Philip J. Allen. Sacramento, California

Transcription

1 Philip J. Allen Sacramento, California Objective A challenging position in the Information Technology field with an organization that offers the opportunity to learn and share my experiences. Summary A highly motivated systems administrator with a plethora of skill gained from over 17 years of experience. An innovative programmer capable of writing object-oriented, structured, scripted, and compiled code in various languages. Able to bring a strong applied knowledge of network infrastructures and topologies related to local area, wide area, and wireless networks. Possessing a profound understanding of system security, exploit techniques, and security standards. Experienced with any Operating System environment being competent using Linux, Unix, Mac and Windows. A talent driven ingenuity to troubleshoot and repair any complications found within a computer system. Paying attention to detail and is able to provide solutions for inconsistencies and abnormalities in a systems design. Enjoys working with a like minded team to accomplish the goals of a secure, stable, yet functional computing environment. Skills and Abilities Active Directory, Apache, APT, Autoruns, BASH, Big Brother, CAS, CCleaner, CIDR, CSS, Denyhosts, DHCP, DNS, DOS, Exchange, FTP, Forefront, Git, Hexedit, HTML, HTTP, Hubs, IIS, IMAP, IP, iperf, IPFW, IPTables, Javascript, Kerberos, Korn Shell, LAN, LDAP, Linux, Logwatch, Macintosh, Microsoft Windows Server, MSSQL, MySQL, Nagios, Nano, Netcat, Nessus, NFS, Nmap, Oracle, Open Audit, OWASP, Perl, PHP, Pico, Pine, Polycom, Postfix, PostgreSQL, Python, RAID 0/1/5, Routers, RSYNC, SCP, SCSI, Sendmail, SFTP, Shell Scripting, SMTP, SSH, SSH Tunnels, SSL, Subnet, Switches, TCP/IP, Telnet, Terminal Services, VBScript, Vi, Visio, Visual Basic, VMWare, VPN, W3C, WAN, WIPFW, Wireshark, XHTML, Xymon. Professional Experience Programmer III (Programmer, Sys Admin, Tech Support) UC Davis Student Affairs Office of Technology Centralized the infrastructure for the Office of the University Registrar. Migrated user management into the Campus Active Directory and file storage into the Student Affairs Office of Technology Private Cloud. The migration changed the user hierarchy to allow easy modifications and was structured off the departments business and organizational structure while following enterprise standards. Configurations were automated with Visual Basic scripts freeing the time of both office and technical staff. Rolled out new office equipment to all users with the least amount of down time. Planned and documented standard configuration for POSIX style servers and systems. The systems were implemented with: Brute force detection and enforcement, automated log parsing and notifications, localized firewalls, intrusion prevention, automated intrusion black listing, hardened security by subduing localized services from sending data to potential attackers, forcing services to use encrypted data protocols, monitoring and reports of the system and network usage, Kerberos authentication integration int Pluggable Philip J. Allen Page 1

2 Authentication Module (PAM). Implemented and coordinated the server creation, test and implementation of a project management solution for Student Affairs Marketing and Communications department. Planned and implemented a reliable and secure server structure to house all of the student affairs websites utilizing the Campus Web Content Management System. Modified the existing ticketing system authentication schema to integrate with the Centralized Authentication Service (CAS). Modified and automated the field population to pull from the existing campus LDAP structure. Identified a variety of security flaws and modified cookie expiration timers, added authentication tokens, generated Secure Socket Layer (SSL) certifications, added User Agent and IP validation and tracking rules. Deployed All-In-One workstations to a multitude of the Student Affairs Departments. Documented a procedure for the campus DNSSEC initiative and instructed the Student Affairs Technology Advisory Committee (SATAC) via training sessions. Supported end users with software applications, workstation hardware, mobile devices, laptops, network access and training. Performed maintenance on office equipment including printers, scanners, microfilm stations, typewriters, PhotoID equipment, magstripe readers, peripherals, etc. Implemented and scheduled a routine for server updates and maintenance. Designed a web based application to collect data and generate reports using PHP, HTML, CSS, jquery and MySQL. Programmer III (Programmer, Sys Admin, Tech Support) UC Davis - Hart Interdisciplinary Programs, Davis, CA Primary desktop support for 60 plus faculty, lecturers, staff, and students including desktop workstations, laptops, netbooks, and ipads. Maintenance of end user systems on Mac OS X 10.3 to 10.7, Windows XP, Windows Vista, Windows 7. The systems ran a variety of clients such as Outlook, Outlook Express, Thunderbird, Apple Mail, Entourage and Thunderbird. Support included basic office equipment such as typewriters, printers, copiers, and faxes. Responsible for server maintenance and reliability while utilization Linux, OpenBSD and Windows servers. The services running on the servers included web, file sharing, Network Attached Storage (NAS) backup, and firewalls. First response for network maintenance and troubleshooting. Working with local LAN's and off site including wireless configurations. Documentation for standardization, consistency and best practices for both workstation and server installations and configurations. Including software installation, command line Linux installations and configurations, configurations, and how to's for common user issues. Configuration of network printing and firewalls using a variety of printers and printing types including: print servers, shared printers, and LPD based printers. Creation of network topology, workstation and server diagrams with Visio. Integration of Debian/Ubuntu servers into a centrally maintained authentication system called Kerberos. Using Kerberos for PAM authentication and configuring keytabs for Samba file sharing servers. Including configuration for desktop systems Windows, Macintosh and Linux with Kerberos authentication. Maintained and advanced server security setup using IP Tables, Denyhosts, Logwatch and a variety of other tools. Put in place a method to use SSH tunnels for RDP and SCP access into systems outside of the firewalls DMZ. Created development environments in a virtual environment using Virtual Box. PHP Application development with queries into centralized LDAP environment. Maintained a variety of website configurations and Content Management Systems (CMS). Philip J. Allen Page 2

3 Planned and put into play a method to convert existing websites into one Content Management System. Work with Drupal CMS included creating themes, CAS authentication, WYSIWYG editors, file management, basic updates, version conversions. CRS II (Systems Administrator and Technical Support) UC Davis - Office of the University Registrar, Davis, CA While working as the primary desktop support for 50 plus workstations I ensure the staff members are able to use the workstations, printers, scanners, copiers, photo ID equipment, microfilm, microfiche, internet kiosks, and access the servers to complete their daily tasks. Responsible for the maintenance and creation of roughly 20 servers being virtual, physical, development, test, and production. As the system administrator I am responsible for a variety of operating systems including Windows, VMWare, and Linux. Services I maintain and work with on a daily basis include Access, Active Directory, Apache, ASP/ASP.net, Coldfusion, EMC Networker, Internet Information Services, IP Tables, Logwatch, MSSQL, MySQL, Nagios, OpenAudit, Oracle Server and Client, OS Ticket, PHP, Postfix, Sophos Enterprise Anti Virus, SSH, Sun Java Systems Web Server, Tripwire, WIPFW, WSUS, and Xymon. Design and implement a backup system using EMC Networker, custom Visual Basic Scripts, batch files, SCP, and Shell Scripts to work across multiple operating systems and different media including tapes and hard disks. Perform and automate scheduled network security audits using tools like ID Finder, Cornell Spider, Tripwire, Nessus, Nmap, and Wireshark. Implement secure data transfer practices using secure shell tunnels allowing access to windows file shares, oracle databases, web based applications, and remote desktop protocol. Use programming knowledge in ASP, C, C++, Coldfusion, DOS Batch, Perl, PHP, Shell Scripting, Visual Basic Script to test updates, fix errors, and develop routines to assist with everyday tasks. Designed and programmed an application to parse firewall log files from a variety of systems and create graphics of a simple log parsing system to report data and create graphs in PHP. Planned and lead the conversion of our clients and system from Eudora to Outlook and the campus Exchange and Active Directory environment called XEDA. Implemented routines to convert templates, address books, and to the new system. Documentation and training of basic system features to assist the office staff with the transition. Configuration of the Outlook/Exchange out of office system to ignore campus distribution lists. Build and configure Linux internet web browser kiosks. Design and implement a virtual server environment using VMWare ESX server. Documentation of local system configuration, network settings, and installation procedures. Configuring systems and firewalls to work with Dafis, Banner, PPS, and other core UC Davis software applications. Audit network stability and stress testing using tools like iperf. Creation of network topology and workstation layout diagrams with Visio. Web application designer Consolidated Streaming, Boca Raton, FL Lead programmer and project manager developing web applications in PHP including but not limited to: basic error checking forms, template structure, database connectivity, file transfer protocol (FTP) modules, auto reply , password protection, RSS generators and parsers, XML generators and parsers, file uploading, on the fly image manipulation, Philip J. Allen Page 3

4 date conversion, calendars, Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA), building benchmarking tools, cryptology including work with DES, TripleDES, Blowfish, and one way Cryptography. Took over project management for Loan Processing Application development. Ran security audits on public facing interfaces and forms. Modification of administrative interface fixing functionality of the core business logic allowing staff to view and audit incoming requests. Developed a Web Based Video Streaming Platform from the ground up. Integration of a user authorization system which linked to chat channels, forums, and custom video streaming interfaces. Created a system to allow web developers access to the template engine, database administrators to modify SQL queries, and supporting staff to modify and manipulate website content using an administrative interface. Creation of an event calendar website. Development of modules to perform on the fly image manipulation with the GD library. Image uploading infrastructure using FTP over https. Modification of web designers template to fit dynamic content. Administrative interface allowing staff to add and create calendar event items. Added the ability to export the calendar contents to other calendar systems. Web Design with HTML, XHTML, and CSS. Supported system administrators in FreeBSD, Redhat Linux, Debian Linux, and Windows 2003 using Apache, MySQL, MSSQL, FreeTDS, and ODBC. Database design with MySQL and MSSQL. Configuration of Cisco T1 data lines and firewalls. Application debugging and testing in ASP and AJAX. Creation of data export processes to allow ASP and PHP to interact across networks. Acquired and maintained web based applications. Rebuilding portions of an integrated architecture adding new modular components. Debugging large coding projects for logic and syntax errors. Work with Concurrent Versions System (CVS) and Subversion. Systems Administrator Eagles Peak Charter School, Vista, CA Primary Systems Administrator for roughly 15 Linux and Windows servers running the schools primary services including , DNS, Websites, centralized anti virus, and distance learning applications. Desktop support technician for teachers, staff, parents, and students for 30 workstations at the primary site and over 100 workstations in secondary locations and home office locations for distance education programs. Network configuration of Cisco, Cray, and Bay Networks routers. Network provisioning of secondary sites configuring T1 and T3 lines with CSU/DSU and routers. Configuration of firewalls, NAT routers, and wireless access points including D-Link, Netgear, and Linksys. Documentation of network, services, system configurations, and security protocols. Designed and programmed distance education software for remote file uploads, white boards, video over IP, and voice over IP. Integration of software to work with out of the box products like blackboard and reading plus. Network printer installation, configuration, and maintenance. Implementation of system backup utilities using Rsync, SSH, Shell Scripts, and Amanda. Security auditing of file sharing and port services. Installation and maintenance of a centralized anti virus server. Assisted with content updating of the school website and related services running Zope and other CMS systems. Creation of a database and user interface for an in-house ticket logging system. Support and creation of distance education software including Live chat, Video and Voice Over IP, and File storage. Philip J. Allen Page 4

5 Telephone system maintenance with Centrex and POTS. Network Specialist and Desktop Support Self Employed, Sacramento, CA Working as a self employed Network Specialist and Desktop Support Technician I used my people skills to network myself socially and acquire jobs. Allowing myself to refine skills in computer networking, security, and basic desktop support. My goal was to provide the best support at affordable rates documenting network layouts and system structures with tools like Visio and Dia. Security Auditing using the following tools: Nessus, Netstumbler, Nmap, and Wireshark. Static and dynamic web page design and modifications using HTML, PHP, and MySQL. Systems administration on Windows and POSIX style systems (Primarily FreeBSD and Linux) using skills related to security, monitoring, and user authentication methodologies. Home user and small business network configuration including DSL, Cable, and T1 lines. Configuring Cisco, Bay Networks, Managed Switches and Dlink, Linksys, and Netgear routers. Removal of unnecessary services, applications, malware, and viruses using AVG, Spybot Search & Destroy, Hijack This, and Rootkit Revealer. Configuration of network printers and print servers. Configuration and management of Windows Domain Controllers and Active Directory. VPN file sharing configurations connecting multiple offices on different networks. Maintain office equipment including copiers, printers, and scanners. Design website layouts using the W3C standards. Systems Administrator Horizon Instructional Systems, Lincoln, CA I was hired on as the primary desktop support for a staff of 30 users and 500 plus home schooled students. I was the primary support for the off site users assisting in connection problems, modem initialization strings, remote software troubleshooting, and in house hardware upgrades and repairs. We provided computer systems and dial-up services and functioned as a basic ISP. I later took on responsibility as the Systems Administrator for the Telefinder BBS Dial-up services, network routing and worked on the server conversion projects eventually creating an awesome low budget Redhat Linux server farm. My first task was to write an application in Visual Basic to fix the default system configurations. The application configured the Dial-up Network settings on Windows 95 and 98 systems, and set default system settings for remote programs used for the distance education systems. The finished product was a simple ISP installation disk that fit on a floppy that simply got the job done. Planned and integrated a migration of Bulletin Board System services including Dial-up Authentication, Chat, , DNS, and Web from Telefinder BBS to a more web based environment. Originally moving to a more web based environment using Macintosh server applications and finally moving towards a mixed server environment using Linux for web, , DNS, and file transfer protocol. While keeping a limited Macintosh environment running our primary database applications and user authentication radius servers. As the Systems Administrator I maintained AIX, Solaris, Linux, Windows, and Macintosh servers for school services using the following server applications including Apache, Bind, CU-SeeMe, Filemaker, IP Bulletin Board System, Mac Radius, Men and Mice DNS, MySQL, NTP, Oasis SIS, PHP, PostgreSQL, Telefinder, and Zope. Network design, configurations, and installations dealing with routers, switches, servers, workstations, and printers. Creation of database structures for user authentication, Student Information Services, and internal IT service needs. Documentation of system configurations related to network design, server infrastructure, Philip J. Allen Page 5

6 and workstation layout in Visio and web based documentation systems. Provided technical support for office staff, teachers, parents, and students. Support for distance education using Video and Voice Over IP with Polycom and CuSeeMe. Implementation of system backup procedures using Retrospect and Amanda using tape and hard disk file servers. Creation of a network monitor utility written in Perl. Assisted with configuration of network data lines: T1, T3, DS3, and OC12. Network configuration of Bay Networks and Nortel Networks routers. Assisted with telephone systems setup of PBX and POTS. Configuration of analysis systems using Webalizer to process website log files and MRTG tool to graph router statistics and RRD tool to create custom graphs. Education and Training DOS 1996, Java 2005, C , Mac OS X server 2009, Security Training 2009/2010/2012, System Administration (Active Directory) 2009, VMWare 2009, Web accessible 508 standards 2010, Windows Active Directory 2009 High School Diploma, Eagle Polytechnic Institute of Technology, El Camino High School, California, 1997 References Available upon request. Philip J. Allen Page 6