CEO and Co-founder

o Chief Architect leading multiple inter-related services for the agency. Services included data migration, metadata cataloging, indexing, searching and retrieval of the agency’s content. Responsibilities included ensuring we’re building on a common platform, using industry best practices, and meeting security requirements.o Worked with Amazon architects to design our services for the agency's cloud, C2S (Commercial Cloud Service), ensuring the most cost-effective, scalable, and performant architecture.o Worked with developers to architect and integrate a COTS search tool, Voyager, into the agency’s enterprise search portfolio. Design and implementation included software installation, connector configurations, schema customization to reconcile the distinct metadata schemas, and protect the back-end Voyager API calls with a policy enforcement point.o Worked with NGA/NRO data experts to normalize the heterogeneous metadata schemas from different sources to a common schema that aligns with the ICITE’s discovery and security attribution specification – (EDH, IC-ISM, NMIS, and DDMS)o Lead security architect supporting the identity and access control integration effort for the inter-related search and retrieval services. Responsibilities included identifying integration points with the agency’s IAM enterprise solution, and providing missing gaps if needed. Provided guidance on centralizing access control to use common access policy based on XACML.o Internal ISSO responsible for all ICD503 security control implementations and compliance. Led two development team’s pilot programs through the agency’s processes and compliancy checks to deploy one of the first pilot systems into C2S for operational use (granted "Authority To Operate" in an unheard-of four months timeframe). o Assisted the business development team with writing technical proposals, engaging with stakeholders, and fostering long-term customer relationships.

Work on a team of senior architects that focus on foundational capabilities supporting Nike's commerce, brand, and sport digital product lines. Foundational capabilities include unifying user login experiences, streamlining consumer authentication and authorization using both browser and mobile experiences, securing API access via OAuth, and defining reusable and repeatable J2EE application patterns.

Lead the identity capability area that provided the end to end user identity life cycle management of a large enterprise-wide government agency. Worked closely with other area leads such as access control, credential management, infrastructure, and operational teams that make up the entire identity and access management services offering stack. My leadership included all facets of a complete solution rollout that comprised of problem statement inception to architecture solution recommendations, hands-on implementation, iterative build and test, and carrying out production-readiness deployment plan.

o Responsible for the entire design and development of the enterprise wide identity and access management for the Health and Human Services utilizing Sun’s Identity and Access Management Product Suite.o Primary architect and authoring of the technical specification design documentation for the identity managing services utilizing Sun Identity Manager/Oracle Waveseto Key developer in the implementation, configuration, and customization of custom workflows, web services using the SPML interface, and resource adapters with the Sun Identity Manager/Oracle Waveset version 7.0.o Participated in development activities that enabled SPML feature in the Sun Identity Manager/Oracle Waveset, created a custom J2EE resource adapter to reach out to enabled web services, designed and implemented user account bulk load, and various user account management workflows.o Provided PKI technical assistance and guidance to colleagues with SSL enablement on Windows Active Directory (ADAM), Sun Directory Server, and Sun Identity Manager/Oracle Waveset deployed in Sun Application Server. o In charge of leading and mentoring a small team of developers ensuring that identified implementation tasks are delegated appropriately and in-line with the project’s schedule.o Support program management activities including creation and evaluation of project schedule, assessment of issues and risks, participation in client meetings/presentations, cross reference potential identity and management candidates for team growth, and writing of proposal for subsequent optional years. Assist with functional and technical requirements gathering and analysis, and creation of use case and process flow write-ups.o Primary integrator for Sun Role Manager with the other two products; investigated the features available with Sun Role Manager to fulfill customer’s requirements on application role management; and provided in-house training to the technical team on the use and customization of Sun Role Manager.

o Lead architect on Sun’s Identity (IDM) and Access Management (Access Manager) solution in a shared server environment.o Designed and created the directory information tree (DIT) to fulfill the customer’s user management and security requirements by extending Sun’s LDAP schema.o Designed and mapped out access accounts for various applications to the directory server to ensure a robust and secure directory server.o Troubleshot directory server related problems including installation, configuration, and server access.o Developed a SSO solution by customizing Access Manager’s policy agents for the customer’s multi-tier enterprise software system.o Ensure all Information Assurance (I&A) technical requirements are met, the designed I&A solution is compliant with customer policies where applicable.o Responsible for project related activities such as creating and assessing schedule and milestones, resource allocations, project risks and mitigation plans.o Conduct team management related activities such as delegate weekly tasks, lead junior developers, hold code reviews, and establish a development environment with repeatable processes.o Support the application team and customers with overall I&A matters.o Assist the functional team with the creation of project deliverables.o Make sure technical processes follow CMMI Level 2 compliances.o Assist with proposal creation and review for potential identity and access management projects.

o Lead architect on implementing and customizing Waveset Lighthouse (Sun Identity Manager/Oracle Waveset) as the identity management solution for our customers.o Designed and implemented the customized workflows and forms using Waveset Lighthouse’s custom-built, XML-based Language, called EXPRESS. Given the Java API specified by Lighthouse, implemented custom resource adapters to connect to various backend system resources for user provisioning.o Provided user account migration solutions through various release deliveries using Waveset Lighthouse’s workflow engine.o Responsible for extending the directory server schema to capture specific business logic pertaining to user management requirements.o Troubleshoot Sun directory server installation and configuration at customer sites during system integration phases.o Assisted in the creation of XML schemas and DTDs for our administration application and logging tool. The XML definitions provided a way for other developers to define objects within our application to be persisted in the directory server.o Created custom security providers in BEA Weblogic 8.1 SP3/SP4 to meet the customer’s security requirements. Solely responsible for creating the MBeans and run-time classes for the authentication provider, login module, and identity assertion provider. Implemented a simple web test application to invoke declarative and programmatic security defined by the web application.o Created custom utility to encrypt boot passwords on the file system to automate silent reboots during initialization of the custom security providers in BEA Weblogic.o Developed a light-weight JAVA web application to manage our users utilizing server-side servlets to handle all the business logic; as well as the build script to package and deploy the application in BEA 8.1.o Assisted in the designing and implementing phases of the SSO solution package for the GCSS multi-tier enterprise system.