Experience

Banca Comerciala Romana, Bucharest, Romania - System Administrator

May 2018 - Present

I have an active role in managing, configuring and troubleshooting systems such as: Windows Clients Versions 7 and 10, Windows Servers Versions 2008/R2, 2012/R2, 2016, 2019 with GUI.

I am primarily responsible for managing all aspects of System Center Configuration Manager, Trend Micro Deep Security, Multi-Factor Authentication based on SafeNet Trusted Access, Windows Updates and Upgrades, Office 365 Updates, Dell Wyse Manager for Dell Thin Clients.

And also the go-to guy for anything scripting related. I have also fallen into VIP Support role - IT support for executive board members.

Often I have worked and I am comfortable with AD, DHCP, DNS, GPO.

To a lesser degree I have worked and know the basics of System Center Operations Manager, VMWare vSphere and Microsoft Hyper-V, Digital Guardian Data Loss Prevention

Banca Comerciala Romana, Bucharest, Romania - Junior System Administrator

July 2016 - May 2018

The first few months were spent on performing 1st level support on tickets registered in CA Unicenter Service Desk or requests via phone calls. Including, but not limited to: AD Users password resets, troubleshooting windows drivers/connectivity issues, printing issues, chrome/internet explorer issues, office issues.

Gradually I have been given more 2nd/3rd level support assignments. Most were around SCCM: creating queries/reports. Troubleshooting windows deployment failures, eventually building the deployment task sequence.

---

Education

University of Bucharest Faculty of Mathematics and Informatics, Bucharest, Romania - Bachelor Degree (still pending completion)

October 2014 - June 2018

The institution has some advanced courses on mathematics and programming.

I have passed all exams, but have not found the time to submit the license paper.

Mihai Eminescu High School, Calarasi, Romania - High School Diploma

September 2009 - June 2013

The profile I had attended has a focus on mathematics, informatics and english.

---

Projects

Setup Multi-Factor Authentication - Implementing MFA for Windows Clients, MAC Clients, Citrix NetScaler, Cisco ASA for VPN

March 2021 - December 2021 - Present

I need to implement MFA for all users in the domain. The winning solution was cloud based SafeNet Trusted Access from Thales. Alongside an engineer from the vendor we have secured the logins for Windows Clients, MAC Clients, Citrix NetScaler, and also replaced the previous two factor authentication for VPN. Created the Design Document and Enrollment Procedures, roles for helpdesk teams to have access only to what was necessary. More than 95% of users have been enabled for MFA with negligible casualties.

Windows Servers Patching - Monthly patching of windows servers

September 2019 - January 2021 - Present

When it came to updates on servers they were routinely forgotten, as a result most of the 1.5k servers were years behind with security updates. After taking over from the previous owner I have managed to bring up to date and keep updated about 40% using WSUS. The goal is to have more than 90% by the end of the year.

Setup Trend Micro Deep Security - Replacing current antivirus solution for servers

July 2019 - March 2020 - Present

Historically on servers was used System Center Endpoint Protection as an antivirus solution. Because Windows Server 2008/R2 was nearing End of Support and not feasible to upgrade/replace all servers with a version in support, it was decided to implement Deep Security with Intrusion Prevention (aka Virtual Patching) for servers. I was responsible for installing the servers, agents, replicating current antivirus settings, ensuring agent-server communication in all network environments: LAN, DMZ,...

Since implementation I am responsible for all its day to to day operations. Making sure agents get definition updates, escalating alerts to InfoSec team, reporting, backup, etc.

Standalone MBAM to SCCM - Migrating current MBAM implementation to the one integrated in SCCM

November 2019 - March 2020 - Present

When news of the ending support for standalone Microsoft BitLocker Administration and Monitoring (MBAM) came, I proposed to migrate to MBAM managed by SCCM since it is in support for the foreseeable future.

Setup Dell Wyse Manager - Installation, configuration and maintenance of a new SCCM environment

November 2018 - March 2019 - Present

After the decision was made to switch from HP Thin Clients to Dell Thin Clients, I had to install and configure the new solution which in part included: Installation and configuration of application, creating the installation image, replicating the security settings, making sure all applications were functional.

I had to do this on my own since support for Dell WMS was not acquired.

The solution is used to administer roughly 2.5k clients.

Setup SCCM Current Branch - Installation, configuration and maintenance of a new SCCM environment

May 2018 - December 2018 - Present

I was tasked with installing a new SCCM environment based on the new SCCM 2016 (at the time) then migrate and decommission the old SCCM infrastructure: one based on SCCM 2012 and the other on SCCM 2007. For the first week I have worked with a support engineer from Microsoft.

Since then I have been responsible for all aspects of SCCM Administration of the nearly 15k clients, including but not limited to: configuration of boundaries to more closely match the Sites in AD, client configuration, AD Discovery, Automatic Client Push, Backups, installation and configuration of various sccm roles: DP, MP, SUP, secondary sites.

On the OS deployment side: keeping driver packages up to date, creating zero touch installation task sequences for bare metal deployment, creating inplace upgrade with task sequence and servicing plans.

For windows updates I have set up Automatic Deployment Rules in conjunction with query based device collections and reporting via email if the ADR fails or the installation falls below a threshold.

Created numerous packages and applications. Deployed them to smaller, targeted collections or to thousands of computers, as was the need.

Creation and implementation of various SCCM Baselines Configuration with automatic remediation and reporting for non-compliant devices to ensure compliance with internal/external policies.

Creating Reports/Queries; Automatically delivery of reports on a schedule.

As of now I am working on enabling https communication using our internal PKI.

Various Automations - powershell scripts to automate mundane tasks

Over time I managed to accumulate a library of powershell functions/scripts to ease the pain of day to day living.

Reading a csv/txt file and then performing some operations on it, like adding the users/devices in some sccm collection, editing some AD user attribute, adding/removing from AD group.

Exporting data from AD, process it in some way and then send an email with the results attached.

Recently I have created a script with a GUI and wrapped in exe (to mimic an application) that disables the proxy server for a given time and then enables it.