Position: Head of IT Department
Category: Lead
English level: upper
Years of experience: 11

Information security tools have been developed and implemented: administrative accounts, Protected Users, Managed Service Accounts (MSA, gMSA), restrictions on PC access, application restrictions based on AppLocker, network segmentation of services and their components, data encryption on servers and PCs, etc. 

The company has successfully passed the certification of safety according to ISO 27001, including repeated control audits. 

Backup data center in another geographical area has been designed and implemented, replication of critical services data has been configured. 

IT management service model (ITSM) has been partly implemented: the processes have been described, service catalogs have been developed, a list of required documents and their templates has been formed. 

Fault tolerance and high availability for critical services, including Failover Cluster, NLB, Hyper-V Replica, SQL AlwaysOn, Exchange DAG have been developed and implemented. 

Used systems and products: 
− Active Directory, Windows Server, Hyper-V, System Center - SCOM, SCCM, DPM, VMM, Exchange Server, Lync Server, Skype for Business Server, Forefront TMG (Proxy, Reverse Proxy), MS SQL Server (AlwaysOn AG, Replica, Partitioning), Distributed File System, Certification Authority, Terminal Services (RD Farm, RD Gateway, RD Web Access, Remote Apps), WSUS, DNS, DHCP. 
− Ubuntu Server, Ansible, ELK, Docker Swarm, MySQL, NFS, Zabbix, Grafana, Cacti, Redmine, Postfix, Spam Assassin, Nginx, Apache, Tomcat, HAProxy, RabbitMQ, Redis, Memcached. 
− Supermicro and Intel servers, blade systems, NetApp and QNAP storage systems.
High experience in IT infrastructure management. 8 years of experience as a Head of Systems Engineers, DBA, Technical Support.

Extensive experience in designing, implementing and maintaining enterprise scale IT systems and services.

Management of enterprise scale IT infrastructure: more than 15k AD users, more than 800 servers, dozens of regional locations. Mainly on Microsoft products, the Linux part is mostly used for software development, DevOps, monitoring, web servers and related systems. The teams of MS infrastructure engineers, Linux engineers, DBA and technical support engineers were directly subordinated. 

A single IT infrastructure was built for 24 territorially distributed enterprises, which were previously separate independent structures, from hundreds to several thousand employees each. 

Have been developed and implemented:

- Policies, standards and regulations for the operation of infrastructure and business services, administrative models for service management in the regions, information security tools, fault tolerance and high availability for critical services.

- Ten business services for the entire structure of enterprises, including 1C-based services, billing system, website for customers (over 2 million registered users), enterprise portals, financial analytics and reporting service, etc.
 
- Infrastructure services covering the entire group of enterprises: AD, Exchange, S4B, SCCM, DFS, Backup, Monitoring, Terminal farms, ServiceDesk, WSUS, DNS, DHCP (with Failover), proxy, reverse proxy, antivirus, etc.