Gregory Thomson Email & Phone Number

NIH Information Security program. Install and maintain a large Splunk instance with Enterprise Security. Rack/provision and Administrate physical and virtual Linux and Windows systems. Support security appliances such as FireEye, and Phishme. Create load balanced groups in F5 to distribute traffic to web servers and to a consolidated syslog environment. Create and maintain syslog-ng configuration for consolidated syslog environment. Install and maintain Bigfix core/inventory/compliance. Create scripts and leverage puppet and anisble for automation.

Tysons Corner, Va

NIH Information Security program. Install and maintain a large Splunk instance with Enterprise Security. Rack/provision and Administrate physical and virtual Linux and Windows systems. Support security appliances such as FireEye, and Phishme. Create load balanced groups in F5 to distribute traffic to web servers and to a consolidated syslog environment. Create and maintain syslog-ng configuration for consolidated syslog environment. Install and maintain Bigfix core/inventory/compliance. Create scripts and leverage puppet and anisble for automation.

Architect for a large Splunk environment. Migrated distributed Splunk installs into a consolidated environment. Created and modified rules for ingesting data and created custom parsing of sourcetypes. Created dashboards for customers and internal monitoring. Troubleshot issues with data not showing up in splunk, data not coming in correctly, and splunk performance. Installed and configured splunk on forwarders, indexers, heavy forwarders, and search heads. Managed deployment server for Splunk configuration.Used Microsoft System Center Orchestrator (SCO) to automate processes for various clients, as well as provide proof of concept work for SCO on behalf of Microsoft. Automated processes include (but are not limited to) server provisioning, software deployment, and automated remediation. Used SCO to integrate the Microsoft System Center Suite. Extended functionality of System Center Service Manager using SCO.Wrote custom rules and automations for Netcool. Performed alarm analysis and reduction for devices reporting to Netcool. Installed and configured Netcool on Solaris and Linux.Reviewed systems for security compliance using Nessus and then corrected or justified risks that were discovered.

Installed and configured Solaris on Sun Microsystems hardware. Troubleshot critical production issues in a large Solaris environment (400+ servers). Configured and maintained Sun E12/15K, 6800, 4800, and 3800 domains. Assisted with transition of applications from development to test to production. Added and configured external and SAN based storage and use Veritas Volume Manager to partition the space and apply it to file systems. Isolated and replaced faulty hardware components. Upgraded Solaris versions and patched servers.