SUMMARY:

• Excellent in building strategic relationships with leadership of business and work effectively with them.
• Expert in defining strategy, road map, and blueprint, and formulating long - term goals and future direction with insight to technical details.
• Proficient in Information Security governance, policies standards procedures, compliance and audit, risk management, security architecture and engineering, security operations, and secure SDLC best practices.
• Demonstrated leadership and organizational skills in rapidly changing and distributed environments; highly experienced in mergers and acquisitions; possess an entrepreneurial and can-do spirit with passion, creativity, and energy.
• Strong set of business skills including: interpersonal management, communication, analytical, and prioritization skills, financial management, vendor management, and operations.
• Info Security and Identity & Access Management
• Infrastructure and Platform Engineering
• Architecture and System Design
• Software/Application Development
• Cloud Computing - IaaS, PaaS, and SaaS
• Software Delivery and Operations - DevOps
• Program/Project Management
• Vendor, Third-party, and Risk Management
• Business Relationship and Portfolio Management
• Demand, Budget, Resource, Performance Management
• Change, Release & Configuration Management
• Global Transformations and Support

TECHNOLOGY SUMMARY:

• Application Servers (Oracle WebLogic and Fusion Middleware, IBM WebSphere, Apache, JBoss, Microsoft SharePoint)
• Operating Systems (All flavors of UNIX and Windows) and VMware Virtualization
• Network protocols TCP/IP, DNS, DHCP, SSL VPN and IPSec VPN
• Languages (Java/J2EE, C/C++, HTML, XML, JavaScript, UNIX Shell Script, Perl, InstallShield)
• Security Solutions: FireEye, Imperva, McAfee, NetScaler, Splunk, zScaler
• Identity and Access Management Technology: CA, IBM, RSA/Aveksa, Dell, Centrify, Sailpoint, Okta

EMPLOYMENT HISTORY:

Global Head 

• Accountable for vision, strategic direction, and execution of Identity & Access Management (IAM) function of MUFG Confidential, the combined entity of the Confidential-Confidential, Ltd (BTMU) and Confidential of California. Provide thought leadership and executive updates, response to FFIEC and OCC inquiries, manage resources and technologies, develop methodology and solutions, and deliver large program and project in global environment for all lines of business. Portfolios includes Identity Management and Governance, Identity data services, Access Management including SSO and Federation, Privileged Access Management, Operations and Administration.
• Manage a staff of over 75 people including Enterprise and Solution Architects, Security and Application Architects, Business and System Analysts, developers and engineers, System Administrators, Tier2 and Tier3 support engineers, and vendor and partner resources, with financial responsibilities $ 15-20 M/year.

Vice President 

• Accountable for Architecture and Shared Services of Bank’s global webhosting infrastructure. Establishing webhosting vision, strategy, and programs/projects, including initiatives, RFP’s, budgets, vendor management, with strong focus on layered security/defense in depth, and risk management, disaster recovery and crisis management. Technologies include world-class network security, platform security, application security, and DDoS mitigation solutions. The program saved more than 50% in infrastructure and operations cost for the bank in comparison with previous and in-house solutions.
• Oversee major webhosting incident investigation and response across multiple organizations, creating advanced functions related to ongoing monitoring of threats and vulnerabilities, threat intelligence, and Data Loss Prevention. Leverage partners for industry trends and best practices to ensure a proactive posture.

Basking Ridge, NJ 

Sr. Manager 

• Responsible for end-to-end lifecycle management of Avaya Identity and Access Management and Integrated Security program, including current state assessment, strategy and road map, architecture and design, and development. Avaya security platforms are based on CA’s SiteMinder and IdentityMinder, Federation Manager, Microsoft Active Directory and Microsoft Identity Lifecycle Manager, and IBM DataPower XML Security Gateway, with multi-factor Authentication capabilities. Managerial responsibility includes budgeting, hiring and building, motivating, attracting and retaining staff.
• Team successfully delivered over 150 Single Sign-On solutions for on-premise and SaaS based applications, including re-architecture of 40 Nortel Enterprise Solutions (purchased by Avaya) applications ; development of secure web services for authenticating non-web based applications and mobile devices with significant improvement in user experiences.
• Represented Avaya CISO in local CISO meetings; Lead Avaya technical team in a high profile litigation against a former business partner on a security/entitlement breach. Presented at CA Conference on “Avaya Federation Case Study”.

Platform Owner

• Accountable for Avaya’s standard platforms for hosting and delivering content to the Web: Enterprise, Partner, and Sales Portal for employees, partners, and customers (platforms are composed of Interwoven Teamsite Content Management System, Autonomy/Verity Search Engine, FileNet Document Repository, and BEA WebLogic). Ensure transparency of processes and overall central governance is aligned across the distributed architectural function.
• Oversight of building a common, shared corporate infrastructure with high scalability and availability, fault tolerance, performance, and cost savings using VMware/Linux, Azul computer appliance, and Oracle WebLogic and Fusion Middleware SOA software stack.
• Lead a team of architects, developers, and engineers built high-volume middleware global shared services - Enterprise Service Bus; migrated over thirty applications from AquaLogic Service Bus to new Enterprise Service Bus; integrated ESB with enterprise systems including multiple SAP instances, multiple Siebel applications.
• Develop and refine strategy, mature process and execution of Disaster Recovery plan.

Program Manager

• Own and managed a multi-million dollar/multi-phased program/project, Avaya Total Care, to support global customers and partners. The program resulted in an increase in the customer adoption of self-service from 30% to 66%. Accountable for requirements, scope, schedule, budget, sourcing, development, and delivery of the solution. Technology includes WebLogic Portal front-end, Oracle Fusion Middleware, and backend ERP systems (SAP), CRM (Siebel and Salesforce), and a dozen other application platforms. Team members (over 30) include direct and indirect reports (on and off shore): PMs, Tech Leads, Architects, Business and System Analysts, developers, testers, and customer services reps.
• Key web technology initiatives, services, and portfolio evaluation and management. Explain technologies and technical solutions to diverse audience, including senior executives, technical and non-technical clients. Influence decision making across functions. Propose both short-term tactical solutions and long-term strategy for future growth.
• Delivered a new Enterprise Portal (3-phase $2M budget) from requirements to implementation to production support. Established strong relationships with business stakeholders and sponsors by effectively managing expectations and inspiring confidence in delivery; built a governance model for future web projects (including creation of a Web Council); Streamlined the engagement process by refining roles and responsibilities of application business owners, business transformation leads, relationship managers, IT systems owner, and IT operations.
• Mentor and guide IT services organization on release management, configuration management, and change management.

Basking Ridge, NJ

Technical Manager / Lead Architect 

• Champion the alignment of Business Architecture, Applications Architecture, Data Architecture, and Technical Architecture to ensure a holistic and successful Enterprise Architecture Strategy execution. Ensure Enterprise Architecture organization is properly engaged and that architecture solutions are integrated across business units and consistent with defined Avaya Enterprise Architecture direction.
• Establish enterprise architecture strategy, roadmaps, and models with Conceptual, Logical and Physical layers, and define standards for each. Produce architecture specification and design documents. Guide project teams in creating scalable, extensible, reusable, and cost effective Web and middleware-based solutions. Lead architecture reviews of existing and emerging technologies and assess its ability to support current and future business and technology needs.
• Oversight a Software-Defined Data Center DevOps initiative in building/migration two new corporate data centers, with focusing on automation and self-service. Infrastructure and software components include LAMP, performance monitoring tools, authentication and authorization solution, and SIEM. Directed and managed projects with both Waterfall and Agile software development methodologies.
• Design and build, and operational oversight of Avaya’s Single Sign-On framework which allows integration of BEA WebLogic Portal based applications, CA SiteMinder enabled web applications, applications supported by Integrated Windows authentication, and enterprise / legacy applications.
• Architecture design and tech lead a cross-company, cross-team effort for the integration between Avaya’s eCommerce and Citigroup and GE’s iProcurement systems using WebLogic integration and IBM DataPower security gateway.

Basking Ridge, NJ 

Software Architect 

• Lead contributor in architecture design of Avaya Enterprise Portal (based on WebLogic Portal). Established the framework of deployment and production monitoring and self-healing process which allows Portal uptime 99.95 %.
• Key participant of an SOX compliance project in data integration and workflow business process management subsystem between various ERP (SAP, Oracle), Siebel, custom financial applications, and WebLogic middleware.
• Technical Lead (co-lead with Legal department) a cross-team effort in response to a high profile government subpoena to Confidential’s regulatory documentation management practice.
• Managed Search team between Jan 2005 - Aug 2005 (search technology based on Verity).
• Management of many Proof of Concept projects for solution, technology, process, and vendor evaluations.

Liberty Corner, NJ 

Software Engineer III 

• Development of use cases and sample enterprise applications for WebLogic Platform releases.
• Responsible for security design specification for WebLogic cross-component interoperation.
• Release management of BEA WebLogic Platform 7.0 Service Pack 4 (a release including 5 products - WebLogic Server, WebLogic Workshop, WebLogic JRockit, WebLogic Portal, and WebLogic Integration).
• Developed and coordinated BEA software detection/audit program, a tool used by Confidential to audit the license distribution and compliance of Confidential products among Confidential customers.

Software Engineer II / Team Lead

 Responsibilities:

• In charge of build, configuration, and release management of distributed development environments for Confidential and WebLogic Enterprise products. Mentoring junior team members.
• Designed and developed a new installation and Service Pack/ patch delivery framework for Tuxedo and WebLogic on both UNIX and Windows. This framework leads to a 3 folds improvement in productivity for Confidential tier 4 support engineers.

Software Engineer I

• Responsible for Tuxedo and WebLogic builds on all flavors of UNIX/Windows platforms. Software installer development.