TECHNICAL SKILLS:

Networking: Cisco, Fortinet, Juniper, Netgear, Palo Alto routers and firewalls; Cisco, Dell, IBMJuniper, Netgear 10/100, 1 GB, 10 GB rack and blade switches; F5 Big - IP load balancer

Operating Systems: Linux (CentOS, Debian, Redhat, SUSE, Ubuntu), UNIX (AIX, Confidential &T, BSD, Solaris); Windows (10, 7, XP desktop; Server 2003, 2008, 2008/R2)

Virtualization: Citrix Xen; VMWare (ESXi, VCenter, VSphere); Microsoft Hyper/V; Redhat EV;

Cloud Platforms: Amazon AWS, Google GCP, MS Azure, Eucalyptus, OpenStack, OpNFV, VMWare V-cloud

Cloud Models: IAAS, PAAS, SAAS, FAAS/Serverless (AWS Lambda, Azure Functions, GCP App Engine.)

SAN Storage: Dell Compellant and Equalogic iSCSI; EMC, IBM, Netapp FibreChannel/FCoE.

Databases: DB/2, MySQL/MariaDB, MS-SQL, Oracle, PostGreSQL

Languages: C, C++, Java, Smalltalk; JavaScript, Perl, Python, Shell (bash, csh, ksh, sh).

PROFESSIONAL EXPERIENCE:

Confidential

Project manager, Architect/lead

Responsibilities:

• Cloud Strategy, Architecture, Planning, and Staffing reporting directly to the CIO and CTO. Cloud Information Security, working directly with CISO/BISO. Advocated, Evangelized, and Coached/Mentored Corporate/Business/Technical Management and Staff.on Cloud Opportunities, Strategy, and Technology. Developed a Cloud - Agnostic Strategy, enabling Business Units/Technical Staff to select among AWS, MS Azure and Google GCP. Lead Second-Generation Cloud efforts, in coordination with Enterprise Cloud Architect. Lead Amazon Landing Zone (ALZ) Engagement to enable an Agile, Performant, and Secure AWS Cloud, with evolution from IAAS to AWS Managed Services, and ultimately Serverless implementations using Lambda. Separate MS Azure Subscription to enable an Agile Data Science Lab. Agile/DevOps Culture. Atlassian Tool Suite. Enabled Cloud Data Science. IT Technology Modernization. Enterprise Network Re-Architecture, including reconsideration of Global MPLS and overlay VPNs, AWS Direct Connect, and MS Azure Express Route. Consulted with Lazard's Director of IT Operations on Cloud Technology, DevOps Culture and Staffing, Global Network Modernization. Evaluate Unified on-premise and Cloud Backup Strategy. Collaborate with InfoSec and Operations on Monitoring/Event Capture, Security Architures/Models, and tools, including AntiDDoS, CASBs, Firewall/Security Groups, SIEM. Evaluate Cloud connectivity via AWS Direct Conne, Azure Express Route, Google Cloud Interconnect, and MPLS.
• Architect and lead for reliable Public Safety Emergency Communication vendor s migraton from legacy Datacenters to AWS. Defined and implemented AWS VPCs, including network segmentation and security boudaries. Implemented network from AWS the Enterprise Dcs and Campuses. Defined Load Balancing, Autoscaling, and Resilency of application coponents.
• Enterprise Cloud Architect/for DTCC's migration to AWS: evaluated VPC design, Network Architecture within and among VPCs, Direct Connect, DTCC and Affiliated Entities Campus/National Datacenters, including routing, security, latency and resiliency. Reviewed current DR Strategy, recommending a transition to Resilient Architecture for the Cloud. Re-architect applications for AWS, optimizing for horizontal scaling and native AWS services. Advised on transition for Office 365.
• Evaluated MS Azure/Azure Stack and Open Stack as alternative for some workloads.
• Cloud Architect/Technical Program Manager for Open Stack Global, Hybrid Private/Public/White Label Cloud, Security review of Open Stack platform, services, and applications. CCS ISV Marketplace self-service Application Licensing, IaaS Provisioning, Migrated to Confluence/Jira from Rally.
• Cloud Architect/Engineer for Confidential s migration to the Cloud, initially AWS. Contribute to Confidential Corporate Enterprise Architecture for AWS VPC design, including IP address space allocation, AWS Direct Connect design to Confidential Corporate network, Public Internet connectivity of VPCs, including Security, VPC Peering.
• Assist Confidential Business Units in reviewing existing applications, ranking for migration suitability, potential security/performance issues, recommending refit, replatforming, or refactoring to utilize AWS effectively and resiliently.
• Architect, Technical Project Manager, and Lead for Harvard University IT s initial migration to AWS.
• Lead assessment of cloud providers (AWS, MS Azure, Redhat Open Stack, VMWare vCloud Air).
• Lead assessment of Harvard IT s application portfolio for migration feasibility, ease, and ordering.
• Lead design and creation of AWS multi-region Virtual Private Clouds (VPCs), addressing, internal routing, and Security Groups.
• Implimented CI/CD-SDLC for AWS: Atlassian (Confluence, Crowd, HipChat Jira), GitHub, Jenkins, SonarQube.
• Architect, technical project manager, and lead for a Symantec's initial migration to AWS Virtual Private Clouds and Terremark- hosted VMWare-based private cloud.
• Assist business units in re-architecting and migrating their software and services for a cloud environment. Worked with networking group to integrate Cloud with legacy Datacenter, including remote AD support
• Architect migration of vendor-agnostic Call Center Management software from on-premise to AWS. Review current architecture and implementation; redesign for high-availability, multi-region architecture. Address security issues by architecting and implementing virtual private clouds for each of the company’s clients.
• Architect, project manager, and lead administrator of 500+ servers running several thousand AWS virtual
• Machines with Linux (CentOS, Debian, Redhat, Ubuntu) images using direct and SAN storage (EMC, iSCSI, Netapp) in support of development, test, staging, and production workloads in a geographically dispersed, resilient network.
• Planned and executed datacenter relocation.
• Planned upgrade from 1Gb to 10Gb cloud/storage fabric.

Confidential

Responsibilities:

• Collected site physical, network and telephony information to allow specification, installation and placement of new Data circuits, Network equipment (routers, switches and VGA or ATA analog adapters), Telephony equipment and provisioning of T-1 and ISDN PRI circuits.
• Installed new, VOIP-capable Cisco routers in existing server cabinets, connected to new T-1 circuits. Replaced Cisco switches to provide PoE (Power over Ethernet) required by Cisco VoIP telephones. Installed Cisco VGA or ATA analog telephone adapters to support fax machines and legacy analog telephones. Installed UPS to ensure phone service during power failures; connected and configured UPS to allow remote monitoring. Installed several Cisco IP phones in training area for employee familiarization.
• Replaced all existing phones with Cisco IP phones; connected user’s PCs. Connected Fax machines to VGA or ATA analog adapters. Diagnosed and resolved local and remote network and WAN/LAN cabling issues. Confirmed installation and provisioning of Cisco Call Manager, Attendant console, and user telephones. Supported users during the transition.
• On-site Project Manager/Technical Lead for Confidential ’s integration of Legg Mason legacy IT. Installed new computing and network systems Confidential Legg Mason branches.
• Installed CSU/DSU on new T-1 circuits; installed/configured new Cisco routers and switches; HP x86 rack servers; HP robotic tape drives; backup modem connection for out-of-band maintenance.
• Connected multi-suite sites across copper and fiber-optic backbones, including diagnosis and correction of copper and fiber cabling installation errors. Installed new PCs, including OS/Application software for all branch personnel. Installed and configured new HP printers. document scanning workstations, software and scanners.
• Supported users during the transition.
• On-site PM/Technical Lead for teams installing new servers, PCs, monitors and printers nationally.
• Installed new Operating System and Application software on all servers, PCs via Ghost. Restored user's environments from network backup. Erased data from all old PCs to allow disposal.
• On-site PM/Technical Lead for Smith-Barney's national technology update.
• Lead teams installing new server, network and desktop systems Confidential branches.
• Installed new server cabinets, including new CSU/DSU on new T-1 circuits; installed Cisco routers and switches; installed HP servers; installed and configured Windows server OS; modem connection for failed router maintenance. Installed new PCs for all branch personnel.
• Installed/configured new HP printers.
• Configured Cisco routers via console connection.
• Diagnosed and resolved WAN circuit installation, configuration and cabling issues.
• Diagnosed and resolved LAN configuration, installation and cabling issues. Supported users during the transition.

Software Architect

Confidential

Responsibilities:

• Strategic technology consulting and software development. Design, develop and mentor teams in Object-oriented software prototyping and development in Smalltalk, C++, and Java; application, system, and network software for workstations and personal computers under UNIX, Microsoft Windows 2K, NT, 95, OS/2, and Macintosh operating systems, including Graphical User Interfaces in X, OS/2 PM, and Win16 and Win32.Selected major projects:
• AIX cluster/high availability toolkit for automatic application monitoring, with automatic recovery of failed applications and migration of services from failed servers.
• Architect and lead developer of a workflow and document management system to automate the operation of offshore oil platforms.
• Developed an IBM VisualAge/Smalltalk implementation of a Municipal Equipment Information System for the City Of Edmonton.
• Lead developer and project mentor in the development of a Smalltalk based graphical WAN/LAN network design and verification tool, including automated deployment/update of enterprise PC workstations.
• Architect, Lead Developer and Team Mentor for an Confidential SVR5.3 SV/MLS kernel and utilities for x86 uni- and multi- processor systems from the generic Intel source and Confidential & Confidential SV/MLS modules. Verified DOD Orange Book compliance.
• Developed an X-based GUI for a real-time data acquisition, display, and process control system for a petroleum refinery. Revised to use OSF/Motif.
• Performed feasibility study and developed software architecture for a distributed Smalltalk-80 virtual machine for the Inmos Transputer.

Confidential, Santa Monica, CA

Senior Software Engineer

Responsibilities:

• Senior Software Engineer involved in conception, management, architecture, and implementation of UNIX and MS-DOS operating system and networking software.
• Implemented Virtualization for UNIX environments on the Intel x86, implements a complete virtual PC/ATincluding peripherals, in VM86 mode.
• Extensive UNIX kernel modifications to support MS-DOS tasks. Modified PC-Interface (below) to provide transparent, integrated file and print services.
• A transparent file, print and terminal emulation service for MS-DOS PCs on UNIX hosts. Developed MS-DOS system call redirector and UNIX server software, network interfaces, and transaction protocols; later SMB.
• Implemented a fully transparent, distributed UNIX, compliant with System V and Berkeley 4.2 BSD, incorporating a reliable, replicated file system, including pipes; process migration; on DEC VAX, IBM PC/ Confidential, RISC, and 370-architecture.