PROFILE: SENIOR SYSTEM ENGINEER

Transcription

1 PROFILE: SENIOR SYSTEM ENGINEER HOLISTIC ICT: BRIDGING THE GAP BETWEEN BUSINESS-ORIENTED DEMANDS AND TECHNOLOGY-DRIVEN SOLUTIONS. "I PROVIDE NETWORK SERVICES WITH A FOCUS ON SECURITY ACROSS MULTIPLE TIERS. THIS MEANS FROM APPLICATION LAYER AND ABOVE TO THE PHYSICAL WIRE AND BEYOND, INCLUDING AUTHENTICATION AND MIDDLEWARE. MY EXPERTISE IS BUILT ON SEVERAL YEARS OF IN-DEPTH KNOWLEDGE AND EXPERIENCE OF THE SUPPORTING TECHNOLOGIES SUCH AS DIRECTORY SERVICES, MICROSOFT-LAND, BIG APPLICATIONS SUCH AS EXCHANGE, AND VIRTUALIZATION TECHNOLOGIES. MY PERSPECTIVE IS PROJECT-BASED, BUT TECHNICAL (IF NOT NECESSARILY HANDS-ON)." PERSONAL INFORMATION: PERSONAL: NAME: KOEN JANSSENS NATIONALITY: BELGIAN EXPERIENCE: 15 YEARS + AGE: 41 ADDRESS: VAN ESPENLAAN 6 CITY: 1930 NOSSEGEM PHONE: 0477/ KOEN.JANSSENS@SPLITBRAIN.BE WEBSITE: JANSSENS/5/342/B64 1

2 JOB FOCUS: Microsoft Security Virtualization Linux/BSD Networking LANGUAGE SKILLS: Read Write Speak Dutch Very Good Very Good Very Good French Good Moderate Moderate English Very Good Very Good Very Good 2

3 EDUCATION: 1992 Humaniora, Sint-Pieterscollege Leuven VENDOR CERTIFICATIONS & TRAINING: VENDOR CERTIFICATIONS: 1998 Novell Master CNE (Netware 4/5) 1998 Microsoft MCSE (NT4/Windows 2000/Windows 2003) 2000 Cisco CCNA (recertified 2009) 2000 Sair Linux Certified Administrator 2004 Checkpoint CCSA/CCSE NG Microsoft MCTS Exchange ITIL v3 Foundation 2010 VMWare Vsphere VCP 2011 Wireshark certified network analyst (WCNA) 2011 Microsoft Windows Prince Cisco VPN 2014 Lean ICT 2015 Linux LPIC BSD certification group BSD associate OTHER TRAINING Cisco BCMSN (switching) Landis 2000 Cisco ICND Flexcom/Azlan 2000 Cisco BSCI (routing) Azlan/Flexcom 2001 Avaya switching Avaya/Lucent 2001 SCRUM master USG

4 TECHNICAL SKILLS (SCALE 1/BASIC 5/EXPERT) Methods & Techniques: ITIL v3 (foundation level) 3 Prince 2 (foundation) 2 Technical writing (Word, Visio) 4 SCRUM 2 OS: Windows NT4, 2000, 2003, FreeBSD, OpenBSD, Linux 5 Mac OSX 3 Novell Netware 4/5 3 Networking: IP/IPX Networking and protocols 5 Cisco: switching 4 Nortel/Avaya switching 3 Cisco: routing 3 Cisco ASA: authentication, firewall & VPN 4 Cisco loadbalancing (CSS content switches & ACE loadbalancers) 4 Cisco Wide Area Application Services (WAAS/WAFS) 3 Infoblox DNS management 3 Wi-Fi (Enterprise wireless lans) 4 Diagnostic/performance monitoring: Compuware end-to-end application monitoring 2 Wireshark / tcpdump packet analysis 5 Netflow analysis 4 Radware Linkproof 2 Security: Firewall & VPN: Checkpoint, Microsoft ISA/TMG/UAG, Cisco PIX/ASA 5 Netscreen/Juniper 3 Symantec Antivirus / Mcafee EPO 3 Messagelabs antispam & web filtering 3 Internet street & DMZ design (network segmentation, load balancing, proxying, 4 authentication) Cryptography & authentication: Vasco & RSA authentication tokens 3 X509 PKI (Windows Certificate Services, OpenSSL) & Securing sites using SSL public PKI 4 Active directory & LDAP authentication 4 PGP & S/MIME & data encryption 4 4

5 Linux/BSD environment: Messaging: postfix, sendmail + client-side access 4 MySQL 3/4/5 4 Network management (Nagios, Icinga, Cacti, RRDTool, ) 5 Firewalling: Linux iptables, BSD pf 5 OpenVPN remote access & site connectivity 4 Squid forward & reverse web proxy 5 Snort / Nessus network IDS 4 Web services: Apache, LAMP/WAMP setup 5 IIS 4/5/6/7 4 Bluecoat web proxying 3 IBM TAM/Webseal 2 HTTP protocol knowledge Header & cookie manipulation 5 Ssl offloading Loadbalancing & stickiness Virtualization technology: VMware Virtual infrastructure 5 Veeam data replication/backup 4 Microsoft environment: Microsoft networking infrastructure (Active Directory / NT4 domains) 4 Microsoft messaging (Exchange 5.5/2000/2003/2007/2010 & Microsoft Directpush) 4 Windows 2003 & 2008 Terminal Services 4 Desktop management, network management & software distribution using Group Policy 3 Windows Server Update Services (WSUS) patch management 5 SharePoint portal server SQL server 97/2000/2005/ Microsoft Clustering 3 Packages: HP SIM server 3 Backup/DRP: Symantec Backup Exec, Veeam backup & replication 5 Arcserve 3 Messaging (non-microsoft) Blackberry Enterprise (BES) 4 Lotus Domino 3 Programming: Scripting: VBScript, bash scripting, windows batch scripting, power shell 4 Hardware: HP servers 3 Storage (SAN/NAS) 2 5

6 PROFESSIONAL EXPERIENCE 04/2014 until present Splitbrain (self-employed) Network & security Engineer (Brussels Airport Company) (7/2015 present) o Performance measuring and availability monitoring project: Monitoring system setup for network and security devices Based on open tools (Icinga/Cacti) Creation of both underlying framework as well as custom checks for the devices Network & security Engineer (IPC) (4/2014 6/2015) o Data center migration project: Review of bids Evaluation of technical designs Implementation of network/security link-up with data center services o Implementation of secure DMZ for web services: Implementation of Sophos loadbalancers Setup of Apache reverse proxy clusters for incoming web services Uniform strategy for time synchronization and name resolution o Hardening of incoming web services due to SSL vulnerabilities o Provide visibility into the network layer: Netflow data gathering, Cacti snmp graphing solution Checkpoint smartlog implementation Nagios proactive checks on network functionality IP address management (ipam) tool rollout o Management of Nortel switches and Checkpoint firewall o Integration of network (Nortel/Avaya) and virtualization layer (VMWare) o Backups of network devices o Operation of Axway secure transport gateway o POC setup for ldap authentication database 09/2012 until 04/2014 Serso Project lead & team coaching: o Infrastructure projects for SMB o ISO conformity and audit work o Single Sign-on projects around BYOD concept o Coordination of Cloud hosting project until 09/2012 Splitbrain (self-employed) Project team networking & security SDWorx (4/2011 9/2012) o Steering of several networking & security projects: Wan migration project Internet street redesign Mobile devices enterprise integration (BringYourOwnDevice) IBM TAM/Webseal & E-ID authentication framework upgrade o Assistance to 2 nd and 3 rd line teams in incident resolution 6

7 Project management Serso (9/2010 4/2011) o Project Followup for team of system engineers o 3rdline support o Incident & Problem management o Notable projects: Enterprise wi-fi & guest wi-fi design (2011-Koning Boudewijn Stichting) Terminal services cluster (2011-Koning Boudewijn Stichting) Backup & DRP project using Backup Exec & Veeam (2010-FWO Vlaanderen) Exchange 2010 migration project (2010 Bosal Europe) LAN/WAN engineer Acerta (5/ /2010) o See Job description below (LAN-WAN engineer Acerta 12/2008 -> 9/2009) Team Coordinator Serso (10/ /2010) o Team coordination & planning o Project follow-up o Datacenter activities planning o ISO 9000 Quality project o Belgacom explore connectivity projects LAN/WAN engineer Acerta (12/ /2009) o Management of networking & security devices (Cisco, Checkpoint, Juniper) o Network incident follow-up 3 rd line o WAN-optimization & load-balancing configurations o Network & performance troubleshooting o Followup of Belgacom Explore network o Implementations of: Compuware end-to-end monitoring Cisco WAAS Messagelabs web filtering o Packet analysis using Wireshark analyzer o DNS/DHCP administration System engineer Serso (11/2008 9/2009) o Company active in SMB market o Notable projects: Server consolidation project: Exchange 2007 implementation, vmware infrastructure setup (2009-FWO Vlaanderen) Network optimization project: Belgacom Explore rollout, datacenter migration and ISA firewall implementation (2009 Koning Boudewijn Stichting) Setup of HA webfarm using LAMP platform: infrastructure for database-backed website, clustered under Linux using heartbeat package (2008-Koning Boudewijn Stichting) until Sogeti o 3rdline support o Project pre-sales (Exchange 2007, Active directory) Senior system engineer, outsourced at MetLife (05/ /2008) o Project lead for DRP testing o EPO/WSUS reporting o Local site administration 7

8 until Telco Consultants NV (ex-computer Services Solutions) IT Manager (10/2007 4/2008) o Server consolidation project (60+ servers to VMware ESX 3.5) o Patching IT-environment (WSUS) o Team coordination, follow-up & reporting to upper management o Implementation ISA 2006 (replacing Linux firewalls) Outsourced consultant Estee Lauder Companies (2/ /2007) o Exchange consolidation project (15000 mailboxes) Exchange 5.5 to clustered Exchange 2003 o Sox-compliancy at mailbox-level using Enterprise Vault o Active Directory management o Macintosh integration project into Active Directory o Blackberry Enterprise Server management o Setup of test-lab in virtual environment (multi-site, geographically separated testing environment) o Implementation DST changes project EMEA/APAC o Exchange 2003 granular delegation of control set-up for site administrators Outsourced consultant ING (10/2006 -> 2/2007) o Exchange 2003 mailbox clustering o ITIL incident/problem management until Computer Services Solutions NV Remote management services ( ) o Remote services & management for SMB s o Backup over internet (Veritas technology) & DRP for customers o Migration projects: Active directory, Symantec antivirus, Exchange 2000/2003, remote access (Microsoft RAS, Checkpoint & ISA VPN) o Team follow-up + reporting to customers & management o Incident & problem management Messaging & security project BLD Europe ( ) o Linux-project: Messaging solution using Sendmail & IMAP-based system Oracle Corporate Time calendaring solution Firewalling & IDS o Linking of 2 sites using Wi-Fi-technology, upgrade to gigabit ethernet o NT4 to Active Directory on Windows 2000 migration project Outsourced consultant TMME Europe ( 2003) o End-user support o Documentation & server administration o Packages: Novell Netware, Domino/Notes, Windows NT, AS/400 client support, DB/2 Connect o Team leader remote site until Auto Distribution Rosvelds (not relevant ICT experience) Warehouse & store o Sales to customers o Warehouse collaborator 8

9 NOTABLE PROJECTS Linux and Unix-related projects: Generic o Sendmail/postfix/imapd/spamassassin mail setups o Netscape calendar server o Linux & BSD-based firewalls o Openvpn-based tunneling solutions o Network & host monitoring (Nagios, BigBrother, MRTG, Cacti) o File synchronization solutions (rsync) o Courier-imapd migration to exchange o Samba-based file servers o Performance tuning and network stress testing (iperf) o Apache web farms o Squid proxy & reverse proxying o Mysql-based database solutions o LAMP stacks o Openssl setups for PKI or key/certificate management Bigger projects: o HA-webfarm using apache, Mysql & linux heartbeat (European institutions for citizen s consultation) o E-id trustbuilder migration project (SDWorx) o Distributed network and server management solution using open-source tools Managed solution for SMB market In-house solutions for enterprise market o DMZ web services design using linux-based technology Networking-related projects: o DMZ/ Internet street redesign for big payroll company o Webseal and web applications migration project o WAN migration projects (mpls/vpn implementation designs, link optimalization) Microsoft-related projects: o Exchange and active directory migration project for multinational cosmetics company (scope: Europe/Asia) o Novell to active directory migration for big automotive company (operation, not part of design team) 9