Trelion is een onafhankelijke partij met ervaringsdeskundige IT Architecten die bedrijfskundige inzichten combineren met IT Technologie. Wij geloven dat in deze complexe IT wereld, samenwerking met andere gespecialiseerde organisaties onontbeerlijk is en juist daarom zijn en blijven wij op de hoogte van de laatste ontwikkelingen op IT Technologisch gebied. Wij begrijpen de Bedrijfskundige kant van de vraag van onze klanten en vertalen deze naar IT oplossingen die passen bij onze klanten.

Netco was acquired and merged into the Yielder Group.

At Netco Technology I set out to automate a lot of our network deployment and administration processes.This includes deployment of all components needed to host a new retail customer in our IaaS environment, such as DNS, DHCP, monitoring and ssh junp hosts.All of this ties in with our custom CMDB system and allows for zero-effort setup of CPE devices (routers, switches and Wifi Access-points) without any intervention of Netco Engineers. All devices are automatically monitored and the customer will automatically be notified of any mayor issues.Another mayor project I've worked on was automating the deployment and management of our new Juniper based datacenter network.Both projects leaned heavily on the SaltStack orchestration framework.I've also worked on a lot of customer projects as a consultant or network architect for various technical challenges as well as troubleshooting network issues.Customers I've done work for included Action, Primera, Fastned, Asics, GrandVision, EVBox and D-Reizen among others.Technologies used: CentOS, Zabbix, Netbox, Katello, FreeIPA, Grafana, Python 2.x/3.x, Saltstack, Puppet, Ansible, Fortinet products (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP), Cisco ISR, Cisco Catalyst, Cisco SMB (Switch,WAP), Cisco WLC & WAP, Cisco Meraki (MX, WAP), Ubiquity Unifi devices, Wireshark.

At Wigo4IT my primary responsibility was with the daily operations and monitoring of the network infrastructure. I was also responsible for maintaining and introducing monitoring and automation tools to help manage the network more efficiently. I've migrated a Cacti based solution to a more flexible Zabbix based monitoring solution. Other tools I've put in place were a Linux based Wireshark server, NetDisco and Racktables to document our datacenter facilities.During my time at Wigo4IT I've gained quite some experience with troubleshooting low-level network issues using the Wireshark toolset. I've written a set of shell scripts to bulk analyse large sets of packet captures with ease.In fact, I've completely automated wireshark traffic analysis with the result of getting a near-realtime statistical analysis of the network traffic and exporting these results to Zabbix. This construction allows Wigo4IT to have real-time reports and graphs on the number of TCP retransmissions, lost segments, duplicate packets, etc. The graphs have proven to been invaluable in troubleshooting network related performance issues.Wigo4IT has also moved one of their datacenters during my time there (Feb 2013). I was one of the technical leads involved in the project. I coordinated our providers to arrange that we would have working connectivity with our providers in the new datacenter. I was also involved in planning the layout for the new facility.Technologies used: Zabbix, Racktables, Ubuntu, Cacti, Netdisco, Wireshark, Winbind, xrdp, Cisco Catalyst 2960/3750/6500, Cisco Nexus 5500/B22, Cisco ASA 55x0, Cisco ISE, Cisco IronPort (Web/MX), Fortigate Firewalls, RSA SecureID, FortiAnalyzer, F5 Big-IP, Infoblox.

As an Infrastructure Specialist at Competa I worked on various projects for clients, as well as internal projects. The projects include design, implementation and maintenance of various IT infrastructure services. Some smaller projects I've worked on (long term projects are mentioned separately):• Building a redundant MySQL Linux cluster based on DRBD and Heartbeat/Pacemaker for later use as a Zabbix HA cluster.• Performed a replacement/upgrade project of 4 BIND DNS servers with Webmin as the administrative interface. I've build a shell script to automatically synchronize the ACL configurations within the BIND configuration files and the 'allow-query' statements (including these ACLs) for all of the customer zones.• Designing and setting up a small hosting network based on HP Procurve switches and a redundant Cisco ASA (8.3) firewall cluster for a telecoms project in Kenia. The firewall cluster provides secure VPN tunnels for communications with partner organizations. The entire network was setup, boxed, shipped and installed on site.• Designed and implemented a dual ISP, high availability setup based on Cisco 1900 series routers to connect the offices of a financial consultancy firm to the Internet. This way the company can rely more on the Cloud services it uses without having to worry about internet connectivity.• Provide remote support for a 100+ user Citrix XenDesktop setup. This includes handling trouble tickets and applying changes to improve the environment.

As Field Manager at Competa IT, my first concern was helping our technical staff develop career plans and provide them with support from within the business. I performed regular field visits with our staff that were on projects and gather information and feedback for their annual reviews. I was an information conduit between the company and the employees that were on-site with customers.

I started Qixia because I believe OpenSource software has a lot of potential for small businesses, non-profit organizations and individuals.LibreOffice and Firefox are good examples of OpenSource software that help users everyday. Unfortunately most of these products lack the funding for an advertisement campaign so they mostly remain unnoticed.That is why I consulted people on the use of OpenSource software as an alternative to the more expensive closed source applications.I also maintained a small hosting platform where customers could host their OpenSource applications. This platform was monitored with Zabbix.

At Asics Europe I redesigned almost all of the European network. This includes the HQ offices, the dual site hosting network and the implementation of redundant connectivity for the remote subsidiary offices throughout Europe using DMVPN. The redesign in the Head Office and datacenters was mostly implemented by myself. The subsidiary sites in France were converted to the new network model by myself as well and this concept has been replicated by Asics employees to revise the networks in other subsidiary offices.As there was no Infrastructure monitoring system in place, I've also used my experience with infrastructure monitoring to help Asics setup an efficient monitoring environment.The system was based on CentOS 6.3 and Zabbix 2.0.x to monitor the network and servers.I gave a two day in-depth training session for the IT staff on how to use the new monitoring system.Technologies used: HP Procurve 5406zl, Cisco ASA 5520, Cisco Catalyst 3560X & 3750X (stacks), CentOS, Zabbix, rSyslog, LogAnalyzer, Racktables, RANCID, OSPF, EIGRP, DMVPN.

As a network administrator for Rabobank International I was responsible for monitoring the network,handling support tickets and performing and planning changes on the network infrastructure.I worked together with an international team that was located in London (UK) and Utrecht (NL).The infrastructure we were responsible for consisted of two datacenter networks, various office networks with integrated VOIP, a low latency dealing-room network and the global WAN network.I've used some extensive shell scripting to automate the security monitoring of our 802.1x LAN. The aim was to very quickly gather as much information (IP/mac address, hostname, location, etc.) as possible in the event of an invalid or missing host certificate. My script tied into the central syslog to listen to events. When such an event occurred, it would SSH into the switch that originated the event and gather the needed information via show commands. This output was then summarized and send to the NOC team. Events were logged in a Sqlite3 database as to prevent duplicate alerts. After a set timeout value, the event would be reenabled and alerted on again if it reoccurred.Technologies used: Cisco Nexus (7000/5000/2000), Cisco Catalyst series, Cisco ASA series, Checkpoint firewalls, Juniper routers, OSPF, Bash, Expect, Sqlite3, Syslog.

At 'Station to Station' I've designed and build a proof of concept for a Virtual Desktop Infrastructure based on CitrixXenDesktop5 and XenApp6 products. In the process I gained experience with XenServer, Edgesight for Loadtesting, FreeBSD (dummynet) and pfSense firewalls. Performance metrics for the PoC where gathered with Zabbix and used in the PoC reports.I also packaged educational applications as Microsoft App-V packages and wrote Linux shell scripts to integrate these packages in the existing application delivery framework based on a CentOS framework.Technologies used: Citrix XenServer, Citrix XenDesktop 5, Citrix XenApp 6, Citrix PVS, Citrix ESLT, Zabbix, FreeBSD, Microsoft App-V, pfSense.

In my role as Security Officer at Ctac, I performed internal security audits based on Cobit and ISO 2700x. I also advised our Manager of Information Security on the security policy and the daily impact of the policy on employees. I identified and followed up on security incidents within the organization.

One of the first things I did at Ctac was to introduce Zabbix as a monitoring and alerting tool for the network and all non-SAP related Windows/Linux servers in the datacenters and off-site (customer) locations (SMB market). The system used a MySQL Master-Master replication backend to allow failover to the secondary datacenter.The monitoring system proved flexible enough to monitor applications on the servers as well.Some of these applications were being developed in-house by other teams which led to a very nice combined effort of integrating the application KPI's in the Zabbix monitoring system. I setup a high availability central DNS system for the hosting network and customers. I also worked on the design and implementation for our cross-datacenter Internet connectivity. This involved incoming connections from 4 different providers, Cisco ASA virtual firewall contexts and policy-based routing in the Cisco routers.After receiving some complaints from consultants about the restraints put on the email server I set out to build a Linux based public FTP server so our consultants could exchange large files with our customers. This setup used temporary user accounts with a time based validity and a file system quota that was shared between the contact at the client and the consultant. The whole things was automated by me using shell scripts to minimize the manual effort of administering accounts. Uploaded files were automatically scanned for viruses and quarantined if an infection was found. The accounts and data were automatically removed after the set end date to keep the system clean and tidy.I designed and implemented various network infrastructures at customer sites. These included a sticky-tape factory, a magazine distribution warehouse and various offices of different sizes.Technologies used: Zabbix, Debian, vsftpd, Git, Cisco 6500 (Sup720), Cisco 2960, Cisco 3560, Cisco Firewall Services Modules, Microsoft ISA server, Cisco ASA 55xx.

The infrastructure activities at the Vision Web grew after the acquisition by Ordina. We started building a second hosting center and soon we even took management over a third, pre-existing facility. Because of the strong growth in the amount of equipment that needed to be managed I selected a monitoring product (Solarwinds Orion) and took this into production after a PoC period. The monitoring system was used to generate (SLA) reports, provide information for daily ops and send out alerts to the on-call engineers.My team was also responsible for the companies small hosting platform based on the Sun Cobalt hosting servers which were becoming end-of-life. I replaced these Linux based web appliances with new HP proliant based RHEL4 systems with a OpenSource software stack (Webmin, Apache, MySQL, Postfix, etc.). These systems provided Internet facing DNS services and shared webhosting space for our customers.Technologies used: Webmin, RHEL4, Bind, Apache, Postfix, Solarwinds Orion 7, Cisco VPN 3000, Cisco 6500 (Sup720), FWSM, Cisco PIX/ASA, Checkpoint Firewalls, Extreme networks switches, 3Com switches.

When I started working for the NOC at the Vision Web my first tasks included domain registration and DNS administration. I started to learn Cisco IOS routers and switches and started solving the easier networking and DNS problems for the Vision Web and our external customers.I stayed at the Vision Web after the acquisition by Ordina and furthered my career as a network engineer.Technologies used: DNS, Cisco routers, Extreme networks switches, Sun Cobalt.

During my time as a support engineer on the semi-skilled servicedesk, I provided 1st line PC support to our colleagues at the Vision Web as well as our external customers. We escalated service calls to other support groups when needed and monitored the follow-up of incidents and changes. Other tasks included producing reports on incidents and changes for our customers and attending CST (Customer Support Team) meetings as the servicedesk representative.Within a year's time I became 'second in command' within the servicedesk team, taking responsiblity for the daily operations if the team lead was away.My technical skills were noticed by the members of the NOC team as I resolved a lot of network and OS related tickets myself. As a result I was given the opportunity to join the NOC team which I gratefully accepted in November 2004.Technologies used: Infra Active, Windows 2000/XP, Dameware, RealVNC, batch scripting, ping/traceroute/nslookup/dig/etc.

During my study, I took a system administrator position at Zeilcentrum Henk van Gent as a volunteer. At the time the computer network that was in place was a LANtastic/MS DOS environment running on 10 Base2 ethernet.Together with the programmer that had programmed the administration tool in the past we set out to update the network. He ported the administration tool to the Linux platform and I set out to replace the old network with a new Linux terminal server based environment where the old workstations could still be used as thin clients for the new system. In addition, I also replaced a couple of systems with Windows XP workstations. The network was upgraded to 100BaseT ethernet and a central Squid proxy server allowed workstations to browse the Internet.Due to my employment at the Vision Web, I could no longer spend time on my projects atZeilcentrum Henk van Gent.Technologies used: Slackware Linux, Squid, LTSP, ISDN, Windows XP, Etherboot, DOSEmu

I worked on the computer sales department at Office Centre Rotterdam Noord-West during my study and a brief period afterwards. I mostly worked during weekends and late shopping hours.I provided advice to visiting (SMB) customers on which equipment and/or software best suited for their business needs. Regular customers with technical questions soon noticed I provided good advice and started coming back when they needed anything new.I also took care of product placement and instore information.