TechDemocracy is the premier Identity & Access Management (IAM) services and CyberSecurity risk and remediation provider in the industry (http://www.techdemocracy.com). Our worldwide team of 200+ consultants help clients solve complex business issues with custom solutions, more efficient processes and deep industry knowledge. Our consultants gather, analyze, assess and use information from across the enterprise to create value in all aspects of our customer’s organization to ensure not just successful engagements, but success over the entire lifespan of your security infrastructure. Let us show you what we can do for you and your organization!

CyberSolve (formerly Identity And Access Solutions) is an Identity & Access Management (IAM) services and Cybersecurity provider.

Founder of IDMWORKS, an Identity & Access Management Consulting services company.

1) IdAM Architect for Thin Client Entitlements through Oracle XACML based ABAC/PBAC and LBAC.2) IdAM SME for Entitlements through ABAC/PBAC project within overarching DoD IdAM initiative responsible for source selection testing. ABAC/PBAC consisted of COTS & Open Source solutions.3) Identity and Access Management SME, Support and Sustainment for Automated 2875 Sun Identity Manager 8.1 & Open SSO project

Developed User Provisioning & RBAC requirements and architecture pre and post Oracle IAM stack vendor selection.

1) Oracle Identity Manager and Oracle Identity Analytics implementation over OID and OVD.2) XACML based ABAC for Fine Grained Authorization.3) Net IQ AGS POC leading to implementation.

Single Sign-On/Context Management (SSO-CM) – ESSO Architecture/Engineering Team Co-LeadImplementation of ESSO (Citrix Password Manager for XenApp SSO) and CareFX context management solutions in a clinical environment for active military personnel. Employee populations included clinical employees in a shared workstation environment (Hospitals, etc.). Created and managed CDRL documentation (including Business and System Requirements, Flows, Process, Architectural and Traceability Matrixes)

Project Technical Lead for Oracle Identity and Access Management stack implementation (OIM, OAM, OVD, OID) for external (customer facing) federated SSO, internal SSO, external and internal Identity provisioning, password management and synchronization.Project Manager, SME, Architect (for each of the following projects):1) Federated Identity & Single Sign-On External SSO & Provisioning for customer base including account and password reset registration services, authentication and authorization to multiple HC hosted and 3rd party hosted applications.2) Directory Services – Replacement of Identity services from Active Directory and RACF to Oracle Internet Directory. Utilization of Oracle Virtual Directory to provide centralized view across multiple LDAP, Database and Application stores.3) Enterprise Roadmap & Architecture – Developed 1,3,5 year roadmap including above services as well as Software as a Service (SaaS) Cloud computing, Governance, Risk and Compliance (GRC) including Role Management and RBAC and Federated Identity and SSO services.

1) Federated Identity Matching (utilizing Initiate: Master Data Management) - Architect, PM, and Technical Delivery ManagerResponsible for project planning and managing a full lifecycle COTS implementation of Identity Matching (Discovery through Production) using Initiate Master Data Service as subscriber data warehouse and identity matching engine. Developed Solution Architecture pertaining to overall Enterprise and Business Architectural models.2) Duplicate Identity Cleanup - Architect, Project ManagerResponsible for planning and managing a technical team consisting of 8 resources in identification and remediation of incorrect SSN data for @25K users. Incorrect and orphan Identity data scrubbed and/or corrected prior to launch of automated provisioning application implementation.3) HIPAA 5010 - ICD 10 Mandate Compliance Initiative - Project ManagerResponsible for project planning and managing a 35 team member Discovery phase of multi-project strategy and definition for work beginning in 2009 and completing by 2013.

1) Federated Identity Management – Identity Management Architect, SMEArchitecture, design and technical management of RSA Federated Identity Manager implementation for federated application self-service registration, account linking & synchronization between both customer base and merged company applications (Schering Plough). Schering Plough applications required additional (two-factor) authentication utilizing existing Merck RSA SecurID.2) Identity Management/Identity Provisioning – Identity Management Architect, SMEArchitecture, and planning of integrating legacy provisioning application (CA eProvision 3.0) in existing Sun IdM 8 implementation due to merger of Schering Plough (CA environment) into Merck (Sun IdM Environment).3) Web Single Sign On – SME, Architect, Project Lead, Technical Delivery Team Manager Architecture, design and technical management of replacement of CA SiteMinder with RSA Access Manager (formerly Cleartrust).

1) Identity Management PM, SME, Architect and Tech LeadResp for project planning & managing a dev team of 12 resources in deploying a Sun Identity Manager 7.1 full lifecycle implementation. Designed physical &logical architecture, business & system reqs, PW management use cases, provisioning workflow cases, test cases, and training. Resources provisioned to included AD, Sun Role Manager (Vaau RBACx), QBlue and NASCO. Presentations to Architectural Review Boards, IT & Security Governance, HR and Business & End User groups. Trained technical staff & end users on Sun IdM & RBACx toolsets.2) Access Management PM & Technical LeadResponsible for managing a dev team of 15 resources in deploying Sun Access Manager 7.0 (replacement of BMC’s UIdP) from Dev to UAT to Prod implementation. 3) Federated Single Sign-On (SSO) PM & Tech LeadResponsible for managing a dev team of 9 resources deploying SAML 2.0 plug in for Sun Access Manager to allow for Federated SSO. Managed network, development and delivery from Horizon side to Federation partners. 4) Role Based Access Control (RBAC) SME, AnalystEvaluated current role development & assignment processes, created gap analysis, instituted short term process improvements for manual role assignment while developing process improvements via Sun Role Manager 4.0.3 (and Vaau RBACx 3.2.10) application. Baselined enterprise roles & analyze toxic combinations (separation of duty reports) & restricted roles by analyzing HR & target platform reports. Worked w/ Auditor & internal security & role management personnel to eliminate pain points in manual process as a gap step to full workflow, tasking & forms based Role request system provided by Sun Identity Manager implementation. Worked w/ business to redefine the role governance process & business process for modification, approval & removal of roles.5) Identity Management Strategist/ArchitectRoadmapped 5 year IAM architecture & work streams for presentation to CTO/CIO.

Serving as contractual Master Integrator on multi-phase, multi-project Identity and Access Management program (IdM, SSO, PKE, CAC).Identity Management Architecture, design, and analysis in support of Homeland Security Presidential Directive-12 (HSPD-12) Common Access Card (CAC) implementation, Application Single Sign-On (SSO w/ Sun Access Manager) and Self-Service Registration (Provisioning w/ Sun Identity Manager-Service Provider Edition) with password management.

Identity Management Architecture, design, analysis and management. Provided Identity data for future roadmap in Provisioning, Access Management and Federation as well as multiple project roles. 1) IdM Distributed (Multiple Instance) Provisioning Project - IdM Arch.: Analyzing Sun IdM v.6.0 in a Spoke and Hub method in which multiple instances of the provisioning application to be utilized. 2) Data Warehouse for Identity Audit – IdM Arch.: Arch. for Data Warehouse project for storing historical Identity audit data (who has access to what, when, who approved, etc.).3) Sun IdM v.6.0 SP1 POC– Tech Lead, Arch., Bus Analyst:SIM 6.0 proof of concept leveraging existing SIM instance as well as legacy provisioning tool utilized to determine the viability of a Federated provisioning model. 4) Prov Data Remediation Initiative – Bus Analyst, Tech Editor, QA: Amalgamation, Quality Assurance and validation of all Identity Management Design, Architectural documentation and artifacts

At the Center for Medicare & Medicaid Services1) IdM Provisioning Project - Project Lead, Tech Lead, Sys Analyst, SMEProject, Tech design & planning of multi-phased implem. of Sun Identity Manager 5.5 & 6. Phase I: Fixing existing prov implem. due to vendor replacement. Temp fix phase included Modify and Deprov tasks & hard coded roles, rules & process in dynamic workflow. Phase II: Replacing Sun IdM infrastructure (Sun One dir w/ improved DIT, Sun IdM 6 for internal, Sun IdM – SPE for external) w/ integration of multi-plat apps w/ Sun's Identity Sys (Sun IdM, SPE, Sun Access Manager). 2) IdM Federation Project – Sys Analyst, SMEIntegration of Sun IdM – Service Provider Edition (SPE) for registration and self-admin of Medicare/Medicaid app for a user base of 65 million. Delegated admin for partners and customer self-serv. Federated prov for facilitating business interactions among medical practices. Audit & reporting of prov and federated transactions.

SME, Management, Design and Architecture on IdM work streams: Provisioning (Sun Identity Manager) and Federation (Ping Federate) leading a team of 14 people.1) IdM Provisioning Project - Project Lead, SMEPlanned & ran implementation of Sun Identity Manager 5.5 (dev) & 6 (dev/QA/production) as replacement for homegrown provisioning system into AD, UNIX, RACF, Peoplesoft as well as hundreds of applications & databases. Created high level & technical project plans. Vetted Architectural diagrams. Wrote Business Requirements, System Requirements, & supporting IdM docs. Ran current state documentation & future state planning sessions.2) Federation Project – Project Lead, SMEImplemented Ping Identity’s Ping Federate v.2.1 using SAML 1.1 protocol to provide authentication, attribute & authorization portability across autonomous security domains for UHG partners and customers (ie. used PingFederate to enable standards based SSO & attribute exchange across domains).

SME, Management, Design and Architecture on multiple IdM work streams, Access Management (SSO, Application Security & Entitlements via Entrust’s Get Access and BMC’s Control-SA), Password Management, Provisioning, Delegated Admin, Third Party Data Management (Federation) and Directory Management with a team of 16 people.1) IdM Provisioning Project - Team & Tech Lead, SMEWrote Business & System Requirements, RFI, RFP and supporting documents to Vendor selection. Ran POC. Planned & ran implementation of Sun Identity Manager.2) IdM Sarbanes Oxley Project (Access Management, Centralized Workflow)- Tech Lead, Sys Analyst, SME Planned and ran parts of Sarbox technical implementation using Sun IdM as a centralized workflow in a 90 day implementation model in order to achieve regulatory compliance. Additionally planned and implemented Disaster Recovery. Environment manager for Dev, QA, and production environments. 3) IdM Workforce Lifecycle Project - Business Sys Analyst

1) Identity Management - Sr. Analyst, Prof Services and Tech Specialist rolesImplementation and support of Identity Management software including eProvisioning, (now part of CA eTrust Admin), Netegrity SiteMinder 5.5, Netegrity IdentityMinder 5.6 w/ Web and Provisioning modules and associated support software including LDAP directories (AD, Novell Dir Services, iPlanet, IBM SecureWay), multi-NOS platforms, Database (SQL 7, 2000), ILOG J-Rules (Java based) and VB Script.2) Identity Management - Corporate Training (Technical).Responsible for design, dev and delivery of proprietary Identity Management curriculum and non-proprietary technical curriculum, courseware, policies and procedures, created courseware images, and management of corp IT training staff. Designed and presented six training programs that established a standardized, consistent curriculum for worldwide training services for both technical and non-technical clients and representatives.