Responsibilities as Devops Engineer:

 

• Create and maintain fully automated CI/CD pipelines for code deployment using Gitlab and Shell script following the best practices of Gitflow.
• Containerization of apps based on NodeJS, GoLang and Python using Docker to break up monolithic app into microservices, improving developer workflow, increasing scalability, and optimizing speed.
• Orchestration of Docker container cluster using Kubernetes or Swarm in the cloud environment.
• Pipeline implementation through Gitlab or Jenkins for critical infrastructure.

Responsibilities as Sysadmin/Network Administrator:

 

• Functioned as primary Linux administer and systems engineer to maintain system services and performance.
• Maintained existing programs/scripts and extended Linux system functionality as needed.
• Planned an executed Linux system changes and upgrades.
• Installed and configured all the Linux servers in the network on the demand of the clients
• Monitored the servers and Linux scripts regularly and performed troubleshooting steps
• Attended calls related to customer queries and complaints, offered solutions to them.
• Performed routine checks on the Linux servers of the firm.
• Maintained necessary back­up of the important files and  documented Linux scripts for future references.
• Researched the market to gain information on the latest updates available and recommended the same to the clients.
• Tested the latest software and installed them later on the server for the users.

 

 

1. PROJECT EXPERIENCE

 

Title of role: Network Security Administrator.

Summary of Client background: Mobile telecommunication company, with a significant presence in South America.

Summary of responsibilities: Network Security Consultant.

 

• Created manual for the best practices for network security, which explain how is important a secure network, password policy and all procedures have been documented.
• Specific access rules in Border Firewall through Iptables to filter and allow only necessary traffic.
• Hardening procedures; control root login, disable unwanted services, connection over SSH with asymmetric key encryption, secure remote access provide through by port­knock.

 

Achievements: Enhancing security administration in order to decrease vulnerability through firewall configuration.

 

Title of role: DNS with BIND9 on DEBIAN

Summary of Client background: Agribusiness food production Brazilian company, with a significant presence in all cities of Brazil. It competes with Bunge and Cargill.

Summary of responsibilities: Implementation of DNS primary and slave with dynamic zone updates.

 

• Recursive and caching name server.
• Hardening procedures; control root login, disable unwanted services, encrypt data communication through SSH protocol.
• Implementation Security through ACL, DNSSEC, allow­recursion, allow­query, allow­query­cache.
• Cache performance tuning setting parameters max­cache­ttl and max­ncache­ttl.

 

Achievements: Successful implementation of the DNS. Restrictions for resolution and recursion through ACL and specifics parameters, improving performance and security.

 

Title of role: VSFTPD (Very Security FTP)

Summary of Client background: Geoprocessing Company which use technology for mapping telecommunication lines.

Summary of responsabilities: Implementation of VSFTPD.

 

• Users and access policy.
• Personnal configuration.
• SSL for provide security access.
• Network security tools to insure the cryptography using DSNIFF suite of tools: Wireshark, TCPDump and Ettercap.

 

Achievements: Data transfer more secure, faster and reliably.

 

Title of role: Proxy SQUID

Summary of Client background: Geoprocessing Company which use technology for mapping telecommunication lines.

Summary of responsabilities: Personal rules for filtering Internet access.

 

• Access policy for users and groups.
• Sarg, analysis report generator about what the users are going to on the Internet.

 

Achievements: Save bandwidth, filtering all access to Internet and server accelerator.

 

 

Title of role: Wi­Fi Penetration Testing with BackTrack

Summary of Client background: Insurance company with a significant presence in many cities in Brazil is a leading car, home and small business.

Summary of responsabilities: Inspect the integrity, security and reliability over Wifi network of nine APs.

 

• Using Aircrack­ng tools to sniff APs for searching vulnerabilities in the protocols WEP, WPA and WPA2. APs, which were using protocol WEP, had password cracked.
• New policy of password, enabled mac address filtering, disabled SSID broadcast and encryption method WPA2 were introduced.

 

Achievements: Repaired some vulnerabilities and improved configuration for security access.

 

Title of role: LAMP Server Slackware

Summary of Client background: E­commerce Company, which sell electronics products since 1998, needed upgraded in their infrastructure in Linux.

Summary of responsibilities: Compile and install from source code: MYSQL, APACHE2 and PHP.

 

• Configuration of modules of APACHE2 and PHP.
• Enabled services in System V.

 

Achievements: More fast and reliable to check logs from application and also apps are executing queries to get data from Mariadb.

 

Title of role: Database Containerized with high availability

Summary of responsibilities: Installed Mariadb clustering over three hosts and all of them sharing the same mount point through Glusterfs.

 

• Configured Glusterfs over three nodes.
• Created Docker volume on Gluster mount point.
• Configured Docker Swarm with just one Mariadb container.

 

Achievements: Mariadb containerized with persistent volume and fail over due to orchestrator.