Computer Science Technician
Upgrading and developing systems and applications to increase security and performance.
CS Technician
As a Computer Science Technician, I have worked and even lead tons of projects that were required or needed by Hofstra's Computer Science Department. However, below are some of the most complex projects that are/will soon be in production that took months of work including learning to navigate linux and the terminal, reading open source software documentation, and intricate web development tasks.
Enterprise Grade Email Server
The Computer Science department at Hofstra unfortunately had a breech in its email server, allowing the infiltrator to send thousands of phishing emails in a matter of seconds to both the department's faculty and staff. After shutting it down to prevent any further attacks, I was tasked with implementing a complex server that would protect the department from a future attacker. After researching packages and solutions to secure the new server, I documented and executed a build guide and had it reviewed for approval. The mail server build consists of a security-hardened configuration of email internet and industry standard protocols and packages including Postfix, SSHGuard, and many other necessary components, with TLS encryption, DKIM signing, DMARC verification, SPF verification, stricter relay controls, antivirus scanning, spam filters, realtime blacklist checks, rate limiting, additional client restrictions, authentication requirements, and added logging. The mail server is currently in a production environment deployed on AWS.
Multifactor Authentication for SSH
Asisted in the implementation of the open source solution privacyidea into the department's ecosystem. Created specific policies that allowed for increased protection against the rising amount of SSH attacks and enforced a strict multifactor authentication login system to lab-wide linux machines.
GPU Cluster Account Management System
Implemented functionality that allowed for an easier account creation process for the end user by integrating email authentication and notifications through the newly created production email server.