David Molefe

• STRATEGIC LEADERSHIP AND PLANNING
• Developing business plans and managing performance metrics for the ICT department.
• Aligning ICT strategies with the organization's overall objectives.
• Budget planning and financial management to ensure resources are allocated effectively.
• TEAM MANAGEMENT AND LEADERSHIP
• Leading the ICT team to deliver projects as per executive management's requirements.
• Managing employee performance and development within the team.
• Ensuring the team adheres to best practices and standards, such as ITIL (Information Technology Infrastructure Library) for service management.
• ICT INFRASTRUCTURE AND ASSET MANAGEMENT
• Overseeing the maintenance and development of ICT infrastructure, including networks and security systems.
• Ensuring business continuity and disaster recovery plans are in place and tested regularly.
• Solution Architecture and Development
• Designing solutions that meet business requirements and enhance the organization's infrastructure.
• Developing and implementing new applications to support business operations.
• Providing ad-hoc business application solutions as needed.
• Developing and maintaining an ICT risk register to identify and mitigate potential risks.
• Implementing policies and procedures that comply with relevant legislation and standards.
• Ensuring compliance with ICT-related policies and procedures.
• PROCUREMENT AND VENDOR MANAGEMENT
• Overseeing ICT-related procurement processes to ensure the acquisition of appropriate technology and services.
• Managing relationships with business contacts and suppliers.
• Cooperating with external auditors and addressing audit findings.
• Implementing solutions to address audit findings and ensuring these become part of standard operating procedures.
• NETWORK SECURITY
• Firewalls and Intrusion Detection/Prevention Systems (IDS/IPS): Monitor and control network traffic based on security rules.
• Segmentation: Divide the network into segments to limit the spread of attacks.
• Secure Wi-Fi: Implement WPA3 encryption and ensure secure authentication for Wi-Fi networks.
• ENDPOINT SECURITY
• Antivirus and Anti-Malware Software: Protect endpoints from malicious software.
• Patch Management: Regularly update and patch operating systems and applications to fix vulnerabilities.
• Endpoint Detection and Response (EDR): Monitor and respond to endpoint threats in real-time.
• ACCESS CONTROL
• Multi-Factor Authentication (MFA): Require multiple forms of verification for access to systems and data.
• Role-Based Access Control (RBAC): Limit access to data and systems based on user roles and responsibilities.
• Least Privilege Principle: Grant users the minimum level of access necessary for their tasks.
• DATA PROTECTION
• Encryption: Encrypt data at rest and in transit to protect against unauthorized access.
• Data Backup: Regularly back up critical data and test restoration processes.
• Data Loss Prevention (DLP): Monitor and control data movement to prevent data breaches.
• INCIDENT RESPONSE
• Security Information and Event Management (SIEM): Monitor and analyze security logs to detect potential threats.
• EMPLOYEE TRAINING: Enhance team knowledge on infrastructure best practices.
• Regular Security Awareness Programs: Keep employees informed about the latest security threats and practices.
• CONTINUOUS MONITORING AND IMPROVEMENT
• Vulnerability Assessments: Regularly assess the infrastructure for vulnerabilities.
• Penetration Testing: Conduct penetration testing to identify and fix security weaknesses.
• Security Audits: Perform regular security audits to ensure compliance and effectiveness.
• Based on the provided details for the role of Group IT Manager with 22 years of experience, here are eight resume experience statements that align with the responsibilities typically associated with this position:
• Spearheaded the implementation of an integrated IT governance framework, enhancing compliance and risk management across the organization.
• Directed cross-functional teams in the deployment of enterprise-wide software solutions, improving operational efficiency and user satisfaction.
• Championed strategic IT initiatives that aligned technology investments with business objectives, resulting in streamlined processes and reduced costs.

• Managed Southern Africa DevOps with team of 12 Developers..
• Spearheaded the implementation of CI/CD pipelines, significantly reducing deployment times and enhancing overall development efficiency.
• Developed and maintained infrastructure as code using Terraform, improving system scalability and reliability across cloud environments.
• Collaborated with cross-functional teams to streamline DevOps practices, resulting in improved communication and collaboration between development and operations.
• Optimized system performance by conducting regular audits and implementing changes based on monitoring insights, enhancing user experience.
• Championed the adoption of Agile methodologies within the team, resulting in increased project delivery speed and team accountability.
• Improved code deployment efficiency by automating processes with CI/CD pipelines.
• Monitored automated build and continuous software integration process to drive build/release failure resolution.
• Reduced system downtime for critical applications by implementing robust monitoring and alerting tools.

• MANAGING, MAINTAINING AND EVOLVING THE BACKEND NETWORK SYSTEMS AND SERVICES OF A REAL-TIME VOICE AND DATA NETWORK. TROUBLESHOOTING, INVESTIGATING AND DOCUMENTING OF SYSTEMS AND SERVICES. USING AGILE METHODOLOGY AND THE FOLLOWING TECHNOLOGIES/RESOURCES.
• 1 AUTOMATION
• - PUPPET3AND PUPPET4/ANSIBLE/SCRIPTING
• STORAGE
• - CEPH/ MOOSEFS/EMC
• 2.HARDWARE
• - DELL
• - SUN
• - INTEL 5000
• 3.MONITORING
• - NAGIOS
• 4.DATABASES
• - MYSQL
• - PERCONA
• - MARIADB
• - MAX SCALE
• 5.VIRTUALIZATION/CONTAINERS
• - DOCKER
• - OPENVZ
• - VMWARE
• - KVM
• - OPENNEBULA
• 6.HIGH AVAILABILITY
• - HEARTBEAT/COROSYNC/HAPROXY/DRBD/CSYNC2/KEEPALIVED
• 7. REPOSITORY MANAGEMENT
• - NEXUS
• 8. VERSION CONTROL
• - GIT
• 9.OTHER SERVICES
• -FREE IPA (IDENTITY AND AUTHENTICATION SOLUTION)
• -IPAM( IP ADDRESS MANAGER )
• - FREERADIUS
• - FTP
• - OPENSIPS
• - ASTERISK
• - IPTABLES
• - DNS
• - LEGACY LDAP
• - NAMESPACES
• Streamlined system deployment processes by implementing automation scripts, enhancing efficiency in server provisioning and configuration management.
• Led a team in troubleshooting complex network issues, significantly reducing downtime and improving overall system reliability.
• Developed and maintained comprehensive documentation for system architecture and procedures, ensuring compliance with industry standards and best practices.
• Led the design and implementation of scalable Linux-based solutions, enhancing system performance and reliability across multiple platforms.
• Developed automation scripts using Python and Bash, streamlining system administration tasks and reducing response times for incident resolutions.
• Collaborated with cross-functional teams to optimize server configurations, resulting in improved system uptime and efficiency.
• Managed system monitoring and troubleshooting processes, promptly addressing issues to minimize downtime and maintain operational continuity.

• Maintain and manage the following on Tier 3 Level:
• 1.Networking -
• -LAN: Manage and ensure that equipment’s are on the healthy status at all times – Log emergency changes request for any failures and restore services – Draw the monthly reports for visibility. Create a root cause analysis report to prevent the situation from happening in future.
• -WLAN: Add and remove devices on the WLAN; ensure that all AP’s are operational, monitor the controllers, run the backups, isolate problems on controllers and remediate. Cisco ACS Administration. Cisco WLAN Controller Administration
• -DNS : Maintain DNS server by adding and removing records as required by business and ensure that backups are done on daily basis; draw daily backup report for visibility.
• -DHCP : Site DHCP service backup and maintenance
• -Routing – Add new route on the core switches (Avaya VSP 9000 ) Monitor Avaya switches using VPFM.
• -VPN Tunnels – Create the Business to Business VPN tunnels as per business requirement.
• -Update design documents and create knowledge based article to help technicians in troubleshooting.
• Maintain backups
• Provide a report to management on monthly basis and recommendations on problems
• OSPF – Implement maintain and manage OSPF
• 2.Firewall
• -Sonic Firewall: Used as the Group Edge Firewall for internet access, currently:
• Maintain the firewall and detect intrusions.
• Upgrade the firmware when its due
• Ensure that high availability is operational at all times
• Rule base cleanup and firewall optimization
• Provide a report to management on monthly basis and recommendations on problems
• 3. Checkpoint Firewall - Used as the third party VRF connection firewall. Configuring Business to Business VPN
• Optimize the firewall for better performance.
• Provide a report to management on monthly basis and recommendations on problems
• -Mikrotik – Configure install and maintain , installed 75 out of 90 site firewall and administering the devices on the central internal application called execute. And also used as DMZ firewall for the main site.
• -Maintain firewall backups
• Provide a report to management on monthly basis and recommendations on problems
• 4.Storage
• -Dell Equologix - Space allocation to physical/ virtual servers and maintain the drives health
• 5. Operating Systems
• Patch, backup and maintain the servers to be on the healthy status.
• RedHat, CentOS ; Ubuntu ;Windows server 2008 R2; Solaris 8,9 and 10
• 6.VMware Administration – Configure cluster nodes and add virtual machines on the cluster, add VLAN’s on from Venter, maintain and optimize.
• 7.Change Control Management
• Manage /plan changes using Cherwell application to follow the ITIL processes.
• 8. Create Automation
• Scripts to simplify day duties using Linux Bash. Some scripts using PowerShell
• 9 Assist Service Desk and Technicians with issues on day to day basis and document the solutions for knowledge sharing
• Reason for Leaving: Need growth on the industry
• Led system architecture design initiatives, enhancing infrastructure efficiency and improving response times across multiple projects.
• Implemented advanced automation scripts using Python and Bash, significantly reducing manual intervention and operational errors.
• Collaborated with cross-functional teams to integrate cloud solutions, streamlining deployment processes and minimizing downtime.
• Mentored junior engineers on best practices for system optimization, fostering a culture of continuous improvement within the team.
• Led the design and implementation of scalable IT infrastructure solutions, enhancing system performance and reliability across multiple projects.
• Spearheaded cross-functional collaboration to optimize system processes, resulting in improved project delivery timelines and client satisfaction.
• Developed and executed comprehensive testing protocols for software applications, ensuring high-quality system performance and minimizing downtime.

• Manage and maintaining +-250 servers in the following environments
• Led the design and implementation of automated deployment processes, significantly reducing system provisioning time and increasing efficiency.
• - Development Environment
• Optimized server performance by conducting regular system audits and implementing proactive monitoring solutions, enhancing reliability and uptime.
• - SIT (System Integration Testing)
• - Training Environment
• - QAT( Quality Assurance Testing)
• - Production Environment
• Primary Duties
• Daily monitoring and maintenance of Linux servers
• Perform back up, file replications and script management for servers.
• Test and apply new software and maintenance patches, including patch management services.
• Complete security audits on a routine basis.
• Administrative scripting with Shell and Perl.
• Plan and expand current service offerings.
• DNS and DHCP configuration and maintenance
• LDAP Maintenance
• Heartbeat Maintenance
• Virtualization (XEN and (VMware:ESX prove of concept) )
• IBM P- Series Configuration
• Blade Administration
• System High Availability Configuration
• System Performance Tuning
• Scripting for easy management
• SAN Storage OS Configuration
• Remuneration + Benefits: R17000 P/M CTC Medical Aid + Provident Fund (pay slip on request)
• Reason for Leaving: Company contract expired with client and there was no lot of growth for Linux admins

• Recommend hardware and software to be used on management and for budget purposes.
• Research, test and deploy applications for production.
• Document standard operating procedures on deployed application.
• Update the network infrastructure layout for documentations purposes.
• Managing 2 environments that is
• 1 Windows and 2 Linux
• WINDOWS
• Desktop and laptop management (Win XP, Vista, Windows 7 and installed applications)
• End user assistance
• File server ( Win Server 2003 ) ( Secondary DNS)
• Anti-virus (Nod32,Mcafee)
• System performance turning
• VMware Server 2 VMware ESX
• End user support (Win XP, Vista and Win7)
• DHCP,DNS
• Router configuration
• WAN,LAN,Wireless
• Network securities
• Exchange 2003/2008
• Mitel PABX VoIP administration
• Network printers scanners and other peripherals
• Network management application (Test environment.)
• Pastel 07-10 and installation, maintenance and upgrades
• Pastel payroll 07-10 installation, maintenance and upgrades
• Backup machines to tapes and test the restore
• Server 2003 security
• Testing applications for future infrastructure enhancement
• Server hardware configurations
• LINUX (Ubuntu from 7.04-9.04, CentOS 4.6-5.2,RHEL 4.6-5.2 )
• Squid
• Firewall
• SMTP Server (Postfix)
• Intranet (Php,mysql)
• LDAP
• CRM Web Application
• System performance
• DNS,DHCP,VPN
• Network security
• Oracle DB 10g and 11g performance turning
• Backup and restore test the tapes
• Planning of disaster recovery
• UPS maintenance
• Remote connection assistance to clients
• VMware server 2 and Xen
• Oracle 10g and 11g DB
• Grid control installation and maintenance
• Network management application
• Provided technical support for hardware and software issues, enhancing operational efficiency and user satisfaction across the organization.
• Developed and implemented IT support processes, resulting in improved response times and streamlined issue resolution for end-users.
• Conducted training sessions for staff on new technologies, fostering a culture of continuous learning and increasing overall productivity.
• Collaborated with cross-functional teams to identify system improvements, ensuring alignment with organizational goals and enhancing user experience.
• Provided comprehensive IT support across multiple departments, enhancing system uptime and user productivity through effective troubleshooting.
• Implemented user training programs for new software tools, significantly improving employee efficiency and technology adoption rates.
• Collaborated with cross-functional teams to streamline IT processes, resulting in enhanced service delivery and reduced resolution times.
• Managed software installations and upgrades, ensuring systems operated smoothly and met organizational standards for performance.

• Planning of site network infrastructure
• Assemble hardware and install the operating system as per corporate SOP(Standard Operating Procedures)
• Install and configure the point of sales system and back office software windows based application.
• Configure the network as per the site specification and test the LAN speed
• Install and configure the integrated software that’s used by the corporate.
• Train the users on the system
• Provide 24/7 support to the site and ensure that all call are completed within the given SLA
• Ensure that data is being uploaded to the head office server on every shift close (for financial reports)
• System upgrades when site or software is due.
• Install the GPRS connectivity and register it and ensure constant WAN connectivity.
• Identify and repair errors on the database using Inter-base
• Provide secondary support to the ad-hoc system PEC ( also petroleum software )

Led field operations to ensure successful project execution and compliance with industry standards and regulations.

• Implemented quality control measures that enhanced service delivery and minimized operational risks during field assessments.
• Trained and mentored junior engineers to foster skill development and promote adherence to safety protocols and best practices.

• Provide the first level of support to the customers with problems relating to the point of sales and back office systems (PEC system)for all the petroleum corporate except Engen and Sasol
• Log the calls for any hardware related issues, and other software issues that could not be resolved on 1st level of support.
• Provide the secondary support to the field engineers and on most issues relating to the software.

• Provided technical support for software and hardware issues, ensuring rapid resolution of user inquiries and minimizing downtime.
• Implemented troubleshooting processes that improved incident response times, enhancing overall customer satisfaction and support efficiency.
• Collaborated with cross-functional teams to identify recurring technical problems, leading to the development of proactive solutions and reduced future incidents.
• Assisted in the onboarding of new staff by delivering training on system usage and support tools, fostering a knowledgeable team environment.