Michael Thompson Email & Phone Number

Halifax Regional Municipality, Ns, Ca

• Ensured security was addressed in all aspects and through all phases the Engineering Life Cycle including design, implementation, and operation of projects• Conducted detailed analysis, architectural design, and reviews for security of applications and architecture based on government standards, specifications, and project requirements• Evaluated and provided recommendations of technologies considered for use by project team• Developed policies, procedures and documentation to… Show more • Ensured security was addressed in all aspects and through all phases the Engineering Life Cycle including design, implementation, and operation of projects• Conducted detailed analysis, architectural design, and reviews for security of applications and architecture based on government standards, specifications, and project requirements• Evaluated and provided recommendations of technologies considered for use by project team• Developed policies, procedures and documentation to support Certification and Accreditation (C&A) activities• Reviewed designs, configurations, and software for security issues and ensured adherence to policy• Maintained documents and conducted reviews according to program standards; documented results and other activities as required• Collaborated with contractors and end-customers to develop, specify and present security analysis, design, and C&A materials• Conducted Threat Risk Assessments (TRAs) according to the Government of Canada Harmonized TRA Methodology• Provided security training (awareness, secure development practices) to project teams• Ensured Halifax facilities and operations met Government of Canada security requirements • Assisted in ensuring corporate security policies were developed, implemented and maintained to meet corporate and government requirements and policies• Provided feedback and content to Proposal and Marketing teams regarding security aspects of proposed work, and advised on relevant requirements Show less

• Participated in numerous security assessment engagements for clients, activities included: – Consulted with customer stakeholders and staff to determine security priorities, requirements, practices, and awareness – Conducted physical inspections of corporate facilities and reviewed configurations of representative desktops, servers and network infrastructure devices – Conducted network port and vulnerability scanning of corporate systems from internet and internally – verified… Show more • Participated in numerous security assessment engagements for clients, activities included: – Consulted with customer stakeholders and staff to determine security priorities, requirements, practices, and awareness – Conducted physical inspections of corporate facilities and reviewed configurations of representative desktops, servers and network infrastructure devices – Conducted network port and vulnerability scanning of corporate systems from internet and internally – verified results manually and performed additional testing based on scan results – Reviewed and analysed written policies, procedures, and documentation and prepared reports detailing findings providing prioritized recommendations for corrective actions• Specialized in application security reviews for clients (including large corporations’ websites, provincial government applications, and in-house software projects), either as stand-alone activities or as a supporting activity of more general security assessments, activities included: – Reviewed system specifications and documentation (architectural and functional specifications in particular) – Explored and became familiar with application interface using test user and administration accounts – Performed external port and vulnerability scans of application, validated results through testing of application-specific vulnerabilities using manual and automated techniques; reviewed source code for design issues and additional vulnerabilities – Prepared final report detailing findings and recommendations and supported development team in addressing identified issues• Supported project work by providing security architecture services, supporting testing and administration, conducting Certification and Accreditation activities including Threat Risk Assessments, and conducting security awareness sessions. Show less

• Architect of SolutionIP – a hospitality and hotspot provisioning solution now installed in more than 45 countries including major centers in North America serving more than 700,000 guest rooms. Credited as an Inventor on US Patent 2002/0009078 A1 – One of the patents held by SolutionInc for SolutionIP.• Managed overall software architecture of product line encompassing an in-depth understanding of Linux architecture, various networking protocols, computer security, cryptographic… Show more • Architect of SolutionIP – a hospitality and hotspot provisioning solution now installed in more than 45 countries including major centers in North America serving more than 700,000 guest rooms. Credited as an Inventor on US Patent 2002/0009078 A1 – One of the patents held by SolutionInc for SolutionIP.• Managed overall software architecture of product line encompassing an in-depth understanding of Linux architecture, various networking protocols, computer security, cryptographic protocols and applications• Communicated at several levels mentoring developers, assisting Sales and Marketing, providing customer support, working with legal counsel and patent agents regarding company and competition patent applications and claims, and providing technical/troubleshooting support to all departments• Met with customers, investors, and partners for technical discussions; developed product requirements through discussions with Marketing personnel evaluating and specifying technologies to be used for various aspects of product line• Monitored technology and evaluated products as they related to company’s product line• Authored company development practices and procedures• Designed and coded product components and conducted design and code reviews • Part of a team that developed Technology Department policy Show less