Calendar Of Events

About Ralf Wiegand:

Network Security Architect/Engineer with over 15 years of Information Technology experience. Extensive experience in providing support in an Internet Service Provider (ISP) and enterprise data center environment, in the areas of security, systems, network administration, network architecture, design, network topologies and documentation. Significant experience providing security assessments and network security design in order to secure client assets and to comply with government regulations (HIPAA) and Payment Card Industries Data Security Standard (PCI DSS) compliance. Expertise working experience in heterogeneous environments, including VMware ESX server, Solaris, Linux and Windows. Current vice president of the Upstate New York UNIX User’s Group, Albany, New York. Fluent in English and German Languages.

CERTIFICATIONS/TRAINING:

·	Checkpoint Certified Systems Administrator pending (final exam scheduled)

·	Checkpoint Certified Systems Administration NGX I and NGX II Training
·	Sun Data Center Specialty Certification
·	Sun Storage Tek Elite Certification
·	Certified Microsoft Systems Engineer (MCSE)
·	Citrix Presentation Server 4.0: Architecture Training
·	Citrix Access Suite 4.0: Common Management Platform Administration Training
·	Certified Solaris 8 Administrator
·	Sun Solaris 10 Advanced System Administration Certifications
·	Cisco Certified Networking Associate (in progress)
·	Cisco Certified Security Professional (in progress)
·	Adobe Photoshop & Flash 8 Certification
·	Extensive ISP/DataCenter Administration, using Debian/LAMP environments

PROFESSIONAL EXPERIENCE:

CORESense, Inc

May 2008 – October 2008

Senior IT Hosting Security Engineer

·	Open Source Enterprise ISP Environment using Linux Debian Server Operating System.

·	Managed over 200 hundred Enterprise clients in a clustered LAMP (Linux, Apache, MySQL and PHP)

environment using SaaS (Software as a Service) custom build software.

·	Installed and maintained POS (Point of Sales) hosts using Transport Layer Security/Secure Socket Layer

authentication in a high security PCI compliant network topology using Internet connectivity

·	Maintained and installed SSL Apache Certificates as request from clients
·	Updated Coresense internal infrastructure from basic Samba/NIS environment to a Windows Enterprise 2008

Server infrastructure running Active Directory Authentication; added PCI compliant group policies and Norton Anti-Virus to all Laptops

·	Replace corporate iptables based Firewall system with a Cisco ASA 5520 IPS/IDS appliance; hardened all

customer host based iptables firewall rules.

·	Pioneered the deployment of Coresense SaaS client/server installations, using VMware ESX server virtualization;

developed long term plan to move to centralized backend storage

·	Creation of a PCI three-tier client/server environment to strengthened client productivity and security when

conducting client business transactions.

·	Planned and implemented new short term backup strategy using Network Attached Storage (NAS) as well as

remote sync backup to collocation site.

·	Researched, planned and executed installation of IBM eServer BladeCenter HS20/21 severs and IBM X3850

servers, including advanced Cisco router and switch configuration; upgraded existing BladeCenters at co-location high secure site; maintained extensive permission and security plan to prevent security breaches in collocation site and at client networks.

·	Installed and maintained MySQL cluster database setups in a SaaS environment.
·	Installed LVS/keepalive enterprise server load balancing infrastructure using only Open Source tools.
·	Maintained client and corporate email environments using postfix email servers; installed ASSP/SPAM server to

reduce email attacks.

·	Build high level BladeCenter hardware/software raid server configuration to maintain high availability and disaster

recovery in 24/7/365 environment.

·	Build from ground up IT Hosting Documentation, including server, client, security and network documentation
·	Applied PCI standards to corporate wireless setup and updated Cisco Aironet Wireless network.
·	Maintained Wikimedia site; recommended and purchased hardware and software; updated corporate Blog server;

installed and maintained jabber messaging server.

·	Converted email users from Postfix/Zimbra email server to MS-Exchange server.
·	Provided Corporate Server and client infrastructure troubleshooting support; as well 24/7 all night 911 client

support.

·	Setup and maintained clustered “Nagios” and “hobbit” service monitoring environment for more them 200 hosts

and services.

·	Supervised junior administrators and conducted training sessions.