MatthewHogoboom

About

Selected work

Incident response

Led the response to an external password-spray campaign against the Citrix NetScaler gateway: traced the attack through domain controller, RADIUS, and gateway logs, confirmed no account was compromised, blocked the attacking IP ranges, and identified a required firmware patch. Also led root cause analysis of a 21-hour ERP data feed outage, traced it to the upstream vendor, and delivered the incident report and verification runbook.

Active Directory hardening

Took the domain's PingCastle risk score from 100 to 4, a 96% reduction, including a full DNS remediation on the primary domain controller, while running Active Directory as the source of truth for hybrid Microsoft Entra ID. Now leading a fleet-wide privilege-elevation rollout that removes standing local administrator rights, deployed in audit mode first.

Automated server patching

Built unattended PowerShell patching for the production Windows server fleet. Weekly overnight runs install, reboot, and verify each server in sequence, report by email and Teams, and keep patch compliance above 94%.

NOC wall dashboard

Designed an operations dashboard fed by 20+ scheduled monitors covering virtualization, SQL Server, Citrix, directory replication, backups, storage, patch compliance, certificate expiry, 69 network sites, Microsoft 365 health, and data pipelines, with Teams alerts for anything that needs a person.

Endpoint security at scale

Manage EDR, managed SOC, and remote support agents across 1,500+ endpoints with coverage reporting from Lansweeper, and deployed web and threat filtering to the whole fleet. When the filtering agent caused a fleet-wide DNS fault, diagnosed and remediated it across 360+ endpoints with PowerShell, Group Policy, and an automated hourly cleanup task.

SQL Server and data pipelines

Audited and tuned SQL Server 2022: eliminated catalog deadlocks that were interrupting Power BI and Excel report refreshes, and enabled read-committed snapshot isolation, Query Store, integrity checks, and alerting. Designed a four-database federation with vendor isolation and a procedure that reasserts permissions after restores. Built a twice-daily commission import with hash-based deduplication, a nightly equipment export, and a freshness monitor for the ERP replication feed.

Secure vendor data exchange

Stood up a hardened DMZ SFTP server that runs automated data pipelines with four external partners.

Self-service reporting

Deployed SSRS on a continuously replicated reporting database with least-privilege, read-only service accounts, so employees can filter by location and export to Excel.

Outage recovery

Restored Citrix access during a cascading VMware and NetScaler outage, and resolved SQL blocking caused by Excel and ODBC schema lock starvation.

Disaster recovery and continuity

Architected nightly backup oversight, high availability and DHCP failover across sites, and a standby domain controller in a hosted data center.

Infrastructure operations

Coordinated company-wide rollouts around business hours, including an HPE server refresh and a security-agent deployment; moved monitoring and self-healing automation to a dedicated server with a remote watchdog; traced headquarters network congestion to Power BI gateway traffic; and wrote the IT documentation standard and weekly infrastructure reports for leadership.

AI assistant rollout

Planned and rolled out the company's AI assistant licensing: scoped seats and plan tier, set an invite-only rollout, and configured single sign-on with Microsoft Entra ID.

Experience

1. Jun 2022 to now Senior Systems Administrator / Engineer
   Berry Companies, Inc., Wichita, KansasSole infrastructure administrator for about 1,500 users across roughly 70 locations and nine divisions: the server fleet, virtualization, Citrix, SQL Server, identity, security tooling, and monitoring.
2. Feb 2019 to Jun 2022 IT Specialist / Systems Support Administrator
   Berry Companies, Inc., Wichita, KansasRolled out Cisco wireless access points to all 70 company sites with the network administrator, streamlined onboarding and device imaging, and delivered Tier 2 and Tier 3 support under PCI-DSS requirements.
3. Jan 2010 to Feb 2022 PowerSchool Consultant (part-time)
   Self-employedImplemented and customized PowerSchool student information systems, automated grading and enrollment workflows, and trained administrators and teachers.
4. Jul 2005 to Jan 2019 Assistant Director of Technology
   Circle USD 375, KansasLed district IT operations for about 1,500 students and staff, managed servers, applications, and networks, supervised the technology team, built the district's online enrollment system, and ran procurement and hardware lifecycle.

Toolkit

Education

1. Expected May 2027 M.S., Information Technology Management
   Western Governors University
2. Expected May 2027 B.S., Computer Science
   Western Governors University
3. May 2025 A.A.S., Software, Security and Development, cum laude
   Cowley CollegeAlso completed Technical Certificate B (September 2025).
4. May 2024 A.A.S., Cybersecurity
   Butler Community College
5. May 2024 Bachelor of Interdisciplinary Studies
   Emporia State University

Certifications

Lab and projects

Enterprise home lab

A rack of Dell PowerEdge R740xd and R630 servers and a Cisco UCS C220 M5, backed by NetApp and Tegile storage with out-of-band management through iDRAC and CIMC. Proxmox VE runs across the rack and a set of Lenovo ThinkCentre Tiny nodes for testing changes, practicing security techniques, and self-hosting services.

Security field kit

Penetration testing and DFIR gear, including Hak5 tools, Flipper Zero, Proxmark3, directional Wi-Fi assessment hardware, and multi-boot triage drives, run from a standalone VMware Workstation laptop.

Web development

Web apps on Cloudflare Workers, including a board game tracker, social media publishing tools, and this site.

Open-source tooling

infra-toolkit: PowerShell tools for Active Directory hygiene audits, rolling server patching, SQL Server deadlock analysis, server and certificate monitoring, and DNS self-repair, with Pester tests and CI.

Community and leadership

OzSec Foundation

Sponsor Chair and Director for Wichita's annual regional cybersecurity conference, leading sponsor acquisition and relationships.

DEF CON Group 316

Member of DC316, Wichita's DEF CON group.

Drone Build Design Fly Club

Founder of a club for designing, building, and flying drones.

Orpheum Performing Arts Centre

Event volunteer for a historic Wichita theater, and I laser engrave its donor plaques.

Robotics coaching

Coached BEST Robotics teams from 2009 to 2019 and VEX Robotics teams from 2017 to 2019 at Circle USD 375, mentoring students through engineering design and competition.

Golf coaching

Head boys golf coach at Circle USD 375 from 2017 to 2019.

Kansas NEA

President and president-elect of the Kansas NEA Student Program, member of the Kansas NEA Board of Directors, and member of the NEA Advisory Committee on Student Members.

Recognition

• Employee of the Year, Circle USD 375
• Leadership Development Program, Berry Companies, Inc. (2024): nine months, six modules, and visits to each division
• Phi Theta Kappa Honor Society and The National Society of Leadership and Success, Cowley College (2025)
• Outstanding State Student Leader, National Education Association
• Pi Gamma Mu Honor Society