Operations Analyst With Cdw
Vernon Hills, Illinois, United States
Service desk, monitoring, management, and troubleshooting. Provided support from within phone queue and worked with multiple systems such as Cisco Prime, vCenters/ESX hosts, Cisco networking equipment, Meraki, CUICs and CUCMs. Assisted remote sites such as with rebooting APs through PRIME, failing over sites via #bgp bouncing and submitting support tickets with vendors, extending filesystems on Unix/Linux systems upon receiving usage alerts, etc. Tracked long-term PRB tickets to retrieve updates and push for engineering teams to fix reoccurring technical issues.Networked with technology specialists to consolidate TCP access methods and demonstrably reduce access times by up to 90% via a POSIX (Cygwin, later WSL) environment operating on stock Windows 10. This used secure, encrypted SSH port forwarding that could be automated through scripting.Received a PIR after which potential TCP meltdown was identified as a likely cause for outages of critical network routes to customer netowrks. This had not yet been identified by the applications team nor the networking teams and was only found after thorough investigation.Identified potentially malicious code by sight via hex dump to kthread_work(). Here a NOP sled, followed by a function prologue, was found. This was continually being passed to kthread_work() at different indices, indicating likely malware. Later found this was likely due to kernel instrumentation (NOP space for kprobes or eBPF, for example).