Chris Paul Email & Phone Number

Oakland, Ca, Us

I enjoy bringing order and clarity to technology solutions.

Oakland, Ca, Us

Consulting, Marketing, Client Management, Bringing unique viewpoints into stale situations, Excellence in Application and System Maintenance of client systems.

Oakland, Ca, Us

• Monitoring system (Nagios) design and implementation.• Email system design and implementation.• Directory server system design and implementation• Clients include AT&T, DuPont, Kaiser Permanente, Sabre Holdings, Inc., Grace Chemical, Robertson Stephens & Company Investment Bank, Neiman-Marcus, Grand Central Communications, Supply Solution

San Francisco, California, Us

Herndon, Virginia, Us

* OpenLDAP, PKI, and Keycloak/OIDC expertise in security and stability to fortify a vital element of an air traffic control software suite. * Recommended and implemented updates to OpenLDAP infrastructure to improve reliability and security. * Update Ansible playbooks to implement recommendations.

Switzerland 🇨🇭 , Ch

• Led a cross-functional team of seven developers and QA engineers as the project lead• Oversee the development of a minimum viability product for an LDAP compatibility interface for the Navify platform-as-a-service, using LDAP, OIDC, Oauth2, and Keycloak.

Miami, Florida, Us

• Enhanced security by implementing TLS encryption and client/server mutual TLS validation for SSSD clients. Implemented robust security measures, including the elimination of the rootDN password and the establishment of Role-Based Access Control (RBAC).• Designed and implemented mutual TLS (mTLS) for replication, ensuring advanced security measures.• Conducted comprehensive performance testing and fine-tuning to optimize OpenLDAP's efficiency and reliability.• Developed python-ldap code for seamless migration of RFC2307 POSIX data from OpenLDAP to Active Directory.• Conducted RFC2307 to RFC2307bis member conversion using python-ldap.• Engineered response time checks to populate a time series database (Clickhouse) for LDAP and DNS, generating Grafana graphs and configuring PagerDuty alerts.• Achieved an unparalleled 39 months of continuous, zero downtime for a mission-critical OpenLDAP service.• Major overhaul of replication to simplify and increase speed.• Devised and executed a migration strategy, seamlessly transitioning from RHEL6 to RHEL7, RHEL8, RHEL9, and upgrading OpenLDAP from 2.0 to 2.4 to 2.5.• Converted all clients to use mutual TLS using automated key provisioning using Hashicorp Vault• Achieved a remarkable five hundred times code optimization for custom software, significantly enhancing efficiency in resolving nested memberships in Active Directory.

Santa Clara, California, Us

Assisted team of java programmers write LDAP code conforming to the spec (RFC4510, etc).Assisted clients of Hitachi in configuration of TLS for LDAP

Wilmington, De, Us

Migrated LDAP: OpenLDAP to ODSEEScripts to feed Sailpoint from LDAPConnection of Proofpoint to LDAP

Portland, Or, Us

• Designed and implemented a sophisticated multi-node Nagios XI solution within a complex, highly secure environment.• Converted check delivery from plaintext to TLS encrypted.• Coordinated and oversaw the seamless collaboration among multiple stakeholders and technical teams to ensure successful implementation.

Designed, built, and manage two Nagios systems. One is for the subscriber LDAP systems (both wireline and wireless). Another is for the subscriber Cassandra system. Write wiki pages for each alert, so that on-call staff can click on an alert, and get more information about the alert. In short, create a monitoring system that makes as much sense as possible with as least noise as possible. Rigorous intolerance for monitoring gaps.

Lead monitoring engineer for two very large application environments: one, a replicated ODSEE LDAP environment, and the second, a Cassandra environment. Performed monitoring audits, conducted weekly monitoring requirements meetings, coding custom monitoring checks.

• System Performance analysis.• Redesigned and rebuilt monitoring system using Nagios 3 and NetCool: Resulted in 90% less alerts and 10 times the accuracy of the previous system.• DSEE 6.3 architecture and test environment deployment

San Francisco, California, Us

Build out some new ODSEE LDAP environments.

Oakland, California, Us

• Automation of routine desktop support tasks using experience with Perl Net::LDAP.• Monitoring system audit and overhaul.• Design and implementation of Nagios XI monitoring infrastructure.• Integrate Nagios XI with Tivoli Identity Manager and Oracle Identity Manager.• Automation of former “Daily Checker” manual monitoring tasks.

Revolutionizing the process of bootstrapping internet service business.

• Define Business Requirements for LDAP project• Design and document LDAP infratstructure for integration with Entrust GetAccess, Microsoft Websphere, and IBM Websphere• Design and document LDAP access control scheme• Installed Sun Java Directory Server 5.2 on an AIX platform for use as repository for Identity Management Server.• Developed Neiman-Marcus schema.• Wrote perl (Net::LDAP) scripts to import data from a variety of sources: mainframe, UNIX, Lotus Notes, Windows Active Directory.

• Designed mechanism to provide UNIX workstation authentication centralized in the existing Microsoft Active Directory for 1500 Genworth UNIX users on 436 UNIX Machines.• Perform initial discovery of UNIX applications which may or may not be PAM-enabled.• Discuss best practices involved in implementing VAS.• Define group policies to be enforced on UNIX services with VGP.• Created implementation documentation to help guide the implementation team during the installation and migration of users.• Evaluate migration of file ownership on NFS servers.• Installation and configuration of test environment (VAS & VGP).• Validate Group policies in test environment.• Knowledge transfer and a review of the solution.

• LDAP schema design & implementation• LDAP server installation & configuration• perl scripts to import to LDAP from a variety of sources (mainframe, etc)

Us

• Designed and built LDAP network using Sun Java Directory Server 5.2 2004Q2.• Worked with Engineering on migration of data from SQL (Oracle) to LDAP.• Developed, tested and wrote Deployment Guide for Operations staff. • Designed and build OpenLDAP servers for PAM_LDAP authentication• Wrote Operations Guide for PAM_LDAP

Us

• Migrated email, DNS and FTP Servers. Also configured external sendmail (8.12) on Solaris 8 server in DMZ.• Migrated external FTP server from Solaris to Linux. Designed DNS server using Linux.• Developed remote access dial-up procedures; trained off-site users. • Re-built all network systems by consolidating existing equipment, providing a more robust and secure system. • Migrated 60 users from NT/Samsung Contact (Openmail) to Windows 2000 AD/Exchange within 3 months, meeting client’s goal.• Created effective solutions to eliminate remote connectivity issues and resolve office/roaming node VPN/email problems, as well as reduce backlog of UNIX IT support issues.

• Recovered 5 Terabytes (TB) of MS Exchange message store databases from Veritas Netbackup 3.4. Archived data using OTG EmailXtender/DiskExtender stored on HP Optical Jukebox.

• Recovered 5 Terabytes (TB) of MS Exchange message store databases from Veritas Netbackup 3.4. Archived data using OTG EmailXtender/DiskExtender stored on HP Optical Jukebox.

Supplied comprehensive management of a network of 30 UNIX systems (RedHat 7.1, Solaris 7, Solaris 8, NetBSD 1.5) used for ASIC simulations (Synopsys, Debussy). Also administered Windows 2000/NT, network appliance server, DNS/NIS/FTP and Sendmail.• Implemented a Terminal Server for the router system test lab. • Created an MS Exchange remote mail procedure for sales/executives. • Solely designed and built a Linux server farm (60 processors), completing the project well ahead of schedule.• With a very limited budget, developed an effective UPS/software solution to work around severe California power problems of 2001.

Houston, Texas, Us

• Designed and built test labs, re-assigning over 100 new servers. • Customized an Ignite server, streamlining server deployment.

• Spearheaded the support function for HP-UX Netjunction product for numerous clients: Traveler's Insurance, Advantis, AIG, Lloyd's of London, British Petroleum, Perot Data Systems, MCI, AT&T, Sprint, British Telecom, American/ Delta/United Airlines, US Navy and the USDA. • Resolved critical issues and escalated customer problems with X.400-based email gateway and directory synchronization applications running on HP-UX, DOS, Windows NT and Mac System 7. Managed customer incidents queue and assigned cases to 6-person group.• Provided last-tier support for 2000-user mail system. Resolved all MS Exchange V4/V5, MS Mail, cc:Mail, NT and MS-DOS issues.• Revolutionized the use of the 200-user Mail Access Units, by creating a procedure to run Worldtalk Access software under NT instead of MS-DOS. The new method resulted in much higher reliability and improved performance. • Designed a cost-effective engineering test lab for multiple software releases, quickly resolving problems in advance of implementation.Environment: X.500, LDAP, SMTP, Worldtalk Netjunction 3.x, 4.x, HP X.400, MsMail, MS Exchange, Groupwise, cc:Mail, Lotus Notes, Quickmail, Banyan, Sendmail, HP-UX, Windows NT, MS-DOS