Procurement and Management of commercial and residential properties for use within the Children's Residential Care sector.

Centauri Care aim to provide highly effective residential child care services that evolve to excel in all standards of care for young people with learning, emotional and behavioural difficulties. Our commitment is to provide happy, supportive, nurturing placements, leading to young people becoming educated, skilled, successful independent adults.

Delivering Technical Infrastructure and Security Projects

IT Cyber Security & Infrastructure Consultancy

Recruited to manage and progress the rollout of Cisco’s Identity Services Engine Network Access Control product across 350 plus network switches globally. Tasks included, project management, auditing switches across the estate, creating switch configuration scripts, roadmap; migration of switches to Monitor Mode, carry out endpoint remediation, profile none standard devices to ensure successful authentication of 802.1x and MAB endpoints. Final step to migrate the switch and endpoints to authenticate in Low Impact mode and none Arup devices to be redirected to the Guest Login Portal. Key deliveries: Asset discovery and creation of Master Switch asset register, to track device status during roadmap migration steps. Verify current IOS versions, identified unsupported switches and IOS versions in need of upgrade. Carry out current configuration discovery, across switches within the UK, Europe, Australasia, East Asia, Americas & UKIMEA Creation of new 802.1x configuration scripts for all ports in scope for migration to ISE per switch. Over 350 switches globally. Raise necessary RFC’s for switch migrations into ISE and IOS upgrades. Tailoring ISE within the admin console to map with the organisation structure globally for correct switch location grouping. Creation of network switch device records within ISE along with authentication policy rule sets. Execute migration scripts on network switches to Monitor Mode and subsequently, Low Impact Mode post endpoint remediation. The project was reprioritised due to the Covid 19 pandemic.

Delivery of a NAC (Network Access Control) project utilising Cisco ISE (Identity Server Engine) across the Parliamentary estate of over 12,000 wired ports. Redesigned the solution, recruited a team of qualified engineers to assist in the delivery of the final wired and WiFi solutions. Key deliveries:- Redesigned the Cisco ISE solution and switch port configurations to integrate seamlessly with the Parliamentary estate.- Built replica security infrastructure lab for wired/wireless endpoint testing.- Carried out thorough testing for all device types and operating systems in use on the Parliamentary estate including, Building Management Systems, Cash Tills, Refrigeration systems, PXE Build solutions, legacy printing solutions, Apple Macs etc.- Implemented ISE in Low Impact Mode as the initial delivery for over 12,000 wired ports which was completed 5 months ahead of schedule making full use of the general election called in 2017.- Designed, tested and implemented a Closed Mode configuration across the estate prior to a full PEN Test of the solution.- Managed a piece of work to replace 132 legacy Cisco 1142’s Access Points to enable the Wireless LAN Controller firmware code to be upgraded to version 8.5. The location of the majority of the AP’s was unknown. - Design of a consolidated wireless infrastructure to reduce the number of overall wireless networks being broadcast whilst maintaining the security requirements of each.- Introduction of general wireless security enhancements in line with best practice- Designed, Tested and migrated the Parliamentary corporate WiFi from NPS to Cisco ISE to standardise authentication.- Designed and tested an Identity Pre-Shared Key (iPSK) solution to enhance the security on existing networks that utilised PSK as their method of authentication.- Definition of the ISE monitoring and reporting requirements together with SIEM integration.

Multi-million pound cutting edge Cyber Security programme for National Grid the largest utility company in the UK Delivered utilising a dedicated team of specialist security engineers along with matrix managed resources across multiple Verizon delivery towers from the UK and US. Senior stakeholder management, parallel working with National Grid’s outsourced delivery partners and TPV specialist consultants. Key deliveries:- Cisco ISE - Network Access Control (NAC) provides a fully managed service to protect the network perimeter & delivers per device granular control to data flows based on user and device posture- Lancope StealthWatch - Netflow Security Analysis (NSA) provides security analysis of network flow information from managed devices to detect, prioritise and alert on unusual network activity- Skybox Network Risk & Compliance (NRC) provides access to a managed topology map of the National Grid estate from which a number of reports or attack simulations can be run- Blue Coat Forensic Packet Capture (FPC) provides a managed platform where network packets crossing a pre-defined network boundary are captured and stored for future analysis- Blue Coat Malware Protection Service (MPS) provides national Grid with the ability to identify zero day malware within two key threat vectors, web and email. This will also provide the ability to block any malware that is discovered- Blue Coat SSL Visibility Appliance (SVA) provides National Grid with the ability to decrypt SSL traffic, inspect it and the re-encrypt it. This is an inline device that also acts as a smart inline TAP so the decrypted traffic can be forwarded to a number of devices such as IPS, Malware Analysis, Security Analytics and DLP for inspection- SSN – Enterprise Network Security Shared Infrastructure essential to the correct operation of each of the above towers. Creation of DMZ and security zones to isolate CNI (Core Network Infrastructure) which runs the Gas and Electricity Grids

Senior Management and Service Delivery roles performed during a period of major change within the organisation. Leading on Strategic direction, technology road-map and alignment to industry best practices, Project Delivery methodologies and the ITIL framework across the ICT department. Key deliveries:- Recovery of a poorly performing Win7 VMware VDI/Mirage upgrade project from my predecessor - Delivery of a SAN and VMware ESXi server replacement programme across the NMC- Infrastructure Architecture to develop Strategy and a Technology Road map- Development of an ICT Improvement Programme to deliver proactive services and drive operational excellence- Server rationalisation, consolidation and optimisation projects across the NMC estate to drive cost reductions- Change and Problem Management governance alignment to ITIL best practice- Infrastructure lead and authority at the weekly CAB- Service Delivery Management internal/external of 3rd party suppliers along with tender preparation for a contract renewal- ICT Department annual budget preparation and forecast for 2015 to 2018- Deputised for Senior Management roles during a phased ICT department restructure over several months- Developed a DR Strategy to deliver Risk Reduction and Prevention aligned to the NMC Business Continuity Plan- Incident Manager and Investigations Officer for serious incidents- Design and build of a new Test, QA, & Pre-Prod virtual environment’s utilising the Veeam Enterprise Plus Suite - Build of a complete CMS (Case Management System) virtual Training environment

Delivery of an upgrade of MS Exchange 2007 to 2013 and an enterprise wide Application and Infrastructure Data Centre Relocation programme from all TfL Secondary Data Centre’s (63 in total) to their new Primary and DR Data Centre’s in Woking & Acton. Liaising with Fujitsu for network updates and Computer Centre for server moves. Key programme streams delivered:- Managing a team of engineers to carry out full application analyses and discovery of all TfL servers/services to enable P2V and V2V migrations to a VMware 5 platform. Introduction of standardised processes for data capture to enable updates to the CMDB. An overall project budget of £2.89M- The design and introduction to TfL of VMware’s NSX technology to enable server migrations where IP Address changes where not feasible- Manage decommission of all services Storage, Backup and Networks from each DC once all migrations were completed to enable reclaim of infrastructure where required to support EOL equipment still in service- Management of a 3rd party suppliers (CSC) delivery team to upgrade MS Exchange from version a 2007 physical platform to a 2013 VMware virtual environment running on Windows 2012. Upgrades to Enterprise Vault and Blackberry Enterprise Server were required to enable functionality with Exchange 2013. Delivery of an automated Exchange 2013 environment build and user migration process- Migration of the top 1000 VIP users along with their delegates before handing over to BAU to complete the remaining user migrations using the automated build and migration process delivered as part of the project. Budget £500K

Rescue and delivery of a stalled Data Centre Relocation Programme from Novae’s offices in the city to new data centres across London. Transition of service to Control Circle a 3rd party outsourced Managed Service Provider. The objective was to mitigate operational and technology risks. Key Programme streams delivered:- Management of all Physical to Virtual Server and Virtual to Virtual Server migrations using a mixture of vMotion, vCenter Converter and Double Take. Migration of Novae’s storage arrays and backup solution to a new NetApp Filer utilising SnapManager for Exchange and SQL storage/backup solutions. Migration and reconfiguration of all DMZ, 3rd party hosted applications and network services- Management for the installation of additional network links between the Fenchurch Street Lloyd's Register of Shipping’s building in the city and the Global Switch 2 and Slough Data Centre’s to facilitate the migrations- 3rd party supplier contract management and renegotiation's to facilitate early terminations in line with Novae’s new managed service requirements

Project Management of Digital Software application development projects using the JLR SDM methodology based on the Waterfall Model. Management of six external 3rd party suppliers including TATA on and offshore staff that support the infrastructure, host develop and author their Digital Global Web Site (GWS) for both Jaguar and Land Rover. Key Projects delivered:- GWS Upgrade to ACM 7 – Project to upgrade the Digital Global Web Site application content management system on the Production environments that host www.jaguar.com and www.landrover.com. A complex project involving redevelopment of code, workflows and content requiring critical risk management for the range of interrelated technologies involved.- Storage and Load Balancer Upgrades – A programme of work to add additional supportability for the various environments.

Management of Legacy Risk Reduction/Prevention and Business Change projects using the Co-operative Banking Groups propriety IT Framework methodology. Engagement with key stakeholders in two-way communication throughout the change process. Delivery of a programme of projects managing 3rd party suppliers and key banking resources. Key Projects delivered:- Data Centre Consolidation & Relocation – A programme of work to virtualise, re-platform and relocate all applications and services from an aging site due for closure to the 3 strategic Data Centres to enable full DR and asynchronous capability. An overall project budget of £3m. - Oracle MI Upgrade - The upgrade of a number of Oracle Management Information database applications from Oracle 9.2 to the latest version to reduce operational, regulatory and reputational risk. Extensive collaboration with the business was required to deliver the project successfully. Project budget £150K- DMZ Upgrade – A high risk project to upgrade a number of critical Co-operative Banking Group security services running on EOS (out of support) hardware. The project involved virtualisation and rigorous testing of services to bring them in line with the Co-operative Banking Groups strategic roadmap. A critical security project with a budget of over £250K- PReS Improved Code Control Audit – The objective of the Project was to mitigate the risk associated with producing customer facing outputs from code which did not benefit from formal code control and audit standards using a Code Version Control System (PVCS). Project budget £100K

Management of multiple cradle to grave Infrastructure Enhancement projects using National Grids propriety Delivery Excellence and Solution Delivery Process methodologies. Delivery of multi-phase, multi-million pound application & infrastructure projects managing 3rd party suppliers/resources on & offshore. Controlled delivery of projects to defined time, cost & quality. Lead, motivated & directed resources from matrix managed cross functional teams, through a high profile change programme, of high to moderate risk and complexity. Managed stakeholder communications and project budgets, allocating resource as required. Identified and proactively promoted opportunities for new business & to improve service quality and efficiency. Key Projects delivered:- A Global Programme of work to deliver a Managed Security Service using the BT Counterpane Monitoring and Intruder Detection solution to satisfy regulatory requirements around SOX compliance. A multi-phase Global project with a budget of over £500K- SAP Programme Support - Delivery of a three year IBM Data Storage Enhancement Programme of work across multiple data centres. TSM backup software migrations from older versions. The budget for this project was £3.84m.- A global project with a budget of $740k to deliver the IBM Guardium Database security monitoring and auditing solution across both the UK and US data centres. - A £2.4m global security Enterprise Information Protection project to roll out CheckPoint’s Full Disk Encryption and Media Encryption to 32,000 devices across the UK and US.- Upgrade of the BMC batch scheduler product Control-M and its infrastructure from an old legacy version to the supported version of the product within a budget of £406K. - A number of application and storage upgrade and SAP migration projects with varying budgets including an upgrade of McAfee’s IDS’s within National Grids DMZ’s, Citrix Farm Upgrades, and a pilot of McAfee’s security Foundstone product.