(512) xxx-xxxx  |  US Citizen  |  tishchenko@yahoo.com
Alex Tishchenko

    - Extensive IT experience spanning Financial and Technology sectors
    - Infrastructure: HA architecture, automation, BCDR, Cloud migration, hybrid/multi-cloud, standardization, roadmaps
    - Public and Private cloud: VMware, AWS, GCP, Azure, Landing zone architecture
    - OS platforms: in-depth knowledge of RHEL, Amazon Linux, Windows, HPCC
    - Microservices: Docker, Rancher(Kubernetes)/Harbor, AWS ECS/Lambda, GCP App Engine
    - Toolsets: GenAI, Terraform, Python (incl. Boto3 SDK), Bash, PowerShell, SQL, GitHub Actions; fundamentals of C, Java
    - Expert knowledge of Dell, Infinidat, IBM, HP, NetApp, Brocade, F5, Cisco and other enterprise product lines
    - Operations: DevOps, Incident Management, NOC, SOC, CI/CD, FinOps, monitoring/observability
    - Comprehensive understanding of compliance standards, incl. PCI-DSS, SOC, NIST (STIG)
    - IT budget management incl. Public Cloud Cost management, Enterprise Agreements, Vendor management
    - Datacenter: colo assessment, relocation, initial buildup; telco; Public Cloud augmentation

    - EA framework: TOGAF Enterprise Architecture-Foundation
    - Public Cloud: AWS Certified Solutions Architect-Associate, GCP Associate Cloud Engineer
    - IaC: HashiCorp Certified-Terraform Associate
    - Linux: RHCE (Red Hat Certified Engineer), LPIC-1 (Linux Professional Institute Certification)
    - Microsoft: MCSE (Microsoft Certified Systems Engineer)
    - Dell: DCSNP (Dell Certified Storage Networking Professional)

    - Responsible for designing, implementing, and maintaining the technological framework supporting Products operation,
      ensuring alignment with Business objectives, while prioritizing security, scalability, and cost-effectiveness
    - Continuous evaluation of industry trends and emerging technologies to drive innovation and operational excellence
    - Public Cloud: AWS and GCP infrastructure, Organizations/SCPs/Control Tower, Backup Services, Terraform Cloud, IaC
    - Private Cloud: VMware, Rancher(Kubernetes)/Harbor, Block/File/Object, Dell, IBM, Infinidat, Brocade, Veritas hardware
    - Capacity Management and Forecasting: AWS Config/Lambda, SQL, Bash, Python, Tableau, Excel, Grafana, Dashboards
    - Lead various benchmark testing, POCs, cost assessments across AWS, GCP and on-prem environments
Accomplishments:
    - Achieved over 30% budget savings on infrastructure spend; Negotiated >$1mil in vendor concessions
    - Successfully executed multiple tech refresh projects, incl.: Brocade FC Gen5 to FC Gen6/7; IBM COS/Cleversafe
      to Dell ECS Object Storage, Dell PowerEdge 14/15G to 16G, Dell Isilon NAS to Infinidat and Dell PowerScale
    - Successfully designed and delivered Backup Service framework across AWS Organizations
    - Automated cost reporting across AWS Organizations using AWS Config, CUR, Glue, Athena, S3 and Lambda functions
    - Led successful migrations of core capabilities between AWS Organizations, ensuring seamless transition and optimization
    - Developed custom configuration compliance monitor in AWS with ServiceNow integration for ticketing
    - Written AWS S3 event driven Lambda based regex filtered copy tool to overcome UDL methodology constraints
    - Designed datacenter floor grid heat-map visualization tool for migration planning
    - Conducted hands-on Docker training sessions for the Solutions Architects team

    - Oversaw IT, DevOps, DBA, MFT, Production Support and Help Desk functions
    - Lead geographically dispersed teams to modernize and secure Infrastructure and CI/CD
Accomplishments:
Achieved AWS infrastructure cost savings exceeding 25% through targeted optimizations:
    - Executed migration to On-Demand Dev environments, Jenkins infrastructure, and embraced containers
    - Transitioned from monolithic to a microservices architecture
    - Successfully negotiated contracts, moved infrastructure to savings plan, prepay, and spot instances use
PCI-DSS compliance across AWS, Azure, laptops and on-prem environments and CIS Benchmarks Compliance:
    - Implemented environments segmentation (AD, network, AWS accts); AWS Transit VPC; Aviatrix, PaloAlto HA
    - Deployed Ansible Tower for patching and config automation; integrated ELK, LogRhythm, Symantec SEP, DLP, MSS;
      Azure SAML/MFA; server LDAP auth; migrated from Keys to AWS IAM Roles; integrated Contrast Security into CI/CD;
      improved IT CAB processes; ensured 24-hour Production Support coverage with hand-off/rotation procedures
    - Enhanced 3rd party Java SSL certificate management; Implemented on-demand Encrypt/Decrypt services for Tech Ops
    - Matured enterprise patch management by implementing governance, process automation and control structures, resulting
      in drop from thousands of non-compliant vulnerabilities monthly to zero across AWS and laptops
COVID-19 Pandemic Response:
    - Successfully migrated the company to 100% remote work
    - Implemented MS Teams as a conferencing solution and established a remote Help Desk
Monitoring, Performance, and Latency improvements:
    - Implemented service monitoring and alerting using AWS Lambda functions
    - Established NOC Single Pane of Glass monitoring dashboard
    - Improved database performance by migrating to stored procedures and enabling DB connection pooling to decrease latency
    - MFT migration from Cerberus to GoAnywhere; implemented IBM Sterling Connect:Direct for TSYS communication

    - Spearheaded strategic planning, development and facilitation of solutions to business and infrastructure challenges
    - Building organizational consensus around infrastructure strategy; assurance of organizational broad awareness
    - Assessment of industry trends and emerging technologies; Gartner/IDC research
    - Scrum Master (Kanban Flow Manager); Data Protection Program management; automation initiatives; DR strategy
    - Funding approvals, contract negotiation, vendor relationship maintenance
    - Analyses of large data sets; SQL; Tableau and Excel dashboards
    - Hands-on help to Storage, Network, Virtualization, Automation, OS, DB and Capacity teams: network packet capture/
      analyses, automation spec writing, design blueprints, RHEL/AIX/VMware performance/analyses/troubleshooting,
      Bash and PowerShell scripting, Windows security, ...
Accomplishments:
    - Achieved 48% decrease in Data Protection spend by migration to new architecture utilizing updated technology stacks
      and improved Database and VMware backup methodologies
    - Successfully re-negotiated Data Protection license costs, resulting in 70% cost reduction
    - Integrated WORM protection into Data Protection stack

    - Responsible for the overall vision, leadership, direction, governance & strategies associated with the planning, delivery,
      management, and support of virtualization infrastructure and automation
    - VMware ESX/vSphere support across 6 data centers; Horizon View VDI environment
    - Amazon Web Services (AWS) and Microsoft Azure proof of concept
    - Managed, defined, and evolved enterprise technology strategy through alignment with corporate business strategy by
      driving technology blueprints, conducting technology assessments, automation and managing the technology portfolio
    - Budgeting; primary point of contact for vendor engagement and relationship management; project management
    - PCI DSS compliance; environment standardization and processes optimization
    - RHEL/CentOS, Solaris, VMware vSphere
    - EMC CLARiiON/Dell Compellent, PowerVault MD, iSCSI, Cisco MDS, Brocade fabrics
    - f5 Big IP, Cisco ASA/Catalyst; Windows security
Accomplishments:
    - Grown Virtualization & Automation team from a single engineer to a team of six
    - Inventoried, patched and secured WorldPay virtualization infrastructure for PCI DSS ROC submission
    - Successfully completed primary WorldPay datacenter migration to a new colocation (Atlanta, GA)
    - Self-service portal buildup
    - Under budget nearly 100% server and SAN hardware refresh and retrofit; over 90% environment virtualized; ~$1 million
      (USD) in savings via optimization, re-engineering, automation and contract/vendor negotiations
    - Architected and implemented DR infrastructure and automation to meet <30min RTO
    - Successful datacenter migration from Sterling, VA to Las Vegas, NV with close to zero hardware budget; allowed
      organization cross datacenter operation with minimum latency; over 30% savings in month-to-month colocation spending
    - Key participant in SecureNet PCI DSS audit proceedings; year-to-year successful ROC submission
    - SolarWinds expansion to monitor storage and virtualization infrastructure; vROPS implementation
    - Monetra (payment gateway) major architecture upgrade for PCI-DSS compliance
    - Feedzai (Cassandra based fraud prevention system) design, buildout and integration into SecureNet authorization system
    - Planet Group - Acquire360 (Merchant Billing, Settlement and Chargeback platform) migration from Solaris to Linux,
      redesign and major version upgrade; allowed to scale SecureNet merchant boarding capabilities and reduced hardware cost
    - Multi-distribution Linux environment upgrade/standardization on latest Red Hat OS; server deployment automation
    - NTP and external DNS re-architecture; Oracle RAC environments migration and standardization on 12c/RHEL

    - VMware administration; Dell|EMC, HP 3PAR storage administration on Brocade and McData FC fabrics
    - Automation; performance analyses and tuning; environment standardization; Linux/Unix/Veritas Clustering (VCS, VxVM)
    - VAR relationship management; project management; SAS70 (SSAE 16) and PCI DSS compliance
Accomplishments:
    - VMware contracts re-negotiation and infrastructure redesign resulting in over 20% cost savings
    - Storage and server hardware refresh: migration from EMC VNX/Dell PowerEdge to HP 3PAR/ProLiant
    - Successful PCI DSS ROC submission

    - Dedicated engineer for Facebook, Yahoo and OnLive; backup for Amazon and Microsoft
    - Systems integration support; automation; scripting; performance testing/optimization; IPMI; Intel Node Manager
    - Microsoft, VMware, ROCKS+/PCM (OCS) HPC clusters; Brocade, Cisco MDS, InfiniBand, Dell|EMC storage,
      EqualLogic, PowerEdge, PowerConnect, PowerVault NAS/tape, Windows, Red Hat, Solaris, AIX, HP-UX
Accomplishments:
    - In collaboration with Facebook developed common platform for system configuration changes and firmware delivery
    - Wrote tool for System Management BIOS (SMBIOS) modifications
    - Developed and pioneered factory integration model for HPC clusters at Dell using 3rd party integrator (TriFusion)
    - Developed and implemented North America's Remote Enterprise Assistance program (foundation for Dell Global Services)

Bachelor of Science in Computer Information Systems (Magna Cum Laude) | Texas A&M University, Commerce, Texas

Fluent in English, Russian, Ukrainian; limited working proficiency in Spanish