Linux/Cloud Security Engineer

• Sep 2018 - Present

Design system infrastructural, implement OS platform engineering while interfacing with different project managers to maintain existing systems and build out new Linux systems. Engineered and performed as POC for the NOAA Messaging operation center for next-generation software deployment to the AWS Cloud environment. Leads MOC effort in development and operations processes of developing CI/CD roadmap for MOC application servers as we migrate them from prem to cloud environment. Play a significant role in establishing operational processes for developing MOC distributed cloud platform as we develop and automate standard operating procedures around common failure scenarios. Lead the development of our local Docker environment which include the setup and configuration of Docker, Docker-Compose and Docker-Swarm and the integration of Git repository. Build our applications with Docker which involve dockerzising a webapp and creating a Docker workflow that will test build and package our application into a production ready docker images using best –practice approach. Create AWS accounts and setup Multi-factor Authentication for our Root account. Created IAM users, groups and roles for other devops and cloud engineers for the day-to-day administrative use of the cloud environment while implementing enhance security using the multi-factor authentications. Setup up forced MFA policy for user and administrative groups using a managed IAM policy. Configured AWs CLI to Assume role and also setup named profile. Define Cloudformtaion template used in deploying the MOC cloud IAAS environment while also working on setting up ECS Cluster and working with tools such as the ECR . Deploy configuration management tools such as Ansible and orchestrations tools like Jenkins2 while also leading the effort to evaluate and improve IT infrastructure by identifying application servers that can be virtual and migrated to the cloud computing environment. Show less

US Cloud Engineer

• Aug 2020 - Apr 2021

Senior Linux/Security Engineer

• Feb 2017 - Sep 2018

Performed infrastructural & environmental design, implement OS platform engineering and interface with different project managers to maintain existing systems & build out new Linux systems. Engineered and performed POC for new next-generation hardware and software to be certified as Operational STANDARD within Centos Linux and Redhat Linux environment. Lead the effort to evaluate and improve IT infrastructure by identify application server that can be virtualize and migrated to the cloud computing environment. Support patch management and updates for hundreds of physical and virtual application servers running on operating systems such as Redhat7,6,5,4 , Solaris 10 and Ubuntu. Responsible for automation & maintenance of RHEL environment and lead the effort to upgrade and certify them for use as the Operational STANDARD OS within RHEL environment. Developed engineering drawings using Visio to show infrastructural layout of the environment of all servers and the System security boundaries. Worked effectively with the SECURITY engineering & operation team to certify all existing and new RHEL servers according to infrastructural security policies. Worked extensively on remediating security deviations and fixing any security alerts to harden the Linux RHEL servers. Performed extensive UNIX servers & network setup, configuration, tuning and maintenance. Implemented DR exercise & configuration by replicating data from (PROD & Non-Prod environment) to a remote data center and maintaining consistence data across the data centers. Configured, maintained and secured enterprise-class servers by hardening and implementing checkers-rules for system auditing against environment intrusion & system monitoring. Coordinated and applied OS Patches on RHEL servers. Installed, configure and implement system security scans. Maintained weekly security scans using Nessus Security Scanner and Integrating the Nessus scanner to the Security center. Show less

Sr. Linux System Engineer/Team Lead

• Sep 2013 - Jan 2017

As the senior ldap directory system admin in the CIO office in NOAA, I helped in maintaining legacy SunOne directory server and in the deployment of newer Opendj directory server infrastructure. Created a certificate request and got the certificate sign by an approved CA authority like Verisign, install the sign cert on the directory server and setup the replication agreement between the multi-master directory servers while ensure that appropriate ssl certificate was in place so that the replication can done securely. Install and configure Apache Tomcat in support of various projects. Deploy virtual Redhat7 Linux server using the native KVM virtual platform for the Linux Redhat. Install and configure Nagios monitoring tools and deployed it in monitoring DNS, Ldap replication and general system health check. Install and configure LAM (Ldap account manager) a web interface to the directory infrastructure. Applying operating system updates, patches, and configuration changes. Installing and configuring new hardware and software and I also perform routine audits of systems and software and backups and recovery of operating system and application. Perform basic task like adding, removing, or updating user account information; resetting passwords, etc. Integrated system and user login to ldap application for user’s authentication and answering technical queries and assisting users in resolving security issue. Document the configuration of the system, troubleshooting any reported problems while optimizing system performance while ensuring that the network infrastructure is up and running. Maintaining system volume using management tools like lvm, Solaris ZFS Show less