Eric Berggren Email & Phone Number

Cupertino, California, United States

TPM, measured boot, etc

Cupertino, California, United States

Manage fleet of 150k+, automation/puppet, Full-Disk Encryption/Measured boot implementation

Cupertino, California, United States

IT administrator supporting VLSI & platform-engineering groups

Member of technical operations team for online storage service provider, based on Debian linux, common network filesystem protocols, and custom distributed filesystem. High-availability provided by Xen, Heartbeat, and DRBD, monitored by multiple Nagios servers.Develop Apache and WebDAV service solutions providing custom access controls and client tuning. Customized and deployed AJAX-based customer facing file browser with new backend configuration script.Improve deployment and management scripts, configuration management with CFengine, with extensive documentation. Created new Debian packages for deployment.

Comprehensive management of computing environment for 60 person semi-conductor company. Created Linux environment using network deployed CentOS 4 to replace disjointed workstations of varying OS and configurations including: LDAP for accounts and automount tables, print spooler, modular shell environment, many additional s/w packages (RPMs). Readied CentOS 5.x roll-out.Specified and deployed NetBackup server and LTO-4 library, upgraded NetApp Filer; machine room space, power (200v), and cooling expansion.Upgraded web services (Confluence, JIRA, SVN) to new host using separate VIPs and SSL while providing compatible references via original server hostname. Moved WiFi access to separate VLANs with WPA/802.1x access controls and external "guest" network. Created external service DMZ for web, e-mail, and file transfer. Configured and deployed IronPort AS/AV appliances. Implement monitoring for services, storage, network, and weather (Nagios, Cacti, custom 1-wire temperature probes with dynamic map).

Provided RHEL, Windows, and networking technical support as part of 4 person IT team for 350 person microprocessor company, with various company-wide service improvements locally and support facility in India.Managed NetBackup 6.x, developed vaulting and tiered retention periods. Created new Samba domain & file service for Windows XP, and CUPS print server, managed Cisco ASA (PIX) firewall, IPSec tunnels, filters, and address translation. Created new RHEL4/CentOS configuration and installation process, tightly integrated Samba and LDAP directory for Windows desktop domain, managed Postfix e-mail servers.Collapsed 5 password domains with migration from NIS to LDAP; added server side password policy (with custom server .so module), user account management scripts, web-based directory with annotated maps and personnel images stored in the directory schema, documentation for other IT members.

Designed and lead company-wide Linux platform upgrade from Red Hat 7.3 to RHEL/CentOS 4 with PXE network boot kickstart host installation and integration, custom RPM packages, upgraded kernel (v2.6.14) and backported upstream device drivers to support new desktop hardware. Created YUM-based package update system tied into kickstart configuration.Primary administrator for LDAP, LPRng printing, SSL certificates, CFengine system configuration manager, NetApp servers, co-authored Unix shell environment supporting bash & tcsh across Linux, Solaris, and AIX platforms. Documented numerous processes within local wiki environment.Architect and administrator of company e-mail system using Cyrus IMAP, Postfix, IronPort anti-virus/spam, and PGP encryption gateway; iSCSI LUN on a NetApp Filer provided article spool. Over 600 days continuous uptime.Designed and implemented low-cost machine room temperature monitoring, dynamic graphical map, and alerts using network of 1-Wire probes with over 2 years of service, historical data, and critical early warning of HVAC problems.

Solaris expertise for Global IT projects group, including Veritas services for Oracle and Clarify applications.Deployment of CommVault for SAN-based corporate backup strategy and remote offices with localized tape resources, media handling, and operations run book. Developed scripts for network monitoring, system configuration, performance analysis, and cluster resource management. Debugging of network proxy software, console services, system performance and memory utilization, presentations to peer groups and superiors through Excel charts, project plans for implementation and resolution.

Construct Fujitsu subsidiary company with 3 sites across California, Texas, and Vermont. Numerous other consulting projects with Fujitsu, Novellus, Portal Software, Telairity Semiconductor

Analyze, revise and document NetBackup configuration and procedures, comprising NetApp Filers, EMC Symmetrix, Windows and UNIX clients. Created design document and upgrade strategy for corporate e-mail using existing hardware. Setup "Cricket" monitoring service for NetApp Filers.

Constructed entire Unix and Windows computing environment spanning three states across US. Synchronization of datasets, e-mail routing, and relative ease of travel for personnel between sites while assuming instabilities inherent with internet VPN architecture.Created home-brew VPN solution for remote Solaris users using Perl, SSH, and PPP. Home Solaris desktop system included EDA tools with dataset synchronization utility.Document computing environment in 100+ page run book.

Stabilize DNS and e-mail client configurations; evaluated and remedied constraints within NetBackup configuration and media rotation, new software hierarchy and user environment to replace multiple work-group specific sets.

Sun Solaris desktop / server management with dynamic jumpstart profiles, CFengine configuration management, multi-domain NIS environment, NFS client cachefs, Solaris upgrade from v2.5 to 8.New core DNS & NIS servers, account management, printing, redundant e-mail services, backup strategy, user environment, performance balancing of multi-TB datasets on NetApp Filers.Brought up remote engineering office with dataset caching.Veritas VolumeManager / FileSystem, Cluster Services; designed and deployed VxVM/VxFS on cluster for company e-mail and SAN-based file services recycled from DEC Tru/64 cluster, and custom agents.

Consulting and deployment of rule-based security access control software (SeOS) for large financial institution. Principal for custom installation, configuration, and testing, documentation and training of client employees.

Maintain firewall access lists, audit network logs and follow up breach attempts with remote site contacts, operational and auditing scripts, analyze network application packet traces for firewall/proxy support.

As student, worked within systems group towards becoming senior staff technical lead for School of Engineering UNIX environment. System administration, software development and maintenance, process automation, security, network design and management, backups.Authored Solaris SCSI device driver to interface DLT tape library to Amanda backup software, deployed for production use with wider release on internet.Independent networking accomplishments: extensive upgrades and services for School of Engineering, including 100mbit backbone and switched 10mbit desktop networks using specified Cisco routers and switches; migrated IP space to CIDR block for multi-homed Internet and multicast backbone connectivity; implemented new IP/PPP analog modem services with authentication and minimal maintenance.

Mobile Networking Group; ported UNIX device driver for wireless LAN adapter to BSDI, coauthor of Intel proposal for mobile IP (remote agent directory service), submitted to IETF MIP Working Group.

Optimized SPARC assembly routines for high-precision math library package. LAN controller device driver development for OS/2.