Senior Systems Engineer

Cristian Arencibia

TECHNICAL SUMMARY

HARDWARE: Hewlett Packard K220, G60, Mainframe, IBM 4381-13 Mainframe, IBM AS/400 Midrange

****-**, *** ********** **, Hubs, Frame Relay Access Device, VPN Connectivity 100, 4500 Device, Cisco Router, Web Router, Cisco Switch, VLAN Technology

SOFTWARE: Outlook 2003, 2007,2010, 2013, 2016 Outlook Web Access, Exchange Control Panel, UNIX, Universe, Windows 95, 98, ME, 2000, XP, Windows NT, Novell Netware 3.11/3.12/4.11, IBM MVS JCL statements, Windows 3.1, DOS V.5-6.22, Windows NT, Microsoft Office 97/2000, SAP, Telnet, NetMeeting, PowerPoint, Windows 7, Windows Server 2008/R2, Windows Server 2012/R2

CERTIFICATIONS: Certified MCITP, A+, NT Workstation, Server, Certified Novell Intranet Ware: NetWare 4.11, Certified Novell NetWare 3.12 Administrator, CCNA, CompTIA Network +.

CLOUD TECHNOLOGIES: Office 365/ADFS/Directory synchronization/Microsoft Azure, SAML, OAuth, Open ID Connect, Okta, Entra ID Connect, OKTA, Intune, JIRA Cloud, Confluence, Citrix Cloud. Apple Business Manager, JAMF, Cisco Umbrella, Rapid 7.

BILINGUAL: English and Spanish

PROFESSIONAL EXPERIENCE

LANSING BOARD OF WATER & LIGHT, Lansing, Michigan

Senior Systems Engineer

January 2021 – Present

Remotely implemented Information Technology solutions on Windows Server OS 2022, Active Directory, Group Policy, VMware, Exchange 2019/M365, and Azure Cloud technologies, while working in a fast-paced, deadline-oriented environment with a necessity for quick response times.

Manage role-based levels of access to networks, systems, customer, and company info.

Active Directory Group creation and Add/Removal of members.

Dispense File Share Access Requests.

Execute Rubric File Restores.

Responsible for VMware vSphere 4.0 Migration and creation of Data Stores.

Create and link new AD Group Policies to different Organizational Units.

Demonstrated superior multitasking, organization, and prioritization skills.

Provisioning licenses via Azure Portal.

Patching Windows Servers and deploying cumulative updates using the SCCM tool.

Utilized strong problem-resolution and conflict-management skills.

Azure Active Directory Privileged Identity Management (PIM) administration.

Provide third-level escalation and Executive Support.

Execute knowledge transfers and upskilling to customer personnel to ensure self-sufficiency.

Microsoft Azure Operational and Monitoring tools, including Azure Monitor and Log Analytics.

Experience in leading technical teams and interacting with stakeholders for Problem Analysis.

Strong people skills and effective collaboration with team members, clients, and Execs.

Experience in PowerShell scripting and Automation.

Provide operational training to end-users, as needed.

Resolve support requests and perform preventive maintenance on production systems.

Access Recertification to ensure user access and permissions remain appropriate.

Compliance management to ensure GDPR, HIPAA, SOX, and PCI regulatory compliance.

Administered Active Directory Federation Services (AD FS) to support federated access.

Enabled single sign-on (SSO) across multiple platforms using federation protocols (SAML).

Configured relying party trusts and claims rules to integrate applications with AD FS.

Ensuring Least Privilege Enforcement to grant the minimum necessary permissions for user tasks.

Managing Access Control and Role-Based Access Control (RBAC) to align with ORG structure.

Implementing self-service password resets and profile management to reduce support workloads.

Modification of changes to user roles, permissions, and group memberships as per business needs

Managing and deploying Okta and Entra ID platforms and IAM tools.

Designed and implemented SharePoint Online intranet solutions for departmental collaboration.

Deployed and managed Microsoft Teams, creating governance policies and compliance settings.

Provided fourth-level support for escalated M365 incidents, ensuring rapid resolution.

Configured and enforced security measures, such as MFA, Conditional Access, and DLP policies.

Manage and support Active Directory environment, ensuring optimal performance and security.

Administered DNS services, including configuration, troubleshooting, and performance.

Implemented and managed Active Directory Forest Recovery and Domain Protection Services.

Monitored the integrity and availability of Active Directory DNS and DHCP systems.

Administered tenant-level M365 configuration, including user provisioning and service health.

Provided technical support for users experiencing issues with Teams, SharePoint, and OneDrive.

Conducted environmental health assessments and delivered recommendations for optimization.

Collaborated with third-party steady-state support teams to ensure Active Directory DNS, DHCP

Changes are completed efficiently and accurately.

Email Security Platforms (Mimecast, Proofpoint, Mail Gate SPF/DKIM/DMARC).

Experience with Nutanix Virtual Machine Appliance and Multi-Cluster Administration.

Generated wildcard certificate requests for multi-subdomain coverage for *.domain environments

Issued and managed wildcard certificates through AD CS to streamline TLS protection.

Bound wildcard certificates to multiple IIS websites using HTTPS bindings for certificates.

Built and configured QA environments to mirror production infrastructure, enabling testing.

Coordinated with the development team to deploy builds and validate functionality.

Monitored and maintained 99.9% infrastructure uptime by configuring proactive Zabbix triggers.

Configured triggers for CPU, memory, synthetic web scenarios, and certificate expirations.

Created and deployed Windows Server 2016, 2019, and 2022, while supporting Windows 10/11.

Managed AD Organizational Units (OUs), Group Policy Objects (GPOs), and Permissions.

Configured, installed, and deployed Active Directory Print Services.

Managed and supported shared Canon and HP enterprise printers across large environments.

Maintained Windows print servers, queues, drivers, and large print infrastructure deployments.

Scanned networks, assets, and applications to discover security flaws using the Rapid7 platform.

FLORIDA POWER & LIGHT, Fontainebleau, FL

Senior Exchange/Microsoft Office 365 Engineer

February 2019 – January 2021

Work with different Microsoft products, including Exchange 2010, 2016, and Office365, Lync, Skype for Business, and MS Office Suites, while administering Exchange Online using ECP and EAC in a Hybrid email environment.

Knowledge of synchronizing directory from On-premises to Office 365 using different identities.

Proficiency in message tracking and troubleshooting to resolve mail flow delivery issues.

Responsible for all components of Office 365, including Skype for Business and Teams.

Expertise in providing solutions for High Availability in Exchange.

Experience in Monitoring and troubleshooting the server using tools, Event Viewer, and MMC.

Collaborated in implementing and deploying MS infrastructure and MS Office 365.

Provided support for server 2008/R2, 2012/R2 on components, exchange 2010/2016.

Aided in public folder creation, replication, rights assignments, and free busy-related issues.

Participated in Migration from Exchange 2016 On-premises to Office 365.

Manage accounts in Active Directory, Exchange On-Premises, and Microsoft 365 online.

Migration of Microsoft messaging technologies to newer versions.

Worked with business units to incorporate Office 365 and cloud-based solutions into operations.

Plan, evaluate, and deploy monthly patches and cumulative updates to all environments.

Document the Microsoft O365/Exchange and Messaging-computing environment.

Primary point-of-contact for third-party vendor-reported incidents.

Experience in troubleshooting and resolving both client and server-side issues.

Create user accounts, assign group rights, create distribution lists, and group policy objects.

Assigned E3 and E5 Office Enterprise licenses.

Clean Active Directory User Objects inconsistencies, which prevented them from synchronizing.

Over 8 Years in Azure Active Directory, Active Directory, Windows Admin, and VMware Admin.

Manage identity access management for Azure subscriptions, Azure AD, and Azure AD proxy.

Configure and manage Azure AD Connect, Azure AD Connect Health, and Microsoft Azure AD.

Resolve Azure AD issues relating to Office 365, Active Directory to Azure AD, and CAIDM to AD.

Designing, configuring, and supporting Active Directory Services on a Windows Domain.

Migration from On-Premises to Azure AD and developed new cloud-ready application solutions.

Create and manage AD Organizational Units (OU), Group Policy Objects (GPO), and permissions.

FLORIDA POWER & LIGHT, Fontainebleau, FL

IT Systems Administrator/Cybersecurity Analyst

May 2017 – February 2019

Execute successful SOX Audits of Privileged Access and Restricted Active Directory groups while collaborating closely with Auditors, Outside Vendors, and Inter-departmental teams to ensure Audit projects are completed within the established deadlines.

Responsible for Active Directory Privileged and Restricted groups access recertification.

Provide RSA remote VPN access by enabling software and hardware tokens.

Provided Managed Permanent and Temporary Local Admin rights to company assets.

Manage Remote Desktop user access to computers, laptops, and servers.

Administer Information Security’s Shared Mailbox, granting access and creating rules for optimal performance.

Create an RACI chart for inter-departmental teams to establish roles and responsibilities.

Continuously update documentation of Information Security procedures

Perform Identity and Access management using EAMS, ISIM, and ITIM software.

Develop and produce reports on all activities and incidents to help support the day-to-day status.

Assist the Cyber Security Manager in providing leadership with an overview of risks and threats to the organization.

Define, implement, and maintain corporate security policies.

Protect digital files and information systems against unauthorized access, modification, or destruction.

Troubleshoot server and remote access issues.

Analyze security breaches to determine their root cause.

Work closely with IS operations, network, and system administrators to determine a Cyber Security Risk

Plan, implement, and upgrade security measures and controls.

Approve or deny access to employee emails, computers, and files.

Resolve any Email related issues the Information Security team members encountered.

Develop, maintain, and enforce effective corporate-wide processes.

Deliver projects on time and within budget that meet planned benefits.

Ensure infrastructure and application support is managed effectively.

Focus on Application availability, serviceability, and reliability while looking for continuous improvement.

Responsible for all aspects of Access Administration for a variety of systems including Active Directory, Remote Access, and Firewalls.

Provide advice on IT initiatives, IT business projects, and IT engineering regarding security industry best practices.

Utilize various software applications such as RSA Token Consoles, IBM Tivoli ITIM/ISIM, and BMC Remedy to provide technical support to end users.

ARTHREX, Fort Myers, FL

Senior Exchange/Outlook Administrator

Feb 2017 – May 2017

Managed a Microsoft Exchange 2010 Cluster Environment containing 3 Database Availability Groups which consisted of 8 Mailbox Servers, 12 Hub Transport Servers, and 12 Client Access Servers while performing day-to-day system maintenance, monitoring, and troubleshooting the network infrastructure to ensure the availability and reliability of all corporate IT systems.

Created and supported 3,500 Exchange user mailboxes nationwide as well as Executive Corporate Users

Managed and created thousands of Exchange objects such as distribution lists, conference rooms, and shared mailboxes.

Responsible for the configuration of Room Wizards

Produced reports to higher management, such as Conference Room history and current Active Sync users.

Provided support and maintenance of Outlook Web Access and Exchange Control Panel

Lowered spam by 90% using a firewall with real-time spam blacklists for incoming emails.

Maintained optimal Exchange server health utilizing the Exchange Reporter Plus server management engine.

Whitelisted a range of IP Addresses of servers that needed to communicate with our Exchange environment.

Using the Barracuda Network Spam and Firewall Software I released requested and approved quarantined emails.

Added Transport Rules to the Hub Transport Server to ensure specified emails did not reach Executive mailboxes.

Modified and created new Send/Receive connectors to ensure connectivity with other enterprises.

Proficient with Microsoft Exchange Management Console and Exchange PowerShell scripting

Updated and produced Documentation of the Exchange Infrastructure and daily activities and administrative tasks.

Troubleshoot client-side issues such as slow performance and latency of Outlook.

Led Webex conference meetings to collaborate with team members in resolving system issues.

Demonstrated excellent customer service relations.

Monitored all server logs on Exchange servers.

Trained end users and Level 1 administrators on the daily administrative support of the Exchange environment.

Established high availability using techniques such as continuous replication, recovery storage groups, and load balancing.

Assisted with Active Directory Management and Support.

Restoration of user data, mailbox, and Public Folders.

Ensured data confidentiality, accessibility, and integrity.

Collaborated directly with customers, vendors, and team members to identify, troubleshoot, and resolve email-related issues.

Utilized Webex Enterprise Site Software for remote access and screen-sharing sessions.

ITIL 2011 Edition Foundation Training Course Completion

FLORIDA POWER & LIGHT, Fontainebleau, FL

Exchange/Outlook Administrator

Apr 2013 – Feb 2017

Led a team that supports and maintains the Microsoft Active Directory, Microsoft Exchange, Microsoft Windows Server, and other applications by providing installation, maintenance, troubleshooting, security, administration, account management, and resolution of software and hardware issues, as well as developing new system designs.

Lead the evaluation of company objectives, goals, plans, programs, and business processes to develop an enterprise IT architecture plan.

Develop plans and strategies to modify the IT infrastructure to support short and long-term organizational goals.

Execute PowerShell Scripts

Set up Outlook Paging and Text Messaging

Administrate Active Sync Mobile Phone Activation Agreements

Responsible for Weekly Team Meeting Hosting and Coordination

Administrate/Install/Maintain Exchange Server 2010

Rebuild.OST files and user profiles running Outlook 2003, 2007, 2010

Managed Forefront TMG 2010 Firewall to prevent Denial-of-Service Attacks, Proxy Services, and site-to-site VPN connectivity.

Installed Exchange Mail Firewall for management of Mail Queues, logs, reports, and management of Email Policies.

Implemented MAILGATE Firewall to add and remove IP Addresses to Whitelist authorized users.

Monitored EOP Firewall to detect inbound and outbound spam, bulk mail filtering, and malicious URL Blacklisting.

Evaluated FENA Firewall for Anti-Phishing Protection as well as capture and release of End-User Quarantined notifications.

Windows 2008 R2 Server Installation/Administration and Maintenance

Tivoli Remote Control Utilization and Administration

Monitor the ticketing system for network performance.

Lync 2013 Server Maintenance, Configuration, and Administration

BlackBerry Administration Service (BAS) Administration

Monitor server performance and mail routing.

Monitor existing messaging infrastructure and server usage, ensuring proper working order.

Creates user accounts and maintains security levels on databases.

Manipulate Mailbox Storage Quotas and Retention Policies

Restore and Merge Lost Emails

Recover and Reconnect Disabled Mailboxes from Disconnected Mailbox Queues.

SYMMETRY CONSULTING, Coral Gables, FL

Exchange/Outlook Architect

Jan 2012 – Jan 2013

The primary point of contact for all Managed Services Microsoft Exchange business development and delivery with a strong background in implementing and supporting Windows and Microsoft Exchange migrations.

Extensive firsthand experience designing, implementing, and supporting Windows and Exchange Migration Projects. (NT 4.0 to Windows 2000/2003 with Active Directory and Exchange 5.5 to Exchange 2000/2003/2010)

Function as the technical Exchange architect on multiple client electronic mail environments and associated projects simultaneously.

Functioned sole point of service for Outlook and Exchange migration issues.

Assist users in setting up Microsoft Outlook personal settings.

Backup and migration of Outlook.PST files and individual user settings.

Set up Outlook calendars, distribution lists, delegation, and RSS feeds for individual users and groups.

Managed Public folders and shortcut permissions.

Create folder trees as needed.

Troubleshooting Outlook 2003, 2007, and 2010, for over 30 individual client sites and hundreds of users.

THE SETAI HOTEL, Miami Beach, FL

System Administrator - LAN/WAN

May 2011 – Jan 2012

Performs technical and managerial work of considerable difficulty in the planning, designing, implementing, and maintaining of Local and Wide Area Network activities and provides technical advice on the voice and data communications network.

Analyzes and resolves performance problems involving the system and associated hardware.

Defines system specifications analyses malfunctions and develops solutions.

Directs activities to ensure maximum utilization of personnel, hardware, materials, and supplies.

Establishes and maintains operational procedures and practices and maintains network security.

Evaluate network hardware and software in terms of its effectiveness.

Manage a staff of Computer Network Specialists and Personal Computer Specialists.

Manage, plan, configure, and direct technical support activities for the county’s Wide Area Network, Local Area Networks, AS/400 network, and various UNIX systems. Active Directory Accounts Management

Migration of Exchange Server and Outlook clients to Microsoft 365 Cloud Services

Support for Microsoft Outlook 2003, 2007, and 2010 with over 200 users

Create, modify, and delete user files/settings and folders within groups.

Migrate .PST Files and User settings from multiple versions of Outlook to the cloud.

Mitel Phone system support

Wireless Access Point Installation and Maintenance.

Installation and Deployment of new Windows 7 workstations

Configuration and Installation of Hyper-V Server

NCR, Miami, FL

Technical Support Specialist 2002 - 2011

Provided technical support and field service support.

Assembled, evaluated, and troubleshot office computer equipment.

Monitored platform products, DNS, TCP/IP, and performance management utilities.

Managed information security products and scripts

Solved LAN/WAN technical problems.

Assisted in WAN/LAN maintenance and security administration.

ELECTRONIC DATA SYSTEMS (NAC), Miami, FL

Technical Support Representative 2000 - 2002

Administrate Local Area Network security.

Manage Telex, Windows 95, 98, 2000, and XP networks.

Install and configure PC and Server software products.

Access remote networks using Telnet and NetMeeting software.

Dispatch Field Engineers to replace damaged hardware.

Support, troubleshoot, install, and upgrade proprietary travel agent software in English and Spanish

Perform customer service functions through research, problem-solving, and servicing of the Host system.

HOSPITALITY SOLUTIONS INTERNATIONAL, Boca Raton, FL

Installer/Network Support Specialist 1999 - 2000

Analyze/troubleshoot PC Network problems.

Administrate Microsoft Windows NT, 3.51, 95, 98, and Novell NetWare versions 3.12 & 4.11 systems.

Dial into customer computer sites using PCAnywhere.

Create and manipulate customer POS databases.

Advise clients on network communications alternatives.

Configure and install PC hardware and software products.

EDUCATION

SALEM INTERNATIONAL UNIVERSITY, Salem, West Virginia

oMajor in Computer Science

oMinor in Cyber Security

oAZ-040T00: Automating Administration with PowerShell

THE NEW HORIZONS COMPUTER LEARNING CENTER, Miami, Florida

oMicrosoft Certified Information Technology Professional (MCITP)

oCompTIA Network +

oCisco Certified Network Administrator (CCNA)

THE CHUBB INSTITUTE, Jersey City, New Jersey

oDiploma in Network Engineering and Data Communications

oDiploma in Technical Support

UNION COUNTY COLLEGE, Cranford, New Jersey

oAssociate Degree in Business Administration

Contact this candidate