Accountable for supporting Shell global OT security community regarding technical standards, technical assurance, capital projects, external engagement, competence assessments, etc.** Perform technical interviews of candidates for OT Security Technical Authority (assurance role).** Refreshed OT Security Design and Engineering Practice (Q2 2022).** Developed and rolled out OT Security Risk Assessment methodology and supporting tools and training based upon IEC 62443 Part 3-2 Risk Assessment.** Provide OT Technical Assurance on major capital projects such as Vito, Whale, and Sparta semi-submerible production platform, Gato do Mato FPSO as well as energy transition projects related to solar, wind, biotech and hydrogen projects.** Developing methods to integrate safety and cybersecurity risk assessment.** Participated in Open Group Open Process Automation Forum Security sub-committee.** Working with Oil & Gas Drilling industry to high grade OT Security requirements as part of Shell project to manage OT security risk in Wells business.

I joined Shell as direct employee and continued to work in the industrial control and safety system (ICSS) cyber security and network architecture domain. I fulfilled subject matter expert and technical authority roles for Shell Projects and Technology industrial automation group. In these roles I assisted in the development of the Shell global standards related to ICSS cyber security and overall system architecture. Additionally, I worked directly on projects as technical authority responsible for the assurance of ICSS Cyber Security and System Architecture. Projects have included Olympus Host, Gumusut Host, Stones FPSO, Carmon Creek Wells, Appomattox Host, Vito Host, Pennsylvania Chemicals Project and others.

I worked on the Shell Mars-B Development Project that delivered a Tension Leg Platform Host (Olympus) in the Gulf of Mexico. It is used to enhance production of the prolific Mars oil field next to a sister host named "Mars." I'm working with the Controls and Automation team and responsible for design and implementation of the Shell provided portions (Level 3 and 3rd party networks) of the process control domain (PCD) network infrastructure as well as ensuring the entire PCD meets the Shell PCD security standard. This involves working closely with the main automation contractor (Yokogawa) to integrate the Distributed Control System (DCS) into the overall PCD architecture.In 2010, I co-managed a computer asset refresh for all Shell Gulf of Mexico offshore assets that includes replacing all existing business computers (excludes process control domains systems) with new hardware, Microsoft OS upgrade and Microsoft Office Upgrade. Due to unique factors such as remoteness of the sites, high security, high visibility, logistics complexity, network challenges, etc., a different process was created by the team to solve these challenges than was used in the onshore office rollouts.In the past I've managed or provided technical assistance for the following projects:1) Implement three Process Control Access Domains (PCAD) - security barriers between Shell office network and all onshore and offshore production networks in the Americas. This was the beginning of Shell's process control domain security initiative to separate the office (business) networks from the process control domain networks.2) Implement PCD network infrastructure for Espirito Santo FPSO offshore Brazil3) Implement PCD network infrastructure for Perdido Spar in Gulf of Mexico4) Implement PCD network infrastructure for onshore production facilities in Colorado and Texas5) Provided technical and project management consulting for a SCADA system refresh across multiple assets

I managed the roll out of a new IT template for approximately 350 locations in Louisiana and Texas. The locations included mostly branches but also included all the back office locations, call centers and training centers as well. 3900 PCs/Monitors replaced; 1100 PCs re-imaged; 400 printers replaced. This project involved a significant number of resources including three field teams that performed the actual work in each location of removing old equipment and installing the new equipment and testing. Supporting the field teams were help desk, systems/network/desktop engineering and project management functions. Project management included scheduling all work, coordination of all resources to perform work, working with key stakeholders (high level management) and project team, reporting status to key stakeholders, facilitating technical problem resolution, budget management, invoicing, warehouse/inventory management, equipment disposal, etc.

IT Infrastructure ManagerI managed a team that originally provided IT support and executed infrastructure projects. The team eventually grew in size and split into dedicated support and infrastructure teams. I continued to manage the infrastructure team. I was responsible for team recruitment, development and performance standards. As the team grew and the projects became more complex, I incorporated formal project management processes to manage the projects. I obtained the PMI PMP certification and encouraged others to do so as well.IT Project Manager - Key Projects1) Implement hot site disaster recovery (DR) for U.S. data center – declared disaster with Hurricane Katrina and successfully relocated data center to hot site.2) Implement Storage Area Network and VMWare servers to support DR.3) Implement Avaya telephone PBX and voicemail with VOIP to Europe PBX.4) Implement Microsoft Active Directory in U.S. and Europe.5) Implement Lotus Notes calendaring system in U.S. and Europe.6) Implement Wireless handheld (PocketPC) scanners for inventory management in U.S. warehouse (and later in Europe).7) Implement global Sprint IP network connecting US, UK and Netherlands locations in support of warehouse scanner 8) Build out the campus network using Gigabit backbone and IP switches and implement global network to connect US and Europe offices.9) Introduced network security technology and periodic network intrusion audits.10) Setup remote offices in Japan, Australia and Brazil.

As a system analyst/programmer, I was responsible for writing software that interfaced control room monitoring systems (host) to devices used on off-shore oil production facilities. The host systems would monitor critical data points such as temperatures, pressures, valve positions, etc. and notify operators of any abnormal events. Clients included Shell, Mobil and Texaco. I assisted with the installation of the SCADA systems on the Shell Auger and Mars platforms.I transitioned to managing a team responsible for setting up IP networks on client projects as well managing the company network. We started setting up firewalls for clients using toolkits prior to the time when commercial firewalls were available.

I worked under secret and special program access clearances developing avionics software for the Navy A-12 stealth medium attack aircraft. While waiting on clearance, worked on Israeli F-16 avionics program. The A-12 project was terminated in 1991 by the defense department and remains the largest defense contract ever terminated.