Providing IT system design, software development, engineering support and security consultancy for clients ranging from Fortune 10, to global non-profit organisations to privately-held specialist companies.

Member of the Architecture Group, a committee of Subject Matter Experts that create the GS1 System Architecture, provide development and stewardship of the Architecture Principles, and support other groups that are developing GS1 standards to create artefacts that preserve and enhance the integrity of the overall GS1 system.Creator of the GS1 Barcode Syntax Resource, including the GS1 Barcode Syntax Dictionary and GS1 Barcode Syntax Engine. This collection of assets drives improvements in data quality by validating Application Identifier based data, including GS1 Digital Link URIs, and accurately converting between the different syntaxes used in the GS1 system.Co-designer of the GS1 alphanumeric check character scheme. This data protection scheme was designed in order for the Global Model Number to be ratified for use within EU-regulated Basic UDI-DI applications. Author of the GMN reference libraries for check character pair generation and validation.

Design and build of diverse AAA and network policy solutions for enterprises ranging from Fortune 100 to SME.

AIDC 100 membership is limited to 100 elected Active Members in recognition of their excellence in serving the AIDC industry, each having made substantial contributions to its growth and advancement.

AIM is the leading authority in innovation and standards in barcode, biometrics, IoT, NFC, RFID, RTLS and RAIN.The Technical Symbology Committee (TSC) is comprised of individuals who are the world's leading experts on symbology design, as well as printing and decoding algorithms.https://www.aimglobal.org/technical-symbology.html

Technical IT Security Manager at a leading UK research university supporting 4500 staff and 17,000 students with a network consisting of 18,000 devices across multiple sites supported by a variety of technologies in business units having vastly differing levels of formal organisational control.Champion within the University for all aspects of IT security, articulating its importance to a wide range of stakeholders with varying degrees of expertise and seniority. Hands-on security practitioner who maintains expert knowledge of the latest technology developments, vulnerabilities and risks to ensure that the IT system security and processes remain optimised. Principal expert on issues related to IT security threats providing technical incident management support during IT investigations.To thwart specific threats against the university which we were alerted to by NCSC and had observed in the wild I implemented many perimeter defence hardening improvements. This included the removal of direct access to application servers (using application accelerators, proxies and jump hosts), interruption of harmful traffic types used by malware/botnets, host shunning on the basis of advanced threat detection, SYN flood protection and other state exhaustion defences.Drove major firewalling improvements to close significant deficiencies in the organisation’s packet filtering: Extended the datacentre network closed-by-default policy for incoming traffic to also cover outgoing traffic. Introduced an Infrastructure Proxy Service to filter outbound web access by servers and infrastructure appliances.Mentor to security operations analysts, systems integrators and developers teaching vulnerability assessment and secure design, integration and development practises.Lead on the development of the IT security components of University Information Security Policies.

Lead architect for the mission-critical network services, including the DDI infrastructure (DNS, DHCP, IP Address Management), NTP time service (including public service over IPv6), network telemetry and analytics, network boot service, central logging service, configuration management and deployment solution.Responsible and accountable for the design of the hosting platform that supported several frontend application services, including the corporate website, email exchangers, library management system, digital repository and remote access proxies.Co-maintainer of the corporate wifi infrastructure (FreeRADIUS, routing + traffic shaping using Quagga + tc), DNS-based malware filtering using RPZs, mail exchangers (Exim) and network load balancers (Linux IPVS + keepalived.)Reimplemented the campus and public DNS infrastructure (ISC BIND) and enhanced this to support the emerging DNSSEC standard as an early adopter and upstream tester/contributor (largest deployment in UK HE.)Developed the automated IP allocation system for a /16 network with more than 150 subnets and 10,000 hosts, including rules for multi-tenanted locations with complex subnetting requirements.Developed a revision-tracked configuration management and host deployment system for scalable, secure management of the mission-critical Unix infrastructure (based on Cfengine and FAI with local improvements.)Implemented a Xen-based virtualisation platform and LXC-based containerisation for Unix network services supporting more than 200 virtual guests.Developed a rapid operating system install and disaster recovery system (FAI, Cfengine, AMANDA.)Architect of the corporate web publishing platform (Zope/Plone, ZEO, HAproxy, Varnish, Apache.)Merit Awards:2015 - Bonus for outstanding work. Lump sum award.2010 - Bonus for outstanding work. Lump sum award.2008 - Bonus for exceeding expectations of the role. Upwards regrade.