Leonardo Bernardo

Managing of LAMP environment with Debian Linux and Centos Linux servers and over 1600 websites. Prevention of attacks using WAF modsecurity, CRS and SLR (Trustwave). Developing of new rules to prevent attacks that are not detected by CRS nor SLR. Detection and prevention of crawlings and DOS attacks using log correlation and fail2ban. Vulnerability assessment and remediation. Improvement of the security monitoring and security controls. Automation of configuration changes using Ansible.

Experience in an agile environment. Managing of RedHat Linux and Debian Linux servers. Managing of cloud servers at Rackspace, Peer1 and Azure. Deployment of new code and content for sites using automated scripts (Bamboo and Jenkins). Automation of infrastructure changes using Ansible.

Team leader of infrastructure support team level 2. Support to very critical environment in the biggest stock market company in Latin America. Currently working as team leader of application deployment in The Post-Trade Integration Project (IPN). Oversee of the installation of dozens of critical services to to create the new clearinghouse integrated. Hands-on in the installation of the most critical services.

Experience with large production environment. Reestructure of LDAP and DNS services using security best practices. Planning and implementation of Linux, AIX and HP-UX hardening. Migration from sudo/sudoers to sudo+ldap. Install and management of HIDS Samhain. Security Assessment of operation systems. Install and management of SIEM Arsight.

Experience in very critical production environment. Linux and AIX administration, including configuration, troubleshooting, and automation. Management of e-mail servers, webserver, printing servers, Version Control System, Web Proxies, DNS servers, and others.

Experience with large production environment. Linux administration, including configuration, troubleshooting, and automation. Automation procedures using puppet software for hundreds of servers. Hardening of hundreds of servers. Management of LDAP, Version Control System, webservers, application servers, DNS servers, monitoring systems, and others.

Responsible for R&D (Research & Development) IT environment. Management of Solaris servers, under VCS (Veritas Cluster). Collaboration of AIX, HP-UX and Linux management.

Management of email servers, webservers, fileservers, firewalls, proxies, DNS servers, authentication servers, terminal services, voip systems, version control systems, printing servers, backup, monitoring, VPN and others. Define security policy of company. Collaboration of ERP implementation. Management of DBMS (MySQL, PostgreSQL and IBM DB2).

Management of email servers, webservers, fileservers, firewalls, proxies, DNS servers, authentication servers, printing, backup, monitoring and others. Development of web softwares with PHP language.