David Stratman Email & Phone Number

Denton, Tx, Us

San Francisco, California, Us

Plano, Texas, Us

▪ Product Owner for Azure cloud▪ Architected & designed standards and first Fisher GitHub repos, secure/self-hosted runners, and CI/CD IaC pipelines for cloud. These modeled & set security & design standards for subsequent cloud pipelines.▪ Led and advised migrating 20+ new application workloads and tools into Azure▪ Centrally wrote and developed all standards for terraform IaC modules & READMEs for 50+ modules▪ Architected, diagrammed, & implemented integration of IaC, Ansible, ARM templates, bash, pwsh, & Azure CLI for cloud continuous delivery▪ Initiated & led meetings with cross department partners including Devs, InfoSec, Network, & FW teams▪ Trained 20+ cloud / devops engineers for our Infrastructure-As-Code, CI/CD pipeline, and engineering principles as well as thoroughly documented architecture, best practices, and how-tos for ref.▪ Paired with Sr. Cloud Architect to technically drive cloud 2.0 iteration for security, ease of, and speed of delivery improvements, including meetings and solutioning improvements to vendor delivery▪ Advised and contributed to new tooling decisions & frameworks to improve automation & delivery speed▪ Worked closely with application teams to improve pipeline development tooling to enable all future teams▪ Led effort to improve and meet all security compliance requirements with Sr. Cloud Security Architect across Azure footprint using our in house security controls as well as latest Azure CIS standards and OS CIS standards -- paired with security architect and other team members in devsecops effort▪ Drove securing all Azure secrets, certificates, and encryption keys in methodology and modules via code using IaC and teaching team members, including writing documentation

Fort Worth, Texas, Us

- Engineering & Architecting cloud agnostic solutions and tools to port on-prem infrastructure to IaaS in Azure- Architected & Automated fully automated pipeline for deployment of Data Science / Machine learning environments in Azure for our Data Science team, using Terraform, Ansible, powershell, and Azure DevOps for the CI/CD pipeline- Cloud strategy & architecture - devops, automation, governance, and dev envs build-out- Building a fully automated build on-demand env pipeline for two critical online financial apps from on-prem to Azure cloud with a push-button pipeline using Terraform, Ansible, Chef, powershell, Azure CLI, Azure DevOps (formerly VSTS/TFS) for CI/CD, and others- Working in Azure DevOps (formerly VSTS/TFS) pipelines for IaC with Terraform, Chef, and Ansible Tower followed by code deployment (release management)- Initiating and architecting Ansible Tower from POC to full usage and use of Ansible core for full automation of patching, validation of patching and service validation after reboots, and constructing reports (jinja2) to email post-patching with results- Spurring the teams onto new technology for shorter development efforts including initiating discussions on vagrant, test kitchen, ansible, docker, mini-kube & kubernetes, and enterpise & cloud agnostic kubernetes implementations- Provide brown bags & training over tools for COE knowledge and "how tos" (ex. Terraform, Ansible, Ansible Tower, Azure, Data Science setup, etc.)- Re-architected and rebuilding Chef implementation with a cross-department team- Driving net new and streamlining implementation of older scripted automation into idempotent solutions in Chef and Ansible- Core DevOps and architecture team to move infra to cloud, beginning applications transition into cloud native & enterprise Kubernetes (K8s) architecture within Azure framework via Azure Kubernetes Service (AKS) and other tools- Direct work with internal devs to transition from monolithic app to cloud native

Armonk, New York, Ny, Us

- Working within code deployment and merging with git, Bitbucket, and other tools- Utilizing Chef.io (Chef) with idempotence in automating for massive object storage, servers, security updates, ensuring infrastructure as a code (IaC), and aiding in delivery pipeline- Daily scrums and work within the 'squad' agile framework used by Spotify- Advising and designing scripts for identifying impact after system updates are automatically applied (i.e. services requiring restart, reboots needed) on CentOS nodes- Suggest and advise on internal decisions and frameworks to improve automating and speeding up CICD pipeline- Primary resource on project to automate and upgrade to the latest Debian OS for internal IBM cloud offering on OpenStack

Plano, Tx, Us

- Lead architect and engineer for a redesign, total automation, & upgrade of the stateless SIMS POS setup for RHEL7 deployment across all life cycle envs – employing bash, Ansible roles, upgraded logstash, redesign of cups & printing, & use of vRealizeAutomation & Jenkins for OS & code deployments in all env lifecycles- Initiated, communicated, and worked to document the Center for Internet Security (CIS) standardization of RHEL6 & 7 platforms, including testing and looking into methodology to orchestrate (Ansible, Puppet) the implementation- Primary automation & architectural engineer for tooling and environment for 5K to 7K servers (OEL & RHEL instances)- Architected & designed full setup of Red Hat Satellite 6.2 and Spacewalk functionality, usage, & vision, including future system mgmt direction while educating DevOps, VMware, & Sec technical teams- Teamed with release management and development teams to work on the continuous integration, continuous deployment (CI / CD) pipeline in Jenkins and in Ansible for server and code deployments- Mapped the licensing usage & reqs. geo of the several thousands of VMs among all the VMware envs and recommended best practices to reduce thousands in costs for subscription management among virtual servers in licensing requirements- Thoroughly documented progress, tasks, and repeated procedures for systems work, applications, and all major projects, including Visio architecture diagrams and Wikis (ex. Redmine), and training other team members in RHEL6 and 7 configuration and design& automation tools and train them to perform documented steps- Standardized, documented, and tested a multitude of troubleshooting processes and procedures to hand off to the NOC, TCS, and Command Center teams for environment support, resulting hundreds of hours of work streamlined- Setup and worked within SVN, Git, and Red Hat Satellite to maintain code versioning and life cycles as well as OS software content management and life cycles

Dallas, Texas, Us

- Engineering and share responsibility for entire Linux/Unix environment, primarily composed of RHEL 3.x, RHEL 4.x, RHEL 5.x, RHEL 6.x, Oracle Enterprise Linux, Fedora, and CentOS. Webservers supporting Apache with JBoss and WebLogic primarily on the applications tier, and PostgreSQL, Oracle, SQL Server, and MySQL on the back end.- Managed the entire VMware environment- Managed and maintained the RHEL environments from end to end, including the systems running the external eComm web site for Freeman- Wrote scripts to run automated transactions internally for testing performance and implemented APM tools on the back-end for tracing the performance of these

Dallas, Texas, Us

- Supporting entire production web site tiers designed for Freeman Online – including web servers running apache (httpd), application servers running JBOSS and ATG, and back-end servers running Oracle DBs.- Administering Red Hat Enterprise Linux 4.x, 5.x, Fedora; troubleshooting filesystems, log rotation, and log4j jboss- Patching Red Hat Enterprise Linux for security and monitoring functions via satellite servers for PCI compliance and monitoring initiatives- Monitoring administration for entirety of Freeman corporate RHEL/Linux servers, cisco switches, routers, etc. using simple network management protocol (SNMP) via OpenNMS; uniquely implemented file system monitors, system load, alerting based on system events, escalations, etc.- Automated solutions for tasks – user IDs (updates, creates), updating custom file configs across all servers, sudo and privileged access changes, secure password updates- Solely responsibility for backup administration of all servers at corporate headquarters – including Linux and Windows servers, security standalone devices, etc.; serve as escalation support for backups of all Freeman branch locations across the entire enterprise- Architected and implemented end to end applications performance management (APM) suite in both OPNET and Compuware (Gomez) tools across the enterprise. Setup end-to-end, including synthetic transactions, monitoring for the top 6 of Freeman's critical applications using Compuware's Gomez (external) for synthetics and OPNET Technologies (internal) tools including AppInternals Xpert (AIX) for internal metrics and synthetics, AppResponse Xpert (ARX) for network response and packet level, Transaction Trace Warehouse (TTW) for code internals, Web Dashboards (WDS), and AppSensor Xpert (ASnX) for snmp.

Jacksonville, Fl, Us

- Responsible for OS installations, patches, and OS upgrades for AIX 5.x, 6.x, and RHEL 4.x, 5.x, CentOS servers during customer change windows - and worked with Solaris 8 & 9- Automating solutions for User ID tasks (updates, creates), sudo and privileged access changes, secure password updates, and server standardization checks (fileset comparisons, ssh configs, logging, etc.)- Administered security - communicating with management and customer leads – keeping servers at CIS standards - applying fix packs (efixes, APARs, rpm updates), OS hardening, and patching OS updates- Performing duties like Logical Volume Management (LVMs), PowerVM and VIOS, NIM backups / installs, User ID management, security audits/standardization, task automation, analyzing logs, documentation, performance monitoring/tuning, troubleshooting system issues, etc.- Secured servers for PCI (payment card industry) compliance levels for UNIX servers and boxes (CIS standards)

Armonk, New York, Ny, Us

• Standardized server cell environments in OS, patches, sudoers, DCE/DFS or AFS levels, & security standards across ~ 6 IBM sites• Led Communications Meeting, Multi-departmental IT Operations meeting, and project meetings while working with team members in countries across the world, using mitigation, negotiation, and issue resolution skills• Tracked and presented service level agreement measurements, root cause analysis, and cell-wide performance metrics for all file system infra. departments among STG division• Trained customers & 1st and 2nd level support reps in sessions for pro-active performance improvement & problem solving efforts• Led AFS/DFS data replication, core server reduction, cell server consolidation projects, and many others to completion in reducing thousands of dollars of cost to the business, trending and evaluating performance to maintain stability and performance metrics • Administered & upgraded hundreds of UNIX servers w/o service interruption in a 3K-5K client prod. environment• Eliminated hundreds of man-hours of work through writing ~200+ scripts, tools for automating server administration tasks for team and in projects (ex. fileset replication, manual server health checks, server installs, security testing, system verifications, change window coordination, performance monitoring, data creation and cleanup)• Served as liaison between various support levels, our team, and customers for problem solving and follow ups• Administered AFS across 7 cells and DCE/DFS across 5 DCE/DFS cell• Led system and server health check (HC) projects to eliminate security exposures; performed and trained delegates to perform HCs across hundreds of servers• Served as team Security Education Focal: performed walk-through sec. audit checks, automated ID revalidation, solved web compliance & Apache issues, ensure software licensing, ISO & QMS compliance• Recorded and maintained documentation for processes and procedures for ISO standards

Armonk, New York, Ny, Us

• Developed web sites for IBM strategic outsourcing sites• Designed site layout and graphics: Dreamweaver, HTML, java scripting, Adobe Photoshop, and other tools• Worked closely with project managers for project requirements, scope determination and discussions, and customer requirements for updates and software changes • Worked intimately and maintain clear communications with other major development and project groups within IGS (now Integrated Technology Delivery)

Austin, Tx, Us

• Supported laptop software and hardware for UT MBA student body• Diagnosed hardware and software issues on Windows 2000 and other Windows OSes• Worked in high pressure environment and diffused tense customer situations and issues while working to resolve all problems• Updated drivers, service packs, and firmware on systems to support latest hardware and software• Repaired and replaced failed hardware components• Led training sessions for 5-10 employees• Developed S.W.A.T. Shop web page• Performed system backups, restorations, and installations• Resolved network security and administration tasks

Newcastle Upon Tyne, Gb

• Installed, upgraded, and supported MS operating systems, including Win95/98, NT 4.0, Windows 2000 Beta for 4 departments• Maintained and supported Computer hardware systems• Performed network security, administration, and systems back-ups (for 4 depts.)• Trained and presented new issues to 10-20 coworkers on an as needed basis• Performed Software Testing for Quality Assurance – found critical memory bug to ensure resolution prior to “Gold” release• Supported software for Saleslogix products and their interaction with other Windows products and software• Maintained and worked with four different departments IT problem resolutions – software developers, IT admins., quality assurance and testing, and business and sales