Tenvir A. Haq                         

 

8044 Leishear Road, Laurel, MD 20723;  E-Mail: th8044@outlook.com

 

Certifications: 

 

§    Microsoft: MCITP (Enterprise Administrator, 2008), Microsoft Enterprise Solution Expert- Private Cloud, MCSE 2000, MCSA, MCSE & MCP (NT 4).

§    ITIL v3

§    VMware: VCP 510 & VCP 410.

§    Cisco: CCIE Security (wr), CCNA.

§    Citrix: CCA.

§    Checkpoint: CCSA.

 

Education:

 

B.S., Computer Information Systems.  Cal Polytech University, Pomona, CA.

 

Work History:

 

21 years of admin/engineering, security, systems/network design, project lead, enterprise and cloud architect experience.

 

Experience:

 

FFSystems, Columbia, MD 11/2008 – Present

 

Enterprise Cloud Architect

 

·               Analyze, design and implement enterprise cloud platform along with server consolidation to the VMware, Microsoft Hyper-V, and XenServer 6 platforms for a multi-national, 34,000+ servers, 3000+ data centers.

·               Design cloud enterprise infrastructure implementing cloud controllers: such as vCloud Director (vCD), OpenStack, CloudStack along with Amazon AWS, Google Apps, Cloud Storage Gateways, etc.

·               Architect, design, and deploy private and public cloud platforms using vCloud Suite Enterprise such as: vShield Manager (vShield App, vShield Edge, and vShield Endpoint), vCloud Director, vCenter Chargeback Manager, and vCloud Automation Center (vCaC) products along with application migration to VMware public cloud, vCloud Air.

·               Deploy Federation Enterprise Hybrid cloud (FEHC) components such as VMware vCloud Suite, vCenter logging, VMware NSX networking, vBlock components, EMC Avamar, EMC RecoveryPoint, and VCE hardware platform. 

·               Design business continuity and capacity planning on public cloud with AWS, Microsoft, and VMware product.

·               Setup Amazon AWS EC2 platform along with Amazon Virtual Private Cloud (VPC) and its components such as: internet gateway, security groups, VPC subnet, Elastic Load Balance (ELB), SSL / PKI certificates, create auto scale instances and assign elastic IP address to the instance, create templates with Amazon Machine Image (AMI) to provision multiple virtualized instances; monitor EC2 instances (CPU, memory, disk IOPs, network traffic with CloudWatch; distribute incoming traffic by creating an elastic load balancer using the Elastic Load Balancing service; allocate Amazon Elastic Block Storage (EBS) network-attached persistent storage to Amazon EC2 instances; use Amazon S3 (Simple Storage Service) a distributed data store with simple web services interface to store and retrieve large amounts of data as objects in buckets (containers); setup/operate Amazon Relational Database Service (Amazon RDS) to launch a DB Instance and get access to a full-featured MySQL database; Setup Amazon Route53, a highly scalable DNS service to manage DNS records by creating a HostedZone for each domain.

·               Establish AWS Identity and Access Management (IAM) to create multiple users with unique security credentials, integrate with Active Directory, SSO based federated service, and manage the permissions for corporate users.

·               Team lead of application migration (Legacy, COTS, Mainframe, Unix/Linux, Windows, hardware- appliance to converged networking) from multidirectional data center to AWS platform without application down-time.

·               Infrastructure architect of a worldwide cloud initiative and team lead of OpenStack cloud platform deployment with compute-Nova, network-Neutron, dashboard-Horizon, block storage-Cider, identity- Keystone and orchestration service-Heat along with MongoDB, MariaDB, Cassandra databases, application configuration and automation tools such as: Chef and Puppet.

·               Deploy vCenter Site Recovery Manager (SRM) in the vCloud environment and setup protected and recovery sites.

·               Design and manage converged infrastructure implementation with VCE VBlock; Cisco 5108 blade hosts, Cisco UCS 6100 switches, Cisco MDS 9506, Nexus 1000v, and EMC Clariion CX4-480/Symetrix V-Max storage arrays.

·               Manage the VCE platform with vSphere, UCS manager/CIMC, and EMC Navisphere/Powerpath utilities.

·               Manage application migration to enterprise cloud platforms for large government agencies and public corporation.

·               Deploy Citrix virtualization with XCP cloud platform/ XenCenter, Citrix Access/Secure Gateway, and Citrix NetScaler MPX/ VPX along with Xendesktop/XenMobile.

·               Access enterprise infrastructure platform and provide road maps for Active-Active data center; implementing vSphere Metro Storage Cluster (vMSC) using EMC VPLEX solution and provide future migration paths to the different clouds.

·               Establish PKI infrastructure with Root, Intermediate and Subordinate CA (Certificate Authority) and manage SSL certificates distribution among Windows 2012 R2 server and Windows 10 workstations.

·               Establish Microsoft Forefront Identity Manager (FIM) and integrate with Active Directory, MS Exchange/365 platform.

·               Design and deploy MS Azure Multi-Factor Authentication (MFA) and integrate with MS Active Directory and root CA.

·               Setup AD layout for Windows 10 migration; setup GPOs, OUs, Security Groups and lead Windows 10 migration effort.

·               Manage systems engineers and network admins to complete datacenter/cloud migration projects (up to 42 members).

·               Provide security design and architectural boundary for the whole data center along with directory structure, file/document distribution, mail systems, web structure, database, and COT apps on Windows and Linux platforms.

·               Implement best security practices for the core platform such as servers, networking, VM and storage. .

·               Participate in and follow the change control procedure to optimize SLA metric and provide highest efficient services.

·               Conduct meetings, webinars, training sessions, mentoring and knowledge transfer to the team members.

 

Enterprise Architect/ Lead Engineer

 

·               Architect Active Directory infrastructure with DNS and DHCP along with networking and storage components.

·               Deployed multi-site Active Directory, OU, Sites, GOP, site trust, rights and securities for multi-national companies.

·               Migrated 2003 to 2008 to 2012 AD sites, GPOs, OU’s, and established USGCB (FDCC) compliance.

·               Designed and consolidated GPOs for different business entities and clean up old GPOs and document the process.

·               Logical and physical design of multi-site networks with AD, print server, file server, SQL, Exchange, Web Servers, DNS/DHCP servers, WSUS/SCCM, imaging servers, virus/spam filter servers, and IIS servers.

·               Designed enterprise network backbone along with Installing and configure and upgrading Cisco switches, routers, Checkpoint firewalls, and ISS IDS.

·               Accessed, project plan, designed MS Exchange 2003/2007 migration to Exchange 2010 platform.

·               Migrated Exchange 2003/2007 to Exchange 2010 on dedicated servers plus VM platform; including Client Access Server, Hub Transport Server, Mailbox Server and Edge Transport Server (for MS Forefront).

·               Migrated SMTP components/connectors, user mailboxes, resources accounts, security groups, distribution mailboxes, Public Folders and test to make sure everything works accordingly.

·               De-commissioned old Exchange servers and phase-out old Exchange platform from the organization.

·               Supported Blackberry servers (BES) for the corporate users and troubleshoot BES related issues.

·               Designed, tested and implemented a university wide network migration from Novell to Windows.

·               Designed university wide active directory infrastructure, including users, groups, sites and GPO’s.

·               Designed and implemented University wide mail migration to Microsoft Exchange mail systems.

·               Installed and managed Windows 2003/2008 PDC, BDC, files servers, print servers, DNS/DHCP, and WSUS.

·               Migrated users from Novell network to Windows platform and tested/validated the migration process.

·               Managed team members with different skill sets and lead infrastructure migration operation.

·               Knowledge share with the team members through webinars, meetings, group sessions and presentations.

 

 

Maryland State Dept. of Education (MSDE), Baltimore, MD 09/2006 – 11/2008

 

Lead Network Engineer/Sys Architect

 

§    Manage, team-lead and administer networks over 5000 users, supporting 130+ servers, 5000+ workstations/laptops/ handhelds, 190+ network printer, switches, hubs and peripherals on LAN and WAN.

§    Support a network of TCP/IP, DNS, WINS, DHCP, IPSec, PPTP, WWW, FTP, EAP, and Wi-Fi protocol.

§    Manage State agency wide Active Directory, email solutions, file/data solutions, print solutions on Windows 2008/2003 servers, VMware ESX/ESXi, MS Exchange 2007/2003 servers, OWA, MS Outlook 2007/2003 clients and handheld devices.

§    Administer MSDE Active Directory clean up and migration process for the State Agency and all other sub-sites.

§    Configured VBScript/WSH to migrate users, groups and OU’s from old platform to new AD sites.

§    Design a future plan to migrate Exchange 2003 to Exchange 2007 on cluster environment.

§    Install and manage VMware server-firm platform on ESX/ESXi, including installing servers/workstations, creating VMware images and temples and migrate Windows 2000/2003 servers.

§    Setup and administer Blackberry Enterprise Server (BES) solution for MSDE and high profile clients such as; State School Superintendent, Asst. Superintendents, and division directors.

§    Manage Symantec Mail Security for Exchange, Symantec Mail Security for SMTP gateway, Symantec Mail Security for clients to mitigate virus infections and Cymtec IDS to identify infected clients.

§    Support/maintain Citrix Meta frame platform including applications and printers setup.

§    Administer and manage patch solutions for over 3000 servers and workstations using MS WSUS2/WSUS3.

§    Install and support MS SharePoint 2007 server and participate on application migration process.

§    Support/help team members to image new and old servers/workstations with industry standard products such Acronis, Ghost and VMware imaging.

§    Manage PKI (SSL certificate) deployments for state agency websites.

§    Install and support SQL 2000 cluster servers including server and storage management..

§    Setup EMC CLARiiON Storage Systems along with Brocket CX400 fiber channel switch with Emulex/QLogic  HBA for DAA on MSDE network.

§    Day to day activity on Dell Blade/ ProwerEdge/Optiplex/Precision / IBM Netfinity server, Cisco switches and TeraStation; security implementations and follow the guidelines of state DBM, NIST, CERT, FISMA, etc.

 

CSC contract to EPA, New Carrollton, MD     07/2004 – 09/2006

 

System Engineer/Security

 

§    Manage and administer EPA national critical data center and work with a team of engineers and specialists.

§    Install, maintain, and troubleshoot Checkpoint NGX firewall on Linux hardware platform and SecuRemote VPN connectivity for remote offices and users; including hardware, firmware and patch upgrade, log generation/migration, install policies/rules, account creation and report generation, etc.

§    Install and maintain PKI and managed PKI (MPKI) solutions for EPA’s test and production environment including 28 certificates, CAM server, Root CA, Weblogic and Java certificates through DST, Verisign, Identrust, ACES representatives, Microsoft, etc.

§    Install and configure IBM Blade servers and migrate contents from Dell PowerEdge platform to blade servers.

§    Manage EPA’s development/test and production servers (Windows 2000/2003 platform) running IIS, BES, WSUS, Citrix, SQL servers on TCP/IP/WINS/DNS environment.

§    Ghost (image) EPA’s development, test and production servers before migration, product upgrade, application deployments, and security patch installation.

§    Remote control EPA’s production servers using Remote Admin software and configure software perimeters.

§    Support EPA’s two domains on different locations, including Domain Controllers, Active Directories, DNS’s, Veritas BackupExec and BrightStore backup solutions.

§    Configure and troubleshoot EMC SAN storage systems to accommodate all six web servers’ storage.

§    Install and manage VMware server on Dell PowerEdge servers to test web applications on Windows 2000 OS.

§     Manage and edit scripts to update application patches/ software to the remote location servers and test the network connectivity using VBScripts/WSH tool.

 

Telecommunications Development Corp., Washington, DC04/2000 – 06/2004

 

IT Engineer/Security, DC OCTO IT Security Dept.

 

§    Monitored and maintained physical and logical security and access to DC government citywide network.

§    Created, deployed and managed incident response policies and guidelines for 35,000+ users network.

§    Designed and implemented security patches and service packs (based on CERT and product vendors) for production servers/desktops; and centrally distributed them to the entire network.

§    Supported McAfee EPO virus protection central systems for OCTO (15,000+ nodes).

§    Audited network security breaches for DC agencies, using scanner and analyzer (nmap & ISS, LANguard).

§    Tested and evaluated new security products; compare, classify and categorize different vendor’s product; bench mark final selection and provide recommendations to appropriate management.

§    Installed SSL certificate on the DC Gov’s critical web servers for certificate authentication with Verisign, Inc.

§    Communicated with all DC agencies servers using VNC, DameWare, Intel LANDesk, Windows Terminal Server, and Symantec PC Anywhere communication software.

 

Systems Engineer, DC Office of Planning

 

§    Designed and implemented Active Directories including Exchange 2000 mail platform for DC Gov. agencies.

§    Provided platforms support for Win 98/2000 Pro/XP and NT/2000/2003 Servers.

§    Supported AD/PDC/BDC, Print, Application, SMS 2.0, SQL, EPO Virus Protection, and GIS servers.

§    Managed backup jobs using ArcserveIT 6.61 and Veritas Backup Exec 8.6.

§    Migrated all servers from Windows NT 4.0 to Windows 2000 for DC government agency.

§    Established and supported Microsoft mail systems (Exchange 5.5/2000 and Outlook) on cluster servers.

§    Designed and implemented new file structures for the DC Office of Planning.

§    Security design for PDC/BDC, TCP/IP/WINS/DNS, Exchange and file servers at DC Office of Planning.

§    Maintained and provided troubleshooting for all Cisco routers, switches and hubs.

§    Provided software support for the DC agencies: MS Office products, Visio, Norton/McAfee Antivirus, PCAnywhere, SQL, and IIS servers.

§    Test OS, new software and special applications on VMware server platform before deployment.

§    Coordinated IT support/purchase between vendors and agency managements.

§    Created images of 40+ critical servers and workstations for disaster recovery.

 

Systems Engineer/ Technical Trainer, DC CWD

 

§    Provided curriculum development and technical training of MCSE courses to the network administrators and system engineers working for the DC Government.

§    Designed and developed IT training programs.  Managed schedules and project development.

§    Provided ongoing engineering support for the setup, preparation, and troubleshooting for the computer labs.

 

Changing Technologies, Inc., Herndon, VA01/1999 – 03/2000

 

Network Engineer/ IT Manager

 

§    Administered and supported a team of desktop group on Windows NT BackOffice 4.0 including multiple Exchange 5.5 Servers, Internet Information Server 4.0, SQL Server 7.0, System Management Server 2.0 and RAS Server.

§    Set up, enhanced and kept up hardware and software for ideal performance.

§    Performed capacity planning of the LAN, hardware and software, backup and disaster recovery procedures.

§    Recovered mailbox (calendar, contacts, inbox, and sent items) from backup tapes in case of disaster.

§    Network hardware management tasks included: performing setup, configuration and upgrades of switches, routers, hubs and cable connections; managing trace routes and network traffic.

§    Converted mailboxes from ccMail to MS Exchange and MS Outlook interface.

 

 

ASA Associates, Columbia, MD04/1998 - 12/1998

 

Network/Hardware Specialist

 

§    Built high-end computer servers, performed initial disk management tasks, installed server software and custom-developed diagnostic features for several government agencies.

§    Designed, analyzed, implemented, and tested networks of 100-1000 user: including router, switches, hubs, and cable connections.

§    Managed, configured and diagnosed Windows NT 4.0, MS Exchange 5.0, SMS 1.2. and SQL Server 6.5.

§    Furnished technical support for software, hardware and connectivity problems for 56 workstations.

§    Set up, enhanced and kept up hardware and software for ideal performance.

 

Veltex Industries, Inc., Los Angeles, CA11/1995 - 12/1997

 

Network Administrator

 

§    Migrated all Novell Netware 4.0 servers to Windows NT 4.0 platform.

§    Administered, configured and diagnosed Windows NT 4.0 servers, including MS Exchange 4.0 and IIS.

§    Provided technical support for software, hardware and connectivity issues for 120 workstations.

§    Configured, and supported workstations with Windows95, MS Office Suite, MS Internet Explorer, MS Front Page, MS Outlook.

 

Work Status: US Citizen.

 

Security Clearance: Eligible (secret/top secret); currently with active MBI.

 

Summary:

 

§    A highly skilled, creative technologist with hands-on knowledge of designing, building, and maintaining secure, high-performance, fault-tolerant enterprise infrastructures (including facilities, networks, systems, and services).

§    A proven communicator and leader, with a demonstrated ability to balance technical needs with business needs in order to find and apply cost-effective solutions.

§    A dedicated professional working in the IT field over 21 years as a lead, who understands the criticality of efficiency and automation in the fast-paced, high-pressure IT industry.

§    A creative thinker, a self-starter, and a hard worker with strong organizational, planning, and leadership skills.