Design, architect, and deploy privileged access management solutions across the enterprise as part of the identity access management strategic plan within the organization. Securing privileged accounts across multiple platforms including Windows, Unix, Linux, databases, network devices, APIs, and mobile devices both on-premises and multi-cloud ecosystems. Utilize prevalent industry standards, frameworks, and methodologies, in conjunction with company policies, to adhere to financial industry and government regulations, as well as sound IT business practices. Execute best practices across SecOps and DevOps to ensure developed solutions seamlessly integrate into existing SDLC workflows and comply with GRC for the organization.• Design, build, & implement privileged access management (PAM) instances across the enterprise.• Perform upgrade maintenance within various PAM platforms.• Develop new plugins for credential management functionality within PAM solutions.• Remediate identified vulnerabilities against OS and applications found by penetration testing teams.• Create and update policies, procedures, runbooks, playbooks, cookbooks, and technical diagrams.• Execute semi-annual DRP exercises emulating failovers and outages in accordance with BCP policies.• Recognized as a senior SME for technical consultations across our product portfolio within PAM.

Managed Infrastructure projects, security assessments, transition of Infrastructure and tools under global operating model, handled production issues, implemented root cause analyses/resolution for system issues, defects, and minor enhancements, supported project transition within the Cyber Security Services organization.• Technical SME for PAM technologies within IAM discipline.• Capacity, Performance and Stability reporting and Management.• Provide technical mentoring.• Integration of server performance and capacity monitoring tools with various products.• End-to-end solution support for complex PAM implementations including FDE and AAA operations.• Team lead within global group with follow the sun model.• Proven ability to work with demanding global partners within aggressive timelines; solid problem solving, analytical and technical abilities.

Supported infrastructure to ensure business continuity, vulnerability threat management, data integrity, performance and stability, and enforce operational compliance standards are met.• Support BCP/DRP policies on critical systems.• Coordinate and execute remediation activities for assets.• Enforce asset hardening practices in compliance with established security policies.• Investigate and resolve system performance issues.• Facilitate system migrations running EOL software for cost reductions and supportability.• Analyze and respond to SIEM events for audit compliancy.

Managed a hybrid cloud environment comprised of mixed technologies and solutions, networking, unified communication, virtualization, cybersecurity, messaging and collaboration, and specialty solutions spanning approximately 300 sites.• Diagnose and resolve system outages across sites in areas of messaging, networking, DDI, data access, storage, and virtualization to restore normal operations for end users.• Support Identity and Access Management (IAM) administration.• Network administration including VLAN, Tunnel, MPLS, VoIP, wireless, and IP Address Management (IPAM), router\switch configurations, IOS upgrades\backups\restores.• Patch management.• Unified communications support.• Messaging and collaboration administration on multiple platforms.• Virtualization administration.• Mergers and Acquisitions Project - Deploy modern infrastructure for new sites delivering standardized services with minimal downtime.• Remote Site Upgrade Project – Build and implement new equipment replacing EOL assets.• Creation of policies, procedures, and guideline documents for operations and security.

Applied broad subject matter knowledge and advanced technical proficiency to solve both common and complex business issues within established guidelines and recommend alternatives. Participated in projects of diverse complexity and scope exercising independent judgment within defined policies and practices to identify and select a solution.• Designed and implemented a Network Access Control solution employing certificate services producing additional security to the network.• Implemented conference room booking solution resulting in increased efficiency of room usage, eliminated reservation conflicts, and seamless integration with authentication and messaging.• Deployed a high availability and load balanced virtualization cluster boosting customer’s R&D operations for new product development.• Devised a process that allowed remote workstations to join the domain across a VPN that radically reduced delivery times and garnered rich customer satisfaction scores.• Headed the integration and transformation of the infrastructure and clients for a hostile acquisition ending with a standardized and unified environment.• Engaged in the migration of 60k mailbox clients slashing operational, hardware, and power costs.• Introduced a pilot for a Security Information and Event System (SIEM) product that was accepted then distributed across the enterprise yielding extensive audit enhancements and maximizing customer satisfaction.• Produced a RADIUS solution for an acquisition in Canada for wireless security needs exceeding customer expectations and delivered ahead of schedule.• Engaged in customer facing meetings to supply feedback for possible solutions to achieve business requirements.• Mergers & Acquisition (M&A) Projects – Involved in at least 6 M&A projects during tenure at HP for architecture design, security review, operational support, and BCP/DRP auditing.

Team Lead for group of 12-15 professionals providing point of escalation, conflict resolution, and assignment delegation.• Led migration program resulting in Identity Access Management (IAM) enhancements and lower TCO.• Completed a domain consolidation initiative reducing infrastructure size, operational costs, and carbon footprint.

Sustained the IT ecosystem and evaluated cost saving opportunities that led to solution upgrades and current technology. Partnered with governing bodies to align with SOX requirements in the enterprise that resulted in positive developments in security, processes, asset management, documentation and licensing compliance.• Performed an messaging migration project producing a more agile, robust, and feature rich environment for the customer to do their business.• Spearheaded launch of centralized patching solution that enhanced patch management and reduced administrative man hours.• Orchestrated domain version upgrades on new equipment enhancing services and toolsets for improved administration.• Created and deployed images for a company acquisition to meet new software development requirements.• Planned and deployed a Public Key Infrastructure (PKI).

Analyze, design, and deploy new servers and storage systems. Maintain infrastructure software, hardware, and services in the environment. Optimize and monitor system replication, server response, and uptime in a 24x7 environment. Execute and maintain core services utilizing centralized administration, messaging, DNS, DHCP, WINS, and TCP/IP. Participated with design group, then did implementation, and support a major infrastructure implementation in parallel to existing design. Utilize software management services for software/workstation inventories and deployment. Create and implement technical documentation for ISO 9001 compliance. Follow formal Change Management protocols for downtime and outages of all systems. Participated in planning and implementation of the end user workstation OS deployment to North, Central, and South Americas in 2001.

Prepared and implemented proprietary desktop platforms on PC based systems utilizing Windows 9x and NT Workstation for 3500+ clients. Provided support for end user workstations hardware and software configurations including applications MS Office 95, MS Mail client, and proprietary software. Participated on the design team for planning and implementation of SAP R/3 financial system. Utilize Remedy ticket tracking tool for daily issues.

Provided desktop support for 1000+ clients running Windows 95 and Windows NT 4.0 workstations. Hardware maintenance/repair on HP, Toshiba, Compaq, and Acer desktops/laptops. Application support included Microsoft Office 95/97 Suites, Internet Explorer 3.x/4.0, HP Reflections, and proprietary software. Managed core network hardware on-site for Bay Network and 3COM hardware. Planned and implemented roll out of Microsoft Internet Explorer 4.0 and Microsoft Office 97 Suite.