Mateusz K Email & Phone Number

San Francisco, Ca, Us

London, United Kingdom

Built new on-prem DC from scratch, worked on server build automation pipelines, infrastructure services, monitoring systems and implementing security features. Some highlights below:• Created Centos7 Automated Golden Image creation process as code using Packer, Gitlab CI and Ansible (Hardenend to CIS standard)• Built large Elasticsearch cluster with Apache Kafka as a message buffer to gather operational and security logs.• Developed automation around Elastic maintenance (automatic cluster deployment/rolling updates/upgrades etc)• Configured many Elastic ML jobs and alerts to spot issues across the estate which greatly helped to identify issues as they arise, reducing mean time to resolution and improving service uptime.• Built and configured InfluxDB/Grafana/Prometheus to gather various system metrics (kafka/linux VMs/vCenter/bespoke in-house apps etc)• Built many Gitlab CI/CD pipelines to deploy various application to the infrastructure.• Writing Terraform modules to deploy VMs to our on-prem datacenters• Creating Jenkins pipelines to automate system build/rebuild/update tasks.• Deployed Hashicorp Vault solution as a pursue towards zero-trust security model:o Secured automation pipelines and removed sensitive data from Git repositories.o Developed code to autorotate various infrastructure passwordso Secured databases in the estateo Provided mechanism for applications to securely grab short-lived ephemeral credentials/TLS certs to authenticate with other systems• Introduced Nomad and Consul in the organization and started containerizing our apps• Introduced SAST scanning to the organization• Performing risk analysis of vulnerabilities discovered across on-prem (with Qualys VM) and cloud (Orca Security) estate and driving remediation or mitigation of risks using automation tools like Puppet, Ansible and Bash.

Manchester, United Kingdom

The role was a good mix of BAU (below) and project work maintaining and improving client’s highly secure VMware server environment (main focus on increasing manageability and speed of delivery of new applications to the business)BAU:• Day to day maintenance of highly secure server infrastructure running RedHat Enterprise Linux (6/7) and Windows (2008/2012/2016) servers on Dell/IBM Compute, VMware virtualization and Hitachi/IBM FC/FCoE storage arrays• Developing Powershell scripts and Ansible roles/playbooks to configure and gather information from VMware and Linux systems• Supporting developer teams: o Maintenance and troubleshooting of VMs running mostly IBM enterprise software (Netcool, SCCD, IBM DB2, Cognos, Amdocs etc.) o Provisioning and configuring new Windows and Linux VMs for test and prod environment• Supporting network and security teams and their systems: Qradar, Darktrace, Cisco Prime etc.• Patching/Updating of Linux estate (Spacewalk)• System monitoring and management of those systems: Icinga2, Grafana, InfluxDB, Telegraf, vRealize Log Insight, Elastic stack, ElastiflowProject:• Upgraded VMware environment from 5.1 to 6.0• Consolidated separate VMware environments and their networks (Brocade / Cisco IOS / Cisco Nexus)• Upgraded IBM Compute Firmware Levels• Implemented local Gitlab repository to start version control of automation scripts and ansible playbooks/roles• Developed a VM provisioning workflow using Hashicorp Packer/Terraform to provision new resources and Ansible to finish configuration of the machines• Developed Ansible role to harden RHEL 7 image as per CIS hardening guide• Designed and created set of GPOs to harden Windows Server images as per CIS hardening guide• Implemented Elastiflow to gain insights into network traffic flowing through the DC

London, United Kingdom

Basingstoke

-Led and delivered internal network redesign and refresh project bolstering scalability, resiliency and security of the network with no-downtime for end-users.-Designed and implemented Microsoft PKI solution for corporate network.-Improving corporate security posture through identifying and mitigating vulnerabilities, been part of internal security improvement work group.-Designing technical solutions and working on bid responses with sales team.-Acting as a 3rd line escalation engineer for our internal IT systems as well as our customer's networks.-Liaising with partners, vendors, resellers and customers.

Dctt, Mod Lyneham

Supporting Cisco LAN/WLAN infrastructureSupporting Cisco UCS PlatformSupporting Cisco ASA FirewallSupporting Sophos UTM FirewallCisco ISE AdministrationWindows Servers 2012 AdministrationMicrosoft Exchange 2013 AdministrationVMware vSphere 6 AdministrationVMware Horizon View AdministrationSolarwinds Monitoring Solutions AdministrationActive Directory ManagementEnsuring daily high availability of the IT/Print/Av Services for the Customer at various locations across the facility.Manning the Service Desk and providing Level 2 technical support to the Service desk team, utilising the Solarwinds Orion and Cisco Prime Infrastructure toolset.Troubleshooting and repairing IT equipmentFirst point of contact for IT issues, providing support to end users

Daventry, Northamptonshire

Supporting LAN/WLAN, VoIP infrastructureManagement of IT equipmentTroubleshooting and repairing IT equipmentFirst point of contact for IT issues, providing support to end usersReflex Warehouse Management System administrationEscalating major IT incidents to relevant departmentsWorking with senior management to improve warehouse operation

Bukowno

Designing, configuring, expanding and maintaining about 500 users wireless TCP/IP network running Cisco, Mikrotik and Ubiquity equipmentTroubleshooting and repairing PC equipment (workstations, laptops, switches, routers, printers)Supporting a wide and varied client base over the phone or on client site if neededCCTV and Intruder Alarm systems installations