JOSHUA C. CLARK

Northern NJ | NYC NY | josh@wintelengineer.com | https://www.linkedin.com/in/josh-c-42526b46

Summary

Senior System Architect with over 25 years’ management-level and hands-on technical experience; solid customer service orientation; proven ability to recommend, develop and implement robust global network improvements, upgrades with stability to provide 99.99% availability.

Professional Experience

BBH Solutions (New York, NY)                                                                 March 2016 – PRESENT

Senior System Engineer / Senior Infrastructure Manager

Manage and administer mix mode Linux/Windows infrastructure including the application, web and SQL layers to ensure continuous uninterrupted SaaS/PaaS service. Advise for recommendation of all tactical and strategic IT initiatives to executive committee members. Lead and manage global IT team by delegating projects to ensure adherence with specific project deadlines. Modernize and design new infrastructure to revamp systems due to a key strategic migration to address speed, redundancy, disaster recovery, PCI compliance and overall stability.

· Microsoft Windows engineer, maintain 1050+ (virtual/physical) Windows Server (2003/2008/2012/2016/2019)

· Designed, built, maintained highly secured public thin client

· PCoIP / Teradici (dumb terminals)

· RDS backend through VMWare View / VMWare Blast

· Citrix Farms

· VMWare View Desktop HA Farm

· Managed all Law Firm Legal Services for multiple legal clients

· Pro Law (RDS on-prem server/service)

· LawBase / Thomson Reuters (RDS on-prem server/service)

· Carpe Diem (Timekeeper)

· Worldox (indexer for legal documents)

· Maintain VMware HA (ESXi 5.1.0 –> ESXi 6 –> ESXi 7) infrastructure with 24 back-end clustered hosts for our clients’ services (PaaS provider)

· Maintain vCenter for all clusters / hosts

· Maintain Hyper-V Server 2012/2016 infrastructure with back-end clustered hosts

· Maintain SQL 2008/2012 multiple “always on” clusters for our clients

· Design, Build, Maintain Azure Enterprise Apps – highly secured through SSL / MFA (tied to on-prem client)

· Reverse sync (O365 to premise / vice versa) for client total control over their user object

· Migrate on-premises Exchange to O365

· Maintain EOP (Exchange Online Protection)

· Maintain all hygiene security (DKIM / DMARC >/ SPF)

· Maintain all public DNS

· Manage O365 partner portal / client tenants

· Configure hybrid / migrate on-prem to O365

· Manage all DirSync clients / enable MFA for all client logins

· Design and implement secured SSL RemoteApp applications to retire all thick clients publicly available through DMZ use and strict SSL protocols

· Exchange (2007/2013) engineer with a mixed mode environment (service provider)

· Active Directory engineer multiple forests (service provider)

· Design and implement multiple GPO (Group Policies) to ensure ALL devices remain compliant

· Design all software packages for policy roll out (or scripted methods)

· Maintain all Windows Update Services

· Maintain device integrity to combat outside attacks (crypto/ETC) using protocols native to Windows

· Build Windows deployment service (PXE BOOT)

· Deploy Windows 10 Image through PXE (pre boot)

· Deploy Windows 11 Image through PXE (pre boot)

· Upgraded earlier OS through policy driven service (hands off)

InfoHedge (New York, NY)                                                                       February 2014 – March 2016

Senior System Engineer / Senior Infrastructure Engineer

Manage and administer mix mode Linux/Windows infrastructure including the application, web and SQL layers to ensure continuous uninterrupted SaaS/PaaS service. Advise for recommendation of all tactical and strategic IT initiatives to executive committee members. Lead and manage global IT team by delegating projects to ensure adherence with specific project deadlines. Modernize and design new infrastructure to revamp systems due to a key strategic migration to address speed, redundancy, disaster recovery, PCI compliance and overall stability.

· Build and implement Cisco IronPort appliances for email/web hygiene (Cisco AsyncOS) with policy cluster redundancy for HA

· Microsoft Windows engineer, maintain 1050+ (virtual/physical) Windows Server (2003/2008/2012)

· Maintain VMware HA (ESXi 5.1.0) infrastructure with 24 back-end clustered hosts for our clients services (PaaS provider)

· Maintain vCenter for all clusters / hosts

· Manage Microsoft KMS for our clients licenses (service provider for device activation)

· Maintain SQL 2008/2012 multiple “always on” clusters for our clients

· Build and implement BES 5.0.4.84 using Exchange 2013 RPC over HTTP

· Exchange (2007/2013/2019) engineer with a mixed mode environment (service provider)

· Active Directory engineer, maintain 75 forests with 2 way transitive trusts (service provider)

· WSUS engineer, maintain Windows updates for our clients with a strict execution schedule (service provider)

· Group Policy engineer, maintain strict GPO objects for our clients (service provider)

· Maintain the Disaster Recovery infrastructure including routine regression testing for failover fault tolerance

· Provide 99.99% uptime for our global clients for investors

· Design, Build, Maintain Azure Customer Tenant / Azure Enterprise Apps

· Migrate on-premises Exchange to O365

· Maintain EOP (Exchange Online Protection)

· Maintain all hygiene security (DKIM/DMARC/SPF)

· Maintain all public DNS

· Manage O365 partner portal / client tenants

· Configure hybrid / migrate on-prem to O365

· Manage all DirSync clients / enable MFA for all client logins

· Exchange (2007/2013) engineer with a mixed mode environment (service provider)

· Active Directory engineer multiple forests (service provider)

· Design and implement multiple GPO (Group Policies) to ensure ALL devices remain compliant

· Design all software packages for policy roll out (or scripted methods)

· Maintain all Windows Update Services

· Maintain device integrity to combat outside attacks (crypto/ETC) using protocols native to Windows

· Build Windows deployment service (PXE BOOT)

· Build Windows 10 Image

· Deploy Windows 10 Image through PXE (pre boot)

Dealogic (Wall Street, NY)                                                                        January 2012 – February 2014

Senior System Engineer / Senior Infrastructure Engineer

· Manage and maintain Linux/Windows infrastructure to ensure PaaS/SaaS applications are available 24/7/365

· Manage and build Azure/Office365 cloud infrastructure

· Maintain 4 redundant Dell M1000e Blade chassis

· Maintain 4 redundant NetScaler (5500) load balancers

· Maintain the Disaster Recovery infrastructure including routine regression testing for failover fault tolerance

· Maintain Windows Fail Over Cluster for highly available Hyper-V WEB/APP farm

· Maintain System Center 2012/2012R2 (all platforms)

· Build and maintain Active Directory, SQL Server clustering, Exchange DAG (CAS roles/FPOE/EOP)

· Maintain and monitor all SQL Server cluster backup/restore

· Manage and administer Windows Server, Active Directory, SAN backups

· Monitor and manage Windows security protocols (TLS, IPSec, certificates, etc.)

· Engineer Server 2012/2012R2 Hyper-V (HA cluster), VMware Workstation 4, 5, 6

· Maintain vCenter for all clusters / hosts

· Supervise and manage U.S. and international IT teams by assigning projects and tasks, following-up as necessary

· Provide 99.99% uptime for our global clients for investors

· O365 / EOP migrations

· Migrate on-premises Exchange to O365

· Maintain EOP (Exchange Online Protection)

· Maintain all hygiene security (DKIM/DMARC/SPF)

· Maintain all public DNS

· Active Directory engineer multiple forests (service provider)

· Build Windows deployment service (PXE BOOT)

· Deploy Windows 10 Image through PXE (pre boot)

Unidos Financial (New York, NY)                                                           December 2010 – January 2012

Infrastructure Manager

· Manage and maintain Linux/Windows infrastructure to ensure SaaS applications are available 24/7/365

· Design and maintain Juniper NetScreen firewall, Cisco ASA firewall and Cisco VPN Concentrator

· Maintain the Disaster Recovery infrastructure including routine regression testing for failover fault tolerance

· Install and administer Enterprise solutions to ensure security compliance is in place for audits at all times

· Build and maintain Active Directory, SQL Server clustering, Exchange, BES and all NLB SaaS applications

· Maintain and monitor all SQL Server cluster backup/restore jobs, DTS and SSIS processes

· Manage and administer Windows Server, Active Directory, SAN backups

· Monitor and manage Windows security protocols (TLS, IPSec, certificates, etc.)

· Engineer VMware ESX 2, 3 VSphere (HA cluster), VMware Workstation 4, 5, 6

· Supervise and manage U.S. and international IT teams by assigning projects and tasks, following-up as necessary

· Design secure POS Systems (Windows Embedded POSReady 7) for financial transactions in 1100 locations

iStar Financial (New York, NY)                                                                 September 2009 – December 2010

Senior System Engineer

· Active Directory engineer: Establish and implement group policies, log-in scripts (kix/Vbscript) users/computers

· DNS and DHCP engineer: Install and manage DNS/DHCP

· SQL Server (2000/2005): Install and manage all SQL servers

· NetApp Filer engineer

· NetApp SnapMirror engineer

· Exchange (2003/2007) engineer

· B.E.S for Exchange administrator

· Riverbed (steelhead) engineer

RedCatsUSA (New York, NY)                                                                    July 2007 – September 2009

Manager/Senior Architect

· Active Directory engineer: Establish and implement group policies, log-in scripts (Vbscript) users/computers

· Supported 300+ front end IIS web servers (ECOMMERCE)

· Supported 100+ back end (application) web servers

· Manage Payment Card Industry (PCI) and ensure strict security standards

· DNS and DHCP administrator: Install and manage DNS/DHCP

· VMware ESX 2, 3 (cluster) VMware Workstation 4, 5, 6 administrator

· IBM Blade Center administrator/IBM Director Administrator

· IBM SAN administrator

· Website Content administrator

· Website Server Hardware engineer

· Load Balancer BIGIP F5 administrator

· SQL Server (2000): Install and manage all SQL servers

Liberty Travel (Ramsey, NJ)                                                                  May 2002 – July 2007

System Engineer

· Active Directory engineer: Establish and implement group policies

· Supported 100+ front end IIS web servers (ECOMMERCE)

· Supported 50+ back end (application) web servers

· Design/implement Windows 2000 to Windows 2003 (native) domain migration

· DNS and DHCP administrator: Install and manage DNS/DHCP

· VMware ESX 2, 3 (cluster) VMware Workstation 4, 5, 6 administrator

· ActiveX/Com+ DLL (ECOMMERCE) engineer

· Microsoft Application Center engineer

· SSL Certificate administrator

· Website Content administrator

· Website Server Hardware administrator

· Load Balancer BIGIP F5 administrator

Ramsey Board of Education (Ramsey, NJ)                                               August 1997 – March 2002

Senior System/Network Engineer

· Active Directory engineer

· Exchange 2000 administrator

· Design / implement Windows NT 4 to Windows 2000 domain migration

· DNS and DHCP administrator: Install and manage DNS/DHCP

· SQL Server administrator: Install and manage all SQL servers

· Managed Cisco PIX Firewall

Education

RiverBed, SteelHead - 2010

NetiQ, AppManager Suite - 2009

Vmware, P2V - 2008

Vmware, ESX - 2008

Vmware, vCenter - 2008

BIGIP, (DELL), F5 - 2007

Red Hat, Certified Technician (RHCT) - 2005

Red Hat, Certified Engineer (RHCE) - 2005

Microsoft, SQL Server 2000 System Administration - 2001

Cisco, PIX Firewall - 2000

Data Center Support, Chubb Institute – 1997