Doug Sumner Email & Phone Number

Part of Cisco Sr. PM team responsible for the implementation of the Cisco V2P Cloud DVR solution for AT&T DirecTV US data centers. Responsibilities include: * Led Cisco engineers to deliver As-Built physical, logical and support documentation to meet AT&T SOW milestone acceptance criteria. * Managed Lab/Staging configuration data capture. * Managed the program level Microsoft Project schedule.

Santa Monica, California

• Public Key Infrastructure – Led the build out of a new PKI using Microsoft AD Certificate Services (AD CS), to build CA, Root, Policy, Issuing servers and HSM key store. Led the development of RAND PKI procedures, Practice Statement and Key Management Plan. Managed the new Root certificate deployment to servers, endpoints, appliances and network devices. Led the rollout of the new certificate request and certificate revocation processes.• Proxy SSL Inspection – Led the implementation of Bluecoat SSLv visibility appliances, Gemalto HSMs, and FireEye security appliances, in RAND data Centers. • Carbon Black (Bit9) – Led the deployment of Carbon Black Protect High Enforcement on RAND servers and endpoints. Coordinated and documented application white-listing, High Enforcement, and staff impact assessment and communications.• Storage Replacement – Led a Jira Agile project to select and implement new Pure Storage FlashArrays in Santa Monica and Pittsburgh, replacing Hitachi HUS and VSP. Led product discovery effort (5 vendor selection process, FlashArray installation, and server/data migration.

Santa Monica, Ca

Information Security Project Manager Project Manager responsible for leading FISMA compliance leads, technical SMEs and Business Unit managers through the NIST RMF (Risk Management Framework). Using the Lockpath Compliance Manager application, I managed compliance activities, enterprise security policies/procedures, and NIST controls. Led the effort to reach enterprise-wide consensus which control solutions would be implemented that addressed security audit items and closed management correction action plans (CAPs). Obtained cross-enterprise alignment, funding and the global management sponsorship needed to successfully implement NIST control solutions, including: • Symantec DLP architecture – Led the implementation the DLP product suite across mobile, storage, network and endpoints. • Symantec Data Insight tool – Led the implementation of the Data Insight tool used to do discovery on unstructured data that was needed to identify and assign data owners to clean up, classify and archive their unstructured data (i.e. file shares, engineering repositories).• Titus Classification suite – Led the implementation and rollout of the Titus classification tool used by data owners to classify unstructured data. Deployed globally and used by up to 140,000 Honeywell employees in 120 countries to classify their newly created or opened existing documents.• Vulnerability Management – Led the development of an enterprise vulnerability management strategy; implemented the McAfee Vulnerability Manager and scans, Lockpath Security Manager, and patching and incident handling procedures. Identified and addressed vulnerabilities, including SAP.• Defined and deployed DLP policies – Led the deployment DLP agents to protect: (DIM: HTTP Block; DIU: Https Block, Exiting employee and high risk activity; DAR: Sharepoint and, Documentum policies).

Information Security Project ManagerAmerican Express Security Assessment and Uplift - Security Program Manager on a cross-functional team of 6 IBM Executive Project Managers brought together to significantly improve IBM managed services at Amex, or risk losing the account (i.e. 9 month Crit-Sit lead by IBM VP). Responsible for Leading IBM teams using the NIST Risk Management Framework to assess the current vulnerabilities, risk and threats to mainframe, server and network platforms. Mitigated weighted risks with appropriate investments in security controls and solutions, including:• DMZ/Firewall redesign and implementation• AAA strategy using Active Directory for user and device access• Secure Single Sign On, SAML and federation• IDS and IPS logging and mitigation• Wireless uplift to 802.11/XEA gateways and AES/CCMP (encryption protocol)• Network switch port security policies and hardening• Server hardening and OS upgrades• IBM mainframe security improvements (i.e. Parallel Sysplex, JCL job updates)• z/TPF user security database (RBAC resource and data access privileges)• Revised SAP PI and EDI policies, interface cleanup and mitigation strategies Infrastructure Project ManagerCisco UC - Systems Integrator and Program Manager responsible for an enterprise VoIP implementation across multiple locations, campuses and manufacturing facilities. Responsible for the integration and management of Cisco, AT&T, and IBM contracts and deliverables, including SIP Trunking, PRI circuits, SRST, Cisco MCS7845, C2951 gateways, VG 224/220, Exchange integration.

Managed large mainframe and distributed-based transition programs; created and maintained MS project plans for program level management of 5+ concurrent business critical application projects.Charge Authorization System - TPF-based POS card swipe system processing 25k transactions per second. Electronic Money Movement - Distributed and mainframe-based bank clearance system using VMware, Websphere, SAN, UDB, Windows and Unix.Credit Servicing Platform - Linux Web-based customer service representative system for structuring card payments. Marketing Data Warehouse - Distributed and mainframe-based global data warehouse used to execute card marketing campaigns and business intelligence analysis using Cognos and UDB. Managed enterprise-wide infrastructure transformation and upgrade programs; created and maintained detailed MS Project plans for complex projects, including:Security Infrastructure Uplift - Managed data center security policy uplift, including threat identification, encryption policies, DMZ/firewall design; AAA strategy using Active Directory for user and device level access, Intrusion Detection and Intrusion Prevention logging and mitigation, wireless 802.11/XEA and AES CMP, and switch port security policies.Parallel Sysplex Uplift -Clustered IBM mainframes together using a single z/OS system image, requiring the update of all JCL jobs to enable high availability.Data Center Consolidation - closed the Minneapolis midrange and web data center and migrated all applications to the Phoenix data center.Development and Test Environment Uplift - Designed and implemented data center processes and procedures, staffing, and service level agreements.

Phoenix, Az And Brighton, England

International experience managing an American Express product development team, based in Brighton, England for two years, with staff in Wiesbaden, Germany; Managed product managers, business analysts and applications programmers to develop Amex Corporate Card information products used by corporations to negotiate airfares, hotel rates, and car rental agreements. Designed, managed development and market rollout of industry leading Amex Online Information Services web site for Corporate Card Information productions and program administration. Designed, managed development and market rollout of Amex proprietary Low Fare Search and only reservation system that interfaced real time with IPARs (Sabre, Galileo), to process Corporate negotiated airfares, hotel rates and car rental rates.

Boston, Ma

Response for entire product management life-cycle for interoperability communications protocols, including TCP/IP and IPARs.Developed market collateral, technical product documentation, and provided trade show presentations introducing TCP/IP as common protocol for interoperability between Wang VS and other vendors hardware, (e.g. IBM).Managed joint venture with British Airways and Ford Europe to develop real time interface between Wang Office applications the BA airline reservation system using IPARs protocol.

Boston, Ma

Ba, Political Science And Business

Post-Graduate Computer Programming