Dom Ferraro

As a member of the Enterprise IT team of four (4), my responsibilities are as follows:

• Implement new technology solutions for the organization such as Azure cloud and work on moving global application servers from in-house to Azure
• Research and evaluate emerging technologies and services
• Participate in IT systems project planning, design, implementation, documentation and maintenance
• Prepare, design, implement, administer and maintain security-oriented systems and networks including virtual infrastructure, network storage, end-user computing, security remote access, network policy services, wireless authentication and access policies, perimeter security appliances etc
• Provide input to the annual IT budget development process
• Prepare cost estimates and budget recommendations
• Monitor expenditures
• Investigate abnormal conditions, gain control of the situation, notify stakeholders, and expedite processes as necessary
• Participate in the monthly global IT Governance meeting and collaborate with Mirion’s divisional IT support staffs as needed
• Work cross functionally with other Mirion organizations, systems engineers, developers, outside consultants and management team members
• Anage Azure Active Directory user accounts, Exchange mailbox accounts and phone system accounts
• Direct support of 8 different office sites (out of 40) with day-to-day end user support
• Leader of the NOC team
• Extensive knowledge of firewall policies, security, and routing
• Implemented BGP routing between each Mirion site and Azure networks
• Build Azure Virtual WANs and set up IPSEC tunnels between the sites and Azure
• Create and configure BGP routing and implement Azure Enterprise Firewall and ACLs
• Leader of the M&A IT team
• Create project plans and work on integrate multiple acquired companies into Mirion’s email domain and Active Directory services
• Responsible for IT security from Network to Servers and Workstations
• Respond to security incidents and system faults, analyzing and correcting applications or system faults to reestablish service
• Execute regular malware, vulnerability and exploit assessment review
• Perform other IT duties/responsibilities defined by the Corporate CIO office

• Directly responsible for the management of the infrastructure, server systems, communications technology and helpdesk system
• Succeeded in providing the most efficient support for current operations and future needs within budget
• Designed and implemented new IT server/network infrastructure for new offices across the state of California
• Managed 3 offices and provided technical support to a staff of over 100 employees
• Designed the system architecture for an additional office, including Site to Site tunneling between all locations and cloud service hosting
• Implemented VMware ESXI 6.0 across all sites with Palo Alto Next Gen firewalls and Brocade ICX Network Switches
• Migrated in-house Exchange to Office 365
• Implemented and managed aSa Rebar Software/CAD Microstation, Soule Software, SAGE 100 Contractor and Sage Paperless Construction software
• Provided support for all servers that facilitate the office automation environment, including domain controllers, print and file servers, storage systems (Pure Storage), network appliances, and disaster recovery systems
• Provided expert level of system administration for Microsoft servers, including operating systems, SharePoint, SQL Server, VMware ESXI 6.0, and related (IIS) web and application servers
• Oversee all technical data center assets- software, servers, storage, UPS, physical access etc
• Supervise the implementation, compliance and maintenance of systems and processes in accordance with company standards and within budget

• Initiate, plan and implement complex network infrastructure solutions
• Provide guidance and training for all network infrastructure devices as team leader
• Design system architectures and security zones; plan for integrating and implementing server administration solutions into the Authority intranet and extranet environments
• Perform application testing of new server technologies and implement these technologies on a broad number of virtual servers
• Develop system designs, specifications and documentation to implement solutions such as server performance monitoring, anti-virus, and backup and restore
• Oversaw company's entire network and related policies covering use, maintenance and infrastructure

• Design, test, implement and maintain various servers, backup solution (Data Domain), Active Directory (AD), VMware vSphere, VMware vCenter, Dynamic Host Control Protocol (DHCP), Domain Naming System (DNS), server-based applications and remote access services
• Provide technical expertise to staff and perform the installation, configuration, maintenance and troubleshooting of complex IT system problems encountered by FI$Cal teams
• Design Test lab configuration from circuit bandwidth requirements to physical and logical installation of firewalls (Palo Alto), switches, and point to point connections for connectivity between distribution closets
• Recognized for successes and promoted to Analyst at the High-Speed Rail Authority

• IT Service Provider to multiple clients from small environments to large government infrastructures
• Research, assess and provide upgrade and implementation recommendations to clients
• Configure, plan and implement existing/new Windows Domain (AD), DHCP, File Servers, Exchange 2007 & up, SharePoint, SQL Server, SQL Server Reporting Services (SSRS)
• Install and support of Windows 2003/2008/2008 R2/2012/2012 R2 Server functioning in Multi-Tier application environments
• Create secure zones for clients by implementing Palo Alto firewalls, RSA tokens and enforced endpoint controls
• Support of LAN/WAN - installing, updating and maintaining all network devices
• Conduct security audits for all our clients for both network and client security including switches, routers, and AD.

• Manage a staff of five and provide first-class support to 150+ users 24/7
• Design, implement, and manage the Check Point FW-1 firewall running on Secure Platform
• Create a secure PCI zone for a retail website utilizing Palo Alto firewalls, RSA tokens, centralized logging with SPLUNK, and implement and enforce endpoint controls
• Write and enforce network security policies, password policies, backup policies, etc
• Develop and enforce web security policy using WebSense Web Security Gateway
• Implement Rapid7 Nexpose for vulnerability scanning and perform remediation and patching on vulnerabilities
• Deploy new applications, software patches and Windows Updates via WSUS across the entire enterprise and cloud environments with a detailed project plan
• Manage decisions and budget for company service agreements, hardware and software purchases

• Manage Windows Server 2003-2008 servers (such as File Server, Print Server, Backup Server with Symantec BackupExec, SQL 2005 servers for test/dev/prod environments)
• Manage two Domain Controllers (Windows 2008 Server) AD, DNS, DHCP, WINS, LDAP
• Support in-house systems and ensure all are consistent with the latest updates, patches, bug fixes, service packs and revision levels
• Provide administration, security and support of the LAN/WAN, Internet/VPN, Firewall, Mail Server, application servers, and file/print services
• Manage software license activities to ensure compliance with vendor agreements, copyright laws and other regulations
• Assist in planning for controlled growth & logical implementation of network environment, hardware & software.