- Unified and managed IaaS and PaaS resources on VMware and Azure infrastructure platforms, covering compute, storage, access control, system configuration, optimization, monitoring, troubleshooting, and capacity management.Successfully achieved cost reduction and efficiency enhancement goals through the effective management of a large number of servers. - Managed the automation operation platform for the system department, realizing the platformization, standardization, and efficiency of operation work, including resource delivery, system inspection, data change, configuration management, data backup, patch upgrade, and report statistics.- Maintained IT infrastructure services and common business components, including Active Directory, Atlassian Suite, CMDB, DNS, ELK, Foreman, HIDS, IPAM, Isilon, MTA, NTP, NX-RM, Quay+Clair, SEP, SIEM, PKI, Zabbix.- Analyzed and solved system performance problems. Optimized kernel parameters for specific businesses multiple times, and promoted and standardized them after testing.- Managed host and system security, covering security policy formulation, inspections, vulnerability management, and emergency response. Formulated and maintained operating system security baselines and hardening standards based on information security best practices. Ensured the security, stability, and compliance of business systems.- Cooperated with internal control and financial regulatory departments in information security audit work. Conducted self-inspections of platforms, systems, and hardware based on audit points, and implemented audit specifications. Ensured that they meet the information security framework requirements.- Leading the landing of RHEL8 and 3rd components, verified system configuration and application compatibility, completed a major version upgrade of RHEL/CentOS.

- Built and maintained a hybrid cloud business environment, covering the deployment, optimization, configuration changes, inspection, data backup, application release/upgrade of networks, servers, OS, databases, and middleware.- Established an operation support system, involving monitoring and alarming, configuration management, log management, automated deployment, security management, disaster recovery and backup, and document management platforms.- Designed and built the company's cloud infrastructure, unifying all R&D resources and data assets. Responsible for the capacity management of IaaS, PaaS, and SaaS resources on the hybrid cloud, regularly evaluating and implementing resource optimization solutions.- Took charge of network and system security, implemented and maintained security policies, conducted regular security assessments and vulnerability scanning, monitored security logs and responded to security incidents in a timely manner. Successively passed the Equal Protection, ITSS, CMMI, C-Star, ISO27000 series certifications and reviews. - Acted as the data center manager, responsible for the overall data center operations, including network planning, infrastructure construction, equipment deployment, system integration, capacity expansion, and technical support.- Successfully containerized 10 critical applications, reducing the deployment time by 50%.

- Took charge of the planning, construction, optimization, monitoring and operation of GOSUN data center, edge network and CDN network, and continuously ensured the smooth operation of the network.- Respond to network security incidents, track network failures and close the loop, and carry out network security tasks for major events.- Took charge of data analysis of network operation quality and performance capacity, wrote evaluation reports or optimization plans, and completed network changes..- Formulated a network device startup security baseline that includes a list of recommended security settings and configurations, which helped to improve the security of the company's network infrastructure.- Established a unified network authentication platform and IP address management system, which centralized device permission management and detailed IP address management.- Established multiple security systems to achieve traffic monitoring, traffic scheduling, log auditing, and configuration backup, and realized network platformization, visualization, and tooling..- Improved IT operations SOPs including device warehousing, arrival, racking, power-on, maintenance, etc. to ensure SLAs are met for data centers.- Self-studied and obtained RHCE certification, expanding personal capabilities in operating systems.

- Responsible for delivery, upgrades, cutover, troubleshooting, routine inspections of Guangdong Telecom MAN and FTTx projects.- Responsible for LLD planning and design, implementation plan drafting, project delivery, initial device inspection, etc. for data center and campus network projects.- Drafted replacement and upgrade plans for Guangdong BRAS devices from MA5200G to ME60, promoted and implemented across the province after testing.- Member of IP-RAN project team for Guangdong Telecom's TD-LTE transmission project, responsible for the implementation of the deployment plan and delivery of sample projects.- Participated in key support projects for Shenzhen Summer Universiade, ensuring stable operations of admin network.• Participated in Guangdong Telecom GPON and VDSL pilot projects, coordinated with ISP for parameter confirmation, enabling automated ITSM issuance of ONT data.• Participated in Guangdong Unicom MAN network BR device replacement project, responsible for network integration, system commissioning, cutover, ultimately replacing CRS with NE5000E.