sdonellan2016
- 1. STEVEN DONELLAN 1117 Brandenberry Lane., Auburn, Georgia 30011 (678) 765.1824 (404) 759.6050 n5smd@comcast.net Page 1 of 4 SENIOR SYSTEMS ENGINEER MICROSOFT INFRASTRUCTURE ACTIVE DIRECTORY GROUP POLICY AD LDS PKI QUALIFICATIONS PROFILE Innovative, technically inclined and high-powered professional with extensive and progressive background in Microsoft Active Directory, Group Policy, Microsoft Lightweight Directory Services (LDS), Certificate Services with the ability to demonstrate results-driven performance in environments where functional responsibilities are aligned to business strategies. Proven ability to focus on one area of Information Technology coupled with capability, expertise and efficiency in many diverse areas of Microsoft Infrastructure. Thrive in operating, maintaining, and engineering state-of-the art technology systems, with reliable management information tools specific to company’s business and its market. PROFESSIONAL EXPERIENCE SUNTRUST BANKS, INC. ATLANTA, GA SENIOR SYSTEMS ENGINEER MARCH 2014-PRESENT Senior Level Systems Engineer specializing in the Engineering Design & Implementation of Active Directory, Group Policy, Light Weight Directory Services (LDS), and other Microsoft related infrastructure components in a large corporate enterprise. Contributions Designed a two-tier 2012r2 Active Directory Certificate Services (ADCS) infrastructure for 3 AD forests. This also included all migration efforts of new template creations, re-keying of all signed certs, and new operational diagrams and strategy for production support personnel. Design planning and installation of Dell Change Auditor into 4 separate AD forests to meet audit requirements of monitoring all AD security events. Designed upgrade path from DHCP2008r2 to DHCP2012r2 for increased functionality and high availability. Designed & Implemented upgrade of Microsoft Active Directory Application Mode (ADAM) to Microsoft Light Weight Directory Services (AD LDS) across multiple instances and environments. This included capacity planning to accommodate an additional 2 million customer accounts Focused on Directory & Identity Management by designing & implementing a Role Based Access (RBAC) and Least Privileged Access (LPA) security model in Active Directory Wrote various Schema Extension files for Active Directory & AD LDS for production implementation Responsible for Active Directory design which included OU structuring, rights delegation, group naming standards, replication design & topology Led AD Rap engagements with Microsoft which included documenting, consulting and assignment of all post rap items to the support staff Designed & Implemented “New” AD LDS environments for various applications Documented & tested a SID History cleanup procedure to address token bloat issues leveraging non-authoritative & authoritative AD restores Implemented counters and dashboards in SCOM for Active Directory, DNS and AD LDS so support teams and senior leadership could have a more comprehensive view into the health of each environment
- 2. STEVEN DONELLAN 1117 Brandenberry Lane., Auburn, Georgia 30011 (678) 765.1824 (404) 759.6050 n5smd@comcast.net Page 2 of 4 Provided Level 4 support to the production services teams as well as consulting services to all projects requiring Active Directory or AD LDS integration Responsible for creating & maintaining Product Road Maps, Technical Articles, Implementation Plans, and Architectural Design Visios Designed & Implemented Advanced Group Policy Management Console with comprehensive policy delegation model Responsible for Group Policy design & framework enterprise wide - determining guidelines and standards Converted Group Policy to a “Central Store” configuration to ensure consistency in policy modifications/edits Extensive design of Group Policies to accommodate items such as Google Chrome, IE 10 & 11, Windows 7 & 8, and Windows 2012 Responsible for numerous group policy modifications to enhance the corporate security posture and add additional functionality/control in products such as Lync, Exchange, PKI, Citrix & VDI. Moved all enterprise drive mappings to Group Policy Preference Items to speed up policy processing and logon times SUNTRUST BANKS, INC ATLANTA, GA IT INFRASTRUCTURE TEAM LEAD SEPTEMBER 2001-MARCH 2014 Senior Level IT Professional specializing in the support of Active Directory, LDAP Directory Services, ADAM/LDS, Exchange, and other Microsoft infrastructure components in a large corporate enterprise. Production Support Team Lead - Active Directory & Exchange Messaging I led a team of highly skilled IT professionals who were responsible for the day to day operational functions of the Microsoft Active Directory & Exchange Messaging Infrastructure at SunTrust Bank. Together we provided infrastructure stability to our internal work force and external clients. We also implemented new solutions to stay current with an ever changing environment. Contributions: Active Directory & Related Functions Deep knowledge of Active Directory in a multiple forest configuration Extensive knowledge in ADAM & LDS (Active Directory Application Mode / Lightweight Directory Services) in a multi instance configuration Performed various Active Directory Migrations Responsible for the upgrade from Active Directory 2003 to 2008 Performed numerous Schema extensions in Active Directory & AD LDS Managed AD FSMO Roles Managed & Monitored AD backups Maintain AD Sites & Subnets Extensive knowledge of DNS, WINS & DHCP Administration Promoted & Demoted domain controllers as necessary Supported all member servers and their configuration Monitored & supported Active Directory Health and Replication Insured that directory rights & security were in line with corporate standards Responsible for cleanup of Active Directory objects such as computers, users, groups, empty OUs, when no longer needed and during migration efforts to consolidate domains
- 3. STEVEN DONELLAN 1117 Brandenberry Lane., Auburn, Georgia 30011 (678) 765.1824 (404) 759.6050 n5smd@comcast.net Page 3 of 4 Implemented Group Policy Objects (GPOs) as business processes and environments changed Maintained AD Login & Startup Scripts for each line of business Responsible for extensive Active Directory DR continuity plan and quarterly exercises Extremely comfortable in managing Active Directory attributes & meta data by using a variety of native tools such as ADSI Edit, NTDSUTIL, DSMGMT Exchange & Mobile Messaging Components Exchange 2003 & 2010 Support Mailbox Maintenance & Server Load Balancing Installed & Configure Inbound/Outbound Bridgeheads & Mailbox Servers Antigen Installation and Configuration Monitored nightly backups, drives, logs, databases & SMTP queues Mobile Messaging Support (BES - Blackberry & Good) Microsoft Office Communicator (OCS) Implementation & Support Microsoft Lync Implementation SharePoint Migrations & Daily Support Activities of a multi farm MOSS 2007 environment Ironport (SMTP Mail Gateways) Administration & Support Miscellaneous Responsibilities Experience with VMware Vcenter & Microsoft HyperV consoles – create, modify/configure, delete virtual guests as needed Managed & supported a multi Radius/MS NPS Environment Virtualization of servers (Physical to Virtual Efforts) Supported & maintained PKI, Root Certificate Authority, MIIS, and KMS servers Server End of Life/Server Life Cycle (Phasing out & upgrading new hardware & software) Experience with SAN attached storage on Windows Servers NAS experience in setting up and permissioning Qtrees Windows Cluster experience Advanced level Administration & Support of Windows File structures/shares & permissions Provided support in many bank acquisitions by either merging or consolidating those environments into ours Supported many internally written and vendor based mission critical windows applications to ensure proper functionality Trained other departments on Active Directory, Exchange, BES Administration and Support Experience with SCOM for monitoring all infrastructure servers Ensured that all security policies were followed in accordance to bank requirements as well as Federal compliance & auditing standards. Interaction with NOC to pinpoint servers on the verge of failure, preventative actions to servers “in trouble” Detailed technical resolutions into customer knowledge bases Delivered “Level Three” server support within timeframes outlined in customers’ service level agreements (usually resolve server issues—“priority ones”—within 4 hours and resolution of all other routine issues—“priority twos” – within 24 hours. Offered formal and informal technical training and guidance to Help Desk technicians, field technicians, and Enterprise Technology Risk Management to ensure a seamless interaction between these groups to present a unified comprehensive support to end users.
- 4. STEVEN DONELLAN 1117 Brandenberry Lane., Auburn, Georgia 30011 (678) 765.1824 (404) 759.6050 n5smd@comcast.net Page 4 of 4 Guest Speaker at Bindview Insight 2005 conference in Houston, Texas EARLIER EXPERIENCE 6 TEKINSIGHT SERVICES BATON ROUGE, LA SYSTEMS CONSULTANT FEBRUARY 1999-JULY 2001 R&D NETWORKING, INC. BATON ROUGE, LA SYSTEMS CONSULTANT OCTOBER 1997-OCTOBER 1998 GUARANTY CORPORATION BATON ROUGE, LA NETWORK ADMINISTRATOR JULY 1996-OCTOBER 1997 6 EDUCATION, TRAINING AND CERTIFICATION Microsoft Certified Professional Related Coursework: Active Directory, Exchange, Group Policy, PowerShell, and Lync Server TECHNICAL SKILLS All Versions of Microsoft Windows | Enterprise VMware Suite | MS Clustering Technology| Microsoft Hyper-V