Technical Lead, Network Device Authentication Project to deliver digital certificates to all non-person entities (laptops, mobile devices, servers, internal websites, etc.) in the Government of Canada.IAM Solutions Engineering and consulting for partner projects including PKI, Crypto, Multi-factor Authentication, Active Directory Domain Services, Azure AD, and more.

Working to implement Enterprise PKI service for non-person entity certificates using Microsoft Active Directory Certificate Services.Support client and partner's existing Microsoft PKIs and plan and implement the migration to our future Enterprise service.Technical Lead on Global Affairs Canada Microsoft PKI Upgrade- Performed gap analysis of currently implemented PKI solution versus client expectations of system functionality- Coordinating with vendor (Microsoft) to perform Health Assessment of the system, and implement their recommended remediations- Planning and implementing SHA-2 upgradeTechnical Lead on implementing Non-Person Entity Certificate solution- resuming work previously done on the project in FY16-17 as part of Directory Services group- targeting an implementation of an enterprise service in FY17-18 which will enter operations in FY18-19 PKI Technical Lead for Enterprise Perimeter Security Project- provided comments on proposed solutions to enable TLS inspection- performed SWOT analysis of proposed solutions that would be delivered from our directorate- wrote briefing notes to Management recommending a preferred solution from from our group's technical and operational perspective Collaborated on Legacy Microsoft PKI upgrade initiative- Wrote data collection scripts for Directory Services Admin Model project to identify Microsoft PKIs in legacy environments and their configurations- Helping to prioritize remediation of legacy PKIs that are on end-of-life hardware or end-of-support operating systems or using end-of-support configurations such as the use of insecure cryptographic algorithms- Assisting in the procurement of professional services to perform remediation activities- Planning and implementing SHA1 to SHA2 migrations- Planning and implementing additional technical and administrative security controls in legacy PKI systems

Technical Lead for on-boarding unsupported Acrive Directory environments:- Performed analysis of eight Partner environments not supported by Directory Services staff- Created RACI-matrix to map Directory Services-related tasks to current support roles- Collected RACI information with assistance of current support staff; analyzed collected data- Made recommendations to management for staffing team to provide support- Reviewed data collected from Directory Synchronization project, Microsoft AD RAP / Security assessments and made plans to remediate issues and align with preferred support model and procedures

- Acted as a Portfolio Lead coordinating Directory Services support, and attending Directory Services management meetings for Economic and International Portfolio (EIP) partner departments: Statistics Canada, Industry Canada, Department of Foreign Affairs Trade and Development, etc.- Represented SSC Directory Services on various working groups at partner departments- Coordinated work for a team of 7 staff supporting numerous directory environments for several partner departments- Lead implementation of Directory Synchronization between Statistics Canada and SSC's Enterprise Datacenter Directory, enabling migration of applications and services and use of enterprise services- Lead Directory portion of a client's Secret Infrastructure upgrade, including harmonizing Administration Model with SSC's Directory Administration model

- Led team of 5 providing Directory Services (Active Directory) and Deployment Services (SCCM) Infrastructure support to Statistics Canada- Planned and implemented Continual Service Improvement activities and infrastructure upgrades to ensure stability and security of services, and implement new features at Client's requestParticipated in a number of Statistics Canada projects including:- Email Transformation Initiative - coordinated directory cleanup, production of bulk-load files and readiness of Directory Infrastructure for migration- Census 2016 - built and operate Active Directory infrastructure at SSC Datacenter to service collection and processing systems hosted there

- Led team of 3 staff in regions providing Windows Server support to Atlantic Canada Opportunities Agency, and Canada Economic Development for Quebec Regions- Acted as Senior technical resource to teams providing Windows Server support to Statistics Canada

- Led a team of 4-5 Windows Server Administrators providing Windows Server platforms and support to Statistics Canada clients- Acted as Senior technical resource for Windows and Blade Server platforms

- Worked on the Managed Server Services team to Administer approximately 900 corporate and client owned Windows-based servers across the agency- Managed and maintained Blade server infrastructure- Acted as a primary client contact for server related service requests, and work with other internal service providers, including Networking, Storage and Backup teams, to deploy and support servers and troubleshooting of problemsSpecial projects included:- Deployment of 11 blade chassis containing 130 servers at an off-site datacenter for 2011 Census form processing- Worked with Active Directory team to coordinate upgrade of Domain Controllers to the Windows 2008 R2- Represented the Windows Team on numerous working groups