Blake Mennen - Security/Systems Administrator - Passionate about Building & Maintaining an Optimal Work Environment

AWS Cloud Infrastructure and Security
- Creating and maintaining a secure cloud environment using:
  - Virtual Private Clouds (VPCs) and Security Groups
  - Hardened EC2 instances based on the latest CIS security benchmarks
  - Controlled access using IAM Roles and Policies
- Deployment of services in multiple regions and availability zones for High Availability (HA)
  - Creation of AWS Auto Scaling Groups
- Automated deployment of services using Infrastructure as Code and a Continuous Integration/Continuous Deployment pipeline
  - Jenkins, Ansible, and CloudFormation
Secrets Management
- Securing passwords, certificates, encryption keys, and other secrets/sensitive data using Hashicorp Vault, CyberArk, and AWS Secrets Manager
Web Application Firewall (WAF) Administration
- Creating and maintaining firewall policies to mitigate/block DoS/DDos attacks, Cross-Site Scripting (XSS) attacks, SQL injection, and Brute Force/Password List Attacks.
- Akamai Kona
- Imperva Securesphere
Security Monitoring
- Database Activity Monitoring using McAfee DAM
- File Integrity Monitoring using CloudPassage
- Vulnerability Monitoring and Patching
- Cloud Security Monitoring using Prismacloud and AWS GuardDuty
Security Compliance
- PCI DSS

Deploying and maintaining servers in a 24/7/365, multi-platform (primarily CentOS/RHEL), data center environment serving live websites and customers.
Responsible for configuring and troubleshooting LAMP server environments.
Server security:
- Firewall configuration: iptables, firewalld, CSF, and Windows Firewall.
- Mitigating DDoS and brute-force attacks.
- Implementing best-practices such as RSA key authentication and enabling remote access (SSH/VNC/RDP) over non-standard ports.
Server migrations with little-to-no downtime.
RAID configuration (both hardware and software).
Maintains QuadraNet's own in-house Cloud platform, InfraCloud.
Networking:
- VLAN management and switch configuration (primarily Cisco and Juniper).
- Static routing
- Server network configuration.
- Troubleshooting network issues in a highly complex environment, working with several upstream network partners.
Documentation
- Responsible for creating "run books" that document all QN policies, procedures, and common/complex issue fixes.
Proactive server monitoring and management.
- Works with clients to conduct a Root-Cause Analysis following downtime.
- Resolving issues before clients are even aware of them.

Providing support to QA testers and Software Engineers.
LDAP Administration: Creating/removing accounts, managing user and group permissions.
Network configuration and management: VLAN management; installing and configuring routers (wired and wireless), Cisco switches, NTP servers, Network storage (NFS) servers, DHCP servers, and DNS servers.
Managing servers in a multi-platform environment (CentOS/RHEL and Windows Servers).
Linux system installs and configurations using iPXE and Kickstart.
Deploying and troubleshooting virtualization environments: VMware vSphere and ESXi.
Basic Bash Scripting
Automation using CFEngine.
Managing, updating, creating and installing repository packages.
Configuring and installing proprietary equipment.
Creating and updating thorough documentation.

Worked directly with the CTO to design and deploy Linux servers from the ground up.
Conducted LAN/WAN/VPN administration
Installation and configuration of wireless access points.
Implemented and configured MySQL and PostgreSQL databases for Ubuntu server.
Improved redundancies by adding highly available (HA) and disaster recovery (DR) solutions like RAID configurations and internal cloud backup.
Employed TCP/dump and Wireshark to troubleshoot, repair system issues, and verify proper network paths were used.
Secured company data through implementation of SSL/TLS, server-side encryption, and writing SSL certificates and private keys.
Installed and configured issue and project tracking software JIRA by Atlassian.
Provided technical leadership for the team to utilize JIRA, Mattermost (self hosted Slack alternative), and ownCloud.
Administered and utilized JIRA ticketing system.
Managed projects simultaneously, kept current on all project updates, and attended weekly SCRUM meetings with Groupt team members

Determined the information technology goals of the organization and implemented those computer systems to meet those goals.
Designed and deployed Microsoft Access database to manage payroll, inventory and customer orders.
Handled technical troubleshooting within an enterprise environment, including system crashes, slow-downs and data recoveries.
Trained managers and various employees on database usage and taught them basic technical skills.

Collaborated with Dick Clark productions to create and prepare content for the 73rd Annual Golden Globe's various Social Media accounts.
Posted images, videos and text to the official @GoldenGlobes Twitter for the entirety of the event.
Posted on and managed Instagram and Twitter accounts before and during the show.
Posted on GoldenGlobes Snapchat and Live Story.

Troubleshooted problems across various platforms including Mac Pro, Macbook Pro, iMac, and PC systems.
Cut and edited sound-work for multiple music videos using production software such as Final Cut, Logic Pro, and Pro Tools.
Set up and and maintained studio LAN network, personal computer systems, and recording equipment.
Researched and recommended network enhancements to higher management in order to improve system reliability and performance.
Implemented those recommendations and trained employees in its use and administration
Solved their file storage and backup issues by installing and configuring a NAS system.

LAN/WAN Administration, VPN, TCP/IP, Routers and Switches, Apache and Nginx Webservers
Systems Installation, Configuration & Upgrading
RAID configurations
Virtualization: VMWare vSphere, ESXi, OpenVZ, SolusVM, and XenServer.
Media Streaming Technologies
Audio/Visual Technologies