Jonathan Backus Email & Phone Number

Hagerstown, Md, Us

San Mateo, Ca, Us

Led a team in the development and support of the Identity Access Management program, including Identity Management (IdM), Application Book of Record (AppBOR), Central Access Provisioning (CAPS), Role Based Access Control (RBAC), Identity Governance & Administration (IGA), Access Review & Recertification (ARR), Privilege Access Management (PAM), Separation of Duties (SoD) controls, and Access Management related Governance, Risk, and Compliance (GRC) controls. Utilizing tools Okta, Slack, Jira/Confluence, Sumo Logic, and LastPass.

Woonsocket, Ri, Us

The primary part of this job is Product Manager for User Behavior Analytics (UBA), Identity Governance & Administration (IGA), and Privileged Access Management (PAM). UBA is the systematic data science of capturing all the events or activities both within and associated with an enterprise, including cloud monitoring. Correlating those events with the entitlements that gave somebody the ability to do the event. Associating those entitlements to the accounts that granted the access to them. Finally, link the accounts back to a human profile. This allows for the normalization of a person’s behavior patterns over time and then observe anomalies or unusual behavior that could be an indicator of compromise (IOC) or cyber-attack. Using DevOps and Kanban, this is done with the aid of the applications Gurucul Risk Analytics, Splunk, Tableau, Tanium, and SNYPR (Securonix).IGA is the collecting of all Identities or “actors” that have any access to any CVS electronic system. Then the correlation of every account that was provisioned to each actor to work within a resource. Finally, the collection of every entitlement granted to each account so when they authenticate to a resource with their account they are authorized to perform some actions. The entitlements include supplemental information, such as privilege flag, risk rating, and owners. I’ve had a central role and involvement with Privilege Access Management (PAM), Separation of Duties (SOD) analytics, Access Review & Recertification (ARR), Central Access Provisioning (CAP), Role Based Access Control (RBAC), and enterprise Governance, Risk, & Control (eGRC).PAM is the program of using the IGA repository of all accounts that have privileged entitlements granted to them. First to make sure all privileged entitlements are assigned to the correct accounts and second, to make sure that all privileged accounts are vaulted for extra security and monitoring. Tools used here include the IGA solution (EDW) and BeyondTrust.

Woonsocket, Ri, Us

Aetna (Acquired by CVS Health 2018)Patch Management and Software Currency over-sight and governance for the Enterprise. In this role I am the Infrastructure interface to the Global Information Security team. I developed the governance documentation, process workflow, and central in-house application for Patch Management. I oversaw the monthly execution of the patching process across all device types, exception request processing, and Patch Incident Management (PIM). I managed the process to address any patch based vulnerabilities that did not get addressed in the recurring workflow. Tools used for these effort include SCCM, Tanium, Qualys, Archer, an in-house Global Security application called TVA, and an in-house Infrastructure applications called EUPM. Also during this time I was the Product Manager for Tanium and oversaw the initial implementation of Tanium enterprise wide for workstations and Citrix servers.

Woonsocket, Ri, Us

Aetna (Acquired by CVS Health 2018)Manage a distributed team of engineers (10) in two main disciplines. Part of the team are SharePoint 2013 certified developers and we provide internal SharePoint customizations. We transition “out of the box” SharePoint sites into web portals, including workflow, etc., while retaining the SharePoint administrative functions that allows the business (i.e., non-IT folks) to manage their own content and user access. Part of the team are System Engineer / Developers that create tools to automate manual workflows, thus speeding efficiencies and reducing human error. We utilize standard development tools, such as VB.Net, C#, C++, Java, PowerShell, Microsoft System Orchestrator (SCOrch), and MS/SQL.

Woonsocket, Ri, Us

Coventry Health (Acquired by Aetna in 2013)Manage a team of 13 Engineers in the deployment, support, and patch management of all Windows Server based applications and middleware including virtualized desktops. We achieve this with the use of such tools as Altiris, SCCM, WSUS, ePO, Provisioning, Streaming (AppV), Citrix (XP, 4.0, 4.5, 5.0, 6.5), AMC/CMC, XenDesktop, Insight Manager, OpenView, Foundstone, Remedy, and SharePoint. Additionally, we are the technical support for all IIS, SSRS, TFS, Project Server, SharePoint, Faxcom, and Xendesktop (VDI) environments.

Woonsocket, Ri, Us

Coventry Health (Acquired by Aetna in 2013)Manage a team in “six sigma” style support of the Corporate Finance and Human Resource applications, including PeopleSoft Finance, PeopleSoft HR, Hyperion Essbase, Kronos, SunGard (ICMS/eTX), SalesForce.com, Commercial Broker Commission, Marketing Knowledgebase, Identity Management, payroll, and various purchased and in-house financial and HR applications. Project Manager for all initiatives in my area of responsibility utilizing a highly structured methodology. Regular direct interaction with senior management on both the business and IT sides. Responsible for support and enhancements using VB6, VB.NET, Crystal Reports, Web Intelligence, People Code, Project Server, HP Quality Center, LoadRunner, ASP.NET, SharePoint, Remedy, STAT, TOAD, Oracle 9i/10g, MS-SQL 2000/2005

Göteborg, Se

Manage customer relationship and all aspects a multi-million-dollar sales forecast. As Application Manager, provide leadership to a staff of 16 application support professionals who create and maintain SOX compliant applications on the mainframe in CICS/Cobol, Windows using .NET (C# and VB6), and OpenVMS. As Service Manager, oversaw an additional 19 staff members maintaining on-site resources for voice and data communications (LAN/WAN/WLAN), end-user computing, server support, and traditional mainframe operations. Services: Mainframe operations, server administration, engine electronics, desktop / printer / fax / copier support, voice and data communications, and applications support (mainframe, .NET, C, Oracle, and MS SQL)• As Senior Site Manager, led the creation of a support organization encompassing data / voice networking, server, end-user computing and application support. Took Volvo Powertrain North America from a 8x5 batch oriented mainframe environment with low computerized involvement to a 24x7 extremely automated environment with real-time computer applications that controlled every aspect of the manufacturing process down to the socket and pressure needed in torque wrenches.

Developed and managed this IT based company providing remote and hosted system management. Handled contract programming in all major languages, web site development and support, policy design and implementation consultation, in addition to IT personnel management, security administration, database administration, and performance analysis. Facilitated extensive classroom training on various IT related topics.Equipment: HP e3000, HP9000, Windows NT, Linux/Unix servers, Cisco routers & firewalls, VPNs, and Windows95/98/NT/XP workstationsTools: COBOL, JavaScript, Perl, HTML, Visual Basic.net, and Supertool

Us

Created and managed the Information Technology department to include security, administration, database administration, server and network performance management as well as Network / Server / PC / Printer maintenance, and the development and enforcement of policies and procedures. Led the research and development of emerging technologies, acquisition, and installation and integration of all hardware and COTS software packages.Equipment: HP3000 Servers (5), Novell Servers (13), Windows NT Servers (17), Linux/Unix Servers (3), Intel PCs (600+), Macintosh PCs (6), Cisco routers & firewall, and 3Com hubs• Deployed and supported a Virtual Private Network (VPN); Frame Relay Wide Area Network (WAN); Intranet; Help Desk; Electronic Commerce Data Portal; Data Warehouse; web enabled, software based telephone PBX; workstation video and audio quality control; Computer Telephony Integration (CTI); Eastman Workflow Imaging; Automated Warehouse Distribution; Web, FTP, and SMTP site hosting, network monitoring and management via SNMP; and contingency planning.

Frederick, Maryland, Us

Provided leadership and guidance to a team of programmers and analysts in the design, development, maintenance, and support of municipal government applications.Equipment: HP3000 (MPE/iX), HP9000 (HP-UX), Novell, MS-DOS, WindowsTools: Speedware, COBOL, Delphi, Visual Basic, Adager, Omnidex, dBase III+, WordPerfect

Led a team in the development of an ANSI/EDI compliant, NIST certified, DES based encryption sub-system for the HP3000 platform. This project included the creation of a 3-layer Key Management Agent (KMA); Host Management System; library of encryption, digital signature, and challenge/response sub-routines; Stand alone utility of all functionality; and hardware based encryption server.

Led application programming for small consulting companies in addition to the following:Manager of Information Systems for Reliable Mortgage (Keystone / Banc One)Programmer / Analyst for American CyanamidContract Programmer for E.I. DuPontProgrammer / Analyst for EDS

Bachelor Of Arts - Ba, Computer Science

Aas, Computer Science