Currently working on Fircosoft upgrade and infrastructure initiative to keep the system up all time (neverdown). Other responsibilities include java application fixes and enhancements. Creating a new more efficient bash shell scripts.

* Configuring Regulatory Reports such FR 2900, FR 2915, FR 2644, FRY 9LP, FR 2052a, FRY 15, TIC, and others. * Setting up GPG on Linux for PGP Encryption. * Upgrade and Migration of JIRA Application. Installed the plugins and necessary tools to first upgrade to the current version for Migration compatibility. Over 127 projects were migrated with the fields, profiles, screens, etc. * Upgrade of SVN repository and Jenkins along with Redhat OS, MSSQL, Apache. Set up the new servers. Installation of public/private key pairs to securely copy data for upgrades and migration. Configure the new upgrade to work with other applications such as JIRA. * Install and upgrade third party application from WKFS for Regulatory Reporting* Worked on Web application to enhance the integration with WKFS. Developed in JAVAconnecting to MS SQL Server running on Tomcat Apache* Designed and developed bulk uploading of transactions via the Web application to load and retrieve data from Snowflake Cloud.* Troubleshoot Production issues for both backend (Database) and frontend (GUI) * Used AppSpider, CheckMarx and NetSparker to analyze code and fix any security. vulnerabilities

• Worked on Enterprise Transaction Scanning Application for OFAC AML compliance. The project required migration of the entire system to comply with Corporate Security on application, servers, and network level.• Installed and configure third party software Fircosoft (FFF, FML, FMM) to work in conjunction with Scanning application. • Developed and Modified Java Programs that worked in part with Fircosoft and Scanning Application. Made sure the Java programs were secured with SSL mode. • Upgraded software, server and application to work with TLS 1.2 • Issued Security Certificates for servers to communicate securely with Message Queues• Develop bash shell scripts for deployment and maintenance for the Scanning Application.• Upgraded the NAS mounts to comply with Security Guidelines• Installed and configure war file developed in Java with SQL for Tomcat Apache servers as part of Security Guidelines• Configure CITRIX Servers for the Fircosoft Application as part of the Security Guidelines• Configure Windows 2016 Servers for the Fircosoft Application as part of Security Guidelines• Worked in Oracle 12 DBAAS and made sure grants, roles, tables, triggers, procedure, constraints, etc comply to the Security Guidelines • Worked with IBM Message Queuing Cloud to communicate with Scanning Application as part of Security Guidelines• Worked with Connect Direct to process large files for scanning into the Application and made sure it complies to Security Guidelines• Responsible to build, deploy and maintain over 25 RedHat Linux (Unix) and Window 2016 Servers• Developed code in Perl to take Global Watchlist to find new attributes to search for OFAC violations• Worked in Agile environment with GIT Repository• Configured Ansible deployment with YAML code • Configured JIL files for Autosys application to run scheduled jobs

Worked on application to deliver a report of suspected Robocallers on a daily basis for both VOIPand Mobility records into a spreadsheet. This helped the company identify and block spam callerson the network. This reduced the traffic on the network and potentially stop customers of AT&Tto become victims of spam callers. The reports consisted the following information; identifysuspected robocaller phone number, the number of calls within 24 hour period, owner lookup,number of calls that were answered, first and last connect time, average length of call, are thenumbers on the Do Not Call list, the network carrier and their resellers. A monthly report wasgenerated to produce a chart of the number of calls blocked and identified. Other reports includedidentify Neighborhood spoofing, Caller Id Spoofing, carriers with the largest number of spamcallers, number of spam calls by state. The application was done in PERL using modules tocreate Excel spreadsheet, shell scripts, and Cymbal (PL/SQL) query to lookup Daytona(AT&T propriety database similar to Oracle) table with PHP web frontend. Enhanced(Analyze & Monitor Call Data) AMCD website, an application to analyze and monitor AMArecords to search for Transfer Connect records and display them as group of records for onecomplete call. This allowed toll free customers of AT&T to subscribe to new features that thecompany supported. This required adding attributes to all form elements so it would work with ADAequipment. Other development included upgrading Perl modules to work with latest Ciphers fordelivering reports via SFTP, change the SSH to allow password less delivery of reports. Modifiedthe AMA streamer, which was written in C language, to accept new fields (AMASLPID) fromAMA records, update the tables in Daytona to save those records, and GUI was modified to querythe new field. The web application was built in Perl, CSS, HTML with Javascript validationand LDAP.

Designed, developed and executed Oracle SQL queries using PL/SQL via spools to handleand extract large amounts of data (Big Data) from the database. Responsibility to develop,maintain, and upgrade Total Cost Ownership Application. The application produce reportsand allowed forecasting using a module to enter data for all applications in Citigroup. This wouldallow application owners and higher management to make budget forecasts for their departments.The web application was built in CSS, HTML, JSP, Java with Javascript validation. Also,JSON files were used for tree structures that would reflect management hierarchy or departmenthierarchy. It is also involved backend calls to SYBASE via procedure and sql queries .Responsibilities also included to troubleshoot bugs in the application and enhance features bothfrontend and backend. Other responsibilities of the project required web server configuration tointegrate Single Sign On and Deployment of the application via Hermes tool (Citigroup'sdeployment interface). Also, enhanced the upload capability by converting Excel documents toAscii Text to be used by procedures to insert data into tables. To avoid the application fromgetting frozen I implemented checkpoints to analyze how much data will be extracted by thebackend and set thresholds for it. Using this I developed a frontend reporting tool called AdhocReports that would allow users to make more custom reports rather than the canned reports fromother tools in the application. Assisted in a second project, ITBM, which also was a reporting andforecasting application. The application was a third party tool by VMWare called Digital Fuel.It used Oracle as the backend. Responsibilities included to setup application and databaseservers, userids, functional ids, installation of Digital Fuel in Development, UAT, Productionand other system administration tasks. Also, setup the infrastructure to transport files fromShared Windows environment to Unix hosts

• Initial project was on (Analyze & Monitor Call Data) AMCD website, an application to analyze and monitor AMA records. The web application was built in Perl, CSS, HTML with Javascript validation. It is also involved SSH calls in Korn Shell to backend system to retrieve customer data and LDAP to authenticate and set customer profile. Responsibilities included to troubleshoot bugs in the application and enhance features. • Other responsibilities of the project required web server configuration to integrate AT&T's authentication scheme CSP (Single Sign On) which was built in PERL and Java. Also, designed and build an audit program to validate customer data and report discrepancies between Business Direct LDAP and AMCD LDAP. In order to analyze the usage of the web application, I generated programs to do web analytics to find which browsers customers were using and which part of website was actively being used. At times took upon extra responsibility to do network analysis to troubleshoot outages and issues. • Assisted in a second project, SCAMPWEB, which is similar to AMCD as an application. Specific enhancement was made to transpose codes into its ASCII values dynamically via web application. Third project was FASTR, Fraud and Service order Tracking, specifically Uverse Orders. Again, a web application in Java, AJAX, Jquery, JSP, CSS, HTML that made backend calls via SSH written in Korn Shell using web server Tomcat. • Further responsibilities included to write cymbal programs (Query programming language made at AT&T) to query and update tables in Daytona (AT&T's proprietary database). • Also was involved in whitehorse operations (handling of data feeds), massaging and preparing the data thru C programs, for Daytona tables. This lead into the design and implementation of handling Golden Gate feed (AT&T's CRM and Order System) to retrieve, upload/update the data into Daytona tables and design query programs to extract data.

• The company provides B2B solutions for its customers. My assignment required me to head the overall project of transactioncity.com, the company’s web portal, including setup and troubleshooting the network and software architecture. • The project also required to place all the web applications into production and the integration of each application to produce a central administration, accounting, registration of users, etc. Web applications included E-commerce storefronts, newsletters, calendars, domain and hosting services, and other applications geared to promote web sites for small to mid size corporations. • Also, provided clients with Web 2.0 type trends like Wiki and Blog websites. Operating Systems, products, and languages were HTML, DHTML, AJAX, CSS, C, Perl, AWK, SED, Unix, Java, Javascript, JSP, SQL and Apache web server. Most of the web applications required coordination with other software programmers/consultants for final deployment of the application. • To ensure that applications worked, I also headed the configuration for the network and systems. This required me to make sure right upgrades and new software installations were done properly and it would not interfere with other applications. This job required me to make final decisions on IT issues for transactioncity.com to work efficiently.

• Security auditing of vendors. Company needed to evaluate travel management companies to determine the security of the vendors was in place before choosing DTA. • Responsibilities included going out to vendor locations and audit current security practices in physical access, network security, host security, and information security. Vendors included American Express, Carlson Wagonlit, Rosenbluth, and Total Travel. Systems involved SABRE, Amadeus in both Unix and NT using C, Java/C++, and Perl. • Participated in bringing up agere.com public website in making sure cgi programs were working and securely written. Configured the webserver iplanet and implemented authentication schemes. Operating systems, packages and languages were Unix, Netscape web server, C, Perl, Java, and Javascript. • Other responsibilities include product evaluations such as biometric products for computers and other physical access areas for Windows NT. Further evaluated web surfing issues and recommended surf control for solution on Unix Platforms. • Designed and programmed JAVA Applet/jar file to display all company’s location with timezones. Designed a database to hold urls/email addresses coming from spam and passing the information to network group to block them done in Perl in Unix. Also, designed and developed security web site for the intranet for security policies, antivrus information/downloads, travel security information, and scenario site (FAQ) for security type issues using HTML, Perl in Unix. Vehicle registration database for registering employee vehicles thru companies’ intranet using HTML, Javascript, Oracle, SQL, and Perl. • Also, participated with emergency communication systems to put into place for emergencies occurring within company and sending messages out to employees into audix. Designed and implemented a KIOSK for the telephone directory using Microsoft Access on Windows NT.

Assignment: • The project required defining a security solution in transporting Propriety data to partners/customers regarding chip quality and design. Responsibilities included in coming up with the architecture of the system right down to the hardware and software to be used with the correct versions. • The whole project was in the Unix and Windows Operating Systems, requiring the use of C, Perl, Java/C++, Javascript and Netscape Enterprise Server. After planning the system, began the custom web site to transfer encrypted files from behind the firewall to partner/customer. The users would have to authenticate in through 128-bit encryption SSL and provide passphrase to decrypt data. • Needed to modify RSA encryption to work with the decryption of data. Part of the security also required user-input and data-input checks. Custom NSAPI was developed to block brute force attacks during authentication and timing out sessions. After the application was being used other security issues were investigated. • Implemented tripwire to make sure the integrity of the systems was not breached. Audited logs to see if there was intrusion into the system. Implemented SSH to securely log into systems. • Implemented antivrus software (McAfee) to make sure viruses did not get through into customers systems. Turned off all unnecessary ports/services on systems and went through the system to check for permissions and turned off setuid/setgid on all unnecessary executable programs. • Updated the systems with current patches and check to see other vulnerabilities on security web sites. • Ran NMap to see if ports were open on the system and find other vulnerabilities. Used custom staging program for transfer of encrypted files from inside of the firewall to external webserver. Also, did product evaluation of security software like Appshield.

• The project began with defining, documenting, and developing standards for application development for the internet. Using these standards, the following sites were created: handling webmaster email using the web, producing press releases using the web, developed a web interface to find stores and batteries for Consumer Products, converted data from MSAccess database into Oracle7 which then using a web interface help locate services for Open System Innovations (Wireless Group), and created an extranet that used RSA for encryption/decryption of files. • The project also involved design, develop, and execute system testing for applications, tools, and documenting results. Using this model, applications went through testing that started with basic HTML/JavaScript to full security code review for CGI Programs in PERL5 and C. Modified and enhanced current tools to handle more sophisticated applications, such as handling JavaScript, better able to have linkcheckers handle frames, and also to better document the results. • Troubleshoot the company’s intranet e-commerce site which was written in Weblogic. Also trained 5 people for system testing. Then continued in the project to ensure smooth operation for the production environment. Tasks included setting up cronjobs, creating users, multilevel authentication, configuring the web server for mappings, redirects, password protection, configuring mailback, ensuring files are placed correctly on audio/video server, and customized search interface. • Ran web analytics tools with WebTrends to report website traffic to manager. Part of the project required to specify development and production hardware/software requirements and standards as part of the architecture. This is involved to integrate a testing/production area into the current architecture. • Finally, customer interface to Corporate Public Relations to handle customer requirements and develop programs/applications for the top level (including home page).