Steve Ames Email and Phone Number

● Replaced physical proxy appliance with IPS and WAF solution for enhanced security● Removed BGP route outdated equipment from ISP connection to allow for service speed upgrade● Corrected FortiGate HA configuration to allow for full failover along the Security Fabric● Corrected network Trunk issues to streamline communication● Replaced and upgraded FortiGate firewalls and access points● Installed physical SilverPeak devices for SD-WAN connections to holding company● Created and updated VMware templates for Windows Server 2022● Created documentation to address documentation deficiencies within Confluence● Implemented Ionic remote MRI usage PoC project● Completed software upgrades to address security issues● Isolated outdated systems to ensure HIPPA compliance● Addressed configuration issues with internal monitoring tools● Acted as local contact for Netskope SASE project● Created fail over tunnels for all remote locations

Health Alliance Plan● Worked with teams to address vulnerabilities found via Qualys to comply with SOC 2 audit● Worked with teams to address deficiencies with asset management● Automated reporting process using Python● Worked to educate team on Security best practices and Security Program growth

● Implemented MFA with Geolocation and Number Matching options● Configured Conditional Access Policies for users and end points based on use case● Advised correcting DNS issues to appropriately age and scavenge all records● Advised on Azure Virtual Desktop solution for remote employee and contractor access● Advised move to Azure in a compute and storage split configuration

● Corrected DNS issues to appropriately age and scavenge all records● Deployed new Windows Server 2019 servers to replace 2008r2 servers● Implemented High Availability Proxy servers to maintain uptime and allow for in place upgrades of web servers and sites● Implemented Azure backups for different resource groups● Implemented Automation Accounts for VM Start/Stop operating hours● Created PowerShell scripts to automate processes related to WSUS, software deployment and user creation● Implemented new Ubuntu servers to replace CentOS and RHEL or older versions of Ubuntu● Updated firmware on Kemps load balancers and Cisco blade chassis to be in line with current versions● Implemented KDS Root Key for service accounts● Implemented Managed Service accounts and began account replacement process● Implemented VMware ESXi host for sandbox testing before production implementation● Helped manage Office 365 environment and provided PowerShell scripts for Exchange 365 administration ● Maintained a Cisco UCS that contained eight blades● Maintained a vCenter 6.7 managed VMware cluster ● Trained team members on appropriate VM template creation, updating, and deployment

● Completed shop access point roll out within the first three weeks● Cleaned up NetCloud account, removing unused numbers and lost hardware● Cleared ticket backlog dating back 5 years● Found $7,500 per month in internet provider savings due to unused connections● Stabilized mobile hotspot connections by adjusting MTU settings on SonicWalls after firmware upgrade● Secured terminals from rogue SMTP traffic● Created Python scripts for monitoring, maintenance and configuration tracking of SonicWall firewalls

● Worked on Azure AD, Teams, and Intune implementation● Scanned for and addressed security updates and issues identified by Qualys● Maintained DNS and DHCP based upon networking team requirements● Participated in documentation management team to provide guidelines on department documentation procedures and storage● Maintained a multiple cluster, multiple location VMWare farm● Installed, maintained, and decommissioned Windows server core and GUI as determined by business needs● Maintained RedHat Linux farm via Satellite● Worked with team to upgrade SCOM to 2016● Worked with team to upgrade and maintain DataVantage● Participated in Cloud implementation planning team● Created and installed internal and external certificates within an existing PKI infrastructure● Maintained and configured internal and external facing web servers using IIS and Apache● Created PowerShell scripts to automate monitoring of server update status and configuration

● Successfully migrated plant network from a public IP space to a private IP space● Successfully diagnosed and corrected PLC related networking issues helping to stabilize communications● Created and provided detailed network documentation to include unknown hub locations which were replaced with managed switches● Implemented secure WPA2 enterprise encryption for wireless connections across multiple device types● Corrected VPN configurations between PepLink firewalls● Streamlined Sophos firewall rules for better security, access and management● Effectively monitored and reacted to network alerts to unresponsive network devices● Responsible for network redesign to include VLAN segmentation and ACL for security between plant SCADA network and internal office network● Created VM templates for faster server deployment in VMware 6.7● Worked to streamline data access in vSAN cluster● Modified GPO application for a layered approach based on job and systems needs● Worked to deploy appropriate DMZ systems and security to ensure protected access to vendor information● Corrected DNS issues to appropriately age and scavenge all records● Corrected DHCP scopes to eliminate duplication and cross site distribution issues● Managed on-premises Exchange server and planned migration path to Exchange 2016 in a new domain ● Helped create an automated server update schedule using WSUS● Maintained vSAN, 3PAR, and HP SAN environment● Maintained multi-site VMware farm● Maintained eight blade Hyper-V cluster

● Successfully merged and moved two organizations from two different locations into new office space● Successfully merged Office 365 tenets during the location move● Efficiently rebuilt internal infrastructure including servers, switches, cabling and firewalls● Managed Office 365, SharePoint 365, and Exchange 365 environment● Created PowerShell scripts for management of Office 365 environment● Conceptualized documentation for procedures of both administrative and helpdesk processes.● Consistently lead numerous projects where there was a need for leadership. ● Conceptualized and implemented physical security measures for two facilities● Effectively monitored helpdesk tickets and responded to all issues within a timely manner.● Oversaw new employee onboarding and exit● Successfully implemented new infrastructure for additional building in Kenmore● Successfully increased network performance through the correction/clean up of DNS and DHCP entries.● Reworked GPO structure for better end user experience between organizations● Effectively upgraded VoIP based phone system to Ring Central● Integrated MacOS into Active Directory for Marketing design materials

● Effectively monitor helpdesk tickets and respond to all issues within a timely manner. ● Successfully increase network performance through the correction/clean up of DNS and DHCP entries. ● Continuously streamline the on-boarding and off-boarding processes. ● Conceptualize documentation for procedures of both administrative and helpdesk processes. ● Serve as a point on ISP upgrades during the first several weeks of the position. ● Expertly create training material for software upgrades and images for all desktop models. ● Consistently leading numerous projects where there is a need for leadership. ● Efficiently handle the firm's network infrastructure, internet access, phone systems, Exchange 2010 Administration, 70 virtual servers, 10 physical servers, remote access via Terminal Services and VPN, and the maintenance of WatchGuard firewalls. ● Oversee new employee on-boarding and exit. ●Exceptionally maintain physical security access and image new and desktop replacement systems.

Systems Administrator (December 2012 to January 2016) ● Headed the firm's network infrastructure, internet access, phone systems, Exchange 2010 Administration, 50 virtual servers, 30 physical servers, remote access via Terminal Services and VPN, and the maintenance of WatchGuard firewalls. ● Operated a mentor for all Technical Support Specialists. Technical Support Specialist (June 2011 to December 2012) ● Successfully delivered technical support for firms hardware, software, and peripheral systems. ● Consistently developed documentation for tape rotations, new hires, exiting employees, moves, changes, and external repair tickets.

● Continuously provided support for projects responsible for the SAP migration. ● Conceptualized on-boarding procedures and files for contractors as well as Access databases for technician time tracking. ● Earned a Technical Lead position during the Project One (SAP Conversion), instructing numerous technicians to provide the appropriate support levels for employees and contractors. ● Actively trained interns in PC configuration and installation. ● Delivered on-site and remote support for various hardware and software issues. ● Collaborated on numerous troubleshoot methods of remote connectivity. ● Configured end users home wireless networks to match with office standards.

● Successfully administered a multi-platform network with over 500 users. ● Aided in the migration of various databases to an integrated Simple Query Language (SQL) database. ● Actively repaired and maintained a wide variety of Windows and Mac computer systems and peripherals including networked and local printers. ● Efficiently completed 35-40% of trouble calls over the phone. ● Recovered 100% of system data on three systems that experienced hard drive failures.

● Spearheaded a Fortune 500 company’s computer image for the year 2000 compliance as part of a team.● Chosen as a Team Leader for a Y2K project and oversaw four other technicians in their duties. ● Effectively implemented a new software package on a wide area network of 1500 users in order to standardize office communications. ● Oversaw junior personnel on project assignments and covered calls from desktop support for remote offices.

● Efficiently repaired numerous types of electronic equipment including computers, printers, and video projection units.● Operated as Squad Leader, supervising 14 other soldiers within the unit. * Continuously tested and maintained equipment for all users on the fort. ● Instructed new personnel on company policies, procedures, and quality standards. ● Earned top-secret security clearance and was awarded the Army Commendation Medal.