Resume 10

OBJECTIVE:

Experienced, results-oriented Data Processing professional, seeking a challenging position as a Senior Technical Architect and Information Security Analyst.

SUMMARY:

Senior Technical Architect and Network Security Specialist proficient in needs assessment, research, and design of industry standard compliant Internet, Intranet, and Extranet security, encryption, and user authentication networking technologies required to support the Corporate Cryptographic infrastructure. Fifteen years total experience in design, analysis, security, and warfare of Information Technology. Eight years experience in the US Navy Submarine Service as Automated Data Processing Systems Security Officer. Seven years professional experience in the analysis, design, integration and delivery of Enterprise Solutions.

CAPABILITIES:

Profound and diverse expertise in Public Key Infrastructure design, integration, and deployment, Certification Authority design and development, creation of Certificate Practice Statement & Certificate Policy Statement, vendor PKI solutions including Microsoft Certificate Services, Netscape Certificate Server, and Verisign Managed PKI Services, VPN technologies including IPSEC, L2TP, PPTP, VPN hardware including Nortel, VPNet, Cisco, Microsoft embedded VPN technologies such as PPTP and L2TP/IPSEC, VPRN capabilities such as Pass Through Tunneling and Fully Meshed Site-to-Site, Encryption technologies including Symmetric & Asymmetric, Elliptical Curve, and Atomic Proxy, Application encryption technologies such as SSL and SSH, User Authentication technologies such as RSA Secure ID, KERBEROS, and RADIUS, Intrusion / Vulnerability Scanning and Penetration Testing, Directory Services such as X.509, LDAP, DNS, Microsoft Active Directory, and Novell NDS, Network Security Programming required to design and deploy control products such as anti-virus and Internet content screening.

PROFESSIONAL EXPERIENCE:

Responsibilities include design and rapid deployment of Sun iPlanet Intranet and Extranet LDAP Directory, Messaging, and Time Management technologies and user services across the enterprise. The combination six location hardware / software upgrade generated zero user "Help-Desk" calls and resulted in zero down time. Responsibilities also included creation of Migration of Electronic Messaging and Collaborative Services Document and necessary Diagrams to permit Lotus Notes integration and migration.

• Design, architect and oversee the upgrade of Netscape 3.x Services to Sun iPlanet 4.x Services in six locations.
• Analyze and Architect Migration paths to Windows 2000 and Lotus Notes from Windows NT and Sun iPlanet messaging services and directory services.
• Perform Cost Budget Analysis, Vendor Analysis, and Feasibility Study.
• Procure hardware; perform hardware install, OS install, and burn-in. These servers were designed and deployed to be highly redundant and withstand component level failure.
• Install and deploy Compaq Insight Manager client and SNMP MIBs as required for remote management and remote operability.
• Perform Server OS Hardening as required for Corporate Security Policies and Industry Best Practice.
• Perform hardware and software support and analysis for Compaq, Sun iPlanet / Netscape, and Lotus Notes.
• Envision, document, create, and deliver Technical Architecture, Technical Diagrams, and Migration Analysis.

Technical Project Manager and Rapid Deployment Specialist for this International large scale Manufacturing Institution. Responsibilities include Project Management and architectural control for this fast-track Netware 5.1 Server / Windows 2000 Professional Desktop deployment including NDS / SLP, DDNS / DHCP, integration with global legacy Unix and SMTP DNS systems.

• Rapid deployment of thirty Netware 5.1 servers utilizing Automated Netware Server build.
• Rapid deployment of thirteen hundred Windows 2000 Professional desktops utilizing automated Windows 2000 build.
• Design, deployment, and integration of NDS, SLP, DDNS, DHCP.
• Highly complex legacy DNS integration and migration.
• Deployment across thirty sites nationally and internationally.
• Design and management of 8000 sq. ft. one-hundred workstation design and test lab including seven Servers, two Cisco routers, two Cisco switches, two 3-Com Hubs.

Senior Security Analyst, VPN Architect and Project Lead for this Fortune 500 Commercial Lending Institution. Responsibilities include envision, architect, create, and deliver complete Systems, Management, and Security Architectures to support the Corporate Cryptographic Infrastructure and facilitate the integration of a hybrid VPN solution to provide secure User Remote Access Services in both North America and Europe.

• Senior Technical Architect and VPN Specialist
• Envision, create, design, and deliver VPN Architecture for the Heller Financial "Remote Computing Access Technology" Project.
• Envision, create, design, and deliver Public Key Infrastructure Concept Architecture to support the deployment of Certificate Services across the Enterprise.
• Architect new Remote Access Service / Virtual Private Network / Virtual Private Dial Network solution utilizing unique hybrid approach, to provide Universal Remote Access Service connectivity for all Heller clients from any dial-up, broadband, commercial, or home Internet connection.
• Perform extensive Cost / Benefit analysis, evaluation and cross-evaluation of multiple industry leading VPN Managed Service Providers, evaluating and rating these Providers in areas including Suitability-to-Task, Industry Standard Compliance, User Compatibility, Security Integration, Manageability / Remote Manageability, Application Integration, and Environmental / Network Infrastructure Integration, while utilizing weighted scoring and soft scoring.
• Ensure IETF RFC compliance, and compliance with other applicable Internet Open Standards.
• Ensure documents such as Current Environment Evaluation, Systems Architecture, Security Architecture, Architecture Modifications, Vendor Evaluation Matrix, and some twenty additional Deliverables are delivered on time and under budget, to support core Corporate Business requirements, Project goals and timelines, and technical requirements.
• Ensure compliance with existing corporate Security Policies and Architectural standards, including RSA Secure ID technology, SMS client management, and McAfee anti-virus.
• Increase performance for Remote Access Service / Virtual Private Network / Virtual Private Dial Network users, while introducing strong encryption, strong authentication, centralized management and a simplified user experience.
• Design a solution which utilizes outsourced services to reduce management & overhead costs, and re-utilizes existing hardware to reduce expenditure.

Was offered and accepted a position as an employee of the firm to permit completion of Architectural Projects in progress. Responsibilities include deployment of Intranet, Extranet, and Internet technologies for all corporate, client, and user services across the enterprise. eCommerce Architecture duties include infrastructure design, secure three tier web application design and deployment, high performance SMTP messaging system design and deployment, integrated Oracle database and LDAP directory application foundation.

• Design and implementation of a secure eCommerce infrastructure, utilizing Netscape Enterprise Server, Netscape Directory Server / LDAP, tunneling and encryption technology and Server O/S hardening.
• Design a secure DMZ / Firewall to permit high-speed web access, VPN/DUN access, and secure eCommerce infrastructure.
• Designed and implemented a secure, reliable native SMTP messaging infrastructure.
• Enterprise Knowledge Management System designer and manager.
• Designed and implemented an Intellectual Capital Repository, Information Management Engine, and User Interface.
• Developed and technically supported company Intranet using latest Internet technologies.
• Designed and recommended Enterprise Web-based Document Management System.
• Recommended and implemented Web enabled Automated Library Software.
• Overall responsibility for programming development for Corporate Services automation solutions.
• Implement and support Netscape SuiteSpot Internet technology.
• Implement and support Microsoft Internet networking technology.

Design Engineer and Data Center Manager for this large scale Engineering Data Center.

Responsible for all aspects of Data Center implementation including functional and technical design, prototyping and configuration, system testing, rollout, and migration support. Environment includes 1000 workstations and 30 servers across eight locations in a switched Ethernet environment. Design included LAN / WAN topology, Internet service points-of-presence, secure remote access via PPTP/VPN, Firewall / DMZ design and configuration, Proxy Server design and configuration, Internet site screening, bandwidth management, and redundant SMTP routing paths.

• Enterprise level Data Center server complex designer, creator, and manager
• Design of new Data Center and Operations rooms including lighting, heating, air conditioning, air flow, electrical power requirements, fire suppression HALON system, and physical security.
• Design, selection, installation and configuration of server complex 30 x Compaq 7000 and 2500 Rack Mounted components .
• Selection and configuration of server complex fault tolerant systems. These services were designed to minimize the total cost of ownership, and included: Multiple RAID Arrays, Compaq Advanced Server Recovery, Compaq Recovery Server Option, server failover, and automated backup / restore.
• Selection, installation and configuration of Microsoft Windows NT Server Enterprise software.
• Planning, design, and installation of Windows NT Master Domain Model.
• Evaluation, design and execution of the Network Security Architecture.
• Planning and configuration of server naming, network naming, network directory services, and network synchronization tools including: DNS, WINS, Netscape Directory LDAP , Windows NT Domain.
• Determination and implementation of systems performance tuning for specialized engineering applications including: CADD, Fluid Analysis, Hydroelectric Power Conversion, Environmental Forecast, Waste Water.
• Planning and design of SNA architecture and security.
• Planning, design, installation and integration of Web-enabled SNMP based management services including: Compaq Insight Manager, Microsoft Systems Management Server, and HP Open View Network Node Manager in a multi-tiered management scheme.
• Management and operation of the server complex including supervising a staff of four Systems Engineers and two technicians, coordinating LAN / WAN maintenance, testing, evaluating and procuring new technologies for Intranet / Internet applications.
• Design, creation, and implementation of RAS Remote Access Services and VPN Virtual Private Networking based on PPTP, providing high speed encrypted access to Intranet services utilizing redundant data channels for both Dial-Up Networking and Internet based VPN access.

Technical Team Leader and Design Engineer for this GE Capital IT Solutions Life Cycle Management client. Environment included 600 workstations and 50 servers in a switched Ethernet/FDDI infrastructure. Duties include migration of 13 resource Domains to Windows NT Master Domain model, migration of all TCP/IP services including DHCP, DNS, and WINS to Windows NT Server 4.0, implementation and support of Enterprise Client/Server applications including Data-Warehouse. Advanced troubleshooting includes HP9000 TCP/IP configuration, Client/Server Application performance tuning across the Enterprise, and Network Security management.

Advanced Systems Engineer and Technical Team Leader for this Microsoft Enterprise 2000 Business partner. Duties include Windows NT Domain design, Windows NT migration Risk Assessment and implementation, Life-Cycle Enterprise Reengineering, Microsoft TCP/IP design/implementation, Network Security and Survivability analysis, and Information Technology Policy Management.

Duties included: Design Engineer/Implementation Troubleshooter of the Windows NT based "Claims Workstation Project" with Zurich American Insurance Group / North America. Designed and implemented an automated installation process to facilitate the expeditious deployment of one thousand Microsoft Windows NT workstations in a complex multi-protocol LAN/WAN environment. This process was implemented into the "Claims Workstation Project" production cycle and directly produced a net savings of over 2000 man-hours.

Assigned to the USS Someship, which is the US Navy s R&D platform for submarine warfare. Integrated data processing systems for weapons control and navigation into a single unified Data and Control System. Designed and implemented a secure Windows NT LAN for processing of classified military message traffic. Both of these projects were completed ahead of schedule and under budget. Net savings: Nine Million Dollars.

Designed and installed a Secure LAN for the Department of Defense s largest and most complex supply system. This 100-workstation network included Windows NT Server 3.51, Novell NetWare 3.12, dedicated application servers for database, anti-virus, and data-backup procedures. The reliability of this ultra critical network was augmented by the implementation of redundant Server cluster technology. Implemented a verycomplex cross platform integration combining Windows NT Server 3.51, a BBS, the Novell LAN, and a legacy Tandem minicomputer, providing secure dial-in access to the Department of Defense s largest supply database.

Accomplishments include: Converted this standalone PC environment utilizing WordPerfect 5.1/Lotus 1-2-3 for DOS to a fully networked environment utilizing Novell NetWare 3.12 and Microsoft Office 4.3 for Windows. Completed one Mediterranean Deployment.

Completed two Strategic Deterrent Patrols on this Fleet Ballistic Missile Submarine.

EDUCATION

DeVry Institute of Technology
Curriculum: Telecommunications Management July 94-Mar 95
Completed 30 credits; GPA: 4.0
Dean s List for Academic Excellence

College of Lake County
Curriculum: Advanced Mathematics, Computer Programming Jan 94-Jun 94
Completed 10 credits; GPA: 4.0

Chapman University
Curriculum: General Education
Jun 93-Dec 93
Completed 12 credits; GPA: 4.0

TECHNICAL SPECIALITIES

Expert Technical Project Leader: As an Enterprise 2000 Business Partner, Microsoft routinely provides training for the staff of GE Capital IT Solutions in Microsoft corporate offices and training facilities. This training utilizes the curriculum normally reserved for the training of Microsoft Consulting Services senior staff. Specific emphasis is placed on the Microsoft Solution Development Discipline, including the Microsoft Solution Framework, a milestone based project management template proven effective and efficient.

Adept network security specialist: Proficient in risk assessment, proactive network security techniques, disaster planning and recovery, and enterprise-wide data integrity. Responsible for the security and integrity of several Department of Defense local area networks. Experience includes Information Warfare and Network Security Audits.

Comprehensive Local Area Network troubleshooting skills: Have restored critical network services to downed networks on many occasions for Department of Defense installations. Was detailed to a "Tiger Team" fast response action unit while stationed at NTC Great Lakes, traveling to various sites and performing emergency restoration of mission critical network services on very short notice.

Experienced Local Area Network manager: Responsible for the design, installation, maintenance and upgrade of several extremely sensitive Department of Defense local area networks, including the largest and most complex LAN at Naval Training Center Great Lakes. This mixed environment included Ethernet, TCP/IP, IPX/SPX, Mini/Mainframe, and a series of remote login dial-up connections.

TECHNICAL CERTIFICATIONS

Microsoft Certified Professional
Certification achieved November 1996

Novell Certified NetWare Engineer
Recertification awarded January 1997

Automated Data Processing Systems Security Officer
Department of Defense Certified May 1995