Experience

Confidential

Clientele

• Confidential CA IdentityMinder v12.6 upgrade, support of existing infrastructure including CA SiteMinder and eTrust directory.
• Confidential Architecture assessment of web services integration with RSA adaptive authentication solution.
• Confidential SiteMinder R12.5 upgrade including migration from Solaris to Linux on VMware. Deployment fully automated enabling engineering team to offload tasks to operations team.
• Confidential SiteMinder R12 with Arcot upgrade.
• Confidential Federation architecture and implementation with products such as: PingFederate, OpenAM, Novell, CA Federation Manager. Successfully integrated with 15 large companies within 6 months.
• Confidential SAML Federation implementation enabling new service offering to 100's of millions of customers. Solution testing for interoperability with federation key players such as: CA Federation Manger, PingFederate, OpenAM, Shibboleth, and RSA.
• Confidential Architected federation solution enabling entrance to the federation market offering IDP and SP roles. Enabled client to compete with large companies on the same playing field. Assisted client to complete the integration of 20 external companies within 8 months.

Confidential

• Created vision and reference architecture for internal single sign-on infrastructure. Developed relationships with key business partners to bring the vision to fruition.
• Initiated and managed federation and single-sign-on projects utilizing PingFederate and CA SiteMinder. Project scope: 1.5 million budget for hardware and software purchases, management of 12 resources. 12 cloud applications were fully integrated within first 6 months.
• Deployed SiteMinder, IdentityManager, and Secure proxy server supporting 3.0 million external customers. Customers benefited from increased security, usability, and profile management. Produced additional savings through reduction of call center staff as a result of user's self-service functions being online.
• Architected SAML federation solution enabling legacy applications to letverage industry best practices. TIAA-CREF achieved a competitive advantage by providing modern service offerings to new business as well as over 15,000 existing relationships.
• Advisor to senior management on corrective actions required after a failed portal implementation. As a result, J2EE profilers were deployed with every new application to allow support teams adequate testing and monitoring facilities. Additional risk mitigation was achieved by replacing legacy front-end load balancers with modern devices which allowed a staggered release schedule for new applications.
• Led effort to reduce spending on web security software. Achieved 500,000 the first year by overcoming common practice of utilizing vendor solutions without formal cost analysis.
• Reduced time required to build new systems from days to minutes via automated system deployments. Documentation and cross training enabled repeatable and consistent results.
• Developed and implemented monitoring solutions for component previously closed systems. Enabled real-time notification by integrating monitors with existing Tivoli monitoring suite.
• Saved over 10,000 by removing a vendor purchased authentication scheme. Learned Java and Implemented a Siteminder active response using vendor APIs.

Confidential

• Senior engineer of 15-member team responsible for corporate SSO infrastructure utilizing CA SiteMinder for web access control, PingFederate for identity federation, and Etrust directory as a backend userstore. Infrastructure utilized by all lines of business including: 600 web-based applications. Infrastructure consisted of over 135 Policy servers, 240,000 intranet users and 28,000,000 external customers.
• Planned and implemented multiple SiteMinder policy server upgrades and migrations from versions: 4.x-5.0 5.0-5.5 5.5-6.x
• Identified need and designed automated process to upgrade the SSO infrastructure. Produced 500 improvement in service restoral and new server build time. Dramatic reduction in configuration errors due to new testing procedures and automated deployments.
• Led cost saving initiative resulting in cost of ownership reduction of over 550,000 by identifying under-utilized and systems with projected diminishing utilization.
• Increased effectiveness of 1000 call center employees, saving over 400,000 in first year by implementing seamless login mechanism.
• Selected to conduct perception review of senior management behavior versus Bank of America's corporate values. Presented recommendations and results to senior management.
• Project lead for engineering and implementation of monitoring solution including call-flow, escalation paths and migration from legacy sysedge/sitescope to IBM Tivoli based solution.
• Provided management ability to track changes through environment migrations showing details of completed work versus item remaining with dependencies.
• Created baseline standards for policy server deployments including standardization of registries, application configuration settings, TCP OS parameters. Created web-based reports to identify deviations from established standards and monitored the build progress of new servers.

Confidential

• Persuaded clients to leverage multiple support tiers thereby maximizing the benefit of highly technical expertise. Created documentation to aide support levels along with troubleshooting methods, procedures, and escalation paths.
• On-site partner to Price Waterhouse Coopers during customer engagements. Responsible for design and deployment at Fortune 50 customer of an internet-facing SiteMinder SSO integration of 500,000 initial users migrated from legacy systems.
• Coordinated root cause analysis with multiple vendors during critical and project threatening issues. Ensured critical issues were identified, tracked, and addressed in a timely manner thereby preserving project timelines.
• Architecture and strategy subject matter expert during project initiation, high-level design, infrastructure build, and integration phases.
• Led clients to utilize best practices in multiple areas such as: high-level architectures, lifecycle maintenance, disaster recovery, and contingency planning.
• LDAP architecture and schema design. Oracle database to LDAP user store conversions.

Confidential

• Solved growing problem by creating workflow system to process requests to unblock restricted web content. Process completed upon administrator approval of site content and proper business justification. Granted exceptions were added to the system automatically.
• UNIX system administration for over 300 web hosting accounts. This service was the de facto hosting facility for internal business partners to establish an intranet presence for departmental and project websites. To ease site navigation, I authored BellSouth's first corporate website directory.
• Recognized for outstanding quality customer service with numerous customer support awards and personal commendations from clients.
• Infrastructure capacity planning for internet web traffic. Created tools for trend, current utilization, and projected usage analysis, and enterprise license tracking.
• LAN, PC administration, and engineering of Novell Netware v4.1 servers which supported over 1200 users on various OS platforms such as: Windows 3.1, Windows 95 and Windows NT.
• Implemented antivirus system, protecting the company from risk by disallowing infected machines from obtaining LAN access. Detected threats were secured, preventing further user access.

Technical Skills