Stephen miller resume
- 1. Stephen Miller [email protected] 250 E 54th Street (917) 704-5934 New York, NY. 10022 (212) 758-1051 Summary: Information Technical Architect Engineer with over 26 years of experience in open systems architecture from cloud platforms to βout of the box systemsβ to implementing proprietary product lifecycle management policies and project management. I've architected, engineered and implemented many environments, with emphasis on high availability and virtualization, security, business continuity, monitoring and performance management; various cloud initiatives including VMβs to, SaaS, PaaS and IaaS β platform services; investigating many, however implementing Azure, AWS and open cloud systems. Managed both technical support and level-1, 2, 3 engineering teams in highly available, critical environments and supported vendor relationships and managed third party applications; including retail (PCI3), market data providers, front (SOX) and back office systems and trade executions. Technical Skills: Operating Systems: UNIX / Solaris, HPUX Linux, CentOS, IRIX, AIX, Microsoft Windows, SaaS. Cloud Services: Global and functional/Platform Azure Cloud and IaaS architect, SunGardAS, APAC Dimension Data Hybrid (open-cloud) PROD/DR HK-Tokyo environments, migrations from physical to VM to cloud, often including hybrid Colo Racks from requirements; usually Networking equipment and circuit drops, VMWare hosts, DMZ, virtual appliances, or DBMS related concerns. AWS Certified Cloud Engineer. Database/Application Servers: Oracle, Sybase, MySQL, PostSQL, Informatica, WebLogic, Java, Apache Tomcat Clustering/High Availability: Virtualization (ESX/VM, nPar/vPar, hard/soft zones), VCS, Microsoft/SQL Clusters, various load balanced solutions (F5-GTM/LTM GLB LLB VIPS), horizontal and vertical application clusters; granular recovery, Global Load Balancing with or 100/0 to active-active utilization and Advanced (Dynamic) DNS, Autosys, MQueue, SAN and snapshotting technology, SRDF(a/s) replication, modern data protection. Backup Management: CommVault Simpana10v9, Globally OnPrem and Azure Blob aes256 replication, Symantec NetBackup, CA BrightStor/ARCserve, SyncSort Backup Express (BEX), EMC Legato, Tivoli Storage Manager, authored scripting solutions with tar/dump, rcp, SCP, and others self-scripted. Monitoring and Performance: HP OpenView (Performance Management), TeamQuest, SolarWinds, GlancePlus, BMC Patrol/Predict, PROGNOSIS, Microsoft MOM SCOM, SCCM, Netcool. Name/identification Services: AD, ADCS, ADFS, LDAP(S), Oracle IDM/OAM, SSO, DNS, NIS, MESA, MSDB, TACACS. Wireless and Mobility: 802.11a/b/n/a+c, aes256 SHA-2, AP/IAP, Aruba ClearPass, AirWave, Mobile Iron (SaaS & OnPrem) /BYOD, 802.1x OnBoard, MAB (MAC Address). Security and Authentication: MS PKI, RADIUS, Aruba ClearPass, Airwave, SSO, NAC, 802.1x, EAP-TLS, SSL, VPN, SSH, Kerberos, Checkpoint, Juniper, Sunscreen SPF, Pix, RS/IDS, Tripwire, OAM/OIM, CA signed certificates. SOX, PII, PCI compliance successful scans with hardened OS. Networking: TCP/IP, UDP / multicast, X.25, SNA 3270/X.25, FIX, TIBCO RV, MQ, Filter, IPSec, VRRP, OSPF, VoIP, DMVPN, EDMZ (multiple methodologies.) Programming/Shell Scripting: C, sh, csh, ksh, perl, PSH, PHP, Visual Studio, various proprietary Cloud 4GLβs or web based configuration and dashboard interfaces. References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps 1 | P a g e
- 2. Professional Experience: Tory Burch, LLC. (Corporate) New York Metropolitan Area January 24, 2013 β December 13, 2015 Senior IT Solutions Architect (Systems Engineering) β’ Integrated a multi-tier Microsoft 2008R2 PKI Enterprise design, for integrating with Cisco RADIUS and Aruba ClearPass appliance suite; for ultimate secure, PCI compliant LAN and WLAN connectivity, using best practices, FIPS and PCI 3 regulatory compliance. β’ Completed Wireless Global EAP-TLS Aruba ClearPass LAN/WLAN security management for approximately 2300 corporate devices with 802.1x and combinations of Windows 8 Server, Windows 7 Client, Mac OSX, and IOS (iPhone and iPad), as well as retail Guest (BYOD) access (approximately double that value globally). Engineered, using Mobile Iron and SCEP, automatic PKI (CA03) certificate renewal to Retail and Corporate OIS (iPhone, iPad) devices, and likewise to OSX with Casper. β’ Successfully migrated NYC campus production assets to the SunGard Hybrid Cloud in PHL with (DR/BC) in CO, including a hybrid cloud topology and supporting infrastructure (Direct connect redundant GB Metro fiber ring). β’ Redesigned the backup and offsite of data from tape to a βModern Data Management frameworkβ using OnPrem 30-day deduped block level storage, and auxiliary; global Azure cloud solution for DR and total off-sight independent restoration, as well as data retention, encryption of data at rest and data in flight; also supporting necessary audit and legal hold capabilities in the required framework. All of these initiatives are designed to be FIPS and PCI compliant and utilize aes256 deduped data from 6 global presences. This single successful initiative has led to $1MM in annual savings. β’ Day to day support, project management, RFP and SOW review and project or technology presentations. . McGraw-Hill Companies (S&P, MHE, Construction, Corporate) December 2010 β December 2012 Senior Solutions Architect (Systems Engineering) β’ Successfully completed many solution designs from stakeholder inception, through multiple costing layers, design stages, implementation, DR testing with failover, failback, Ops transition, and production warrantee. β’ Created many solutions utilizing Weblogic Tomcat and .NET VMs, Oracle SQL, and MySQL DBMS, in two and three tiered eDMZ network topologies, internal and cloud.; Solaris Unix, RHEL Linux, Windows2008. β’ Created many solutions involving Windows IIS and .NET as web and web/app servers for third party solutions or access through data marts or reporting services such as Business Objects, Oracle EBS, MicroStrategy, Informatica, Knova, and others. β’ Architected many RHEL Solutions for Oracle 11gr2 RAC on ASM, migrating from Higher cost Solaris VCS clustered implementations. β’ Worked through new and supplemental firewall modifications in support of new applications, partner net off-shore development resources and Neoteris Citrix access. This includes piloting DMVPN technologies. β’ Virtualized many servers and services, consolidated to larger clusters/farms, and more recently internal/private cloud hybrid and Amazon AWS for public and confidential data, mostly in the MHE Educational space. β’ Constant compliance with SOX, PCI and HIPAA regulations, utilizing an ITIL framework for PCLM. Integrated Research Denver, CO. (with extensive travel) November 2008 β May 2009 Professional Services Engineer Consultant β Americas β’ Created Solaris 10 zones (global/root, non-global/shared), installed oracle 10g into multiple zones, and integrated each into 64-bit PROGNOSIS 9 monitoring and data collection. β’ Scripted customer solutions (perl, ksh, sh), including PROGNOSIS extractors, DB collectors and data-set summarization into RHEL, VMWare, Solaris zones, Oracle and Nonstop NSK related solutions. β’ Installed instances of PROGNOSIS (8.5, 9) in multiple architectures (OS), features and topologies. Merrill Lynch New York Metropolitan Area September 2007 β May 2008 Consultant - GMIT/TASS - Enterprise Infrastructure Architect and Lead Solutions Engineer (LSE), Equities and Fixed Income and Commodities (FICC). References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps 2 | P a g e
- 3. - Liaison project manager (SCM) between technology (GTI) and business (GMI) to design, coordinate and implement solutions for new and existing applications. β’ Incorporated a firm-wide contingency and recovery (C&R) SLA and application footprint for next generation, granular recovery (GR) contingency and Recovery (C&R). Collected 273 tier one trading application candidates and converted all simple and several complex applications to GR enabled and internally certified and SOX compliant. This included implementation of F5 3DNS/WideID, unique storage sets per application function, and spanning storage sets with srdf to single replicated frames. β’ Architected retrofit of applications and initiated a variety of server and database consolidation efforts to firm-wide farm clusters, including Sybase/Solaris10, Oracle/Solaris10, Oracle/Linux as5, and Solaris10 utility containers (application servers) with Sun RISC VM and HP IA64 Blade Center (nPar, vPar VM) β’ Engineered NAS and EMC LUN storage group consolidation (Premium+, Lite+, Lite, CASS, NAS), thereby making granular srdf/asrdf (and tier 2 NAS) contingency failover configurations possible, as well as providing significant cost savings to their respective specific business area cost centers. β’ Managed a variety of server and database consolidation efforts to firm-wide farm clusters, including Sybase/Solaris10, Oracle/Solaris10, Oracle/Linux as5, and Solaris10 utility containers. Morgan Stanley (Head Quarters) NY, NY. April 2006 - March 2007 Investment Banking Division (IBD) Level II Support Engineer, Production Applications β’ Architected a vendor entitlements engine for IBD, writing a scripted Perl/ldap, SQL and AD groups lookup aggregation and delivery mechanism (perl/pgp) - triggered by an Autosys event scheduler, confidential content delivered via encrypted Comet delivery service and monitored through a Netcool perl API. β’ Managed vendor applications and external market data in enterprise fat and web driven, client applications. β’ Performed an Autosys job migration project from Solaris to Linux; cataloging IBD unitβs 684 Autosys jobs, identifying 126 candidates for platform migration, onto IBM and HP Blade Center technology. β’ Managed multiple offshore teams responsible for approximately 70 applications in varying phases of lifecycle development for Investment Banking (IBD), Global Capital Markets (GCM), and Real Estate (MSRE) divisions within a global level II support team, executing daily ready for business (RFB) checks, weekly and emergency change management turnovers as well as emergency break fix diagnosis and repair. Sesame Workshop NY, NY August 2004 β May 2005 Consultant - Core Engineering, Architecture and Systems Administration β’ Architected a new enterprise backup solution; a heterogeneous environment of 50 clients and five media servers consisting of UNIX (Solaris/Irix/Linux), Netware and Windows (NT2000/2003) servers, including Exchange, SQL, DB2 and open file agent extensions via switched 1GB channel sharing native read/write and control access to multiple tape devices. β’ Managed IBM installation and assisted implementation of a Blade Center consisting of Intel Xenon blades, SAN booted to a LC channel FastT700 and tertiary 10 TB SATA storage array, in support of an IBM Content Management System (ICMM) with DB2, Web Sphere and video on demand (VOD) applications. β’ Engineered upgrade for multiple Oracle database and application servers, replacing legacy environment with modern Sun servers with Oracle CPU based licensing and warm stand-by high availability. Independent Patent Design NY, NY. 2003 - 2004 Patent Search, Application Process, Copyright Process Flow Identification and Authentication β’ Architected and submitted patent application for βa proprietary elevator efficiency loading control systemβ. Merrill Lynch New York Metropolitan Area 2002 Consultant (Sun Professional Services) β Infrastructure Project Manager β’ Created and managed project plans from post 9/11 boilerplate templates, matching a discrete number of available configurations to fulfill business unit requirements. β’ Facilitated project plans though procurement, change request, asset allocation, and coordination of functional silo activities to fulfill a successful completion. References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps 3 | P a g e
- 4. Skillgames (Walker Digital; Priceline and Disney Cooperative NY, NY. and Stamford, CT. 2000 - 2002 Sr. Architect, Unix System Administration Manager β’ Designed and implemented a 5x9 highly available load balanced collocated environment; including Firewall and IDS clusters, VLAN segments trunked via host and Cisco Cat OC12 bridging, various management and event notification systems, redundant multi-carrier 50 Mb internet vendor VPN MPLS, redundant multi-SAN, (Various Filesystem Formats) multi-tiered DMZ for IPlanet, Weblogic, and clustered Oracle OLTP, data mart, and SAP database repositories. Merrill Lynch New York Metropolitan Area 1999 - 2000 Consultant - Sr. Systems Administrator (CICG/Equities Core Engineering Team) β’ Built a new listed block trading web-reporting service in a productions client server environment. β’ Designed a QA lab environment for equities server consolidation with decimalization expansion. β’ Designed and Built RHEL highly available, clustered file and print server template. β’ Built Windows IE Server, app server for mainframe MUNI bond data feed analysis and scrub functions. Hollywood Stock Exchange Los Angeles, CA 1999 Consultant (Sun Professional Services) - Sr. Systems Administrator β’ Audited network and system design, with respect to Sun Solaris Enterprise systems, Sun Storage and HA clustering, correcting several system inefficiencies. AIG (SunAmerica, Inc.) NY, NY. And LA, CA 1997 - 1999 Consultant - Sr. Systems Administrator / Sr. Architect β’ Designed network and infrastructure components of SunAmericaβs Broker Dealer trading application, Vision2020. Through whiteboard engineering analysis, recommending vendor specifications and application requirements, through the development and beta-production site in New York, and final rollout and implementation of the production environment in Los Angeles. β’ Built VCS clustered Sun Oracle DBMS, dual Sun U60 SNA/X.25 gateways, DNS servers, Sendmail and ftp servers (all Sun Solaris, Veritas foundation suite and DBMS HA fail-over (VCS)), Sunscreen SPF 200 Firewalls with SSL and SKIP/VPN encry7ption. Merrill Lynch (Debt Markets) NY, NY. 1995 - 1997 Consultant - Sr. Solaris Systems Administrator SIAC (ITPN / NYSE) New York Metropolitan Area 1995 HPUX Systems Administration, Shell Scripting and Disaster Recovery implementation JP Morgan Chase (Equities Trading Floor) NY, NY. 1994 Consultant - Sr. Solaris Systems Administrator7 UBS (Associate Engineer, Systems Administrator), Equities Trading floor NY, NY. 1994 Lockheed Martin (Electrical Engineer, UNIX Systems Administrator) Denver, CO. and Orlando, FL. 1990 - 1994 Education: β’ BS Engineering, Electrical Engineering, Colorado School of Mines 1990 β’ Minor Business Economics Professional Development: β’ Project Management Fundamentals I, II, Managing Offshore Projects. β’ Certified Amazon AWS Technical. β’ Various Cloud education, 2012 Cloud Expo, Amazon 101, 2012 Amazon AWS Cloud Expo, Puppet and enStratus management, Cloud cross connecting via Equinix, SunGard and in APAC with Open Stack cloud. β’ MSDE (MS Development Environment) ~ AFS, DSDB, Janitor, Pod cells, Kerberos authentication. References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps 4 | P a g e
- 5. β’ Sybase, Informatica, RHEL Linux, Autosys, Filter, Market Data Distribution and Real-time Monitoring. β’ Merrill Lynch development SNI GTAG VCS Clustering and (Solaris, EMC and Shark) SAN fabrics. β’ SGI (level 1), Sun Microsystems (level 2) System Administration Sun Solaris Enterprise Tuning Course. β’ Solstice Sunscreen SPF200 Training and development, Neural Network Chip Development Training References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps 5 | P a g e
- 6. β’ Sybase, Informatica, RHEL Linux, Autosys, Filter, Market Data Distribution and Real-time Monitoring. β’ Merrill Lynch development SNI GTAG VCS Clustering and (Solaris, EMC and Shark) SAN fabrics. β’ SGI (level 1), Sun Microsystems (level 2) System Administration Sun Solaris Enterprise Tuning Course. β’ Solstice Sunscreen SPF200 Training and development, Neural Network Chip Development Training References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps 5 | P a g e