Thomas Clark, MS

IT Support Specialist & Systems Administrator
CompTIA A+ Certified CompTIA Network+ Certified MS Management Information Systems
Monson, MA | clarkthomase@gmail.com | LinkedIn

Professional Profile

Detail-oriented Operations & IT Specialist combining 10+ years of professional leadership, financial analysis, and operational coordination with an MS in Management Information Systems and CompTIA Network+ credentials[cite: 1, 2]. Skilled at bridging complex business processes with technical execution, implementing segmented network infrastructures, writing standard operating procedures (SOPs), and managing end-user technology resources[cite: 1, 2].

Homelab & Network Architecture

Routing & Network Core

  • Custom pfSense Firewall: Self-built security gateway managing inter-VLAN routing, stateful firewall policies, DHCP scopes, and local DNS[cite: 1, 2].
  • Switching & Wireless: Dual Omada Gigabit PoE switches, Omada Hardware Controller, dual Omada APs, and dedicated Ubiquiti AP.
  • Network VLAN Segmentation:
    VLAN 10: Main Admin VLAN 20: Insecure IoT VLAN 30: Security Cameras VLAN 40: Work Network VLAN 60: Guest Network VLAN 70: Servers

Edge Ingress, DNS & Remote Access

  • Cloudflare & Reverse Proxy Gateway: Configured custom domain routing via Cloudflare proxy edge to securely route external web traffic to internal self-hosted media services without exposing direct origin IPs.
  • Tailscale Mesh VPN: Deployed subnet routers via Tailscale to allow encrypted, zero-trust remote access to internal management interfaces without exposing open inbound WAN ports.
  • OpenVPN Server: Configured native SSL/TLS VPN tunnels on pfSense for encrypted fallback administration and remote endpoint connectivity[cite: 2].

Systems Administration, Hypervisors & Storage Nodes

Active Directory & Virtualization

  • Active Directory Domain Services (AD DS): Deployed Windows Server domain controllers to manage user and group administration, role-based access control (RBAC), Organizational Units (OUs), Group Policy Objects (GPOs), and centralized DNS/DHCP[cite: 1, 2].
  • VMware ESXi: Provisioned bare-metal ESXi hypervisor hosts to deploy, snapshot, and manage isolated virtual machines[cite: 1, 2].
  • Proxmox VE Node: Deployed Proxmox hypervisor hosting Home Assistant VM, local smart lighting integrations, edge MQTT brokers, and centralized media routing.
  • Dedicated AI / NVR Host: Ubuntu Server on VLAN 70 running Frigate NVR and local AI models accelerated via an NVIDIA RTX GPU.

NAS Storage Array Nodes

  • Primary Unraid NAS (Self-Built): 214TB raw storage array hosting media streaming and containerized services on Server VLAN 70.
  • Backup Unraid NAS (Self-Built): Secondary target on VLAN 70 handling scheduled, automated array syncs.
  • Off-site/NAS Backups: Dual off-the-shelf NAS appliances for dedicated configuration snapshots and photo vault backups.

Systems Triage & Network Optimization

Case Study: Resolving Network Switch CPU Spikes & Stream Drops

Problem: High CPU utilization (peaking at 90%+) on the core managed switch caused by video stream ingestion, leading to latency and packet drops across local interfaces.

Root-Cause Analysis: Isolated the performance degradation to high-bitrate RTSP streams from a Reolink IP camera entity flooding unconstrained multicast channels across default switch ports.

Resolution: Isolated all surveillance hardware onto dedicated Camera VLAN 30, enabled IGMP Snooping on Omada switches to restrict multicast traffic, and optimized stream settings in Frigate. Re-established baseline switch CPU load to under 10%.

Transferable Leadership & Management Competencies

Leadership & Team Operations

  • Operational Coordination: Led daily business operations, equipment allocations, vendor contracts, and inter-departmental workflows[cite: 1, 2].
  • User Support & Training: Authored clear end-user training guides, SOPs, and system onboarding manuals for non-technical staff[cite: 1, 2].
  • Problem Resolution: Managed cross-platform issue escalation, tracking support requests, and implementing process improvements[cite: 1, 2].

Financial Tracking & Administration

  • Financial Reconciliation: Managed treasury operations, investigated complex financial workflow discrepancies, and maintained audit-ready compliance records[cite: 2].
  • Asset & Inventory Control: Overseeing purchasing requisitions, equipment inventories, software licensing tracking, and vendor repairs[cite: 1, 2].
  • System Data Integrity: Managed department datasets and purchase records within enterprise ERP tools (Sage Timberline)[cite: 2].
Security & Compliance Note: All network subnets, IP ranges, and topology references displayed on this portfolio are abstracted models designed to demonstrate architectural principles without exposing live public WAN interfaces or private credentials.