Eudy Alberto Zerpa Vargas

Experience

• 

  Seguros Nuevo Mundo

  Aug 1998 - Jun 1999

  Technical Support Analyst

  - Information Technology intern. - Technology support: Assembly, installation and configuration of Microcomputers. - Data transcriber in the data migration activities of the Y2K project. Quantitative achievements: ✔ Degree thesis: Analysis, design and programming of (1) an Inventory System based on Visual Basic 4.0 and MS Access 98 database.

• 

  INCE Metal Minero

  May 2000 - Sept 2003

  Information Technology Analyst

  Web Master at INCE Rector: Leader of the Web development team composed of 4 IT analysts, responsible for programming, Keyword research, SEO Onpage (Web performance, indexability, headings, Interlinking), SEO Offpage (Linkbuilding and Content Marketing) of the site: www.ince.gob.ve. Systems Administrator at INCE Metal Minero: Design and administration of Active Directory: DCs, users, groups, control access lists, security policies and group policies (GPO). Service management: DNS, DHCP, WEB Servers (IIS 5.0), on Windows Server 2000/2003 platform. PPTP VPN service management (RRAS) on Windows Server 2000/2003 platform. File Servers management based on Windows Server 2000/2003 Administration of File Server SAMBA (GNU / Linux) to serve Windows Server 2000/2003 clients. Network Administrator at INCE Metal Minero: Switching. Cat 5e structured cabling. Quantitative achievements: ✔ Migration from (1) Windows NT 4.0 domain to Windows 2000 Server domain. ✔ Definition of (3) Policies for domain accounts (Password, Account lockout and Kerberos). ✔ Configuration of (32) roaming user profiles via Windows Server 2000 Intellimirror. ✔ Development of (2) Web sites based on ASP 3.0, HTML, CSS, JS and MS Access 2000 database. Show less

• 

  Freelance | Self-Employed

  Apr 2004 - Nov 2006

  Information Security Consultant

  Responsible for all consulting work related to penetration testing; External and internal security analysis (black box, white box and gray box penetration tests). Vulnerability assessments to create an overview of all security breaches present in an environment (internal and external) and identify the best approach to remedy the findings. Response to virus incidents or security breaches. Involvement of Software Development project teams to identify and prioritize applicable security controls and provide guidance on how to implement these controls. Definition of security configuration standards for our clients' platforms and technologies. Quantitative achievements: ✔ +20 Analysis of vulnerabilities to new developments. Through Pentesting tools and complementary procedures, it was guaranteed that new products were marketed and passed to production -by customers- without susceptibility to attacks such as SQL Injection, File Inclusion, and Cross Site Scripting "XSS", or command / code execution vulnerabilities. ✔ Deployment of (1) secure file transfer platform with transport encryption and authentication based on X.509 certificates, the purpose of which was to guarantee the confidentiality of the data exchange between the SGR and SGR-TRON systems during the certification period and closing of sale of the Risk Management System to Seguros MAPFRE. Show less

• 

  National Center for Information Technologies

  Jan 2007 - May 2007

  Systems Administration Analyst

  Responsible for the systems administration of the CENIT Project, an initiative that gave rise to the National Center for Technological Innovation Foundation. In this position my functions were: Microsoft Systems Administrator at CENIT: Active Directory Administration: DCs, OUs, users, groups and group policies (GP0), DNS, DHCP, WEB Servers (IIS 6.0), Firewall (ISA Server) , File Servers based on Windows Server 2003. Linux Systems Administrator at CENIT: Linux Servers Administration (Debian, Ubuntu Server, CentOS) Installation and administration of services under GNU / LInux environment such as: DNS (Bind 9), DHCP (ISC Dhcp), OpenLDAP, WEB Servers (Apache2), NTP, NFS-based File Servers. H323 multipoints, gatekeepers and videoconference codecs, IP telephony services (SIP), Mail Servers: Postfix (SMTP), Courier-Mail (IMAP / POP3). Implementation of network monitoring systems such as Nagios, Cacti, ZenOss, Ntop. Network Administrator at CENIT: Switching. Cat 5e structured cabling. Quantitative achievements: ✔ Migration of (1) Windows Server 2003 based DHCP service to ISC DHCP-Server. ✔ Update to (1) Domain Password Policy (secure password best practice application). ✔ Definition of (1) Domain Account Lockout Policy. ✔ Installation and configuration of (5) CPE (ODU & IDU) of the long distance wireless network located at the La Carlota air base (BAGFM). Show less

• 

  National Center for Technological Innovation

  May 2007 - Nov 2009

  Systems Administration Specialist

  Systems Administrator responsible for critical mission services in the Data Center of the Academic Network of Research Centers and National Universities (REACCIUN) in this position my responsibilities were: Management of mail services, management of telephone services based on Asterisk 1.4 , DNS service management based on ISC Bind, management of Firewalls based on IPtables, server hardening, management of H.323Videoconferencing and RTSP Streaming services, Change Controls, Monitoring, Incident management response, Execution of contingency procedures and Guarantee continuity of services. Quantitative achievements: ✔ Leader of (1) design and deployment project of (1) IP PBX to serve (4) institutions. ✔ Implementation of (1) live video streaming service "VLC + Darwin Streaming Server". ✔ Deployment of (1) IP CCTV solution in the Technological Innovation Line (Lifit). ✔ Migration of (1) Authoritative DNS service (+1500 domains) from SunOS to GNU / Linux Debian platform. ✔ Migration of (1) mail service (+1000 mailboxes) from SunOS to GNU / Linux Debian platform.✔ Assurance of (3) mail services (+2000 mailboxes) incorporating SMTP authentication with SASL, + OpenLDAP and digital certificates for TLS encryption. ✔ Registration, maintenance and operation of (1) Reacciun-001 National Videoconference room, a certified multimedia communication space registered in the RAPLA System of the Autonomous University of Mexico - UNAM. Show less

• 

  Ministry of Science, Technology and Innovation

  Nov 2009 - Jul 2010

  Information Technology Manager

  Responsible for coordinating and advising State projects that involve the study, evaluation and application of information and telecommunications technologies in accordance with the guidelines of the National System of Science, Technology and Innovation, as well as planning and directing operations related to administration and maintenance of the Ministerial platform and its dependencies. At the head of a team of 14 professionals (specialists, analysts and technicians from Systems Administration and Telecommunications) the following achievements were achieved: ✔ Migration of (1) Email service (incorporation of SASL, SPF, Spamassasin). ✔ Provision of (1) alternate ISP link to guarantee Internet access redundancy. ✔ Migration of (1) Edge Firewall. (Appliance proprietary to Firewall FLOSS) ✔ Deployment of (1) Monitoring Service of servers and Telecommunications equipment. ✔ Expansion of the storage system through the addition of (1) NAS Enclosure. ✔ Integration of (1) Siemens Hipath 4000 PBX with (2) CENIT / REACCIUN IP PBX. ✔ Reduction (93%) in telephone service interruptions through the provision of a (1) new UPS + replacement of (1) battery bank as a means to guarantee the availability of the service provided by the PBX of the ministerial tower. ✔ Planning and coordination of the deployment of (1) systems and telecommunications platform for the 1st. Unique ticket office for administrative procedures. ✔ Attention to (15) relevant CGR observations and resolution in accordance with the provisions of NGCI and the control objectives of COBIT 4.0. Show less

• 

  National Center for Technological Innovation

  Jul 2010 - Nov 2012

  Chief Information Security Officer

  Responsible for the design, development, control and management of Policies, Standards, Procedures and actions aimed at guaranteeing the integrity, confidentiality and availability of the information assets of CENIT and the Academic Network of Research Centers and National Universities - REACCIUN. At the head of a team of 4 professionals (Information Security and Network Security specialists and analysts) the following achievements were achieved: ✔ Execution of (11) vulnerability assestments on the REACCIUN platform. ✔ Detection and correction of (+40) high level vulnerabilities in REACCIUN's IT platform. ✔ Execution of (3) information systems audits. ✔ Reduction (82%) of telematic incidents on the REACCIUN platform for years 2010 - 2012. ✔ Deployment of (2) Monitoring Services (SIEM) of Servers and Telecom equipment. ✔ Design and institution of (2) Change Control policies and go on to production of solutions. ✔ (1) Advice to the General Management of Major Projects of CANTV in the design of the architecture of the Corporate Videoconference platform and in the description of positions and functions of the future Coordination of Unified Communications. ✔ (1) Advice to the CANTV Network Security coordination concerning the definition of H.323 signaling traffic rules and RTP media in corporate firewalls, in order to favor the construction of the Corporate Videoconference platform. ✔ Improvement of the reputation of the (2) IP "/ 16" blocks of REACCIUN through the identification and management of spam mail incidents generated by vulnerable servers (Open Relay), fraud attempts through servers compromised by Phishing, as well as attention to DOS attacks generated by Botnets and individuals from stations located in laboratories and classrooms of National universities. Show less

• 

  Information Technology product Manager

  Nov 2012 - May 2018

  In this position my responsibility was to coordinate and control the design, development and management process of the product lines:- Data center.- Contact Center (CPA, PBX-IP, 0800 Services, Voice Gateways, Terminals).- Network Administration and Management. The management of each product covered the commercial processes (pre-sale, sales, post-sale, price, channels, promotion), preparation of the service contract (Customer - Cantv), product launch.I also was responsible for the management of the life cycle of products. Plan, direct and coordinate the development of the marketing plan and strategic plan. Participation in the preparation of the budgets of the General Managements of Private Companies and Institutions and Public Institutions. Identification and monitoring of national and global technological trends for product developments. Monitoring of competitors' actions, by product line. Generation of new potential business and development and / or improvement of existing products. Monitoring of business cases of the products. Investment budget request for new products.Leading a team of 4 professionals (Product Consultants) the following achievements were achieved:✔ Design and implementation of (1) Unified Communications Product Pilot (Open Source). Show less In this position, my responsibilities were the following: Designing solutions in information technology and telecommunications platforms that are not listed in the Company's Product Catalog. Propose viable architectures, technologies and products from a technical and financial perspective. Carry out the evaluation and selection of the software and hardware components of the solution. Size the infrastructure and estimate / calculate the costs of the solution. Lead the selection of methodologies to achieve the desired business results. Support consultants from the Sales Coordination of private and public institutions in creating detailed requirements that specify the technical architecture of the system. Support consultants of the Price Coordination in determining the investment, costs, expenses and potential income for the construction of the business case of new products. Perform pre-sales engineering tasks through the development of technical-economic proposals for Cantv clients. Orchestrate the resources involved in the implementation of the solution, this may include serving as project leader responsible for cost management, procurement processes as well as participating in the execution and control phase of the project supervising external contractors and / or groups development companies in order to guarantee respect for the scope, budget and schedule foreseen for the implementation of the solution. Quantitative achievements: ✔ (3) IT Solutions. for the Banking sector. ✔ (2) IT Solutions to support electoral events. ✔ (1) T.I.C. Contact Center for the Health sector. ✔ (1) T.I.C. for the Retail sector that consisted of a Biometric (fingerprint) Authentication service in the Cloud, deployed in: +50 commercial chains. +1400 stores nationwide. Show less

  • Information Technology Product Manager

    Dec 2015 - May 2018

  • Information Technology and Telecommunications Solutions Architect

    Nov 2012 - Nov 2015
• 

  Freelance | Self-Employed

  Jun 2018 - now

  Information Technology and Security Advisor & Consultant