PROFILE:

• Experienced identity management leader able to focus on architecture, solution delivery and operational excellence.
• Wide ranging background in enterprise architecture, IT operations and application development which provides valuable perspective when designing security policies or solutions.
• Trusted speaker addressing industry groups as well as senior corporate management on security issues and opportunities.
• Frequently sought by peers and IT leadership to address challenging IT issues within the corporation.
• CISSP certified.

TECHNICAL SKILLS:

Security: Tivoli Access Manager, Digital Certificates (SSL, Authenticode), SailPoint, Security policies and procedures

Load Balancer: IBM Edge Server

LDAP: IBM Tivoli Directory Server, Active Directory

Web/Application Servers: WebSphere Application Server (versions 5.0, 5.1, 6.0, and 6.1), WebSphere Portal (versions 5.0 and 5.1) Apache, IIS

Programming Languages: Java, C#, Visual Basic, C, C++, JavaScript, HTML

Operating Systems: AIX, Windows NT/2000

Messaging: MQ Series, Web Services/SOAP

PROFESSIONAL EXPERIENCE:

Confidential, Oak Brook, IL

Global Identity and Access Management Platform Lead

Responsibilities:

• Responsible for expanding and maintaining the overall identity and access management platform for Confidential.
• This includes Active Directory, Forefront Identity Manager, single sign on using Microsoft ADFS, SailPoint for role based access control, Radiant Logic Virtual Directory as well as custom developed solutions for crew identity management.
• Responsible for selling and coordinating the global deployment of access platform solutions with IT departments in the 117 countries Confidential ’s operates in.
• Responsible for managing team of 4 employees and 14 contractors, in addition to maintaining relationship with several service providers that deliver identity management solutions to Confidential .

Confidential, Oak Brook, IL

Security Service Delivery Manager

Responsibilities:

• Service delivery manager for Global Account Manager, a custom identity management tool used to maintain user ID’s and application access for over 200,000 Confidential ’s employees and franchisees.
• Improved automated password reset function resulted in savings of over $30,000 per month.
• Mange a team of 9 development personnel working to further enhance identity management processes globally.
• Manage team deploying role based access control in the United States and planning to deploy globally.
• Work with legal departments in the US, EU and Asia - Pacific to address privacy regulations in countries where Confidential ’s does business.
• Work with IT managers in countries around the world to adopt global identity management tools and processes which will improve their security while reducing costs.
• Work with application teams to provide standard ways to manage application authorization.
• Work with global supply chain group to improve processes for managing supplier user ID’s and application access.
• Implemented Radiant Logic Virtual Directory to provide identity data to a variety of systems. This included identifying the need for a product, building the business case, securing funding, evaluating and selecting a product, selecting an implementation partner, implementing, and selling the service internally to several application teams.

Confidential, Oak Brook, IL

Enterprise Information Security Architect

Responsibilities:

• Reorganized and updated Confidential ’s global security policies and standards, aligning them with ISO 27000 standards to provide the business with consistent expectations for security.
• Participate in risk assessment reviews for new IT projects as an SME.
• Security and identity management subject matter expert for first global crew-facing application that will have up to 2,000,000 users.
• Provided guidelines for secure mobile application development; as well as review applications before deploying to production.
• Defined standards for application authorization to improve security and provide a more cost effective way to handle SOX user access reviews.
• Work with Confidential ’s employees globally to help them understand how to best leverage Confidential ’s available security solutions I.E. Global Active Directory.

Confidential, Lisle, IL

Enterprise Security Architect

Responsibilities:

• Led Confidential ’s IT security center of excellence, a cross functional group focused on improving IT security with 4 full time people and 10 part time people.
• Developed Confidential ’s security architecture including risk assessment process, SDLC security touch points, work intake model, maturity assessment model, conceptual architecture, and updated security policies and procedures to align with the ISO 27000 standards.
• Lead efforts to ensure proper security controls are in place for Confidential ’s expansion into China. This included leading efforts to identify and implement required security controls.
• Worked with business units to secure funding for security technologies such as DLP, SIEM, IDS/IPS.
• Worked with engineering department to develop process to classify intellectual property and develop proper data handling procedures.
• Worked with project teams to ensure security concerns were addressed within their solutions as a part of architecture review board. Occasionally lead architecture review board meetings.

Confidential, Downers Grove, IL

Enterprise Architect Lead

Responsibilities:

• Participate in architecture review board and work with project teams on security issues.
• Develop business case and lead implementation of Aveksa Compliance Manager to automate SOX access review process.
• Project achieved savings of $500,000 per year over previous manual approach.
• Develop business case and lead implementation of SAML based federation capability with Tivoli Federated Identity Manger.
• Work with outside partners to implement federation projects with Confidential as identity provider as well as service provider.
• Develop security strategy for a joint venture in China.

Confidential, Warrenville, IL

Strategic Technology Consultant Lead

Responsibilities:

• Technical team leader in new IT group - Application Enabling Services- provide middleware support, application development best practices, and serve as a bridge between the Application Development and Operations groups.
• Developed and implemented a plan to create a centralized WebSphere Application Server and WebSphere Portal environment to consolidate application servers being managed by different application development groups.
• Continued to lead the expanded usage of Tivoli Access Manager at Confidential . The current Access Manager environment secures over 300 applications, has 55,000 named users, and handles over 10 million page views per day.
• Planned and executed the upgrade to Tivoli Access Manager 6.0 along with IBM Tivoli Directory Server 6.0.
• Manage enterprise wide VeriSign Managed PKI account.

Confidential, Warrenville, IL

IT Staff Specialist

Responsibilities:

• Manage Tivoli Access Manager environment. Worked to enhance the reliability of the environment and worked with different application owners to secure a number of applications.
• Implemented WebSphere Portal at Confidential for a new project.

Confidential, Warrenville, IL

Senior IT Analyst

Responsibilities:

• Use IBM Network Dispatcher load-balancer to create high-availability environment for several web sites including Policy Director environment.
• Create SOAP based web service to provide dealer information to a business partner as well as a service to allow dealers to securely submit invoices to the Fleet Charge credit card system.
• Upgraded from Policy Director version 3.6 to 3.8 in March of 2002. Transitioned approximately 20 applications and 5000 users to new environment without disruption to the business.
• Upgraded to Tivoli Access Manager 4.1 and AIX 5.1 in July of 2003. Transitioned approximately 40 applications and 11,000 users to new environment.
• Member of International’s “Application Development Domain Team” which was created to identify and promote the use of common tools, technologies and development practices across the corporation.

Confidential, Oakbrook Terrace, IL

Principal IT Analyst

Responsibilities:

• Evaluate Policy Director (now Tivoli Access Manager) for use at Confidential .
• Load testing and network bandwidth testing on Java applet based Electronic Parts Catalog.
• Work on “Vehicle Electronics Infrastructure” project.
• Was added to project because of tight deadlines in delivering company’s most significant new truck in 20 years. Was able to improve programming practices on project and deliver software to allow dealers to program new trucks on time.

Confidential, Oakbrook Terrace, IL

IT Analyst

Responsibilities:

• Build and support a Windows based GUI client messaging program for use at dealerships in the United States and Canada.
• Supervise group of five interns in the development of a Windows based GUI program for submitting dealer warranty claims.