SHARON VANESSA MUUNGO

Tel: 240-***-**** Email; adm0ed@r.postjobfree.com

IBM Guardium Security Administrator

Professional summary

Over 6 years of IT experience with 2 years as an Oracle Database Administrator and 4 years as IBM Guardium Administrator

Database Security Architect responsible for designing, architecture and implementing Guardium database infrastructure and monitoring solution.

Hands-on experience in installation and configuration of Guardium appliances, agents and creation of security policies for DAM, VA, CAS, FAM.

Coordinating the enterprise effort for database encryption using technologies such as TDE for data at rest and network encryption for data in motion

Coordination amongst different stakeholder groups within the enterprise necessary to implement the database security solutions (Database group, Infrastructure) group, Unix, cyber security, network and various application owners

TECHNICAL ENVIRONMENT

OPERATING SYSTEMS:

REEL 6, 7, Linux / Unix, Sun Solaris 11.3. AIX 5.1, 5.2, 5.3, 6.1, Windows 95/98/NT/2000.

RDBMS:

Oracle 10g, 11g, 12c, 13C,

Guardium V10, 10,5, 10.6, 11

LANGUAGES:

PRIMARY SKILLS:

SQL, UNIX Shell Scripting, Ksh, bash and Perl Scripting

IBM Guardium, PCI, SOX, MS SQL Server, DB2, UNIX, LINUX

SOFTWARE/ APPLICATIONS/ TOOLS:

DBCA, DBUA, Recovery Manager (RMAN), Oracle Enterprise Manager (OEM), OEM Grid Control, Oracle Data Guard, Oracle Management Service (OMS), Agents, sql Developer, TOAD, Exp/Imp, Data Pump (expdp/impdp), SRVCTL, SQL*Plus, Recovery catalog, Autopsy, Crontab, HP Manager, My Services, OTG, Guardium, Splunk, Oracle Audit Vault.

TUNING TOOLS:

SQL TRACE, TKPROF, EXPLAIN PLAN, STATS PACK, SQL*Plus, Oracle Enterprise Manager, Transportable Table spaces, SQL*Loader, RMAN, Data Pump, Export & Import, AWR, and ADDM.

WEB TOOLS:

HTML, XML

PROFESSIONAL EXPERIENCE

Metropol-tech Consulting Inc: IBM Guardium Administrator with Credit One Bank

Maryland / USA January 2018 – April 2021

Architect infrastructure design for the deployment of Guardium Database monitoring, reporting and alerting using IBM Guardium, assisting in ensuring database log management and monitoring standards are adhered to. Providing appropriate updates to IT management and assist in responding to audits as necessary providing solution for the entire enterprise (2500 databases on 400 servers).

Hands-on experience using IBM Guardium version 10.5, 11 database activity monitoring (DAM).

Experience with large scale Database Activity Monitoring System Ability to perform design, installation, performance testing, patching, trouble shooting and daily operational support using the IBM Guardium DAM tool

Hands on experience in Installation of Linux, VMware ESXI on Linux, all Guardium appliances Central Manager, Aggregator, Collectors.

Good at partitioning all my virtual machines with the right partitions 8 CPU, 32GB of MEMORY and 500 STORAGE.

Build Guardium appliances (Central Manager, Aggregators, collectors) and Agents ( STAPS, GIM).

Deploy and setup configuration for IBM Guardium to ensure collectors, aggregators, load balancers, agents (S-TAP, Guardium Installation Manager (GIM), and ATAP) and change Audit system (CAS) are properly installed.

Provides hands on engineering and operational expertise for Guardium infrastructure, including both VM and physical appliances.

Coordinate with other teams to implement encryption solutions enterprise-wide on all databases. This involves implementation of encryption of data at rest (TDE) and data in motion (network encryption) across various database management systems such as Oracle, EXADATA MS SQL server.

Research, design and engineer data protection strategies using IBM Guardium to ensure security, privacy, and integrity of critical data across a full range of open system platforms (Oracle, MS SQL, MySQL)

Develop and ensure Database Activity Monitoring policies/rules are setup in accordance with HIPPA regulation.

Utilizing in-depth technical/ project knowledge and business requirements to design secure solutions to prevent data leaks and automate Security Policy (CPNI-810) controls to protect company’s assets

Monitor and enforce security policies in real time for sensitive data access, privileged user actions, change control, application user activities and security exceptions

Support exception policies based on definable thresholds such as SQL errors. Use extrusion policies to examine data leaving the database for specific value patterns such as credit card numbers. Providing executive reporting showing threats and fraudulent activity.

Run, test and validate Guardium configuration settings and fully document technical and procedural requirements

Handle system changes for signature updates, patches and upgrades. Identifying of root cause analysis and permanent fix

Maintaining Guardium infrastructure such as patching appliances, upgrading STAP agents

Coordinate and implement Guardium agent installations during night time maintenance windows.

Proficient knowledge developing all forms of reporting, alerting and SEIM integration

Ability to work within a formal Change Control system (planning, documenting, scheduling and implementing)

Develop new approaches to ensure compliance with standards and identification of security anomalies through automation and implementation of enterprise database monitoring capability.

Implement advanced blocking and protection

Leading large projects to onboard application databases across heterogeneous environments to IBM Guardium.

Exercising independent judgment in methods, techniques, and evaluation criteria for uncovering internal and external risks

Using the Guardium portal, developing and maintaining activity monitoring reports in accordance with Enterprise Security Policies.

Use Splunk, Quereda analytics and develop user dashboards for forensic analysis for the collected data.

Provide direction and guidance to others in the group based on data security leveraging analytics to detect unusual data access patterns.

Familiarity with IT Regulations, PCI / Sarbanes-Oxley / Privacy laws

Working with all teams to investigate potential security violations, respond, and report accordingly. Additionally, analyst will perform continuous monitoring duties such as vulnerability assessments, manual configuration reviews, and event analysis.

Perform analysis of network traffic and security related events

Perform incident response, triage, and reporting

Operate & Utilize security-related tools/devices

Develop procedures and documentation related to the security operations

OTHER SKILLS

Strong written and verbal communication skills

Ability to work in a flexible work environment on a global team.

Able to communicate / present technical details to a wide range of audiences

Ability to work independently, leading meetings with application and development teams discovering and documenting detailed requirements

Junior Guardium Administrator

First Bank, Colorado springs, Co July 2015 to December 2016

• Identify trusted sessions sessions and load into appropriate Guardium groups

• Deploy and setup configuration for IBM Guardium to ensure collectors, aggregators, load balancers, agents (S-TAP, Guardium Installation Manager (GIM), and ATAP) and change Audit system (CAS) are properly installed.

• Develop and ensure Database Activity Monitoring policies/rules are setup in accordance with HIPAA regulation.

• Run, test and validate Guardium configuration settings and fully document technical and procedural requirements

• Develop new approaches to ensure compliance with standards and identification of security anomalies through automation and implementation of enterprise database monitoring capability.

• Implementing Guardium on various DBMS such Oracle, SQL Server, Exadata, Hadoop

• Maintaining Guardium infrastructure such patching appliances, upgrading STAP agents

• Working with application owners to develop and implement monitoring and reporting use-cases.

• Provide day-to-day IT services through the IBM SDS Helpdesk Ticketing system. For example, resolve system down issues in different OSs like Red hat, documenting fixes, working with vendors and configuring networks on various types of servers.

• Track and document hardware and software assets in the IBM asset management tracker.

• Maintained and wrote technical documentation and distributed out to IT team.

Golden Coverage Insurance Company,

Role: Oracle Database Administrator New York, USA/ Application dba Feb. 2014 – April 2016

Responsibilities APPLICATION DBA

Responsible for Oracle 10g, 11g, 12c and 13c logical and physical database design, implementation, and maintenance on Windows, Linux.

Managing over 27applications.

Deploying codes from one database to another and working on performance issues

Created new databases and users: set up backups, export, and other monitoring scripts

Implemented database refresh using full export for table level and full database defragmentation, resulting in improved performance and effective space management.

Managing database security. Design, develop, and implement automated data backup and restoration procedures. Provide technical support for database maintenance and disaster recovery

Identify, recommend, and implement all new database technologies and Oracle license management.

Migration from one plate form to another using transportable table space and import and export.

Requesting RDS servers for migration and configuring the database for migration.

Had done various projects using RMAN for Backup and recovery, Data guard for Disaster recovery, Installation, Configuration, Migration, upgrade, cloning, patching, Performance Tuning.

Excellent experience in Installation and configuration of different databases on Operating Systems UNIX and Windows platforms.

Planned and scheduled the Physical backups as well as Logical backups.

Experience in management tools like Oracle Enterprise Manager, TOAD and SQL Developer.

Provided 24x7 Remote / on-call production supports.

Intense knowledge of 12c (work on cloud databases) migration from 11g to 12c using transportable table space.

Extensively implemented Data pump, conventional Export/Import (Oracle 11g, 10g) for migration and logical backup of database.

Strong skills in applying security patches (Patch set, Critical Patch Updates (CPU) / Patch Set Updates (PSU), One-off Patch) using “run Installer” and Perl based utility “Opatch”.

Performance tuning of the database – SQL Tuning, Used Tuning utilities like STATSPACK, TKPROF EXPLAIN PLAN, AWR, ADDM and Tuning of SGA, distribution of disk I/O.

Supported Security User Management, Privileges, Roles, Auditing, Profiling, Authentication.

Monitored and performed database sizing, tablespace management and rollback tablespace management, transaction management and security administration.

Database monitoring and performance tuning using OEM (Oracle Enterprise Manager)

Index creation and management for optimization of DB Processes

Used Grid Control extensively and set up Rules for alert notification and schedule RMAN backups with Failure notification

Performance tuning and diagnosing DBMS and individual Production databases, organized various migration review meetings with the application team to discuss the migration strategy based on their requirements.

Performed policies on data confidentiality, integrity, availability, and auditability, based on Access controls for Access to Data at the database level.

Performed SQL tuning oracle contention and monitored production database using Automatic Workload Repository (AWR), Automatic Database Diagnostic Monitor (ADDM) and Automatic Session History (ASH).

Highly experienced in Oracle 12c, 11g, 10g Automatic Storage Management (ASM) required to fulfill the storage needs.

Installed, configured and maintained Physical, Logical, Active standby databases supported by Data guard on Oracle 12c, 11g, 10g servers for the purpose of disaster recovery procedures.

Supported & maintained the Production/Development databases on various servers

Managing Database Structure, Storage Allocation, Table/Index segments, Rollback Segments, Undo Segments, and Constraints.

Database reorganizations and refresh schema-using Export/Import. Creating the database, table spaces, tables, indexes, setting privileges and user login

Performed Explain Plan analysis for Query Optimization and SQL tuning

EDUATION QUALIFICATION

Associate degree in Applied Economics

SQL Fundamentals

IBM Guardium Administrator V10

Contact this candidate