Timothy Aaron Penner

• Provide systems engineering and infrastructure consulting supporting production and development environments.
• Lead end-to-end development of an Android streaming application and distributed services using modular Kotlin, Camera2/OpenGL, RTMP/RTMPS/SRT, SRTLA across Wi-Fi and cellular, HEVC, platform APIs, and Linux-hosted infrastructure.
• Architect reusable Kotlin modules for camera, media, streaming, chat, platform integration, updates, and shared application logic, with platform-neutral components designed for future cross-platform reuse.
• Develop Go backend services for account/session identity, passwordless email OTP, OAuth integrations, encrypted token storage, SMTP, telemetry, service proxying, and production deployment behind Caddy and systemd.
• Design secure GitHub Actions CI/CD and release workflows with self-hosted runners, parallelized tests, automated validation/review gates, release promotion, deployment safeguards, and certificate-pinned Android updates.
• Develop and maintain Python and Bash automation for infrastructure and software projects, operational tooling, and repeatable workflows.
• Design, deploy, and administer Windows and Linux server environments, Proxmox virtualization, Terraform, and Ansible automation.
• Designed infrastructure for Facebook Gaming Partner streaming and community services, including VPN traffic routing, web/email services, multiplayer game servers, and JavaScript chat commands and integrations.
• Implement monitoring, system hardening, patch management, performance optimization, and infrastructure reliability practices.

• Operated and maintained a self-managed real-time production environment requiring high availability, performance monitoring, and low-latency network optimization.
• Optimized workstation hardware, OS configuration, and network settings to maintain service uptime.
• Performed live troubleshooting and root-cause analysis during active production sessions.
• Monitored bandwidth utilization, system performance, and resource allocation to ensure consistent service delivery.

• Led enterprise MFA and privileged access rollout using Delinea/Centrify across 800+ Windows and Linux servers.
• Architected phased rollout onboarding 650+ users to TOTP authentication.
• Administered VMware ESXi, Hyper-V, Azure, and AWS across multi-datacenter infrastructure with shared SAN storage and workload migration.
• Supported hybrid messaging infrastructure including Exchange On-Premises and Exchange Online / Microsoft 365.
• Managed enterprise patching using HCL BigFix and custom fixlets.
• Participated in on-call production support and incident response.

• Led U.S. infrastructure operations spanning servers, virtualization, storage, networking, telephony, monitoring, and production reliability.
• Owned day-to-day U.S. IT operations, infrastructure availability, vendor coordination, and operational documentation.
• Sole-administered the separate U.S. Active Directory domain, including Group Policy, authentication services, and forest upgrades from Windows 2000 through 2016 functional levels.
• Administered Windows and Linux servers, DNS, and clustered Hyper-V infrastructure supporting internal and production systems.
• Managed Cisco switching, routing, and telephony services supporting U.S. office operations.
• Administered Juniper SRX firewall, NAT, VPN connectivity, and network security policies.
• Maintained monitoring and alerting systems supporting 24/7 production availability and incident response.
• Provided Tier III escalation support for developers and complex infrastructure, connectivity, and application issues.
• Oversaw service desk operations, assigned support cases, mentored engineers on complex incidents, and coordinated escalation resolution.
• Developed and published 4D developer tooling, reusable macros, and PHP/Python integration examples using SQL, ODBC, PDO, and the 4D SQL networking stack.
• Designed custom 4D Method Explorer and Code Object Explorer tools using Design Object Access APIs, with live filtering, code preview, metadata, code-object inspection, method execution, and code-size/line-count analysis.
• Designed a 4D v18 runtime error-logging framework using Get Call Chain, full error stacks, execution context, JSON persistence, and a parser UI for call-chain analysis.
• Supported Oracle Database integrations through 4D for OCI (Oracle Call Interface), including connectivity and application-integration troubleshooting.
• Authored weekly Tech Tips and quarterly long-form Technical Notes with sample databases/applications, code, diagrams, and implementation guidance across infrastructure, connectivity, security, PHP/web integration, application architecture, troubleshooting, and developer tooling.
• Presented technical sessions at multiple annual 4D Summit developer conferences.
• Served as A/V liaison supporting conference technical infrastructure and live session operations.
• Authored and delivered the commercial 4D Server Admin Training course, including a 90+ page technical manual and materials for a six-hour developer/administrator program.
• Promoted from Technical Services Engineer (2006–2016).

Selected recorded 4D Summit sessions: 2018 — Determining Minimum Requirements for an Application · 2020 — A New Era of Debugging.

Selected public 4D work: 4D Connectivity Options, PHP ↔ 4D connectivity examples, Python ↔ 4D connectivity, and 4D developer macros.

• Sole IT infrastructure administrator for U.S. operations, owning servers, networking, telephony, and workstation environments.
• Architected, procured, deployed, and maintained clustered Hyper-V infrastructure virtualizing 30+ physical servers.
• Designed and deployed Windows Server Update Services (WSUS) for centralized Windows server patch management.
• Led selection, budget approval, deployment, and sole administration of Juniper SRX HA firewall architecture spanning DMZ/internal segmentation, NAT, site-to-site VPN, and remote-access VPN.
• Maintained Fibre Channel SAN storage and validated restores across production backup systems.
• Implemented BackupPC and later Barracuda backup infrastructure with restore validation.
• Administered Microsoft Exchange 5.5 messaging infrastructure, including SMTP mail flow, message routing and delivery, message-store maintenance, and operational support.
• Customized and maintained GNU Mailman services, including modifying Python code to support messaging operations and internal requirements.
• Administered Active Directory, DNS, Linux services, Apache, Nginx, and HAProxy.
• Designed and administered Asterisk PBX infrastructure, including IVR call flows, prompt recording, and ongoing telephony operations.
• Built and documented 4D/Asterisk integration using PHP, Asterisk-PHP-API, and AMI, including AMI configuration and reusable wrapper functions.
• Created a sample 4D UI for queue management, SIP/IAX peers, parked calls, call origination, channel/status queries, and Asterisk CLI commands.
• Built a client/server file-transfer framework using 4D Execute on Server with chunked BLOB transfers, server-side browsing, progress reporting, pause/cancel, and multi-process handling.
• Designed cross-platform 4D client-update automation using Windows batch/Robocopy and Mac shell/rsync workflows backed by network shares, including a script-generator utility for environment-specific deployment configuration.
• Documented and implemented Apache reverse-proxy patterns for fronting 4D Web Server, including path-specific proxying, SOAP routing, full-site proxying, ProxyPass/ProxyPassReverse configuration, and WSDL deployment considerations.
• Developed security-focused 4D examples for password hashing/salting, file-integrity verification, file fingerprinting, duplicate-file detection, and selectable hash algorithms using PHP integration.
• Authored practical PHP/FastCGI troubleshooting guidance for 4D, including PHP EXECUTE, full-response/error inspection, CLI testing, module validation, ODBC/PDO/LDAP usage, and cross-platform interpreter diagnostics.
• Supported SQL interoperability with Microsoft SQL Server, Oracle, MySQL, and PostgreSQL, troubleshooting vendor-specific syntax and validating queries in native database tooling.
• Provided Tier III developer support including code reproduction, defect escalation, and technical training.
• Served as A/V liaison at annual 4D Summits from 2008–2016 and presented technical sessions at the 2008, 2009, 2010, and 2011 Summits.
• Managed the in-office datacenter and Mae West San Jose colocation facility.
• Installed and supported Microsoft SQL Server environments and supported Oracle Database connectivity and integration.

• Supported enterprise end users at NVIDIA’s Santa Clara campus during a major company event.
• Provided workstation troubleshooting, hardware deployment, account support, and rapid issue resolution in a high-demand environment.

• Provided IT consulting to small-business and home-office clients covering workstation deployment, network setup, and infrastructure troubleshooting.
• Installed Cat5 cabling, routers/switches, printers, shared network resources, and basic server/file-sharing environments.
• Performed system maintenance, malware remediation, and hardware upgrades to improve stability and performance.

• Designed and implemented a multi-tier Citrix MetaFrame terminal services environment for secure remote access.
• Administered Windows and Linux servers and Microsoft Exchange 5.5 through 2003 messaging infrastructure supporting firm-wide email services.
• Managed enterprise tape-backup operations across six Bay Area offices.
• Implemented and maintained Track-IT Enterprise helpdesk system with MS-SQL backend.
• Automated workstation patch deployment using Microsoft SUS server.
• Implemented automated workstation deployment using Norton Ghost network imaging.
• Participated in deployment of Hummingbird Document Management System.
• Administered Altigen PBX and BlackBerry Enterprise Server.
• Conducted security audits and infrastructure assessments.

• Supported enterprise office relocation projects.
• De-installed, transported, re-installed, and validated workstation and network equipment.
• Tested connectivity and restored IT services at new locations.

• Instructor-led Microsoft Azure administration training covering hybrid identity, resource governance, and production workload management.

• Ongoing applied experience designing virtualization clusters and secure access boundaries.
• Citrix administration training supporting multi-tier terminal services and secure remote access environments.

• Continuous applied development of automation workflows, scripting, and infrastructure-as-code practices.

• Formal vendor training supporting enterprise MFA and privileged access management implementations.
• Security platform administration training emphasizing endpoint protection lifecycle and operational hardening.

• Advanced application-building training supporting Tier III escalation, structured troubleshooting, and systems analysis.