Jhon Castro
Springtown,TX
Summary
Adaptable infrastructure and cyber security engineer with background in designing and implementing robust infrastructure security systems to safeguard digital assets. Possess deep understanding of network architecture, infrastructure resiliance, and threat management. Skilled in developing effective security policies and protocols that enhance organizational resilience against cyber threats. Contributed to significant reduction in security breaches through strategic vulnerability assessments and proactive risk management strategies.
Overview
14
14
years of professional experience
1
1
Certification
Work History
Infrastructure and Cybersecurity Engineer
Trinity Valley School
Fort Worth, TX
01.2018 - Current
- Managed MDR, EDR systems and provided IPS solutions
- Modernized Entra and Intune security protocols
- Security policy creation and implementation.
- Conditional Access, Multifactor Authentication, and geolocation policies creation and enforcement
- First point of contact for cyber security incident response
- Network architecture and security implementations
- Designed cloud-native IP security surveillance solutions
- Handled upkeep tasks for VoIP communication infrastructure
- Managed escalations for Tier 2 and Tier 3 technical support
- Directed complex projects to success
- Upgraded aging infrastructure with updated forklift systems
- Oversaw efficient use of storage resources.
- Oversaw performance and stability of all ESXi hosts
- Implemented comprehensive risk management strategies.
- Enhanced the scalability of existing systems by conducting thorough analysis
- Handled a variety of general security-focused solutions
- Administered Solarwinds NCM and NPM for network management
- Proficient in handling various directory services
- Ensured timely updates to maintain system security and performance
- Conducted security vulnerability scans and identified areas for improvement.
- Developed incident response plans to ensure compliance with industry standards.
- Reviewed system logs and monitored network traffic for suspicious activity.
- Identified potential cyber threats and assessed risk levels of new technologies.
- Performed regular penetration tests to identify weaknesses in the system.
- Implemented firewalls, intrusion detection systems, and other security measures.
- Collaborated with IT teams to develop secure configurations for operating systems, applications, and hardware devices.
- Provided technical advice on security best practices and procedures.
- Investigated security breaches or incidents and developed remediation strategies.
- Assisted in developing policies and procedures related to information security management.
- Maintained up-to-date knowledge of cybersecurity trends, threats, and vulnerabilities.
- Evaluated user access privileges according to company security protocols.
- Configured antivirus software programs for maximum protection against malware.
- Researched emerging threats using threat intelligence sources.
- Responded quickly to any alerts generated by the organization's cybersecurity systems.
- Contributed to task list for maintaining network security across workstations, servers and peripherals.
- Conducted penetration tests to uncover security system weaknesses.
- Maintained documentation of security and disaster recovery policies and procedures.
- Implemented software tools to assist in threat detection, prevention and analysis.
- Investigated information security breaches to identify vulnerabilities and evaluate damage.
- Monitored systems for indications of threats, security breaches or intrusions.
- Deployed endpoint protection tools such as anti-malware software.
IT Administrator
KMG Chemicals Inc.
Fort Worth, TX
01.2016 - 12.2018
- Provide tier 1, 2, and 3 technical support to local and remote users
- Implemented multiple projects such as the introduction of a new ticketing system (ITSM)
- Manage multiple EMC SANs in production
- Maintain and support all ESXi hosts
- Maintain and support vSAN
- Office 365 support and troubleshooting
- Point of contact for standard and escalated issues
- Active Directory, Group Policies, DNS, and DHCP Maintenance and troubleshooting
- SCCM Management
- Support the company’s cutting age Audio Visual system
- Manage Sophos Endpoint Protection
- Manage and support all Mac laptops, desktops, and mobile devices
- Manage JAMF for Mac image and policies deployment
- Manage asset tracking for mobile devices and desktops through Samanage
- Manage monthly servers and workstations patching
Systems Administrator
FilmLA Inc.
Hollywood, CA
01.2015 - 12.2016
- Provide tier 1, 2, and 3 technical support to local and remote users
- Implemented multiple projects such as the introduction of a new SAN (EMC VNXe 3150) to the company infrastructure along with new server rack and servers
- I also introduced several new servers such as DNS, DHCP, File Servers, Utility Servers, print servers, WSUS, and SNTP
- Introduced Hyper-V to the company’s infrastructure and created several VMs for various purposes like DHCP, DNS, Printer, File Sharing, WSUS, Utility, Symantec Endpoint Protection Manager Antivirus and a few more
- Migrated old servers to new VMs with virtually no down time
- Configured, supported, and maintained several Hyper-V hosts
- Implemented new VM replication for failover
- Support the company’s cutting edge Audio Visual system
- Manage and maintain the company’s asset management and helpdesk portal system, SysAid
- Re-structured the Active Directory for better management and efficiency
- Manage and support Active Directory accounts
- Planned, tested, and introduced several Group Policies
- Maintain the company in license compliance with multiple vendors
- Maintain accurate asset information for servers, desktops, and laptops
- Manage and support Office 365
- Manage Symantec Endpoint Protection Manager
- Manage and maintain the company’s cloning station
- Manage new software images for mass deployment
- New desktop, laptops, tablets, and mobile devices deployment
- Lead technician for major projects such as server room buildout
- Maintain and support LogMeIn Backup as the primary remote user data backup solution
- Maintain, support, and manage Symantec Backup Exec 2010
- Support the company’s network printers/copiers and scanners
Systems Administrator
A-Check Global
Riverside, CA
01.2014 - 12.2015
- Provided tier 1, 2, and 3 technical support to local and remote users
- Managed multiple major projects such as server room buildout, introduction of EMC 5200 SAN to the company infrastructure along with new server racks and servers
- I also introduced several new servers such as DNS, DHCP, File Servers, Utility Servers, print servers, WSUS, and SNTP
- Introduced VMWare vSphere 5.5 to the company’s infrastructure
- Configured, supported, and maintained several ESXi hosts
- Created and maintained several VMs and templates
- Participated in the creation and implementation of new VM failover clusters
- Planned, tested, and deployed Desktop Authority
- Created and managed Desktop Authority profiles
- Maintain the company in software and certificates licensing compliance
- Maintain accurate asset information for servers, desktops, laptops and mobile devices
- Manage renewal of several security certificates used in the company
- Work closely with the development team to keep automations running smoothly
- Manage the company’s Barracuda web filter
- Manage and support Exchange
- Manage and support Active Directory accounts
- Manage Sophos Endpoint Security compliance policies
- Plan, test, troubleshoot, and deploy new GPOs
- Manage, maintain, and support building access system, Win Pak
- Support asset management system, Manage Engine
- Manage and maintain the company’s cloning station
- Manage new software images for mass deployment
- New computer builds
- Manage employee termination requests
- Maintain and support LogMeIn Backup as the primary remote user data backup solution
- Maintain, support, and manage Symantec Enterprise Vault
- Configuration and management of the company’s email spam filter, SpamLab
- Introduced new multifunction printers/copiers to the network
Helpdesk Technician
Outdoor Channel
Temecula, CA
01.2011 - 12.2014
- Provide tier 1 and 2 technical support to local and remote users
- Manage and support Active Directory accounts
- Operate the backup system through Symantec Backup Exec
- Manage the Off-site tape processing through Iron Mountain
- Phone system troubleshooting, new extension setup, voice-mail, and call handling rules
- Manage building access systems through SystemLink
- Conference room setup for audio/video presentations for employees and vendors
- Inventory management of laptops, desktops, and mobile devices through Track-It and Footprints
- Manage software inventory licenses from multiple vendors
- Provide complete technical support to all MAC/Apple users in the company
- System imaging to streamline the deployment of new machines
- New computer setup, maintenance, and support
- Complete printer support for consumer level, high end printer with large format, and high volume copiers
- Installation, configuration, and support of video and graphics editing software
- Deployment and support of Microsoft Office 2003/2007/2010, Diskeeper, SonicWall NetExtender and other programs
- Configuration and support of remote backups for laptops
- Creation, management, and support of virtual desktops in Oracle Virtual Box
- Activation, configuration, and maintenance on iPhones, iPads, Samsung Galaxy, BlackBerry, and other smartphones and tablets
- Network data cabling to provide expand the company’s network infrastructure
- Manage system deployments for time-sensitive public events such as trade shows and others
- Handle projects for Apple MAC upgrades for graphic designers, video content editors, close captioning, quality control, and programming department
- Manage and maintain an accurate account of computer essential accessories, peripherals, and printer toners
Education
CCNA: Routing and Switching - Configuring and Administering Hyper-V in Windows Server 2012, VMware vSphere Install, Configure, Manage v5.5
New Horizons Computer Learning Center
01.2015
Certificate - Networking, Computer Information Systems
Santa Ana College
01.2013
Certificate - Linux System Administration
Mt. San Jacinto Community College
01.2013
High School Diploma -
I.N.E.M.
Bucaramanga, Colombia01.1997
Skills
- Patch management
- Incident Response
- Cybersecurity frameworks
- Reverse engineering
- Disaster Recovery Planning
- Compliance Management
- Access Control
- Intrusion Detection
- Threat analysis
- Vulnerability Assessment
- DDoS prevention
- Network Security
- Firewall Management
- Cloud Solutions
- Directory Services
- Access Control Lists
- Systems Administration
Certification
- Security +
- Cisco CCNA: Routing and Switching
- MCSE – Server Infrastructure
- MCSA – Windows Server 2012
- VMWare vSphere Certification of Completion – Install, Configure, Manage
- Microsoft Hyper-V Certification of Completion
- Computer Information Systems Networking Certificate, Santa Ana College
- Computer Information Systems Certificate, Santa Ana College
- Linux System Administration Certificate, Mt. San Jacinto College
- A+ Certification
- MCP – Microsoft Certified Professional
Languages
English
Full Professional
Spanish
Native/ Bilingual
References
References available upon request.
Timeline
Infrastructure and Cybersecurity Engineer
Trinity Valley School
01.2018 - Current
IT Administrator
KMG Chemicals Inc.
01.2016 - 12.2018
Systems Administrator
FilmLA Inc.
01.2015 - 12.2016
Systems Administrator
A-Check Global
01.2014 - 12.2015
Helpdesk Technician
Outdoor Channel
01.2011 - 12.2014
CCNA: Routing and Switching - Configuring and Administering Hyper-V in Windows Server 2012, VMware vSphere Install, Configure, Manage v5.5
New Horizons Computer Learning Center
Certificate - Networking, Computer Information Systems
Santa Ana College
Certificate - Linux System Administration
Mt. San Jacinto Community College
High School Diploma -
I.N.E.M.