Andrey Umnov

• Provided L3 technical support for AD and dependent services. • PowerShell automation of key IAM processes • Set up tiered AD environments and conducted knowledge transfer to operations teams.

•Supported corporate spin-off project through AD migration and schema modernization. •Strengthened AD security by implementing tiered administration and regular PingCastle and Qualys audits. •Collaborated with security teams to implement MS Defender and endpoint protection tools on DC servers. •Delivered PowerShell automation for provisioning, auditing, and reporting. •Managed Group Policy creation, design, troubleshooting, and documentation. •Implemented Quest Recovery Manager for AD backups with disaster recovery (DR) solution. •Automated privileged account reviews and password rotations using PowerShell, cutting incidents by 30%.

•Maintained multi-forest AD infrastructure (500K+ objects) with full policy compliance (L2/L3 support). •Executed AD upgrades, migrations, and security hardening in accordance with enterprise policies. •Integrated McAfee/Trellix and Cortex XDR solutions for DC server protection. •Conducted incident investigations and log analysis using Splunk and Guardicore. •Resolved complex AD issues, such as authentication problems, replication failures, and DNS config errors.

• Take a part in the 'IT Risk within Risk Appetite' (ITRwRA) programme. Project covers following IT Risk areas: Foundation, Identity & Access Management, Platform Security, Change Management, IT Resilience, and Security Monitoring. • Creation of the Operational Security Guidelines (OSG) and Risk Assessment (RA) documents for critical applications. • Collaboration with application owners and business parts for gathering required information for OSG and RA. • Building reports for Steering committee.

• Database Administration (installation, maintenance, configuration, and provisioning tasks for MS SQL clusters) • Match Night Live Support by monitoring of database performance and quick solving issues. • Optimize hardware configuration and SQL licenses (migration DEV instances to free licence). • Technical support of the web site www.uefafoundation.org (LAMP stack).

Software Development Environments Management and Configuration Management: • New environments setup DEV/UAT/SIT/TEST (bCloud, VMWare, AWS, F5 Load Balancers, DNS tools, HCE MS SQL databases) • Maintenance, configuration, and monitoring of existing environments (Netcool Internet Service Monitoring, PowerShell scripts writing) • Deployment applications on Windows servers (CA Release Automation, Nolio Agents) • Environment documentation management, issues troubleshooting (CMDB, Jira, Confluence) • Incident Management, Problem Management, Change Management (ServiceNow)

Responsibilities/Daily tasks: • Act as ‘Service owner’ for a set of applications, monitoring and reporting on service levels attained for these applications • Collaborate with specialists of other applications and developers. • Solve service issues in cooperation with database administrators, Wintel/Linux support teams, network team • Participate in monthly service performance review, yearly vendor management process

Responsibilities/Daily tasks: • Provide technical support of customer’s IT infrastructure by implementing IBM software tools for security compliance and centralized server management • Implementation of IBM software tools for security compliance and centralized server management. • Perform OS patching Updating operating systems security patches, antivirus protection, services and accounts management, vulnerability and attack detection, event log analyzing. • Problem and Change Management according to ITIL methodology. Technologies, tools and methodologies used: Windows, ITIL, WSUS, IBM ManageNow, IBM Tivoli, Bugzilla.