James Ochs Email & Phone Number

• Provide advice to Cloud Security Director and team on AWS security strategy at Fortune 50 company---o Assist with implementation and development of security strategy---o Assist with design and implementation of security guardrails---o Assist with design and implementation of security automation

Lexington, Kentucky Area

• Managed Operations team consisting of systems administrators and network engineers• Initiated, architected and implemented AWS adoption for production workloads• Operated and managed on-site data center, remote site datacenter, and cloud deployments• Responsible for Systems and Network architecture• Responsible for site security implementation• Re-architected and replaced disaster recovery plan• Architected and Implemented UCS / VMware migration from physical server farm

Lexington, Kentucky Area

• Managed datacenter and server farm supporting production, test, development, and enterprise workloads• Managed SAN storage systems• Managed corporate LAN, datacenter LAN, and WAN networks

San Francisco Bay Area

• Negotiated network and datacenter contracts• Managed Website Operations• Designed network and server architecture• Specified datacenter infrastructure needs• Specified and acquired all network and server hardware• Negotiated pricing and support for all hardware• Designed corporate network• Installed and Maintained all server and network infrastructure• Created process documentation and trained staff• Implemented monitoring and alerting systems• Implemented firewall, IDS, and other security infrastructure• Implemented BGP• Migrated production and staging operations to AWS from the datacenter.• Negotiated internet and ip based phone service for the corporate office• Supported and maintained phones and network in the corporate office• Provided user support for corporate users.• Created and maintained environment for development , QA and support groups, including SVN, wiki, trouble ticketing, and bug tracking

San Francisco Bay Area

• Managed website operations team (BroadVision, Scene7, Endeca)• Managed warehouse and backend systems (WMS, HP3000, Oracle Financials)• Maintained and installed Solaris, Linux, and Windows servers.• Maintained and installed network infrastructure for the entire enterprise (four locations throughout the US) • Managed and installed PIX and vpn3000 concentrators• Managed overall network infrastructure and design• Implemented OSPF , BGP, and MPLS links internally and to external providers.• Implemented Juniper IDP (intrusion detection and prevention) system• Implemented SAN infrastructure consisting of Pillar Storage and Brocade switches• Negotiated Data Center contracts.• Reduced data center and WAN costs by nearly 50%• Planned and executed datacenter move for all production systems• Implemented Nagios and OpenNMS for site monitoring• Implemented Warehouse Management System to automate the fulfillment center

San Francisco Bay Area

• Managed operations teams for Quote.Com, Lycos Mail, and Wired News• Implemented cross training for systems administrators for the above properties• Merged on-call rotation of staff for the above properties to improve coverage and reduce workload among the staff• Interfaced with engineering and product management groups to ensure continued site stability and to resolve issues related to engineering defects.• Responsible for approximately 600 servers in four data centers consisting of Solaris, Windows 2000, Network Appliance, and Linux• Planned and executed four data center moves and two new data center build outs• Responsible for quarterly budgeting and purchasing for capital expenditures• Worked with finance and product groups to ensure correct application of shared operations expenses to P&L calculations• Implemented Nagios as a replacement for SiteScope and Big Brother for site monitoring and automation.

San Francisco Bay Area

• Created NOC for 24x7 monitoring of production site.• Created on-call policy and rotation for 24x7 second level support for production site, providing single point of contact for escalation of production issues• Evaluated and negotiated contracts with vendors for connectivity, hardware, and software for the production site• Designed production network and infrastructure for Swiss partner, traveled to Zurich and Geneva to evaluate datacenter and network providers, and assisted in negotiations with partner• Interfaced with OEM clients to review operational status on quarterly basis. Clients included Schwab, Vanguard, and Fidelity.• Created policy and procedures for product releases and defined appropriate release windows.

San Francisco Bay Area

• Maintained production networks and network hardware configurations• Provided training and guidance for junior administrators• Maintained and evaluated vendor relationships, and renegotiated as appropriate• Interviewed and assessed potential new hires• Interface with other departments, such as engineering, QA, marketing, to ensure smooth rollout of new products with minimal impact to the customers• Responsible for site security

San Francisco Bay Area

• Installed and Maintained production Solaris and Windows NT servers for internet content provider• Designed and implemented backup storage solution• Designed and implemented network improvements and created network redundancy resulting in better throughput and reduced failures• Provide guidance and mentorship for the junior Operations team members.• Designed, implemented, and maintained firewall for both corporate and production networks

San Francisco Bay Area

• Installed and Maintained Solaris servers for medium sized internet service provider• Configured and maintained sendmail, pop, imap, http, irc, ftp, and nntp servers for production use• Assisted in the design and implementation of new server architecture to merge and consolidate three regional ISPs

San Francisco Bay Area

• Assisted customers with installation, setup, and troubleshooting of dial up networking for connection to the internet• Assisted customers with installation, configuration, and troubleshooting of internet applications (email clients, nntp clients, web browsers, irc clients, etc)