Summary of professional experience

Information technology and security professional with 23 years of IT experience. Extensive knowledge of Information Technology with proven skills in various IT disciplines identity and access management, single enterprise architecture, project management, server provisioning, system administration, problem solving, security management, network configuration, business intelligence, business continuity, and application and middleware architecture. Creative and innovative thinker with exceptional analytical, decision making and business development skill sets.

Summary of qualifications

Full Software Development Life-Cycle Project Management/Planning/Budgets SOA

Business Intelligence / Infrastructure Planning Design Performance Tuning

Performance Management Infrastructure/Technology Architecture Security and Standards

Availability, Scalability and Capacity Planning Automated Test Management Outsourcing

EXPERIENCE

Confidential

Project Manager

• IAM Architect and Technical Lead for First Data's Secure Portal migration project to replace the current IBM Tivoli solution with CA Identity Minder and Siteminder security solutions. Secure Portal is the ISCD Internet Security Cyber Defense managed Security Infrastructure that provides Tier 1 Authentication and Single Sign On for the Business Track Portal Portfolio supporting 25 applications, 16 unique URL's, 10000 peak hour logins and 120M HTTP requests per month.
• Implemented a highly available dual data center environment for Secure Portal utilizing cross data center Websphere clustering, DB2 log shipping and Microsoft SQL Server mirroring. Implemented the Radiant Logic V7 solution on a 6 node zookeeper cluster to cache LDAP attributes to improve response times of Siteminder authentication by 300 .
• Implemented a web access management and user management services engine to support the BPI Re-host 3C set of applications, providing First Data 8 million in contractual obligations. The engine was built from scratch in a scalable, re-usable manner, that will continue to deliver value and security to First Data. Awarded a First Data Center stage award for this effort for performance above and beyond.
• IAM Architect and Technical Lead for the Four Corners defense in depth project to implement Identity Management Solutions in the US, Germany, Brazil and Australia using CA Siteminder 12.52, Identity Minder v12.6 and Authminder 7.1. Developed SAAS models for external application integration.
• Configured First Data's internal Identity Minder v12.5 with custom IM tasks for user creation, modification, and password reset. Designed and setup workflows, task persistence, and email notifications for user self service functions. Configured Policy Xpress policies to provide business logic required by client use cases
• Provided an upgrade path and plan from SiteMinder 12.5sp3 to the SiteMinder R12.52 release, including migration of the Key and Policy store from an Oracle database to a CA Directory LDAP.
• Installed and configured Spylogix and CA SiteMinder OneView Monitor and SNMP Agent to scale the performance results and to monitor web agent functionality. Enabled Splunk enterprise logging for Siteminder and developed custom reports to monitor and alert on user authentications. Expertise in tuning Siteminder performance based on One View Monitor and Spylogix results.
• Federated user identities with 3rd party customer sites with CA Federation Manager and Ping Federate in a secure manner using SAML based technologies provided by CA's Federated Security Services.

• Designed the architecture and implementation of CA Authminder 7.1. strong authentication solution on Webphere 7 and SQL Server 2008 integrated with the existing FDC Enterprise SiteMinder 12.52 SSO infrastructure

Confidential

Senior Security Consultant, Project Manager, Delivery Manager

• Technical lead, identity architect and project manager for a team of 6 developers and analysts responsible for implementing SailPoint Identity IQ 5.2P3 and 5.5p3 connectors in a 5 server environment utilizing Windows 2008 R2 and Microsoft SQL Server 2008 R2. This dynamic engagement is responsible for provisioning, terminating and applying roles 8000 custom roles and entitlements based on birthrights and request based access for over 80000 users across more than 500 custom applications.
• Worked directly with customers to understand and document the client's needs and design solutions for their business. Architect and Implement security solutions using Microsoft FIM, Oracle OAM/OIM, CA Identity Minder/Siteminder, or Sailpoint products.
• Developed custom certification campaigns for delta changes in the active directory and application environments to monitor for SOD violations and provide managers and users the ability to challenge automated revocations.
• Developed custom reporting solutions used to track daily provisioning, terminations, and use of the custom password reset function developed for help desk personnel and user self service.
• Project manager and security analyst responsible for gathering and developing custom requirements and detailed use and test cases for multiple domestic and international companies. Created base architecture and designs for provisioning and terminating users with Microsoft Forefront Identity Manager 2010. The FIM Meta-verse was configured enabled to synchronize data between Peoplesoft HR, RACF, SAP HCW and CUA, to Microsoft Active Directory, resulting in improved operational effectiveness, increased security, strong password policy enforcement, and provide SOX required compliance reporting.
• Identify problems with ongoing activities through the business team and facilitates the problem solving process and contingency planning. Contribute to closing projects and finalizing all activities.
• Lead Architecture and Blueprint sessions with customers Industry processes, Information, technology .
• Perform gap analysis of the enterprise architecture domains. Deliver transformation roadmaps, optimization and standardization strategies.
• Participate in the development and execution of the IT strategy sharing implementation experiences methods.

Confidential

Information Security Specialist

• Engagements within many large-scale environments, both public and private, as a Compliance Point consultant in the role of security architect and administrator for the installation and configuration of Oracle Identity Manager, Oracle Access Manager, Oracle Internet Directory, Oracle Virtual Directory, CA/Netegrity SiteMinder, CA/IdentityMinder, CA/Role Compliance Manager, and Sun Identity Manager including companies such as GM, EDS, Lowes, ITT, The Home Depot, Tyco Electronics, Aviva, Gartner, and Liberty International. Experience in the Government, Education, Healthcare, Auto and Telecom Industries. User populations have fluctuated from a few hundred to an excess of 1.3 million people.
• Performed security audits using ISO 27002 and regulatory requirements for program and technical vulnerability assessments.
• Determined user roles and responsibilities, classifying like users into groups to ease maintenance and rule implementations controlling access to resources appropriate to user and group classifications. Analyze and document both existing and potential solutions for the following: User account provisioning/de-provisioning, Enterprise Directory Services, Single Sign-On web and desktop , Password Management, Role-Based access control and Strong Authentication.
• Coordinated information security efforts to plan, design and implement Windows and UNIX infrastructure protection schemes, develop threat and vulnerability management processes and support RSA Authentication Manager infrastructure.
• Responsible for developing changes to datacenter Cisco PIX firewalls and Gigabit Switch Router's Access Control Lists. Monitored the IDS and IPS sensors for malicious activity and collected information on security threats vulnerabilities, malware, cyber attacks for input into threat databases. Analyzed application threats and attacks in order to assign a meaningful severity score and priority and tuned IDS sensors accordingly through custom Linux Kernel programming or scripting using Perl, PHP, and kornshell languages.
• Consulted with an Information Protection Team as a security architect to multiple business clients providing security consulting and forensic services. This includes representing the security team on project designs, security assessments, penetration testing, forensic investigations and various ethical hacking tasks. Performed ethical cracks hacks to assess the vulnerabilities of test, Internet, and Intranet connected systems, networks, and applications including Windows, Linux, AIX, Solaris and I-Series servers. Completed reports for security vulnerabilities and presented to internal and external customers.
• Created strong cryptography and encryption techniques such as secure sockets layer SSL /transport layer security TLS and internet protocol security IPSEC to safeguard sensitive cardholder data during transmission over open, public networks. Developed a PII finder java application to search configuration files for required security settings and alert to deviations from defined policy. Once configuration files are in compliance, implemented RSA envision real-time notification of high-risk events, created an incident handling process, and configured centralized reporting on the most vulnerable assets to enhance security operations.
• Completed onsite and remote security consulting engagements including penetration testing, application testing, web application security assessment using Webinspect, QualsysGuard, or IBM Rational AppScan , onsite internet security assessment, social engineering, wireless assessment, and IDS/IPS hardware deployments.

Confidential

Managed File Transfer Security Architect

• Performed as an Administrator and Architect for Axway XFB Gateway and Sentinel Enabler products. Implemented a highly available managed file transfer environment using XFB Gateway 6.13 on 4 AIX 6.1 servers in an HACMP cluster leveraging 4 XSR servers for externally facing secure file transfers. Utilized 26 CFT servers installed on i-series, z-series and p-series servers for critical file transfers. The environment is responsible for securely sending and receiving highly classified data between ADT security services and 3rd party vendors including the national do not call registry.
• Responsible for Management of a Cross Client Functional Team focused solely on Enterprise Directory Services, PKI, Biometrics and Identity Management. Responsibilities included Personnel Management, Project Management, Proposal and Business Development along with various roles on each project as required.
• Trained Command Center personnel in troubleshooting transfers using the XFB Gateway windows GUI client, detailed transfer logs, XFB AIX processes and the Gateway application directory structure in production to be able support Level 1 and Level 2 Remedy tickets.
• Implemented process re-engineering for all existing production transfers in violation of SLA's to minimize risk of failures including model changes, complex Kornshell scripts, JAVA programs and FTP to SFTP conversions responsible for 3000 daily transfers moving over 15 GB of high classified data.

Confidential

Solution Delivery Specialist, Project Manager/Middleware Support

• Performed as an Administrator for the SpiDynamics Assessment Management Platform AMP security scanning software. Implemented and commercialized the HP AMP Web Application Scanning product in a 3 node fail over environment and conducted security scans using Webinspect 8.0 to identify vulnerabilities in web based applications early in the testing lifecycle and compared subsequent scans to Price Waterhouse Coopers required findings for validatio006E.
• Performed as an Administrator and Architect for Axway XFB Gateway and Sentinel Enabler products. Implemented a highly available managed file transfer environment using XFB Gateway 6.11.1 on 2 AIX 5.3 servers in an HACMP cluster leveraging 2 XSR servers for public secure file transfers. Developed MSI's for automatic installation of over 300 Window 2000/2003 CFT servers and custom developed reports and alerts using Sentinel Enabler 3.2.1. The environment was responsible for securely sending and receiving over 8000 files daily including payroll, Walmart sales data and daily sales information for Coca-Cola Enterprises.
• Performed as an Administrator for Mercury Test Director, Quality Center and Performance Center. Implemented HP performance center controlling 3 loadrunner servers and 16 multi-operating system generators with 8000 licensed vusers for testing all company internet and intranet applications. Negotiated contracts to create a Performance Testing Center and trained the offshore consultants from Wipro, Satyam and Patni in creating documented use cases, vu scripts and performing load runner scenarios. Managed the project to upgrade the shared environment to Quality Center 9 and install and test the Mercury load runner suite in the internet hosted environment. Created 300 Vugen scripts based on application use cases and administered over 100 loadrunner scenarios resulting in applications meeting response time SLA's and optimized application resources to be able to run in a shared operating environment rather than purchasing stand-alone hardware.
• Performed as a Websphere System Administrator for a continuously available, 6 node cluster shared environment for hosting, securing and managing business-to-business applications with class zero disaster recovery capabilities. This function included application support for 90 applications servers running on a variety of Websphere 4.0, 5.1, 6.0 and 7.0 platforms operating in a clustered node configuration installed on Windows, AIX, Linux and OS/400. Made use of jython, WSCP, TCL and XMLConfig to automatically deploy WebSphere applications and servers. Technical lead and project manager for the Websphere 5.x to 6.1 migration responsible for converting over 80 applications to the new technology and managed the Websphere 7.0 project assessment. Implemented XML interface over WebSphere MQ between Microsoft Host Integration Server and IBM WebSphere Application Server using DB2 XML Extender. Conducted performance analysis and capacity management for all Websphere application servers utilizing Wily Introscope and Mercury Loadrunner.
• Designated Technical lead and Project Manager for the SOA Service Manager project which upgraded the existing SOA Gateway environment from version 3.0 to 5.0 for enhanced stability, security and functionality at the Internet hosted facility and company Intranet. Developed use cases and created scripts in VUgen to create a scenario using a combination of loadrunner and soapui to simulate SOA transactions representing 300000 concurrent users. This infrastructure software provides SOA hosting capability for multiple highly visible consumer web sites including My Coke Rewards and applications interfacing with Fair Issac.
• Performed as an Administrator for Tibco Enterprise Application Software and SOA Gateway middleware applications installed on AIX and LINUX servers. Responsibilities included security configuration, application integration and standards and guidelines for component usage. Developed scripts in bourne/korn shell and perl for customized file transfers and management of the 9 server SOA environment.
• Performed as an Administrator for the Crystal Enterprises 10 and Project Manager/Technical Lead for the upgraded Business Objects XI Business Intelligence and query reporting environment. These applications are installed on multiple Windows and UNIX servers supporting over 600 queries per day and multiple database architectures including DB2, SQL Server, Oracle and SAP.

Confidential

Strategic Technologist/Infrastructure Engineering

• Managed data, content and application migration processes which successfully transitioned the company's business to consumer B2C web hosting contract from IBM to Savvis. This included application migrations for AIX to Red Hat linux. This transition was accelerated to capture cost savings opportunities, avoid duplicate fees during the migration, and improve service flexibility.
• Produced and presented business justifications, which gained management approval, altering server hardware purchasing strategy specifying Intel blade servers as primary application deployment platform. Strategy reduced infrastructure costs per application server by 50 over stand alone server solutions.
• Implemented a Virtualization Strategy for The Coca-Cola System including installation and configuration of VMWare ESX Server 3.x and Virtual Center 2.5 on 80 IBM 4 way servers and IBM Blade Centers.
• Created a 5 year data center strategy for the Coca-Cola Company data centers to both manage operating expense and support TCCC global business needs. Recommendations included a storage consolidation strategy, an information security architecture, and the creation of a virtual data center including network, power and cooling requirements for the new infrastructure.
• Developed a SUSE Linux Commercialization Program to create a strategy and implementation roadmap for utilizing Linux at the Coca-Cola Company. Created an automated installation procedure for installing the OS on 50 p-series and Intel based systems. Implemented a virus scanning solution utilizing McAfee anti-virus software across all Linux systems.

Confidential

Architect, Project Manager/Information Systems

• Infrastructure Project Manager for the Travel Smart Expense Management System which consolidated the company's business expense system from excel spreadsheets to a JAVA webstart application running within a highly available environment utilizing BEA Weblogic and Tomcat application servers.
• Infrastructure Project Manager for the PARTS Packaged Analytical Reporting Tool Selection project. This project developed business intelligence requirements for the company and evaluated Business Objects, Microstrategy and Crystal Enterprises. Responsibilities included server performance benchmarks, architecture design and configuration and product evaluation in the solution center on both AIX and Windows operating systems.
• Technical subject matter expert and Infrastructure Project Manager for the MARS Marketplace Analytical Reporting Solution project implementing Crystal Enterprises 10. This included a complete build-out and test of a logical and physical implementation for a business intelligence production and test environment.
• Project Manager/Technical lead for the Enterprise Search Engine Project that developed and completed a detailed scorecard for evaluating search engine vendors and a structured agenda for vendor presentations. Templates were reused for expert locator and selecting a capacity planning tool to improve efficiencies and complete project timelines. Technical subject matter expert for evaluating search requirements comparing Endeca, Verity and Autonomy vendor solutions. The Verity search solution was implemented as the company standard search method for all company intranet and internet hosted applications.
• Designated Technical Project Lead for the Web Infrastructure Strategic Environment, chartered to create an internal webhosting environment for The Coca-Cola Company. System deliverables were an advanced fault-tolerant network infrastructure and servers for running application server and security products. Websphere 4.0 was selected and implemented in a highly available 6 node clustered environment.

Confidential

Project Manager/Infrastructure Planning

• Designated Project manager for Phase II of the ADSM enhancement project to provide centralized backup for the NT/Windows 2000 600 server environment utilizing IBM Tivoli Storage Manager. Designed and planned the technical infrastructure to support the required capacity utilizing SAN technology and centralized ESS storage using McData Enterprise Directors.
• Project Manager and subject matter expert for the digital video library project. This project encoded 24,000 of Coca-Cola archive's commercials and presented the mpeg files to end users through a web interface utilizing Lotes Notes Domino and IBM's Content Manager application. Managed teams of up to 15 technical personnel and outsourced vendors in the integration and delivery of an optimized IBM Content Manager and Enterprise Information Portal middleware solution to digitize Coca-Cola's advertising archives.
• Segment architect for Network based services. Identified and prepared changes to technology segment, consulted on architecture models and topologies, reviewed and recommended decisions on architecture exception requests in order to maintain architecture content for accuracy.
• Served as a Storage architect. Worked with Infrastructure design and implementation teams to create a storage architecture for the Coca-Cola Company, utilizing tiered storage models. Designed a disk methodology for standardized testing of UNIX and NT storage subsystems.

Confidential

System Support Specialist/Global Planning and Consulting

• Reviewed IBM and reseller upgrade proposals for AS/400 servers installed at bottlers, division and region offices worldwide, revised proposals to achieve more cost-effective purchases and negotiated proposal revisions with vendors resulting in savings of US 7.5MM over three years.
• Performed 2nd level support for 8 production AS/400 systems and 3rd level support for over 300 AS/400 systems worldwide. Implemented and tested AS/400 and RS/6000 disaster recovery plans for production systems, application performance evaluation and operating system optimization for performance.
• Completed 200 capacity planning analyses for AS/400 consolidations and application migrations utilizing BMC Best/1 Analyzer.
• Evaluated and implemented Coca-Cola security guidelines for AS/400, UNIX and NT production systems in Coca-Cola division offices worldwide.
• Developed and implemented a project plan to install and configure BMC Best/1 for distributed systems across Windows NT and RS/6000 server environments to support the Coca-Cola server consolidation Windows NT, RS/6000, and AS/400 , including a 16-system SAP R/3 landscape.
• Developed alarm and threshold paging software in PSL for Windows and AIX environment utilizing BMC Patrol.

Confidential

System Analyst/Information Technology/Corporate Finance

• Developed financial front end applications for the KOFinance project utilizing excel and PeopleSoft.
• Implemented PeopleSoft financial software Accounts Payable and Purchasing . Consulted with clients to determine requirements and application configuration of the software.

Confidential

Business Analyst/Information Systems

• Developed an automated application using Excel 5.0 and Access 2.0 using ODBC to upload rate information from all hotels of the Holiday Inn Corporation to DB2 on the airline Apollo mainframe system. Process eliminated hundreds of annually contracted data entry hours.
• Maintained a complete spares inventory in order to meet customer service level agreements.

Confidential

Developer, Workstation Support .

• Developed a tracking system in Access 2.0 for UPS corporate computer hardware and software.
• Assisted with PC hardware technical problems, assembled desktop and lap-top computers and provided level 2 support to the help desk.

Confidential

Accountant

• Provided auditing, tax and consulting services to large corporations including Delta Airlines.

Confidential

• Fabricated discrete semiconductor devices and integrated circuits in silicon. Operated all instruments in clean room facility, i.e. Mask Aligner, Diffusion Chamber, etc.
• Interfaced analog to digital converters for all IBM compatible computers. Interfaced and tested circuits for ECG systems.