Casey Nakamura Senior System Administrator
Denver, CO • casey.nakamura@gmail.com • +1 720-555-0146
Profile Summary
- Senior System Administrator with 10 years of experience running hybrid Windows and Linux infrastructure for a mountain resort operator and a global money transfer company, focused on server upgrades, identity, and disaster recovery.
- Hands-on with operating systems (Windows Server 2022, RHEL 9), identity (Active Directory, Microsoft Entra ID), virtualization (VMware vSphere, Hyper-V), backup (Veeam), patching and endpoint security (SCCM, CrowdStrike Falcon), monitoring (Zabbix), and automation (PowerShell, Ansible), with a solid grounding in DNS, DHCP, and TCP/IP networking.
- Deep experience in end-of-support OS upgrades, hybrid Active Directory with Entra ID, VMware to Hyper-V migration, and ransomware-resistant backups, following ITIL change management and quarterly restore tests to deliver systems that stay up through the peak ski season.
- Works closely with the service desk, network and security engineers, application owners, and resort IT leads in an ITIL shop with a weekly change advisory board, from planning maintenance windows around the ski season to walking resort managers through an outage in plain words.
- Coaches service desk analysts on Active Directory troubleshooting and PowerShell basics, runs the monthly patch review, and keeps the runbook library the on-call rotation works from.
Technical Skills
- Operating Systems:
- Windows Server 2022, Windows Server 2019, RHEL 9, Ubuntu Server 24.04, Rocky Linux 9
- Identity & Microsoft 365:
- Active Directory, Group Policy, Microsoft Entra ID, Entra Connect, Microsoft 365, Exchange Online, Microsoft Intune
- Virtualization & Cloud:
- VMware vSphere, vCenter, Hyper-V, Failover Clustering, Pure Storage, Microsoft Azure
- Networking:
- DNS, DHCP, TCP/IP, VLANs, Palo Alto Networks, GlobalProtect VPN, Cisco Catalyst
- Security & Patching:
- SCCM, WSUS, CrowdStrike Falcon, Tenable Nessus, CIS Benchmarks, BitLocker
- Backup, Monitoring & ITSM:
- Veeam, Zabbix, Grafana, ServiceNow, PagerDuty
- Scripting & Automation:
- PowerShell, Bash, Ansible, Python, Git, Azure Automation
Education
Work Experience
- Moved 174 servers off Windows Server 2012 R2, 2016 and CentOS 7 onto Windows Server 2022 and RHEL 9 before end of support, building each one from SCCM task sequences or Kickstart files with a written rollback plan, with 0 unplanned outages during ski season.
- Automated onboarding and offboarding for 34,000 seasonal hires a year by syncing HR start and end dates to Active Directory and Microsoft Entra ID, with MFA and Conditional Access on every account, cutting the time to remove a leaver’s access from 3 days to 15 minutes.
- Moved 420 VMs from VMware vSphere to Hyper-V failover clusters after the Broadcom license change, one cluster at a time with Veeam Instant Recovery and new Pure Storage arrays, saving $310,000 a year in virtualization licensing.
- Replaced the aging site-to-site VPNs with GlobalProtect and cleaned up DNS zones, DHCP scopes and point-of-sale VLANs at 37 resort sites, cutting network tickets from lift and retail staff by 41%.
- Moved monthly patching for 1,400 servers to SCCM and Ansible with CIS Benchmark baselines and CrowdStrike Falcon on every host, raising the share patched within 14 days of Patch Tuesday from 68% to 97%.
- Redesigned backups for every server and Microsoft 365 tenant in Veeam, with immutable copies in Azure Blob Storage and quarterly restore tests, bringing recovery time for the lift ticketing system from 3 days to 4 hours.
- Replaced Nagios with Zabbix and Grafana dashboards covering servers, storage and certificate expiry, and wrote a root cause analysis in ServiceNow for every P1, cutting after-hours pages from 52 a week to 9.
- Wrote 64 PowerShell scripts and Ansible playbooks for account cleanup, server builds and license reports, all kept in Git with peer review, saving the infrastructure team about 22 hours of manual work a week.
- Migrated 6,500 mailboxes from Exchange Server 2013 to Exchange Online over 8 weekend cutovers, with zero messages lost and every shared mailbox and distribution list carried over.
- Hardened 340 Windows servers in the PCI DSS cardholder data environment with Group Policy baselines and quarterly access reviews, closing all 17 findings from the annual assessment.
- Scripted VMware vSphere host builds and configuration with PowerCLI, cutting the time to bring a new host into a cluster from 2 days to 3 hours.