Sr. Architect, Sr. Software Engineer, Sr. Infrastructure Engineer

Hernan F. Cortez

Cellular: 727-***-****

Email: ********@*****.***

Consultant / Sr. Architect with over 20 years of Infrastructure and Network Management, Engineering and Mobility experience. Detailed oriented with strong problem-solving, work ethic, communication, interpersonal and teamwork skills, my areas of expertise include: Skill Set To Offer

Public Cloud

Microsoft Azure Cloud deployments of multi-tier networks and Cassandra NoSQL implementations, Load Balancers, Ingress Rules using Powershell. Deployment of resources

(Virtual Nets, Subnets, Public IP, Storage) to host in-house applications using Terraform. Use of Azure Kubernetes Service (AKS) to containerize applications for cost-saving solutions. Use of Azure Cloud Cost Optimization Tools (Cost Analysis) to make informed spending decisions. Software Development

Responsible for system architecture, design, testing. Manage integration of PaaS offerings and underlying IaaS offerings. Provide guidance and design expertise to technology platform SMEs for PaaS engineering efforts. Next Generation Infrastructure Delivery Initiatives. Release Processes and Continuous Integration Tasks. Configuration Management using Chef. System / Cluster Monitoring using Prometheus and Grafana. Proficient in using Copilot to automate tasks, streamline processes, and improve workflow efficiency.

● Data Analysis

Use of Python v3.9 / Pandas for CSV table comparison and data analysis to extract data from Inventories for standardization.

● REST API Development using Java v11, Springboot, React / Javascript for Dashboard development to display API status. Webix JS Rapid Development. Continuous Integration / Continuous Deployment (CI/CD) using Jenkins Declarative Pipelines and CyberArk Vault for authentication. Request Library, parsing JSON files. Python v3.9 - use of Pandas for data analysis.

● Microservices Implementation using Software development (using Java, Springboot, NodeJS, React) of containerized applications using Kubernetes pods, PostgreSQL databases, Jenkins Declarative pipelines and Role Based access Control (RBAC). Sidecar and Health Checks implementation using Python, Prometheus Alert Manager, and Docker Compose configurations.

● Infrastructure as Code (IaC) implementations of Software Defined Network using CoreOS, migration of Kubernetes pods and containers from Openshift Origin on-prem private cloud to HCC Kubernetes using Helm Charts for pod configuration and management, use of Jenkins Declarative pipelines for application deployment and CyberArk Vault for authentication. Deployments using VMWare VRealize Automation

(vRA) and VRealize Orchestration (vRO) using REST API calls, integration with Jenkins and CodeStream using REST APIs. API Gateways (Kong). Networking / Mobility

● Software Defined Networks using Kubernetes and Openshift clusters. L2/L3 (Flannel, Calico) Container Network Technologies, F5 Load Balancers (GTM, LTM) configuration for end-point access. Ingress/Egress rules.

● Wired / Wireless Networking Experience with network configurations for mobile

/wireless networks using AT&T custom APNs, Verizon Wireless Private SubNet services. Experience in implementing secure measures within hosting architectures (e.g. firewalls, IDS, VPNs, OS hardening, Anti-Virus, and Vulnerability). Experience setting up wireless VPN tools like Netmotion Mobility to manage cellular / wireless clients that connect to private networks. Proven ability to implement WAN hardware components, manage networks in large scale heterogeneous (Windows, MacOS X, Linux, UNIX) settings, within large enterprise 7/24 Mission Critical environments.

Extensive hands-on system and network administration experience with the following hardware technologies: Microsoft Windows servers 2019 on Dell PowerEdge, Blade Technology, and Proliant) server hardware, custom configuration solutions for workstations (Dell Optiplex series), notebooks (Dell, Panasonic rugged and semi-rugged notebooks), Cisco ASA 5000 Series, Cisco Routers, Cisco 3030 Concentrators. Experience with TCP/IP Networking, Disaster Recovery, Windows Load-Balancing, Clustering; smartphones (iOS, Windows Mobile, Android). Strong knowledge of wireless networks (cellular: GSM, CDMA, 802.11a/b/g/n). Ability to troubleshoot Microsoft networking and server issues using appropriate monitoring and diagnostic tools (WireShark) on multiplatform. network configurations, services, routing and related protocols, and LAN/WAN troubleshooting /support. Security, vulnerability, and threat management Monitoring vulnerability status of Virtual Machines (VM) (servers and workstations) using Tanium endpoint management [AWS Cloud]. Replace file versions and update Windows Registry values using Tanium scripting tools

(Questions). Vulnerability patching (servers and Windows 10/11 workstations) using Tanium Patch/Deployment functions. Trend-Micro Agent deployment using Tanium for infrastructure security and threat management efforts. Experience with intrusion detection and prevention systems (Host and Wireless based), OS hardening, Symantec End-Point Protection Antivirus. Knowledge of ITIL processes including Incident, Problem, and Change and Service Request management.

PROFESSIONAL EXPERIENCE

March 2015 - Present

Sr. Infrastructure Engineer

Monitoring vulnerability status of Virtual Machines (VM) (servers and workstations) using Tanium endpoint management. Replace file versions and update Windows Registry values using Tanium scripting tools (Questions). Vulnerability patching (servers and workstations) using Tanium. VM migration (V2V) using VmWare vCenter Converter. Monitor VMs within vCenter and day to day operation cloning, backing up, metrics status. Hardware inventory consolidation using Python (Pandas) scripts. Disk Array firmware updates. Disaster Recovery. Trend-Micro Agent deployment using Tanium for security and threat management efforts. Use of Kubernetes to deploy monitoring tools like Zabbix, update Pod configuration using ConfigMaps, provide Persistence with the use of Persistent Volumes and Claims, update Pod configuration (install drivers) by connecting to Pod and running updates on live Pod. Create Octopus RunBooks to automate tasks. Use of Elastic APM and Splunk to determine REST API end-point health. Use of Solarwinds to monitor MSSQL database and REST end-point health. Sr. Software Engineer, UnitedHealth Group / Optum, Seminole, Florida Service API development and validation using Java v11 and SpringBoot (API calls) and React / JavaScript Framework for front-end Dashboard to display REST API status and validation results. Microservice Pod and Container migration from Red Hat Openshift Origin clusters to Kubernetes clusters, using Helm Charts for Manifest configuration, Jenkins Declarative pipelines for application deployment, and CyberArk Vault program calls for authentication. Microservices implementations using Kubernetes AND Openshift clusters. Building Development Harness in Kubernetes with Kafka and Zookeeper configurations. Sitescope with OPSBridge configurations for critical REST API endpoints monitoring. Java, SpringBoot REST-API development with React, JavaScript dashboard to monitor API status and level of compliance. Sr. Architect, UnitedHealth Group / Optum, Seminole, Florida Service API development and validation using Java and SpringBoot (API calls) and Webix JavaScript Framework for front-end Dashboard to display status and validation results. Infrastructure as Code implementations to build Software Defined Networks. Software Defined Networks, Microservices implementations using Kubernetes clusters. SideCar and Health Checks implementation using Docker Containers with Docker Compose and Prometheus Alert Manager. VmWare VRealize Automation and Orchestration, integration with Jenkins and CodeStream using REST APIs, IaC. Continuous Integration / Continuous Deployment (CI/CD) using Jenkins Pipelines. Python - Request Library, parsing JSON files. Bearer Token Authentication. Cloud Computing - Azure Cloud deployments of multi-tier networks and Cassandra NoSQL implementations. Responsible for system architecture, design and testing. Manage integration of PaaS offerings and underlying IaaS offerings. Provide guidance and design expertise to technology platform SMEs for PaaS engineering efforts. Next Generation Infrastructure Delivery Initiatives. Release Processes and Continuous Integration Tasks. Configuration Management - Chef. Java Spring Webix REST API development with JavaScript dashboard. Metrics monitoring with Prometheus and Grafana, Automation tasks using Python and Shell scripts.

April 2011 – March 2015

Consultant, AT&T Labs, Inc., Tampa, Florida

Remote Access Services implementation and Management with cellular (Mobility) and Persistence, Custom APNs, WiFi, broadband technologies, VPNs (IPSec and SSL), Embedded cellular device configuration (Gobi 3K MC7700 Chipset), Wireless VPNs

(Netmotion client configuration with Policy Management), Access Control Lists (ACL), Firewalls, Fencing, Network Awareness, Managed IP Traffic; route maps, route redistribution, route summarization and ACL’s. Secure ID configurations. Custom APNs configuration, IPv6, Windows 8, Windows 7, Windows Vista, Windows XP, VMWare ESXi configurations, MacOS X (10.6.8,10.7, 10.8.3, 10.9), AIX, Linux, Smartphone technologies tethering (iOS, Android 3.0, Windows Mobile, RIM). VMWare ESXi layer configuration, Server Technologies: IBM 3650 M4, 3550M3 – Integrated Management Module configurations, Dell PowerEdge R910 – iDRAC6 (Integrated Dell Remote Access Controller for Enterprise). Understanding of Agile practices such as test driven development and continuous integration. Software development C++, Objective C, Python, PHP. Configure Sendmail (RHELv6.3) and Exchange SMTP Relay servers to send SNMP trap alerts. Configured RHELv6.3 servers and integrated to AT&T Labs network for NetGate devices SNMP monitoring.

August 2010 – April 2011

Network Consultant, Inti Tech Solutions, Seminole, Florida Remote Access Services implementation with cellular (Mobility), WiFi (Ruckus Wireless), broadband technologies, VPNs, Wireless VPNs, Firewalls, Fencing (Custom APNs), IPv6, Windows, VMWare configurations, MacOS X, AIX with Smartphone technologies tethering (iOS, Android, Windows Mobile, RIM). Active Directory Services, Virtualization using VMWare ESXi, Citrix Metaframe Farms, Exchange Server, BlackBerry Enterprise Server. Wireless VPN solutions. SAN solutions. Web Hosting solutions, Data Warehouses (Netmotion Mobility) support. Performed wireless Network design, installation, configuration and support using Ruckus Wireless router configuration, Ultra High Performance WLAN configuration, Mesh networks, Remote Access services, Exchange Email Enterprise installation configuration and support, Mobile / Smartphone Device access to enterprise, Enterprise Security, Virtual Layer (VMWare ESXi)configuration and support, Fencing, Network Awareness, Firewalls, Scripting (Perl, Python, PHP), Desktop Imaging (Win10), Software Development, Web server support, iDRAC Management configuration, Server configuration (AIX, Linux, Windows 2019, IPSec tunneling, SSL. Performed ongoing performance tuning, hardware upgrades, and resource optimization as required. Configure CPU, memory, and disk partitions as required. Apply OS patches and upgrades on a regular basis and upgrade administrative tools and utilities. Configure / add new services as necessary. Built - Performed the installation, configuration (and provided technical support) for Collaboration software (NotifyLink, BlackBerry Enterprise server) to wirelessly synchronize real-time E-mail and PIM data (calendar items, contacts, tasks) using Windows Mobile, Palm, and BlackBerry smartphone devices. Managed SMTP interfaces and system configurations. Maintained MS SQL database for state of data/connection information.

EDUCATION

B.S. Computer Science Engineering, University of Texas, (Arlington, TX.) (Systems, Networks, and Computer Architecture tracks). Aug. 1990. Electronics Engineering Technology. Fort Worth Technical Institute, (Fort Worth, TX.). Jun. 1986.

B.S. Engineering-Physics (Solid State and Microelectronics), Minor in Mathematics. Southern Arkansas University, (Magnolia. AR.). Dec.1983. SKILLS

Hands-On experience using the following technologies: Operating Systems: Server (Windows 2019, Linux RHELv8/OpenSuse /Fedora /Ubuntu v12.10, SCO UNIX v7.0). Desktop / SmartPhone (Windows, Mac OSX Ventura, Android, iOS. Messaging Systems: Server (Exchange 2019/10, RHELinux SendMail). Database Systems: Cassandra (NoSQL), PostgreSQL, Oracle, tools v.6.0 (SQL*PLUS,

*FORMS v 3.0),, Microsoft SQL Server, MySQL, SQLite databases. VPN Solutions: Netmotion Mobility (Wireless). Cisco AnyConnect, Juniper Junos. Backup / Cloning Technologies: Veeam, VmWare vCenter Converter (cloning VMs), Symantec Veritas NetBackup, Acronis, Novell ZenWorks.

Web Servers: IIS, Apache, NGINX.

Hosting Applications Servers: Citrix Metaframe

Storage Area Networks: StorageTek, SANtricity.

Security: NetGate 8100, 8200, FortiNet FortiGate (NAT/Route Mode). Collaboration Environments: BlackBerry Enterprise Server, NotifyLink Network Monitoring tools: SolarWinds ORION, Perfmon (Windows), Nagios (Linux) Mobile Platforms: Windows RT, Android, Palm OS, RIM, iOS. Application Hosting: Citrix Winframe, Metaframe XP Farms (NFuse), Presentation Server. Virtualization: vCenter 8.0.2, VMWare ESx/ESXi Desktop and Enterprise Server, Parallels

(MacOSX).

Directories: Active Directory Services (Windows), E-Directory (Novell Netware) – LDAP Authentication.

Network Tools: WireShark, tcpdump, ipconfig, ifconfig, Ecora Patch Manager, CiscoWorks, Dell OpenManage, VMWare ESXi, Windows Server Update Services, Ecora, Wireshark, Cisco IOS, CatOS, PIX.

Network Technologies: 10/100/1000MB Ethernet, 802.11a/b/g/n Wireless Ethernet, TCP/IP

(IPv4, IPv6), copper and fiber infrastructure cabling, analog and IP telephony, server consolidation, server room design, power distribution, and cooling. Cellular / Wireless Technologies: 802.11B/G, GSM, CDMA, CDPD. Development Platforms: Linux, Apache, MySQL, PHP (LAMP) data massaging and conversion (csv) for system alerts and SNMP monitoring. Software Languages: C++, C# (Visual Studio), Java (Eclipse), HTML, PASCAL, ADA, LISP, FORTRAN, BASIC.

Assemblers: MOTOROLA 68000, IBM 370, INTEL's 80XXX. Client/Server Development: Powerbuilder.

Thin-Client Technologies: Citrix Metaframe Xpe, Winframe 8, Terminal Services. 4th Generation Languages: ORACLE RDBMS and tools v. 6.0 (SQL*PLUS, *FORMS v 3.0) Process Schedulers: Control-M client and server.

Office Suites: MS Office.

TRAINING

Certified Wireless Security Professional (CWSP) Core Curriculum – TechNet Centers. Certified Wireless Network Administration (CWNA) Core Curriculum – TechNet Centers. PeopleSoft Server Administration, PeopleTools 8.40 – Peoplesoft. Designing a Microsoft Windows Active Directory Services Infrastructure – Global Training. Supporting a Network Infrastructure using MS Windows 2019, New Horizons. UNIX Operating System – Level Intro and Advanced. - Global Knowledge Network. Java Programming – Intro and Advanced. - University of Texas at Arlington - Cont. Education. Java Script Programming. - University of Texas at Arlington - Cont. Ed.. Fast track workshops in: TCP/IP Optimization for Windows,, Windows Server Optimization and Security, Windows Windows Server Administration and Configuration. Offered by Mastering Computers.

Windows NT core program to obtain a Microsoft Certified Systems Engineer (MCSE) certification: Networking Windows, Advanced Server and Administration, Integration of Windows Server, Microsoft TCP/IP, SQL Server – Wave Technologies. PowerBuilder Object Oriented Programming by CompuPros. Local Area Networks Wiring Systems by American Research Group. ORACLE RDBMS for developers by ORACLE Corporation. Designing and Installing Local Area Networks by Data Tech Inst.. Troubleshooting and Maintaining PCs by Data Tech Institute. Knowledge of ITIL processes including Incident, Problem, and Change and Service Request management.

Managerial

Knowledge of ITIL processes including Incident, Problem, and Change and Service Request management.

Best Management Practices – University of Texas at Arlington Total Quality Management (TQM) Practices - City of Fort Worth Human Resources Team Building Practices - City of Fort Worth Human Resources Speak (write) Spanish and English fluently.

REFERENCES UPON REQUEST

Contact this candidate