Kisana Intarsen

System Engineer with more than 5 years of experience, focusing on protecting organizational data and systems. I have expertise in managing and supporting a wide range of products, including EDR/XDR, DLP, HSM, PAM, and CA (Certificate Authority Intermediate). My responsibilities include system support, installation, user training, and resolving complex issues in accordance with project TOR.

I have experience collaborating on projects across various sectors, such as government, the food industry, healthcare, the automotive industry, and more. Moreover, I specialize in analyzing, comparing, and presenting the most appropriate solutions based on specific project requirements.

System Engineer at Bangkok MSP Company Limited (2023-08 – Present)

• Provided technical support and end-user training for customers.
• Developed installation plans and execute deployment processes for clients.
• Data Loss Prevention (DLP) – Actifile: Defined policies for Encryption/Decryption.
• Data Loss Prevention (DLP) – Actifile: Implemented data leakage prevention through applications.
• Data Loss Prevention (DLP) – Actifile: Configured detection rules for sensitive or risky content.
• Endpoint Protection: Managed and administered Kaspersky (KSC, KSCC, KICS) including migration, installation, and security configuration.
• Endpoint Protection: Designed and deployed security policies for Webroot, Acronis, and SentinelOne.
• Patch & Vulnerability Management – VRX Vicarius: Delivered installation services and vulnerability scanning with remediation (patching).
• Patch & Vulnerability Management – VRX Vicarius: Prioritized security risks using xTags, x-Protection, and prioritization mechanisms.
• Patch & Vulnerability Management – VRX Vicarius: Developed and leveraged automated scripts to improve operational efficiency.
• Privileged Access Management (PAM) – Senhasegura: Installed and configured PAM Virtual Appliances.
• Privileged Access Management (PAM) – Senhasegura: Integrated devices and configured Proxy Remote Web (RDP, SSH, Web).
• Privileged Access Management (PAM) – Senhasegura: Implemented automated password change policies.
• Privileged Access Management (PAM) – Senhasegura: Enabled session recording (video and text) for auditing and compliance.
• Privileged Access Management (PAM) – Senhasegura: Designed approval workflows with multi-level access authorization for secure system and network environments.
• Certificate Management – Senhasegura: Configured CA integration with authorities such as Microsoft CA, Digicert, and others.
• Certificate Management – Senhasegura: Created and managed CSR (Certificate Signing Requests) to obtain signed certificates from integrated CAs.
• Certificate Management – Senhasegura: Deployed and managed public certificates across plugins and systems including IIS, Linux web servers, SSL, and more.
• Hardware Security Module (HSM) as a Service – Thales Luna A700: Delivered certificate and PKI services via TDID Keysuite.
• Hardware Security Module (HSM) as a Service – Thales Luna A700: Managed backup operations using Luna Backup HSM 7 to ensure secure data protection.
• Hardware Security Module (HSM) as a Service – Thales Luna A700: Installed and maintained Luna Client for connectivity and HSM Partition as a Service utilization.

System Engineer at Professional One Company Limited (2023-03 – 2023-08)

• Created and managed backup policies for NetBackup 8.2, configuring the Console and Master Server to deploy to Media Servers for seamless operations.
• Ensured reliable backup and restore processes, including backing up clients to HPE StoreOnce Storage and recovering data in case of a disaster.
• Prepared system activity monitoring reports on OpCenter NetBackup, analyzing error codes and ensuring compliance with SLA schedules.

System Administrator at SKYICT Public Company Limited (2022-02 – 2023-03)

• Managed both system and network infrastructure.
• Responsible for creating and editing User Objects, Group Objects, resetting passwords, and adding users to groups on Windows Server 2008R2–2019.
• Oversaw security policies implemented by GPO concerning network usage limitation, user account management, and password security.
• Led the migration of file servers using Storage Migration Service (SMS).
• Maintained file servers with File Server Resource Manager (FSRM), including configuring quotas, sizing folder group areas, adding Group Objects in both Forest and External Trust, and performing data recovery via shadow copy.
• Managed backups using Veeam Backup & Replication 11, creating backup jobs for guest VMs and restoring User AD and Exchange Mailbox (.PST).
• Administered endpoint security using SonicWall, installing agents on client machines and servers, and enforcing EDR security policies to protect against threats.
• Installed and configured L2 switches (Huawei, Cisco), including port trunking, VLAN, LACP, VTP, and VCMP.

Network Operation Center (NOC) at Fonix Company Limited (2020-02 – 2022-02)

• Monitored network devices using OpManager and Zabbix to ensure optimal performance and identify issues.
• Configured and set up network devices and switches, ensuring proper connectivity and functionality.
• Managed user accounts in Active Directory, including creating and editing user profiles.
• Administered Exchange email accounts, including creating and configuring user email addresses.

Bachelor degree in Business administration Business Computer - Information – Rajamangala University of Technology Phra Nakhon (2017 – 2019)