

Configured ActiveSync profiles for mobile device connectivity to Exchange 2013 and tested with clients to ensure functionality

Managed tickets and requests for related to Exchange and Lync using the Remedy ticketing system to track, update, and resolve.

April 2013 – February 2014

Active Directory Administrator

Eversource Energy - Berlin, CT

Responsible for the day-to-day administration, operation, and support of enterprise messaging infrastructure including Microsoft Exchange 2010, SMTP Edge Systems, e-mail compliance systems and Blackberry Mobile Technologies.

Implemented and configured CASArrays for load balanced connectivity to Exchange 2010 for RPC client access

Created coexistence between Exchange 2007 and Exchange 2010, configured connectors, namespaces,

Configured, implemented and troubleshoot Outlook

Deployed and configured applications on workstations using SCCM

Configured ActiveSync profiles for mobile device connectivity to Exchange 2007 and tested with clients to ensure functionality

Configured Windows 2008 virtual machines for the deployment of Lync 2010 and related services

Configured mail flow for hybrid and tested internally, remote, and external mail routing.

Responsible for creating new user and shared mailboxes, distribution groups, and security groups.

Created batches via CSV files and PowerShell for moves to Office 365 for user mailbox databases.

Troubleshot failed mailbox migrations, monitored migration statistics, reported to management on progression, and made adjustments to plans as deemed necessary.

Maintained clustering configuration for Exchange 2007 server high availability through the clustering manager to monitor and maintain services and configuration

Created hybrid scenario by registering domain, federating namespace, and subscribing for corporate licenses.

Troubleshot issues with mail blockage, spam, OWA access, and slow performance, providing both on site and remote diagnosis and resolution

Handled requests related to mail quotas, delegation, rights management and individual mail restores.

User management, creating and modifying accounts, file systems, network rights and access to file systems and directories.

Assist as part of a team in building and managing lab environments with complex settings, configurations, topologies and equipment including servers and various network elements.

Proactively monitor systems health by physically inspecting environment and utilizing provided tools such as SCOM.

Lead effort to verify and decommission Exchange 2007 servers and provided status reports.

Assisted with client upgrade process and testing effort for Outlook 2010 client for enterprise users in conjunction with Outlook anywhere access.

Education

CHATTAHOOCHEE TECHNICAL COLLEGE

Associate of Applied Science - CIST - Networking Specialist

UNIVERSITY OF NIGERIA ENUGU CAMPUS

BSc Banking and Finance, Department of Business Administration

NATIONAL INSTITUTE OF INFORMATION TECHNOLOGY

Microsoft Certified IT Professional

Certifications

Microsoft Certified Technology Specialist (MCTS)

Microsoft Certified Solutions Associate (MCSA)

Microsoft Certified IT Professional in Windows Server (MCITP)

AWS Certified Cloud Practitioner

Contact this candidate