Paul B. Henson
Total Page:16
File Type:pdf, Size:1020Kb
Paul B. Henson <email redacted> Work: (909) 979-6361 San Dimas, CA 91773 Cell: (909) xxx-xxxx OBJECTIVES System/network administration, research/development in areas of networking, distributed computing, operating systems, and security. SKILL SETS System Administration • Installation/configuration of server hardware and accessories. • Installation/configuration/maintenance of operating systems. Expertise in most flavors of Unix including Solaris, AIX, Linux, IRIX, Tru64, Free/OpenBSD. Familiar with OpenVMS and Microsoft Windows including Active Directory. • Configuration/management of services including Kerberos, DCE/DFS, LDAP, NIS/NIS+, DNS, DHCP, NFS, CIFS, NTP, web servers/proxies, NNTP, SMTP, POP/IMAP. • Proficient in Unix shell script development and the application of more general purpose scripting languages such as Perl to automating/streamlining system administration tasks. • Highly security conscious. Ability to install minimal software required to perform desired task, ensure secure configuration of operating system and services. Experience configuring host-based firewalls including ipfilter, pf, iptables/ipchains. Familiar with principles of cryptography and practical implementations such as SSL, PKI, secure shell. Network Administration • Setup of network hardware such as routers, switches, bridges, firewalls, packet shapers. Configuration of Cisco gear running IOS/CatOS. • Conversant with layer 1/cabling infrastructure issues including copper and fiber distribution. • Proficient in networking protocols encompassing IP, UDP, TCP, ICMP. Experience with routing including RIP, OSPF, EIGRP. Familiar with multicast protocols such as PIM, IGMP, CGMP. • Knowledgeable of wireless network deployment and management covering 802.11a, 802.11b, and 802.11g. Versed in wireless security protocols such as WEP, WPA TKIP/AES, 802.1x authentication with EAP. • Experience implementing network security. Configuration/management of RADIUS, TACACS, access lists, VPNs. Software Engineering • Computer science background including coursework in design/analysis of algorithms, programming language semantics/compiler design, computational complexity, and cryptography. • Fluent in multiple programming languages including C/C++, Perl, and Java. Acquainted with underlying concepts of assembly language. Familiar with symbolic languages LISP and Prolog. Experience with languages of historical interest such as Ada, Pascal, and FORTRAN. Ability to quickly transition to new languages and environments. • Understanding of database fundamentals and schema design. Knowledge of SQL, experience leveraging relational databases from high level programming languages. Security Analysis • Auditing/penetration testing of networks and servers. • Review source code for poor security practices or vulnerabilities. • Strong knowledge of security theory and practical application. Systems Architecture • Experience incorporating multiple disjoint subsystems into a cohesive whole. Ability to develop interface specifications and design glue code to facilitate communication between separate production systems. • Capable of taking a high-level view of design and incorporate cost, performance, and security issues into the final outcome. • Broad knowledge of operating systems, networking, software development, database theory, and information security provides a unique perspective on design issues. OPEN SOURCE PROJECTS Contributed to the development of many open source projects as well as releasing a number of original works (complete list available at http://www.csupomona.edu/~henson/www/projects/). • mod_auth_dce – an Apache module allowing authentication against a DCE security registry and providing secure access to DFS. • nss_dce – a naming services switch plugin for Solaris and Linux allowing use of a DCE registry as the source for user/group naming information. • SAVI-Perl – a Perl module interface to the Sophos Anti-Virus API, providing direct access to virus scanning functionality within a Perl script. • DCE-Perl/DFS-Perl – Perl module interfaces to the DCE/DFS API, allowing administration via Perl scripts. • pam_dce_cache – a pluggable authentication module implementing a credential cache for DCE clients to increase performance and decrease security server load. • DCE/DFS integration – patches to add DCE authentication and DFS access to a variety of open source packages including samba, netatalk, and openssh. EXPERIENCE California State Polytechnic University, Pomona Operating Systems and Network Analyst (5/96-present) • Senior member of technical staff in the Instructional and Information Technology division involved in the design and implementation of most aspects of technology on campus. • Lead system administrator responsible for over 50 Sun servers running Solaris, a handful of OpenBSD servers, and a growing Linux deployment. Developed architecture for automated network installation and configuration of systems and ancillary utilities to minimize management costs. • Participated in design and maintenance of campus network primarily consisting of Cisco hardware ranging from older Catalyst 1900, 2900 and 5000 series switches to current deployment of Catalyst 6500, 4000, 3750 and 2950 switches. Assisted in implementation of wireless network services based on Cisco 350 and 1200 series access points and implemented secure 802.1x based access initially leveraging Cisco LEAP with dynamic WEP, now supporting multiple EAP methods and WPA encryption. • Implemented campus DNS/DHCP services. Member of team installing and deploying Cisco ACS to provide RADIUS authentication for dialup, VPN, and wireless, as well as TACACS+ support for network management. • Designed and implemented campus SMTP infrastructure incorporating virus scanning and spam classification. • Co-architect and primary developer of the Cal Poly Pomona Intranet (http://www.csupomona.edu/~intranet/), a distributed system based on DCE/DFS providing central authentication, a global filesystem, and supporting a wide range of services for the campus. • Architect and lead developer for the Identity Management initiative. Developed framework and software to interface with campus Peoplesoft student and HR system to provision accounts and privileges across multiple backend systems including DCE, Kerberos, Windows Active Directory, and LDAP. Implemented data feed infrastructure allowing secure distribution of campus data to ancillary systems such as the library patron database, campus ID card server, and the e-learning products WebCT and Blackboard. • Performed security audits/penetration testing of campus services and provided recommendations to improve security posture. Implemented redundant OpenBSD based firewalls protecting campus Internet connection. Participated in rollout of campus VPN service providing secure remote access to internal services. Hughes Aircraft Company Software Engineer/System Administrator (5/95-10/96) • Administration of research/development lab consisting of Sun SPARC workstations running both SunOS and Solaris, PC compatibles running DOS, Windows, OS/2, and Windows NT, and Macintosh systems. • Configuration/maintenance of NIS, NFS, and DNS. Installation/configuration of WWW servers/proxy servers, NNTP servers, FTP servers, SMTP servers, majordomo (listserv) configuration. • Developed CGI interface with database backend for automated proxy registration process. • Installed and configured the Harvest search engine to index documents available via WWW servers. • Provided system administration support for Highway 407 project (automated toll road collection in Canada). Installation/configuration of AIX 3.2.5 and 4.1.4 on IBM RS/6000s. Assisted in configuration of ATM/ethernet/FDDI network. • Supported ECC RAAP (Rapid Application of Air Power) project, which involved porting C code from SunOS 4 to Solaris, utilization of X/Motif toolkits, and configuration of Sybase SQL servers. Jet Propulsion Laboratory Software Engineer/System Administrator (1/94-5/95) • Administration/maintenance of a heterogeneous network of Sun SPARC workstations, IBM PCs, and Macintosh computers. • Responsible for configuration of physical ethernet network, distributed NIS, NFS, and DNS. Installed and configured WWW server for group. • Provided technical support for end user engineers. • Implemented transceiver coding algorithms such as Reed-Solomon and Convolutional in C to simulate deep space transceiver hardware using a SPARC based simulation development tool, SPW. • Developed graphical user interface for software simulations using C++ and Motif. EDUCATION California State Polytechnic University, Pomona M.S. in Computer Science, June 2001 Thesis: Scalable Authenticated Web Service (http://www.csupomona.edu/~henson/classes/calpoly/cs/thesis/scalable_auth_web_service.pdf) GPA: 4.0 B.S. in Computer Science (Magna Cum Laude), August 1995 Dean's List 91-95 / President's List 93-95 GPA (major, overall): 3.97, 3.65 .