Michael Stark Email & Phone Number

Toronto, On, Ca

320 Front St.

Infrastructure Security - Risk Control and Governance

Toronto, Canada Area

(Contractor)• Development and management of a comprehensive program to assess, prioritize and mitigate business security risk for non-people ID’s (NPID) with technology controls across the enterprise and performed risks assessments.• Management and support of non-interactive and robot ID’s for SOX (high risk) applications and Operating systems, databases, middleware and network devices throughout the enterprise. • Launched campaigns and Collaborated with support groups, stakeholders… Show more (Contractor)• Development and management of a comprehensive program to assess, prioritize and mitigate business security risk for non-people ID’s (NPID) with technology controls across the enterprise and performed risks assessments.• Management and support of non-interactive and robot ID’s for SOX (high risk) applications and Operating systems, databases, middleware and network devices throughout the enterprise. • Launched campaigns and Collaborated with support groups, stakeholders and technology owners to validate and confirm ownership, function and entitlement of the NPID and asset potential risk.• Assisted in the development process to identify high risk accounts and reviewed documentation of clients internal controls (both IT controls and business cycle controls) and provided consultation and guidance for risk assessments• Performed data collection, analysis, and investigation leveraging advanced security and operational tools spanning the Enterprise in support of infrastructure audit, risk assessment, evaluation, and planning in support of ISO 9001, ISO 14001 for SOX and SSAE-16/18. Show less

Toronto, Canada Area

(Contractor)• Worked with Splunk and Arcsight Logger as the current log management and SIEM solutions, responsibilities would include, but not limited to building and improving the enterprise wide system log extraction and review process for Windows (2003/2008/2012), UNIX/LINUX (RHEL) servers, as well Solaris, IBM AIX and network devices for security related events.• Splunk review on applications and platform access incidents to differentiate Non-Compliance from false… Show more (Contractor)• Worked with Splunk and Arcsight Logger as the current log management and SIEM solutions, responsibilities would include, but not limited to building and improving the enterprise wide system log extraction and review process for Windows (2003/2008/2012), UNIX/LINUX (RHEL) servers, as well Solaris, IBM AIX and network devices for security related events.• Splunk review on applications and platform access incidents to differentiate Non-Compliance from false positives• Assisted in the development of security usecases (reports) using Splunk queries (SPL). Fine tune Splunk reports.• Categorized critical security events and responded with appropriate level of urgency. • Identify, analyze, and assess threats against corporate systems, networks, data, and clients• Conducted pivoting analysis on Threat Intelligence to identify current impact or proactively process mitigations for defense through security technologies and proactive mitigations including zero-day patching identification, anomalous behavior, and recommendations of remediation action. • Developed and maintained strategic relationships between internal audit function and IT organization. Assist developers in Defining Key controls in the Splunk Environment. • Managed incident and change tickets using ServiceNow. • Identified data requirements for investigation of security events. • Analyzed and investigated Privileged account activity using Spunk SPL. • Worked closely with portfolio personnel, stakeholders and senior management to identify Information Security related risks and controls. Worked closely with auditors, providing ad-hoc custom reports from Splunk. Show less

Toronto, Canada Area

(Contractor)• Responsible for managing and supporting web servers and infrastructure running IIS, apache and NGINX. Configuration management and workflow automation using Ansible• Migration of IIS 6.0 to IIS 7.5 /IIS 8.5 and resolving, troubleshooting of Windows servers 2003-2012• Performed risk assessment, new web server builds and/or site deployments and configurations, monitoring and performance optimization. • SSL certificate Management and configuration. • Applied ad… Show more (Contractor)• Responsible for managing and supporting web servers and infrastructure running IIS, apache and NGINX. Configuration management and workflow automation using Ansible• Migration of IIS 6.0 to IIS 7.5 /IIS 8.5 and resolving, troubleshooting of Windows servers 2003-2012• Performed risk assessment, new web server builds and/or site deployments and configurations, monitoring and performance optimization. • SSL certificate Management and configuration. • Applied ad hock updates and patches and perform maintenance of web servers when applicable.• Conducted security audits and vulnerability scans to identify vulnerabilities and potential risks• Used Active Directory tools (ADUC) to manage web server user and group objects .• Configured DFS and DFSR for syncing IIS configuration files and content.• Backup and Disaster recovery planning and execution. • Managed production changes using Remedy and ServiceNow.• Using Splunk SPL (Search Processing Language), created and maintained Splunk reports, dashboards, forms, visualizations and alerts for web servers. Installation and configuration of Splunk forwarders.• Acting as liaison between the various business groups and IT groups to communicate issues and coordinate resolutions to production and lab. • Provided assistance in troubleshooting .NET application issues and performance hosted on IIS. • Orchestrated, conducted and performed the migration of applications/programs from Windows 2003 to Windows 2012. Managed and supported Windows scheduled task and Mainframe batch jobs. • Automated tasks using PowerShell and VB scripting. • Utilized Prognosis, MVM, SCCM and SCOM for overall performance, security updates and compliance reporting. Show less

Toronto, Canada Area

(Contract) May 10 2012 – Nov 31 2013 • Deployment, installation and configuration of Enterprise SIEM HA solution and infrastructure Symantec Security Information Manager (SSIM) across multi-platforms running Windows 2008 and RedHat Enterprise Linux.• Configure host adapters (HBA) for connecting to Fiber channel switches and SCSI storage devices• Performed Integration of Active Directory to facilitate user management.• Create JDBC connection to Symantec… Show more (Contract) May 10 2012 – Nov 31 2013 • Deployment, installation and configuration of Enterprise SIEM HA solution and infrastructure Symantec Security Information Manager (SSIM) across multi-platforms running Windows 2008 and RedHat Enterprise Linux.• Configure host adapters (HBA) for connecting to Fiber channel switches and SCSI storage devices• Performed Integration of Active Directory to facilitate user management.• Create JDBC connection to Symantec Endpoint Protection database to Collect security events from over 100,000+ endpoints for real-time threat analysis, compliance, alerts and reports.• Analyzed performance and capacity issues of the highest complexity of application components.• Supported critical infrastructure to ensure the highest levels of availability, performance and security• Planned and implemented backup and disaster recovery process.• Responded to technical problems, diagnosed problems and escalated issues.• Implemented change management controls in accordance with ITIL best practices • Created various scripts in order to automate routine tasks using PowerShell and BASH• Worked closely with Symantec vendors/engineers on planning, deployment and migrations and troubleshooting• Configured Operating system and application hardening• Managed Symantec Endpoint Protection MS SQL database using SSMS (SQL server management studio)• Assisted in Symantec Endpoint Protection infrastructure migration from v11.0 to v12.1• Configured Symantec Endpoint Protection application and device controls and antivirus policies.• Performance tuning and maintenance of the RedHat and Windows 2008 operating systems.• Patching, backup and recovery, process automation, server installation and configuration.• Provided 2nd and 3rd level support during business hours and after hours.• Proactively monitor systems and perform preventative maintenance and updates to prevent performance impacts to systems and business functions. Show less