Samuel Donkor

• · Administration of the Freddie Mac Public Network that hosts backend management engines in support of Public Key Infrastructure (PKI), TLS certificate and SSH key management systems, and other data-in-transit/data-at-rest services across multi-site enterprise cloud and data center environments.
• · Collaborate with Information Security Leads to implement and support existing data encryption services within Freddie Mac’s environments.
• · Perform planning, design, implementation(change) and Level 3 support of IT Security solutions related to data-at-rest encryption and SSH key management with Venafi Trust Protection Platform.
• · Providing technical guidance, developing design documents, performing product installation, upgrades and certification, implementation plan, deployment and troubleshooting support.
• · Leading the security risk assessment of applications and infrastructure, including remediation of incident response, vulnerability analysis and threat intelligence.
• · Monitoring daily systems and application dashboard for health and availability of all backend management servers and resources.
• · Provisioning daily SSH Key SNOW request as well as monthly rotations and cleanup activities.
• · Running vendor provided SQL queries to correct and retrieve data.
• · Evaluate existing technology solutions and platforms and provides recommendations for improving technology performance by conducting gap analysis, identifying feasible alternative solutions, and assisting in the scope of needed modifications.
• · Collaborate with all stakeholders such as enterprise architects, software development, operations, cybersecurity and infrastructure to integrate applications and hardware.

· Installing, configuring, securing, managing, and monitoring VMware vSphere ESXi clusters in multiple data centers.

· Support SQL Server operations including managing tables, building SQL Agent Jobs, SSIS, and SSRS Manage domain controllers such as Active Directory and DNS as well as third-party applications running on Windows such as Event Viewer Log forwarders.

· Created RDS instance to support data migration purposes from legacy Microsoft SQL Server instances to a newer MSSQL instance on 2019 Windows server.

· Advanced knowledge of Windows 2003 Server (or later) infrastructure components (Active Directory, DNS, DHCP, File and Print)

· Configuring Elastic Cloud instances as well as configuring VPCs and Security groups launched instances with respect to specific projects and regions.

· Experience supporting critical server and storage (SAN/NAS technology) environments.

· Managed user accounts, files, and directory permissions and securing UNIX systems to match industry best practices.

· Creating and managing domains, preparing disaster recovery strategies, offering technical support to users, upgrading software, and handling user accounts.

· Installing and configuring workstations, software, telephone services, network printing, etc.

· Administers, monitors, configures guests utilizing vCenter.

· Installing, configuring, securing, managing, and monitoring VMware vSphere ESXi clusters in multiple data centers.

· Support SQL Server operations including managing tables, building SQL Agent Jobs, SSIS, and SSRS Manage domain controllers such as Active Directory and DNS as well as third-party applications running on Windows such as Event Viewer Log forwarders.

· Created RDS instance to support data migration purposes from legacy Microsoft SQL Server instances to a newer MSSQL instance on a 2019 Windows server.

· Advanced knowledge of Windows 2003 Server (or later) infrastructure components (Active Directory, DNS, DHCP, File and Print)

· Configuring Elastic Cloud instances as well as configuring VPCs and Security groups launched instances with respect to specific projects and regions.

· Experience supporting critical server and storage (SAN/NAS technology) environments.

· Managed user accounts, files, and directory permissions and securing UNIX systems to match industry best practices.

· Creating and managing domains, preparing disaster recovery strategies, offering technical support to users, upgrading software, and handling user accounts.

· Installing and configuring workstations, software, telephone services, network printing, etc.

· Administers, monitors, configures guests utilizing vCenter.

· Monitoring and supporting back up servers and virtualization products throughout the organization.

· Creating, as well as providing support on Linux workstations for developers.

· Participate in root cause analysis of major incidents.

· Ensuring the operational health of all Cloud services like AWS, and other online environments including security, availability, performance, interoperability, and reliability.

· Training, supporting, and educating internal and external clients on O365 capabilities and collaboration tools (OneDrive, Teams, Skype, SharePoint, Outlook etc.)

· Performing migration, patches, and deployments with ansible via SSH connection on Linux systems.

· Updating technical documentation.· Managed daily activities to include user support and system administration tasks.

· Using monitoring commands such as top, df, vmstat etc. With a combination of a monitoring application like Nagios to sustain and manage the environment 24/7.

· Spinning up AWS EC2 Instances and creating Security groups to control inbound and outbound traffic.

· Provide an unsurpassed level of support via email and phone using strong written and verbal communication skills.

· Resolve escalated cases from front line staff with a high sense of urgency.

· Installing, configuring, and maintaining Linux/Windows Servers.

· Applying security policies, hardening of servers based on company policies.

· Utilizing applications like Jira and Confluence For business continuity

· Creates and manages Active directory in windows.

· Security Configuration, Network monitoring on Linux based servers basic hardening of systems and network security, attaining the goal of allowing only the valid users/ports into the system.

· Good knowledge of the RAID groups

· Provided education about product features and one-on-one end-user problem resolutions Installs Firmware Upgrades, kernel patches, systems configuration, Performance tuning on Unix/Linux systems.