Engineer Management

Sooria Kumar

Home Phone: 416-***-****, Mobile Phone: 647-***-****

*** ********* ***** ********, ***********, Ontario M1V 3P3

Email Address: ***********@*****.***

Career Objective

To become a leader in the Information Security field with the emphasis of

audit and compliance.

Professional Profile

Eighteen years of experience in Information Technology with strong

Electronics and Telecommunications skills, including seven years of

experience in the audit and security field.

Functional/Systems Expertise

1. Audit, Security and Operations aspect of PKI environment

2. Software Engineering and SDLC of Client/Server Projects

3. Software/Hardware Testing and Quality Assurance experience

4. Nortel Symposium Call Centre system applications

5. Electronic Banking Systems for Scotiabank corporate customers

6. Validation Testing of Bell Canada Central Office Telecom circuits

Experience

Emergis, Corporate Information Security Office (CISO)

Security Analyst (GOL CA Compliance Analyst), July 2001 to present

Project: Government Online (GOL) Certificate Authority (CA)

o Ensure ongoing compliance of GOL CA (Secure Channel) operating

environment

o Audited Secure Channel environment build and the Root Key Generation

Ceremony (RKGC)

o Involved in the TRA activities during PWGSC/CSE Certification and

Accreditation process

o Audited the Bell PASS environment build and RKGC for WebTrust

certification

o Involved in all Secure Channel related projects such as RGBB, CRS, SEAL

(Census)

o Conducted quarterly internal CP/CPS compliance audits and prepared audit

reports

o Participated in external audits (PWGSC/TBS/CSE) and remediation of

findings

o Ensure ongoing compliance to CP/CPS and Corporate Information Security

Policies

o Monitor the environment by regular log reviews of system, application and

network and submit weekly compliance reports. Monitor critical changes

and coordinate VA scans as required

o Prepare Annual Compliance Reports (2002 to 2008) for TBCE CISO and GOC

(PWGSC/CSE)

o Possess secret level II security clearance and interested in acquiring

CISA certification

o Assisted in completing the PCI DSS SAQ for RGBB environment including the

VA scans

CGI Telecom (Bell Sygma)

IT Consultant, December 1998-2001

Projects: Bell Canada ISIT based BCCS and BDMC platforms

OI&C Testing Prime for 'eCRM Release 1' -1SS-One Stop Shopping for BCH

entities

o Test the systems developed for Siebel eCommunicator2000 Architecture

o Systems Integration of Siebel Servers, Web Servers and HP UNIX database

servers

o Tested Call Center Telephony systems and Bell's BCCS Legacy Systems

o Created Operations Test Strategy, Test Cases and performed tests

OI&C Prime for 'Customer Confirmation Letter' on BDMC platform

Department - Operations Integration and Certification

o Participated in full SDLC of CCL-BDMC and EIS Dialer Agent

o Coordinated Funding Request with various support groups and created

detailed WBS

o Coordinated TMS and EIS Dialer setup of ETM - Acceptance testing

environment

o Performed Operations/Acceptance Testing and production implementation of

CCL

o CCL was rolled out in Fall of 1999 with CSAM Release 3 of BCCS

Modernization Project

o Participated in all CCL status meetings, walk-throughs and SOAK site

support

o Tools used: CCC/Harvest-Configuration Management and Remedy/Track Record-

Problem Mgmt

OI&C Prime for newly established 'Package Distribution Management' function

o Create distribution request WFMTs for Acceptance, Soak and Production

environments

o Update and maintain the Tivoli Distribution Tables for various server

types and environments

o Coordinated Package Distribution Management events from Sanity sign-off

to Production rollout

o Maintained BCCS Release fixes applications' component packages in

appropriate state of CCC/Harvest

o Conduct walk-through of each WFMT among members of OI&C, DSM, ETM, OPs

Centre and AMS

o Coordinate distribution failure recovery and preventive maintenance

activities

o Tools used: Remedy 4.0 to create WFMTs and CCC/Harvest for Change

Management

IBM Canada

IT Specialist, February 1998 to November 1998

Project: Y2K - CIBC Wood Gundy Global Technology Division

o Provided Y2K Testing Solutions to CIBC Wood Gundy Global Technology

Division

o Created Automated Test Scripts for GLAN and GWAN Projects with the

following

o Hardware Platforms: Newbridge Multiplexers, Cisco and AT&T Routers and

Switches

o IBM Courses taken: TCP/IP Architecture and Data Communications

Environment

o Utilized Compuware's QA Run for test automation and File Aid for Data

Aging

Nortel Networks, Toronto

Verification Engineer, September 1997 to December 1997

Project: Symposium Call Center Server, Outbound Release 1

o Responsible for Integration testing the Symposium Outbound Release 1

o Setup and Maintenance of Outbound R1 lab environment, in particular the

o Versatility servers and Symposium Call Center Servers, Meridian 1 and

MLink

o Wrote Evaluation Test Plan and Test Cases. Identifying, reporting and

tracking Problems

o Dialogic CT-Connect, CTI, TAPI, Gradient DCE, ODBC, Sybase, Windows NT

Server 4.0

BMC Software, Houston, Texas

Software QA Representative, March 1997 to August 1997

o QA Testing Client/Server application for Network Products run on Netware

and Windows NT

o Design, Create and Implement measurable Test Plans ensuring that all

functions are tested

o Provide Test Results on concurrence/nonoccurrence at scheduled

checkpoints

o Develop, maintain and expand test cases for regression testing on new

product releases

o Use of Vantive Problem Tracking Software version 6.3 for problems

detected during QA testing and problems reported by customers, Provide up-

to-date testing status at Project status meetings

o Reviewed product documentation for accuracy, usability and clarity and

provided feedback

o Estimate the size and scope of testing efforts for input into product

delivery schedules

o Netware versions 3.1x and 4.1x, Windows NT versions 3.51 and 4.0, Windows

95

o Visual C++ version 4.2, PVCS version 5.2, Lotus ccmail version 2.21 etc.

Bank of Nova Scotia, Toronto

Acceptance Test Analyst, May 1996 to March 1997

o Testing Client/Sever External Access Software for Corporate Cash

Management

o Project co-ordination, Designing Test Functions/Cases and Problem

Management

o Visual Basic 4.0, MS Access 2.0, AIX Informix, ISQL, COBOL, MVS/IMS/DB2

etc.

o Use of PC X-Ware, Exceed, Trumpet WinSock, Pro-Comm, Cross-Talk etc.

MicroAge, Toronto

Senior QA Technician, Jan 1996 to April 1996

o LAN/WAN Topology, Interfaces, Protocols and Connectivity, hubs. bridges

and routers

o HW/SW installation, configuration and Network maintenance, Client/Server

OS installation

o ISDN, T1/T3, IEEE 802.x, FDDI, PCMCIA, modems, Ethernet, TokenRing,

Internet etc.

Celestica Inc. (A subsidiary of IBM Canada)

QA/Test Technician, Feb 1995 to Oct 1995

o Technical Support on SMT line, QA/Testing and troubleshooting Pentium and

other Boards

o Chip placement machine, high speed robot operation, In circuit test and

functional tests

o Implementing Data Acquisition and Control systems, SPC and ISO 9001/2

standards

Electro Arts Limited, Toronto

Test Engineer, Oct 1990 to Jan 1995

o Debugging and modifying Hardware and Software on Microprocessor

controlled complex analog

and digital circuits for Bell Canada, B.C Tel A.G.T and other major

carriers

o Testing and troubleshooting to component level on Telecommunication

circuits

o Software developing in 8031/8051 microprocessors, new code development

and translation

o Coding and testing TI320C25, ADSP2101/5 or similar DSPs

o Spice Simulation, Macro Assembler, Schematics and PCB drawings in OrCAD,

Creating parts list, Use of Terminal emulators, Communication software,

multiplexers, modems, test equipment, Synchronous/Asynchronous

communication interfaces, protocols, T-carriers

o Creating parts list, Engineering Change Requests and Assisted R&D

Engineers with problem solving

o Generating Automated test programs, test procedures and Provide

Proposals

o Design and setup Automated burning machines, perform regular software

upgrades and maintenance

o Quality aspects of design/manufacturing of Telecom equipment, QA

methodology

o Monitor engineering requirements for ISO-9002 Quality Program, Technical

documentation

o Design development and implement test strategies, test program generation

Education

o BS in Electrical Engineering, 1990, New Jersey Institute of Technology,

New Jersey, USA

Additional Training

CISA preparation course ISACA

Fundamentals of IT Auditing and Security Management ISACA

Entrust/PKI (R6.x) Management Entrust

Securing Web-Business Solutions Entrust

Siebel Management Overview CGI

Front Page 2000 Intermediate and Advanced CDI

Managing Information Technology Projects CDI

Supporting Microsoft NT 4.0 CDI

TCP/IP architecture and data communications environment IBM

Nortel Symposium Call Centre Server Administration Versatility

Inc.

Certifications

Certificate of PCI QSA - Qualified Security Assessor, PCI Security

Standards Council, March 2009

Certificate in TCP/IP, Internet Field Support Technician, Seneca College,

Toronto, 1996

Certificate in C/C++ Programming, DeVry Institute of Technology, Toronto,

1994

Technical Skills

7. PKI - Entrust Certificate Authority and Chrysalis Hardware Security

Module

8. Audit skills related to CP/CPS, ISO 17799 (27002 2005), PCI DSS

9. Programming Languages: C/C++, Assembler, Pascal, Fortran and Quick

Basic

10. Databases: MS Access, MS SQL 6.5,

11. Networking/Operating Systems: Win NT3.51/4.0, VAX/VMS, Novel 3.1x/4.1x

12. Methodologies: PMF and Concert - formerly IPMP

13. Additional Specialties: Symposium Call Centre and EIS Centennium

Dialer

Contact this candidate