Senior System Engineer

8/2022 – 12/2023

• Implementation and administration of the IVL virtualization environment (VMWare, OLVM)
• Implementation and administration of RDBMS, e. g. Microsoft SQL Server, Oracle and MySQL
• Implementation and administration of proxy systems (Bluecoat)
• Evaluation of IT security requirements in complex network environments
• Implementation and administration of web servers (IIS, Apache, Tomcat) operating on Microsoft operating systems and various Linux distributions
• Operation of C/S-Applications (public administration)
• Administration of the private cloud environment
• Administration of the MDM-system
• Configuration deployment automation with Ansible

Technology
Ubuntu 18.x, 20.x, 22.x, SuSE Linux Enterprise Server, Active Directory, LAN, TCP/IP, Firewalling,

Active Directory, Linux (Kernel), Ubuntu

6/2019 – 6/2022

• Planning, administration and deployment of a Linux and Windows based environment
• Planning and implementation of Active Directory based authentication and authorization services for both Linux / Windows and application SSO
• Planning and implementation of an Active Directory based DHCP and DNS Service
• Administration of RDBMS servers (PostgreSQL, MySQL)
Development of a flexible deployment solution for compute nodes (cloud based services, VMs and containers)
• Planning and implementation of system security policies and services
• Planning and deployment of a centralized password management solution based on Hashicorp Vault
• Planning and implementation of OSS based file server solution to replace the current NetApp Filers
• Planning and implementation of a new department CA
• Planning and implementation of Salt based automatic configuration management
• Planning, consulting, configuration and deployment of an ITIL 3 compliant ITSM tool
• Planning, configuration and deployment of i-doit CMDB and assent management

Active Directory, Ansible, Bash Shell, Firewalls, Freebsd, OpenSuse, Postgresql, Windows Powershell, Ubuntu

11/2018 – 6/2019

• Monitoring the operation of IT infrastructure and evaluation of employees’ work.
• Preparing reports of project progress and operational issues for management.
• Coordination with other team leaders to ensure achievement of all objectives.
• Providing training, knowledge transfer and assistance to all members of the IT team.
• Maintaining subject matter expertise on all technology and software methods.
• Coordination with businesses for various projects and ensured smooth incorporation.
• Managing maintenance contracts with hard- and software vendors
• Hands on support during peak times and incidents
• Planning and preparing the PoC testing for the new corporate-wide storage strategy

Ansible, Firewalls, Lead-Management, Red Hat Enterprise Linux (RHEL), SAN / NAS, Vmware ESX Server, Vmware Vsphere

7/2018 – 10/2018

Analysis and structuring of requirements (Epics, User Stories, System Environment) of the infrastructure scrum team.
Verifying and adapting of application and software requirements to the operational virtualized environment.
Identification and refinement of requirements and dependencies of the development and integration teams

Oracle Database, Red Hat Enterprise Linux (RHEL), Vmware Vsphere

2/2018 – 8/2018

Working on redesigning LGL’s PostgreSQL database infrastructure, increasing availability of database instances.
Providing on-call support during out-of-office hours for PostgreSQL databases.

Postgresql

8/2017 – 1/2018

Setting up RedHat IdM (Identity Management) platform and establishing trust relationship to BLEs Active Directory service
Developing Ansible Roles and Playbooks to meet BLEs specifications.
Mentoring of BLEs staff on Ansible and Ansible role deveopment principles

Red Hat Enterprise Linux (RHEL)

2/2017 – 10/2017

Taking leading role for linux infrastructure team during AD and DNS domain migration
Integration of Linux systems in AD authentication
Mentoring of team members
Knowledge transfer for the topics ACL, SSH, SFTP, certificates, PKI, Git, GitLab and systemd
Working on and implementing automatic deployment concepts
Optimization and hardening of Linux based CIFS and NFS servers
Support on ORACLE RDBMS and ASM setups
Supporting and carrying out day to day system administration tasks (Linux, VMWare, Windows)
Planning and designing an Active Directory-based role and authentication model for LINUX (RHEL) systems
Automation of day-to-day system administration tasks with Ansible and Python/Shell scripting
Creating extensible documentation with GitLab markdown

Postgresql, Oracle Database, Incident-Management, Red Hat Enterprise Linux (RHEL), IT Service Management (ITSM), Active Directory, Systemmigration, VMware vCenter

7/2016 – 12/2016

Participation in infrastructure team, personal responsibility and lead for upgrading a technical software installation and a DC move (including changing providers) of a complex Java application (EJB / Websphere Application Server, ESB
Software AG webMethods)

Organization and support of interface move (ESB) and parallel operation of the legacy application and new application
a. Moving of WebSphere MQ and File Transfer Interface
b. Organization of the system setup in new provider DC
c. Organization of firewall changes, etc
Creation of system documentation
a. Installation instructions
b. Operator instructions / operating concepts
c. Security concepts
d. SLAs with the new provider
Support for setting up operating procedures (among other monitoring)

Netzwerk-Sicherheit, Transport Layer Security, Projektleitung / Teamleitung (IT), SSH (Secure Shell), Ibm Websphere Mq

5/2016 – 7/2016

Interfacing application developers to ensure correct design principles are maintained and implemented as part of the application deployment process
Provide day to day database support (PostgreSQL) and database administration for cloud operated databases
Working with systems architects and devops to minimise ops overheads
Zusammenarbeit mit Compliance and Risk Team um die Datenschutzrichtlinien entsprechend der Unternehmens- und gesetzlichen Bestimmungen entsprechend sicherzustellen
Optimierung des Datenbankdesigns und dessen Impementierung
Problemanalyse und Datenbanktuning
Design und Tuning analytischer Datenbankabfragen
Datenbank Performance Tuning
Sicherstellung der Datenintegritat
Bereitstellung einer effizienten Datenbankstrukur (Ansible, Docker, Amazon Cloud services)

Postgresql

5/2015 – 4/2016

- Operation of railway-specific applications (batches, processes, systems) and infrastructure
components
- Monitoring and operation of applications for front and back end systems
- Work on and counselling in system, process/batch and application analysis
- 3rd level support for all involved applications and operating systems
- Management and resolution of escalated trouble tickets
- Inter-relationship management for individual internal organizational units

Red Hat Enterprise Linux (RHEL)

5/2014 – 3/2015

- Support and administration of EnteriseDB Postgres Plus Advance Server (PPAS) product line
- Close work with the architects office on creating the new standard operation environment for
Postgres based services:
- Lifecycle management for databases and database servers
- Planning future HA-cluster layout based on RHEL 7 (RHCS) and Postgres 9.4
- Sizing of future database instances based on prior and current performance requirements
- Advising on hardware and software lifecycle management
- Planning for future VM-based (IaaS/SaaS) and automated database provisioning
- Creation and presentation of system utilization forecasts
- Maintainance and tunining of two internal Datawarehouses (accessed by Pentaho BI and DI)
- Close support on Pentaho BI and DI builds for all database / Hibernate related issues
- Supporting application development on various ORACLE DBA tasks
- Improving system baselining and system standardization
- Performance tuning of PostgreSQL database instances
- Represent EnterpriseDB on site
- Advising on usage on JPA and Hibernate technologies for new and current portal systems
- Single point of contact for all PostgreSQL related questions
- RDBMS performance monitoring and auditing
- Set up and configuration of PEM instances for UAT and PROD environments
- Refining and implementation of security baselines for PostgreSQL instances currently in pro-
duction use according to the lastest regulatory requirements
- Set up autogeneration of workload and resource utilization reports
- Monitoring system performance and tuning of various database instances with instance sizes
up to 10 TB
- Extending the level of unattended system operation with shell and PL/SQL scripts
- Planning system upgrades and extensions
- Migration of historical data from DB2 (iSeries) to PostgreSQL including conversion and
transformation of data
- Data needed to be sanitized
Page 4 of 7 Version: 16.0
Curriculum Vitae
- To reduce storage requirements, a columnar storage solution for Postgres (cstore) was
used
- Carrying out day to day database administration tasks

Data Warehousing, Oracle-Anwendungen, Postgresql, Relationale Datenbanken, Administration von Datenbanken, IBM DB2, Hardware-Design, IT Sicherheit (allg.), Red Hat Enterprise Linux (RHEL), Qualitätsmanagement / QS / QA (IT), SAP IS-RE, PL/SQL, Saas, Shell (CSH), Hibernate (Java)

8/2010 – 5/2014

Summary
========
- Conception, implementation and deployment of a file transfer solution
- Planning, conduct and documentation of high availability and load tests of different RDBMS,
write on whitepapers for future strategy decisions
- Write on and implementation of security concepts
- Planning and conducting performance, system and technical tests for DBAG's New Clearing
Architecture (NCA)
- Write on a desaster recovery plan for Eurex New Clearing Architecture to fulfil latest regulatory
requirements.

Technical Test New Clearing Architecture
-----------------------------------------------
- Overall test conception and organization in classic and agile development models
- Extension of an automatic test tool chain to the Eurex Clearing derivative systems
- Planning and conducting the execution of automated test scenarios
Market analysis RDBMS
- Selection of a subset of highly available RDBMS-variants suitable for strategic adoption of
the new common RDBMS of Deutschen Börse AG
- Definition, deployment, programming, test and analysis of highly available database systems.
- Write on documentation and testing scenarios
- Porting of a J2EE based trading platform to the previously selected RDBMS
- Porting, adaption, enhancement and tuning of relational data models
- Conception and delivery of infrastructure services for conducting the dened HA and load
tests.
- Deployment of a cluster file system (Gluster) as central storage solution
- Documentation of test setup and test results
- Installation, configuration and documentation of the test applications used (J2EE based)
- Write on whitepapers and presentations
- Write on strategy papers
- Migration, configuration and maintenance of the develompent tools used internally during the
tests (bugzilla, jamwiki, svn server)

Data exchange/ Filetransfer solution "Common Report Engine"
-----------------------------------------------------------------------
- Write on concepts, definition of security and operating concepts. Deployment of the testing
environment, coducting of basic functionality checks and documentation of test results.
- Installation support for the production environment (Red Hat Enterprise Linux, Red Hat
Satellite)
- Definition and documentation of the interfaces involved to allow the apllication development
teams to connect to Common Report Engine (Partner systems are OpenVMS Backend and
SAP)
- A suffcient system security and access policy has been deployed in conjunction with GIS
(Group Information Security), deployment of appropriate security baselines
- Packeting of the delivered administration and configuration shell scripts (RedHat packages)
- Write on a system operating manual.
- Handover to system operating and support during the transitional phase

Security concept Global Trading Solution
-----------------------------------------------
- Development of a security concept for the Global Trading Solution (GTS Web GUI)

Relationale Datenbanken, IT Sicherheit (allg.), Informationssicherheit, Red Hat Enterprise Linux (RHEL), Agile Methodologie, Testen, Shell (CSH), Subversion, J2EE