Kenny Čačka Email & Phone Number

Orlando, Florida, United States (Epic Universe Contract)

Epic Universe Theme Park Contract• Setup and maintain Ride Show (rollercoaster and live show) networks• Shift Lead for RSN Team• Work Closely with various General Contractors, Electrical Contractors, and vendors to facilitate logistics for RSN infrastructure, cable schedules/terminations, and systems turn up/troubleshooting. • Facilitate communication between plc’s, hmi and server• Setup and maintain Palo Alto PA-3400 series firewalls• Create Palo-Alto Firewall policy naming convention standards parkwide, along with standardizing rule creation for PLC - PLC communications, while adding and applying various services, and applications for rules and policies.• Troubleshoot IPSec, firewall zone configuration and firewall policies to ensure reliable and redundant links• Setup and maintain Arista Arista 720XP, and 7060DX5 (SFP) switches for DOT1X / mlag / PrP for access and distribution connectivity within the ride show network• Stratix IOT Switch maintenance and compliance for ride show vehicles• Provision/Configure and troubleshoot Cisco IE3100, 3300, 3400 Rugged Series switches for Layer 2 NAT, 802.1Q Trunks, LACP Ether-channel communication between Cisco and Arista switches, and VTP.• Configure standalone Aruba access points for RSN wireless, and DHCP services.• Ensure compliance across all technologies with Universal design and security standards. • Administer VMWare vsphere 8.0 hosts with vSAN connectivity • Administer windows services for each ride. AD, DHCP, DNS, thin manager, rdp• Implement and maintain Cisco Fluid Mesh radios ride vehicle tracking, and data communication.• Administer Cisco ISE enforcement• Deploy standardized configs utilizing ansible scripting

After developing the core systems to level where we could provide all the services that the business required, I transitioned into a Security role to develop new policies, procedures and provide oversight in security practices to secure all the elements that were previously built.• Setup and maintained Cisco UCS and HPE Server Infrastructure• Azure AD / Entra and M365 Cloud solution configuration• Maintained Microsoft security policies and dlp policies to match CIS framework• Duo SSO, SAML and 2FA implementation• Maintained and Monitored Sophos EDR / XDR and indications of compromise.• Conducted vm template hardening to implement CIS controls • Conducted regular security checks and vulnerability scans.• Orchestrated regular security meetings with findings to delegate remediation to Engineers• Built information security policies (Risk assessment, Acceptable use, antimalware, etc)• Conducted security awareness training initiatives.• Update and Manage full vSphere environment (vCenter, vCops, distributed switching, NSX, vSAN etc.) esxi 5.5 to 7.0• Managed VMWare NSX firewall and load balancer, started initiatives for microsegregation• Setup and maintained Microsoft PKI Infrastructure• Hardened workstation golden images with CIS controls• Setup and maintained Veeam Backup and replication with cloud offload• Exchange migration and admin on-prem Exchange 2016-2019. Exchange online.• Setup and maintained new Netapp FAS2750, migrated from old Netapp FAS2240

United States

• Maintained Cisco UCS B and UCS C – Series environment.• Implement Nimble Storage CS460x2 expanded storage and maintenance, Migrated to PURE Storage Array• Cisco routing and switching (2851, 2911, ISR3331 routers, 2960-x, 3560, 3850, nexus 3k)• Cisco Call Manager / Unity / UCCx VOIP system admin • VMWare 5.1 -6.7 esxi maintenance and patches.• Architecture and project management for IT portion of new construction and remodels.• Prepared infrastructure portion of IT budget• Cisco ASA firewalls adds / deletes and maintenance• IronPort Email and Web security appliance install and maintenance, migrated to Cisco ESA for email security.• Implemented and maintained Brivo Access Control software and HID Access hardware• Implemented Splunk as a SIEM product• Negotiated non-profit pricing contracts from vendors* Cisco Call Manager* Cisco routing and switching* Cisco UCCx and Unity connections*Cisco UCS Server implementation. Both be and C series.* Nimble Storage hardware implementation and maintain.* Provide new construction planning and vendor management for cable infrastructure.* AirFiber PtP wireless.* VMWare 5.1* Cisco 5520 WLC + AP's* HID Access Controls

Wenatchee

• Implemented full vSphere 5.5 environment from the ground up (vCenter, vCops, orchestrator, distributed switching)• Reconfigured NetApp 2240 Hybrid SAN Array. Configured new disaster recovery to offsite replication SAN• Full NextGen firewall upgrade from Fortinet to Cisco ASA 5500-X Series firewalls (active / passive failover, full vpn mesh, intelligent ISP failover)• IT Project management on new infrastructure builds in warehouse remodels.• New network architecture design with Cisco routing and switching (Nexus 3k, 3850, 5545-x firewalls) • Exchange 2003 to 2013 upgrade / migration to new servers on VMware environment.• Admin ShoreTel VOIP Phone System• Spearheaded new documentation initiatives. (Consolidated existing documentation to OneNote, inserted more documentation, encouraged adoption, moved documentation to the cloud for easy lookup)

Wenatchee, Wa

• Implemented Cisco UCS B – Series environment• Nimble Storage CS460x2 implementation and application data move• Cisco routing and switching (2851 routers, 4510, 3560, nexus 3k, etc switches)• Cisco Call Manager / Unity / UCCx VOIP system admin• Implemented and designed new layer 2 and layer 3 functionality• Registered new public ipv4 block and set up BGP routing to satisfy redundancy requirements• Upgraded VMWare environment from 4.0 esx to 5.1 esxi• HID Access Security• IBM Blade center H Chassis admin• Project management of vendors and architecture for IT portion of new construction and remodels.• Prepared infrastructure portion of IT budget• EMC NX4/AX4 SAN and IOMEGA px12 NAS (iSCSI, NFS, FC)

Problem resolution and Asset tracking via remedy ticketing systemPart of infrastructure change planning teamRegular Windows AD changesPhone System Admin

I wore many hats, I did everything from windwos 2003 server admin to maintaining the pbx to troubleshooting and installation of new features on their ERP system. This was a traditional win2k3 domain environment with a t1 between the facilities.

Implemented/Maintained new technologies and deployments of 802.11x wirelessScheduled and managed installation teamMaintained servers and routers used for day to day operationResponsible for network monitoring and optimization

Provided network and computer support for the various group homesTrained employees on proper use and regular maintenance of the computersEnforced and developed rules of employee computer usage CRCWNET ( Network Admin / Level 1 TSR

CRCWNET was an internet service provider. I started out as tech support but quickly took on the roles of maintaining and building their technologies. I gained a broad knowledge of various types of linux and freebsd as well as used many different versions of the Cisco IOS.(Network Admin ) 05/02 – 05/04● Lead TSR and provided support to Level 1 TSRs● Maintained and built mail/news/ servers for internet service● Frame-relay maintenance● ADSL maintenance● T1 maintenance● Moved ISP from bonded t1 backbone to Metro Ethernet backbone● Implemented Fiber to the premise services (PPPoE)( Level 1 TSR ) 06/00 – 05/02● Troubleshot DSL, dial-up issues and various E-mail clients.● Provided Level 1 internet technical support ● Monitored radius and modem banks● Provided in house PC repair