Devin Howton Email & Phone Number

Washington, Dc, Us

Washington, Dc, Us

Currently serving as one of the primary engineers designing, deploying and configuring Azure tenants for a member of the Intelligence Community, across numerous Impact Levels. Primarily responsible for Entra ID and its related security and governance solutions to include, Conditional Access Policy, Priviliged Identity Management configuration, and Azure Policy. Other Entra ID-related duties require engineering design and operations of the hybrid identity sync solution Entra Connect, all App registrations for various OAuth requirements and Azure RBAC least privilege access. In addition to primary day-to-day duties related to Entra ID, also working on a team responsible for all other Azure service offerings to include, Azure Monitoring, Log Analytics Workspace, Sentinel, Azure Firewall and Network Security Groups (NSG), Storage Accounts, Key Vaults, Azure Virtual Desktop, Microsoft Defender for Cloud as well as Defender 365 solutions to include Defender for Endpoint and Defender for Identity. Personally responsible for handling the migration of a current solution away from utilizing the Log Analytics agent for log retention within a Log Analytics Workspace to the currently supported Azure Monitoring agent. This required custom Azure policy to be applied to properly bundle specific workload types to their relevant Data Collection Rules within Azure Monitor. Also currently serving as a key resource in the deployment and sustainment of a zero-trust network design to include a hub-spoke subscription model with virtual networks behind environment specific NSGs, implementing a deny-all on inbound/outbound communications which are only allowing required traffic for the overall solution.

Served as the contractor Lead Engineer on the DISA VDI program, and key resource for the government on design, implementation, and operation of the current systems in place. Supported the Microsoft Active Directory domain and server infrastructure running a VMware vSphere/Horizon based VDI solution that leveraged Nutanix converged hardware. Also supported VMware NSX for the network stack as well as the application of identity-based firewall rules. Subject matter expert providing design and support of VMware AppVolumes and Liquidware Labs ProfileUnity for application and profile delivery. One of the only engineers on the team that handled routine desktop image lifecycle utilizing DoD SHB releases, application packaging requests with AppVolumes as well as NSX firewall troubleshooting tasks. Served as the main POC for external technical groups on the contract that provided additional services and support to the environment that included; McAfee HBSS for desktop security posture, Microsoft MIM for automated user account provisioning and Splunk for aggregated desktop OS log management.Provided all critical design documentation for and lead the implementation and continued support of Active Directory, DNS, DHCP, DFS/R, Microsoft SQL. Created all GPOs and developed their layout for full STIG compatibility within the environment. Designed, hardened and installed a SQL solution that utilized AlwaysOn capability, ensuring minimal downtime for database access by critical solutions in place.

Worked on a small team in charge of migrating a SharePoint 2010 physical environment to an Amazon Web Services Cloud within the Intelligence Community. Recently worked on a migration with the continued support of a SharePoint 2007 environment to a custom tailored SharePoint 2010 multi-server farm using SQL 2012 Instance based Failover Clustering storage. The farm includes separation of data utilizing Service application proxy groups, FAST Search, and Office Web Apps in addition to numerous 3rd party tools which handle backups, content blacklists based on keywords, as well as replication of content to an alternate location. Personally responsible for designing and implementing a custom monitoring solution leveraging HP Operations Manager as well as the lead in charge of remediating security vulnerabilities related to the SharePoint Farm. Additionally, was responsible for the overall build of an identical alternate site including the storage build and zoning of assets which supports the replication of SharePoint content utilizing a 3rd party tool, Metalogix Replicator. One of two engineers that handles storage day-to-day tasks on the SharePoint SAN such as expanding LUNs, creating and presenting new LUNs, creation of MetaLUNs, and the monitoring of storage disk and array health.

Alexandria, Virginia

Served as lead for VMware View Virtual Desktop environment supporting multiple tenants across three classifications. Maintained master Virtual Desktop image, updated it with patches, application updates, and performed associated recompose operations to ensure the image was correctly deployed.Lead technical efforts to obtain and ensure requirements were met to receive Authority to Operate status for multiple servers across three classifications. Supported the information assurance team in hardening Windows Server templates to conform to all DISA STIG requirements. Developed Group Policy Objects to ensure STIG enforcement for Active Directory, DNS, DHCP, HBSS, Windows 2008, Windows 7, Internet Explorer, and SQL 2008. Deployed multiple instances of HBSS in compliance with DISA guidelines to ensure AV and HIPS agents were installed and managed across the Enterprise. Developed the Active Directory hierarchy to allow Delegation of Authority which allowed certain groups to have the least administrative rights to complete their job. Worked on a team in charge of keeping a VMware vCenter running across three classifications which provided resources and storage for over 15 tenants. Assisted in troubleshooting complications with ESXi hosts within clusters related to hardware, storage, and/or networking issues. Served as a member of a small team that worked on all CommVault Simpana backup related tasks for our own environment as well as tenants.

Arlington, Virginia

Working with Network Operations, have worked with others to keep all supported domains functional for day-to-day use by the user base. These organizations include WHS, PFPA and WSO. Also assist with OSD Resource domain when necessary. As Active Directory team lead, responsible for keeping domains operational as well as implementing domain wide group policies and patch plans to remediate security vulnerabilities. In addition to Active Directory work, support complications and new builds within VMware vSphere environment, troubleshooting Exchange and Blackberry issues and also other various low level complications with other applications in use in the environment. One of two firewall POCs for WHS environment and support customers in identifying issues caused by lack of firewall ACLs as well as the placement of new ACLs with ITA who manages all firewalls within the DoD. In charge of all WHS internal and external DNS and coordinate any new external DNS entries with ITA Core IPT DNS team.Additional Notes:- Designed and implemented an intranet setup of Microsoft WSUS.- Completed DISA HBSS 3.0 Certification course- Created custom group policies to apply DISA STIGs - Upgraded firmware of RuggedCom and GarrettCom fiber switches for PBMO- Used failover software to assist in patching of production servers

Baltimore, Maryland Area

Monitored and maintained 15 client networks and provided support for their IT infrastructures prior to my current cleared position. Any and all assistance required was completed by, myself and a team of two others, which included all IT operations as well as other various training programs and administrative work.Additional Notes:- Migrated users from an Exchange 2003 to Exchange 2007 environment- Designed and installed WAN/LAN solutions- Designed and controlled an Active Directory Group Policy structure and hierarchy for multiple clients- Troubleshot and controlled Citrix printing- Maintained and monitored client’s Symantec, Sunbelt, Mail Marshall, SonicWall hardware and software spam solutions- Installed and maintained Symantec, Sunbelt and Trend Micro Anti-Virus solutions using the software’s remote and local install methods- Installed and maintained Cisco Routers, Firewalls and Managed Switches as well as SonicWall products- Setup and maintained Citrix, WSUS, DNS, Blackberry and Terminal servers- Implemented and maintained backup solutions using tape and backup to disk solutions with the Symantec/Veritas BackupExec software- Experienced with multiple Incident Management Systems- Designed and installed CAT5 based backbone infrastructure

Arlington, Virginia

Worked on a migration project for WHS and was the lead technician in charge of imaging and upgrading the new systems.Additional Notes:- Imaged and Sysprepped more than 80 desktops using Norton Ghost 8.0- Created and controlled multiple OS images for various hardware configurations including 32 and 64 bit based servers and standard desktop images- Controlled the inventory management for the hardware and software for desktop rollout- Worked on a desktop rollout project and assisted in migrating user data into a new Windows Domain