ANGELO CLARENCE MAYS

**** ******** **. ******, ** 20706

240-***-**** / adzl8d@r.postjobfree.com

https://www.linkedin.com/in/angelo-mays-5a35114/

US Citizen

CERTIFICATIONS:

Microsoft MCSA 2016, MS AZURE, DELL/EMC VCE-CIA, Cisco-CCNA, Certified Security Professional (CSP), AMA ISO9000, ITILv3, security+, VMware VCA-DCV, AWS Cloud Practitioner, Oracle OCI, GCP-Google Cloud.

EDUCATION:

Strayer University - Accounting

WGU – Information Technology /Cyber Security (current)

ASM - Cisco CCNP / CISSP

American Management Association - Supervisor and Management training

TOOLS:

Rack Wise, Nessus, vFoglight, CyberArk, Nagios, Spectrum, Remedy, HP-Insight Manager/OpenView, Dame Ware, LANDesk, MS SMS/SCCM, Ghost, Bomgar, RSA Security, Backup Exec/NetBackup, Splunk, IP monitor and traffic analyzer, What’s-up-Gold, Snort, Dragon 6, Sourcefire, Net Forensics, SolarWinds, Wireshark, SNMP traps, Remedy, track-it, Heat, Scripting with PowerShell/Python, BloodHound, IBM-Qradar, Qualys, Tenable-Nessus, Rapid 7, Splunk, EDR technologies Crowdstrike, Carbon Black, Microsoft Defender/, Cylance, McAfee EPO

PROFESSIONAL EXPERIENCE:

IT SME/Consultancy: March 2020 - April 2023

Short term projects:

End Point Vulnerability Management:

Configuration management and compliance, hardening images, creating new golden images and imbedding security apps/tools.

Remediation of open vulnerability per Tenable/Nessus- scans. Configuration/Implementing and administration Microsoft

GPO Reviews and updating, managing changes to Bit locker. Managing and controlling end point devices with McAfee- FRP/ EPO

Created Catalog for Offline image/rules. Monitored automated DLP (AI) Data loss quarantine files, recommended turning adjustments.

Manage Engine Endpoint patching and remoting, security SEIM, End Point management

Assisted in testing of Xilinx Endpoint PCI Express. Patching updating OS and apps

Setting rules for new image creation and documenting the creating and capturing process/task sequences.

Deployment /push process - Setting up deployment Share in MDT.

Conduct research and analysis to stay up to date with current vulnerabilities.

Utilize multiple data sources to determine a vulnerability’s security impact on the enterprise.

Cloud Vulnerability Assessor:

Performed ongoing, comprehensive vulnerability assessments of network cybersecurity to manage and mitigate vulnerabilities and risks in a multi-site enterprise environment.

Monitored the adequacy of cybersecurity measures for information systems and reported vulnerability findings.

Utilized systems tools / data sources such as network discovery, network, host and port vulnerability scanning, penetration testing, (Synopsys fuzzing, Nmaps, AppScan, Qualisys/Nessus)

Assessed IT systems assets conformity to corporate configuration/security policies. Identified security vulnerabilities and exposures using Common Vulnerabilities and Exposures (CVE/CVSS), cyber threats, and vulnerability mitigation strategies.

Applied cybersecurity and privacy principles to organizational requirements (confidentiality, integrity, availability, authentication, non-repudiation).

Acquired a detailed understand of network security architecture/topology and protocols.

Researched discovered weak or inadequate security practices/policies and identified secondary effects of vulnerabilities and exposures, as well as the impact of the mitigations applied to downstream apps/network/access.

Researched weak applications security controls, working with Internal development teams to validate security of cloud applications.

Reviewed vendor authentication processes in SaaS, enforcing MFA policy, reviewing APIs and/or encryption or tokens.

Regularly auditing the cloud service access – Reviewed permissions to applications.

Monitored access between private and public resources, cloud network configurations and ports. Monitored connectivity between your private network and the cloud systems.

Provided a consistent methodology for defining identities, roles, and settings for granular role-based access permissions to cloud zones/storage/services and applications.

Reviewed and resolved misconfigurations in storage and container settings – Restricted container privileges to least privilege level and specific groups/users and reviewed encryption settings/levels on storage.

IT Engineering SME (Systems/Network/Cloud & Security) :

Tier 3 support for all application and connectivity issues (remote (SAAS) and onsite application.

Daily Snapshots and backups for on prem compute and Azure/VMWARE compute systems.

Server and cloud applications monitoring and security / connectivity support / troubleshooting,

Nessus Scans and remediation (patching, wrapping, hardening, or updating). Application / Systems and Security patching

Supported site services with DirSync, ADsync, replication to cloud and websites

VMware Vsphere 7 and Azure hybrid site infrastructure administration/updating/maintaining.

YEALINK VCMS Cloud IP phone support/admin

Managed Cisco-Meraki cloud controlled, firewalls, wireless and switches and cameras

Updated Web Filtering and security application and procedures (ports, MFA, Endpoint, DNS, NAC/NAT)

Tenable Nessus scanning, Cylance endpoint management, VPN encryption.

Installation / configuration SME:

Installed configured HP secure server and storage environment for on prem data storage & backups

Racked, imaged and configured HP DL 380 servers.

Installed virtualized environment (VMware Vsphere 6.7)

HP MSA dual controller Fiber channel storage, 3 shelfs with attached MSL tape backup for offload secure data.

Configure virtualized LUN volumes and secured storage/backup group/volumes with Netbackup. Setup auto management for vault access of encrypted data.

Performed systems performance, firmware updates and lifecycle testing

DataCenter Support :

Performed site surveys in various Washington DC area datacenters, supporting new acquired customers.

OS/Systems reviews and VM inventory and health checks

Rack inventory, hardware upgrades and testing.

IP/name/serial reviewing and updating.

Device serial number capturing and matching

Remote Access/Systems/Application support (WebX/Teams) :

Various educational projects assisting in remote connectivity and remote classroom due to pandemic: Helping organization support their remote work staff, helping with VPN/Remote Access, security updating / EDR & monitoring. Systems updates and managing meeting apps/infrastructure, TEAMS/GOOGLE MEET/WebX support.

American Federation of Teachers (AFT), Wash, DC. Aug 2019 - Jan 2020

Sr. Manager, IT Security (Systems and Applications)

As security manager, I provided leadership on current and the future direction of IT security enterprise. Providing insight on the impact and benefit of such systems by working with the software team, application implementations and systems configurations to meet performance and risk level goals.

My responsibilities included identification, tracking, mitigation, remediation, and verification of security vulnerabilities in software, systems, and application services, including network and application security of the organization.

I developed IT security incident procedures and policies for IT security responses and escalation procedures to ensure timely and effective handling of all security situations.

Participated in development and engineering processes in support of security operations and coordinated application security processes

Participate in all aspects of technology security service delivery including business case development, requirements analysis, architecture, design and development, product/service selection and procurement, testing, technology infrastructure implementation and deployment, operational process and procedure documentation, training, and internal marketing of security services.

Produced and defend sound technical arguments that incorporate relevant technical and business considerations, as well as experience building consensus among stakeholders.

Monitored security risk of the organization's application portfolio for risk determination, status tracking, and risk acceptance/mitigation processing.

Proactively engaged software dev and product management stakeholders to ensure timely resolution of all security exposures.

Reviewed penetration testing, IP port scans, IDS configurations and management, AD policy management, access controls, wireless security, VPN and encryption.

Oversaw and supported the security assessment of applications using as source code analysis (AppScan-SAST/DAST), web Penetration & vulnerability scanning (Nessus and Qualys), and other testing techniques (Burpsuite).

Hardened organizations OS’s and secured services and apps: VMware ESX (MS Server 2008 & 2012, 2016, Windows 7, 8 & 10 (desktops) Microsoft SQL Server 2005, Exchange 2007/10, Exchange Online, VMWare, SharePoint 2010/2013, Citrix Xen, O365/One Drive and AWS cloud based initiative.

Encrypted sensitive data a rest, maintained an enhanced security changes and file moves using Varonis

Managed installation and configuration of ForcePoint DLP and Varonis for file and data security.

Upgraded to Meraki wireless WAPs and access switches with cisco amp

Cisco ASA/Firepower, Palo Alto/Cortex, Cisco Umbrella and Web Application Firewalls (WAFs),

Managed SOC using CrowdStrike Falcon endpoint protection with remediation and threat intelligent services.

SEIM implementation, (Splunk Enterprise) Security-log and security event ingestion and visibility.

Coordinated departmental and cross-functional processes and projects; champion application security programs.

Drove effective scheduling, risk and issue management and change management for initiatives in an agile environment.

Georgetown University-UIS, Wash, DC. Jan 2019 – Aug 2019

Sr. Infrastructure Engineer / Site Reliability (Cloud migration project)

Primary administrator/manager of virtualized datacenters, in a VMware Vsphere/Horizon. (3 datacenters active/active)

Administering the management of services, app, school clustered host with HA/DRS enabled datacenters

Compute, Network and Storage services in interlinking environment and cloud resources. (Netapp cloud and all Flash on prem)

CI management, planning, migration and operations GU-IS cloud and on-prem sites/data centers of Windows server(2012r2 / 2016) and Red Hat / CentOS LINUX servers and applications

Assist in security review, configuration management, connectivity and performance of these systems using (LDAP/AD/Google DirSync)

Software installation and ongoing maintenance, Dev/test environment.

Migrated McAfee EPO/EDR toTanium-EDR/security for integration of all Windows and Linux systems managed by NCS.

Worked with engineering/Security and operations staff to design new systems with end users cloud desktops/apps, (Google Workspace/G-suite)

Assist in creating new GCP cloud, security zone, labels, landing zones and site automation

AWS application and security monitoring, VPC and network segmentation updating.

AWS site configuration and resource management

Assisting in future planning to create a full SAS environment

Terraform automation/Powershell scripting for container management and application update and migration.

Integrating monitoring API to cloud, upgrading ingested logs and end points, (Splunk, Nagios, Solarwinds )

password and sensitive data vaulting using CyberArk and HashiCorp Vault

Powershell scripting for site and compute service management.

Researching new technologies and assess their applicability to Client needs especially related to the security and integrity of Windows and Linux systems.

Assist in testing new products, technology, automation and configurations in the testing lab/sandbox (Powershell and Python);

Provides assistance with integrating business units into (right sized) server/compute infrastructure to provide best performance, greater up-time, and least cost

Scheduled patching, application maintenance and upgrades both as automation packages and SCCM or YUM.

Disaster recovery testing and systems preparedness, (Veeam backups/Netapp snap & replication), directory synchronization, NFS/SMB systems security.

Member of project team/Agile Kanban.

Prince Georges County, MD-OIT– Office Information Technology, Largo, MD. Feb 2018 – Nov 2018

Security Engineer/Architect (Contract Lost funding/No-fy19 funding)

Ensured products and systems comply with requirements and government information assurance and cyber security standards and practices through formal verification methods

Performs systems configuration and architecture security monitoring and alerting.

Records and reports concerning server operations and maintenance.

Reviewed firewall configurations (Palo Alto) and analyzes network traffic

Used ForeScout CounterAct for end to end visibility and NAC control.

Change management team member, leading Secure SDLC (System Development Life Cycle) methodologies and Agile process

Windows server administration in virtualized VMware\Hyper-V infrastructure, IIS app fail over clusters w/ load balancing

SCCM/WSUS patching, created new enterprise patch policy and testing domain.

Reconfigured the DLP and backups to mitigate gaps in jobs, stored images and archiving.

Assisted in reviewing and updating the DR document: COOP Continuity Plan, Disaster Recovery /Business Resumption Plan, exercise checklists, post-exercise surveys. (EMC Avamar)

EMC Data-Domain/DLP, Recover Point, EMC Avamar snap shots and backups.

Re-Designed overall patching/remediation security process and review.

0365 mailbox password security, MFA-2FA/SSO and OneDrive docs encryption and email and doc retention.

Installed new security tools/control applications, including ML tools: Cylance, Varonis, Palo-Alto AIOPS

Installed and configured password Vault and password rotation (CyberArk PAS)

Upgraded to secure cloud Meraki wireless controllers

MDM migration: remaining Jamf pro and BES accts to Cisco Airwatch.

Installed, registered, configured and users accts and device over to Cisco AirWatch MDM

Okta Integrated MS 0365 2FA/MFA, Manage PKI cert installs, managing list/DB (Verisign)

Documented security operations, network diagrams and security best practices and recommendations.

SIEM : Splunk, Solarwinds, EnCase,AppSCAN-App/Dev, Nessus Tenable-system scans & Qualys web scan

EDR- McAfee Endpoint / Cylance, ForeScout.

POC setup and testing for a new EDR systems (CrowdStrike vs FireEye)

Assisted in developing, implementing, and maintaining policies, procedures, and programs for ensuring the security and integrity of company data, databases, information systems, and technology.

Mitigated risks from computer security incidents by providing practical guidelines for users and Engineering response.

Participates in risk management analysis and assists with the creation of business continuity plan.

Configured hyper converged Cisco UCS, Dell VxRail (Vshere/Vsan/NSX-T) platform with Windows server OS

Demonstrates SME knowledge in Network Security, Secure Remote access, Firewall Management (Palo Alto), Cisco Umbrella.

Configured Splunk SEIM to ingest device logs for dashboard creation and alerting and troubleshooting.

Security Information, Event management, Log shipping and review

Server OS hardening based on NIST / DISA standards. / secure images and firewall configurations

DNS/DHCP configuration, segmentation of and vulnerabilities assessment(SNMP traps/HoneyPots)

Cloud implementation framework and analysis AWS federation/integration plan/security

U.S. Housing and Urban Development (HUD), Washington, DC. Jul 2017 – Jan 2018

Cyber Security Team Leader

Managed security programs for HUD Department of OIG. This encompassed a variety of IT security products, systems, networks and security team members in a large and complex Government enterprise.

Daily interaction with the federal Information Security Officer to coordinate information assurance actions, investigations and remediation of cyber security vulnerabilities within the enterprise.

Coordinated with organizational security team members and operations staff to ensure program consistency and compliance with all security procedures and requirements.

Ensured knowledge of organizational and agency level security requirements and ensured that systems and personnel comply with these standards.

Daily standup & weekly management meeting (agile process for POA&M CDM project)

Change management/Project management planning/workflow, reporting and ticketing using ServiceNow

Worked on CDM project and ensured that systems records are maintained and are promulgated to proper staff.

Investigations and remediate security events, vulnerabilities from SIEM and daily scans: Qradar/Tenable Nessus.

Identified risks/vulnerabilities in applications, systems and networking infrastructure, worked with technical experts to resolve.

Participate in monthly change management to do systems patching or security implementations and/or reconfiguration.

Created push packages for Server Ops (Big Fix/WSUS/SCCM).

Maintained security updates and systems scans (Tenable Nessus) and systems/server hardening (STIGS). (SCCM/WSUS, application and system/laptop OS build harden (templates) Microsoft Defender

VMware system/security updates and Host firmware maintenance planned and deployed countermeasures.

Created and updated project plans, project cost estimates, project recommendations, status reports, scorecards, and executive presentations.

Created, installed and maintained self-signed and external SSL/PKI Certificates.

Created technical docs, worked on project/design for proposed SSO and MFA-2FA implementation

Administered Palo Alto and Cisco ASA firewalls, PA-5020, VM700 & VM500

Performed Web Application Penetration and Intrusion Testing and methods and the deployment of safe and secure code/systems based on sound code/design and implementation techniques. (DAST/SAST)

Managed Cisco ISE policies and Vulnerability management, Cisco -IDS/IPS, EDR-Symantec End Point

Reviewed and updated both DLP data loss prevention and disaster recovery plan and configuration.

Ability to conduct assessments of systems for compliance with applicable security frameworks (such as NIST 800-53, 800-171)

Configured and managed encrypted/secure emails. (MS 0365 integration, MDM, Azure AD Connect, IAM & vault passwords).

Palo Alto Firewall admin / security and connect via firewalls to SFTP / VPC connection to remote offices / cloud

System monitoring and security metrics using MS SCOM, Splunk, Wireshark, SNORT packet analysis

Installed and configured Cyber-Ark, Vault admin and SQL server administration.

Manage/administered risk assessment and data security using Cyber Ark Admin/SME, RapidFire tools

Projects: Splunk implementation, Veracode App Scanner,Symantec DLP, MDM migration and cell device encryption/Apple DEP (from MOBILE IRON to IBM MAAS360), WEB App and site control/filtering through Forcepoint, Symantec’s End Point Management (SEPM)

KPMG / IRIS SOFTWARE, Wood Cliff, NJ Jul 2016 - June 2017

Sr. Infrastructure Engineer (MS–Hyper-V/Azure Stack) (project )

Maintain physical server infrastructure, Cisco UCS C220/HPE C-7000 blade systems, EMC Vblock system

Advanced SAN Management including FC Zoning (Brocade) HP Nimble, and 3Par storage

Manage Windows Systems infrastructure, Server 2003 through 2016/ RedHat Linux/Oracle

P2V remaining physical servers into Hyper-V, support IIS farm, MS SQL clusters.

Build/maintain/triage VMware 5.5/6.0/HA datacenter and clustered MS Hyper-V 2016 private cloud (AZURE/MS VMM)

Deploy cloud applications and management of MS Azure Stack.

Manage day-to-day Engineering 'Peer' interaction and direct business unit interactions.

Azure resource management: ARM, Azure AD/ Hyper-V / AZURE stack application and post-implementation client support

Automation/Orchestration tools (Jenkins, Ansible, Powershell)

Manage enterprise LDAP and MS Active Directory, account creation, permission attribution, GPO, local and domain security policy and standard NTFS permissions.

Network resource configuration/allocation LAN/WAN/DMZ – TCP/IP, VLANs, VIPs/load balancing, Cisco R&S (Catalyst/Nexus)

Configured and managed encrypted/secure emails for password rotation (MS 0365 integration, Azure AD & vault passwords).

Inflobox DNS automation and security installation and administration

Palo Alto Firewall admin / security and connect via firewalls to SFTP / VPC connection to remote offices / cloud

System monitoring and security metrics using MS SCOM, Splunk, Wireshark, SNORT packet analysis

Managed and protected critical customer data and data access with EMC DataDomain and CyberArk 10.0

Install and configured Cyber-Ark, Vault admin and SQL server administration.

Manage/administered risk assessment and data security using Resolver and Microsoft Defender/EDR and RapidFire tools. Defender

Capacity management of private cloud resources (trending, forecasting, decommissioning, reclamation of vCPUs/vMemory/Storage)

USDA, Washington, DC Jun 2014 – Jul 2016

Sr. Solutions/Systems Engineer (Fed Ramp/Cloud Migration)

Key participating the architecture, design, and implementation of IT infrastructure to support Data Center consolidations and migrations to cloud and hyper-converged Datacenter (EMC/VMware ESXi,Vsan).

Supported customer datacenter migration to private cloud and replication to public cloud providers. (AWS/AZURE)

AWS Dev Workspace creation, AD connect and managing group access/policies

Assisted with developing physical and logical infrastructure designs, migration of business apps, web based and/or client-server

Installed and managed business unit’s application deployments. (COTS, WEB/IIS, Custom Apps, hosted Apps SaaS)

Migrated MS SharePoint farm to AWS

Supported network Infrastructure and application integration to Windows 2008r2/2012r2and Linux Operating Systems.

Planned, installed and managed POC Citrix Xen desktop VDI (Nutanix1000)

Collaborated with customers/peers to understand business requirements and define requirements and/or solutions

Supported multiple customer projects and technologies, interfacing with IT organization as well as other internal business units and external customers/partner

SSO through Citrix Getaway and cisco access manager for secure remote access and GOV and COTS applications.

User access security and file controls using IAM, Forefront, SSO, ADFS & Rights Management

Meraki secure cloud installation/ WAPs

(Fortinet & Cisco) NAC(Network Access Control), PAC (Privilege Access Control)concept/firewall rules and ACL, IPS, IDS;

Performed Nessus Security Scanning and reporting and planning support for remediation

Hardware- NetApp/EMC and Dell R7XX (Dell R7XX, HP DL3XX\G7) / Cisco UCS platforms

Used Hyper-V &VMWare technology, (Vcenter, vCAC/Realize, RecoverPointV3, VSan, vSRM),

Application technologies (.NET, JBOS, etc.), software dév, XML, HTML, PHP DB implémentations (MSSQL, Oracle H/A clusters)

NIST/FISMA (FIPS-199, SP 800 -- 53A controls), FedRAMP concepts and NIST defined Risk Management Framework (RMF)

Created, Managed and monitored day-to-day systems admin and maintenance of AWS cloud compute/storage EC2, RDS, EB2.

Systems administration, configuring, updating, monitoring and cloning/templates of win 2008r2 servers.

VPC site connection (USDA private to public AWS cloud)

Automated the ccreation of IAM accts for new employees and maintain application access for all services using powershell.

Created AWS resource group and application access secured with SSL certs.

Created AWS access dashboards, publishing user application and resource access

JIRA administration, workflow development, forms, email handling, permissions and Confluence Administration.

Testing of API’s to connect to JIRA and Confluence and other applications.

Tableau server installation, configuration and administration - Visual Analytics, Business Integration, Web & Mobile Authoring

Load balance Public facing IIS configurations (F5) and security and pen testing.

Supported EMC Data Domain/Veeam backups, COOP/DR and built a secondary remote cold/DR Site, installed/configure site to site replication of budget/finance data

Managed backend storage devices and space allocations (LUNs and clusters) 3Par, EMC NAS,

Managed server security scans using Nessus making sure servers met NIST & FISMA security standards.

Server patching and vulnerability remediation using Tenable Nessus, Big Fix and WSUS

Configured SNMP Traps, patching, Symantec Endpoint- HIPS/HIDS protection. Remote admin using Dell Open manage, Problem resolution/Ticketing in Remedy.

Air Conditioning, Heating, and Refrigeration Institute (AHRI), Arlington, VA Jul 2011 - May 2014

IT Manager

Managed vendor relations with contracts and outside consultants.

Led Change management and Dev implementation schedules and review (SDLC).

Provided resolutions to an assortment of technology and business unit problems (MSSQL DB, MS Dynamics/GP, MS SharePoint 2010, Membership Management System, MS CRM

Migrated XP to Windows7; configured and Managed VM view/Horizon VDI (virtual desktops).

Administered Aruba wireless controllers and WAPs (7000, 100/300)

Administered Cisco Networking: switches 3750G/poe, routers 28xx, ASA firewall,VPN/VLAN’s/NAC

Administered VoIP systems (Shoretel v 11.1)

Blackberry / Iphone MDM configuration/w active-sync/SSL, (MOBILE IRON)

Managed Exchange 2007, Barracuda Spam & ProofPoint security/ Initiated DKIM/DMARC Mail security program Agari

IIS configuration for both webmail and Dev support

Exchange 2010 upgrade/migration and administration. Migrated PST into exchange 2010 (off local PCs) / migrated boxes to O365

MS SQL 2005/2008 multi node (H/A), Windows server 2003 2008R2 with AD/DNS/GPO.

Dev team infrastructure builds and Dev BI liaison / server/internet support and remediation

Symantec Backups exec 2010, enterprise vault.

Tools/Hardware: Servers HPE Blade C7000 and Dell 2450’s, Tandberg tape library LTO4, NetApp FAS NAS’s, Hewlett-Packard MSA SAN with FC switches, VMware 4.1 ESX, Vcenter, RedHat Linux.

Worked with offsite datacenter to ensure DR and HA plan was tested, viable and continually updated.

Load balanced site to collocated connectivity and replication using Recover Point and acceleration with F5.

Identified and addressed issues associated with new enhancements/releases

Worked with director to ensure SDLC methodology are adhered to during projects/enhancements

Updated/established user and system configuration documentation with new processes information

Provided IT infrastructure project updates in monthly management and team meetings

Worked with application and web development team to maintain test systems, build new test platforms, and update existing images with application tools.

McAfee Epo, Red Canary monitoring and Tenable scans for patch and remediation, patching using SCCM/WSUS.

Updated system configuration information (visio)

DHS-FEMA, Crystal City, VA Mar 2009 to Jul 2011

Project Leader-Technical Team Lead Network and Systems Engineer (contract/consultant)

Built a POC system with redundant and integrated multiple DR/HA paths, managed the project milestones and timelines, managed weekly meeting with customers and vendors for HP TRIM/TOWER FOIA Project.

Built, Installed and configured 2 HPE- blade C-7000 enclosures.

Installed and configured HP MSA 2000 SAN (HP Storage works).

Virtualized system for maximum high availability and redundancy using VMware 4.0 ESX with guest OS on SAN

Performed system backups utilizing Veeam, disk and LTO tape

Monitoring site using HP Open view and Insight manager

Chaired weekly meeting providing detailed updates and milestones, problem remediation steps to all department heads.

Led weekly business team change meeting to the automated process and system updates or security updates for FOIA automation processing.

Oversaw testing of HP TRIM and integration of Exchange 2007/Outlook, Analysis Apps, MS Project and other 3rd party Apps.

Worked directly with vendors to assess and modify product, created and pushed packages via SCCM 2007

Created test plan and cases, documented results and systems documentation creation using Visio application flow and hardware infrastructure network.

Installed and configured HP Procurve switches 26XX (VLAN’s, Trunks, tagging, port groups, etc).

Installed, configured, and administered MS Server 2003/2008, DNS, Active Directory, Clustered Exchange 2003,Clustered-MSSQL 2005, SharePoint 2007

Migrated 2003 Active Directory native infrastructure to MS 2008 server network

Administered and monitor Ethernet work using HP Insight Manager, Virtual Connection Manager, Onboard Administrator and MS Systems Center Manager.

HP Firmware updates and BIOS updates (blades chassis, SAN controller and Servers)

Lab security engineer, directly reporting to CISO and DHS project manager.

Installed and configured system security using MS Forefront, EDR-McAfee EPO, Tenable Nessus Server Scans \ vulnerability remediation using Nessus.

Server Patch management using Big Fix/WSUS.

server Image creation and hardening to NIST/FISMA/DISA standards

Installed/configured and administered the TRIM/TOWER application.

Aljazeera International, Washington, DC Oct 2006 to Mar 2009

Broadcast Systems/Network Engineer

Performed broadcast network admin and support (High Resolution HD video over IP network)

Supported and managed the Thomson Grass Valley TGV network over a fiber network. (fiber channel, SAN, NAS, MS SQL Clusters failover nodes) Brocade switches

Installed and administered/supported Solaris 9/Red Hat Linux servers, MAC OS/Parallels and Wintel HP/Dell servers/W MS server 2003, GPO, DNS, Active Directory,

Cisco routers, Cisco ASA, Cisco Core and access switches (VLAN), WAPs, controller management/monitoring(Ethereal/

Contact this candidate