● Monitoring products (Docker container and Linux Hosts) for vulnerabilities

● Creating and maintaining SBOM, and risk assessment for each release

● Automating security patching and scanning using ansible, bash script, and Python

● Working with development teams to carry out application security reviews and documents

● Interfacing with Company Regulatory, Technical Service and the corporate network/security team

● Delivering threat modeling and secure architecture analysis using STRIDE

● Investigating reported vulnerabilities, and leading the cross-functional team to provide remedies and responses.

● Assisting in hardening/maintaining/securing production and support infrastructure(On-premise and Azure)

● Assisting in implementing and developing the products compliant with HIPAA and NIST standards.

● Perform standard configuration, management, and maintenance tasks for Linux and Windows servers.

● Implemented Ansible to manage all existing servers and automate the build/configuration of new servers.

● Setup, maintain and troubleshoot VOIP/Network related phases of projects.

● Setup and manage remote access through IPsec VPN, SSL VPN, SSH and VDI.

● Assist the development team with preparing the environment, and suggestion for feature and security.

● Assist in project management and provide required documents and security questionnaires.

● Optimize firewalls by eliminating unnecessary ACLs, resulting in 50% less lines in config.

● Support and troubleshoot company products under IIS, SQL server, Nginx, Apache and Docker.

● Install and configure VMware Horizon, Active Directory to fulfill support team requirements.

● Write and edit bash/SQL/PowerShell scripts to automated necessary maintenance.

● Research and recommend HIPAA compliance, and more secure practice for support and maintain products.

● Responsible for company helpdesk, maintenance of Windows OS versioning (XP, Vista, 7, 8, 8.1, 10), Office365, G-Suits, Exchange Online, and user applications such as Solidworks.

● Owned company-wide telephone and Windows server assets (2012, 2016), including administration of Hyper-V, security policies.

● Recommended procurement of computer systems, network, prepared repair material requests, and purchase requests.

● Responsible for installation and maintain of network devices/servers including DELL Servers and switches, Ubiquiti APs, Sonicwall Firewall.

● Guaranteed smooth transitions during the expansion by managing Ethernet/phone cabling and duct installations.

● Administrated companywide phone system including Panasonic Phone system and Allworx Voip system.

● Assisted in the administration of Arena (a cloud-based PLM) and Creating required report templates.

● Maintained, administrated Polycome/Lifesize video conferencing.

• Managed five members team responsible for company helpdesk, maintenance of Google Apps, office accounts, Windows OS versioning, and user applications such as AutoCAD in main office and branches.

• Owned company-wide telephone and Windows server assets, including management of data backup, security policies, file sharing, and network routes

• Recommended procurement of computer systems, network, and internet services; managed transition between old and new IT assets, prepared repair material requests, purchase requests, and statements of work

• Installed, configured, VMware vSphere and Created, managed, administrated and maintained virtual servers and clients

• Installed Cisco, Linksys, Netgear, Dlink and TP-Link switches and wireless routers

• Managed operation of company printers and copiers; maintained company website using Joomla 2.5

• Guaranteed smooth transitions to new buildings by managing Ethernet and phone cabling and duct installations for 4 buildings over 7 years

• Developed and maintained a database using C# and SQL server for HR to track resource allocation and timesheets, decreasing time and staff capacity from 2 employees needed to process timesheets within 20 days, to 1 employee need to process in 15 days

• Installed and maintained Linux servers under the third-party software.

• Prepared documents and managed process required for ISO certification audits.