Joshua Capispisan

Shared experiences in the IT industry, particularly in cybersecurity during the CBT Summit 2019 held in Manila Central University with the theme "Navigating the Future Through Excellence"

• Act as escalation point for the resolution of complex technical incidents and problems from the Service Desk and Key stakeholders
• Engage with Project teams to ensure Operational Acceptance Criteria are clearly established and that services transition into operational use occurs in a sustainable and secure manner.
• Develops and maintains key documentation including as-built, knowledge articles, and drives good housekeeping regarding documentation, maintenance schedules, and best practices.
• Takes a role in the management of Hosting suppliers to Aurecon, ensuring they deliver to SLA and escalating where necessary.
• Adhere to incident, Problem, and Change management processes as per Aurecon standards and within SLAs
• Resolve issues related to Microsoft O365, Microsoft Azure, Microsoft Server 2012 or above, Microsoft Active Directory (DNS, DHCP, Site Services, Group Policy), Microsoft Exchange 2013 or above; VMware vSphere 6.0 or above; Citrix CVADS; Linux; Powershell; SCCM; SCOM; ServiceNow

• Exchange 2010 Administrator: Transport Hubs, Mailbox, Client Access; Tracing mail flow; MX, SPF, DKIM, and DMARC configurations; Outlook 2010, OWA, IIS troubleshooting
• Office365 Consultant: Migration from Exchange 2010 to Exchange Online; Single Sign-on using ADFS and Web Application Proxy; Azure AD, O365 Admin portals
• Technical Lead for Active Directory: AD Users and Computers, AD Sites and Services, AD DNS, DHCP; Group Policy Management; AD Risk and Health Assessment Program (MS RAP) Remediation; Enhanced Security Administrative Environment (ESAE) or Red Forest implementation
• Data Center Administrator: Hypervisor configurations (RAID, NIC teaming, OS); Hyper-V and VMWare support
• Patch Management: WSUS and ManageEngine implementation, and configuration
• Monitoring (project): Zabbix and Nagios implementation
• Backup and Storage Administrator: Veeam backup; Network Attached Storage (NAS), ISCSI provisioning
• Server Administrator (Linux and Windows Admin role): NGINX and Apache Tomcat installation and migration of webapps; RHEL 7 and Windows Server 2012R2, 2016, and 2019
• System Engineer (for applications): Microsoft CRM Dynamics and SugarCRM; EMC Documentum (OpenText); Citrix XenDesktop 7.15; Citrix ADC (load balancer); Cloudfare (public DNS)

Experienced in AWS services:

• Compute Services: (1) EC2, (2) AutoScaling, (3) AWS Batch, (4) Elastic Beanstalk, (5) Lambda
• Networking and Content Delivery: (1) VPC, (2) Route53, (3) CloudFront, (4) ELB
• Storage: (1) S3, (2) EBS, (3) EFS, (4) Glacier,
• Security, Identity and Compliance: (1) IAM, (2) Inspector, (3) AWS WAF, (4) AWS Shield, (5) AWS KMS
• Management: (1) CloudWatch, (2) AWS Config, (3) AWS Organizations, (4) AWS CloudFormation, (5) AWS Systems Manager

Linux Administration (CentOS 7 and RedHat 7)

• User and Group Management: (1) OpenLDAP, (2) Kerberos
• Storage Management: (1) Partitioning disks, managing logical volumes, creating file systems, (2) Implementing HA Clusters and GlusterFS, (3) configuring ISCSI Block Storage Server
• Network Management: (1) Firewalld, (2) iptables, (3) NAT and routing, (4) OpenVPN
• Shell Script: (1) Bash script, (2) Perl

Windows Administration (Windows Server 2012R2 and Windows Server 2016): Managing Users, Computers, Groups, OU, GPO; Powershell Script; Infrastructure Security; Vulnerability Management such as Qualys, OS hardening, and Monthly Patching

MySQL Administration: Data Manipulation and Modification (CRUD); Backup and Recovery: (1) mysqldump, (2) Data Export and Import; Performance Tuning: (1) Indexing, (2) Joins; Multitenancy (Views).

• Acted as Technical Lead for Europe businesses' Support Team which handles both OfficeScan and Deep Security.
• Supervised, coached, mentored, technically assisted the team on technical issues and performed technical sharing and group activities.
• Escalation support and Point of contact for issues that are highly business impacting, applying advanced technical competencies to provide quality resolution in compliance to service level agreement (SLA).
• Simulated costumer's enterprise environment on laboratory environment which includes but not limited to VMWare vSphere and NSX, VMWare Workstation, Windows Servers 2012R2 and 2016, Linux (CentOS and RedHat), AWS and Azure, EC2, S3, RDS, ECS, IAM, Lambda, RDS, EBS, Route53, AutoScale, VPC, NAT, CloudWatch, CloudFormation, Docker, KMS.
• Performed summary reports of issues resolved on a weekly and monthly basis, utilizing SalesForce and JIRA as the ticketing systems.
• Established collaboration and communication channels with cross-functional teams that include business users, external business partners, vendors, and cross-regional management for quick issue resolutions.
• Distinguished technical engineer capable of conversing directly with clients using foreign languages, minimizing the risks of language barriers (Italian, Spanish, Portuguese)
• Responsible for configuring, maintaining and providing consultancy integrating with platforms: On-premise virtualized data center: (1) VMWare vSphere, (2) NSX, (3) Hyper-V; Hybrid cloud: (1) AWS, (2) Azure; Windows: (1) AD, (2) GPO, (3) DNS, (4) DHCP, (5) IIS, (6) TCP/IP; Linux: (1) Apache; MS SQL Server: Data manipulation and modification (CRUD)
• Subject Matter Expert (SME) for the Trend Micro products: Endpoint: (1) OfficeScan, (2) Deep Security; Cloud: (1) OfficeScan as a Service, (2) DSaaS, (3) IWSaaS; Network: (1) IWSVA, (2) IWSaaS
• Automated tasks using Shell Scripts: (1) Powershell, (2) Bash Shell, (3) AWS/Azure CLI
• Utilized troubleshooting tools such as WinDBG for Memory Leak, High CPU, System Hang, BSOD; Microsoft SysInternals (1) Process Explorer, (2) Process Monitor, (3) Resource Monitor; IIS and Apache logging

• Worked closely with project managers during project setup and escalation.
• Troubleshoot AWS services such as IAM, CloudFront, and CloudWatch, among others.
• Performed OS and GPO hardening on both Windows and Linux system.
• Managed vulnerabilities and performed patch activities
• Utilized ticketing tools such as BMC, Jira, and ServiceNow