Post Job Free
Sign in

Design Security

Location:
Redmond, WA
Posted:
October 02, 2012

Contact this candidate

Resume:

advanced search advertise find resume contact

search resumes, live profiles & candidates, find online candidates, telecom wireless

jobs, live jobs search engine, post telecoms jobs free

submit resume, telecom wireless jobs & careers telecom contracts, technical advice,

industry gurus wireless technology experts, socialize & have fun :)

Log In Form

I am

Candidate

Employer

My e-mail:

Help

Register with Us

Featured jobs

LTE Solutions Engineer San Diego

Implementing LTE SW solution for a next generation ASIC. Writing embedded code. BSEE or

BSCS & 5+ years experience required. C/C++ Embedded. Knowledge of LTE PHY Layer. Please

contact: aboutn@r.postjobfree.com

RF Performance Engineer

T-Mobile USA, Redmond, WA, USA

Title GS CARE- RF Performance Engineer- Redmond (1)

Redmond,

RF Board Level Engineer

Wifi and cell phone preferred. Designing and optimizing product, board level design; Must

be a strong hands on Bench person, RF Matching, Optimizing RF Circuits. For Details:

aboutn@r.postjobfree.com

Sr. Project Manager

3G Wireless Jobs, New York, USA

Develop, plan, analyze, evaluate and assign priorities to deliverab

UMTS and LTE Technicians

4G/LTE Telecom Wireless Jobs, Nationwide, USA

Candidate will be required to perform a range of act

Employers on-line (100)

Gabe Halleus

CRI Advantage, Inc.

Vivian Urtusastegui Gonzalez

Mobile Services International (MSI)

HUSEYIN Yeni

PeopleICT

Jonathan Senior

Fullerton Strategy Asia Pte Ltd

Elabram Systems

Elabram Systems Sdn Bhd

more...

Candidates on-line (1081)

Abhay Singh

WCDMA-RAN

FAZAL HUSSAIN SHANI SHANI

3G(UMTS/RNC)PROTOCOL STACK DEVOLOPER

Mohamed Shoeb

July 2012

Muhammad Hamayun khan

Wireless Engineer( Huawei 3G & NSN 2G & 3G )

Tariq A. Muhammad

4G LTE

more...

resumes by regions "

Telecom Wireless News

by categories

3G/WCDMA 4G/LTE 5G Wireless WiMAX WiFi/UMA GSM/WiDEN/Tetra FSO/Fixed Wireless

ZigBee/UWB/NFC GPS/GIS/LBS Satellite & Military Telemetry/M2M RF Wireless Technologies

Latest Telecoms News

Biggest smart phones players

What makes America Great

Apple & Samsung in Patent Issues

First Intel-branded 3G, 4G chips debut

Galaxy II supports Telecom, Vodafone's HSPA+ turbocharged 3G

Android gains on Symbian

Android outshines Apple in 4th quarter

more "

Preview Resume/CV

General

Resume/CV

Work Experience

Education & Training

Languages

Job Preferences

Resume of

Kashminder Chahil - Director

- General

Resume Keywords: architecture (network and software), management development,

implementation, training and business development, Security, Wireless

Contact Information

Please log in to see contact information!

KASHMINDER CHAHIL

(MR.)

Mail PO Box 551, South Pasadena, CA, 91031.

Mobile 1-510-***-****

Email aboutn@r.postjobfree.com

EXECUTIVE SUMMARY

* Over 15 years of experience encompassing result driven successful international

executive with unique combination of broad and deep business and technology experiences.

Proven record of turnaround and growth situations. Able to cross industries and

technologies and manage significant transformations with equal success.

* Experience technical areas architecture (network and software), management development,

implementation, training and business development. An experienced engineer with hands-on

RF/Microwave product design, development, documentation and project management with

expertise in RF Microwave High Power Amplifiers and Modules.

* Excellent skills in Security, Hardware, Wireless, Storage and SAN interconnecting

devices.

* Have managed over $50 million dollars in projects entailing from research to

implementations. Leading over 200 people in a single team. Have worked with State and

Federal governments.

* Good people motivator with the capacity to positively influence the entire

organization. Experienced in project management, matrix management, business planning and

customer relationship building and management.

* Skilled in commercializing complex and state of the art technologies and products

market and product development, new product introduction and new business development.

Experience with conduction due diligence, starting and managing international operations

including US, Europe, Asia and Australia.

* Please refer to the Addendum for summary of my skills.

* Green Card Holder (US Permanent Residency).

EXECUTIVE EXPERIENCE SUMMARY

Research and Development, System Architecture - EAI, Security Technology, Engineering

Management, Software Development, Quality Assurance, Process Automation, Product Lifecycle

Development, Start-ups, Implemented Effective Quality Management Tools, Productivity

Enhancement, Benchmarking, Strategic Analysis and Planning, Strategic Partnerships, Market

yield from $5 Million to $20 Million, M&A and Joint Ventures, Consolidations and

Rationalizations, International Experience.

PROFESSIONAL EXPERIENCE

Jan 2001 - PresentIMRIC Inc

US, Europe, Australia & Asia Based

VP of Technology and Security

Company Profile

Imric Inc (www.imric.net) is a value added network for software and hardware enterprise

integration security software company focused on improving the way business information is

accessed and used by today's leading e-Businesses. Imric Inc simplifies development and

deployment of e-Business applications within a visual, process-enabled environment, with

unified access and universal delivery wireless platform with the use of highest security

technology. Development of handhelds and RF devices for major players in the wireless

market and integration of multi-media plug-in. Design include intelligent system using

Symantic Technology for Mobile Device Discovery Technology. Created joint venture with

wireless manufactures and software OSS developers. We have worked on major federal and

corporate projects entailing new security software development.

General Responsible

Project Engineering Management

* Direct reports - technical and business Managers/Directors of 8.

* Demonstrated numerous times in prioritization, attention to detail, time management,

and commitment to quality and solution oriented service.

* Have excellent business mastery, including the ability to integrate work across

relevant areas, develop the business and services to enhance customer satisfaction and

productivity, manage risks and safety appropriately, develop and execute business plans,

manage information, and provide exceptional service to internal and external customers.

* Created and lead design efforts, tactics and strategies that impact costs. Drive costs

out of products through innovative designs.

* Establish and maintain internal design reviews and guidelines for product development

and engineering designs.

* Develop and analyze all elements related to the Document Control Process. Design and

implement process changes that address all process opportunities (e.g., CDRs PDRs

standardization of drawings, etc.).

* Establish goals, objectives, performance metrics and initiatives of the product

engineering and business department to meet corporate objectives.

* Ensure engineering projects, initiatives and processes are in conformance with the

organizations established policies and objectives.

* Closely interacts with Sales, Research and Development, Operations and Finance to

ensure manufacturability of designs.

* Work with product strategy to inform and help shape step changes in customer value.

* Coordinates activities with product engineering counterpart in company RF Systems to

ensure unified global product line design strategy and activities.

* Primary customer interface with respect to product engineering activities associated

with support of Sales, Research and Development and Operations.

* Guide and take ownership of respective engineering tasks.

* Provide support and mentoring with the continued growth of a highly skilled engineering

staff.

* Plan and allocate appropriate engineering resources for projects and provide

scheduling, man-power, asset allocation, budgets and estimates to complete ETC.

* Drive results through inspired leadership and accountability with a focused and

disciplined approach to product development consistent with best practices in the company

and the industry.

* Interface and communicate with customers to solidify a team relationship along with

resolving technical and programmatic issues.

* Establish best in class product engineering processes including documentation control,

change order control and stage gate development.

* Manage, develop and own high level technical proposals and effort estimates as the

initial piece of the overall product process

* Manage day-to-day work, as well as long-term planning of the product engineering

function into a productive, cohesive unit.

* Establish design controls for ISO and RFC standards.

* Deliver manufacturable designs to agreed specifications within time and budget

constraints.

* Foster innovative solutions that meet/exceed customer needs.

* Guide and monitor staff in implementation of project objectives and development of

technical skills and evaluate staff performances.

IT Architecture and Security

* Participated in security reviews, evaluations risk assessments along with coordinating

the communication of information security awareness.

* Emphasis on security management software/hardware architecture. Develop up-front

eBusiness Wireless Product Architecture and Design. Full Life Cycle engagement.

* Application architecture enterprise storage/SAN architecture security architecture

enterprise system management architecture middleware architecture consolidation experience

(applications, servers, data, storage, infrastructure, network).

* Virtual infrastructure implementation with Cloud Computing with scalability options.

* VOIP design and delivery experience along with a background in Network Architecture and

Design, Wireless Mobility and experience implementing RFID. Security platform development

with encryption protocols for hard-wired network and Wireless (802.11 and 802.16).

* Designed, implemented, and secured multiple wireless networks using products from

Cisco, Sonicwall, Checkpoint and Symantec. Maintained a secure networking environment

using IDS (intrusion detection systems), PKI, VPN, firewalls, and encrypted communication

of 802.1x (AES, EAP-TLS, TKIP, PEAP and MSCHAPv2).

* Provided expertise and input on emerging technologies, issues, and direction so that

the appropriate and effective security solutions could be developed. Translate the company

eBusiness Strategy into technical requirements.

* Responsible for designing, implementing and troubleshooting OC3, DS3, DS1 connectivity

issues. Handling data network issues in and around sites and providing solutions.

Responsible for creating implementation plans for the provisioning of T1/E1 circuits for

data networks.

* Working with Cisco Core 7206, Distribution 3620, 3640 and Access Routers 2501, 2620 and

working with Cisco Catalyst 6506, 3700 & 2900 series Switches. Configuring Static, RIP v1

& v2, IGRP, EIGRP, OSPF and BGP Routing Protocols.

* Configuration and troubleshooting complex Routing Protocols (EIGRP, OSPF, IS-IS, BGP).

* OSPF Expertise with the operation of scalable routing protocol OSPF and the related

issues of Route Summarization, Aggregation and Redistribution. Design and administer

growing Internet work using feasible route and define alternate path for bandwidth

optimization.

* BGP Support and resolve connectivity, redundancy and load-sharing issues on the Cisco

Routers using the BGP4 protocol for multi-homed clients using route-maps and various other

attributes.

* Configure VLANs on a switch for inter-VLAN communication. Configure VLAN Trunking

Protocol (VTP) on Core Switches. Configure various LAN switches such as CISCO CAT 2900,

3550, 4000 switches for STP, VTP Domain, VLAN, Trunking, Fast Ether Channel configuration.

* Designed and Configuring the WAN infrastructure consisting of dedicated Internet

connectivity 1.54 MB multiple offices, Cisco 2600 series router, Cisco 2900xl, Cisco 3500, Switches, PIX firewalls, VPN 3000 Concentrator. Configured PIX-TO-PIX VPN access.

* Documented the design, implementation and troubleshooting procedures. Responsible for

creating and updating the network design using Visio.

* Microsoft Windows Active Directory Installation and configuring, Administering,

Managing Domains, Trees and Forests. Configuration of sites and Managing replication.

Implementing and OU Structure. Administrating User Accounts, Groups, Active Directory

Objects, Group Policy and Security.

* Microsoft DNS Configuring DNS servers and clients, configuring DNS infrastructure,

configuring DHCP, routing with Windows Servers, Managing Remote Access and managing

Network Security. WINs integration.

* Designed, acquired and deployed a corporate VMWare ESX Server infrastructure with

capacity for 150 servers across 3 separate environments.

* IT Compliance - SOX, GLBA, HIPPA and PCI. Information Security Management System (ISMS)

based upon ISO/IEC 27001, ISO/IEC 27002 and ISO/IEC 27005.

Architecture and Security for EAI and SOA

* Create a distributed system consists of diverse, discrete software agents that work

together to perform the required tasks.

* Concepts - Utilize Message Oriented Model, Service Oriented Model (SOM), Policy Model

and Resource Oriented Model.

* Technology SOA knowledge (XML, SOAP and WSDL)

1. Logical view Is an abstracted, logical view of actual programs, databases, business

processes, etc., defined in terms of what it does, typically carrying out a business-level

operation.

2. Message orientation Defined in terms of the messages exchanged between provider agents

and requester agents, and not the properties of the agents themselves. The internal

structure of an agent, including features such as its implementation language, process

structure and even database structure.

3. Description orientation A service is described by machine-processable meta data. The

semantics of a service should be documented, either directly or indirectly, by its

description.

4. Granularity Services tend to use a small number of operations with relatively large

and complex messages.

5. Network orientation Services tend to be oriented toward use over a network.

6. Platform neutral Messages are sent in a platform-neutral, standardized format

delivered through the interfaces. XML is the most obvious format that meets this

constraint.

* Web Services Security (WSSE)

1. to secure Web services, a range of XML-based security mechanisms are needed to solve

problems related to authentication, role-based access control, distributed security policy

enforcement, message layer security that accommodate the presence of intermediaries.

2. Network level security mechanisms such as Transport Layer Security (SSL/TLS), Virtual

Private Networks (VPNs), IPSec (Internet Protocol Security) and Secure Multipurpose

Internet Mail Exchange (S/MIME) are point-to-point technologies. Threats include - Message

Alteration, Confidentiality, Man-in-the-middle, Spoofing, Denial of Service, Replay

Attacks.

* Security consideration of Architecture - Cross-Domain Identities, Distributed Policies,

Trust Policies, Secure Discovery Mechanism, Trust and Discovery and Secure Messaging

*. Provided expertise and input on emerging technologies, issues, and direction so that

the appropriate and effective security solutions could be developed. Translate the company

eBusiness Strategy into technical requirements.

High Level Software Development

* Product security development for clients. Well versed in design principles,

architecture and Web Server technologies. Functional design with clients.

* Built the JWirelessAuditor product suite from concept to general release (2.0 - 4.2

versions).

* JWirelessAuditor established Engineering Technology of America and Imric Inc as the

leader in the Universal Delivery Wireless Platform and real-time communication category

and is deployed at over 25 enterprise-class companies over a four-year period.

* Built the WirelessGuardian product suite from concept to general release (2.0 - 4.2

versions).

* Built the AWS product suite from concept to general release (2.0 - 4.0 versions).

* Establishment and integration of an off shore development organization of 60 employees.

* Programming GIS components and packages (Macro / Java / C / C++ / Visual Basic).

* Math and statistical analysis of mapping programs and connectivity development (Google

Earth)

* Relational Database Management System for Servers and programs

Quality Assurance

* Support the telecommunications requirements of subordinate units and apply engineering

principles to investigate, analyze, plan, design, develop, implement, test or evaluate

computers and telecommunications systems.

* Voice over Internet Protocol (VoIP) and Protocol Analysis enhancements and

improvements.

* Created Request for Information (RFI) and Request for Proposal (RFP) to technology

providers to maintain service assurance (SA), service level agreements (SLA) and network

data transport quality.

* Performed test engineering incorporates auditing and developing additional systems

integration test cases and suites for Ethernet, L2 & L3 via various TCP/IP stack

protocols, using Spread Spectrum Frequency Hopping.

* Serve as a single point of contact to R&D project teams for testing and defect

information - expected behavior, anticipated errors, stress test, requirements, design,

coding, testing, maintenance and writing the user documentation, and aims on improving

processes and practices.

Project Client Base

Applied Materials, Autodesk, CNET, Boeing, Barpoint, Evolve, Hyperion, iGo, Ingram Micro,

KPMG, LSSi, Office Depot, Sun Microsystems, WAMU, Wyndham, Xircom, Hyperion, Inktomi, i2,

Cap Gemini Ernest and Young, PricewaterhouseCoopers, Vettro, Sprint, ATG, BEA,

Broadvision, Cisco, E.piphany, iPlanet, Openwave Systems (phone.com), Oracle, PeopleSoft,

Tibco, Telefonica, RIM, Lucent Technologies, Brocade Communications, McData Corporation,

Network Appliance, Exodus Communications, Network General, Optimal Networks, Ascend

Communications, Hewlett-Packard, Cisco Systems, Dell, IBM.

Vendors

3Com, Airspan, Airmesh, Alvarion, Aperto Networks, ArrayComm, BelAir Networks, Cambridge

Broadband, Cisco Wireless, Juniper, L3 Communications, Mesh Dynamics, Mesh Networks,

Motorola Canopy, NasWireless, Navini Networks, Redline Communications, Proxim, Sky Pilot,

SOMA Networks, Solectek, Trango Wireless, TowerStream, Tropos

Chip Set Suppliers

Cymil Communications, Fujitsu, Intel, Sequans.

Wireless Operating Support System (OSS) / Business Support System (BSS) Software

Pronto Network, AceComm, Evolving Systems, Sonic Software, CMG Wireless, Inovaware,

Softrax.

Carriers

AT&T Wireless, Cingular, Verizon, Malaysian Telecoms, Singaporean Telecoms, Australian

Telecoms, British Telecoms.

Presentation and Lectures

* I participate in lectures in the area of covering topics such as Computer Crime

Investigation, Computer Theft Prevention and Computer Espionage.

* Also present lectures in the area of Architectural design for security in Fortune 500

companies.

* http//www.imric.net/website/wifi/lectures.html

* http//www.imric.net/website/wifi/notes.html

PROJECTS

Palo Verde Power Plant (Arizona)

# Wireless camera and access points (WiFi 802.11 and WiMax 802.16) for indoor and outdoor

installation and Motorola handheld radio at 700 MHz. Mesh Network design. Security

infrastructure design. Budget of $8 million for architectural and design of new wireless

network systems. Managed over 20 people. Project Delivery (Cisco, Aruba Networks and

Motorola Architecture)

1. Enterprise Campus Architecture, Network security segmentation and implementation.

2. Network Virtualization Technology, Virtual Private Network (VPN) design and two factor

authentication, Virtual Local Area Network (VLAN) design, Point to Point Protocols (PPP),

Frame Relay design and encapsulation, Spanning-Tree Protocol (STP), Mutilayer Switching

(MLS), Device certification and authentication, Layer 3 traffic management, multicasting.

HDLC encapsulation, Access Control List (ACL), DHCP Switch Servers, Network Address

Translation (NAT), Inter-VLAN routing, VLAN Trucking Protocol (VTP), Routing Information

Protocol (RIP), Classless Inter-Domain Routing (CIDR), Variable Length Subnet Masking

(VLSM), Enhanced Interior Gateway Protocol (EIGRP), Open Shortest Path Protocol (OSPF) and

Intermediate System to Intermediate System Protocol (IS-IS).

Sempra Energy (San Diego)

Indoor wireless (802.11) installation. Security infrastructure design.

Flour-Ameco Power Plant (Texas)

Access points installation. Mesh network design. Budget of $150,000 for architectural and

design of new network systems. Venetian Resort (Las Vegas) Access point installation.

Handheld gaming architectural and design. Security infrastructure design. Budget of $3

million for architectural and design of new network systems

Venetian Resort (Las Vegas)

Access point installation. Handheld gaming architectural and design. Security

infrastructure design. Budget of $3 million for architectural and design of new network

systems

NASA (Los Angeles)

Time duration of 2 years. Details of project is classified Budget of $15 million for

architectural and design of new network systems. Managed over 50 people.

City of Hope Hospital (Los Angeles)

Time duration of 4 months. Budget of $500,000 for architectural and design of new network

systems Aruba indoor wireless (802.11) installation. systems Aruba indoor wireless

(802.11) installation and Cisco equipment upgrade. Managed over 15 people. Project

Delivery (Cisco and Aruba Architecture)

1. Large scale design and implementation

2. 3 million dollar of Cisco equipment installation

3. $500,000 of Aruba equipment installation.

4. Enterprise Campus Architecture, Network security segmentation and implementation.

5. HIPPA software installation and delivery system for campus wide.

6. Network Virtualization Technology, Virtual Private Network (VPN) design and two factor

authentication, Virtual Local Area Network (VLAN) design, Point to Point Protocols (PPP),

Frame Relay design and encapsulation, Spanning-Tree Protocol (STP), Mutilayer Switching

(MLS), Device certification and authentication, Layer 3 traffic management, multicasting.

HDLC encapsulation, Access Control List (ACL), DHCP Switch Servers, Network Address

Translation (NAT), Inter-VLAN routing, VLAN Trucking Protocol (VTP), Routing Information

Protocol (RIP), Classless Inter-Domain Routing (CIDR), Variable Length Subnet Masking

(VLSM), Enhanced Interior Gateway Protocol (EIGRP), Open Shortest Path Protocol (OSPF) and

Intermediate System to Intermediate System Protocol (IS-IS).

Christie Digital (San Diego)

Time duration of 4 months. Budget of $400,000 for architectural and design of new network

systems Aruba indoor wireless (802.11) installation. Total sales for project $1.2 million.

Managed over 5 people.

Los Angeles County (Business Automation Plan BAP)

Cost at $4 million. Time duration of 2 years. The purpose of the BAP is to provide the

information necessary to identify the departmental business needs, understand the

justification and priority of the IT projects, confirm departmental awareness, capability,

and commitment to I/T projects, assess alignment with countywide strategic direction and

standards, and facilitate interdepartmental coordination and collaboration. The BAP

provides a map to departments' management and staff, and shows the Board of Supervisors,

the CAO, and CIO how funds will be expended. Managed over 30 people.

City of Cerritos

Cost of project at $3 million. Created similar project with governments of Malaysia,

Singapore and Australia. Time duration of one year. Network layout architecture for Canopy

(backend), nodes (Wi-Fi transmitters, gateways and switches), client hardware and Network

Operational Centre (NOC). Turnkey communications site and systems planning. Tower design,

construction and erection Rooftop and tower wireless systems installs, modifications and

maintenance Broadband wireless systems engineering, design and testing. Backup power

systems design and installations (Power generation and uninterruptible power sources).

Wireless path studies (bridging, Point to Multi-point, Wi-Fi) 24/7 emergency restorations

http//www.imric.net/website/wifi/videos.html. Similar projects are now being established

in Philadelphia and Kansas City.

Office of Emergency Management

The Office of Emergency Management (OEM) was established by Chapter 2.68 of the County

Code with responsibility for organizing and directing the preparedness efforts of the

Emergency Management Organization of Los Angeles County. Project base was $8 million per

state. Deployed infrastructure to 5 different states($40 million total budget. Managed

over 70 - 100 people.

The current project at the Office of Emergency Management (OEM) is a joint project

between Los Angeles County, FBI, NSA and Homeland Security (Terrorism Early Warning Group -

TEW).

Responsibilities

Project Management (over 3.5 years of project schedule)

* Serve as Systems Architect for Emergency Management Information System (EMIS) future

project, current EMIS rewrite project and all other OEM web-based applications to ensure

they conform to development standards and are delivered on time and on budget.

* Coordinate with the various cities, county, state, federal and private agencies during

the execution of the projects.

* Coordinate with the County Chief Information Office (CIO) to identify the requirements

and processes for new systems and to develop and design a high-level system design to

conform to all other applicable County IT standards.

* Lead OEM IT staff in all phases of analysis and development of new applications.

* Lead OEM IT staff in maintenance of existing applications. Lead the evaluation and

integration of a business intelligence solution into the current and future versions of

EMIS. Integrate GIS functionality into the current and future versions of EMIS.

* Develop comprehensive documentation of the existing applications where needed and for

all new enhancements and new application(s).

* Prepare test plans and create actual test cases.

* Act as a consultant to OEM IT Team members on all programming activities and to train

members effectively to prepare them to take over the maintenance of the system by the end

of the term of this work order.

* Supervise the Product Development teams and monitor progress against development

schedules.

* Establish guidelines for hardware and software designs to ensure quality

manufacturability desig.

* Supervise the Technical Support teams and monitor performance against support metrics.

* Lead technical and business Managers of 4 - direct reports (sub lead 100 people).

IT (Security and Infrastructure)

* Develop processes, procedures and methodologies for its various integrated IT Solutions

deliverables and products.

* Created complete infrastructure architecture for the OEM department. Information

Systems Security Planning and Management, Risk Management of Information Systems,

Contingency Planning, Systems Integration, Internet / Intranet Planning, Technical

Support, Training and Help Desk process development.

* Troubleshoot and resolve network-related issues set up new user accounts and maintain

authorizations, priorities, and privileges, configure network connectivity and desktop

applications, provide customer service to internal users.

* LAN backbone management including Active Directory, TCP/IP, DNS, DHCP and firewall,

router administration, Microsoft ISA Server and web server load balancing and clustering

with switches.

* Created offsite backup system in Denver. Network security administration. Software

backup and recovery.

* Created satellite system for onboard vehicle systems in an emergency.

* System performance monitoring to ensure proper and efficient use of system resources

Upgrade/migrate the systems from Windows (Exchange, AD, IIS, SQL) 2000 to (Exchange, AD,

IIS, SQL) 2003 Federation R2.

* Presented organized plans for resolution of identified issues (in Visio and PowerPoint)

Considerable knowledge of the operation and maintenance of computer peripherals and

graphic output and input devices associated with GIS function.

* Knowledge of cartography and porting data to the ESRI GIS environment.

* Design and manage databases and system communications in a multi-user or computer

network environment.

* Train technical and professional staff in GIS concepts, data collection and

applications. Prepare and maintain system documentation.

* Deployed Convergence Technology (Data, Video and Voice) utilizing Quadruple Play.

* Set up Emergency Satellite Communications System (ESCN) at the cost of $3 million.

Designed to provide secure communications between all ESCN sites

- 92 LA County Cities & DMAC sites

- 10 LA County Department sites

- 24 Sheriff Stations

- 8 Department of Health Service sites

- 1 OES site

- 1 Red Cross site

- 1 Mobile AEOC site

* Design and architect Motorola Point to Point and various Wireless Mesh systems for the

project.

High Level Software Development

* Well versed in design principles, architecture and Web Server technologies.

* Developing network scripts to automate numerous functions.

* Programming GIS components and packages (Macro / Java / C / C++ / Visual Basic) Math

and statistical analysis of mapping programs and connectivity development (Google Earth)

* Relational Database Management System for Servers and programs

* GIS application integration - ArcView, ArcInfo, ArcIMS and Python software

Software Testing

* Worked with product engineers and other team members on finding solutions to resolve

software problems.

* Created test cases, performed functionality

Employer:

Imric Inc

Job Title: Director of Technology and Security

Start Month/Year: 01/2001

End Month/Year: Current

City: Pasadena

Country: USA

Description: Company Profile

Imric Inc (www.imric.net) is a value added network for software and hardware enterprise

integration security software company focused on improving the way business information is

accessed and used by today's leading e-Businesses. Imric Inc simplifies development and

deployment of e-Business applications within a visual, process-enabled environment, with

unified access and universal delivery wireless platform with the use of highest security

technology. Development of handhelds and RF devices for major players in the wireless

market and integration of multi-media plug-in. Design include intelligent system using

Symantic Technology for Mobile Device Discovery Technology. Created joint venture with

wireless manufactures and software OSS developers. We have worked on major federal and

corporate projects entailing new security software development.

General Responsible

Project Engineering Management

* Direct reports - technical and business Managers/Directors of 8.

* Demonstrated numerous times in prioritization, attention to detail, time management,

and commitment to quality and solution oriented service.

* Have excellent business mastery, including the ability to integrate work across

relevant areas, develop the business and services to enhance customer satisfaction and

productivity, manage risks and safety appropriately, develop and execute business plans,

manage information, and provide exceptional service to internal and external customers.

* Created and lead design efforts, tactics and strategies that impact costs. Drive costs

out of products through innovative designs.

* Establish and maintain internal design reviews and guidelines for product development

and engineering designs.

* Develop and analyze all elements related to the Document Control Process. Design and

implement process changes that address all process opportunities (e.g., CDR s; PDR s

standardization of drawings, etc.).

* Establish goals, objectives, performance metrics and initiatives of the product

engineering and business department to meet corporate objectives.

* Ensure engineering projects, initiatives and processes are in conformance with the

organizations established policies and objectives.

* Closely interacts with Sales, Research and Development, Operations and Finance to

ensure manufacturability of designs.

* Work with product strategy to inform and help shape step changes in customer value.

* Coordinates activities with product engineering counterpart in company RF Systems to

ensure unified global product line design strategy and activities.

* Primary customer interface with respect to product engineering activities associated

with support of Sales, Research and Development and Operations.

* Guide and take ownership of respective engineering tasks.

* Provide support and mentoring with the continued growth of a highly skilled engineering

staff.

* Plan and allocate appropriate engineering resources for projects and provide

scheduling, man-power, asset allocation, budgets and estimates to complete [ETC].

* Drive results through inspired leadership and accountability with a focused and

disciplined approach to product development consistent with best practices in the company

and the industry.

* Interface and communicate with customers to solidify a team relationship along with

resolving technical and programmatic issues.

* Establish best in class product engineering processes including documentation control,

change order control and stage gate development.

* Manage, develop and own high level technical proposals and effort estimates as the

initial piece of the overall product process

* Manage day-to-day work, as well as long-term planning of the product engineering

function into a productive, cohesive unit.

* Establish design controls for ISO and RFC standards.

* Deliver manufacturable designs to agreed specifications within time and budget

constraints.

* Foster innovative solutions that meet/exceed customer needs.

* Guide and monitor staff in implementation of project objectives and development of

technical skills and evaluate staff performances.

IT Architecture and Security

* Participated in security reviews, evaluations risk assessments along with coordinating

the communication of information security awareness.

* Emphasis on security management software/hardware architecture. Develop up-front

eBusiness Wireless Product Architecture and Design. Full Life Cycle engagement.

* Application architecture; enterprise storage/SAN architecture; security architecture;

enterprise system management architecture; middleware architecture; consolidation

experience (applications, servers, data, storage, infrastructure, network).

* Virtual infrastructure implementation with Cloud Computing with scalability options.

* VOIP design and delivery experience along with a background in Network Architecture and

Design, Wireless Mobility and experience implementing RFID. Security platform development

with encryption protocols for hard-wired network and Wireless (802.11 and 802.16).

* Designed, implemented, and secured multiple wireless networks using products from

Cisco, Sonicwall, Checkpoint and Symantec. Maintained a secure networking environment

using IDS (intrusion detection systems), PKI, VPN, firewalls, and encrypted communication

of 802.1x (AES, EAP-TLS, TKIP, PEAP and MSCHAPv2).

* Provided expertise and input on emerging technologies, issues, and direction so that

the appropriate and effective security solutions could be developed. Translate the company

eBusiness Strategy into technical requirements.

* Responsible for designing, implementing and troubleshooting OC3, DS3, DS1 connectivity

issues. Handling data network issues in and around sites and providing solutions.

Responsible for creating implementation plans for the provisioning of T1/E1 circuits for

data networks.

* Working with Cisco Core 7206, Distribution 3620, 3640 and Access Routers 2501, 2620 and

working with Cisco Catalyst 6506, 3700 & 2900 series Switches. Configuring Static, RIP v1

& v2, IGRP, EIGRP, OSPF and BGP Routing Protocols.

* Configuration and troubleshooting complex Routing Protocols (EIGRP, OSPF, IS-IS, BGP).

* OSPF: Expertise with the operation of scalable routing protocol OSPF and the related

issues of: Route Summarization, Aggregation and Redistribution. Design and administer

growing Internet work using feasible route and define alternate path for bandwidth

optimization.

* BGP: Support and resolve connectivity, redundancy and load-sharing issues on the Cisco

Routers using the BGP4 protocol for multi-homed clients using route-maps and various other

attributes.

* Configure VLAN s on a switch for inter-VLAN communication. Configure VLAN Trunking

Protocol (VTP) on Core Switches. Configure various LAN switches such as CISCO CAT 2900,

3550, 4000 switches for STP, VTP Domain, VLAN, Trunking, Fast Ether Channel configuration.

* Designed and Configuring the WAN infrastructure consisting of dedicated Internet

connectivity 1.54 MB multiple offices, Cisco 2600 series router, Cisco 2900xl, Cisco 3500, Switches, PIX firewalls, VPN 3000 Concentrator. Configured PIX-TO-PIX VPN access.

* Documented the design, implementation and troubleshooting procedures. Responsible for

creating and updating the network design using Visio.

* Microsoft Windows Active Directory Installation and configuring, Administering,

Managing Domains, Trees and Forests. Configuration of sites and Managing replication.

Implementing and OU Structure. Administrating User Accounts, Groups, Active Directory

Objects, Group Policy and Security.

* Microsoft DNS Configuring DNS servers and clients, configuring DNS infrastructure,

configuring DHCP, routing with Windows Servers, Managing Remote Access and managing

Network Security. WINs integration.

* Designed, acquired and deployed a corporate VMWare ESX Server infrastructure with

capacity for 150 servers across 3 separate environments.

* IT Compliance - SOX, GLBA, HIPPA and PCI. Information Security Management System (ISMS)

based upon ISO/IEC 27001, ISO/IEC 27002 and ISO/IEC 27005.

Architecture and Security for EAI and SOA

* Create a distributed system consists of diverse, discrete software agents that work

together to perform the required tasks.

* Concepts - Utilize Message Oriented Model, Service Oriented Model (SOM), Policy Model

and Resource Oriented Model.

* Technology SOA knowledge (XML, SOAP and WSDL):

1. Logical view: Is an abstracted, logical view of actual programs, databases, business

processes, etc., defined in terms of what it does, typically carrying out a business-level

operation.

2. Message orientation: Defined in terms of the messages exchanged between provider

agents and requester agents, and not the properties of the agents themselves. The internal

structure of an agent, including features such as its implementation language, process

structure and even database structure.

3. Description orientation: A service is described by machine-processable meta data. The

semantics of a service should be documented, either directly or indirectly, by its

description.

4. Granularity: Services tend to use a small number of operations with relatively large

and complex messages.

5. Network orientation: Services tend to be oriented toward use over a network.

6. Platform neutral: Messages are sent in a platform-neutral, standardized format

delivered through the interfaces. XML is the most obvious format that meets this

constraint.

* Web Services Security (WSSE)

1. to secure Web services, a range of XML-based security mechanisms are needed to solve

problems related to authentication, role-based access control, distributed security policy

enforcement, message layer security that accommodate the presence of intermediaries.

2. Network level security mechanisms such as Transport Layer Security (SSL/TLS), Virtual

Private Networks (VPNs), IPSec (Internet Protocol Security) and Secure Multipurpose

Internet Mail Exchange (S/MIME) are point-to-point technologies. Threats include - Message

Alteration, Confidentiality, Man-in-the-middle, Spoofing, Denial of Service, Replay

Attacks.

* Security consideration of Architecture - Cross-Domain Identities, Distributed Policies,

Trust Policies, Secure Discovery Mechanism, Trust and Discovery and Secure Messaging

*. Provided expertise and input on emerging technologies, issues, and direction so that

the appropriate and effective security solutions could be developed. Translate the company

eBusiness Strategy into technical requirements.

High Level Software Development

* Product security development for clients. Well versed in design principles,

architecture and Web Server technologies. Functional design with clients.

* Built the JWirelessAuditor product suite from concept to general release (2.0 - 4.2

versions).

* JWirelessAuditor established Engineering Technology of America and Imric Inc as the

leader in the Universal Delivery Wireless Platform and real-time communication category

and is deployed at over 25 enterprise-class companies over a four-year period.

* Built the WirelessGuardian product suite from concept to general release (2.0 - 4.2

versions).

* Built the AWS product suite from concept to general release (2.0 - 4.0 versions).

* Establishment and integration of an off shore development organization of 60 employees.

* Programming GIS components and packages (Macro / Java / C / C++ / Visual Basic).

* Math and statistical analysis of mapping programs and connectivity development (Google

Earth)

* Relational Database Management System for Servers and programs

Quality Assurance

* Support the telecommunications requirements of subordinate units and apply engineering

principles to investigate, analyze, plan, design, develop, implement, test or evaluate

computers and telecommunications systems.

* Voice over Internet Protocol (VoIP) and Protocol Analysis enhancements and

improvements.

* Created Request for Information (RFI) and Request for Proposal (RFP) to technology

providers to maintain service assurance (SA), service level agreements (SLA) and network

data transport quality.

* Performed test engineering incorporates auditing and developing additional systems

integration test cases and suites for Ethernet, L2 & L3 via various TCP/IP stack

protocols, using Spread Spectrum Frequency Hopping.

* Serve as a single point of contact to R&D project teams for testing and defect

information - expected behavior, anticipated errors, stress test, requirements, design,

coding, testing, maintenance and writing the user documentation, and aims on improving

processes and practices.

Project Client Base

Applied Materials, Autodesk, CNET, Boeing, Barpoint, Evolve, Hyperion, iGo, Ingram Micro,

KPMG, LSSi, Office Depot, Sun Microsystems, WAMU, Wyndham, Xircom, Hyperion, Inktomi, i2,

Cap Gemini Ernest and Young, PricewaterhouseCoopers, Vettro, Sprint, ATG, BEA,

Broadvision, Cisco, E.piphany, iPlanet, Openwave Systems (phone.com), Oracle, PeopleSoft,

Tibco, Telefonica, RIM, Lucent Technologies, Brocade Communications, McData Corporation,

Network Appliance, Exodus Communications, Network General, Optimal Networks, Ascend

Communications, Hewlett-Packard, Cisco Systems, Dell, IBM.

Vendors

3Com, Airspan, Airmesh, Alvarion, Aperto Networks, ArrayComm, BelAir Networks, Cambridge

Broadband, Cisco Wireless, Juniper, L3 Communications, Mesh Dynamics, Mesh Networks,

Motorola Canopy, NasWireless, Navini Networks, Redline Communications, Proxim, Sky Pilot,

SOMA Networks, Solectek, Trango Wireless, TowerStream, Tropos

Chip Set Suppliers

Cymil Communications, Fujitsu, Intel, Sequans.

Wireless Operating Support System (OSS) / Business Support System (BSS) Software

Pronto Network, AceComm, Evolving Systems, Sonic Software, CMG Wireless, Inovaware,

Softrax.

Carriers

AT&T Wireless, Cingular, Verizon, Malaysian Telecoms, Singaporean Telecoms, Australian

Telecoms, British Telecoms.

Presentation and Lectures

* I participate in lectures in the area of covering topics such as Computer Crime

Investigation, Computer Theft Prevention and Computer Espionage.

* Also present lectures in the area of Architectural design for security in Fortune 500

companies.

* http://www.imric.net/website/wifi/lectures.html

* http://www.imric.net/website/wifi/notes.html

PROJECTS

Palo Verde Power Plant (Arizona)

# Wireless camera and access points (WiFi [802.11] and WiMax [802.16]) for indoor and

outdoor installation and Motorola handheld radio at 700 MHz. Mesh Network design. Security

infrastructure design. Budget of $8 million for architectural and design of new wireless

network systems. Managed over 20 people. Project Delivery (Cisco, Aruba Networks and

Motorola Architecture):

1. Enterprise Campus Architecture, Network security segmentation and implementation.

2. Network Virtualization Technology, Virtual Private Network (VPN) design and two factor

authentication, Virtual Local Area Network (VLAN) design, Point to Point Protocols (PPP),

Frame Relay design and encapsulation, Spanning-Tree Protocol (STP), Mutilayer Switching

(MLS), Device certification and authentication, Layer 3 traffic management, multicasting.

HDLC encapsulation, Access Control List (ACL), DHCP Switch Servers, Network Address

Translation (NAT), Inter-VLAN routing, VLAN Trucking Protocol (VTP), Routing Information

Protocol (RIP), Classless Inter-Domain Routing (CIDR), Variable Length Subnet Masking

(VLSM), Enhanced Interior Gateway Protocol (EIGRP), Open Shortest Path Protocol (OSPF) and

Intermediate System to Intermediate System Protocol (IS-IS).

Sempra Energy (San Diego)

Indoor wireless (802.11) installation. Security infrastructure design.

Flour-Ameco Power Plant (Texas)

Access points installation. Mesh network design. Budget of $150,000 for architectural and

design of new network systems. Venetian Resort (Las Vegas) Access point installation.

Handheld gaming architectural and design. Security infrastructure design. Budget of $3

million for architectural and design of new network systems

Venetian Resort (Las Vegas)

Access point installation. Handheld gaming architectural and design. Security

infrastructure design. Budget of $3 million for architectural and design of new network

systems

NASA (Los Angeles)

Time duration of 2 years. Details of project is classified Budget of $15 million for

architectural and design of new network systems. Managed over 50 people.

City of Hope Hospital (Los Angeles)

Time duration of 4 months. Budget of $500,000 for architectural and design of new network

systems Aruba indoor wireless (802.11) installation. systems Aruba indoor wireless

(802.11) installation and Cisco equipment upgrade. Managed over 15 people. Project

Delivery (Cisco and Aruba Architecture):

1. Large scale design and implementation

2. 3 million dollar of Cisco equipment installation

3. $500,000 of Aruba equipment installation.

4. Enterprise Campus Architecture, Network security segmentation and implementation.

5. HIPPA software installation and delivery system for campus wide.

6. Network Virtualization Technology, Virtual Private Network (VPN) design and two factor

authentication, Virtual Local Area Network (VLAN) design, Point to Point Protocols (PPP),

Frame Relay design and encapsulation, Spanning-Tree Protocol (STP), Mutilayer Switching

(MLS), Device certification and authentication, Layer 3 traffic management, multicasting.

HDLC encapsulation, Access Control List (ACL), DHCP Switch Servers, Network Address

Translation (NAT), Inter-VLAN routing, VLAN Trucking Protocol (VTP), Routing Information

Protocol (RIP), Classless Inter-Domain Routing (CIDR), Variable Length Subnet Masking

(VLSM), Enhanced Interior Gateway Protocol (EIGRP), Open Shortest Path Protocol (OSPF) and

Intermediate System to Intermediate System Protocol (IS-IS).

Christie Digital (San Diego)

Time duration of 4 months. Budget of $400,000 for architectural and design of new network

systems Aruba indoor wireless (802.11) installation. Total sales for project $1.2

million. Managed over 5 people.

Los Angeles County (Business Automation Plan [BAP])

Cost at $4 million. Time duration of 2 years. The purpose of the BAP is to provide the

information necessary to identify the departmental business needs, understand the

justification and priority of the IT projects, confirm departmental awareness, capability,

and commitment to I/T projects, assess alignment with countywide strategic direction and

standards, and facilitate interdepartmental coordination and collaboration. The BAP

provides a map to departments' management and staff, and shows the Board of Supervisors,

the CAO, and CIO how funds will be expended. Managed over 30 people.

City of Cerritos

Cost of project at $3 million. Created similar project with governments of Malaysia,

Singapore and Australia. Time duration of one year. Network layout architecture for Canopy

(backend), nodes (Wi-Fi transmitters, gateways and switches), client hardware and Network

Operational Centre (NOC). Turnkey communications site and systems planning. Tower design,

construction and erection Rooftop and tower wireless systems installs, modifications and

maintenance Broadband wireless systems engineering, design and testing. Backup power

systems design and installations (Power generation and uninterruptible power sources).

Wireless path studies (bridging, Point to Multi-point, Wi-Fi) 24/7 emergency restorations

http://www.imric.net/website/wifi/videos.html. Similar projects are now being established

in Philadelphia and Kansas City.

Office of Emergency Management

The Office of Emergency Management (OEM) was established by Chapter 2.68 of the County

Code with responsibility for organizing and directing the preparedness efforts of the

Emergency Management Organization of Los Angeles County. Project base was $8 million per

state. Deployed infrastructure to 5 different states($40 million total budget. Managed

over 70 - 100 people.

The current project at the Office of Emergency Management (OEM) is a joint project

between Los Angeles County, FBI, NSA and Homeland Security (Terrorism Early Warning Group -

TEW).

Responsibilities

Project Management (over 3.5 years of project schedule)

* Serve as Systems Architect for Emergency Management Information System (EMIS) future

project, current EMIS rewrite project and all other OEM web-based applications to ensure

they conform to development standards and are delivered on time and on budget.

* Coordinate with the various cities, county, state, federal and private agencies during

the execution of the projects.

* Coordinate with the County Chief Information Office (CIO) to identify the requirements

and processes for new systems and to develop and design a high-level system design to

conform to all other applicable County IT standards.

* Lead OEM IT staff in all phases of analysis and development of new applications.

* Lead OEM IT staff in maintenance of existing applications. Lead the evaluation and

integration of a business intelligence solution into the current and future versions of

EMIS. Integrate GIS functionality into the current and future versions of EMIS.

* Develop comprehensive documentation of the existing applications where needed and for

all new enhancements and new application(s).

* Prepare test plans and create actual test cases.

* Act as a consultant to OEM IT Team members on all programming activities and to train

members effectively to prepare them to take over the maintenance of the system by the end

of the term of this work order.

* Supervise the Product Development teams and monitor progress against development

schedules.

* Establish guidelines for hardware and software designs to ensure quality

manufacturability desig.

* Supervise the Technical Support teams and monitor performance against support metrics.

* Lead technical and business Managers of 4 - direct reports (sub lead 100 people).

IT (Security and Infrastructure)

* Develop processes, procedures and methodologies for its various integrated IT Solutions

deliverables and products.

* Created complete infrastructure architecture for the OEM department. Information

Systems Security Planning and Management, Risk Management of Information Systems,

Contingency Planning, Systems Integration, Internet / Intranet Planning, Technical

Support, Training and Help Desk process development.

* Troubleshoot and resolve network-related issues set up new user accounts and maintain

authorizations, priorities, and privileges, configure network connectivity and desktop

applications, provide customer service to internal users.

* LAN backbone management including Active Directory, TCP/IP, DNS, DHCP and firewall,

router administration, Microsoft ISA Server and web server load balancing and clustering

with switches.

* Created offsite backup system in Denver. Network security administration. Software

backup and recovery.

* Created satellite system for onboard vehicle systems in an emergency.

* System performance monitoring to ensure proper and efficient use of system resources

Upgrade/migrate the systems from Windows (Exchange, AD, IIS, SQL) 2000 to (Exchange, AD,

IIS, SQL) 2003 Federation R2.

* Presented organized plans for resolution of identified issues (in Visio and PowerPoint)

Considerable knowledge of the operation and maintenance of computer peripherals and

graphic output and input devices associated with GIS function.

* Knowledge of cartography and porting data to the ESRI GIS environment.

* Design and manage databases and system communications in a multi-user or computer

network environment.

* Train technical and professional staff in GIS concepts, data collection and

applications. Prepare and maintain system documentation.

* Deployed Convergence Technology (Data, Video and Voice) utilizing Quadruple Play.

* Set up Emergency Satellite Communications System (ESCN) at the cost of $3 million.

Designed to provide secure communications between all ESCN sites:

- 92 LA County Cities & DMAC sites

- 10 LA County Department sites

- 24 Sheriff Stations

- 8 Department of Health Service sites

- 1 OES site

- 1 Red Cross site

- 1 Mobile AEOC site

* Design and architect Motorola Point to Point and



Contact this candidate