Dennis Sarfo Darko

Senior Infrastructure & Cloud Engineer

AWS Certified Developer –Associate AWS Certified Security-specialty AWS Certified Solution Architect Associate

Red Hat Operating System VMware exsi AWS services SQS

AWS Amazon Cloud Watch SolarWinds CyberArk FTP SFTP SCP WINCP Docker

CPM EPV PVWA PSM LDAP AD TCP/IP HTTP HTTPS DHCP SSH SSL DNS VPN PKI

Summary:

System Engineer with 8 years of experience in a multi-platform Solaris 10 Operating System and Red Hat Enterprise Linux, Centos 7/8, AWS services and Windows.

Extensive experience in Linux/Unix system Administration, System Builds, Server Builds, Installations, Upgrades, Patches, Migration, Trouble shooting on RHEL 6.x/7.x.

Experience in performing multiplatform Server builds on VMware, which include Windows Server 2008, UNIX Solaris 10, LINUX Centos 6.4, and RHEL 6.4.

Experience in software installations, user and group administration, role base access control, file transfer and sharing; competent in file systems, Logical Volume Management (LVM), ZFS Volume Manager, VMware exsi 6.4, AWS services (S3, EC2, Dynamodb, VPC, ELB, Route53, IAM, SNS, SQS, Elastic beanstalk, AMI).

Experience in Deploying, managing, and operating scalable, highly available, and fault tolerant systems on AWS using Auto scaling, Load Balancers.

Knowledge of monitoring, logging and cost management tools that integrate with AWS using Amazon Cloud Watch. Create Custom VPC for EC2 instances.

Experience in Installation, and configuration of oracle database.

Strong ability and has knowledge to perform over Azure Cloud Support.

Experience in building and managing servers with VMware Exsi6 and has knowledge to perform over Hyper Converged Product Dell EMC VxRail.

Very Adaptable, collaborative, strong team player, detail oriented, multi-tasking.

Excellent verbal and written communication skills; ability to work within strict deadlines.

Education:

Graduate diploma in Management studies (ICM-UK), April, 2013

Certification:

CyberArk Certified Trustee

AWS Certified Developer –Associate

AWS Certified Security-specialty

AWS Certified Solution Architect Associate

Professional Experience:

ICMARC, Washington DC February 2019 to Present

Senior Infrastructure and Cloud Engineer

Deploy EC2 Linux instances. Configure Security group for EC2 Linux instances.

Deploying, managing, and operating scalable, highly available, and fault tolerant systems on AWS using Auto scaling, Load Balancers.

Knowledge of monitoring, logging and cost management tools that integrate with AWS using Amazon Cloud Watch. Create Custom VPC for EC2 instances.

Configured NAT gateways to allow communication from private instances to the internet through bastion hosts. Experience with IAM.

Experience in SolarWinds, Splunk, Dynatrace, snow, duo, trend micro, CyberArk and tripwire.

Assign a level of privileges to both local and domain administrators and also add new users into the AD portal and delete old users who no longer work with the company.

Experience in maintaining CyberArk EPV for password authentication and central Policy Manager (CPM) where all account resides.

Experience in PKI encryption and decryption in the vault and CyberArk EPV.

Experience in managing vault logs and monitoring of CyberArk privilege account security tool module for implementing CyberArk PAM solutions for the company.

Perform ongoing performance tuning, hardware upgrades, and resource optimization as required. Configure CPU, memory, and disk partitions as required. Experience in AWS organization.

Experience with cloudtrail. Patch EC2 linux instances with Ansible Tower, yum tool and system manager.

Create a snapshot and backup with AMIs of volumes and also images to store launch configurations of the ec2 instances.

Configure storage on AWS S3 bucket and performed folder management in each folder, managed cloudtrail logs and objects within each bucket.

Experience in S3 Versioning and lifecycle policies to backup files and archive files in Glacier.

Configure and deploy Apache on the boxes.

Perform regular file archival and purge as necessary.

Investigate and troubleshoot failed Application.

Provide Tier III/other support per request from various constituencies. Investigate and troubleshoot issues.

Remediate solutions for security threats and vulnerabities for the nodes using Nessus Manager tool (Tenable).

Knowledge of Cloud Formation.

File transfer experience using FTP, SFTP, SCP, WINCP. Experience in docker.

Experience in incident management tool like opsgenie.

Create backups on the S3 bucket. Migrated data from on-premises to AWS using Server migration service.

Experience with AWS Backup AWS Data sync.

Experience with AWS organizations and Resource Access Management (RAM).

Understanding of AWS Elastic search, DATA PIPELINE, KINESIS, AWS config.

ZEN Analytics, Rockville, Maryland July 2018 to January 2019

Linux /AWS Admin/Engineer

Created users and groups using IAM and assigned individual policies to each group

Experience with ansible. Experience with CyberArk.

Hardening, Patching (Red hat 6/7, Solaris Servers using 10-Recommended patches), and upgrades (release), on standalone servers (using single user mode), and on production servers (live upgrade )

Installation, administration and troubleshooting CyberArk components like CPM, EPV, PVWA, PSM with AD and LDAP. Building CyberArk safes and adding different applications in the safes.

Knowledge on CloudFormation

Experience with AWS Backup and AWS Data sync.

Migrated on-premise servers to Aws using Server migration service.

Experience with security tools like TrendMicro, trip wire and Nessus configuration.

User Account Management, create, change, and delete user accounts per request, and troubleshoot user account password.

Created load balancers (ELB) and used Route53 with failover and latency options for high availability and fault tolerance. Experienced in monitoring metrics using Cloud Watch.

Experience in backup services like EBS snapshots, S3 backups and Amazon Glacier.

Experience in security policies like security Groups, IAM roles and multi Factor Authentication

Configure AWS Route53 to route traffic between different regions.

Configured security group for EC2 linux instances

Installing and maintaining the operating system and related software products

Participating in root-cause analysis of recurring issues, system backup and security setup

Provide 24X7 supports in Production Testing and Development environments.

ServiceNow to close age ticket in the system.

Experience in splunk, Opnet to monitor the servers.

Experience in TCP/IP, HTTP, HTTPS, DHCP, SSH, SSL, DNS, VPN, PKI; NFS

Installation and configuration of oracle database. System backup/Recovery.

Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary. Troubleshoot and resolve network issues.

Experience in VMware Exsi 6.4(build virtual servers and to monitor the servers (Linux, UNIX and windows).

Trinitech Consulting Inc., Beltsville-Maryland January 2017 to April 2018

UNIX / Linux Systems Administrator

Builds, Install, configure brand new virtual and physical servers, test, deploy Solaris 10/11, RHEL 6/7, Centos 6.4/7 servers to the network: OS installation and configuration – standard and advanced (kickstart), AWS EC2 AMI.

Managed and administrated of all UNIX servers, includes Linux operating systems by applying relative patches and packages at regular maintenance periods using Red Hat Satellite server, YUM, RPM tools.

User Account Management.

Experience in TCP/IP, HTTP, HTTPS, DHCP, SSH, SSL, DNS, VPN, PKI; NFS, CIFS, and samba servers in a multiplatform LAN. Configured the storage on AWS S3 buckets.

Experience working with IAM in order to create new accounts, roles and groups

Knowledge in MySQL.

Perform multiplatform volume management using LVM, ZFS volume manager, and VERITAS volume manager; installed and configure a LAN wide NAS (Free NAS) used for creating LUNs and attaching to windows 2008 servers and to Solaris 10 servers using iSCSi.

Experience in configuring Veritas manager and migration on unix servers

Basic knowledge in Bash Shell Scripting to schedule and automate

Experience in troubleshooting Solaris and Linux servers.

Experience in Solaris Zone (Build, configure, secure and deploy Solaris 10 system (global)

Build, configure, secure, deploy and migrated Solaris 10 local zones ( spare root or whole root zone)

Setup a domain and an Active Directory on a Windows 2008 server; install and configure a samba server on a Solaris 10 and mapping to the windows 2008 server.

Knowledge in LDAP configuration.

Responsible for data management using native Solaris utilities for archiving, compression backup and restore.

Experience in Apache.

Participating in root-cause analysis of recurring issues and security setup, Provide 24X7 support.

Experience in building and managing servers with VMware Exsi6.

Electoral Commission of Ghana, GHANA January 2012 to October 2016

UNIX /Windows System Administrator

Perform multiplatform Server builds on VMware, which include Windows Server 2008, UNIX Solaris 10, LINUX Centos 6.4, and RHEL 6.4. DNS addresses to Windows 2008 Servers so as to introduce them to the network. Use the “dcpromo” tool to configure DNS, Active Directory as well as to promote standard Windows 2008 servers to domain controllers

Administrated of all UNIX servers, includes Linux operating systems by applying relative patches and packages at regular maintenance periods using Red Hat Satellite server, YUM and RPM tools.

User Account Management. Build virtual servers from scratch and deploy.

Experience in troubleshooting Solaris and Linux servers.

Setup, configure and troubleshoot SSH, TCP/IP, DHCP, CIFS, DNS, NFS, and Samba servers in a multiplatform LAN

Windows 7 and configurations and software deployment. Create new User accounts and profile on Windows NOS, UNIX and LINUX systems. Troubleshoot and resolve OS, application, malware desktop related issues on various Windows NOS. Use TCP/IP troubleshooting tools to troubleshoot and resolve network connectivity and DNS related issues in the LAN.

Responsible for installation, configuration and administration or oracle 10g/11g database on SCO Unix, Linux and windows servers and an integral part of the backup and recovery.

Configure Windows NOS clients to join the domain as well as configure file and print sharing on some Windows NOS to enable resource sharing.

Knowledge in LDAP server.

Contact this candidate